last executing test programs: 9.474136733s ago: executing program 3 (id=1431): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) syz_init_net_socket$ax25(0x3, 0x2, 0xce) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) 8.858499092s ago: executing program 1 (id=1436): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 8.711968954s ago: executing program 1 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), 0x0, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r2, &(0x7f0000000400), 0x20000000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e20, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 7.705244119s ago: executing program 1 (id=1439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = io_uring_setup(0x10d7, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000003580)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, [{0x2, 0x3, "21c1e05659ae3f48e9296b2beda7add700385601f891"}]}}}}}}, 0x0) 7.685432689s ago: executing program 3 (id=1440): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 6.736175723s ago: executing program 1 (id=1442): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 6.014438353s ago: executing program 3 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44890) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fdffffff0a010101000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) bind$netrom(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000ffdbdf2544000000080003", @ANYRES32=r7, @ANYBLOB="0a001800030303030303000008000c"], 0x30}, 0x1, 0x0, 0x0, 0x406c805}, 0x80) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000003c0), 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x90}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r8, &(0x7f0000000040), 0x2) close(r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x6c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x9004, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c020b8affda7d3c8f1cd9f8f44353798a0000a79507470bf80d017c03662a3262cadb1e69e980c07928a1c0087afac1fb8ae48dcb837e127bdc3ef24142bf7df98555ac8c9e534f9f9dce96d02d65d4e92853b9a5b4bcf221307169b7c7141e648183da71222fe1886965fb4fba3d7733ab28fb3a2bf49c54e231ee5b9b4cf78c90d5d74d2a6c342b0e4a92de8a35dc64ac54cfcc8455dfc23322910645fcadde613c79843beb747f530946ef2ac5a54dbc5045b1667a7d5c277bbdc51d2f06fc13b27018fc419ca74b1c2d0a6a9cb3761792be75d5052e79ca67", @ANYRES16=r10, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 5.624088859s ago: executing program 3 (id=1448): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0, 0x9}) 4.709335312s ago: executing program 0 (id=1451): r0 = socket$inet6(0xa, 0x2, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e8100220086dd6d0000000008110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e0b"], 0x42) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty=0x3a26}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2c}}]}, 0x20}, 0x8, 0x3000000000002}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xd}, &(0x7f0000000140)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000580)={r6, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}}, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r8, @ANYBLOB], 0x2c}}, 0x80) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x5452, &(0x7f0000000240)) 4.666870993s ago: executing program 2 (id=1452): socket(0x22, 0x2, 0x2) socket(0x22, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) getsockopt(r0, 0x10000, 0x7, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002080)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000600)) bind$bt_hci(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x2a, 0x7}}}}]}, 0x44}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.071575971s ago: executing program 3 (id=1453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getitimer(0x0, 0x0) 3.636881908s ago: executing program 3 (id=1455): r0 = socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4004) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r4 = gettid() write$sysctl(0xffffffffffffffff, 0x0, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, 0x0, 0x38, 0x0, @val=@iter={0x0}}, 0x20) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000002) write$binfmt_register(r5, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x24f3, 0x3a, ']\x01{:\xb6%*{!+', 0x3a, 'syz1\xc9\x84\xc6>C\x04\xdaG3\x13\x9f\xb9\xe6e\xc8\x03-r\x80nw\x06\xa0U:\x94', 0x3a, './file0'}, 0x4f) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000080)) read$FUSE(r3, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 3.531744009s ago: executing program 2 (id=1456): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2abd708002dcdf2500000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) iopl(0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000600)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[], 0xfce1) 3.294054453s ago: executing program 4 (id=1458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44890) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fdffffff0a010101000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) bind$netrom(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000ffdbdf2544000000080003", @ANYRES32=r7, @ANYBLOB="0a001800030303030303000008000c"], 0x30}, 0x1, 0x0, 0x0, 0x406c805}, 0x80) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000003c0), 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x90}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r8, &(0x7f0000000040), 0x2) close(r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x6c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x9004, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c020b8affda7d3c8f1cd9f8f44353798a0000a79507470bf80d017c03662a3262cadb1e69e980c07928a1c0087afac1fb8ae48dcb837e127bdc3ef24142bf7df98555ac8c9e534f9f9dce96d02d65d4e92853b9a5b4bcf221307169b7c7141e648183da71222fe1886965fb4fba3d7733ab28fb3a2bf49c54e231ee5b9b4cf78c90d5d74d2a6c342b0e4a92de8a35dc64ac54cfcc8455dfc23322910645fcadde613c79843beb747f530946ef2ac5a54dbc5045b1667a7d5c277bbdc51d2f06fc13b27018fc419ca74b1c2d0a6a9cb3761792be75d5052e79ca67", @ANYRES16=r10, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 2.506968694s ago: executing program 2 (id=1459): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.506099834s ago: executing program 4 (id=1460): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c00028006000e0002000000060010004e20000008000700ac14142808000a00", @ANYRES32=r3], 0x54}}, 0x0) 2.447634175s ago: executing program 0 (id=1461): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40), 0x0, 0x8010) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x7, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x404, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.214242849s ago: executing program 4 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, &(0x7f00000000c0)={[{@name={'name', 0x3d, '+$!&%]-[('}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000000002) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffbfffc0) 1.971731072s ago: executing program 2 (id=1463): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000180)=@get={0x1, 0x0, 0x9}) 1.960528602s ago: executing program 4 (id=1464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) connect$inet(r6, &(0x7f0000000300)={0x2, 0x4e20, @remote}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 1.434132709s ago: executing program 0 (id=1465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) getitimer(0x0, 0x0) 1.172813723s ago: executing program 0 (id=1466): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) 1.076373575s ago: executing program 4 (id=1467): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 1.075531015s ago: executing program 1 (id=1468): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 967.179556ms ago: executing program 2 (id=1469): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2abd708002dcdf2500000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) iopl(0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000600)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000003c0)=0xc446806) write$binfmt_aout(r3, &(0x7f0000000280)=ANY=[], 0xfce1) 811.478508ms ago: executing program 0 (id=1470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r3, @ANYBLOB="24002d80050004000100000008000300040000000500010004000000080002"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) 799.566579ms ago: executing program 4 (id=1471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44890) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fdffffff0a010101000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) bind$netrom(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000ffdbdf2544000000080003", @ANYRES32=r7, @ANYBLOB="0a001800030303030303000008000c"], 0x30}, 0x1, 0x0, 0x0, 0x406c805}, 0x80) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000003c0), 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x90}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r8, &(0x7f0000000040), 0x2) close(r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x6c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x9004, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x851}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c020b8affda7d3c8f1cd9f8f44353798a0000a79507470bf80d017c03662a3262cadb1e69e980c07928a1c0087afac1fb8ae48dcb837e127bdc3ef24142bf7df98555ac8c9e534f9f9dce96d02d65d4e92853b9a5b4bcf221307169b7c7141e648183da71222fe1886965fb4fba3d7733ab28fb3a2bf49c54e231ee5b9b4cf78c90d5d74d2a6c342b0e4a92de8a35dc64ac54cfcc8455dfc23322910645fcadde613c79843beb747f530946ef2ac5a54dbc5045b1667a7d5c277bbdc51d2f06fc13b27018fc419ca74b1c2d0a6a9cb3761792be75d5052e79ca67", @ANYRES16=r10, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 140.779808ms ago: executing program 2 (id=1472): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) syz_init_net_socket$ax25(0x3, 0x2, 0xce) connect$rose(r2, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) 106.684649ms ago: executing program 1 (id=1473): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 0 (id=1474): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, &(0x7f00000000c0)={[{@name={'name', 0x3d, '+$!&%]-[('}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x8002) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000000002) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffbfffc0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. syzkaller login: [ 65.361164][ T4239] cgroup: Unknown subsys name 'net' [ 65.491198][ T4239] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.984006][ T4239] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.461215][ T4264] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.462715][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.469560][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.477578][ T4265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.485836][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.491669][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.504612][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.504906][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.512719][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.520004][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.526767][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.534682][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.541489][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.548551][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.554992][ T4265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.570470][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.570547][ T4264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.578636][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.585397][ T4264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.593844][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.599115][ T4264] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.606902][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.613744][ T4264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.620790][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.627362][ T4264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.634286][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.641147][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.651686][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.662100][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.689890][ T4261] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.066838][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 69.102275][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 69.214152][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 69.300299][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 69.326349][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 69.366262][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.373754][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.382534][ T4260] device bridge_slave_0 entered promiscuous mode [ 69.397155][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.404493][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.412314][ T4260] device bridge_slave_1 entered promiscuous mode [ 69.420078][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.427287][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.435447][ T4250] device bridge_slave_0 entered promiscuous mode [ 69.476848][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.483961][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.492440][ T4250] device bridge_slave_1 entered promiscuous mode [ 69.539970][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.547217][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.555730][ T4252] device bridge_slave_0 entered promiscuous mode [ 69.565264][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.590969][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.598661][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.606703][ T4252] device bridge_slave_1 entered promiscuous mode [ 69.616082][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.631690][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.673990][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.736777][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.748743][ T4260] team0: Port device team_slave_0 added [ 69.755701][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.762827][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.770980][ T4251] device bridge_slave_0 entered promiscuous mode [ 69.786339][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.793450][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.801883][ T4256] device bridge_slave_0 entered promiscuous mode [ 69.811219][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.829905][ T4260] team0: Port device team_slave_1 added [ 69.836227][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.843315][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.851757][ T4251] device bridge_slave_1 entered promiscuous mode [ 69.862051][ T4250] team0: Port device team_slave_0 added [ 69.868485][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.875758][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.883582][ T4256] device bridge_slave_1 entered promiscuous mode [ 69.914865][ T4250] team0: Port device team_slave_1 added [ 69.939633][ T4252] team0: Port device team_slave_0 added [ 69.962488][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.981430][ T4252] team0: Port device team_slave_1 added [ 69.988038][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.995561][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.021674][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.042325][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.053547][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.071572][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.078750][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.105165][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.116894][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.123863][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.150557][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.172396][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.203635][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.210870][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.237106][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.271361][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.278455][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.305061][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.318014][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.325308][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.351652][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.375531][ T4251] team0: Port device team_slave_0 added [ 70.394555][ T4256] team0: Port device team_slave_0 added [ 70.412466][ T4251] team0: Port device team_slave_1 added [ 70.420138][ T4256] team0: Port device team_slave_1 added [ 70.485239][ T4252] device hsr_slave_0 entered promiscuous mode [ 70.493605][ T4252] device hsr_slave_1 entered promiscuous mode [ 70.518410][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.525588][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.551944][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.566535][ T4260] device hsr_slave_0 entered promiscuous mode [ 70.573364][ T4260] device hsr_slave_1 entered promiscuous mode [ 70.580360][ T4260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.588349][ T4260] Cannot create hsr debugfs directory [ 70.604235][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.611210][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.637464][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.650246][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.657466][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.683767][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.700389][ T4250] device hsr_slave_0 entered promiscuous mode [ 70.707465][ T4267] Bluetooth: hci1: command 0x0409 tx timeout [ 70.708069][ T4264] Bluetooth: hci3: command 0x0409 tx timeout [ 70.714418][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 70.720834][ T4250] device hsr_slave_1 entered promiscuous mode [ 70.732610][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.740285][ T4250] Cannot create hsr debugfs directory [ 70.746450][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.753416][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.779843][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.790551][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 70.796803][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 70.891750][ T4251] device hsr_slave_0 entered promiscuous mode [ 70.899073][ T4251] device hsr_slave_1 entered promiscuous mode [ 70.906065][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.913637][ T4251] Cannot create hsr debugfs directory [ 70.969927][ T4256] device hsr_slave_0 entered promiscuous mode [ 70.976889][ T4256] device hsr_slave_1 entered promiscuous mode [ 70.983474][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.991200][ T4256] Cannot create hsr debugfs directory [ 71.267883][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.274501][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.300053][ T4260] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.312222][ T4260] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.328814][ T4260] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.343351][ T4260] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.381055][ T4250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.391995][ T4250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.401253][ T4250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.435064][ T4250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.498244][ T4256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.517111][ T4256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.526797][ T4256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.541418][ T4256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.573557][ T4252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.605895][ T4252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.615089][ T4252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.643078][ T4252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.716396][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.738578][ T4251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.749013][ T4251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.760305][ T4251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.771811][ T4251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.807277][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.818957][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.847181][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.871587][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.900724][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.910440][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.920065][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.927420][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.938298][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.959109][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.978206][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.988798][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.997486][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.006416][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.016242][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.025221][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.032332][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.068375][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.077501][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.087659][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.097414][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.106074][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.113181][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.121113][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.130068][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.139440][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.151502][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.176555][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.189006][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.198666][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.205868][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.214031][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.223063][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.240335][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.253237][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.263183][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.273383][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.282272][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.290985][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.299830][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.310463][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.320607][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.344643][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.353119][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.362000][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.370659][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.377859][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.386901][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.395967][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.404888][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.412092][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.420424][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.429200][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.438096][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.445241][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.453053][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.461440][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.496626][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.506828][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.518972][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.528184][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.537449][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.546307][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.555670][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.565008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.573445][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.580616][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.588635][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.597842][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.615163][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.625042][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.633683][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.642673][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.660426][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.675806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.685123][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.693494][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.704773][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.717224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.728451][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.737748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.749150][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.762177][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.770594][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.788584][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.794491][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 72.796245][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 72.801727][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 72.826806][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.835561][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.847399][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.858945][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.868397][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 72.874733][ T4253] Bluetooth: hci2: command 0x041b tx timeout [ 72.882179][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.891806][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.902479][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.912002][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.933314][ T4252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.951582][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.983338][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.993944][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.019835][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.028867][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.038841][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.047620][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.056749][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.067367][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.076966][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.084068][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.093174][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.101598][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.113043][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.122934][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.143558][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.152849][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.161665][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.168840][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.180502][ T1104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.196642][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.234608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.252444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.282793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.353087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.367600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.381099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.402948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.426509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.439824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.451518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.472934][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.533251][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.543290][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.557268][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.567412][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.588317][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.607827][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.662742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.685823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.748661][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.763675][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.781247][ T4256] device veth0_vlan entered promiscuous mode [ 73.800148][ T4260] device veth0_vlan entered promiscuous mode [ 73.809718][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.820197][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.829792][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.839098][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.850833][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.860372][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.880012][ T4256] device veth1_vlan entered promiscuous mode [ 73.901328][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.914916][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.923542][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.931953][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.940432][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.950502][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.960175][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.976225][ T4260] device veth1_vlan entered promiscuous mode [ 73.997116][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.006504][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.013958][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.021891][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.031995][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.048577][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.056448][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.069859][ T4256] device veth0_macvtap entered promiscuous mode [ 74.100813][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.111948][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.127592][ T4256] device veth1_macvtap entered promiscuous mode [ 74.156836][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.172754][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.181890][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.192587][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.210520][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.228413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.238589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.277045][ T4260] device veth0_macvtap entered promiscuous mode [ 74.325912][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.336475][ T4260] device veth1_macvtap entered promiscuous mode [ 74.362097][ T4252] device veth0_vlan entered promiscuous mode [ 74.370199][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.381134][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.392878][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.402821][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.412615][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.421743][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.430908][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.440139][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.454727][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.471260][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.482395][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.495324][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.511121][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.527428][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.540959][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.551671][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.561149][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.571053][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.583224][ T4256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.598573][ T4256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.609132][ T4256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.618130][ T4256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.638823][ T4260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.649477][ T4260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.661090][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.690742][ T4251] device veth0_vlan entered promiscuous mode [ 74.697502][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.708495][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.718369][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.735335][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.749905][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.758317][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.770181][ T4260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.779934][ T4260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.789724][ T4260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.802163][ T4260] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.815732][ T4252] device veth1_vlan entered promiscuous mode [ 74.860097][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.864684][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 74.874282][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 74.874291][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 74.879134][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.919369][ T4251] device veth1_vlan entered promiscuous mode [ 74.945034][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 74.945150][ T4253] Bluetooth: hci2: command 0x040f tx timeout [ 74.967616][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.978159][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.983036][ T4250] device veth0_vlan entered promiscuous mode [ 75.017225][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.026696][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.036797][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.044916][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.053209][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.061910][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.070811][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.084107][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.092629][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.103542][ T4252] device veth0_macvtap entered promiscuous mode [ 75.136333][ T4250] device veth1_vlan entered promiscuous mode [ 75.146536][ T4252] device veth1_macvtap entered promiscuous mode [ 75.199207][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.205121][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.209303][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.220875][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.224424][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.239086][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.247454][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.255975][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.265995][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.282428][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.297624][ T4251] device veth0_macvtap entered promiscuous mode [ 75.305263][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.323842][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.333444][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.372212][ T4250] device veth0_macvtap entered promiscuous mode [ 75.382944][ T4251] device veth1_macvtap entered promiscuous mode [ 75.401909][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.410977][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.420565][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.433147][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.451768][ T4250] device veth1_macvtap entered promiscuous mode [ 75.462480][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.473383][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.483374][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.495697][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.508772][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.535022][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.543054][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.551218][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.563060][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.588744][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.610012][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.622315][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.639016][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.651895][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.669365][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.682319][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.700246][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.712730][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.741846][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.770554][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.826239][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.885083][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.954983][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.030368][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.118279][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.154723][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.348992][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.360646][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.370692][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.385218][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.405660][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.425695][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.443210][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.452068][ T4252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.461882][ T4252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.477010][ T4252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.486213][ T4252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.501388][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.517359][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.532610][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.579941][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.591703][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.617270][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.645311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.654808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 76.944436][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 76.950607][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 76.957063][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 77.024528][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 77.030605][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 77.059113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.161541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.264195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.463815][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.482900][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.493068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.510896][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.530532][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.542969][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.561988][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.592150][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.665786][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.705092][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.898216][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.909337][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.612744][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.628606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 78.637263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.645592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.654596][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.664975][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.676525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 78.677063][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.728989][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.739900][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.755492][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.770332][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.790937][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.803614][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.815497][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.839649][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.848605][ T4250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.857791][ T4250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.868236][ T4250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.976318][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.994030][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.021708][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.023319][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.039047][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.039383][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.052359][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.128380][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.137921][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.147493][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.155598][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.161827][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.167409][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.180561][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.187716][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.200487][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.260151][ T27] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 79.261081][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.285896][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.297953][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.302816][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.365484][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.395987][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.456249][ T27] usb 2-1: config 0 descriptor?? [ 79.475551][ T4346] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.486612][ T4352] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.508725][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 79.510915][ T4352] netlink: zone id is out of range [ 79.536331][ T4352] netlink: del zone limit has 4 unknown bytes [ 81.094435][ T4366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.256017][ T22] usb 2-1: USB disconnect, device number 2 [ 82.308116][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.324494][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.370044][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.381466][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.399619][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.419182][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.439387][ T4382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.474434][ T4382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.470190][ T4397] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.575953][ T4397] netlink: zone id is out of range [ 83.665694][ T4397] netlink: del zone limit has 4 unknown bytes [ 84.581543][ T4407] hfsplus: unable to find HFS+ superblock [ 86.632140][ T126] cfg80211: failed to load regulatory.db [ 87.174683][ T4435] Zero length message leads to an empty skb [ 92.224268][ T4297] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.425984][ T4297] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 92.431340][ T4483] lo speed is unknown, defaulting to 1000 [ 92.461482][ T4297] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 92.461719][ T4483] lo speed is unknown, defaulting to 1000 [ 92.521866][ T4297] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 92.542008][ T4483] lo speed is unknown, defaulting to 1000 [ 92.548442][ T4348] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.606497][ T4483] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.640710][ T4483] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 92.722868][ T4483] lo speed is unknown, defaulting to 1000 [ 92.737098][ T4483] lo speed is unknown, defaulting to 1000 [ 92.749167][ T4483] lo speed is unknown, defaulting to 1000 [ 92.759322][ T4483] lo speed is unknown, defaulting to 1000 [ 92.770629][ T4483] lo speed is unknown, defaulting to 1000 [ 93.274307][ T4297] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.515777][ T4494] syz.0.43 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.574249][ T4494] netlink: 'syz.0.43': attribute type 21 has an invalid length. [ 93.582387][ T4494] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 93.590082][ T4494] netlink: 144 bytes leftover after parsing attributes in process `syz.0.43'. [ 93.942630][ T4348] usb 3-1: config 0 has no interfaces? [ 93.957593][ T4297] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 94.056733][ T4348] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.074257][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 94.094305][ T4348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.134342][ T4297] usb 5-1: Product: syz [ 94.186511][ T4348] usb 3-1: SerialNumber: syz [ 94.186685][ T4472] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.208753][ T4297] usb 5-1: invalid MIDI out EP 0 [ 94.215263][ T4348] usb 3-1: config 0 descriptor?? [ 94.363925][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.377131][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.388042][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.399251][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.409852][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.422540][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.434486][ T4499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.523919][ T4499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.548163][ T4297] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 94.594453][ T4297] usb 5-1: USB disconnect, device number 2 [ 94.686111][ T7] usb 3-1: USB disconnect, device number 2 [ 94.995575][ T4506] udevd[4506]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.564305][ T7] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 98.600092][ T4548] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.822585][ T7] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 98.924131][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.944279][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.095860][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.129998][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 99.150409][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.193311][ T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 99.214271][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.241649][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.241681][ T7] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.276882][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.288246][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.317585][ T4545] sctp: failed to load transform for md5: -2 [ 99.344083][ T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.378046][ T7] usb 5-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 99.407149][ T7] usb 5-1: Product: syz [ 99.504446][ T4541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.547456][ T7] usb 5-1: invalid MIDI out EP 0 [ 101.710322][ T7] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 101.727510][ T7] usb 5-1: USB disconnect, device number 3 [ 102.474349][ T7] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 103.136084][ T7] usb 5-1: config 0 has no interfaces? [ 103.142966][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.214277][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.260798][ T7] usb 5-1: SerialNumber: syz [ 103.309001][ T7] usb 5-1: config 0 descriptor?? [ 103.353801][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.187547][ T7] usb 5-1: USB disconnect, device number 4 [ 104.318958][ T4592] UBIFS error (pid: 4592): cannot open "./file0", error -22 [ 106.114402][ T4296] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 106.850950][ T4296] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 107.028069][ T4296] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 107.137780][ T4296] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 107.158400][ T4296] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.176882][ T4296] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.192453][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 107.201837][ T4296] usb 5-1: Product: syz [ 107.215249][ T4608] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.246557][ T4296] usb 5-1: invalid MIDI out EP 0 [ 107.277447][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.344496][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.355766][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.366775][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.378034][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.389300][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.400743][ T4612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.419935][ T4612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.439702][ T4296] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 107.466906][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 107.521281][ T4507] udevd[4507]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.954452][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.705453][ T4300] usb 5-1: USB disconnect, device number 5 [ 109.052085][ T4637] sd 0:0:1:0: device reset [ 109.094345][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 109.824979][ T7] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 109.884355][ T7] usb 2-1: config 0 has no interface number 0 [ 109.910920][ T7] usb 2-1: config 0 interface 12 has no altsetting 0 [ 109.948199][ T7] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 109.999088][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.038446][ T7] usb 2-1: Product: syz [ 110.063434][ T7] usb 2-1: Manufacturer: syz [ 110.250813][ T7] usb 2-1: SerialNumber: syz [ 111.034854][ T7] usb 2-1: config 0 descriptor?? [ 111.111044][ T7] usb 2-1: can't set config #0, error -71 [ 111.127666][ T7] usb 2-1: USB disconnect, device number 3 [ 111.289205][ T4662] UBIFS error (pid: 4662): cannot open "./file0", error -22 [ 113.054259][ T951] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.285668][ T951] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 113.315549][ T951] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.358681][ T951] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.397465][ T951] usb 1-1: config 1 has no interface number 1 [ 113.434667][ T951] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 113.594329][ T951] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.767478][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.878437][ T951] usb 1-1: Product: syz [ 114.041768][ T951] usb 1-1: Manufacturer: syz [ 114.046871][ T951] usb 1-1: SerialNumber: syz [ 114.214384][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 114.292098][ T951] usb 1-1: MIDIStreaming interface descriptor not found [ 114.415866][ T7] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 114.447262][ T951] usb 1-1: USB disconnect, device number 2 [ 114.455510][ T7] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 114.694970][ T7] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 114.714200][ T7] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.110132][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.163349][ T7] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 115.185675][ T7] usb 3-1: Product: syz [ 115.192867][ T4676] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 115.207092][ T7] usb 3-1: invalid MIDI out EP 0 [ 116.151508][ T7] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 116.220687][ T4507] udevd[4507]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.695810][ T4300] usb 3-1: USB disconnect, device number 3 [ 122.994314][ T4300] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 123.186715][ T4300] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 123.211724][ T4300] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 123.745222][ T4300] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 123.810484][ T4300] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.879054][ T4300] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.952786][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 124.029609][ T4300] usb 3-1: Product: syz [ 124.118877][ T4736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.234557][ T4300] usb 3-1: invalid MIDI out EP 0 [ 124.746294][ T4300] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 124.762015][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.468888][ T4295] usb 3-1: USB disconnect, device number 4 [ 125.811915][ T4759] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.117'. [ 125.894899][ T4759] netlink: zone id is out of range [ 125.900729][ T4759] netlink: zone id is out of range [ 125.912284][ T4759] netlink: zone id is out of range [ 125.917797][ T4759] netlink: zone id is out of range [ 125.936789][ T4759] netlink: del zone limit has 4 unknown bytes [ 126.034428][ T4764] sd 0:0:1:0: device reset [ 126.094264][ T4766] syz.4.120 uses obsolete (PF_INET,SOCK_PACKET) [ 126.271833][ T4770] overlayfs: failed to resolve './file1': -2 [ 127.869961][ T4787] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 127.889443][ T4787] netlink: 'syz.1.127': attribute type 2 has an invalid length. [ 129.634393][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.684602][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 131.749806][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.878747][ T7] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.889420][ T7] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.896489][ T7] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 131.905968][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.916992][ T7] usb 3-1: config 0 descriptor?? [ 132.709127][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.716658][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.667233][ T4817] sched: RT throttling activated [ 134.975495][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 134.981848][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 135.028365][ T7] usb 3-1: USB disconnect, device number 5 [ 135.102681][ T4831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 136.948310][ T4846] sd 0:0:1:0: PR command failed: 1026 [ 137.016565][ T4846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 137.231603][ T4846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 139.024172][ T4866] hfsplus: unable to find HFS+ superblock [ 140.818013][ T4879] sd 0:0:1:0: device reset [ 141.179040][ T4878] fuse: Bad value for 'rootmode' [ 146.271081][ T4904] sd 0:0:1:0: PR command failed: 1026 [ 146.967043][ T4904] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 146.973924][ T4904] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 147.653293][ T4919] fuse: Unknown parameter 'fd0x0000000000000004' [ 147.776094][ T4919] Bluetooth: MGMT ver 1.22 [ 148.084378][ T4294] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.334234][ T4294] usb 2-1: Using ep0 maxpacket: 16 [ 149.491702][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.676947][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.758560][ T4294] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 149.883829][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.317906][ T4294] usb 2-1: config 0 descriptor?? [ 151.019655][ T4294] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0001/input/input5 [ 152.392596][ T4294] appleir 0003:05AC:8241.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 153.241185][ T4294] usb 2-1: USB disconnect, device number 4 [ 153.298978][ T4946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.168'. [ 154.971312][ T4976] sd 0:0:1:0: device reset [ 159.305952][ T5007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.184'. [ 159.555238][ T5011] fuse: Bad value for 'fd' [ 161.226360][ T5009] UBIFS error (pid: 5009): cannot open "./file0", error -22 [ 161.768105][ T5030] sd 0:0:1:0: device reset [ 162.643444][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 166.261049][ T5068] UBIFS error (pid: 5068): cannot open "./file0", error -22 [ 167.644074][ T5064] UBIFS error (pid: 5064): cannot open "./file0", error -22 [ 167.835995][ T4253] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 167.853122][ T4253] Bluetooth: hci3: Injecting HCI hardware error event [ 167.861698][ T4253] Bluetooth: hci3: hardware error 0x00 [ 169.148063][ T5094] sd 0:0:1:0: device reset [ 170.233659][ T4253] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 170.859974][ T5112] 9pnet_fd: Insufficient options for proto=fd [ 171.124263][ T5122] UBIFS error (pid: 5122): cannot open "./file0", error -22 [ 172.065089][ T4253] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 172.081098][ T4253] Bluetooth: hci0: Injecting HCI hardware error event [ 172.091894][ T4253] Bluetooth: hci0: hardware error 0x00 [ 174.704283][ T4253] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 174.731416][ T5132] UBIFS error (pid: 5132): cannot open "./file0", error -22 [ 174.899335][ T4253] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 174.915620][ T4253] Bluetooth: hci1: Injecting HCI hardware error event [ 174.923991][ T4267] Bluetooth: hci1: hardware error 0x00 [ 175.463816][ T5144] sd 0:0:1:0: device reset [ 177.366717][ T5170] hfsplus: unable to find HFS+ superblock [ 177.783612][ T4267] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 179.499864][ T5188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.244'. [ 179.965287][ T5196] UBIFS error (pid: 5196): cannot open "./file0", error -22 [ 180.864424][ T4267] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 180.880694][ T4267] Bluetooth: hci2: Injecting HCI hardware error event [ 180.889319][ T4253] Bluetooth: hci2: hardware error 0x00 [ 181.313723][ T5208] sd 0:0:1:0: device reset [ 183.164408][ T5224] device ipvlan2 entered promiscuous mode [ 183.184345][ T4253] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 183.372465][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 186.649792][ T5252] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.263'. [ 186.659438][ T5252] netlink: zone id is out of range [ 186.669313][ T5252] netlink: del zone limit has 4 unknown bytes [ 187.164749][ T5250] UBIFS error (pid: 5250): cannot open "./file0", error -22 [ 189.411016][ T5274] device wireguard0 entered promiscuous mode [ 190.795943][ T5295] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.275'. [ 190.814359][ T5295] netlink: zone id is out of range [ 191.298774][ T5295] netlink: del zone limit has 4 unknown bytes [ 192.497412][ T5306] sd 0:0:1:0: device reset [ 192.675588][ T5308] netlink: 56 bytes leftover after parsing attributes in process `syz.0.279'. [ 193.166617][ T5311] UBIFS error (pid: 5311): cannot open "./file0", error -22 [ 193.572622][ T4253] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 193.591508][ T4253] Bluetooth: hci4: Injecting HCI hardware error event [ 193.601264][ T4267] Bluetooth: hci4: hardware error 0x00 [ 194.149542][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.158407][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.744687][ T4267] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 195.764407][ T4977] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 196.017212][ T4977] usb 1-1: config 0 has no interfaces? [ 196.156085][ T4977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.192354][ T4977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 196.271187][ T4977] usb 1-1: SerialNumber: syz [ 196.326462][ T4977] usb 1-1: config 0 descriptor?? [ 197.312128][ T4977] usb 1-1: USB disconnect, device number 3 [ 197.465853][ T5348] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.290'. [ 197.515178][ T5348] netlink: zone id is out of range [ 198.370826][ T5348] netlink: del zone limit has 4 unknown bytes [ 198.528321][ T5359] 9pnet_fd: Insufficient options for proto=fd [ 198.876689][ T5367] lo speed is unknown, defaulting to 1000 [ 198.883018][ T5367] lo speed is unknown, defaulting to 1000 [ 199.777009][ T5367] lo speed is unknown, defaulting to 1000 [ 199.837574][ T5367] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 200.275843][ T5367] lo speed is unknown, defaulting to 1000 [ 200.286750][ T5367] lo speed is unknown, defaulting to 1000 [ 200.298309][ T5367] lo speed is unknown, defaulting to 1000 [ 200.310122][ T5367] lo speed is unknown, defaulting to 1000 [ 200.478386][ T5367] lo speed is unknown, defaulting to 1000 [ 202.266100][ T5396] sd 0:0:1:0: device reset [ 202.588509][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 202.732554][ T5408] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 202.984499][ T4296] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 203.207993][ T4296] usb 1-1: config 0 has no interfaces? [ 203.232041][ T4296] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.402462][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.521901][ T4296] usb 1-1: SerialNumber: syz [ 203.543147][ T4296] usb 1-1: config 0 descriptor?? [ 204.668911][ T7] usb 1-1: USB disconnect, device number 4 [ 206.155055][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 208.782941][ T5467] netlink: 68 bytes leftover after parsing attributes in process `syz.1.323'. [ 209.624431][ T5473] tipc: Enabling of bearer rejected, failed to enable media [ 210.791076][ T126] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 211.374792][ T126] usb 1-1: config 0 has no interfaces? [ 211.385121][ T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.394476][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 211.408788][ T126] usb 1-1: SerialNumber: syz [ 211.445174][ T126] usb 1-1: config 0 descriptor?? [ 211.720211][ T4348] usb 1-1: USB disconnect, device number 5 [ 212.572056][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 213.074491][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 214.700489][ T5520] device vlan2 entered promiscuous mode [ 214.748283][ T5520] device bond0 entered promiscuous mode [ 214.764184][ T5520] device bond_slave_0 entered promiscuous mode [ 214.826459][ T5520] device bond_slave_1 entered promiscuous mode [ 214.917722][ T5525] UBIFS error (pid: 5525): cannot open "./file0", error -22 [ 216.110131][ T5532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.341'. [ 216.606731][ T5538] UBIFS error (pid: 5538): cannot open "./file0", error -22 [ 219.633219][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 219.852160][ T5546] lo speed is unknown, defaulting to 1000 [ 224.460087][ T5596] UBIFS error (pid: 5596): cannot open "./file0", error -22 [ 226.498610][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 226.929159][ T7] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 227.194443][ T7] usb 5-1: config 0 has no interfaces? [ 227.231133][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.349687][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.388528][ T7] usb 5-1: SerialNumber: syz [ 227.399586][ T7] usb 5-1: config 0 descriptor?? [ 228.343756][ T4364] usb 5-1: USB disconnect, device number 6 [ 229.157004][ T5641] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 229.458314][ T5639] UBIFS error (pid: 5639): cannot open "./file0", error -22 [ 229.658293][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.686040][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.698394][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.709431][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.719402][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.730120][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.742299][ T5652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.755501][ T5652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.299774][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 234.511563][ T5691] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 234.532811][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.545163][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.556492][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.754928][ T4977] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 234.960935][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.974974][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.060306][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.077377][ T5698] UBIFS error (pid: 5698): cannot open "./file0", error -22 [ 235.101899][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.154293][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.727126][ T4977] usb 1-1: config 0 has no interfaces? [ 235.760207][ T4977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.790216][ T4977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.801441][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.802801][ T4977] usb 1-1: SerialNumber: syz [ 235.903883][ T4977] usb 1-1: config 0 descriptor?? [ 235.918659][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.926712][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.591982][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 236.623622][ T5704] device bridge_slave_0 left promiscuous mode [ 236.671780][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.741437][ T5704] device bridge_slave_1 left promiscuous mode [ 237.755440][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.787230][ T5704] bond0: (slave bond_slave_0): Releasing backup interface [ 237.875515][ T5704] bond0: (slave bond_slave_1): Releasing backup interface [ 238.597342][ T5704] team0: Port device team_slave_0 removed [ 238.622020][ T5704] team0: Port device team_slave_1 removed [ 239.588904][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.666978][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.891354][ T5704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.913158][ T5704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.050710][ T4977] usb 1-1: USB disconnect, device number 6 [ 241.329243][ T5747] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 243.623248][ T5766] UBIFS error (pid: 5766): cannot open "./file0", error -22 [ 248.414869][ T5786] hfsplus: unable to find HFS+ superblock [ 250.101600][ T5808] siw: device registration error -23 [ 254.929608][ T5846] UBIFS error (pid: 5846): cannot open "./file0", error -22 [ 255.151000][ T5851] netlink: 68 bytes leftover after parsing attributes in process `syz.0.434'. [ 255.178352][ T5851] tipc: Enabling of bearer rejected, failed to enable media [ 255.588575][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.595161][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.137954][ T5873] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 258.964186][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 259.004701][ T5896] netlink: 68 bytes leftover after parsing attributes in process `syz.0.447'. [ 259.098927][ T5896] tipc: Enabling of bearer rejected, failed to enable media [ 259.946391][ T5910] Bluetooth: MGMT ver 1.22 [ 260.088172][ T5912] UBIFS error (pid: 5912): cannot open "./file0", error -22 [ 260.374183][ T14] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 260.835161][ T14] usb 4-1: config 0 has no interfaces? [ 260.865641][ T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.876900][ T5922] 9pnet: Could not find request transport: fd0x0000000000000003 [ 260.894363][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 260.902688][ T14] usb 4-1: SerialNumber: syz [ 260.958330][ T14] usb 4-1: config 0 descriptor?? [ 261.270958][ T5934] hfsplus: unable to find HFS+ superblock [ 261.452170][ T4364] usb 4-1: USB disconnect, device number 2 [ 261.876952][ T5941] netlink: 68 bytes leftover after parsing attributes in process `syz.1.461'. [ 262.054879][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 264.728399][ T5963] 9pnet: Could not find request transport: fd0x0000000000000003 [ 267.114223][ T5970] UBIFS error (pid: 5970): cannot open "./file0", error -22 [ 267.414299][ T4364] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 267.655855][ T4364] usb 4-1: config 0 has no interfaces? [ 267.662633][ T4364] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.682333][ T4364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.714245][ T4364] usb 4-1: SerialNumber: syz [ 267.744506][ T4364] usb 4-1: config 0 descriptor?? [ 268.612403][ T4364] usb 4-1: USB disconnect, device number 3 [ 269.622335][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 271.324742][ T6006] 9pnet: Could not find request transport: fd0x0000000000000003 [ 272.288486][ T6025] UBIFS error (pid: 6025): cannot open "./file0", error -22 [ 272.860984][ T6035] device syzkaller1 entered promiscuous mode [ 272.929216][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 274.154196][ T7] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 274.314215][ T4295] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 274.362184][ T7] usb 5-1: config 0 has no interfaces? [ 274.370669][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.418599][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 274.524231][ T4295] usb 3-1: Using ep0 maxpacket: 16 [ 274.535831][ T4295] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.007282][ T7] usb 5-1: SerialNumber: syz [ 275.390337][ T7] usb 5-1: config 0 descriptor?? [ 275.395601][ T4295] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.437133][ T4295] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.505665][ T4295] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 275.553615][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.523539][ T4295] usb 3-1: config 0 descriptor?? [ 276.604026][ T4299] usb 5-1: USB disconnect, device number 7 [ 276.969706][ T6072] UBIFS error (pid: 6072): cannot open "./file0", error -22 [ 277.102948][ T4295] hid (null): global environment stack underflow [ 277.310159][ T4295] usb 3-1: USB disconnect, device number 6 [ 282.024992][ T6118] UBIFS error (pid: 6118): cannot open "./file0", error -22 [ 284.624254][ T4980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 284.834764][ T4980] usb 3-1: Using ep0 maxpacket: 16 [ 284.885008][ T4980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.291023][ T4980] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.302373][ T4980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.309730][ T4980] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 285.663680][ T4980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.295143][ T4980] usb 3-1: config 0 descriptor?? [ 286.540652][ T4980] usbhid 3-1:0.0: can't add hid device: -71 [ 286.553871][ T4980] usbhid: probe of 3-1:0.0 failed with error -71 [ 286.585244][ T4980] usb 3-1: USB disconnect, device number 7 [ 287.810847][ T6167] UBIFS error (pid: 6167): cannot open "./file0", error -22 [ 288.769957][ T56] Bluetooth: (null): Invalid header checksum [ 288.800373][ T56] Bluetooth: (null): Invalid header checksum [ 291.584353][ T4977] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 291.774353][ T4977] usb 1-1: Using ep0 maxpacket: 16 [ 291.778486][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'. [ 291.781746][ T4977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.989131][ T6215] UBIFS error (pid: 6215): cannot open "./file0", error -22 [ 292.031431][ T4977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.069234][ T4977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.104399][ T4977] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 292.123769][ T4977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.190567][ T4977] usb 1-1: config 0 descriptor?? [ 292.633156][ T4977] usbhid 1-1:0.0: can't add hid device: -71 [ 292.884256][ T4977] usbhid: probe of 1-1:0.0 failed with error -71 [ 292.912227][ T4977] usb 1-1: USB disconnect, device number 7 [ 297.011910][ T6250] device bridge_slave_0 left promiscuous mode [ 297.021024][ T6257] fuse: Bad value for 'fd' [ 297.047297][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.092667][ T6250] device bridge_slave_1 left promiscuous mode [ 297.133325][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.176332][ T6250] bond0: (slave bond_slave_0): Releasing backup interface [ 297.209311][ T6250] device bond_slave_0 left promiscuous mode [ 297.260547][ T6250] bond0: (slave bond_slave_1): Releasing backup interface [ 297.285532][ T6250] device bond_slave_1 left promiscuous mode [ 297.353639][ T6250] team0: Port device team_slave_0 removed [ 297.410443][ T6250] team0: Port device team_slave_1 removed [ 297.432756][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.444630][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.460408][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.469893][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.544651][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 299.412289][ T4495] Bluetooth: (null): Invalid header checksum [ 299.593679][ T4495] Bluetooth: (null): Invalid header checksum [ 299.600370][ T6278] ax25_connect(): syz.0.569 uses autobind, please contact jreuter@yaina.de [ 299.631051][ T4495] Bluetooth: (null): Invalid header checksum [ 299.729871][ T4495] Bluetooth: (null): Invalid header checksum [ 299.821143][ T4495] Bluetooth: (null): Invalid header checksum [ 299.895870][ T4495] Bluetooth: (null): Invalid header checksum [ 299.976256][ T4436] Bluetooth: (null): Invalid header checksum [ 300.095576][ T4495] Bluetooth: (null): Invalid header checksum [ 300.224111][ T4495] Bluetooth: (null): Invalid header checksum [ 300.325929][ T4564] Bluetooth: (null): Invalid header checksum [ 300.435448][ T4564] Bluetooth: (null): Invalid header checksum [ 300.661969][ T6288] fuse: Bad value for 'fd' [ 301.515696][ T4977] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 301.724483][ T4977] usb 1-1: device descriptor read/64, error -71 [ 302.174217][ T4977] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 302.433376][ T4977] usb 1-1: device descriptor read/64, error -71 [ 302.481413][ T6316] netlink: 68 bytes leftover after parsing attributes in process `syz.2.582'. [ 302.506556][ T6316] tipc: Enabling of bearer rejected, failed to enable media [ 302.613147][ T4977] usb usb1-port1: attempt power cycle [ 303.255106][ T4977] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 304.664231][ T4977] usb 1-1: device descriptor read/8, error -71 [ 304.774250][ T6330] fuse: Bad value for 'fd' [ 306.788564][ T14] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 306.964640][ T14] usb 3-1: device descriptor read/64, error -71 [ 307.244364][ T14] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 307.305737][ T6364] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 307.466655][ T14] usb 3-1: device descriptor read/64, error -71 [ 307.908065][ T14] usb usb3-port1: attempt power cycle [ 308.054559][ T4309] Bluetooth: (null): Invalid header checksum [ 308.060975][ T4309] Bluetooth: (null): Invalid header checksum [ 308.594317][ T14] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 308.635139][ T14] usb 3-1: device descriptor read/8, error -71 [ 309.124440][ T14] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 309.169059][ T14] usb 3-1: device descriptor read/8, error -71 [ 309.305581][ T14] usb usb3-port1: unable to enumerate USB device [ 313.179588][ T4495] Bluetooth: (null): Invalid header checksum [ 313.225920][ T4495] Bluetooth: (null): Invalid header checksum [ 315.958137][ T14] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 316.294482][ T14] usb 1-1: device descriptor read/64, error -71 [ 316.574193][ T14] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 317.029392][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.035876][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.574313][ T14] usb 1-1: device descriptor read/64, error -71 [ 318.414913][ T14] usb usb1-port1: attempt power cycle [ 323.477254][ T4300] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 323.654198][ T4300] usb 4-1: device descriptor read/64, error -71 [ 324.205032][ T4300] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 324.214267][ T6502] infiniband syz0: set down [ 324.326151][ T6502] infiniband syz0: added ipvlan0 [ 324.385344][ T4300] usb 4-1: device descriptor read/64, error -71 [ 324.505837][ T4300] usb usb4-port1: attempt power cycle [ 324.827234][ T6502] RDS/IB: syz0: added [ 324.838013][ T6502] smc: adding ib device syz0 with port count 1 [ 324.845313][ T6502] smc: ib device syz0 port 1 has pnetid [ 324.934740][ T4300] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 324.984929][ T4300] usb 4-1: device descriptor read/8, error -71 [ 325.624233][ T4300] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 325.685571][ T4300] usb 4-1: device descriptor read/8, error -71 [ 325.814993][ T4300] usb usb4-port1: unable to enumerate USB device [ 329.729268][ T6568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.764798][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 329.802275][ T6568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.913025][ T6568] device bridge_slave_0 left promiscuous mode [ 329.961006][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.052562][ T6568] device bridge_slave_1 left promiscuous mode [ 330.094992][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.141175][ T6568] bond0: (slave bond_slave_0): Releasing backup interface [ 330.239941][ T6568] bond0: (slave bond_slave_1): Releasing backup interface [ 330.377462][ T6568] team0: Port device team_slave_0 removed [ 330.433621][ T6568] team0: Port device team_slave_1 removed [ 330.446633][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.455612][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.465782][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.473691][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.424195][ T6615] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.451453][ T6615] device bridge_slave_0 left promiscuous mode [ 334.470472][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.496681][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 334.521416][ T6615] device bridge_slave_1 left promiscuous mode [ 334.558546][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.662359][ T6615] bond0: (slave bond_slave_0): Releasing backup interface [ 334.768973][ T6615] bond0: (slave bond_slave_1): Releasing backup interface [ 334.992930][ T6615] team0: Port device team_slave_0 removed [ 335.034689][ T6615] team0: Port device team_slave_1 removed [ 335.057063][ T6615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.073224][ T6615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.092155][ T6615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.135319][ T6615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.417207][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 340.795129][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.802686][ T6688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.958452][ T6695] xt_hashlimit: max too large, truncated to 1048576 [ 342.564962][ T6724] Driver unsupported XDP return value 0 on prog (id 76) dev N/A, expect packet loss! [ 342.672609][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 342.721986][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.709'. [ 342.765091][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.710'. [ 344.793374][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.721'. [ 345.077833][ T6772] UBIFS error (pid: 6772): cannot open "./file0", error -22 [ 347.233468][ T6787] lo speed is unknown, defaulting to 1000 [ 348.848961][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 349.269650][ T6814] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 350.069988][ T6822] siw: device registration error -23 [ 351.008059][ T6830] device syzkaller1 entered promiscuous mode [ 351.364913][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 354.183337][ T6879] device ip6tnl1 entered promiscuous mode [ 354.205100][ T4980] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 354.314258][ T6884] netlink: 68 bytes leftover after parsing attributes in process `syz.1.761'. [ 354.332374][ T6884] tipc: Enabling of bearer rejected, failed to enable media [ 354.364249][ T4980] usb 1-1: device descriptor read/64, error -71 [ 354.654654][ T4980] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 354.835203][ T4980] usb 1-1: device descriptor read/64, error -71 [ 354.996010][ T4980] usb usb1-port1: attempt power cycle [ 355.424842][ T4980] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 355.687357][ T6904] random: crng reseeded on system resumption [ 356.165130][ T4980] usb 1-1: device descriptor read/8, error -71 [ 356.444189][ T4980] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 356.539363][ T4980] usb 1-1: device descriptor read/8, error -71 [ 356.597939][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 356.664416][ T4980] usb usb1-port1: unable to enumerate USB device [ 356.934769][ T6917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.019671][ T6919] netlink: 68 bytes leftover after parsing attributes in process `syz.4.772'. [ 357.095242][ T6919] tipc: Enabling of bearer rejected, failed to enable media [ 358.078422][ T6946] UBIFS error (pid: 6946): cannot open "./file0", error -22 [ 359.997128][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 360.141314][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 360.214493][ T4364] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 360.414850][ T4364] usb 1-1: device descriptor read/64, error -71 [ 360.591189][ T6952] random: crng reseeded on system resumption [ 360.688021][ T4364] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 360.774196][ T4980] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 360.864200][ T4364] usb 1-1: device descriptor read/64, error -71 [ 360.974902][ T4980] usb 2-1: no configurations [ 360.979848][ T4980] usb 2-1: can't read configurations, error -22 [ 360.987867][ T4364] usb usb1-port1: attempt power cycle [ 361.154976][ T4980] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 361.355125][ T4980] usb 2-1: no configurations [ 361.359805][ T4980] usb 2-1: can't read configurations, error -22 [ 361.398459][ T4980] usb usb2-port1: attempt power cycle [ 361.415039][ T4364] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 361.460306][ T4364] usb 1-1: device descriptor read/8, error -71 [ 362.055185][ T4364] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 362.235277][ T4980] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 362.245626][ T4364] usb 1-1: device descriptor read/8, error -71 [ 362.295968][ T4980] usb 2-1: no configurations [ 362.300645][ T4980] usb 2-1: can't read configurations, error -22 [ 362.385045][ T4364] usb usb1-port1: unable to enumerate USB device [ 362.534226][ T4980] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 362.616314][ T7001] UBIFS error (pid: 7001): cannot open "./file0", error -22 [ 362.750421][ T4980] usb 2-1: no configurations [ 362.763102][ T4980] usb 2-1: can't read configurations, error -22 [ 362.769199][ T7005] hfsplus: unable to find HFS+ superblock [ 362.769938][ T4980] usb usb2-port1: unable to enumerate USB device [ 364.202299][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 365.207974][ T7016] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 369.777115][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 369.826053][ T4977] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 369.840532][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 369.969690][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.077074][ T7048] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.174838][ T4977] usb 1-1: device descriptor read/64, error -71 [ 370.175051][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 370.280312][ T7057] netlink: 68 bytes leftover after parsing attributes in process `syz.3.815'. [ 370.644448][ T4977] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 371.160348][ T7057] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 371.250663][ T7057] tipc: Enabling of bearer rejected, failed to enable media [ 371.266821][ T7064] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 371.294314][ T4977] usb 1-1: device descriptor read/64, error -71 [ 371.414657][ T4977] usb usb1-port1: attempt power cycle [ 371.682704][ T7071] UBIFS error (pid: 7071): cannot open "./file0", error -22 [ 371.864182][ T4977] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 374.908850][ T4977] usb 1-1: device not accepting address 25, error -71 [ 375.158037][ T7089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.825'. [ 378.154333][ T126] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 378.318774][ T7122] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 378.334993][ T126] usb 1-1: device descriptor read/64, error -71 [ 378.469519][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.485323][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.605013][ T126] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 378.786183][ T126] usb 1-1: device descriptor read/64, error -71 [ 378.904967][ T126] usb usb1-port1: attempt power cycle [ 379.180021][ T7136] UBIFS error (pid: 7136): cannot open "./file0", error -22 [ 379.283991][ T7138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.842'. [ 379.314424][ T126] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 379.365442][ T126] usb 1-1: device descriptor read/8, error -71 [ 379.655116][ T126] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 379.704841][ T126] usb 1-1: device descriptor read/8, error -71 [ 380.275283][ T126] usb usb1-port1: unable to enumerate USB device [ 382.502374][ T7148] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 385.150047][ T7178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.856'. [ 385.269600][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.808475][ T7194] netlink: 'syz.2.862': attribute type 11 has an invalid length. [ 385.867034][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 387.157067][ T7208] can0: slcan on ptm0. [ 387.261537][ T7208] random: crng reseeded on system resumption [ 388.696428][ T7207] can0 (unregistered): slcan off ptm0. [ 388.988379][ T7246] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 390.263393][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.343190][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 390.408986][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 390.454704][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 392.071915][ T7302] can0: slcan on ptm0. [ 392.240032][ T7307] random: crng reseeded on system resumption [ 392.471989][ T7313] sctp: [Deprecated]: syz.0.892 (pid 7313) Use of int in max_burst socket option. [ 392.471989][ T7313] Use struct sctp_assoc_value instead [ 392.511999][ T7317] fuse: Bad value for 'fd' [ 392.641598][ T7313] netlink: 164 bytes leftover after parsing attributes in process `syz.0.892'. [ 392.681438][ T7313] netlink: 164 bytes leftover after parsing attributes in process `syz.0.892'. [ 392.721123][ T7313] netlink: 60 bytes leftover after parsing attributes in process `syz.0.892'. [ 392.987885][ T7300] can0 (unregistered): slcan off ptm0. [ 393.701182][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 393.741138][ T7346] device bridge_slave_0 left promiscuous mode [ 393.786528][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 393.805849][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.847764][ T7346] device bridge_slave_1 left promiscuous mode [ 393.892028][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.517800][ T7346] bond0: (slave bond_slave_0): Releasing backup interface [ 394.601936][ T7346] bond0: (slave bond_slave_1): Releasing backup interface [ 394.831280][ T7346] team0: Port device team_slave_0 removed [ 394.898756][ T7346] team0: Port device team_slave_1 removed [ 394.975827][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.029964][ T7346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.041412][ T7346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.080927][ T7346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.478919][ T7383] fuse: Unknown parameter 'grou00000000000000000000' [ 395.590243][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.909'. [ 396.704694][ T7396] can0: slcan on ptm0. [ 400.084744][ T7396] can0 (unregistered): slcan off ptm0. [ 400.401474][ T7450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.926'. [ 401.588577][ T7477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 401.707199][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.935'. [ 403.013157][ T7488] can0: slcan on ptm0. [ 403.099213][ T7488] random: crng reseeded on system resumption [ 403.138253][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 403.629308][ T7485] can0 (unregistered): slcan off ptm0. [ 403.953520][ T7508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.943'. [ 405.271664][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 405.722955][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.949'. [ 405.729545][ T7533] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 405.884370][ T7537] UBIFS error (pid: 7537): cannot open "./file0", error -22 [ 408.189351][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.955'. [ 408.896950][ T7558] can0: slcan on ptm0. [ 409.089456][ T7559] random: crng reseeded on system resumption [ 409.855115][ T7557] can0 (unregistered): slcan off ptm0. [ 412.056043][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 412.439547][ T7601] UBIFS error (pid: 7601): cannot open "./file0", error -22 [ 414.612541][ T7615] fuse: Unknown parameter 'group_id00000000000000000000' [ 417.330408][ T7641] can0: slcan on ptm0. [ 418.095169][ T7641] random: crng reseeded on system resumption [ 418.384859][ T7640] can0 (unregistered): slcan off ptm0. [ 418.402382][ T7665] fuse: Bad value for 'fd' [ 422.138275][ T7719] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 423.418681][ T7735] fuse: Bad value for 'user_id' [ 423.526742][ T7737] can0: slcan on ptm0. [ 423.687059][ T7740] random: crng reseeded on system resumption [ 423.729236][ T7745] xt_l2tp: wrong L2TP version: 0 [ 424.687306][ T7736] can0 (unregistered): slcan off ptm0. [ 426.065294][ T7782] UBIFS error (pid: 7782): cannot open "./file0", error -22 [ 427.081335][ T7797] fuse: Bad value for 'user_id' [ 427.990309][ T7812] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 428.994525][ T4362] Bluetooth: (null): Invalid header checksum [ 429.050601][ T4362] Bluetooth: (null): Invalid header checksum [ 429.377542][ T4362] Bluetooth: (null): Invalid header checksum [ 429.471264][ T4362] Bluetooth: (null): Invalid header checksum [ 430.684569][ T7858] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 431.578850][ T7878] UBIFS error (pid: 7878): cannot open "(null)", error -22 [ 436.383020][ T7901] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 436.748517][ T7901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.767009][ T7903] bond1: (slave gretap1): making interface the new active one [ 436.778604][ T7903] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 436.791509][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 436.842291][ T7903] syz.4.1042 (7903) used greatest stack depth: 20672 bytes left [ 436.879790][ T7908] fuse: Bad value for 'fd' [ 439.909290][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.915781][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.946675][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 441.360437][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 441.413971][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 443.049059][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 445.942993][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 450.889474][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 451.280384][ T8076] lo speed is unknown, defaulting to 1000 [ 451.390566][ T8080] lo speed is unknown, defaulting to 1000 [ 454.008666][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 454.058156][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 454.097197][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 456.083413][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 459.124448][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1123'. [ 461.294295][ T4295] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 461.381318][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 461.634609][ T4295] usb 1-1: Using ep0 maxpacket: 16 [ 461.643696][ T4295] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.678723][ T4295] usb 1-1: config 0 interface 0 has no altsetting 0 [ 461.693754][ T4295] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 461.718279][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.730577][ T4295] usb 1-1: config 0 descriptor?? [ 461.750461][ T4295] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 463.093339][ T8220] UBIFS error (pid: 8220): cannot open "./file0", error -22 [ 463.725862][ T4297] usb 1-1: USB disconnect, device number 31 [ 465.631469][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 465.750341][ T8250] Cannot find set identified by id 0 to match [ 466.116971][ T8250] device syzkaller0 entered promiscuous mode [ 470.284761][ T8285] UBIFS error (pid: 8285): cannot open "./file0", error -22 [ 473.042204][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 473.784379][ T8300] device batadv0 entered promiscuous mode [ 473.824609][ T8300] device macvtap1 entered promiscuous mode [ 473.847235][ T8300] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 473.914225][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1156'. [ 474.604040][ T8310] device batadv0 left promiscuous mode [ 474.718807][ T8331] UBIFS error (pid: 8331): cannot open "./file0", error -22 [ 475.342479][ T8347] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 477.064866][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 478.805554][ T8391] UBIFS error (pid: 8391): cannot open "./file0", error -22 [ 479.013920][ T8381] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 483.059630][ T8441] UBIFS error (pid: 8441): cannot open "./file0", error -22 [ 486.473243][ T4294] kworker/dying (4294) used greatest stack depth: 19216 bytes left [ 487.986913][ T8485] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 488.576553][ T8477] UBIFS error (pid: 8477): cannot open "./file0", error -22 [ 489.418696][ T8493] tipc: Enabling of bearer rejected, failed to enable media [ 489.629840][ T8502] UBIFS error (pid: 8502): cannot open "./file0", error -22 [ 489.718093][ T8496] device syzkaller1 entered promiscuous mode [ 492.317183][ T8532] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 494.474739][ T8540] tipc: Enabling of bearer rejected, failed to enable media [ 494.711339][ T8547] lo speed is unknown, defaulting to 1000 [ 494.879286][ T8552] UBIFS error (pid: 8552): cannot open "./file0", error -22 [ 495.483409][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057bcd000: rx timeout, send abort [ 496.000746][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057bcd000: abort rx timeout. Force session deactivation [ 496.706755][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 498.922160][ T8601] lo speed is unknown, defaulting to 1000 [ 498.933073][ T8601] lo speed is unknown, defaulting to 1000 [ 498.949476][ T8598] UBIFS error (pid: 8598): cannot open "./file0", error -22 [ 499.085580][ T8601] lo speed is unknown, defaulting to 1000 [ 499.777975][ T8601] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 499.897460][ T8601] lo speed is unknown, defaulting to 1000 [ 499.911240][ T8601] lo speed is unknown, defaulting to 1000 [ 499.921639][ T8601] lo speed is unknown, defaulting to 1000 [ 500.155106][ T8614] device syzkaller1 entered promiscuous mode [ 500.235234][ T8601] lo speed is unknown, defaulting to 1000 [ 501.248502][ T8623] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 501.395660][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.402016][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.442930][ T8601] lo speed is unknown, defaulting to 1000 [ 501.449742][ T8628] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 501.815387][ T8628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 501.872428][ T8636] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1250'. [ 503.236334][ T8656] UBIFS error (pid: 8656): cannot open "./file0", error -22 [ 504.215415][ T8670] device syzkaller1 entered promiscuous mode [ 504.320458][ T8672] siw: device registration error -23 [ 508.426691][ T8720] device syzkaller1 entered promiscuous mode [ 508.452600][ T8717] UBIFS error (pid: 8717): cannot open "./file0", error -22 [ 508.623886][ T8723] siw: device registration error -23 [ 511.523562][ T8752] siw: device registration error -23 [ 513.134117][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 513.415761][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 513.546724][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.576844][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.662954][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 513.715503][ T7] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 513.784034][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.861884][ T7] usb 5-1: config 0 descriptor?? [ 514.459741][ T7] hid (null): global environment stack underflow [ 514.660529][ T7] usb 5-1: USB disconnect, device number 8 [ 514.832743][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059049400: rx timeout, send abort [ 515.523490][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059049400: abort rx timeout. Force session deactivation [ 516.456116][ T8789] can0: slcan on ptm0. [ 517.038305][ T8791] random: crng reseeded on system resumption [ 518.364127][ T8788] can0 (unregistered): slcan off ptm0. [ 520.112907][ T8856] siw: device registration error -23 [ 526.648693][ T8912] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1326'. [ 527.027641][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880750de800: rx timeout, send abort [ 527.618635][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880750de800: abort rx timeout. Force session deactivation [ 527.759491][ T8922] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 527.942970][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 534.744912][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 534.792882][ T8998] UBIFS error (pid: 8998): cannot open "./file0", error -22 [ 537.351486][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 538.595282][ T9048] siw: device registration error -23 [ 538.664704][ T9057] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 542.374920][ T4977] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 542.615401][ T9109] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 542.635045][ T4977] usb 1-1: Using ep0 maxpacket: 16 [ 542.650367][ T4977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.699174][ T4977] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.787048][ T4977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 542.828296][ T4977] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 542.846065][ T4977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.891311][ T4977] usb 1-1: config 0 descriptor?? [ 543.311420][ T4977] hid (null): global environment stack underflow [ 543.372735][ T9122] netlink: 'syz.4.1393': attribute type 4 has an invalid length. [ 543.512556][ T4977] usb 1-1: USB disconnect, device number 32 [ 545.244783][ T9140] siw: device registration error -23 [ 545.261829][ T9144] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 546.909482][ T9168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.926260][ T9168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.017706][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 547.197671][ T9168] bond1: (slave gretap1): Releasing active interface [ 548.771484][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 553.492734][ T9226] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1427'. [ 554.271532][ T9234] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 557.136306][ T9263] netlink: 'syz.3.1440': attribute type 4 has an invalid length. [ 557.977249][ T9275] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1444'. [ 558.063634][ T9275] tipc: Enabling of bearer rejected, failed to enable media [ 559.904987][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 560.110135][ T9304] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1454'. [ 560.414907][ T9309] netlink: 'syz.4.1457': attribute type 4 has an invalid length. [ 561.148949][ T9315] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1458'. [ 561.185360][ T9315] tipc: Enabling of bearer rejected, failed to enable media [ 562.786755][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.793171][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.887729][ T9339] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1467'. [ 563.000429][ T9341] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 563.680732][ T9348] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1471'. [ 563.810939][ T9348] tipc: Enabling of bearer rejected, failed to enable media [ 563.861067][ T9350] ================================================================== [ 563.869165][ T9350] BUG: KASAN: use-after-free in rose_get_neigh+0x17e/0x550 [ 563.876369][ T9350] Read of size 1 at addr ffff888058eca430 by task syz.2.1472/9350 [ 563.884185][ T9350] [ 563.886518][ T9350] CPU: 0 PID: 9350 Comm: syz.2.1472 Not tainted 6.1.137-syzkaller #0 [ 563.894602][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 563.904659][ T9350] Call Trace: [ 563.907941][ T9350] [ 563.910869][ T9350] dump_stack_lvl+0x168/0x22e [ 563.915576][ T9350] ? __lock_acquire+0x7c50/0x7c50 [ 563.920634][ T9350] ? show_regs_print_info+0x12/0x12 [ 563.925853][ T9350] ? load_image+0x3b0/0x3b0 [ 563.930351][ T9350] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 563.935725][ T9350] ? __virt_addr_valid+0x188/0x540 [ 563.940838][ T9350] ? __virt_addr_valid+0x465/0x540 [ 563.945962][ T9350] ? rose_get_neigh+0x17e/0x550 [ 563.950817][ T9350] print_report+0xa8/0x220 [ 563.955237][ T9350] kasan_report+0x10b/0x140 [ 563.959753][ T9350] ? rose_get_neigh+0x17e/0x550 [ 563.964620][ T9350] rose_get_neigh+0x17e/0x550 [ 563.969316][ T9350] rose_connect+0x412/0x1380 [ 563.973908][ T9350] ? aa_sk_perm+0x7e5/0x920 [ 563.978418][ T9350] ? rose_bind+0xa90/0xa90 [ 563.982829][ T9350] ? aa_af_perm+0x200/0x2b0 [ 563.987331][ T9350] ? tomoyo_socket_connect_permission+0x195/0x280 [ 563.993753][ T9350] ? __might_fault+0xa6/0x120 [ 563.998430][ T9350] ? bpf_lsm_socket_connect+0x5/0x10 [ 564.003714][ T9350] ? security_socket_connect+0x7c/0xa0 [ 564.009205][ T9350] ? rose_bind+0xa90/0xa90 [ 564.013641][ T9350] __sys_connect+0x389/0x410 [ 564.018247][ T9350] ? __sys_connect_file+0x170/0x170 [ 564.023475][ T9350] __x64_sys_connect+0x76/0x80 [ 564.028269][ T9350] do_syscall_64+0x4c/0xa0 [ 564.032687][ T9350] ? clear_bhb_loop+0x45/0xa0 [ 564.037360][ T9350] ? clear_bhb_loop+0x45/0xa0 [ 564.042035][ T9350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.047956][ T9350] RIP: 0033:0x7f30f0d8e969 [ 564.052411][ T9350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.072057][ T9350] RSP: 002b:00007f30f1b9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 564.080480][ T9350] RAX: ffffffffffffffda RBX: 00007f30f0fb5fa0 RCX: 00007f30f0d8e969 [ 564.088455][ T9350] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 564.096425][ T9350] RBP: 00007f30f0e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 564.104400][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.112365][ T9350] R13: 0000000000000000 R14: 00007f30f0fb5fa0 R15: 00007fff8ddf3088 [ 564.120427][ T9350] [ 564.123440][ T9350] [ 564.125765][ T9350] Allocated by task 6790: [ 564.130087][ T9350] kasan_set_track+0x4b/0x70 [ 564.134695][ T9350] __kasan_kmalloc+0x8e/0xa0 [ 564.139321][ T9350] rose_add_node+0x227/0xdb0 [ 564.143907][ T9350] rose_rt_ioctl+0xa4c/0xe90 [ 564.148580][ T9350] rose_ioctl+0x27a/0x790 [ 564.152901][ T9350] sock_do_ioctl+0xd3/0x2f0 [ 564.157485][ T9350] sock_ioctl+0x4ed/0x6e0 [ 564.161834][ T9350] __se_sys_ioctl+0xfa/0x170 [ 564.166425][ T9350] do_syscall_64+0x4c/0xa0 [ 564.170843][ T9350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.176745][ T9350] [ 564.179060][ T9350] Freed by task 9324: [ 564.183031][ T9350] kasan_set_track+0x4b/0x70 [ 564.187630][ T9350] kasan_save_free_info+0x2d/0x50 [ 564.192651][ T9350] ____kasan_slab_free+0x126/0x1e0 [ 564.197773][ T9350] slab_free_freelist_hook+0x131/0x1a0 [ 564.203237][ T9350] __kmem_cache_free+0xb6/0x1f0 [ 564.208099][ T9350] rose_rt_device_down+0x3e5/0x430 [ 564.213211][ T9350] rose_device_event+0x600/0x690 [ 564.218165][ T9350] raw_notifier_call_chain+0xcb/0x160 [ 564.223535][ T9350] __dev_notify_flags+0x178/0x2d0 [ 564.228560][ T9350] dev_change_flags+0xe3/0x1a0 [ 564.233409][ T9350] dev_ifsioc+0x159/0xe90 [ 564.237744][ T9350] dev_ioctl+0x578/0xea0 [ 564.241978][ T9350] sock_do_ioctl+0x222/0x2f0 [ 564.246555][ T9350] sock_ioctl+0x4ed/0x6e0 [ 564.250883][ T9350] __se_sys_ioctl+0xfa/0x170 [ 564.255503][ T9350] do_syscall_64+0x4c/0xa0 [ 564.259928][ T9350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.265822][ T9350] [ 564.268138][ T9350] The buggy address belongs to the object at ffff888058eca400 [ 564.268138][ T9350] which belongs to the cache kmalloc-512 of size 512 [ 564.282202][ T9350] The buggy address is located 48 bytes inside of [ 564.282202][ T9350] 512-byte region [ffff888058eca400, ffff888058eca600) [ 564.295395][ T9350] [ 564.297726][ T9350] The buggy address belongs to the physical page: [ 564.304143][ T9350] page:ffffea000163b200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888058ecb800 pfn:0x58ec8 [ 564.315610][ T9350] head:ffffea000163b200 order:2 compound_mapcount:0 compound_pincount:0 [ 564.323955][ T9350] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 564.331970][ T9350] raw: 00fff00000010200 ffffea0000c38608 ffffea000161d208 ffff888017441c80 [ 564.340551][ T9350] raw: ffff888058ecb800 000000000010000c 00000001ffffffff 0000000000000000 [ 564.349122][ T9350] page dumped because: kasan: bad access detected [ 564.355530][ T9350] page_owner tracks the page as allocated [ 564.361232][ T9350] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4256, tgid 4256 (syz-executor), ts 70472601406, free_ts 20393459925 [ 564.382589][ T9350] post_alloc_hook+0x173/0x1a0 [ 564.387364][ T9350] get_page_from_freelist+0x1a26/0x1ac0 [ 564.392926][ T9350] __alloc_pages+0x1df/0x4e0 [ 564.397520][ T9350] alloc_slab_page+0x5d/0x160 [ 564.402216][ T9350] new_slab+0x87/0x2c0 [ 564.406282][ T9350] ___slab_alloc+0xbc6/0x1220 [ 564.410976][ T9350] __kmem_cache_alloc_node+0x1a0/0x260 [ 564.416432][ T9350] __kmalloc_node_track_caller+0x9e/0x230 [ 564.422146][ T9350] __alloc_skb+0x22a/0x7e0 [ 564.426596][ T9350] inet6_netconf_notify_devconf+0x10b/0x1d0 [ 564.432508][ T9350] __addrconf_sysctl_register+0x36c/0x3d0 [ 564.438223][ T9350] addrconf_sysctl_register+0x15c/0x1b0 [ 564.443761][ T9350] ipv6_add_dev+0xbe0/0x1120 [ 564.448345][ T9350] addrconf_notify+0x634/0xf40 [ 564.453152][ T9350] raw_notifier_call_chain+0xcb/0x160 [ 564.458534][ T9350] register_netdevice+0x1600/0x1aa0 [ 564.463740][ T9350] page last free stack trace: [ 564.468401][ T9350] free_unref_page_prepare+0x8b4/0x9a0 [ 564.473860][ T9350] free_unref_page+0x2e/0x3f0 [ 564.478539][ T9350] free_contig_range+0x9d/0x150 [ 564.483383][ T9350] destroy_args+0xef/0x8bf [ 564.487794][ T9350] debug_vm_pgtable+0x32a/0x37e [ 564.492638][ T9350] do_one_initcall+0x214/0x7a0 [ 564.497414][ T9350] do_initcall_level+0x137/0x1e4 [ 564.502389][ T9350] do_initcalls+0x4b/0x8a [ 564.506738][ T9350] kernel_init_freeable+0x3fa/0x5ac [ 564.511941][ T9350] kernel_init+0x19/0x1b0 [ 564.516262][ T9350] ret_from_fork+0x1f/0x30 [ 564.520688][ T9350] [ 564.523007][ T9350] Memory state around the buggy address: [ 564.528685][ T9350] ffff888058eca300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.536744][ T9350] ffff888058eca380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 564.544809][ T9350] >ffff888058eca400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.553237][ T9350] ^ [ 564.558863][ T9350] ffff888058eca480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.566915][ T9350] ffff888058eca500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 564.574970][ T9350] ================================================================== [ 564.583229][ T9350] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 564.590438][ T9350] CPU: 0 PID: 9350 Comm: syz.2.1472 Not tainted 6.1.137-syzkaller #0 [ 564.598519][ T9350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 564.608583][ T9350] Call Trace: [ 564.611872][ T9350] [ 564.614807][ T9350] dump_stack_lvl+0x168/0x22e [ 564.619494][ T9350] ? memcpy+0x3c/0x60 [ 564.623488][ T9350] ? show_regs_print_info+0x12/0x12 [ 564.628698][ T9350] ? load_image+0x3b0/0x3b0 [ 564.633208][ T9350] panic+0x2c9/0x710 [ 564.637113][ T9350] ? asm_common_interrupt+0x22/0x40 [ 564.642314][ T9350] ? bpf_jit_dump+0xd0/0xd0 [ 564.646835][ T9350] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 564.652734][ T9350] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 564.658635][ T9350] ? _raw_spin_unlock+0x40/0x40 [ 564.663500][ T9350] check_panic_on_warn+0x80/0xa0 [ 564.668443][ T9350] ? rose_get_neigh+0x17e/0x550 [ 564.673293][ T9350] end_report+0x66/0x110 [ 564.677539][ T9350] kasan_report+0x118/0x140 [ 564.682049][ T9350] ? rose_get_neigh+0x17e/0x550 [ 564.686906][ T9350] rose_get_neigh+0x17e/0x550 [ 564.691586][ T9350] rose_connect+0x412/0x1380 [ 564.696182][ T9350] ? aa_sk_perm+0x7e5/0x920 [ 564.700687][ T9350] ? rose_bind+0xa90/0xa90 [ 564.705096][ T9350] ? aa_af_perm+0x200/0x2b0 [ 564.709596][ T9350] ? tomoyo_socket_connect_permission+0x195/0x280 [ 564.716019][ T9350] ? __might_fault+0xa6/0x120 [ 564.720692][ T9350] ? bpf_lsm_socket_connect+0x5/0x10 [ 564.725975][ T9350] ? security_socket_connect+0x7c/0xa0 [ 564.731434][ T9350] ? rose_bind+0xa90/0xa90 [ 564.735842][ T9350] __sys_connect+0x389/0x410 [ 564.740436][ T9350] ? __sys_connect_file+0x170/0x170 [ 564.745642][ T9350] __x64_sys_connect+0x76/0x80 [ 564.750404][ T9350] do_syscall_64+0x4c/0xa0 [ 564.754815][ T9350] ? clear_bhb_loop+0x45/0xa0 [ 564.759481][ T9350] ? clear_bhb_loop+0x45/0xa0 [ 564.764151][ T9350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.770536][ T9350] RIP: 0033:0x7f30f0d8e969 [ 564.774953][ T9350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.794565][ T9350] RSP: 002b:00007f30f1b9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 564.802983][ T9350] RAX: ffffffffffffffda RBX: 00007f30f0fb5fa0 RCX: 00007f30f0d8e969 [ 564.811045][ T9350] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 564.819019][ T9350] RBP: 00007f30f0e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 564.826986][ T9350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.834952][ T9350] R13: 0000000000000000 R14: 00007f30f0fb5fa0 R15: 00007fff8ddf3088 [ 564.842928][ T9350] [ 564.846208][ T9350] Kernel Offset: disabled [ 564.850531][ T9350] Rebooting in 86400 seconds..