last executing test programs: 56.933176727s ago: executing program 0 (id=106): socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224-arm64)\x00'}, 0xfffffffffffffd9a) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8101) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r1}) read$eventfd(r1, &(0x7f0000000040), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0185649, &(0x7f0000000700)={0x4, 0x5, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x980913, 0x80000000, '\x00', @value64=0x8000000000ee}}) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000000)=0x2) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x8, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0xa, 0x2, 0x5, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x41, 0x3, 0xffffffffffffffff, 0x1, 0x1ed40, 0x6, 0x1ff, 0x6, 0x7, 0xfffffffffffffff7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x1, 0x4, 0x1, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x0, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x2, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1801000, 0x5, 0x0, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x9, 0x100000000000006, 0xca4f, 0x3f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x6, 0x201, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x3, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x40007, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x1d68a423, 0x5, 0x7, 0xfffffffffffff000, 0x8, 0x7ffd, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x100000001, 0x8, 0x80000000005, 0x6, 0x20000000004, 0xc3, 0x7f, 0xffffffff]}) preadv2(r4, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) 51.062015467s ago: executing program 0 (id=117): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x40}}, 0x2) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000007b01300000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x52, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) io_uring_setup(0x1234, &(0x7f00000004c0)={0x0, 0x0, 0x800, 0xffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 43.923971902s ago: executing program 0 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r6, 0x400, 0x0) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f001, 0x4}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r9, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 42.261610546s ago: executing program 0 (id=138): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="05000000010001", 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') openat$binfmt(0xffffff9c, r6, 0x41, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) r8 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000640)=""/212, 0xd4}], 0x1, 0x6, 0x0) 38.517106646s ago: executing program 0 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 38.202764067s ago: executing program 0 (id=156): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005540)=""/99, 0x63}, 0x38}], 0x4, 0x40000120, 0x0) 22.437844304s ago: executing program 32 (id=156): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r3 = gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005540)=""/99, 0x63}, 0x38}], 0x4, 0x40000120, 0x0) 13.406587386s ago: executing program 3 (id=214): setresuid(0xee01, 0xee00, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) 13.180173378s ago: executing program 3 (id=215): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x8000000, r1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000980), 0xe) ioctl$SIOCGSKNS(r4, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079116f9d8a75a5d264c50573cfa429"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 12.35273082s ago: executing program 3 (id=216): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xd4, 0x30, 0x1, 0x3, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}, @TCA_CT_LABELS={0x14, 0x7, "e21c3b54a08da892a07ae9800bc7bd86"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_LABELS={0x14, 0x7, "bbbeb2969139879575baf9847a7c7f65"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 9.182326393s ago: executing program 2 (id=222): r0 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000100)=0x9) 6.971570932s ago: executing program 2 (id=223): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x400, 0x6}}, './file0\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c8402, 0x61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1ca4002e000800450800640000000000069078ac1e00010a01010040010000f331cb12a07e50771d19774283bc2fb23f5fccbd8b71a534b2a2a0f8581685b93614b495e261c0cf5b09abcf152ffeda938a5dd950ba11642cf4d24b2e74170af93ce7d1c5aeb663fd317b88f9ea75cc29ab38e3f57d13b613006f905196649c3a1801bae850f250440e1aeb277df91256eeaf79d4752ecc7ee6be52db000504bcdeec23aee96f7549402d1affa9e9fd73fd218593c071e35c38cea0a5bd2bd5e3acf355d1584fc4733202e689b7fd156164dd516d75e3f487ca3c45", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0c200000907800041312623eebe039a1f617fd02722e3486ebd9220e08ca2b9eeee06f0dbb0e7b7f2209fbe0ab86626c280000000c9b3c0757f7522d6122ad9e41f5433e"], 0x0) r3 = socket(0x22, 0x2, 0x3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000002c00)={'ip6tnl0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @remote}}) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 6.564259202s ago: executing program 2 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffe6, 0xb}, {0xb, 0x3df993a52ee636f9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x3, 0x8, 0x8001, 0x3, 0x0, 0x1, 0x7, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4004000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.535891305s ago: executing program 1 (id=226): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000006040000000000000001000085adb90000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000300)=0x7, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) 6.394967268s ago: executing program 1 (id=227): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000240)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}]}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x31402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x7, 0x9, 0x0, 0xf, 0x80000006, 0x800000000}, 0x0, 0x0) 6.343733913s ago: executing program 4 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001ec0), r4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r6, 0x400, 0x0) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f001, 0x4}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 3.604414864s ago: executing program 4 (id=229): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="05000000010001", 0x7) 3.54653108s ago: executing program 4 (id=230): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b3", 0x1, 0x24000084, 0x0, 0x0) 3.449186189s ago: executing program 3 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB="2ea6117134e7c1290e97be85735145346e5c23b75d9d1fdb6c2971f98c7be13f5f95f3e0c65b2823d825dfb0f6d4a6df025f8d6c9cd1275a8b43f8686c9c4189ec9e9ad6fcacedc33c2339ecfac32bdb892de1da06722b0a60fe1073912d45d1146ee66a90f5568645d745e31340e25356d19b976bb9e9605d59367304015a923b86cf31331c2a4ebf70cecd1470111b141454e560ef3a51f5d972a663573f4a9d3c2fb047d27348167cbc4846b24397ae3149", @ANYRES32=r0, @ANYRES64], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdn', @ANYRESHEX]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$ptp0(0xffffff9c, &(0x7f0000001500), 0x1, 0x0) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f0000001540)={'\x00', 0xea49, 0x0, 0x7208}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x12, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 3.409068104s ago: executing program 1 (id=232): r0 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000100)=0x9) 3.308253553s ago: executing program 4 (id=233): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1eb482, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000080), 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000180)='GPL\x00', 0x3, 0x4e, &(0x7f00000003c0)=""/78, 0x3236054959490c78, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x5, 0xffffff66, 0x6}, 0x10, 0x1616f, 0xffffffffffffffff, 0x4, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2], &(0x7f0000000c40)=[{0x4, 0x2, 0x4}, {0x0, 0x2, 0xa, 0x1}, {0x2, 0x4, 0x5, 0x2}, {0x0, 0x1, 0xf, 0xb}], 0x10, 0x2c}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.263086358s ago: executing program 1 (id=234): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x400, 0x6}}, './file0\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c8402, 0x61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1ca4002e000800450800640000000000069078ac1e00010a01010040010000f331cb12a07e50771d19774283bc2fb23f5fccbd8b71a534b2a2a0f8581685b93614b495e261c0cf5b09abcf152ffeda938a5dd950ba11642cf4d24b2e74170af93ce7d1c5aeb663fd317b88f9ea75cc29ab38e3f57d13b613006f905196649c3a1801bae850f250440e1aeb277df91256eeaf79d4752ecc7ee6be52db000504bcdeec23aee96f7549402d1affa9e9fd73fd218593c071e35c38cea0a5bd2bd5e3acf355d1584fc4733202e689b7fd156164dd516d75e3f487ca3c45", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0c200000907800041312623eebe039a1f617fd02722e3486ebd9220e08ca2b9eeee06f0dbb0e7b7f2209fbe0ab86626c280000000c9b3c0757f7522d6122ad9e41f5433e"], 0x0) r3 = socket(0x22, 0x2, 0x3) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000002c00)={'ip6tnl0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @remote}}) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2.847833289s ago: executing program 3 (id=235): socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) mq_open(0x0, 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbfe, {0x2, 0x1, 0x1, 0x0, 0x9, 0x1, 0x3ff, 0x6, 0x0, 0x7fffffff, 0x8}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) 2.184779124s ago: executing program 4 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1000, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000ac00)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000406, 0x1, 0xc, 0x0, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91c, 0xa000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x24, 0x0, 0xffffffffc0416010, 0x20}}, 0x50) 2.170186635s ago: executing program 2 (id=237): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x52b242d) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000440)={'syz', 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1600000800400000040000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRESDEC, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) 456.148785ms ago: executing program 3 (id=238): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900", 0x3}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x50) mq_notify(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x48a, &(0x7f0000000100)={0x0, 0xd3df, 0x100, 0x2, 0x3bc, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000300)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x42, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x8001, 0x7, 0x9, 0x800e8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x1, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x7fff, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0xf5c1, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x8320fb05, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x8, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x744, 0x4, 0x12, 0x4, 0x10, 0x7fff, 0x2, 0xfffffff8, 0x401, 0xf, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) readv(r5, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) recvfrom$inet(r0, &(0x7f0000000040)=""/60, 0x3c, 0x10040, 0x0, 0x0) 341.736797ms ago: executing program 1 (id=239): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="05000000010001", 0x7) 304.78488ms ago: executing program 1 (id=240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) 269.869763ms ago: executing program 2 (id=241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000f80)="167049c80fbd057dc6e296d3734ad1fc35f5ea14b6947e0b5a92e4ec82c1da06d559eeb0fc2a23be0b1befc43cc13eaeef88100e0576e14b12180efaaec352115f", 0x41) 57.625494ms ago: executing program 4 (id=242): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000240)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3}]}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x31402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x8000000, 0x0, 0x3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x7, 0x9, 0x0, 0xf, 0x80000006, 0x800000000}, 0x0, 0x0) 0s ago: executing program 2 (id=243): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) syz_emit_ethernet(0xa6, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x70, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1c, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5}, @md5sig={0x13, 0x12, "ca0c73a263a2ef1df706fbd1dd9500"}, @md5sig={0x13, 0x12, "38da0615cb47e300b6c11a585dc53925"}, @md5sig={0x13, 0x12, "2bdd4b74a18800000010000000002000"}, @timestamp={0x8, 0xa}, @generic={0x0, 0xf, "09c910cf857a3cd90dc17ef2a4"}]}}}}}}}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 58.707024][ T4171] cgroup: Unknown subsys name 'net' [ 58.846235][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.349078][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.322055][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.438675][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 62.485883][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 62.507822][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.515654][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.524105][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.553510][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.560937][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.569078][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.577116][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.649073][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.667490][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.689005][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.716980][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.724789][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.732852][ T4181] device bridge_slave_0 entered promiscuous mode [ 62.771599][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.778771][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.787315][ T4181] device bridge_slave_1 entered promiscuous mode [ 62.797480][ T4185] team0: Port device team_slave_0 added [ 62.818772][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.826389][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.834873][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.852771][ T4185] team0: Port device team_slave_1 added [ 62.870871][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.877976][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.886316][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.913118][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.920319][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.928148][ T4192] device bridge_slave_0 entered promiscuous mode [ 62.946409][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.967480][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.974740][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.983010][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.006985][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.025442][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.032608][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.058622][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.087966][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.105247][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.112355][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.138387][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.160001][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.170763][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.182327][ T4181] team0: Port device team_slave_0 added [ 63.199089][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.206308][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.214496][ T4194] device bridge_slave_0 entered promiscuous mode [ 63.224412][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.235574][ T4181] team0: Port device team_slave_1 added [ 63.253403][ T4189] team0: Port device team_slave_0 added [ 63.263741][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.270896][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.278735][ T4194] device bridge_slave_1 entered promiscuous mode [ 63.307339][ T4189] team0: Port device team_slave_1 added [ 63.368146][ T4192] team0: Port device team_slave_0 added [ 63.376130][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.383229][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.409572][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.423102][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.430521][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.456503][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.476610][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.483713][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.510005][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.522883][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.533523][ T4192] team0: Port device team_slave_1 added [ 63.547989][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.554942][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.571220][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.578187][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.604429][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.617203][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.668739][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.675965][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.702092][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.737003][ T4194] team0: Port device team_slave_0 added [ 63.743613][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.751073][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.777223][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.810002][ T4194] team0: Port device team_slave_1 added [ 63.835701][ T4181] device hsr_slave_0 entered promiscuous mode [ 63.843536][ T4181] device hsr_slave_1 entered promiscuous mode [ 63.850552][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.859237][ T4181] Cannot create hsr debugfs directory [ 63.871654][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.878576][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.885807][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.894002][ T4189] Cannot create hsr debugfs directory [ 63.921008][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.927990][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.954079][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.980103][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 63.987111][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 63.995015][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.003156][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.029558][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.059759][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 64.065845][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 64.066055][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 64.108455][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.115626][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.122471][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.130170][ T4192] Cannot create hsr debugfs directory [ 64.171869][ T4194] device hsr_slave_0 entered promiscuous mode [ 64.179595][ T4194] device hsr_slave_1 entered promiscuous mode [ 64.186924][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.195129][ T4194] Cannot create hsr debugfs directory [ 64.406920][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.428009][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.437126][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.465679][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.556895][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.580839][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.603767][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.614000][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.647272][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.662844][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.679192][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.693764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.704065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.723090][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.733832][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.755554][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.790505][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.800834][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.810119][ T509] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.817407][ T509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.832543][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.841175][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.850505][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.859120][ T509] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.866291][ T509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.900787][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.912346][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.922830][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.934234][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.943774][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.976665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.011607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.021207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.032404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.060151][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.070382][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.095520][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.108443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.117467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.129924][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.142843][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.154652][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.163557][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.173323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.182562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.201240][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.210832][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.223949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.232148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.246875][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.257612][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.279478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.295768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.306207][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.313376][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.323268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.338717][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.357086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.365623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.374942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.385927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.395093][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.402222][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.411428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.447495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.463358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.477150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.487584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.497178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.506368][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.513522][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.524250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.533822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.570560][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.577648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.587158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.596312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.605527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.614504][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.621636][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.629973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.638680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.646770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.654684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.664394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.673305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.685006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.697324][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.714442][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.746189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.762214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.779227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.795399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.804908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.815031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.824246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.844695][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.861198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.871893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.881885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.890925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.903934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.919133][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.944042][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.983678][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.002654][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.009808][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.059996][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 66.066479][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 66.080653][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.088800][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.098898][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.107792][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.114942][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.126563][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.145818][ T4243] Bluetooth: hci4: command 0x041b tx timeout [ 66.153388][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.161680][ T4243] Bluetooth: hci2: command 0x041b tx timeout [ 66.179630][ T4243] Bluetooth: hci3: command 0x041b tx timeout [ 66.186794][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.205208][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.219209][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.255189][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.266168][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.274146][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.283632][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.293057][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.302161][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.310807][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.319118][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.328185][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.344864][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.354738][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.376122][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.386769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.395772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.410917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.418471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.443965][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.454360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.465147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.502155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.511705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.522775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.531868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.541274][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.548384][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.556552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.566042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.575159][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.582345][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.590661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.641312][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.658156][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.668388][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.678137][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.687619][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.698535][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.707531][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.717362][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.726668][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.749626][ T4185] device veth0_vlan entered promiscuous mode [ 66.756472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.766924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.788742][ T4181] device veth0_vlan entered promiscuous mode [ 66.804831][ T4185] device veth1_vlan entered promiscuous mode [ 66.820603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.828745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.837636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.847511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.856909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.866103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.876459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.885114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.893731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.902022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.910419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.918679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.930696][ T4189] device veth0_vlan entered promiscuous mode [ 66.945857][ T4181] device veth1_vlan entered promiscuous mode [ 66.962365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.972115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.981793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.991368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.998870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.012155][ T4189] device veth1_vlan entered promiscuous mode [ 67.023521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.031838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.041022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.064878][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.081641][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.094335][ T4185] device veth0_macvtap entered promiscuous mode [ 67.109072][ T4181] device veth0_macvtap entered promiscuous mode [ 67.120684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.129092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.139111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.147947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.156900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.165933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.177406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.186188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.199613][ T4185] device veth1_macvtap entered promiscuous mode [ 67.213985][ T4181] device veth1_macvtap entered promiscuous mode [ 67.238419][ T4189] device veth0_macvtap entered promiscuous mode [ 67.255668][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.266874][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.276215][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.287340][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.296513][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.306062][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.315464][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.331704][ T4189] device veth1_macvtap entered promiscuous mode [ 67.362853][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.372490][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.383743][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.392865][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.402592][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.411731][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.422780][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.445890][ T4192] device veth0_vlan entered promiscuous mode [ 67.455874][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.468954][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.481862][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.492287][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.508647][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.517702][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.527136][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.540695][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.552041][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.562216][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.573233][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.584743][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.601434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.612002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.621181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.630165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.638846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.647934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.672905][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.684541][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.696832][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.706384][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.718453][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.731882][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.743435][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.754580][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.763267][ T4192] device veth1_vlan entered promiscuous mode [ 67.772210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.781085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.789144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.797596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.805508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.813794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.823157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.833117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.842999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.859246][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.869546][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.878277][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.887134][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.902706][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.912688][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.921626][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.930709][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.948970][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.063729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.078051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.087534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.100481][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.109863][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.133076][ T4192] device veth0_macvtap entered promiscuous mode [ 68.150279][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 68.156405][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 68.158190][ T4192] device veth1_macvtap entered promiscuous mode [ 68.224845][ T4194] device veth0_vlan entered promiscuous mode [ 68.237599][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 68.238077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.243999][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 68.253124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.265966][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 68.266628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.281774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.293651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.302402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.311829][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.320375][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.327285][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.340987][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.348257][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.359165][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.369565][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.381173][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.393209][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.412555][ T4194] device veth1_vlan entered promiscuous mode [ 68.423102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.432099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.440617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.449232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.465786][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.478747][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.489038][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.501749][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.512036][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.523302][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.534828][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.549588][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.558327][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.567373][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.576127][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.597485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.607421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.622375][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.640980][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.672167][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.681849][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.689966][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.701793][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.720058][ T4194] device veth0_macvtap entered promiscuous mode [ 68.736678][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.751856][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.762171][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.770722][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.781508][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.803665][ T4194] device veth1_macvtap entered promiscuous mode [ 68.825183][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.840145][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.869293][ T509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.877938][ T509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.952962][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.970493][ T509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.978993][ T509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.980119][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.996625][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.007228][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.017252][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.038525][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.056387][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.067327][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.106280][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.125157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.135933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.214190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.288475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.340240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 69.349612][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #242!!! [ 69.428374][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.442607][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 69.452074][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.546839][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.691382][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.728560][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.750147][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 69.874930][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.941983][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.995774][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.055198][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.066318][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 70.095028][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 70.141292][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.150414][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 70.160375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 70.178612][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.272874][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.365885][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 70.372257][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 70.378348][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 70.384647][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 70.391008][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 70.430155][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.468540][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.469099][ T4304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.481404][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.501980][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.517508][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.528150][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.537483][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.546609][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.587055][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.639232][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.685622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.851350][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.877718][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.951912][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.963790][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.974725][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.988382][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.438118][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.445203][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.061327][ T4318] device wireguard0 entered promiscuous mode [ 73.523676][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.856525][ T4343] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.023288][ T4344] block device autoloading is deprecated and will be removed. [ 75.262156][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 75.657093][ T4354] netlink: 'syz.2.13': attribute type 10 has an invalid length. [ 75.781989][ T4354] batman_adv: batadv0: Adding interface: wlan0 [ 75.795591][ T4354] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.822036][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.830743][ T4354] batman_adv: batadv0: Interface activated: wlan0 [ 75.854893][ T4349] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 76.019683][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.133043][ T4361] tipc: Can't bind to reserved service type 1 [ 76.381320][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.352748][ T4364] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 77.454434][ T4362] fuse: Bad value for 'fd' [ 78.577311][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.587294][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.600546][ T7] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.610148][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.635184][ T4365] bond0: option mode: unable to set because the bond device has slaves [ 78.635400][ T7] usb 5-1: config 0 descriptor?? [ 78.840346][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 78.846778][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 78.856117][ T4370] bridge0: port 3(syz_tun) entered blocking state [ 78.877162][ T4370] bridge0: port 3(syz_tun) entered disabled state [ 78.887721][ T4370] device syz_tun entered promiscuous mode [ 78.904228][ T4370] bridge0: port 3(syz_tun) entered blocking state [ 78.911308][ T4370] bridge0: port 3(syz_tun) entered forwarding state [ 79.046545][ T7] usb 5-1: USB disconnect, device number 2 [ 79.097295][ T4376] netlink: 'syz.2.17': attribute type 10 has an invalid length. [ 79.118401][ T4376] bridge0: port 3(syz_tun) entered disabled state [ 79.125424][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.133676][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.253712][ T4376] bridge0: port 3(syz_tun) entered blocking state [ 79.260397][ T4376] bridge0: port 3(syz_tun) entered forwarding state [ 79.268230][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.275462][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.282846][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.289999][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.329280][ T4376] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 79.588424][ T4374] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 80.643450][ T4376] syz.2.17 (4376) used greatest stack depth: 21024 bytes left [ 81.149899][ T4374] infiniband {yz1: set active [ 81.155361][ T4374] infiniband {yz1: added syz_tun [ 81.177656][ T4374] infiniband {yz1: Couldn't open port 1 [ 81.267345][ T4374] RDS/IB: {yz1: added [ 81.272917][ T4374] smc: adding ib device {yz1 with port count 1 [ 81.279900][ T4374] smc: ib device {yz1 port 1 has pnetid [ 81.539450][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.679316][ T4400] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 82.860850][ T13] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 82.900694][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.950747][ T13] usb 2-1: Product: syz [ 82.980449][ T13] usb 2-1: Manufacturer: syz [ 82.985076][ T13] usb 2-1: SerialNumber: syz [ 83.052042][ T13] usb 2-1: config 0 descriptor?? [ 83.452473][ T13] usb 2-1: USB disconnect, device number 2 [ 84.972245][ T4420] sched: RT throttling activated [ 85.574407][ T4414] binder: 4404:4414 ioctl 50009401 200000000700 returned -22 [ 86.214643][ T4426] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.702927][ T1111] cfg80211: failed to load regulatory.db [ 89.748794][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 93.311778][ T4451] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 93.480799][ T4451] bridge0: port 3(syz_tun) entered disabled state [ 93.524644][ T4451] infiniband {yz1: set down [ 93.805264][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.812811][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.639900][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.850267][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.008994][ T4503] Zero length message leads to an empty skb [ 98.720881][ T4451] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.731334][ T4451] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.740825][ T4451] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.750123][ T4451] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.890723][ T4451] batman_adv: batadv0: Interface deactivated: wlan0 [ 98.931060][ T4458] batman_adv: batadv0: Adding interface: dummy0 [ 98.938347][ T4458] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.971336][ T4458] batman_adv: batadv0: Interface activated: dummy0 [ 98.990562][ T4461] batadv0: mtu less than device minimum [ 99.008203][ T4461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.020375][ T4461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.032299][ T4461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.044075][ T4461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.055971][ T4461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.067811][ T4461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.079959][ T4461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.091814][ T4461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.103692][ T4461] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 99.450639][ T4511] binder: 4506:4511 ioctl 0 200000000040 returned -22 [ 99.910658][ T4451] syz.2.39 (4451) used greatest stack depth: 20320 bytes left [ 101.240596][ T26] audit: type=1326 audit(1760773067.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2118b6ffc9 code=0x7ffc0000 [ 101.373443][ T26] audit: type=1326 audit(1760773067.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f2118b6ffc9 code=0x7ffc0000 [ 101.548272][ T26] audit: type=1326 audit(1760773067.950:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4543 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2118b6ffc9 code=0x7ffc0000 [ 104.821938][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 105.169442][ T4241] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.358885][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.402465][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.539816][ T4570] net_ratelimit: 10 callbacks suppressed [ 105.539828][ T4570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.609769][ T4241] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 105.625446][ T4576] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 105.645684][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.677556][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.708236][ T4241] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 105.830143][ T4241] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 105.869522][ T4241] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 105.938704][ T4241] usb 4-1: Manufacturer: syz [ 105.995996][ T4241] usb 4-1: config 0 descriptor?? [ 106.336538][ T4589] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 106.416282][ T4589] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.423808][ T4589] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.503398][ T4241] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 106.547343][ T4241] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 106.660701][ T4241] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 107.866793][ T4241] usb 4-1: USB disconnect, device number 2 [ 108.253656][ T4617] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.535654][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 108.627691][ T4625] netlink: 'syz.3.84': attribute type 27 has an invalid length. [ 110.565550][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.573332][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.186081][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.262034][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.215681][ T4625] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.228712][ T4625] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.238266][ T4625] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.250324][ T4625] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.466386][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 113.497764][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.506568][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.567901][ T4650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.856452][ T4671] device bond0 entered promiscuous mode [ 114.946340][ T4671] device bond_slave_0 entered promiscuous mode [ 115.004718][ T4671] device bond_slave_1 entered promiscuous mode [ 115.073970][ T4671] device dummy0 entered promiscuous mode [ 115.094356][ T4671] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 115.114452][ T4671] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 115.151048][ T4671] device hsr1 entered promiscuous mode [ 115.195384][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.479471][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 115.626300][ T13] usb 5-1: config 0 has no interfaces? [ 115.632529][ T13] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 115.679410][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.706314][ T4686] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 115.760502][ T13] usb 5-1: config 0 descriptor?? [ 116.011403][ T4287] usb 5-1: USB disconnect, device number 3 [ 116.839456][ T4690] netlink: 132 bytes leftover after parsing attributes in process `syz.3.103'. [ 116.859086][ T4686] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 116.867950][ T4686] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 118.246188][ T26] audit: type=1326 audit(1760773084.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 119.899731][ T26] audit: type=1326 audit(1760773084.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 120.121410][ T26] audit: type=1326 audit(1760773084.960:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 120.325701][ T26] audit: type=1326 audit(1760773084.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 120.541416][ T26] audit: type=1326 audit(1760773084.960:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 120.628434][ T4712] netlink: 'syz.2.109': attribute type 16 has an invalid length. [ 120.713526][ T4712] netlink: 'syz.2.109': attribute type 17 has an invalid length. [ 120.764065][ T26] audit: type=1326 audit(1760773084.960:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 120.948330][ T26] audit: type=1326 audit(1760773084.960:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 120.971879][ T26] audit: type=1326 audit(1760773084.960:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 121.001127][ T26] audit: type=1326 audit(1760773084.960:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 121.003995][ T4712] rdma_rxe: ignoring netdev event = 14 for syz_tun [ 121.023915][ T26] audit: type=1326 audit(1760773084.960:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4696 comm="syz.3.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1952c22fc9 code=0x7ffc0000 [ 121.246520][ T4712] infiniband {yz1: set active [ 121.301633][ T4712] infiniband {yz1: set active [ 121.391821][ T4712] bridge0: port 3(syz_tun) entered blocking state [ 121.398443][ T4712] bridge0: port 3(syz_tun) entered forwarding state [ 121.429505][ T4287] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.510458][ T4712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.550382][ T4504] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 121.571566][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.621454][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.719762][ T4712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.792299][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 121.849806][ T4287] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.879520][ T4287] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 121.994971][ T4287] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.082443][ T4287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 122.157552][ T4287] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 122.233110][ T4720] tipc: Started in network mode [ 122.254564][ T4720] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 122.276434][ T4720] tipc: Enabled bearer , priority 10 [ 122.369648][ T4287] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.416427][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.445731][ T4287] usb 4-1: Product: syz [ 122.467776][ T4287] usb 4-1: Manufacturer: syz [ 122.660716][ T4287] cdc_wdm 4-1:1.0: skipping garbage [ 122.665961][ T4287] cdc_wdm 4-1:1.0: skipping garbage [ 122.688357][ T4287] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 122.695717][ T4287] cdc_wdm 4-1:1.0: Unknown control protocol [ 123.886213][ T4182] tipc: Node number set to 1 [ 124.020377][ T1111] usb 4-1: USB disconnect, device number 3 [ 124.764610][ T4743] 9pnet: Insufficient options for proto=fd [ 128.679460][ T4287] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.870725][ T4771] tipc: Started in network mode [ 128.875662][ T4771] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 128.989019][ T4771] tipc: Enabled bearer , priority 10 [ 130.268210][ T1111] tipc: Node number set to 1 [ 132.856946][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.656776][ T4822] tipc: Enabling of bearer rejected, already enabled [ 136.733935][ T4860] tipc: Started in network mode [ 136.769480][ T4860] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 136.796067][ T4860] tipc: Enabled bearer , priority 10 [ 137.152871][ T4869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 137.399709][ T2301] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 137.789754][ T4886] input: syz1 as /devices/virtual/input/input7 [ 139.139778][ T2301] usb 1-1: config 0 has no interfaces? [ 140.721101][ T4242] tipc: Node number set to 1 [ 140.780418][ T4883] 9pnet_virtio: no channels available for device syz [ 142.777948][ T4914] tipc: Enabling of bearer rejected, already enabled [ 143.613002][ T4939] input: syz1 as /devices/virtual/input/input8 [ 144.779800][ T2301] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 144.985504][ T2301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.099410][ T2301] usb 1-1: Product: syz [ 145.153444][ T2301] usb 1-1: Manufacturer: syz [ 145.302381][ T2301] usb 1-1: config 0 descriptor?? [ 145.379790][ T2301] usb 1-1: can't set config #0, error -32 [ 147.522812][ T4953] netlink: 68 bytes leftover after parsing attributes in process `syz.1.178'. [ 147.538309][ T4953] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 147.546773][ T4953] netlink: 24 bytes leftover after parsing attributes in process `syz.1.178'. [ 149.778158][ T4968] tipc: Started in network mode [ 149.824913][ T4968] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 149.843583][ T4968] tipc: Enabled bearer , priority 10 [ 150.840425][ T4182] tipc: Node number set to 1 [ 151.316055][ T4986] netlink: 'syz.2.188': attribute type 1 has an invalid length. syzkaller syzkaller login: [ 154.608833][ T4992] chnl_net:caif_netlink_parms(): no params data found [ 154.960064][ T4992] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.967454][ T4992] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.980366][ T4992] device bridge_slave_0 entered promiscuous mode [ 155.018251][ T4992] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.044978][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.073983][ T4992] device bridge_slave_1 entered promiscuous mode [ 155.182528][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 155.255344][ T4992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.286867][ T4992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.405116][ T4992] team0: Port device team_slave_0 added [ 155.431202][ T4992] team0: Port device team_slave_1 added [ 155.585127][ T4992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.606264][ T4992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.632461][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.701576][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 155.734136][ T4992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.805203][ T4992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.842757][ T4992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.953980][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 155.962699][ T4992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.079659][ T21] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.109516][ T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.219676][ T21] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.251488][ T21] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.299422][ T21] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.332700][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.475964][ T4992] device hsr_slave_0 entered promiscuous mode [ 156.516940][ T4992] device hsr_slave_1 entered promiscuous mode [ 156.536500][ T4992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.566497][ T4992] Cannot create hsr debugfs directory [ 156.679641][ T21] usb 3-1: GET_CAPABILITIES returned 0 [ 156.685274][ T21] usbtmc 3-1:16.0: can't read capabilities [ 156.907834][ T4312] usb 3-1: USB disconnect, device number 2 [ 157.305367][ T4312] Bluetooth: hci5: command 0x041b tx timeout [ 159.025115][ T4992] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.508500][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 159.573008][ T4992] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.631039][ T4992] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.904898][ T4992] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.125057][ T5053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 160.684277][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.705597][ T5053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.714506][ T5053] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.790638][ T5053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.853658][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 160.860259][ T1111] Bluetooth: hci5: command 0x040f tx timeout [ 161.357397][ T4992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.447071][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.485362][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.549012][ T4992] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.650791][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.695260][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.744676][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.751861][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.859786][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.949244][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.991674][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.013454][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.020953][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.322817][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.335389][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.411663][ T4992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.497410][ T4992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.580573][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.622007][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.680026][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.710489][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.740064][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.780339][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.809257][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.850318][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.939956][ T1111] Bluetooth: hci5: command 0x0419 tx timeout [ 162.999815][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.008015][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.129521][ T4243] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.174611][ T4228] usb 1-1: USB disconnect, device number 3 [ 163.201879][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.237519][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.298975][ T4992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.511744][ T4243] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 163.538499][ T4243] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.563679][ T4243] usb 4-1: config 0 interface 0 has no altsetting 0 [ 163.973887][ T4243] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.983654][ T4243] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 163.994493][ T4243] usb 4-1: Product: syz [ 163.998843][ T4243] usb 4-1: Manufacturer: syz [ 164.006122][ T4243] usb 4-1: SerialNumber: syz [ 164.026451][ T4243] usb 4-1: config 0 descriptor?? [ 164.750162][ T4243] hub 4-1:0.0: bad descriptor, ignoring hub [ 164.759398][ T4243] hub: probe of 4-1:0.0 failed with error -5 [ 164.793437][ T4243] usb 4-1: selecting invalid altsetting 0 [ 165.953771][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.990882][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.390341][ T5116] input: syz1 as /devices/virtual/input/input9 [ 167.837363][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.898945][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.089729][ T4992] device veth0_vlan entered promiscuous mode [ 168.195770][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.221167][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.298064][ T4992] device veth1_vlan entered promiscuous mode [ 168.524659][ T4992] device veth0_macvtap entered promiscuous mode [ 168.547415][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.617268][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.676781][ T4992] device veth1_macvtap entered promiscuous mode [ 168.692511][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.711834][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.769019][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.836788][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.857129][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.616921][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.015711][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.129262][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.352836][ T4992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.363372][ T5136] tipc: Enabled bearer , priority 0 [ 171.380235][ T5140] device syzkaller0 entered promiscuous mode [ 171.460327][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.540029][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.619663][ T4228] usb 4-1: USB disconnect, device number 4 [ 171.632322][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.700109][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.759545][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.797670][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.839012][ T4992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.869626][ T4992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.103381][ T4992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.111350][ T5140] tipc: Resetting bearer [ 172.155189][ T5140] tipc: Disabling bearer [ 172.170809][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.187494][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.205743][ T4992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.225015][ T4992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.235380][ T4992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.268108][ T4992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.048904][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.089990][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.152001][ T5187] input: syz1 as /devices/virtual/input/input10 [ 175.199205][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.215425][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.259271][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.507692][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.676005][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 176.117936][ T5191] [ 176.120319][ T5191] ====================================================== [ 176.127438][ T5191] WARNING: possible circular locking dependency detected [ 176.134589][ T5191] syzkaller #0 Not tainted [ 176.139040][ T5191] ------------------------------------------------------ [ 176.146441][ T5191] syz.2.243/5191 is trying to acquire lock: [ 176.152443][ T5191] ffff8880740b7120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 176.161898][ T5191] [ 176.161898][ T5191] but task is already holding lock: [ 176.169370][ T5191] ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 176.178054][ T5191] [ 176.178054][ T5191] which lock already depends on the new lock. [ 176.178054][ T5191] [ 176.188786][ T5191] [ 176.188786][ T5191] the existing dependency chain (in reverse order) is: [ 176.197823][ T5191] [ 176.197823][ T5191] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 176.205066][ T5191] __mutex_lock_common+0x1eb/0x2390 [ 176.210820][ T5191] mutex_lock_nested+0x17/0x20 [ 176.216141][ T5191] ax25_setsockopt+0x830/0xa40 [ 176.221464][ T5191] __sys_setsockopt+0x2bf/0x3d0 [ 176.226871][ T5191] __x64_sys_setsockopt+0xb1/0xc0 [ 176.232528][ T5191] do_syscall_64+0x4c/0xa0 [ 176.237494][ T5191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.244018][ T5191] [ 176.244018][ T5191] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 176.251888][ T5191] __lock_acquire+0x2c33/0x7c60 [ 176.257294][ T5191] lock_acquire+0x197/0x3f0 [ 176.262441][ T5191] lock_sock_nested+0x44/0x100 [ 176.267770][ T5191] ax25_device_event+0x217/0x4f0 [ 176.273610][ T5191] raw_notifier_call_chain+0xcb/0x160 [ 176.279554][ T5191] __dev_notify_flags+0x178/0x2d0 [ 176.285139][ T5191] dev_change_flags+0xe3/0x1a0 [ 176.290446][ T5191] dev_ifsioc+0x147/0xe70 [ 176.295330][ T5191] dev_ioctl+0x55f/0xe50 [ 176.300129][ T5191] sock_do_ioctl+0x222/0x2f0 [ 176.305265][ T5191] sock_ioctl+0x4ed/0x6e0 [ 176.310138][ T5191] __se_sys_ioctl+0xfa/0x170 [ 176.315273][ T5191] do_syscall_64+0x4c/0xa0 [ 176.320229][ T5191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.326662][ T5191] [ 176.326662][ T5191] other info that might help us debug this: [ 176.326662][ T5191] [ 176.336902][ T5191] Possible unsafe locking scenario: [ 176.336902][ T5191] [ 176.344690][ T5191] CPU0 CPU1 [ 176.350075][ T5191] ---- ---- [ 176.355545][ T5191] lock(rtnl_mutex); [ 176.359551][ T5191] lock(sk_lock-AF_AX25); [ 176.366503][ T5191] lock(rtnl_mutex); [ 176.373029][ T5191] lock(sk_lock-AF_AX25); [ 176.377466][ T5191] [ 176.377466][ T5191] *** DEADLOCK *** [ 176.377466][ T5191] [ 176.385710][ T5191] 1 lock held by syz.2.243/5191: [ 176.390660][ T5191] #0: ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 176.399405][ T5191] [ 176.399405][ T5191] stack backtrace: [ 176.405321][ T5191] CPU: 0 PID: 5191 Comm: syz.2.243 Not tainted syzkaller #0 [ 176.412623][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.422706][ T5191] Call Trace: [ 176.426009][ T5191] [ 176.428952][ T5191] dump_stack_lvl+0x168/0x230 [ 176.433661][ T5191] ? load_image+0x3b0/0x3b0 [ 176.438187][ T5191] ? show_regs_print_info+0x20/0x20 [ 176.443437][ T5191] ? print_circular_bug+0x12b/0x1a0 [ 176.448663][ T5191] check_noncircular+0x274/0x310 [ 176.453620][ T5191] ? add_chain_block+0x940/0x940 [ 176.458576][ T5191] ? lockdep_lock+0xdc/0x1e0 [ 176.463195][ T5191] ? lockdep_unlock+0x134/0x2d0 [ 176.468072][ T5191] ? mark_lock+0x94/0x320 [ 176.472432][ T5191] __lock_acquire+0x2c33/0x7c60 [ 176.477317][ T5191] ? lock_chain_count+0x20/0x20 [ 176.482196][ T5191] ? mark_lock+0x94/0x320 [ 176.486563][ T5191] ? verify_lock_unused+0x140/0x140 [ 176.491782][ T5191] ? verify_lock_unused+0x140/0x140 [ 176.497007][ T5191] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 176.503010][ T5191] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 176.509028][ T5191] ? __local_bh_enable_ip+0x12a/0x1b0 [ 176.514440][ T5191] ? mark_lock+0x94/0x320 [ 176.518809][ T5191] lock_acquire+0x197/0x3f0 [ 176.523371][ T5191] ? ax25_device_event+0x217/0x4f0 [ 176.528519][ T5191] ? lock_chain_count+0x20/0x20 [ 176.533405][ T5191] ? read_lock_is_recursive+0x10/0x10 [ 176.538798][ T5191] ? __local_bh_enable_ip+0x12a/0x1b0 [ 176.544278][ T5191] ? lockdep_hardirqs_on+0x94/0x140 [ 176.549507][ T5191] ? __local_bh_enable_ip+0x12a/0x1b0 [ 176.554907][ T5191] ? _local_bh_enable+0xa0/0xa0 [ 176.559781][ T5191] lock_sock_nested+0x44/0x100 [ 176.564571][ T5191] ? ax25_device_event+0x217/0x4f0 [ 176.569705][ T5191] ax25_device_event+0x217/0x4f0 [ 176.574679][ T5191] raw_notifier_call_chain+0xcb/0x160 [ 176.580078][ T5191] __dev_notify_flags+0x178/0x2d0 [ 176.585126][ T5191] ? __dev_change_flags+0x6a0/0x6a0 [ 176.590346][ T5191] ? __dev_change_flags+0x4bb/0x6a0 [ 176.595592][ T5191] ? dev_get_flags+0x1c0/0x1c0 [ 176.600418][ T5191] ? dev_ioctl+0x54e/0xe50 [ 176.604875][ T5191] ? dev_ioctl+0x54e/0xe50 [ 176.609393][ T5191] dev_change_flags+0xe3/0x1a0 [ 176.614206][ T5191] dev_ifsioc+0x147/0xe70 [ 176.618699][ T5191] ? dev_ioctl+0xe50/0xe50 [ 176.623142][ T5191] ? apparmor_capable+0x12c/0x190 [ 176.628194][ T5191] ? full_name_hash+0x8e/0xe0 [ 176.632912][ T5191] dev_ioctl+0x55f/0xe50 [ 176.637291][ T5191] ? _copy_from_user+0x111/0x170 [ 176.642364][ T5191] sock_do_ioctl+0x222/0x2f0 [ 176.647012][ T5191] ? sock_show_fdinfo+0xb0/0xb0 [ 176.651959][ T5191] sock_ioctl+0x4ed/0x6e0 [ 176.656331][ T5191] ? sock_poll+0x3f0/0x3f0 [ 176.660902][ T5191] ? bpf_lsm_file_ioctl+0x5/0x10 [ 176.666225][ T5191] ? security_file_ioctl+0x7c/0xa0 [ 176.671559][ T5191] ? sock_poll+0x3f0/0x3f0 [ 176.676090][ T5191] __se_sys_ioctl+0xfa/0x170 [ 176.680708][ T5191] do_syscall_64+0x4c/0xa0 [ 176.685325][ T5191] ? clear_bhb_loop+0x30/0x80 [ 176.690122][ T5191] ? clear_bhb_loop+0x30/0x80 [ 176.695050][ T5191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.701038][ T5191] RIP: 0033:0x7f2118b6ffc9 [ 176.705479][ T5191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.725631][ T5191] RSP: 002b:00007f2116db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.734081][ T5191] RAX: ffffffffffffffda RBX: 00007f2118dc7090 RCX: 00007f2118b6ffc9 [ 176.742075][ T5191] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 176.750160][ T5191] RBP: 00007f2118bf2f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.758145][ T5191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 176.766149][ T5191] R13: 00007f2118dc7128 R14: 00007f2118dc7090 R15: 00007fffa9184938 [ 176.774855][ T5191] [ 176.950293][ T5191] ================================================================== [ 176.958417][ T5191] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 176.966208][ T5191] Write of size 4 at addr ffff8880187a5eb8 by task syz.2.243/5191 [ 176.974039][ T5191] [ 176.976410][ T5191] CPU: 1 PID: 5191 Comm: syz.2.243 Not tainted syzkaller #0 [ 176.983721][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.993790][ T5191] Call Trace: [ 176.997073][ T5191] [ 177.000007][ T5191] dump_stack_lvl+0x168/0x230 [ 177.004697][ T5191] ? show_regs_print_info+0x20/0x20 [ 177.009904][ T5191] ? load_image+0x3b0/0x3b0 [ 177.014513][ T5191] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 177.020183][ T5191] print_address_description+0x60/0x2d0 [ 177.025752][ T5191] ? ax25_dev_device_down+0x35e/0x520 [ 177.031132][ T5191] kasan_report+0xdf/0x130 [ 177.035560][ T5191] ? ax25_dev_device_down+0x35e/0x520 [ 177.040933][ T5191] ? kfree+0xef/0x2a0 [ 177.044912][ T5191] kasan_check_range+0x27b/0x290 [ 177.049850][ T5191] ax25_dev_device_down+0x35e/0x520 [ 177.055044][ T5191] ax25_device_event+0x4b4/0x4f0 [ 177.059988][ T5191] raw_notifier_call_chain+0xcb/0x160 [ 177.065391][ T5191] __dev_notify_flags+0x178/0x2d0 [ 177.070437][ T5191] ? __dev_change_flags+0x6a0/0x6a0 [ 177.075723][ T5191] ? __dev_change_flags+0x4bb/0x6a0 [ 177.080916][ T5191] ? dev_get_flags+0x1c0/0x1c0 [ 177.085694][ T5191] ? dev_ioctl+0x54e/0xe50 [ 177.090197][ T5191] ? dev_ioctl+0x54e/0xe50 [ 177.094674][ T5191] dev_change_flags+0xe3/0x1a0 [ 177.099436][ T5191] dev_ifsioc+0x147/0xe70 [ 177.103767][ T5191] ? dev_ioctl+0xe50/0xe50 [ 177.108184][ T5191] ? apparmor_capable+0x12c/0x190 [ 177.113301][ T5191] ? full_name_hash+0x8e/0xe0 [ 177.117993][ T5191] dev_ioctl+0x55f/0xe50 [ 177.122246][ T5191] ? _copy_from_user+0x111/0x170 [ 177.127309][ T5191] sock_do_ioctl+0x222/0x2f0 [ 177.131914][ T5191] ? sock_show_fdinfo+0xb0/0xb0 [ 177.136779][ T5191] sock_ioctl+0x4ed/0x6e0 [ 177.141110][ T5191] ? sock_poll+0x3f0/0x3f0 [ 177.145827][ T5191] ? bpf_lsm_file_ioctl+0x5/0x10 [ 177.150783][ T5191] ? security_file_ioctl+0x7c/0xa0 [ 177.155899][ T5191] ? sock_poll+0x3f0/0x3f0 [ 177.160428][ T5191] __se_sys_ioctl+0xfa/0x170 [ 177.165019][ T5191] do_syscall_64+0x4c/0xa0 [ 177.169433][ T5191] ? clear_bhb_loop+0x30/0x80 [ 177.174118][ T5191] ? clear_bhb_loop+0x30/0x80 [ 177.178878][ T5191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.184771][ T5191] RIP: 0033:0x7f2118b6ffc9 [ 177.189244][ T5191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.209026][ T5191] RSP: 002b:00007f2116db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.217439][ T5191] RAX: ffffffffffffffda RBX: 00007f2118dc7090 RCX: 00007f2118b6ffc9 [ 177.225518][ T5191] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 177.233596][ T5191] RBP: 00007f2118bf2f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.241815][ T5191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.250008][ T5191] R13: 00007f2118dc7128 R14: 00007f2118dc7090 R15: 00007fffa9184938 [ 177.258198][ T5191] [ 177.261224][ T5191] [ 177.263676][ T5191] Allocated by task 5189: [ 177.268000][ T5191] __kasan_kmalloc+0xb5/0xf0 [ 177.272597][ T5191] ax25_dev_device_up+0x50/0x580 [ 177.277666][ T5191] ax25_device_event+0x483/0x4f0 [ 177.282612][ T5191] raw_notifier_call_chain+0xcb/0x160 [ 177.287983][ T5191] __dev_notify_flags+0x178/0x2d0 [ 177.293165][ T5191] dev_change_flags+0xe3/0x1a0 [ 177.297943][ T5191] dev_ifsioc+0x147/0xe70 [ 177.302280][ T5191] dev_ioctl+0x55f/0xe50 [ 177.306523][ T5191] sock_do_ioctl+0x222/0x2f0 [ 177.311164][ T5191] sock_ioctl+0x4ed/0x6e0 [ 177.315497][ T5191] __se_sys_ioctl+0xfa/0x170 [ 177.320084][ T5191] do_syscall_64+0x4c/0xa0 [ 177.324504][ T5191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.330395][ T5191] [ 177.332713][ T5191] Freed by task 5191: [ 177.336747][ T5191] kasan_set_track+0x4b/0x70 [ 177.341338][ T5191] kasan_set_free_info+0x1f/0x40 [ 177.346400][ T5191] ____kasan_slab_free+0xd5/0x110 [ 177.351528][ T5191] slab_free_freelist_hook+0xea/0x170 [ 177.356907][ T5191] kfree+0xef/0x2a0 [ 177.360719][ T5191] ax25_dev_device_down+0x1c0/0x520 [ 177.365921][ T5191] ax25_device_event+0x4b4/0x4f0 [ 177.370853][ T5191] raw_notifier_call_chain+0xcb/0x160 [ 177.376335][ T5191] __dev_notify_flags+0x178/0x2d0 [ 177.381367][ T5191] dev_change_flags+0xe3/0x1a0 [ 177.386130][ T5191] dev_ifsioc+0x147/0xe70 [ 177.390471][ T5191] dev_ioctl+0x55f/0xe50 [ 177.394709][ T5191] sock_do_ioctl+0x222/0x2f0 [ 177.399336][ T5191] sock_ioctl+0x4ed/0x6e0 [ 177.403668][ T5191] __se_sys_ioctl+0xfa/0x170 [ 177.408256][ T5191] do_syscall_64+0x4c/0xa0 [ 177.412698][ T5191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.418602][ T5191] [ 177.420926][ T5191] Last potentially related work creation: [ 177.426656][ T5191] kasan_save_stack+0x35/0x60 [ 177.431335][ T5191] kasan_record_aux_stack+0xb8/0x100 [ 177.436617][ T5191] kvfree_call_rcu+0x10a/0x7c0 [ 177.441470][ T5191] drop_sysctl_table+0x2fa/0x430 [ 177.446401][ T5191] unregister_sysctl_table+0x87/0x130 [ 177.451784][ T5191] mpls_net_exit+0x68/0x270 [ 177.456544][ T5191] setup_net+0x7ad/0x9f0 [ 177.460801][ T5191] copy_net_ns+0x348/0x5b0 [ 177.465219][ T5191] create_new_namespaces+0x3d3/0x6f0 [ 177.470537][ T5191] unshare_nsproxy_namespaces+0x116/0x160 [ 177.476302][ T5191] ksys_unshare+0x4bc/0x890 [ 177.480820][ T5191] __x64_sys_unshare+0x34/0x40 [ 177.485655][ T5191] do_syscall_64+0x4c/0xa0 [ 177.490180][ T5191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.496170][ T5191] [ 177.498498][ T5191] Second to last potentially related work creation: [ 177.505158][ T5191] kasan_save_stack+0x35/0x60 [ 177.509850][ T5191] kasan_record_aux_stack+0xb8/0x100 [ 177.515146][ T5191] insert_work+0x54/0x3d0 [ 177.519492][ T5191] __queue_work+0x9c5/0xd50 [ 177.524010][ T5191] queue_work_on+0x11d/0x1d0 [ 177.528623][ T5191] snd_rawmidi_kernel_write1+0x4a4/0x590 [ 177.534260][ T5191] snd_rawmidi_write+0x5e2/0xbc0 [ 177.539231][ T5191] do_iter_write+0x3e4/0x7b0 [ 177.543830][ T5191] do_writev+0x254/0x410 [ 177.548189][ T5191] do_syscall_64+0x4c/0xa0 [ 177.552614][ T5191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.558744][ T5191] [ 177.561227][ T5191] The buggy address belongs to the object at ffff8880187a5e00 [ 177.561227][ T5191] which belongs to the cache kmalloc-192 of size 192 [ 177.575370][ T5191] The buggy address is located 184 bytes inside of [ 177.575370][ T5191] 192-byte region [ffff8880187a5e00, ffff8880187a5ec0) [ 177.588650][ T5191] The buggy address belongs to the page: [ 177.594302][ T5191] page:ffffea000061e940 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880187a5b00 pfn:0x187a5 [ 177.605892][ T5191] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 177.614260][ T5191] raw: 00fff00000000200 ffffea0000b0aa40 0000000300000003 ffff888016841a00 [ 177.622884][ T5191] raw: ffff8880187a5b00 000000008010000f 00000001ffffffff 0000000000000000 [ 177.631474][ T5191] page dumped because: kasan: bad access detected [ 177.637983][ T5191] page_owner tracks the page as allocated [ 177.643701][ T5191] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2621594926, free_ts 0 [ 177.659036][ T5191] get_page_from_freelist+0x1b77/0x1c60 [ 177.664603][ T5191] __alloc_pages+0x1e1/0x470 [ 177.669305][ T5191] alloc_page_interleave+0x24/0x1e0 [ 177.674518][ T5191] new_slab+0xc0/0x4b0 [ 177.678586][ T5191] ___slab_alloc+0x81e/0xdf0 [ 177.683182][ T5191] __kmalloc_track_caller+0x1cb/0x330 [ 177.688557][ T5191] krealloc+0x5a/0xf0 [ 177.692537][ T5191] add_sysfs_param+0xe8/0x930 [ 177.697220][ T5191] kernel_add_sysfs_param+0xaf/0x120 [ 177.702524][ T5191] param_sysfs_builtin+0x164/0x1e0 [ 177.707675][ T5191] param_sysfs_init+0x66/0x70 [ 177.712375][ T5191] do_one_initcall+0x1ee/0x680 [ 177.717138][ T5191] do_initcall_level+0x137/0x1f0 [ 177.722270][ T5191] do_initcalls+0x4b/0x90 [ 177.726614][ T5191] kernel_init_freeable+0x3ce/0x560 [ 177.731840][ T5191] kernel_init+0x19/0x1b0 [ 177.736167][ T5191] page_owner free stack trace missing [ 177.741525][ T5191] [ 177.743843][ T5191] Memory state around the buggy address: [ 177.749679][ T5191] ffff8880187a5d80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 177.757745][ T5191] ffff8880187a5e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 177.766036][ T5191] >ffff8880187a5e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 177.774116][ T5191] ^ [ 177.780026][ T5191] ffff8880187a5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 177.788100][ T5191] ffff8880187a5f80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 177.796168][ T5191] ================================================================== [ 177.944255][ T5191] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 177.951508][ T5191] CPU: 0 PID: 5191 Comm: syz.2.243 Tainted: G B syzkaller #0 [ 177.960286][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.970336][ T5191] Call Trace: [ 177.973617][ T5191] [ 177.976566][ T5191] dump_stack_lvl+0x168/0x230 [ 177.981246][ T5191] ? show_regs_print_info+0x20/0x20 [ 177.986453][ T5191] ? load_image+0x3b0/0x3b0 [ 177.990975][ T5191] panic+0x2c9/0x7f0 [ 177.994875][ T5191] ? bpf_jit_dump+0xd0/0xd0 [ 177.999384][ T5191] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 178.005279][ T5191] ? _raw_spin_unlock+0x40/0x40 [ 178.010220][ T5191] ? ax25_dev_device_down+0x35e/0x520 [ 178.015608][ T5191] check_panic_on_warn+0x80/0xa0 [ 178.020557][ T5191] ? ax25_dev_device_down+0x35e/0x520 [ 178.025980][ T5191] end_report+0x6d/0xf0 [ 178.030145][ T5191] kasan_report+0x102/0x130 [ 178.034649][ T5191] ? ax25_dev_device_down+0x35e/0x520 [ 178.040023][ T5191] ? kfree+0xef/0x2a0 [ 178.044008][ T5191] kasan_check_range+0x27b/0x290 [ 178.048944][ T5191] ax25_dev_device_down+0x35e/0x520 [ 178.054234][ T5191] ax25_device_event+0x4b4/0x4f0 [ 178.059178][ T5191] raw_notifier_call_chain+0xcb/0x160 [ 178.064581][ T5191] __dev_notify_flags+0x178/0x2d0 [ 178.069782][ T5191] ? __dev_change_flags+0x6a0/0x6a0 [ 178.074979][ T5191] ? __dev_change_flags+0x4bb/0x6a0 [ 178.080193][ T5191] ? dev_get_flags+0x1c0/0x1c0 [ 178.084985][ T5191] ? dev_ioctl+0x54e/0xe50 [ 178.089493][ T5191] ? dev_ioctl+0x54e/0xe50 [ 178.093944][ T5191] dev_change_flags+0xe3/0x1a0 [ 178.098728][ T5191] dev_ifsioc+0x147/0xe70 [ 178.103081][ T5191] ? dev_ioctl+0xe50/0xe50 [ 178.107554][ T5191] ? apparmor_capable+0x12c/0x190 [ 178.112581][ T5191] ? full_name_hash+0x8e/0xe0 [ 178.117352][ T5191] dev_ioctl+0x55f/0xe50 [ 178.121604][ T5191] ? _copy_from_user+0x111/0x170 [ 178.126554][ T5191] sock_do_ioctl+0x222/0x2f0 [ 178.131157][ T5191] ? sock_show_fdinfo+0xb0/0xb0 [ 178.136033][ T5191] sock_ioctl+0x4ed/0x6e0 [ 178.140449][ T5191] ? sock_poll+0x3f0/0x3f0 [ 178.144902][ T5191] ? bpf_lsm_file_ioctl+0x5/0x10 [ 178.149852][ T5191] ? security_file_ioctl+0x7c/0xa0 [ 178.154978][ T5191] ? sock_poll+0x3f0/0x3f0 [ 178.159398][ T5191] __se_sys_ioctl+0xfa/0x170 [ 178.164339][ T5191] do_syscall_64+0x4c/0xa0 [ 178.168781][ T5191] ? clear_bhb_loop+0x30/0x80 [ 178.173491][ T5191] ? clear_bhb_loop+0x30/0x80 [ 178.178271][ T5191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.184258][ T5191] RIP: 0033:0x7f2118b6ffc9 [ 178.188678][ T5191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.208567][ T5191] RSP: 002b:00007f2116db6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.216986][ T5191] RAX: ffffffffffffffda RBX: 00007f2118dc7090 RCX: 00007f2118b6ffc9 [ 178.224982][ T5191] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 178.232971][ T5191] RBP: 00007f2118bf2f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.240947][ T5191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.248933][ T5191] R13: 00007f2118dc7128 R14: 00007f2118dc7090 R15: 00007fffa9184938 [ 178.256914][ T5191] [ 178.260192][ T5191] Kernel Offset: disabled [ 178.264542][ T5191] Rebooting in 86400 seconds..