last executing test programs: 8.649867241s ago: executing program 1 (id=14): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x800) ptrace(0x10, r0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x5, 0x2002) openat(0xffffffffffffff9c, 0x0, 0x201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sched_setscheduler(0x0, 0x2, 0x0) getpid() sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 8.157256789s ago: executing program 0 (id=17): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000afd000/0x3000)=nil) brk(0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) 8.01626669s ago: executing program 1 (id=18): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1d2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r4, 0x6b, 0xffff, 0x0, 0x0) writev(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) 7.996086084s ago: executing program 2 (id=19): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_type(r0, &(0x7f0000000540), 0x2, 0x0) sendfile(r1, r2, 0x0, 0x7) 7.749490028s ago: executing program 0 (id=20): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100003000010000000000040000000101fe800c00010002"], 0x114}], 0x1}, 0x0) 6.177641151s ago: executing program 1 (id=22): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 6.161141675s ago: executing program 0 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079c", 0xf}], 0x2) 6.040529991s ago: executing program 3 (id=25): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x800) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0x0, 0x0, 0x0) 5.993398871s ago: executing program 4 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000c0000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000001980)={r0, 0x58, &(0x7f0000000600)}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000020) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000002c0)={0x1b, @pix={0x100002, 0x0, 0x30314247, 0x0, 0x0, 0xffffffff, 0x6, 0x1, 0x3, 0x0, 0x0, 0x1}}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0108f8ffffffffffffff070000000900010073797a30000000004c000000090a01042fbc47e500000000000000001700000008000a4053c154210900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000379534380240000800c00054000000000000000080c0004400000000000000003040002800400018014000000100001000000000000000000"], 0xe8}}, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$read(0x16, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24045091}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 5.935323734s ago: executing program 2 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r2, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x58) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x509840, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x1300, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000200020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064000000746573745f6c6162656c0000000000000500000000000000000000000001"], 0x104}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.876720337s ago: executing program 3 (id=28): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 5.473056275s ago: executing program 1 (id=29): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0xc) fadvise64(0xffffffffffffffff, 0x6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ']\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2={0xff, 0x5}, @remote}}}}}}, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x4404c880) 5.428753195s ago: executing program 4 (id=30): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5}) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0xffd8) 5.408738629s ago: executing program 0 (id=31): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="23000000010006", 0x7) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 5.386575174s ago: executing program 3 (id=32): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 5.236431427s ago: executing program 2 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$midi(r2, 0x0, 0x0) 5.225864369s ago: executing program 1 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x4}, &(0x7f0000000100)=0x8) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000030e01629e000000000000000a00000005000100070000000900e00e0fac7a819b9ec1d1ef97f52a3a9446633000000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4038587a, &(0x7f00000003c0)={{r0, &(0x7f0000000140)='\x00', 0x210000, &(0x7f0000000180)={@_ha_fsid={[0xbc1a, 0xc4]}, {0x37ac, 0x2, 0xfffffffd}}, 0x8001, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x2}, {[0x4, 0x200002, 0x7, 0xf]}, 0x4, 0xfe, &(0x7f00000002c0)=""/254}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe, 0x0, 0x100000}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x76e}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000400)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000440)={0x0, 0x0, r1}) set_mempolicy(0x4, &(0x7f0000000000)=0xffffffffffffff7f, 0x5) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x48, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) connect$inet(r7, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01864c2, &(0x7f0000000540)={0x0, 0x0, r1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) socket(0x1, 0x5, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000600)={&(0x7f0000000580)=[r5, r6, r9, 0x0, r10, 0x0, r11, 0x0], 0x8}) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000640)={0x6, 0x0, '\x00', 0x1, &(0x7f00000004c0)}) 3.824667115s ago: executing program 0 (id=35): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x200004d, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.143327692s ago: executing program 2 (id=36): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000706050000000500000000000100000205000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800) 2.142186312s ago: executing program 1 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x6, 0x1c, &(0x7f0000000280)=""/28, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f47000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) ioctl$SIOCGETVIFCNT(r1, 0x89e0, 0x0) futex(&(0x7f000000cffc)=0x10, 0x3, 0x801, 0x0, &(0x7f0000000080), 0x2) 1.800741007s ago: executing program 0 (id=38): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.754904817s ago: executing program 3 (id=39): r0 = inotify_init() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10a}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)="b3185d7b"}) 1.558698069s ago: executing program 4 (id=40): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x23b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x3, 0x100000001) sendmsg$nl_route_sched(r3, 0x0, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 1.459514951s ago: executing program 3 (id=41): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r0, &(0x7f00000005c0)=ANY=[], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 1.362428462s ago: executing program 2 (id=42): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) ioprio_set$uid(0x3, 0x0, 0x2000) 457.19469ms ago: executing program 2 (id=43): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r3}, 0x38) 269.710121ms ago: executing program 3 (id=44): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x50) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000004c0)='./file1\x00', 0x0, 0x10}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000300"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x23, &(0x7f0000000840)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x7, 0x3a, &(0x7f00000009c0)=""/58, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0xc, 0x3, 0xfc000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r1, 0xffffffffffffffff, r8, r3], 0x0, 0x10, 0x1}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f0000000740)={{r1, &(0x7f0000000500)='),.\']:::\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0xa, 0x3]}, {0x6, 0x2, 0x1, 0x2}}, 0x4, &(0x7f0000000580), 0x0}, {[0x9, 0x10000, 0x2, 0x12]}, 0x5, 0xdf, &(0x7f0000000640)=""/223}) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000780)=""/30) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r10, &(0x7f0000000100)=[{0x0}], 0x1) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r11, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r7, 0x0}]) write$tun(r6, &(0x7f0000003480)=ANY=[], 0x1116) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES8=r4, @ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x4000844}, 0x805) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) socket$nl_route(0x10, 0x3, 0x0) 203.750135ms ago: executing program 4 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 105.551317ms ago: executing program 4 (id=46): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') preadv(r0, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000) read$FUSE(r0, &(0x7f00000033c0)={0x2020}, 0xff66) r1 = inotify_init1(0x80800) fcntl$getflags(r1, 0x408) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffffffff, 0xfb1ac66eff4fd8f4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4000800) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x8954, 0xfffffffffffffffa) 0s ago: executing program 4 (id=47): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000e00)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004000000", 0x28}, {0x0}, {&(0x7f0000000d00)="8d2aadf53c167444d7ecf2ff4aebc7af0637ef9c57778a567de1ae283b63a457869d734c1a43768ad2ca", 0x2a}], 0x3) sendto$inet(r3, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 57.026748][ T4174] cgroup: Unknown subsys name 'net' [ 57.134247][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.335200][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.105971][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.147146][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.174807][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 60.216986][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 60.233765][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 60.301114][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.308194][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.316394][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.325844][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.333049][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.341040][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.364608][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.371818][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.379352][ T4191] device bridge_slave_0 entered promiscuous mode [ 60.402949][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.410324][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.417866][ T4191] device bridge_slave_1 entered promiscuous mode [ 60.430592][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.437648][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.445380][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.476252][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.486278][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.493429][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.501424][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.514580][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.522245][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.530298][ T4188] device bridge_slave_0 entered promiscuous mode [ 60.543394][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.574884][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.582040][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.589586][ T4188] device bridge_slave_1 entered promiscuous mode [ 60.597678][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.613187][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.623417][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.630535][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.638075][ T4192] device bridge_slave_0 entered promiscuous mode [ 60.647330][ T4186] team0: Port device team_slave_0 added [ 60.660300][ T4186] team0: Port device team_slave_1 added [ 60.673780][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.682972][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.690156][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.697950][ T4192] device bridge_slave_1 entered promiscuous mode [ 60.729683][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.740529][ T4191] team0: Port device team_slave_0 added [ 60.752882][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.764125][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.773856][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.780901][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.806824][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.826210][ T4191] team0: Port device team_slave_1 added [ 60.848287][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.855302][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.881928][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.898904][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.911183][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.930084][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.937029][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.963121][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.980254][ T4187] team0: Port device team_slave_0 added [ 61.000220][ T4188] team0: Port device team_slave_0 added [ 61.008007][ T4192] team0: Port device team_slave_0 added [ 61.014323][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.021370][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.047398][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.063690][ T4187] team0: Port device team_slave_1 added [ 61.070838][ T4188] team0: Port device team_slave_1 added [ 61.084570][ T4192] team0: Port device team_slave_1 added [ 61.144491][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.151524][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.177760][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.193246][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.204967][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.231752][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.245919][ T4191] device hsr_slave_0 entered promiscuous mode [ 61.253129][ T4191] device hsr_slave_1 entered promiscuous mode [ 61.264139][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.270970][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.277599][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.285426][ T4186] Cannot create hsr debugfs directory [ 61.291819][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.298751][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.324739][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.336235][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.343489][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.369395][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.381050][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.387992][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.413963][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.445176][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.452276][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.478383][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.555463][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.562581][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.569226][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.577331][ T4187] Cannot create hsr debugfs directory [ 61.634443][ T4192] device hsr_slave_0 entered promiscuous mode [ 61.641529][ T4192] device hsr_slave_1 entered promiscuous mode [ 61.648040][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.655659][ T4192] Cannot create hsr debugfs directory [ 61.689316][ T4188] device hsr_slave_0 entered promiscuous mode [ 61.696020][ T4188] device hsr_slave_1 entered promiscuous mode [ 61.702780][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.710669][ T4188] Cannot create hsr debugfs directory [ 61.840308][ T1342] Bluetooth: hci1: command 0x0409 tx timeout [ 61.840308][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 61.840699][ T1342] Bluetooth: hci2: command 0x0409 tx timeout [ 61.858666][ T1342] Bluetooth: hci0: command 0x0409 tx timeout [ 61.912400][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.919935][ T1342] Bluetooth: hci4: command 0x0409 tx timeout [ 61.935838][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.945901][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.959084][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.007469][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.016815][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.031628][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.048092][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.093284][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.105087][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.115236][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.133718][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.178784][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.186598][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.196014][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.218497][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.240311][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.249384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.260010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.284816][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.298870][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.309204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.320126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.328819][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.336022][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.344425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.353629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.365048][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.372101][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.380021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.388461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.417572][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.433830][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.441728][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.449274][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.459293][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.468208][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.477430][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.484511][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.493533][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.501922][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.512846][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.523158][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.534392][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.556188][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.566187][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.574852][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.584949][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.593424][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.600517][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.608233][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.622658][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.654012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.663722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.672413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.681829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.690480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.698621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.707029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.719991][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.733444][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.743552][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.758591][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.805516][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.814467][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.823022][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.832307][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.848166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.857096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.868542][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.890542][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.917947][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.928213][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.935705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.952314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.970917][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.985448][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.003078][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.011974][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.021476][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.030329][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.038615][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.045671][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.053831][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.063657][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.072025][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.079049][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.086780][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.100044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.107999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.119884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.128425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.137627][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.144710][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.166732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.176333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.188529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.206281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.214359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.223582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.232961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.242001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.253521][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.262573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.272119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.280886][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.288195][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.297712][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.328335][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.340853][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.361435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.371565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.380650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.389037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.400132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.407552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.415274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.423865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.432532][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.439611][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.447307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.457486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.465864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.474200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.483046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.491650][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.498694][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.507148][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.515316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.525290][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.553105][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.567546][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.578416][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.594844][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.605457][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.626582][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.643436][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.664564][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.673809][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.682991][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.693119][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.701605][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.710098][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.718276][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.726860][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.736255][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.744675][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.752470][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.778287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.787717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.824824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.844719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.856048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.869073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.887909][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.899947][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.914909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.924404][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 63.928309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.930857][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 63.945383][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 63.959898][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 63.982814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.000191][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 64.001067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.016220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.024892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.033577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.042621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.052489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.060907][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.072348][ T4186] device veth0_vlan entered promiscuous mode [ 64.083583][ T4191] device veth0_vlan entered promiscuous mode [ 64.096957][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.104777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.113747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.134138][ T4191] device veth1_vlan entered promiscuous mode [ 64.144469][ T4186] device veth1_vlan entered promiscuous mode [ 64.156008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.167223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.176176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.184589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.204826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.212610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.237139][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.252836][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.261980][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.270048][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.278553][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.287562][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.295223][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.308731][ T4191] device veth0_macvtap entered promiscuous mode [ 64.322506][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.340533][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.349275][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.364149][ T4191] device veth1_macvtap entered promiscuous mode [ 64.387604][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.395703][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.405456][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.414321][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.434083][ T4186] device veth0_macvtap entered promiscuous mode [ 64.448504][ T4186] device veth1_macvtap entered promiscuous mode [ 64.463978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.472382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.481706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.490728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.498852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.507741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.516448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.524352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.535442][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.543500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.552317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.573671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.582448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.596625][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.606604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.616884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.625794][ T4192] device veth0_vlan entered promiscuous mode [ 64.647983][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.659406][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.673543][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.685725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.694849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.703370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.713691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.723148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.731253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.741107][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.750797][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.759488][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.769200][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.793001][ T4192] device veth1_vlan entered promiscuous mode [ 64.800004][ T4187] device veth0_vlan entered promiscuous mode [ 64.807721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.816184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.825170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.845451][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.856210][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.867182][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.875812][ T4188] device veth0_vlan entered promiscuous mode [ 64.887801][ T4187] device veth1_vlan entered promiscuous mode [ 64.897064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.905266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.915145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.922959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.931791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.957054][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.976640][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.985513][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.994345][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.034103][ T4188] device veth1_vlan entered promiscuous mode [ 65.056983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.065384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.073709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.084046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.092293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.101324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.117770][ T4187] device veth0_macvtap entered promiscuous mode [ 65.144594][ T4192] device veth0_macvtap entered promiscuous mode [ 65.154482][ T4187] device veth1_macvtap entered promiscuous mode [ 65.167417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.177059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.185338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.194121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.207147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.220030][ T4192] device veth1_macvtap entered promiscuous mode [ 65.238905][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.241762][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.252793][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.263255][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.265654][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.279004][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.293517][ T4188] device veth0_macvtap entered promiscuous mode [ 65.306295][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.317280][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.327466][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.338127][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.350498][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.361687][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.373997][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.383213][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.396898][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.408101][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.418233][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.428885][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.438924][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.450247][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.461981][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.480821][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.492306][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.502392][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.513200][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.524883][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.534233][ T4188] device veth1_macvtap entered promiscuous mode [ 65.542255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.550885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.559351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.568081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.578428][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.588951][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.599132][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.611712][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.621837][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.632332][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.644411][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.668065][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.676989][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.687130][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.696569][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.707054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.716345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.727666][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.737948][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.747439][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.756393][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.795648][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.806322][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.824674][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.837279][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.848716][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.859439][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.870372][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.880942][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.890975][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.901649][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.912937][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.922218][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.935165][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.953134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.961019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.969436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.979171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.997785][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.008747][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.013418][ T4235] Bluetooth: hci1: command 0x040f tx timeout [ 66.025355][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.030752][ T4235] Bluetooth: hci3: command 0x040f tx timeout [ 66.035824][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.047156][ T4235] Bluetooth: hci2: command 0x040f tx timeout [ 66.053331][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.058521][ T4235] Bluetooth: hci0: command 0x040f tx timeout [ 66.072876][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.087005][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.097937][ T4235] Bluetooth: hci4: command 0x040f tx timeout [ 66.104316][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.115636][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.151935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.173881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.189453][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.202511][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.211284][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.220304][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.232728][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.241755][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.281964][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.303689][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.306538][ T4268] ======================================================= [ 66.306538][ T4268] WARNING: The mand mount option has been deprecated and [ 66.306538][ T4268] and is ignored by this kernel. Remove the mand [ 66.306538][ T4268] option from the mount to silence this warning. [ 66.306538][ T4268] ======================================================= [ 66.317826][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.352374][ T4268] jffs2: notice: (4268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.432507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.468989][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.499906][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.516120][ T4272] input: syz0 as /devices/virtual/input/input5 [ 66.538024][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.540128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.570668][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.572526][ T4268] process 'syz.4.5' launched './file1' with NULL argv: empty string added [ 66.592264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.676145][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.699627][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.729790][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.738141][ T1308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.745832][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.776577][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.793729][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.808688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.831071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.689143][ T4288] qnx4: no qnx4 filesystem (no root dir). [ 67.862352][ T4234] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 68.010279][ T4301] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.087540][ T4301] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 68.090439][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 68.126286][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 68.152764][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 68.170761][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 68.179972][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 68.321916][ T4234] usb 4-1: unable to get BOS descriptor or descriptor too short [ 68.389808][ T4234] usb 4-1: not running at top speed; connect to a high speed hub [ 68.409358][ T7] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 68.421603][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 68.672586][ T4234] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 68.697434][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.715246][ T4234] usb 4-1: Product: syz [ 68.720569][ T4234] usb 4-1: Manufacturer: syz [ 68.725578][ T4234] usb 4-1: SerialNumber: syz [ 68.887357][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 68.905026][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.917475][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.937371][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.944962][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.006294][ T4286] Zero length message leads to an empty skb [ 69.062927][ T4280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.102278][ T4280] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 69.132101][ T4326] FAULT_INJECTION: forcing a failure. [ 69.132101][ T4326] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 69.140570][ T4280] device syzkaller1 entered promiscuous mode [ 69.146053][ T4326] CPU: 0 PID: 4326 Comm: syz.0.17 Not tainted syzkaller #0 [ 69.158988][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.169059][ T4326] Call Trace: [ 69.172348][ T4326] [ 69.175281][ T4326] dump_stack_lvl+0x188/0x250 [ 69.179976][ T4326] ? show_regs_print_info+0x20/0x20 [ 69.180189][ T4280] udc-core: couldn't find an available UDC or it's busy [ 69.185172][ T4326] ? load_image+0x410/0x410 [ 69.192168][ T4280] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.196577][ T4326] ? mark_lock+0x94/0x320 [ 69.196598][ T4326] should_fail+0x383/0x4b0 [ 69.213097][ T4326] prepare_alloc_pages+0x1e3/0x5b0 [ 69.218226][ T4326] __alloc_pages+0x11b/0x480 [ 69.222827][ T4326] ? zone_statistics+0x170/0x170 [ 69.227786][ T4326] ? rcu_lock_acquire+0x30/0x30 [ 69.232647][ T4326] ? alloc_pages+0x452/0x560 [ 69.237250][ T4326] __get_free_pages+0x8/0x30 [ 69.241845][ T4326] __tlb_remove_page_size+0x1f2/0x3f0 [ 69.247321][ T4326] unmap_page_range+0xfcf/0x2410 [ 69.252296][ T4326] unmap_vmas+0x131/0x250 [ 69.256639][ T4326] ? unmap_page_range+0x2410/0x2410 [ 69.261838][ T4326] ? __mutex_lock_common+0x435/0x2400 [ 69.267219][ T4326] ? exit_mm_release+0x16/0x30 [ 69.272000][ T4326] exit_mmap+0x3b9/0x640 [ 69.276253][ T4326] ? vm_brk+0x20/0x20 [ 69.280249][ T4326] ? uprobe_clear_state+0x2f6/0x460 [ 69.285452][ T4326] __mmput+0x115/0x390 [ 69.289538][ T4326] exit_mm+0x632/0x7b0 [ 69.293612][ T4326] ? perf_pmu_migrate_context+0xb70/0xb70 [ 69.299429][ T4326] ? do_exit+0x2110/0x2110 [ 69.303852][ T4326] ? __ia32_sys_timer_delete+0x40/0x40 [ 69.309316][ T4326] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 69.314795][ T4326] ? tty_audit_exit+0x149/0x1f0 [ 69.319655][ T4326] do_exit+0x5b8/0x2110 [ 69.323822][ T4326] ? put_task_struct+0x80/0x80 [ 69.328588][ T4326] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 69.334584][ T4326] ? _raw_spin_lock_irq+0xb7/0xf0 [ 69.339619][ T4326] do_group_exit+0x12c/0x2f0 [ 69.344217][ T4326] ? lockdep_hardirqs_on+0x94/0x140 [ 69.349421][ T4326] get_signal+0x7eb/0x12e0 [ 69.353844][ T4326] arch_do_signal_or_restart+0xe6/0x12a0 [ 69.359478][ T4326] ? futex_exit_release+0x1c0/0x1c0 [ 69.364668][ T4326] ? get_sigframe_size+0x10/0x10 [ 69.369595][ T4326] ? __context_tracking_exit+0x4c/0x80 [ 69.375046][ T4326] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 69.381014][ T4326] ? exit_to_user_mode_loop+0x3b/0x130 [ 69.386457][ T4326] exit_to_user_mode_loop+0x9e/0x130 [ 69.391725][ T4326] exit_to_user_mode_prepare+0xee/0x180 [ 69.397257][ T4326] syscall_exit_to_user_mode+0x16/0x40 [ 69.402704][ T4326] do_syscall_64+0x58/0xa0 [ 69.407100][ T4326] ? clear_bhb_loop+0x30/0x80 [ 69.411761][ T4326] ? clear_bhb_loop+0x30/0x80 [ 69.416427][ T4326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.422310][ T4326] RIP: 0033:0x7f9175c0a159 [ 69.426710][ T4326] Code: Unable to access opcode bytes at RIP 0x7f9175c0a12f. [ 69.434056][ T4326] RSP: 002b:00007f9173e620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 69.442456][ T4326] RAX: 0000000000000001 RBX: 00007f9175e91fa8 RCX: 00007f9175c0a159 [ 69.450413][ T4326] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9175e91fac [ 69.458365][ T4326] RBP: 00007f9175e91fa0 R08: 0004cbaf4008edbf R09: 0000000000000000 [ 69.466317][ T4326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.474270][ T4326] R13: 00007f9175e92038 R14: 00007ffc473a5c40 R15: 00007ffc473a5d28 [ 69.482237][ T4326] [ 69.662254][ T4334] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 69.681197][ T4334] netlink: 244 bytes leftover after parsing attributes in process `syz.0.20'. [ 70.219649][ T4338] Invalid ELF header magic: != ELF [ 70.369560][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 70.389565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.399567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.409559][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.419557][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.429556][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.439561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.449560][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 70.459556][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.469555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 70.770466][ T4338] overlayfs: unrecognized mount option "/" or missing value [ 71.131702][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.138363][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.292638][ T4341] device syzkaller0 entered promiscuous mode [ 71.304535][ T4345] device syzkaller1 entered promiscuous mode [ 71.333603][ T4234] usb 4-1: MIDIStreaming interface descriptor not found [ 71.407194][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 71.700659][ T4234] usb 4-1: USB disconnect, device number 2 [ 71.753753][ T4362] netlink: 'syz.3.28': attribute type 8 has an invalid length. [ 75.829598][ T4231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.907247][ T4460] capability: warning: `syz.2.42' uses deprecated v2 capabilities in a way that may be insecure [ 76.079588][ T4231] usb 1-1: Using ep0 maxpacket: 8 [ 77.069774][ T4231] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 77.083560][ T4231] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.124200][ T4231] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.185094][ T4231] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.213965][ T4231] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.249595][ T4231] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.290182][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.381847][ T4487] netlink: 'syz.4.47': attribute type 4 has an invalid length. [ 77.469075][ T4487] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.496453][ T4479] [ 77.498781][ T4479] ====================================================== [ 77.505857][ T4479] WARNING: possible circular locking dependency detected [ 77.512856][ T4479] syzkaller #0 Not tainted [ 77.517244][ T4479] ------------------------------------------------------ [ 77.524237][ T4479] syz.3.44/4479 is trying to acquire lock: [ 77.530015][ T4479] ffff88801f0a4f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 77.540452][ T4479] [ 77.540452][ T4479] but task is already holding lock: [ 77.547792][ T4479] ffff88801f0a53f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 77.557155][ T4479] [ 77.557155][ T4479] which lock already depends on the new lock. [ 77.557155][ T4479] [ 77.567534][ T4479] [ 77.567534][ T4479] the existing dependency chain (in reverse order) is: [ 77.576534][ T4479] [ 77.576534][ T4479] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 77.584161][ T4479] __mutex_lock_common+0x1e5/0x2400 [ 77.589867][ T4479] mutex_lock_nested+0x17/0x20 [ 77.595133][ T4479] hci_dev_do_close+0x5f/0x1020 [ 77.600491][ T4479] hci_rfkill_set_block+0x101/0x180 [ 77.606210][ T4479] rfkill_set_block+0x1c1/0x3c0 [ 77.611563][ T4479] rfkill_fop_write+0x453/0x560 [ 77.616908][ T4479] vfs_write+0x304/0xd70 [ 77.621650][ T4479] ksys_write+0x153/0x260 [ 77.626479][ T4479] do_syscall_64+0x4c/0xa0 [ 77.631394][ T4479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.637797][ T4479] [ 77.637797][ T4479] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 77.645755][ T4479] __mutex_lock_common+0x1e5/0x2400 [ 77.651451][ T4479] mutex_lock_nested+0x17/0x20 [ 77.656710][ T4479] rfkill_register+0x2f/0x970 [ 77.661886][ T4479] hci_register_dev+0x459/0x980 [ 77.667232][ T4479] vhci_create_device+0x32e/0x5c0 [ 77.672755][ T4479] vhci_write+0x389/0x440 [ 77.677583][ T4479] vfs_write+0x748/0xd70 [ 77.682326][ T4479] ksys_write+0x153/0x260 [ 77.687149][ T4479] do_syscall_64+0x4c/0xa0 [ 77.692059][ T4479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.698452][ T4479] [ 77.698452][ T4479] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 77.706239][ T4479] __mutex_lock_common+0x1e5/0x2400 [ 77.711931][ T4479] mutex_lock_nested+0x17/0x20 [ 77.717190][ T4479] vhci_send_frame+0x88/0x100 [ 77.722368][ T4479] hci_send_frame+0x1a9/0x2e0 [ 77.727545][ T4479] hci_tx_work+0x9b5/0x16d0 [ 77.732548][ T4479] process_one_work+0x867/0xff0 [ 77.737897][ T4479] worker_thread+0xad7/0x12a0 [ 77.743068][ T4479] kthread+0x42e/0x520 [ 77.747636][ T4479] ret_from_fork+0x1f/0x30 [ 77.752660][ T4479] [ 77.752660][ T4479] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 77.761837][ T4479] __lock_acquire+0x2c66/0x7b50 [ 77.767185][ T4479] lock_acquire+0x19e/0x400 [ 77.772182][ T4479] __flush_work+0x116/0x210 [ 77.777181][ T4479] hci_dev_do_close+0x201/0x1020 [ 77.782613][ T4479] hci_rfkill_set_block+0x101/0x180 [ 77.788309][ T4479] rfkill_set_block+0x1c1/0x3c0 [ 77.793662][ T4479] rfkill_fop_write+0x453/0x560 [ 77.799004][ T4479] vfs_write+0x304/0xd70 [ 77.803745][ T4479] ksys_write+0x153/0x260 [ 77.808590][ T4479] do_syscall_64+0x4c/0xa0 [ 77.813505][ T4479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.819900][ T4479] [ 77.819900][ T4479] other info that might help us debug this: [ 77.819900][ T4479] [ 77.830112][ T4479] Chain exists of: [ 77.830112][ T4479] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 77.830112][ T4479] [ 77.845027][ T4479] Possible unsafe locking scenario: [ 77.845027][ T4479] [ 77.852453][ T4479] CPU0 CPU1 [ 77.857798][ T4479] ---- ---- [ 77.863137][ T4479] lock(&hdev->req_lock); [ 77.867528][ T4479] lock(rfkill_global_mutex); [ 77.874785][ T4479] lock(&hdev->req_lock); [ 77.881694][ T4479] lock((work_completion)(&hdev->tx_work)); [ 77.887649][ T4479] [ 77.887649][ T4479] *** DEADLOCK *** [ 77.887649][ T4479] [ 77.895825][ T4479] 2 locks held by syz.3.44/4479: [ 77.900760][ T4479] #0: ffffffff8d6d6b68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 77.910823][ T4479] #1: ffff88801f0a53f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 77.920534][ T4479] [ 77.920534][ T4479] stack backtrace: [ 77.926401][ T4479] CPU: 0 PID: 4479 Comm: syz.3.44 Not tainted syzkaller #0 [ 77.933568][ T4479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 77.943596][ T4479] Call Trace: [ 77.946853][ T4479] [ 77.949783][ T4479] dump_stack_lvl+0x188/0x250 [ 77.954450][ T4479] ? load_image+0x410/0x410 [ 77.958933][ T4479] ? show_regs_print_info+0x20/0x20 [ 77.964198][ T4479] ? print_circular_bug+0x12b/0x1a0 [ 77.969379][ T4479] check_noncircular+0x296/0x330 [ 77.974315][ T4479] ? look_up_lock_class+0x71/0x110 [ 77.979411][ T4479] ? add_chain_block+0x9b0/0x9b0 [ 77.984324][ T4479] ? lockdep_lock+0xf1/0x1f0 [ 77.988893][ T4479] ? mark_lock+0x94/0x320 [ 77.993194][ T4479] ? _find_first_zero_bit+0xd1/0xf0 [ 77.998378][ T4479] __lock_acquire+0x2c66/0x7b50 [ 78.003218][ T4479] ? add_chain_block+0x9b0/0x9b0 [ 78.008134][ T4479] ? lockdep_unlock+0x143/0x2e0 [ 78.012968][ T4479] ? verify_lock_unused+0x140/0x140 [ 78.018147][ T4479] ? mark_lock+0x94/0x320 [ 78.022456][ T4479] ? __lock_acquire+0x1305/0x7b50 [ 78.027463][ T4479] lock_acquire+0x19e/0x400 [ 78.031947][ T4479] ? __flush_work+0xfa/0x210 [ 78.036520][ T4479] ? verify_lock_unused+0x140/0x140 [ 78.041696][ T4479] ? read_lock_is_recursive+0x10/0x10 [ 78.047048][ T4479] __flush_work+0x116/0x210 [ 78.051526][ T4479] ? __flush_work+0xfa/0x210 [ 78.056094][ T4479] ? flush_work+0x20/0x20 [ 78.060401][ T4479] ? rcu_lock_release+0x5/0x20 [ 78.065145][ T4479] ? __lock_acquire+0x7b50/0x7b50 [ 78.070147][ T4479] hci_dev_do_close+0x201/0x1020 [ 78.075068][ T4479] hci_rfkill_set_block+0x101/0x180 [ 78.080267][ T4479] ? rcu_lock_release+0x20/0x20 [ 78.085098][ T4479] rfkill_set_block+0x1c1/0x3c0 [ 78.089928][ T4479] rfkill_fop_write+0x453/0x560 [ 78.094766][ T4479] ? rfkill_fop_read+0x560/0x560 [ 78.099682][ T4479] ? common_file_perm+0x160/0x1c0 [ 78.104682][ T4479] ? fsnotify_perm+0x5d/0x560 [ 78.109336][ T4479] ? security_file_permission+0x75/0xa0 [ 78.114862][ T4479] ? rfkill_fop_read+0x560/0x560 [ 78.119789][ T4479] vfs_write+0x304/0xd70 [ 78.124012][ T4479] ? file_end_write+0x250/0x250 [ 78.128837][ T4479] ? __fget_files+0x402/0x470 [ 78.133490][ T4479] ? __fdget_pos+0x1e2/0x370 [ 78.138056][ T4479] ? ksys_write+0x70/0x260 [ 78.142452][ T4479] ksys_write+0x153/0x260 [ 78.146758][ T4479] ? __ia32_sys_read+0x80/0x80 [ 78.151496][ T4479] ? lockdep_hardirqs_on+0x94/0x140 [ 78.156674][ T4479] do_syscall_64+0x4c/0xa0 [ 78.161089][ T4479] ? clear_bhb_loop+0x30/0x80 [ 78.165752][ T4479] ? clear_bhb_loop+0x30/0x80 [ 78.170403][ T4479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.176272][ T4479] RIP: 0033:0x7f6b0ade8159 [ 78.180681][ T4479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.200270][ T4479] RSP: 002b:00007f6b08ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.208658][ T4479] RAX: ffffffffffffffda RBX: 00007f6b0b070180 RCX: 00007f6b0ade8159 [ 78.216606][ T4479] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 78.224551][ T4479] RBP: 00007f6b0ae7f06b R08: 0000000000000000 R09: 0000000000000000 [ 78.232496][ T4479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.240465][ T4479] R13: 00007f6b0b070218 R14: 00007f6b0b070180 R15: 00007ffd7bbfe2d8 [ 78.248417][ T4479] [ 78.330444][ T4231] usb 1-1: GET_CAPABILITIES returned 0 [ 78.337384][ T4231] usbtmc 1-1:16.0: can't read capabilities [ 78.559578][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.568667][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.577699][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.586729][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.595785][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.604832][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.613881][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.622940][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.632002][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.641054][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.650112][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.659168][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.668233][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.677378][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.686431][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.695484][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 78.716621][ T4231] usb 1-1: USB disconnect, device number 2 [ 86.484472][ T1354] cfg80211: failed to load regulatory.db