last executing test programs: 23.87862298s ago: executing program 0 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf2505000000200001800dfaffffff02000000000000000000000c000280080001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x100) syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e3475e40b40a11007fc60102030109021b000100"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200008}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20004010}, 0xc801) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='numa_maps\x00') r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 20.75919832s ago: executing program 0 (id=549): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r3 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r2, 0x1ff) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000000)="108000", 0x3, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 16.781277874s ago: executing program 0 (id=559): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x183083) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x2003, 0x3016, 0x1}) 13.639214645s ago: executing program 1 (id=570): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x656d42c3, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 13.061087076s ago: executing program 0 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 11.94319763s ago: executing program 0 (id=574): r0 = fanotify_init(0x200, 0x0) dup(r0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xb, 0xfc}}}}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x4000801) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x3ff}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x7ffffffffffffffc}) close_range(r4, 0xffffffffffffffff, 0x0) 9.764570027s ago: executing program 2 (id=579): r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x7, 0x80, 0x3, 0x9, {{0x9, 0x4, 0x0, 0x3a, 0x24, 0x66, 0x0, 0x4d, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0xf, 0x64, [@broadcast, @rand_addr=0x64010102, @multicast2]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000500)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000000540)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc0398062f24", 0x20, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001cc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000580)={0xb50, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x9d4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x84, 0x5, "463f4d41431aa9cbdc5bc022669592ee2b772879e1a76d63ad0419d689582d57013f9bede5f1b77d13b204f8273d84dd67e68b73a4692143ee3b5dd6d400910c2b960cf225665293e46f5242d34c8ea0589704767be6039d6c4bde4d2a58cef33b241aa510b2294587a74d978c90d0af4197ade66511701354cf0f856d960318"}, @ETHTOOL_A_BITSET_MASK={0x804, 0x5, "a0a1f27f69c34c5d25dcb69cad8286d159aaa46b84b804484f16eec4f4563a838839209c4e7c6ac1a0b068cb0414d3c541ffcc89b82220cc33bd7cb7bab798128216023a766312e4f99e5268f7932b9e7c0c27b91f4f9abed0fd84ef898491c50c8d5b66af6847b3d3d0fcd059a78f7c115a8d9cc7906f6bbc5af3ca0169ce5065ac42166495af027f4e4d94d2212aed28856e72cc4d5d126fca1bd2013523d65d1c0ad45b17350d22ab548c25e54bddd665a0d51d74629f493ce6f861b64d10e1f90c3786c6d5957d926745d5bd4e96c1566b925cd2c108ad1fb216d63baf46f1fea2e2c2f81f684d370e3ab60494f8c2312d20271eade122531be399bc21c38cbdc3eff0d396a4eb93724ba701601f2b934cefec9a537a293cd34200cf9e4c99a6f44e8f39358188ba00a714f4319037020258253aedc3a644af45188f0983777e14d14200d925085d0a2f2bbcc89576d1d0e766560fd3c637e579b98356b03bb31cda1ed46d0fde3f5ddb99b74a5a62f897c1a4b90c9e1de20fee800cc2050da0f059e16eb072e20f2b3ac385c40c90a5a80a0527cc75e880650a0c27d43bea018ab74bb3e1ae53f47c4f974aad988f574ebe0db9c9999160bf7717acd6b236b7b90d3260997fa45a09e443ddd5db9828385a79c9e17f605aee27673c52e084eccd940c3e792f6c5b23ccec6094dd9df23e3dcfa7e9d6e660e91232de4218d52918b993cb87cf25118f78ba6ebcb3cfb854d0e21539e838cf03c58e7b4deec0842a5166688057179588b2902a286d40d4ca0ef4a0eb5fc710624d3fa1850140789ab03e8b4b5ed7fa13bfcb85260d9baf8e23e14ff733edc9ba55d4b622693768503aabb3b434b07dd493fb4055b05be01fa093231dbd26cd035231d33ad3948294e63e0e7aad4f85ae130354d10405da29a87c023ae4305fc7e6f25c97472292e01e6e170cc5133ae85c9e38c5504711baaa06e571b1abd7e406d4290fb926eabdfd27556c9d6a8d31191ea629e80dc354819ea2cc55d998240a4e112e3a87db3e9cef29cb60ceaeeec149922a7b66f35f9ae16950e9fa872d25021036f2f9a8c79a5505b50c813aed0ff87dbc187d76ff362ef66ad10b0c09f02f087f9dacdcf0da97b8abb77b9f14d882dc110f442c17872327702e76caac5eed3f71196ce3b78d0613093896d54a1851d39948336d98c1cfec6d6eb2f2deac7bed49b3cb5f9f7ff677f4e3c65f15625634d64efc83583dd4fe2edd7184c0d462998dee564f2faedac8a4a67726741846636372d597daba212cd221f1ffcbc7a30cd7498319ac6ba8552843413a8ef2a3bbf10e18f37946757debd2fdf9b3a2e0f4e9010363ecd97f74f44ff108b27dbd1f8372b2beac61b733f38980797cb225e1ab3788fd1d36ef4f14ae6505d3e890131ebee030e544c4bc9eb3e033b8fbe81dcd147cf0abaa4dc318a4de76d7c56fafa8c6494766d5531f9f466c41b104bbce2ff2d037833196c7750f2b15f14dce04e318c6e5366aa478380c1169c77c14d5bd96fc12c023c59d56dd8a9a9798be821c0e0caa208735f0eaef9980e87cf693eb6f714c262c8d57bb9380426b981a37a0186c1f2f819530602cb3ca24a3dea42296d227d4bea555564673f93650ff8a07cdc3215e234fc6286bb6d974b3b9cc64a3eb6f4719466d8aa91c04be964dc91a73f8123c8dbba089150dfc8f62a9c5242876692e24f929b19b50d18cafe235a544e1220480fc9c321b1df55ae451f8f218f447a4eb6f32e0430f2e8d7f06f7e6b012b2a699382a33440d2cecc544285a4151c04f535bd082b2eec98f5634ae6d1526379bb18fbf75c37bc27cacee7e69ceb107458d2abfbc09d39d5ad0abe5b73cb625b822d4621c4fa850203f5ffd3f6bf30481269470d906ba002b110f3e50238a5bada28d16875164b8bf99a8f57416b7d444768deafc6c2a878fe0f9b3ac69e571825423f828c79f89329aa199d54df45cfac63940e7dcccc8a2a680efb367c2e9aef8e61684cc101f57248f70a473b07baf653759ffbe4100f2c6865314981184301706b3db3d9cfab03a84967de5d297913305af844f74225fe6967f1421abcfa602232807221f10a6ee497024fb9410d1de49a143aa42910da147b56ac7afcf01c5174253d242daf5318cdd416acabe1d4fef606e757f9b1f8f8136367335ca07c4d046a37faba26b6f4b1daf717813111b26840f66cb2e403acb72f11c8c5d68fcc11e493c83505080b2561c403ad35ba871e81182557b39b0537ebb209cd94846e33324ba3973fc132edc53cc143506fb66a5ba65c73c7d2e4951bbbd5e1da997952d3069addc8b4baf29a57da169a3181c990754dc91d7019f85b19b322bc79f3f724df9469444b77c3e86af7a830d74963df30e67a7b716a6ac7fb01dd102e4552149993f297ce95972c286e438b0be6ec2465b7f0793cb7125aee9050219266366db371a99c63d8bb916e748808d4c587a6e7a1c5560a579503de71df23421a5710df983b645c66dac585537f6e94732a2eb6fd6007142faa7503a7c074cd8f078757b710efec855a55eaddc63ef01ee82e2f35138514ea5f06291947d930db8589f2c5b26129132bd8ae5633149d82fa261596b10cf567899072ef2e16c93d3a42d1eae41417dd8adbf0de1eb2da41665e51283c8c930c19cf17a04b0e796badb68362844e86badb3206dc5a4abd3575236030708ad373066655ba25a8b777a38e8afa5fcd037ffdff0a5a0b4525b0f187807f971a553f6cc62100b27259a8b1d8e58c62641600c1ac33684624790ce528e7320cf09769c06dba8f8668dd3b69789e6e5b2a234654772a345ffc953674a42a8ffbd40462d3e21d9d1f7787362dc477f99747af0161dc3ee"}, @ETHTOOL_A_BITSET_MASK={0xa3, 0x5, "cb01e9074ee2e4d441d25717d17170e66f33d0fa54692e6cea04557754b4ac3ad73425fcf27c35eddc79ea27a5b53cea9b2fcd26a692c2abcb4c4543dc48f6a77135688907e1c502e4a414ba79bd7385c0f6b026abc79c28cd59ce2dc05b470c08b756fd1570d1206fa39f6e2851135a5c2e8620f68a7e27866e7d346142d6df78af24c822045e89e821e599c95f409207af07aea34fe6a72e05f8fee713f7"}, @ETHTOOL_A_BITSET_MASK={0x7f, 0x5, "72669dc0a96072cde31a4bef3296bf2d6987748ac5b8e6148b0af12f25802a00b7330d2dc27453596d251e1527df87788cc55fae311e1625734105b8c9fc34ee9b3d1efa6113df402c3497f2d8450c9139559f60f8488442f0779bec9494f378add8b112fed4903ad9c55d3dca8d43198692e518cf982b5187a5b0"}, @ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "fac99d44abe3f7687369f04e08ee86f4f720faf2ec2d49"}]}, @ETHTOOL_A_FEATURES_WANTED={0x50, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "3cd939f25845bb389332c1fa28352e246b266de745e2537b78af50f30db5e0003e03a346507e065140729b458dd937c81f0cfbc6eeebb8dcbdbe0b2bee1414a8477b3546b9d7"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb50}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r9, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @rand_addr=' \x01\x00', 0x0, 0x1, 0xfffffffe}}) 8.110294823s ago: executing program 0 (id=582): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x183083) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x2003, 0x3016, 0x1}) 7.902576894s ago: executing program 2 (id=586): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) openat$audio1(0xffffff9c, 0x0, 0x2041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x4b, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r5, 0x404c4701, 0x20000000) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0x25, 0x4) connect$inet6(r7, &(0x7f0000000400)={0xa, 0x4e23, 0x380000, @loopback, 0x8}, 0x1c) dup(r0) 7.844212334s ago: executing program 3 (id=588): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 7.638833874s ago: executing program 4 (id=589): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d3, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 5.777367721s ago: executing program 2 (id=590): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) 5.776712981s ago: executing program 4 (id=591): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000540)={0x1, 0x1000, 0x2, 0x81, 0x18, "019b2d4bb9a7a48505d347a59f3f05ab147c29"}) fgetxattr(r3, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000680)=""/4096, 0x1000) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x1}}) ioctl$TIOCSTI(r4, 0x5412, 0x0) chdir(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x8, 0x7fff, 0x0, 0x1ffffffe, 0x0, 0x0, 0x0, 0xfeef}) socket$nl_netfilter(0x10, 0x3, 0xc) 5.746604481s ago: executing program 3 (id=592): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r0, &(0x7f0000000080)='r', 0x1, 0x1) pwrite64(r0, &(0x7f00000000c0)="c1db65", 0x3, 0x200) 5.703302041s ago: executing program 1 (id=593): r0 = syz_io_uring_setup(0x1048, &(0x7f00000000c0)={0x0, 0xe970, 0x0, 0x0, 0x40}, &(0x7f0000000080)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x5, 0x10a5, 0x3, 0x0, 0x0) io_uring_enter(r0, 0xde5, 0x0, 0x0, 0x0, 0x0) 5.615216991s ago: executing program 3 (id=594): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) 5.502383121s ago: executing program 1 (id=595): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 4.727740464s ago: executing program 2 (id=596): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setresgid(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f00000004c0)=0xe8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) setregid(0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 3.305963349s ago: executing program 4 (id=597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x500, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x11, 0x0, 0x7}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 3.243242619s ago: executing program 1 (id=598): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) close(r1) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004b40)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035007465616d5f736c6176655f310000000008000a"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008040) 3.02792528s ago: executing program 4 (id=599): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0xe, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x34, r6, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x200008d0) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/4085, 0xff5}], 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[], 0x38}}, 0x0) 2.97040882s ago: executing program 3 (id=600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000180)) 1.291257835s ago: executing program 1 (id=601): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfd, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x7ff, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0xa, 0xc, 0x3, 0x3, 0x9, 0x2, 0x0, 0x4, 0x80, 0x0, 0x1020, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.290552896s ago: executing program 3 (id=602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000060c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x73, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xac}, {0x5, 0x4, 0x6, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}}, 0x0) 1.042251946s ago: executing program 2 (id=603): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x25, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x380000, @loopback, 0x8}, 0x1c) 875.261747ms ago: executing program 4 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x19}}, {{0x0, 0x0, 0x0}}], 0x5e, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 863.458917ms ago: executing program 2 (id=605): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_open_procfs(r2, &(0x7f0000000540)='net/ip_vs\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 737.925688ms ago: executing program 3 (id=606): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0xfff, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9eb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = dup(r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) 319.227499ms ago: executing program 1 (id=607): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 4 (id=608): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d362ced", "bc3a20b10f4ad11e"}, 0x38) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 42.754096][ T4012] cgroup: Unknown subsys name 'net' [ 42.965998][ T4012] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.295368][ T4012] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 44.801799][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 44.831559][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 44.841970][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 44.893569][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 44.939811][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 44.957923][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.959755][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.962011][ T4023] device bridge_slave_0 entered promiscuous mode [ 44.992704][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.994509][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.996765][ T4033] device bridge_slave_0 entered promiscuous mode [ 45.000391][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.001933][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.004738][ T4023] device bridge_slave_1 entered promiscuous mode [ 45.016097][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.017719][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.020800][ T4024] device bridge_slave_0 entered promiscuous mode [ 45.023447][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.025006][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.027482][ T4033] device bridge_slave_1 entered promiscuous mode [ 45.052139][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.053560][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.055802][ T4024] device bridge_slave_1 entered promiscuous mode [ 45.066594][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.086063][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.112362][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.129844][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.131831][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.133306][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.135457][ T4028] device bridge_slave_0 entered promiscuous mode [ 45.166897][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.168870][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.171090][ T4028] device bridge_slave_1 entered promiscuous mode [ 45.175298][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.186783][ T4033] team0: Port device team_slave_0 added [ 45.188257][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.190346][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.192485][ T4034] device bridge_slave_0 entered promiscuous mode [ 45.202690][ T4023] team0: Port device team_slave_0 added [ 45.205869][ T4023] team0: Port device team_slave_1 added [ 45.219708][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.227763][ T4033] team0: Port device team_slave_1 added [ 45.229429][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.230897][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.233035][ T4034] device bridge_slave_1 entered promiscuous mode [ 45.276008][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.277728][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.288946][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.293755][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.295827][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.297225][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.303251][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.307908][ T4024] team0: Port device team_slave_0 added [ 45.331877][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.335283][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.338419][ T4024] team0: Port device team_slave_1 added [ 45.345305][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.346776][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.352305][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.359529][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.373705][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.375167][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.381274][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.384595][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.385960][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.391458][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.419739][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.421254][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.426339][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.480803][ T4023] device hsr_slave_0 entered promiscuous mode [ 45.528926][ T4023] device hsr_slave_1 entered promiscuous mode [ 45.576625][ T4028] team0: Port device team_slave_0 added [ 45.581133][ T4034] team0: Port device team_slave_0 added [ 45.584448][ T4034] team0: Port device team_slave_1 added [ 45.594655][ T4028] team0: Port device team_slave_1 added [ 45.690641][ T4033] device hsr_slave_0 entered promiscuous mode [ 45.739021][ T4033] device hsr_slave_1 entered promiscuous mode [ 45.778718][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.780532][ T4033] Cannot create hsr debugfs directory [ 45.805666][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.807120][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.818860][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.900715][ T4024] device hsr_slave_0 entered promiscuous mode [ 45.939215][ T4024] device hsr_slave_1 entered promiscuous mode [ 45.978578][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.980071][ T4024] Cannot create hsr debugfs directory [ 45.984519][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.986013][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.991338][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.994283][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.995752][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.002659][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.026728][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.028183][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.034436][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.180446][ T4034] device hsr_slave_0 entered promiscuous mode [ 46.239027][ T4034] device hsr_slave_1 entered promiscuous mode [ 46.288785][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.290241][ T4034] Cannot create hsr debugfs directory [ 46.330967][ T4028] device hsr_slave_0 entered promiscuous mode [ 46.379006][ T4028] device hsr_slave_1 entered promiscuous mode [ 46.418630][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.420240][ T4028] Cannot create hsr debugfs directory [ 46.569029][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 46.569221][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 46.570666][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 46.573275][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 46.574634][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 46.626197][ T4023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.671411][ T4023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.710706][ T4023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.760679][ T4023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.839490][ T4033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.881925][ T4033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.931525][ T4033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.970794][ T4033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.035934][ T4024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.074955][ T4024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.111869][ T4024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.163100][ T4024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.265658][ T4028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.301894][ T4028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.360839][ T4028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.407669][ T4028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.471437][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.505262][ T4034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.545959][ T4034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.581511][ T4034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.629638][ T4034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.677356][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.680557][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.686370][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.705014][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.733059][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.735525][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.739323][ T1812] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.741007][ T1812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.743245][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.760379][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.762563][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.764467][ T1812] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.765897][ T1812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.767915][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.771192][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.784051][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.796346][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.803104][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.820741][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.823057][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.825202][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.826768][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.830299][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.832454][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.834386][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.835826][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.856718][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.860391][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.862762][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.865160][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.867689][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.872078][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.874288][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.876496][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.878843][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.881156][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.900509][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.902280][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.904285][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.906264][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.912587][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.914870][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.917304][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.920594][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.925773][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.944535][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.946875][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.953797][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.974608][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.977096][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.980660][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.982863][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.000215][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.003757][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.005944][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.007907][ T1812] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.009431][ T1812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.021098][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.029260][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.031788][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.033888][ T1812] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.035565][ T1812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.053001][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.063076][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.085724][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.088388][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.092737][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.094379][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.100435][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.110294][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.115048][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.117614][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.120208][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.122226][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.131119][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.134176][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.136358][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.141324][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.158932][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.161237][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.163451][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.164959][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.166935][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.175998][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.178176][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.179704][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.183425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.185863][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.204354][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.206429][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.208871][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.211690][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.213692][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.215243][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.217102][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.221273][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.223573][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.226904][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.230939][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.233274][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.235228][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.236662][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.240989][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.268223][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.271207][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.273669][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.275875][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.278173][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.284215][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.286672][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.289242][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.291455][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.293818][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.296076][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.313854][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.316459][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.319222][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.321518][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.323713][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.325502][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.332549][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.343155][ T4028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.345378][ T4028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.350883][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.353103][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.355294][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.357590][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.361862][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.364205][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.366311][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.382379][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.384657][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.395656][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.419631][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.426209][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.428393][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.432178][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.434917][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.439505][ T4023] device veth0_vlan entered promiscuous mode [ 48.475545][ T4023] device veth1_vlan entered promiscuous mode [ 48.481071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.483481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.485697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.544170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.546380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.548133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.558351][ T4023] device veth0_macvtap entered promiscuous mode [ 48.573693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.576232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.584342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.593391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.595510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.597760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.600559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.603458][ T4033] device veth0_vlan entered promiscuous mode [ 48.607116][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.613429][ T4023] device veth1_macvtap entered promiscuous mode [ 48.637243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.640022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.641717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.648935][ T4071] Bluetooth: hci4: command 0x041b tx timeout [ 48.649747][ T4014] Bluetooth: hci0: command 0x041b tx timeout [ 48.651767][ T4014] Bluetooth: hci2: command 0x041b tx timeout [ 48.654460][ T4014] Bluetooth: hci1: command 0x041b tx timeout [ 48.655343][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.656058][ T4014] Bluetooth: hci3: command 0x041b tx timeout [ 48.665253][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.666911][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.670624][ T4033] device veth1_vlan entered promiscuous mode [ 48.685568][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.698138][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.713205][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.715518][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.717805][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.722119][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.724530][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.726785][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.752732][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.754990][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.757312][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.763125][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.768043][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.774837][ T4033] device veth0_macvtap entered promiscuous mode [ 48.778291][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.781096][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.783417][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.796132][ T4023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.798092][ T4023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.800989][ T4023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.802743][ T4023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.813400][ T4033] device veth1_macvtap entered promiscuous mode [ 48.821443][ T4028] device veth0_vlan entered promiscuous mode [ 48.824804][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.827084][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.830749][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.833761][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.835781][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.838018][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.846367][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.848724][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.851291][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.853854][ T4024] device veth0_vlan entered promiscuous mode [ 48.869526][ T4028] device veth1_vlan entered promiscuous mode [ 48.891570][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.893745][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.896022][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.898273][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.906938][ T4024] device veth1_vlan entered promiscuous mode [ 48.910844][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.913216][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.916493][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.928391][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.930568][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.932682][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.955981][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.958122][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.962686][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.966956][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.969874][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.972168][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.991753][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.993852][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.996438][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.000354][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.021648][ T4028] device veth0_macvtap entered promiscuous mode [ 49.040825][ T4034] device veth0_vlan entered promiscuous mode [ 49.046952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.049415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.053217][ T4028] device veth1_macvtap entered promiscuous mode [ 49.057961][ T4033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.061883][ T4033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.063681][ T4033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.065566][ T4033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.076209][ T4034] device veth1_vlan entered promiscuous mode [ 49.085502][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.087623][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.090423][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.116535][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.119571][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.121721][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.123778][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.126921][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.142697][ T1812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.144438][ T1812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.150816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.152978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.155084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.158359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.161235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.163623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.192557][ T4024] device veth0_macvtap entered promiscuous mode [ 49.197731][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.200245][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.202385][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.204478][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.207565][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.224491][ T4024] device veth1_macvtap entered promiscuous mode [ 49.227059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.229644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.231634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.233865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.245307][ T4028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.247052][ T4028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.250481][ T4028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.252313][ T4028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.256870][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.259254][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.261428][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.263534][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.267357][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.271777][ T4034] device veth0_macvtap entered promiscuous mode [ 49.287077][ T4034] device veth1_macvtap entered promiscuous mode [ 49.322318][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.322508][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.324925][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.326407][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.328336][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.343049][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.345307][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.347260][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.353487][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.357885][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.362142][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.364079][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.366137][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.368123][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.371539][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.374852][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.377283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.381940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.384017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.386088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.388262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.390631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.392797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.398710][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.400884][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.402973][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.405148][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.407285][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.412211][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.414397][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.416634][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.429833][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.436163][ T4034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.437988][ T4034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.446736][ T4034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450958][ T4034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.469706][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.472000][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.503219][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.504951][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.518201][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.558999][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.561319][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.563519][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.565559][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.567729][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.574363][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.576554][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.582844][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.591473][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.651394][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.653608][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.658074][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.660305][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.680439][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.699997][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.701943][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.703700][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.713795][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.743890][ T4109] udc-core: couldn't find an available UDC or it's busy [ 49.745323][ T4109] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.752851][ T483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.754609][ T483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.761194][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.784206][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.786230][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.788670][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.807423][ T4109] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 49.820367][ T4109] device syzkaller1 entered promiscuous mode [ 49.872260][ T483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.873989][ T483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.876387][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.943887][ T4112] udc-core: couldn't find an available UDC or it's busy [ 49.945291][ T4112] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.974887][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.976704][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.986289][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.029837][ T483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.031675][ T483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.034085][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.320180][ T4121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 51.172500][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 51.173933][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 51.175348][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 51.176726][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 51.177992][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 51.353160][ T4135] udc-core: couldn't find an available UDC or it's busy [ 51.359264][ T4135] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.662060][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 51.681132][ T4155] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.695677][ T4155] device bridge_slave_0 left promiscuous mode [ 51.697178][ T4155] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.705068][ T4071] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.978948][ T4071] usb 1-1: Using ep0 maxpacket: 32 [ 53.109301][ T4071] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 53.111342][ T4071] usb 1-1: New USB device strings: Mfr=23, Product=2, SerialNumber=3 [ 53.113065][ T4071] usb 1-1: Product: syz [ 53.113914][ T4071] usb 1-1: Manufacturer: syz [ 53.114825][ T4071] usb 1-1: SerialNumber: syz [ 53.121477][ T4165] capability: warning: `syz.2.23' uses deprecated v2 capabilities in a way that may be insecure [ 53.171986][ T4071] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 53.209964][ T4014] Bluetooth: hci4: command 0x0419 tx timeout [ 53.217098][ T4014] Bluetooth: hci0: command 0x0419 tx timeout [ 53.218979][ T4014] Bluetooth: hci2: command 0x0419 tx timeout [ 53.220458][ T4014] Bluetooth: hci1: command 0x0419 tx timeout [ 53.221807][ T4014] Bluetooth: hci3: command 0x0419 tx timeout [ 53.332722][ T4175] netlink: 68 bytes leftover after parsing attributes in process `syz.2.28'. [ 53.334772][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 53.337178][ T4175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28'. [ 53.339895][ T4175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28'. [ 53.374921][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 53.377018][ T4177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.409780][ T4177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.447211][ T4180] binder: 4178:4180 got transaction to invalid handle, 1 [ 53.452576][ T4180] binder: 4178:4180 transaction failed 29201/-22, size 0-0 line 2917 [ 53.456037][ T4075] binder: undelivered TRANSACTION_ERROR: 29201 [ 55.411380][ T4071] gspca_stk1135: reg_w 0xf err -71 [ 55.413564][ T4071] gspca_stk1135: serial bus timeout: status=0x00 [ 55.414843][ T4071] gspca_stk1135: Sensor write failed [ 55.417037][ T4071] gspca_stk1135: serial bus timeout: status=0x00 [ 55.418390][ T4071] gspca_stk1135: Sensor write failed [ 55.420091][ T4071] gspca_stk1135: serial bus timeout: status=0x00 [ 55.421388][ T4071] gspca_stk1135: Sensor read failed [ 55.422364][ T4071] gspca_stk1135: serial bus timeout: status=0x00 [ 55.423580][ T4071] gspca_stk1135: Sensor read failed [ 55.424639][ T4071] gspca_stk1135: Detected sensor type unknown (0x0) [ 55.425899][ T4071] gspca_stk1135: serial bus timeout: status=0x00 [ 55.427300][ T4071] gspca_stk1135: Sensor read failed [ 55.428523][ T4071] gspca_stk1135: serial bus timeout: status=0x00 [ 55.429814][ T4071] gspca_stk1135: Sensor read failed [ 55.430852][ T4071] gspca_stk1135: serial bus timeout: status=0x00 [ 55.432241][ T4071] gspca_stk1135: Sensor write failed [ 55.433288][ T4071] gspca_stk1135: serial bus timeout: status=0x00 [ 55.434670][ T4071] gspca_stk1135: Sensor write failed [ 55.435820][ T4071] stk1135: probe of 1-1:64.0 failed with error -71 [ 55.440632][ T4071] usb 1-1: USB disconnect, device number 2 [ 55.779140][ T4211] tmpfs: Unknown parameter 'usrquota' [ 56.201555][ T4233] netlink: 'syz.4.53': attribute type 10 has an invalid length. [ 56.230165][ T4233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.233810][ T4233] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.372925][ T4243] udc-core: couldn't find an available UDC or it's busy [ 56.378385][ T4243] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.830946][ T4258] netlink: 'syz.1.45': attribute type 2 has an invalid length. [ 57.119714][ T4267] Zero length message leads to an empty skb [ 57.459196][ T4276] tmpfs: Unknown parameter 'usrquota' [ 58.070301][ T4293] netlink: 52 bytes leftover after parsing attributes in process `syz.0.72'. [ 62.459215][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 62.849597][ T13] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 62.851782][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.856362][ T13] usb 1-1: config 0 descriptor?? [ 62.896295][ T4399] netlink: 'syz.3.105': attribute type 2 has an invalid length. [ 62.908267][ T4398] tmpfs: Unknown parameter 'usrquota' [ 63.954572][ T13] playstation 0003:054C:0DF2.0001: item fetching failed at offset 2/5 [ 64.056868][ T13] playstation 0003:054C:0DF2.0001: Parse failed [ 64.058243][ T13] playstation: probe of 0003:054C:0DF2.0001 failed with error -22 [ 64.163078][ T13] usb 1-1: USB disconnect, device number 3 [ 66.552820][ T4464] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 66.554911][ T4464] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 69.583275][ T4503] No such timeout policy "syz0" [ 69.610923][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.612813][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.615853][ T7] cfg80211: failed to load regulatory.db [ 70.567989][ T4526] netlink: 'syz.0.135': attribute type 2 has an invalid length. [ 71.441122][ T4533] tmpfs: Unknown parameter 'usrquota' [ 71.530029][ T4536] udc-core: couldn't find an available UDC or it's busy [ 71.531356][ T4536] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 72.174556][ T4553] netlink: 'syz.1.145': attribute type 10 has an invalid length. [ 72.241273][ T4553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.247679][ T4553] team0: Port device batadv0 added [ 73.852598][ T4472] atkbd serio0: keyboard reset failed on [ 75.784588][ T4610] No such timeout policy "syz0" [ 76.138482][ C1] sched: RT throttling activated [ 76.769749][ T4625] tmpfs: Unknown parameter 'usrquota' [ 77.311509][ T4631] netlink: 'syz.2.165': attribute type 2 has an invalid length. [ 80.625414][ T4659] udc-core: couldn't find an available UDC or it's busy [ 80.626888][ T4659] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.748696][ T4665] No such timeout policy "syz0" [ 84.301293][ T4724] device veth0_virt_wifi entered promiscuous mode [ 84.342874][ T4724] device veth0_virt_wifi left promiscuous mode [ 84.349272][ T4727] No such timeout policy "syz0" [ 84.471365][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.964681][ T4743] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 84.966315][ T4743] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 85.351295][ T4750] netlink: 'syz.3.195': attribute type 2 has an invalid length. [ 87.304450][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.198'. [ 87.948795][ T4766] tmpfs: Unknown parameter 'usrquota' [ 89.297169][ T4781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 89.508739][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 89.526065][ T4790] udc-core: couldn't find an available UDC or it's busy [ 89.527483][ T4790] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.391685][ T1535] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.452596][ T4796] udc-core: couldn't find an available UDC or it's busy [ 90.454240][ T4796] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 90.472217][ T4796] loop9: detected capacity change from 0 to 7 [ 90.491949][ T4796] Dev loop9: unable to read RDB block 7 [ 90.493302][ T4796] loop9: unable to read partition table [ 90.494631][ T4796] loop9: partition table beyond EOD, truncated [ 90.495919][ T4796] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 90.543747][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 90.607378][ T4792] tmpfs: Unknown parameter 'usrquota' [ 91.541845][ T4808] device geneve0 entered promiscuous mode [ 91.544851][ T4808] device geneve0 left promiscuous mode [ 91.658759][ T1535] usb 1-1: Using ep0 maxpacket: 16 [ 91.686936][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 92.220996][ T4821] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.223040][ T4821] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 92.639461][ T4824] No such timeout policy "syz0" [ 92.650540][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 92.668728][ T1535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.671171][ T1535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.673198][ T1535] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.725655][ T1535] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 92.727670][ T1535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.754297][ T1535] usb 1-1: config 0 descriptor?? [ 93.911364][ T4840] device vlan2 entered promiscuous mode [ 93.912644][ T4840] device macsec0 entered promiscuous mode [ 93.954240][ T4840] device macsec0 left promiscuous mode [ 93.968712][ T1535] usbhid 1-1:0.0: can't add hid device: -71 [ 93.970079][ T1535] usbhid: probe of 1-1:0.0 failed with error -71 [ 93.973064][ T1535] usb 1-1: USB disconnect, device number 4 [ 94.240687][ T4851] udc-core: couldn't find an available UDC or it's busy [ 94.242093][ T4851] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.637992][ T4854] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 94.639920][ T4854] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 95.300852][ T4858] netlink: 44 bytes leftover after parsing attributes in process `syz.2.234'. [ 97.496214][ T4878] tmpfs: Unknown parameter 'usrquota' [ 98.305503][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 98.358934][ T4886] device vlan2 entered promiscuous mode [ 98.367995][ T4886] device dummy0 entered promiscuous mode [ 98.392469][ T4886] team0: Port device vlan2 added [ 98.494885][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'. [ 98.508797][ T4894] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 98.510799][ T4894] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 99.212653][ T4907] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.214460][ T4907] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 99.924176][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 99.937952][ T4916] tipc: Started in network mode [ 99.950643][ T4916] tipc: Node identity 800, cluster identity 4711 [ 99.956673][ T4916] tipc: Node number set to 2048 [ 100.157253][ T4921] tmpfs: Unknown parameter 'usrquota' [ 100.725789][ T4916] tipc: Cannot configure node identity twice [ 100.905939][ T4928] udc-core: couldn't find an available UDC or it's busy [ 100.907548][ T4928] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.954389][ T26] audit: type=1326 audit(100.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85410a68 code=0x7ffc0000 [ 100.970376][ T26] audit: type=1326 audit(100.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff85410a68 code=0x7ffc0000 [ 101.041827][ T26] audit: type=1326 audit(101.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85410a68 code=0x7ffc0000 [ 101.048873][ T26] audit: type=1326 audit(101.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85410a68 code=0x7ffc0000 [ 101.737935][ T4963] tmpfs: Unknown parameter 'usrquota' [ 102.708643][ T4070] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.713647][ T4977] udc-core: couldn't find an available UDC or it's busy [ 102.715145][ T4977] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 102.800285][ T4979] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 102.806392][ T4979] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 102.948578][ T4070] usb 1-1: Using ep0 maxpacket: 8 [ 103.075043][ T4070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 103.077538][ T4070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.079595][ T4070] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.081463][ T4070] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 103.083678][ T4070] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 103.085662][ T4070] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 103.087402][ T4070] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.123696][ T4070] usb 1-1: config 0 descriptor?? [ 103.138893][ T4968] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.486462][ T4986] udc-core: couldn't find an available UDC or it's busy [ 103.500375][ T4986] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 103.758671][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.760672][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.762088][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.763436][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.764932][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.766459][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.767954][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.769540][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.770931][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.772393][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.773839][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.775254][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.776719][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.778293][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.781405][ T4031] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 103.911107][ T4014] usb 1-1: USB disconnect, device number 5 [ 103.951618][ T4990] netlink: 44 bytes leftover after parsing attributes in process `syz.1.282'. [ 104.472244][ T5004] tmpfs: Unknown parameter 'usrquota' [ 106.186215][ T5033] netlink: 'syz.1.299': attribute type 29 has an invalid length. [ 106.235767][ T5033] netlink: 'syz.1.299': attribute type 29 has an invalid length. [ 106.240577][ T5034] netlink: 'syz.1.299': attribute type 29 has an invalid length. [ 106.316360][ T5036] netlink: 44 bytes leftover after parsing attributes in process `syz.0.298'. [ 107.360902][ T5065] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.362598][ T5065] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 107.527115][ T5075] udc-core: couldn't find an available UDC or it's busy [ 107.529370][ T5075] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 107.550469][ T5077] udc-core: couldn't find an available UDC or it's busy [ 107.552172][ T5077] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 109.297825][ T5100] netlink: 'syz.1.320': attribute type 2 has an invalid length. [ 110.065314][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 110.152100][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 110.153954][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 110.309294][ T5108] ALSA: mixer_oss: invalid OSS volume '35 bond_slave_1 2 0 ' [ 110.311231][ T5108] ALSA: mixer_oss: invalid OSS volume '35' [ 110.312342][ T5108] ALSA: mixer_oss: invalid OSS volume '35' [ 110.313524][ T5108] ALSA: mixer_oss: invalid OSS volume '36' [ 110.930447][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 110.976000][ T5131] udc-core: couldn't find an available UDC or it's busy [ 111.068751][ T5131] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.843754][ T5136] tipc: Started in network mode [ 111.847124][ T5136] tipc: Node identity 92be79d617b9, cluster identity 4711 [ 111.856511][ T5136] tipc: Enabled bearer , priority 3 [ 112.797676][ T5150] udc-core: couldn't find an available UDC or it's busy [ 112.818003][ T5150] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.969588][ T4071] tipc: Node number set to 2231859670 [ 113.423539][ T5164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 115.808644][ T4107] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.048644][ T4107] usb 1-1: Using ep0 maxpacket: 8 [ 116.330254][ T4107] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 116.332331][ T4107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.334329][ T4107] usb 1-1: Product: syz [ 116.335188][ T4107] usb 1-1: Manufacturer: syz [ 116.336267][ T4107] usb 1-1: SerialNumber: syz [ 116.357032][ T4107] usb 1-1: config 0 descriptor?? [ 117.278782][ T4107] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.646882][ T5240] binder: 5239:5240 ioctl 40046205 0 returned -22 [ 118.656229][ T5240] device batadv0 entered promiscuous mode [ 118.685905][ T5240] binder: 5239:5240 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 118.693488][ T5240] binder: 5240 RLIMIT_NICE not set [ 119.036978][ T5251] udc-core: couldn't find an available UDC or it's busy [ 119.038730][ T5251] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.413822][ T5259] udc-core: couldn't find an available UDC or it's busy [ 119.415855][ T5259] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.595416][ T5265] udc-core: couldn't find an available UDC or it's busy [ 119.597021][ T5265] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.738695][ T4107] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 119.754333][ T4107] usb 1-1: USB disconnect, device number 6 [ 120.768394][ T5278] netlink: set zone limit has 8 unknown bytes [ 121.690133][ T5299] tmpfs: Unknown parameter 'usrquota' [ 121.719257][ T4071] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.989296][ T5296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.397'. [ 122.198763][ T4071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.201331][ T4071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.203493][ T4071] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 122.205466][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.242094][ T4071] usb 1-1: config 0 descriptor?? [ 123.640997][ T5288] loop2: detected capacity change from 0 to 7 [ 123.655691][ T5288] Dev loop2: unable to read RDB block 7 [ 123.656850][ T5288] loop2: AHDI p1 p4 [ 123.657601][ T5288] loop2: partition table partially beyond EOD, truncated [ 123.674479][ T5288] loop2: p1 start 1202514458 is beyond EOD, truncated [ 123.962591][ T5335] tmpfs: Unknown parameter 'usrquota' [ 124.778667][ T4071] usbhid 1-1:0.0: can't add hid device: -71 [ 124.780051][ T4071] usbhid: probe of 1-1:0.0 failed with error -71 [ 124.783474][ T4071] usb 1-1: USB disconnect, device number 7 [ 125.092189][ T5349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.415'. [ 126.951715][ T5381] tmpfs: Unknown parameter 'usrquota' [ 127.751193][ T5384] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.752914][ T5384] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 128.054650][ T5392] netlink: 'syz.0.428': attribute type 2 has an invalid length. [ 129.472550][ T5404] netlink: 132 bytes leftover after parsing attributes in process `syz.4.432'. [ 130.489962][ T4107] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 130.491815][ T4107] Bluetooth: hci2: Injecting HCI hardware error event [ 130.493965][ T4031] Bluetooth: hci2: hardware error 0x00 [ 130.629313][ T5417] udc-core: couldn't find an available UDC or it's busy [ 130.630939][ T5417] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 130.661303][ T4071] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.932188][ T5419] tmpfs: Unknown parameter 'usrquota' [ 131.051461][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.053906][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.658622][ T4071] usb 1-1: Using ep0 maxpacket: 32 [ 131.778670][ T4071] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD8, skipping [ 131.967743][ T5429] netlink: 'syz.3.440': attribute type 2 has an invalid length. [ 132.708727][ T4071] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 132.710663][ T4071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.712250][ T4071] usb 1-1: Product: syz [ 132.713088][ T4071] usb 1-1: Manufacturer: syz [ 132.714320][ T4071] usb 1-1: SerialNumber: syz [ 132.732294][ T4071] usb 1-1: config 0 descriptor?? [ 132.770958][ T4071] usb 1-1: no audio or video endpoints found [ 133.676239][ T5439] netlink: zone id is out of range [ 133.680111][ T4594] usb 1-1: USB disconnect, device number 8 [ 133.682950][ T5439] netlink: zone id is out of range [ 133.687435][ T5439] netlink: zone id is out of range [ 133.705268][ T5439] netlink: zone id is out of range [ 133.710054][ T5439] netlink: zone id is out of range [ 133.713572][ T5438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.444'. [ 133.715570][ T5439] netlink: zone id is out of range [ 133.722536][ T5439] netlink: zone id is out of range [ 133.726454][ T5441] binder: 5440:5441 tried to acquire reference to desc 0, got 1 instead [ 133.733966][ T5439] netlink: zone id is out of range [ 133.735587][ T5441] binder: 5440:5441 got transaction with invalid data ptr [ 133.742002][ T5439] netlink: zone id is out of range [ 133.745629][ T5441] binder: 5440:5441 transaction failed 29201/-14, size 0-12288 line 3186 [ 133.747422][ T5439] netlink: zone id is out of range [ 133.752396][ T4965] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.012115][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.017165][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.025314][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.032484][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.038913][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.047927][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.054418][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.059456][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.067361][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.072941][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.079421][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.085524][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.234984][ T5457] netlink: 'syz.3.452': attribute type 2 has an invalid length. [ 134.842243][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.845187][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.846857][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.848443][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.850020][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.851531][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.852930][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.854283][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.855825][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.857287][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.858970][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.860451][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.861928][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.863482][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.864933][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.866445][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.867892][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.869477][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.870863][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.872616][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.874163][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.875592][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.877012][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.878616][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.880503][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.882030][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.883472][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.885027][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.886706][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.888238][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.889979][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 134.948770][ T4070] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 135.333503][ T5476] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 135.343612][ T5476] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 135.439507][ T5483] binder: 5482:5483 tried to acquire reference to desc 0, got 1 instead [ 135.446825][ T5483] binder: 5482:5483 got transaction with invalid offsets ptr [ 135.461710][ T5483] binder: 5482:5483 transaction failed 29201/-14, size 0-12288 line 3124 [ 135.474422][ T4070] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.550182][ T5490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.462'. [ 135.989875][ T5503] netlink: 'syz.0.464': attribute type 2 has an invalid length. [ 136.885984][ T5510] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 136.894724][ T5510] device syz_tun entered promiscuous mode [ 136.934230][ T5510] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 137.438586][ T4071] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.678557][ T4071] usb 1-1: Using ep0 maxpacket: 16 [ 137.702954][ T5518] udc-core: couldn't find an available UDC or it's busy [ 137.708777][ T5518] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.838879][ T4071] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.841648][ T5520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.474'. [ 137.918644][ T5518] udc-core: couldn't find an available UDC or it's busy [ 137.920610][ T4071] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 137.922296][ T4071] usb 1-1: config 0 has no interface number 0 [ 137.923764][ T5518] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.926169][ T5523] udc-core: couldn't find an available UDC or it's busy [ 137.930744][ T5518] udc-core: couldn't find an available UDC or it's busy [ 137.933042][ T5524] udc-core: couldn't find an available UDC or it's busy [ 137.934655][ T5518] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.936391][ T5523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.939557][ T5524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.078838][ T4071] usb 1-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 138.081070][ T4071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.082788][ T4071] usb 1-1: Product: syz [ 138.083577][ T4071] usb 1-1: Manufacturer: syz [ 138.084778][ T4071] usb 1-1: SerialNumber: syz [ 138.100189][ T4071] usb 1-1: config 0 descriptor?? [ 138.145364][ T5523] udc-core: couldn't find an available UDC or it's busy [ 138.146826][ T5523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.348825][ T4965] usb 1-1: USB disconnect, device number 9 [ 138.671237][ T5529] udc-core: couldn't find an available UDC or it's busy [ 138.672811][ T5529] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.681994][ T5531] udc-core: couldn't find an available UDC or it's busy [ 138.683593][ T5531] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 138.801149][ T5532] netlink: 'syz.4.477': attribute type 2 has an invalid length. [ 139.461036][ T5533] udc-core: couldn't find an available UDC or it's busy [ 139.462743][ T5533] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.530881][ T5535] udc-core: couldn't find an available UDC or it's busy [ 139.532559][ T5535] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.638639][ T4965] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 139.737969][ T5535] udc-core: couldn't find an available UDC or it's busy [ 139.739746][ T5535] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.756689][ T5543] udc-core: couldn't find an available UDC or it's busy [ 139.758243][ T5543] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.888656][ T4965] usb 1-1: Using ep0 maxpacket: 16 [ 139.987366][ T5546] udc-core: couldn't find an available UDC or it's busy [ 139.989118][ T5546] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 139.994306][ T5546] udc-core: couldn't find an available UDC or it's busy [ 139.995774][ T5546] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.099352][ T4965] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.228754][ T4965] usb 1-1: unable to read config index 0 descriptor/all [ 140.230357][ T4965] usb 1-1: can't read configurations, error -71 [ 140.358134][ T5550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.486'. [ 140.368751][ T5553] udc-core: couldn't find an available UDC or it's busy [ 140.370321][ T5553] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.497001][ T5556] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 140.517925][ T5555] udc-core: couldn't find an available UDC or it's busy [ 140.518110][ T5556] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 140.519510][ T5555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.540878][ T5555] udc-core: couldn't find an available UDC or it's busy [ 140.542244][ T5555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.544506][ T5559] udc-core: couldn't find an available UDC or it's busy [ 140.546038][ T5559] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.576203][ T5553] udc-core: couldn't find an available UDC or it's busy [ 140.577823][ T5553] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.748759][ T5555] udc-core: couldn't find an available UDC or it's busy [ 140.750218][ T5555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 141.144572][ T5566] netlink: 'syz.1.491': attribute type 2 has an invalid length. [ 142.063757][ T5573] udc-core: couldn't find an available UDC or it's busy [ 142.065290][ T5573] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 142.213519][ T5581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.498'. [ 143.201822][ T5598] netlink: 'syz.0.504': attribute type 2 has an invalid length. [ 143.685043][ T5600] udc-core: couldn't find an available UDC or it's busy [ 143.699498][ T5600] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.086300][ T5616] udc-core: couldn't find an available UDC or it's busy [ 145.087892][ T5616] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 145.570765][ T5626] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 145.572332][ T5626] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 146.513015][ T26] audit: type=1326 audit(146.490:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31e5a68 code=0x7ffc0000 [ 146.517284][ T26] audit: type=1326 audit(146.490:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31e5a68 code=0x7ffc0000 [ 146.548568][ T26] audit: type=1326 audit(146.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=191 compat=0 ip=0xffffb31e5a68 code=0x7ffc0000 [ 146.553601][ T26] audit: type=1326 audit(146.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31e5a68 code=0x7ffc0000 [ 146.557825][ T26] audit: type=1326 audit(146.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.1.517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31e5a68 code=0x7ffc0000 [ 146.625976][ T5639] udc-core: couldn't find an available UDC or it's busy [ 146.627642][ T5639] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 148.555860][ T5663] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 148.555913][ T5663] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 149.582816][ T5676] device ip6erspan0 entered promiscuous mode [ 149.587014][ T5678] udc-core: couldn't find an available UDC or it's busy [ 149.588579][ T5678] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.666007][ T5680] udc-core: couldn't find an available UDC or it's busy [ 149.667951][ T5680] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.930059][ T5682] tmpfs: Unknown parameter 'usrquota' [ 150.569797][ T5684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 151.664069][ T5697] udc-core: couldn't find an available UDC or it's busy [ 151.665489][ T5697] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.695356][ T5697] udc-core: couldn't find an available UDC or it's busy [ 151.696889][ T5697] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.734355][ T5699] udc-core: couldn't find an available UDC or it's busy [ 151.735808][ T5699] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.741730][ T5701] udc-core: couldn't find an available UDC or it's busy [ 151.759305][ T5701] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.765276][ T5699] udc-core: couldn't find an available UDC or it's busy [ 151.766847][ T5699] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 151.774660][ T5701] udc-core: couldn't find an available UDC or it's busy [ 151.778635][ T5701] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 152.408632][ T4071] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 152.410393][ T4071] Bluetooth: hci3: Injecting HCI hardware error event [ 152.412014][ T4031] Bluetooth: hci3: hardware error 0x00 [ 152.429131][ T25] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 155.280177][ T5729] tmpfs: Unknown parameter 'usrquota' [ 157.577502][ T5746] udc-core: couldn't find an available UDC or it's busy [ 157.579073][ T5746] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 157.849603][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 157.928103][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 159.124629][ T5765] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 161.399384][ T5791] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 161.402812][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.404674][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.421863][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.423517][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.425046][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.426634][ T5791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.446177][ T5791] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 164.354977][ T4070] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 164.660074][ T5813] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.661805][ T5813] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 166.388588][ T4070] usb 1-1: unable to read config index 0 descriptor/all [ 166.390087][ T4070] usb 1-1: can't read configurations, error -71 [ 166.824250][ T5843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'. [ 166.826055][ T5843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'. [ 167.788991][ T5843] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 167.803794][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 168.797705][ T5852] tipc: Started in network mode [ 168.802694][ T5852] tipc: Node identity f24519ed040c, cluster identity 4711 [ 168.805555][ T5852] tipc: Enabled bearer , priority 7 [ 168.816373][ T5852] ªªªªªª: renamed from syzkaller0 [ 168.910077][ T5852] tipc: Disabling bearer [ 169.660373][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 169.661826][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 171.352656][ T5877] team0: Failed to send options change via netlink (err -105) [ 171.362683][ T5877] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 171.387184][ T5877] team0: Port device team_slave_1 removed [ 173.221766][ T5893] udc-core: couldn't find an available UDC or it's busy [ 173.223280][ T5893] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 173.829045][ T5912] input: syz1 as /devices/virtual/input/input4 [ 174.095796][ T5915] tmpfs: Unknown parameter 'usrquota' [ 174.177830][ T5918] udc-core: couldn't find an available UDC or it's busy [ 174.198078][ T5918] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 174.486078][ T4107] [ 174.486616][ T4107] ====================================================== [ 174.487943][ T4107] WARNING: possible circular locking dependency detected [ 174.489388][ T4107] 5.15.173-syzkaller #0 Not tainted [ 174.490587][ T4107] ------------------------------------------------------ [ 174.492068][ T4107] kworker/0:9/4107 is trying to acquire lock: [ 174.493307][ T4107] ffff0000ca91cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 174.495614][ T4107] [ 174.495614][ T4107] but task is already holding lock: [ 174.497105][ T4107] ffff800016f25fe8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 174.498974][ T4107] [ 174.498974][ T4107] which lock already depends on the new lock. [ 174.498974][ T4107] [ 174.501177][ T4107] [ 174.501177][ T4107] the existing dependency chain (in reverse order) is: [ 174.503117][ T4107] [ 174.503117][ T4107] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 174.504820][ T4107] __mutex_lock_common+0x194/0x2154 [ 174.506170][ T4107] mutex_lock_nested+0xa4/0xf8 [ 174.507314][ T4107] rfkill_register+0x44/0x7a4 [ 174.508346][ T4107] hci_register_dev+0x3e0/0x880 [ 174.509412][ T4107] vhci_create_device+0x2c4/0x568 [ 174.510624][ T4107] vhci_write+0x318/0x3b8 [ 174.511587][ T4107] vfs_write+0x884/0xb44 [ 174.512563][ T4107] ksys_write+0x15c/0x26c [ 174.513561][ T4107] __arm64_sys_write+0x7c/0x90 [ 174.514707][ T4107] invoke_syscall+0x98/0x2b8 [ 174.515798][ T4107] el0_svc_common+0x138/0x258 [ 174.516879][ T4107] do_el0_svc+0x58/0x14c [ 174.517863][ T4107] el0_svc+0x7c/0x1f0 [ 174.518852][ T4107] el0t_64_sync_handler+0x84/0xe4 [ 174.519931][ T4107] el0t_64_sync+0x1a0/0x1a4 [ 174.520947][ T4107] [ 174.520947][ T4107] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 174.522594][ T4107] __mutex_lock_common+0x194/0x2154 [ 174.523833][ T4107] mutex_lock_nested+0xa4/0xf8 [ 174.524874][ T4107] vhci_send_frame+0x8c/0x10c [ 174.525950][ T4107] hci_send_frame+0x194/0x2f0 [ 174.526972][ T4107] hci_tx_work+0x9ac/0x16cc [ 174.527953][ T4107] process_one_work+0x790/0x11b8 [ 174.529170][ T4107] worker_thread+0x910/0x1034 [ 174.530186][ T4107] kthread+0x37c/0x45c [ 174.531093][ T4107] ret_from_fork+0x10/0x20 [ 174.532137][ T4107] [ 174.532137][ T4107] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 174.533968][ T4107] __flush_work+0xf8/0x1c0 [ 174.534936][ T4107] flush_work+0x24/0x38 [ 174.535875][ T4107] hci_dev_do_open+0x9c4/0x104c [ 174.537006][ T4107] hci_power_on+0x13c/0x65c [ 174.538012][ T4107] process_one_work+0x790/0x11b8 [ 174.539205][ T4107] worker_thread+0x910/0x1034 [ 174.540276][ T4107] kthread+0x37c/0x45c [ 174.541171][ T4107] ret_from_fork+0x10/0x20 [ 174.542157][ T4107] [ 174.542157][ T4107] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 174.543794][ T4107] __mutex_lock_common+0x194/0x2154 [ 174.544982][ T4107] mutex_lock_nested+0xa4/0xf8 [ 174.546081][ T4107] bg_scan_update+0x9c/0x470 [ 174.547152][ T4107] process_one_work+0x790/0x11b8 [ 174.548377][ T4107] worker_thread+0x910/0x1034 [ 174.549477][ T4107] kthread+0x37c/0x45c [ 174.550411][ T4107] ret_from_fork+0x10/0x20 [ 174.551402][ T4107] [ 174.551402][ T4107] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 174.553409][ T4107] __lock_acquire+0x32d4/0x7638 [ 174.554508][ T4107] lock_acquire+0x240/0x77c [ 174.555525][ T4107] __flush_work+0xf8/0x1c0 [ 174.556595][ T4107] __cancel_work_timer+0x3ec/0x548 [ 174.557754][ T4107] cancel_work_sync+0x24/0x38 [ 174.558846][ T4107] hci_request_cancel_all+0xcc/0x2d0 [ 174.560002][ T4107] hci_dev_do_close+0x54/0x1060 [ 174.561154][ T4107] hci_rfkill_set_block+0xdc/0x1d0 [ 174.562324][ T4107] rfkill_set_block+0x18c/0x37c [ 174.563431][ T4107] rfkill_epo+0x8c/0x158 [ 174.564357][ T4107] rfkill_op_handler+0x170/0x288 [ 174.565449][ T4107] process_one_work+0x790/0x11b8 [ 174.566489][ T4107] worker_thread+0x910/0x1034 [ 174.567572][ T4107] kthread+0x37c/0x45c [ 174.568486][ T4107] ret_from_fork+0x10/0x20 [ 174.569473][ T4107] [ 174.569473][ T4107] other info that might help us debug this: [ 174.569473][ T4107] [ 174.571491][ T4107] Chain exists of: [ 174.571491][ T4107] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 174.571491][ T4107] [ 174.574812][ T4107] Possible unsafe locking scenario: [ 174.574812][ T4107] [ 174.576302][ T4107] CPU0 CPU1 [ 174.577427][ T4107] ---- ---- [ 174.578539][ T4107] lock(rfkill_global_mutex); [ 174.579603][ T4107] lock(&data->open_mutex); [ 174.581050][ T4107] lock(rfkill_global_mutex); [ 174.582708][ T4107] lock((work_completion)(&hdev->bg_scan_update)); [ 174.584069][ T4107] [ 174.584069][ T4107] *** DEADLOCK *** [ 174.584069][ T4107] [ 174.585821][ T4107] 3 locks held by kworker/0:9/4107: [ 174.586849][ T4107] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 174.589019][ T4107] #1: ffff8000204e7c00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 174.591219][ T4107] #2: ffff800016f25fe8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 174.593061][ T4107] [ 174.593061][ T4107] stack backtrace: [ 174.594297][ T4107] CPU: 0 PID: 4107 Comm: kworker/0:9 Not tainted 5.15.173-syzkaller #0 [ 174.595973][ T4107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.598018][ T4107] Workqueue: events rfkill_op_handler [ 174.599127][ T4107] Call trace: [ 174.599863][ T4107] dump_backtrace+0x0/0x530 [ 174.600798][ T4107] show_stack+0x2c/0x3c [ 174.601631][ T4107] dump_stack_lvl+0x108/0x170 [ 174.602583][ T4107] dump_stack+0x1c/0x58 [ 174.603410][ T4107] print_circular_bug+0x150/0x1b8 [ 174.604478][ T4107] check_noncircular+0x2cc/0x378 [ 174.605507][ T4107] __lock_acquire+0x32d4/0x7638 [ 174.606437][ T4107] lock_acquire+0x240/0x77c [ 174.607331][ T4107] __flush_work+0xf8/0x1c0 [ 174.608251][ T4107] __cancel_work_timer+0x3ec/0x548 [ 174.609267][ T4107] cancel_work_sync+0x24/0x38 [ 174.610200][ T4107] hci_request_cancel_all+0xcc/0x2d0 [ 174.611266][ T4107] hci_dev_do_close+0x54/0x1060 [ 174.612288][ T4107] hci_rfkill_set_block+0xdc/0x1d0 [ 174.613325][ T4107] rfkill_set_block+0x18c/0x37c [ 174.614281][ T4107] rfkill_epo+0x8c/0x158 [ 174.615130][ T4107] rfkill_op_handler+0x170/0x288 [ 174.616140][ T4107] process_one_work+0x790/0x11b8 [ 174.617151][ T4107] worker_thread+0x910/0x1034 [ 174.618114][ T4107] kthread+0x37c/0x45c [ 174.618949][ T4107] ret_from_fork+0x10/0x20