last executing test programs: 5.189672912s ago: executing program 3 (id=569): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) 4.887259237s ago: executing program 2 (id=574): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/63, 0x3f}], 0x1, 0x0, 0x0) 4.200588913s ago: executing program 3 (id=575): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r0, 0x0, &(0x7f00000007c0)) 4.131990549s ago: executing program 3 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 3.691398185s ago: executing program 2 (id=579): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4) 3.623528871s ago: executing program 2 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) 3.602803893s ago: executing program 1 (id=583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000080), 0x4) 3.574175385s ago: executing program 1 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240), 0x0) socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000"], 0x1c}], 0x1}, 0x0) 3.320036066s ago: executing program 1 (id=585): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) 3.262943921s ago: executing program 3 (id=586): r0 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f00000000c0)) 2.963541065s ago: executing program 0 (id=587): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.815938547s ago: executing program 0 (id=588): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7ffffe, 0x8d, &(0x7f0000000040)) mq_notify(0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 2.680077709s ago: executing program 2 (id=590): ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7fffffff}], 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 2.491998345s ago: executing program 4 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x2000000}, 0x9}], 0x1, 0xcb, 0x0) 2.086025998s ago: executing program 4 (id=592): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0xef}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.018122414s ago: executing program 4 (id=593): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020) 1.984022996s ago: executing program 0 (id=594): socket$netlink(0x10, 0x3, 0x9) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0x0, 0x4, 0xfa, 0x9b0}, 0x20) 1.920048411s ago: executing program 4 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000240), 0x0) socket(0xa, 0x3, 0x1003a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000"], 0x1c}], 0x1}, 0x0) 1.828075919s ago: executing program 0 (id=596): syz_open_procfs(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$llc(0xffffffffffffffff, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3f, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r6 = fanotify_init(0x0, 0x80000) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) fanotify_mark(r6, 0x1, 0x40001019, r7, 0x0) 1.8142095s ago: executing program 1 (id=597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) 1.347165329s ago: executing program 3 (id=598): syz_open_dev$sndmidi(0x0, 0x5, 0x20000) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 1.056954072s ago: executing program 4 (id=599): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x200000000000000, 0x5, 0x7}, 0x0, 0x0) 995.963648ms ago: executing program 2 (id=600): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) 984.504509ms ago: executing program 0 (id=601): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) 950.678731ms ago: executing program 0 (id=602): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 880.423497ms ago: executing program 1 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000060c0)=""/4129, 0x1021}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x6}, 0x80000002}, {{0x0, 0x0, 0x0}, 0x8}], 0x5, 0x0, 0x0) 763.943216ms ago: executing program 3 (id=604): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7ffffe, 0x8d, &(0x7f0000000040)) mq_notify(0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 156.738567ms ago: executing program 2 (id=605): syz_usb_connect(0x0, 0x4a, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0xd0, 0x79, 0x14, 0x8, 0x12d1, 0x1c1f, 0x19ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x6d, 0x7, 0x40, 0x2, [{{0x9, 0x4, 0x97, 0xff, 0x4, 0x2, 0x2, 0xff, 0x5, [], [{{0x9, 0x5, 0x7, 0x4, 0x20, 0x2, 0x34, 0x5, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x5, 0x6, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x7, 0x80, 0x4}}, {{0x9, 0x5, 0x759d7eb7a7be5ba7, 0x0, 0x200, 0x3, 0x1, 0x4}}]}}]}}]}}, 0x0) 122.49668ms ago: executing program 4 (id=606): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x80000001, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz1\x00', {0x7, 0x800, 0xcb2, 0x4}, 0x1e, [0x8, 0x9, 0x2, 0xdc, 0x800, 0x1, 0x3, 0x9, 0xf07, 0x1, 0x7fffffff, 0xfff, 0x7f, 0xfffffffb, 0x2, 0x3ff, 0x8, 0x2, 0x3, 0x9, 0x10000, 0x0, 0x10001, 0x100, 0x1, 0x3, 0x10000, 0x6, 0x3, 0x7fffffff, 0x7, 0x8, 0xdc3, 0x6, 0x7, 0x800, 0x5, 0xfffffff8, 0x7, 0xa33, 0x3, 0x6, 0x101, 0x5, 0x3ff, 0x9, 0x4, 0x8, 0x7, 0xffffff7f, 0x4, 0x5, 0xb, 0x4, 0x6, 0x5, 0x3, 0xf, 0x3, 0x401, 0x6, 0x2, 0xd, 0x46b1], [0x1ff, 0x10000, 0x1000, 0xd, 0x9, 0x0, 0x2, 0xb, 0x4, 0xfffffffc, 0x4, 0x4, 0xecb, 0x3ff, 0x7, 0x1e, 0x263b, 0x8, 0x2bad511e, 0x7fff, 0x1, 0x10000, 0x1, 0x5, 0xa2, 0x3, 0x4, 0xaea, 0xfff, 0xffffffff, 0xe, 0x4, 0x5, 0x2, 0x4, 0x58, 0xfffffe01, 0x6, 0xfffffff8, 0x4f, 0x3, 0x7, 0x5, 0x4, 0x1, 0xc42, 0x2, 0x8, 0xfffffff8, 0x80, 0x3, 0xd832, 0x3f, 0x5, 0x8, 0x5, 0x2, 0x4, 0x4, 0x84d2, 0x8, 0x8, 0x7fff, 0x8], [0x0, 0x1, 0x7, 0x9, 0x2, 0xfffffc00, 0x4, 0xffff, 0x1, 0x6, 0xfffffffd, 0x480, 0x0, 0x4, 0x33668993, 0x80000001, 0x547f, 0x0, 0x2, 0x3, 0x6, 0x6, 0x5, 0x200, 0xbe0e, 0x4, 0x7, 0x5bec, 0x9, 0x10000, 0xb, 0x200, 0x2, 0x40000000, 0x8000, 0xfffffff2, 0x0, 0x6, 0x2, 0x7fff, 0x7, 0x10000, 0x10001, 0xffffffff, 0x1, 0x1, 0xa5, 0x9c, 0x2fe, 0x1, 0x80000000, 0x0, 0x6, 0x8, 0x4, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x40, 0x200, 0x80000001, 0x5], [0xb8200000, 0x10001, 0x4, 0x7fff, 0x13, 0x9c89, 0x8, 0x0, 0x6, 0xfffffe01, 0x400, 0x0, 0x4, 0x2000000, 0x4, 0x8, 0x5, 0x0, 0x3b3, 0xe726, 0xfffffffd, 0x4, 0x2, 0x10000, 0x3, 0x471, 0x101, 0x5, 0x7, 0x1, 0x4, 0x800, 0x2, 0x4, 0x8, 0x9, 0x7ff, 0x5, 0xfffffffb, 0x94e, 0x7, 0x587, 0xd, 0x9, 0x1ff, 0xc, 0x0, 0x9e1, 0x7ff, 0x4, 0x5, 0x0, 0xb, 0xfffffffb, 0x5, 0xa, 0x4, 0x93f5, 0x8, 0x100, 0x2, 0x4, 0x5, 0x5]}, 0x45c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 0s ago: executing program 1 (id=607): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 30.280809][ T4032] cgroup: Unknown subsys name 'net' [ 30.499109][ T4032] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.771761][ T4032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.602611][ T4045] chnl_net:caif_netlink_parms(): no params data found [ 31.640405][ T4052] chnl_net:caif_netlink_parms(): no params data found [ 31.650681][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 31.669131][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.670213][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.671818][ T4045] device bridge_slave_0 entered promiscuous mode [ 31.673848][ T4042] chnl_net:caif_netlink_parms(): no params data found [ 31.683022][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.684144][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.685613][ T4045] device bridge_slave_1 entered promiscuous mode [ 31.701547][ T4045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.705898][ T4050] chnl_net:caif_netlink_parms(): no params data found [ 31.715111][ T4045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.739928][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.741107][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.742493][ T4049] device bridge_slave_0 entered promiscuous mode [ 31.744377][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.745537][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.747284][ T4052] device bridge_slave_0 entered promiscuous mode [ 31.751415][ T4045] team0: Port device team_slave_0 added [ 31.755283][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.758704][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.760199][ T4049] device bridge_slave_1 entered promiscuous mode [ 31.761754][ T4052] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.762910][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.764408][ T4052] device bridge_slave_1 entered promiscuous mode [ 31.767723][ T4045] team0: Port device team_slave_1 added [ 31.772256][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.773354][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.774801][ T4042] device bridge_slave_0 entered promiscuous mode [ 31.777286][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.778374][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.779759][ T4042] device bridge_slave_1 entered promiscuous mode [ 31.804872][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.808889][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.810253][ T4050] device bridge_slave_0 entered promiscuous mode [ 31.812160][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.813195][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.817352][ T4045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.823368][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.826245][ T4052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.827946][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.829137][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.830726][ T4050] device bridge_slave_1 entered promiscuous mode [ 31.832331][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.833460][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.837992][ T4045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.842542][ T4042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.844709][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.847290][ T4052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.861515][ T4050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.863840][ T4042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.872636][ T4052] team0: Port device team_slave_0 added [ 31.874468][ T4050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.885292][ T4049] team0: Port device team_slave_0 added [ 31.890258][ T4052] team0: Port device team_slave_1 added [ 31.897419][ T4049] team0: Port device team_slave_1 added [ 31.908066][ T4050] team0: Port device team_slave_0 added [ 31.910088][ T4042] team0: Port device team_slave_0 added [ 31.912622][ T4042] team0: Port device team_slave_1 added [ 31.967049][ T4045] device hsr_slave_0 entered promiscuous mode [ 32.006094][ T4045] device hsr_slave_1 entered promiscuous mode [ 32.060065][ T4050] team0: Port device team_slave_1 added [ 32.067395][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.068486][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.072601][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.074972][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.076086][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.079991][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.082106][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.083155][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.087794][ T4052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.095610][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.096800][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.100690][ T4042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.103935][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.105081][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.109091][ T4052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.121011][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.122228][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.126552][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.130576][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.131669][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.136229][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.142620][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.143710][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.147919][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.226899][ T4042] device hsr_slave_0 entered promiscuous mode [ 32.286021][ T4042] device hsr_slave_1 entered promiscuous mode [ 32.325892][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.327070][ T4042] Cannot create hsr debugfs directory [ 32.367001][ T4052] device hsr_slave_0 entered promiscuous mode [ 32.406025][ T4052] device hsr_slave_1 entered promiscuous mode [ 32.445832][ T4052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.447107][ T4052] Cannot create hsr debugfs directory [ 32.476909][ T4049] device hsr_slave_0 entered promiscuous mode [ 32.526053][ T4049] device hsr_slave_1 entered promiscuous mode [ 32.565852][ T4049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.567050][ T4049] Cannot create hsr debugfs directory [ 32.657106][ T4050] device hsr_slave_0 entered promiscuous mode [ 32.726045][ T4050] device hsr_slave_1 entered promiscuous mode [ 32.765869][ T4050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.767107][ T4050] Cannot create hsr debugfs directory [ 32.857216][ T4045] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.889958][ T4045] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.931231][ T4045] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.970488][ T4045] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.030422][ T4049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.070111][ T4049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.109432][ T4049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.156947][ T4049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.225241][ T4042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.257249][ T4042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.301617][ T4042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.347577][ T4042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.414487][ T4045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.435733][ T4052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.457887][ T4052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.518161][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.519705][ T4052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.526398][ T1541] Bluetooth: hci4: command 0x0409 tx timeout [ 33.527619][ T1541] Bluetooth: hci2: command 0x0409 tx timeout [ 33.527763][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 33.529686][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 33.530671][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 33.567045][ T4052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.613386][ T4045] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.616470][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.618532][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.621654][ T4050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.647850][ T4050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.707211][ T4050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.751598][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.756810][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.758373][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.759990][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.761164][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.762734][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.764148][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.765496][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.771191][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.772681][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.773795][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.775124][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.777208][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.778639][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.779693][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.781061][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.782658][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.784101][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.787683][ T4050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.848256][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.850055][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.851692][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.853121][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.854679][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.860382][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.862017][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.863565][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.864665][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.866747][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.880187][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.881935][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.883574][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.886813][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.894799][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.898185][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.899793][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.901464][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.902906][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.904537][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.907137][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.909149][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.915406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.921884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.928150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.929750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.932524][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.936867][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.954768][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.956587][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.963254][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.978237][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.979797][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.981155][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.982238][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.983544][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.997567][ T4052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.000079][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.001605][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.002929][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.004090][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.014862][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.016614][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.017855][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.020311][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.032764][ T4052] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.034717][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.038354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.039668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.042540][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.052050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.053752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.055207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.057542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.059066][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.060265][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.061695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.063133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.064728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.066698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.074027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.075724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.078659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.080295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.081788][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.082876][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.085022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.086839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.090466][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.092026][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.093429][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.094820][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.104354][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.107231][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.111347][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.121727][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.123197][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.129778][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.131374][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.132836][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.134010][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.135373][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.138163][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.139787][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.141293][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.143677][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.145056][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.147038][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.148428][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.151340][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.153311][ T4049] device veth0_vlan entered promiscuous mode [ 34.165303][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.167070][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.168444][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.169517][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.183841][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.185579][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.188536][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.190106][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.191618][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.193094][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.194618][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.197210][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.198806][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.200293][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.201769][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.203106][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.207905][ T4049] device veth1_vlan entered promiscuous mode [ 34.212247][ T4045] device veth0_vlan entered promiscuous mode [ 34.215333][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.216996][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.218378][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.219973][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.221599][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.223087][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.227879][ T4052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.229605][ T4052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.242050][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.243584][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.245374][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.247458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.248983][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.255445][ T4050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.260430][ T4050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.263080][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.264397][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.265631][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.269084][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.270612][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.272074][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.273774][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.275227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.278347][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.281393][ T4049] device veth0_macvtap entered promiscuous mode [ 34.284384][ T4045] device veth1_vlan entered promiscuous mode [ 34.291184][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.301848][ T4049] device veth1_macvtap entered promiscuous mode [ 34.324606][ T4052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.332338][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.334461][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.337190][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.338697][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.340214][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.341734][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.342956][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.344074][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.345684][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.353504][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.355181][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.357581][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.359124][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.364815][ T4045] device veth0_macvtap entered promiscuous mode [ 34.367613][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.368825][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.370293][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.371492][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.372614][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.374062][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.382616][ T4049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.383905][ T4049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.385257][ T4049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.387685][ T4049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.391477][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.393137][ T4045] device veth1_macvtap entered promiscuous mode [ 34.401456][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.402953][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.404570][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.406328][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.408596][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.410237][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.411668][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.413722][ T4042] device veth0_vlan entered promiscuous mode [ 34.418265][ T4042] device veth1_vlan entered promiscuous mode [ 34.432986][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.434536][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.436044][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.440834][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.442453][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.444179][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.447687][ T4052] device veth0_vlan entered promiscuous mode [ 34.464381][ T4052] device veth1_vlan entered promiscuous mode [ 34.470889][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.472649][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.474833][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.480697][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.482252][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.483852][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.492038][ T4052] device veth0_macvtap entered promiscuous mode [ 34.493351][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.495008][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.498127][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.508488][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.510009][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.511592][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.515429][ T4045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.520716][ T4045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.522933][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.527143][ T337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.528327][ T337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.529768][ T4052] device veth1_macvtap entered promiscuous mode [ 34.532612][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.534092][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.535417][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.538838][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.541740][ T4042] device veth0_macvtap entered promiscuous mode [ 34.552150][ T4042] device veth1_macvtap entered promiscuous mode [ 34.555199][ T4045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.560527][ T4045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.561919][ T4045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.563275][ T4045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.565738][ T408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.567288][ T408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.570550][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.572228][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.573624][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.575161][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.577710][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.579320][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.580814][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.582346][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.583816][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.585324][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.588716][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.590271][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.607919][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.609361][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.611044][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.612450][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.620167][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.621874][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.623543][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.625319][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.629723][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.635914][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.637611][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.647061][ T4150] udc-core: couldn't find an available UDC or it's busy [ 34.648117][ T4150] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 34.650083][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.651843][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.653395][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.655138][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.658883][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.660212][ T4050] device veth0_vlan entered promiscuous mode [ 34.661491][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.663016][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.664643][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.667783][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.677789][ T4052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.679277][ T4052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.680655][ T4052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.681990][ T4052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.692142][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.693838][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.695303][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.697610][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.699071][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.701074][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.703265][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.712849][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.714457][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.718159][ T4042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.719563][ T4042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.721059][ T4042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.722654][ T4042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.739286][ T408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.740562][ T408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.743643][ T4050] device veth1_vlan entered promiscuous mode [ 34.745579][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.760256][ T408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.761460][ T408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.765176][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.780258][ T408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.781558][ T408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.782774][ T4050] device veth0_macvtap entered promiscuous mode [ 34.784241][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.788134][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.789674][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.791404][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.796091][ T4050] device veth1_macvtap entered promiscuous mode [ 34.805331][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.806828][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.809982][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.811496][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.827661][ T408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.829198][ T408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.843274][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.844963][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.850306][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.851984][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.854150][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.855685][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.857539][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.859068][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.861749][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.862899][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.864469][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.866807][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.869242][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.870964][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.872579][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.874174][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.875672][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.878226][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.879875][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.881734][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.883943][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.891442][ T4050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.893498][ T4050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.895129][ T4050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.896915][ T4050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.900198][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.901951][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.918779][ T4155] udc-core: couldn't find an available UDC or it's busy [ 34.919885][ T4155] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 34.924613][ T4155] udc-core: couldn't find an available UDC or it's busy [ 34.930126][ T4155] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 34.939898][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.941591][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.952761][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.991032][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.992322][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.993914][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.081387][ T337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.082568][ T337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.084261][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.467217][ T4168] device bridge1 entered promiscuous mode [ 35.505769][ T4171] udc-core: couldn't find an available UDC or it's busy [ 35.507771][ T4171] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 35.616216][ T25] Bluetooth: hci1: command 0x041b tx timeout [ 35.617435][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 35.618430][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 35.619413][ T25] Bluetooth: hci2: command 0x041b tx timeout [ 35.620429][ T25] Bluetooth: hci4: command 0x041b tx timeout [ 36.069638][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 36.071085][ T4187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 36.072514][ T4187] netlink: 'syz.3.16': attribute type 20 has an invalid length. [ 36.094179][ T4187] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.095702][ T4187] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.097279][ T4187] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.098564][ T4187] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.127105][ T4187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 36.128525][ T4187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 36.129969][ T4187] netlink: 'syz.3.16': attribute type 20 has an invalid length. [ 36.625025][ T4187] Zero length message leads to an empty skb [ 37.018948][ T4204] udc-core: couldn't find an available UDC or it's busy [ 37.020156][ T4204] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.609482][ T4220] udc-core: couldn't find an available UDC or it's busy [ 37.610817][ T4220] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.941508][ T25] Bluetooth: hci4: command 0x040f tx timeout [ 37.942901][ T25] Bluetooth: hci2: command 0x040f tx timeout [ 37.945300][ T25] Bluetooth: hci3: command 0x040f tx timeout [ 37.946374][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 37.947342][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 37.977798][ T4224] netlink: 'syz.0.27': attribute type 4 has an invalid length. [ 37.997680][ T4224] netlink: 'syz.0.27': attribute type 4 has an invalid length. [ 38.442287][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 39.277676][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 40.125560][ T4102] Bluetooth: hci1: command 0x0419 tx timeout [ 40.133792][ T4102] Bluetooth: hci0: command 0x0419 tx timeout [ 40.168327][ T4102] Bluetooth: hci3: command 0x0419 tx timeout [ 40.169364][ T4102] Bluetooth: hci2: command 0x0419 tx timeout [ 40.170318][ T4102] Bluetooth: hci4: command 0x0419 tx timeout [ 40.382135][ T4289] input: syz1 as /devices/virtual/input/input3 [ 40.423822][ T4289] input: failed to attach handler leds to device input3, error: -6 [ 41.216274][ T4313] udc-core: couldn't find an available UDC or it's busy [ 41.217673][ T4313] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 41.491724][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 42.066332][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.433931][ T4342] netlink: 68 bytes leftover after parsing attributes in process `syz.4.63'. [ 43.015965][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.017685][ T21] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 43.019634][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 43.021435][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 43.216133][ T21] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 43.217777][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.220308][ T21] usb 1-1: Product: syz [ 43.221846][ T21] usb 1-1: Manufacturer: syz [ 43.223022][ T21] usb 1-1: SerialNumber: syz [ 43.229770][ T21] usb 1-1: config 0 descriptor?? [ 43.277374][ T21] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 43.280061][ T21] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 43.306203][ T21] garmin_gps: probe of ttyUSB0 failed with error -8 [ 43.484334][ T4094] usb 1-1: USB disconnect, device number 2 [ 43.489269][ T4094] garmin_gps 1-1:0.0: device disconnected [ 44.536476][ T4375] udc-core: couldn't find an available UDC or it's busy [ 44.538621][ T4375] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.713478][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 46.489114][ T4391] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 46.750737][ T4391] Bluetooth: hci4: Injecting HCI hardware error event [ 46.755236][ T4046] Bluetooth: hci4: hardware error 0x00 [ 47.018309][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 49.077223][ T4473] udc-core: couldn't find an available UDC or it's busy [ 49.078506][ T4473] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.861969][ T4476] netlink: 'syz.0.102': attribute type 11 has an invalid length. [ 50.186311][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 51.073978][ T4512] qnx6: unable to read the first superblock [ 51.699136][ T4540] netlink: 5 bytes leftover after parsing attributes in process `syz.2.117'. [ 52.399824][ T4553] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 52.494672][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 53.409741][ T4573] udc-core: couldn't find an available UDC or it's busy [ 53.410805][ T4573] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.677212][ T4580] device bridge0 entered promiscuous mode [ 53.678393][ T4580] device macvlan2 entered promiscuous mode [ 54.915172][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 55.019092][ T4618] udc-core: couldn't find an available UDC or it's busy [ 55.020354][ T4618] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.531245][ T4625] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 55.917700][ T4638] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.015765][ T4637] syz.2.150 uses obsolete (PF_INET,SOCK_PACKET) [ 56.852930][ T4661] device syzkaller1 entered promiscuous mode [ 56.922301][ T4631] Invalid ELF header magic: != ELF [ 57.182855][ T4674] netlink: 'syz.0.159': attribute type 8 has an invalid length. [ 57.209960][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 57.685317][ T4686] udc-core: couldn't find an available UDC or it's busy [ 57.690771][ T4686] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.112945][ T4698] netlink: 72 bytes leftover after parsing attributes in process `syz.1.170'. [ 58.679487][ T4714] udc-core: couldn't find an available UDC or it's busy [ 58.680779][ T4714] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.129283][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 60.924306][ T4773] device bpq0 entered promiscuous mode [ 61.042503][ T4779] udc-core: couldn't find an available UDC or it's busy [ 61.043818][ T4779] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.700767][ T4793] device bpq0 left promiscuous mode [ 61.701869][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 61.791050][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 62.464299][ T4809] capability: warning: `syz.0.207' uses deprecated v2 capabilities in a way that may be insecure [ 62.466504][ T4809] ucma_write: process 117 (syz.0.207) changed security contexts after opening file descriptor, this is not allowed. [ 63.870510][ T4850] udc-core: couldn't find an available UDC or it's busy [ 63.879246][ T4850] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.197809][ T4854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.221'. [ 64.374436][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 66.312098][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 68.221512][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 69.214353][ T5009] udc-core: couldn't find an available UDC or it's busy [ 69.218316][ T5009] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.244150][ T5013] udc-core: couldn't find an available UDC or it's busy [ 69.245337][ T5013] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 69.316679][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 69.607100][ T1968] cfg80211: failed to load regulatory.db [ 69.747520][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.748783][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.834163][ T5036] binder: 5035:5036 ioctl c0306201 20000080 returned -14 [ 69.838080][ T5036] binder: 5035:5036 tried to acquire reference to desc 0, got 1 instead [ 69.839789][ T5036] binder: 5035:5036 not enough space to store 5 fds in buffer [ 69.841198][ T5036] binder: 5035:5036 transaction failed 29201/-22, size 96-24 line 3331 [ 69.842695][ T4094] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.098500][ T5052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 71.183432][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 71.222620][ T5079] input: syz1 as /devices/virtual/input/input6 [ 72.098146][ T4086] atkbd serio0: keyboard reset failed on [ 72.728633][ T5122] netlink: 64 bytes leftover after parsing attributes in process `syz.2.307'. [ 72.824466][ T5130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 74.353468][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 74.846516][ T5190] udc-core: couldn't find an available UDC or it's busy [ 74.847840][ T5190] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.865605][ T4443] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 75.961826][ T5225] udc-core: couldn't find an available UDC or it's busy [ 75.962964][ T5225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 75.973732][ T5223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 76.225980][ T4443] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.227548][ T4443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 76.229373][ T4443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 76.231097][ T4443] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 76.306008][ T4443] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 76.307366][ T4443] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 76.308508][ T4443] usb 1-1: Manufacturer: syz [ 76.310623][ T4443] usb 1-1: config 0 descriptor?? [ 76.566253][ T4443] Registered IR keymap rc-hauppauge [ 76.696946][ T4443] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 76.717528][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 76.765877][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 76.797132][ T4443] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 76.802626][ T4443] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 76.835956][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 76.876795][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 76.916623][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 76.956256][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 76.997104][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.037160][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.076185][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.176225][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.512362][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.556004][ T4443] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 77.586556][ T4443] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 77.588791][ T4443] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 78.656034][ T4391] usb 1-1: USB disconnect, device number 3 [ 79.689245][ T5279] netlink: 'syz.0.358': attribute type 10 has an invalid length. [ 79.692135][ T5279] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 79.695392][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 81.215409][ T5322] input: syz1 as /devices/virtual/input/input9 [ 81.469102][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 82.283545][ T5355] udc-core: couldn't find an available UDC or it's busy [ 82.286500][ T5355] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.368571][ T5359] udc-core: couldn't find an available UDC or it's busy [ 82.369832][ T5359] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.722586][ T5379] udc-core: couldn't find an available UDC or it's busy [ 83.723739][ T5379] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.726544][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 88.010717][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 88.386013][ T1541] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.537329][ T5525] udc-core: couldn't find an available UDC or it's busy [ 88.538367][ T5525] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.625884][ T1541] usb 1-1: Using ep0 maxpacket: 16 [ 88.747664][ T1541] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 88.748997][ T1541] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.750544][ T1541] usb 1-1: config 0 has no interface number 0 [ 88.906049][ T1541] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 88.907596][ T1541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.908811][ T1541] usb 1-1: Product: syz [ 88.909458][ T1541] usb 1-1: Manufacturer: syz [ 88.910239][ T1541] usb 1-1: SerialNumber: syz [ 89.237932][ T1541] usb 1-1: config 0 descriptor?? [ 89.320559][ T1541] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 89.323877][ T1541] nokiaca42v2 ttyUSB0: required endpoint is missing [ 89.792347][ T4086] usb 1-1: USB disconnect, device number 4 [ 89.793828][ T4086] cypress_m8 1-1:0.35: device disconnected [ 90.834541][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 91.379242][ T4046] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 91.790948][ T5590] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 91.805042][ T5590] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 94.208650][ T5644] udc-core: couldn't find an available UDC or it's busy [ 94.209855][ T5644] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.302088][ T5647] input: syz1 as /devices/virtual/input/input10 [ 96.065198][ T5666] futex_wake_op: syz.2.468 tries to shift op by 32; fix this program [ 96.084526][ T5666] udc-core: couldn't find an available UDC or it's busy [ 96.094239][ T5666] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 96.321854][ T5679] udc-core: couldn't find an available UDC or it's busy [ 96.323095][ T5679] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.694520][ T5706] device bpq0 entered promiscuous mode [ 97.864450][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 99.855175][ T5764] udc-core: couldn't find an available UDC or it's busy [ 99.856821][ T5764] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 100.175560][ T5777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 100.506197][ T5782] binder: 5781:5782 ioctl c0306201 20000080 returned -14 [ 100.509621][ T5782] binder: BINDER_SET_CONTEXT_MGR already set [ 100.511208][ T5782] binder: 5781:5782 ioctl 4018620d 20000040 returned -16 [ 100.512933][ T5782] binder: tried to use weak ref as strong ref [ 100.514166][ T5782] binder: 5781:5782 Acquire 1 refcount change on invalid ref 0 ret -22 [ 100.515710][ T5782] binder: 5781:5782 got transaction to invalid handle, 1 [ 100.519861][ T5782] binder: 5781:5782 transaction failed 29201/-22, size 96-24 line 2917 [ 100.521428][ T4086] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.696917][ T4046] Bluetooth: hci0: ACL packet too small [ 101.781412][ T5811] udc-core: couldn't find an available UDC or it's busy [ 101.782542][ T5811] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 102.590445][ T5832] binder: 5830:5832 tried to acquire reference to desc 0, got 1 instead [ 102.592270][ T5832] binder: 5830:5832 got reply transaction with bad transaction stack, transaction 13 has target 5830:0 [ 102.594176][ T5832] binder: 5830:5832 transaction failed 29201/-71, size 0-0 line 2837 [ 102.603825][ T5832] binder: 5830:5832 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 102.611192][ T5832] binder: 5832 RLIMIT_NICE not set [ 102.613986][ T5832] binder: 5832 RLIMIT_NICE not set [ 102.617545][ T5832] binder: 5832 RLIMIT_NICE not set [ 102.622733][ T5832] binder_alloc: 5830: binder_alloc_buf, no vma [ 102.626033][ T5832] binder: 5830:5832 transaction failed 29189/-3, size 0-0 line 3085 [ 102.627374][ T5832] binder: send failed reply for transaction 13 to 5830:5832 [ 102.629087][ T4086] binder: undelivered TRANSACTION_COMPLETE [ 102.630059][ T4086] binder: undelivered TRANSACTION_ERROR: 29201 [ 102.631009][ T4086] binder: undelivered TRANSACTION_ERROR: 29189 [ 102.649170][ T13] binder: undelivered TRANSACTION_ERROR: 29190 [ 102.851056][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 103.890327][ T5854] binder: 5853:5854 ioctl c0306201 20000080 returned -14 [ 103.899643][ T5854] binder: 5853:5854 tried to acquire reference to desc 0, got 1 instead [ 103.901424][ T5854] binder: 5853:5854 got transaction with invalid handle, 2 [ 103.902762][ T5854] binder: 5853:5854 transaction failed 29201/-22, size 104-24 line 3242 [ 103.904813][ T1541] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.540251][ T4046] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 105.035291][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 105.529533][ T5898] device ipvlan2 entered promiscuous mode [ 106.224065][ T5912] udc-core: couldn't find an available UDC or it's busy [ 106.228228][ T5912] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.838146][ T5924] device bpq0 left promiscuous mode [ 106.841585][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 107.090701][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 107.463952][ T5942] udc-core: couldn't find an available UDC or it's busy [ 107.465367][ T5942] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.198850][ T1541] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.716038][ T1541] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.717841][ T1541] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.719218][ T1541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.728211][ T1541] usb 1-1: config 0 descriptor?? [ 108.777411][ T1541] pwc: Askey VC010 type 2 USB webcam detected. [ 109.366404][ T1541] pwc: recv_control_msg error -32 req 02 val 2b00 [ 109.406610][ T1541] pwc: recv_control_msg error -32 req 02 val 2700 [ 109.446470][ T1541] pwc: recv_control_msg error -32 req 02 val 2c00 [ 109.486406][ T1541] pwc: recv_control_msg error -32 req 04 val 1000 [ 109.535955][ T1541] pwc: recv_control_msg error -32 req 04 val 1300 [ 109.575995][ T1541] pwc: recv_control_msg error -32 req 04 val 1400 [ 109.681890][ T1541] pwc: recv_control_msg error -32 req 02 val 2000 [ 109.726458][ T1541] pwc: recv_control_msg error -32 req 02 val 2100 [ 109.790895][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 110.315943][ T1541] pwc: recv_control_msg error -71 req 02 val 2500 [ 110.345911][ T1541] pwc: recv_control_msg error -71 req 02 val 2400 [ 110.375898][ T1541] pwc: recv_control_msg error -71 req 02 val 2600 [ 110.405897][ T1541] pwc: recv_control_msg error -71 req 02 val 2900 [ 110.436090][ T1541] pwc: recv_control_msg error -71 req 02 val 2800 [ 110.455988][ T1541] pwc: recv_control_msg error -71 req 04 val 1100 [ 110.515573][ T1541] pwc: recv_control_msg error -71 req 04 val 1200 [ 110.525161][ T1541] pwc: Registered as video11. [ 110.526508][ T1541] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 110.533362][ T1541] usb 1-1: USB disconnect, device number 5 [ 111.029600][ T6036] tipc: Started in network mode [ 111.030661][ T6036] tipc: Node identity 768d259d8ecb, cluster identity 4711 [ 111.032080][ T6036] tipc: Enabled bearer , priority 0 [ 111.087579][ T6036] device syzkaller0 entered promiscuous mode [ 111.107875][ T6035] tipc: Resetting bearer [ 111.184437][ T6035] tipc: Disabling bearer [ 112.169304][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 113.116971][ T4391] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.365877][ T4391] usb 1-1: Using ep0 maxpacket: 16 [ 113.495896][ T4391] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.497765][ T4391] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.499952][ T4391] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.500994][ T4391] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 113.502349][ T4391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.504924][ T4391] usb 1-1: config 0 descriptor?? [ 113.640198][ T6092] udc-core: couldn't find an available UDC or it's busy [ 113.641509][ T6092] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 113.786604][ T6098] input: syz0 as /devices/virtual/input/input12 [ 113.805225][ T7] [ 113.805592][ T7] ====================================================== [ 113.806649][ T7] WARNING: possible circular locking dependency detected [ 113.807600][ T7] 5.15.189-syzkaller #0 Not tainted [ 113.808339][ T7] ------------------------------------------------------ [ 113.809269][ T7] kworker/0:0/7 is trying to acquire lock: [ 113.810084][ T7] ffff0000d564cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 113.811681][ T7] [ 113.811681][ T7] but task is already holding lock: [ 113.812785][ T7] ffff80001651bc28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 113.814039][ T7] [ 113.814039][ T7] which lock already depends on the new lock. [ 113.814039][ T7] [ 113.815749][ T7] [ 113.815749][ T7] the existing dependency chain (in reverse order) is: [ 113.817115][ T7] [ 113.817115][ T7] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 113.818370][ T7] __mutex_lock_common+0x194/0x1edc [ 113.819286][ T7] mutex_lock_nested+0xac/0x11c [ 113.820083][ T7] rfkill_register+0x44/0x77c [ 113.820879][ T7] hci_register_dev+0x3d8/0x854 [ 113.821738][ T7] vhci_create_device+0x2bc/0x564 [ 113.822660][ T7] vhci_write+0x30c/0x3ac [ 113.823477][ T7] vfs_write+0x7c8/0xa2c [ 113.824207][ T7] ksys_write+0x120/0x210 [ 113.824899][ T7] __arm64_sys_write+0x7c/0x90 [ 113.825636][ T7] invoke_syscall+0x98/0x2b8 [ 113.826441][ T7] el0_svc_common+0x138/0x258 [ 113.827252][ T7] do_el0_svc+0x58/0x14c [ 113.827960][ T7] el0_svc+0x78/0x1e0 [ 113.828593][ T7] el0t_64_sync_handler+0xcc/0xe4 [ 113.829415][ T7] el0t_64_sync+0x1a0/0x1a4 [ 113.830118][ T7] [ 113.830118][ T7] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 113.831248][ T7] __mutex_lock_common+0x194/0x1edc [ 113.832033][ T7] mutex_lock_nested+0xac/0x11c [ 113.832794][ T7] vhci_send_frame+0x88/0x118 [ 113.833548][ T7] hci_send_frame+0x194/0x2f0 [ 113.834327][ T7] hci_tx_work+0x7e4/0x1394 [ 113.835152][ T7] process_one_work+0x79c/0x1140 [ 113.836010][ T7] worker_thread+0x8f4/0x101c [ 113.836894][ T7] kthread+0x374/0x454 [ 113.837578][ T7] ret_from_fork+0x10/0x20 [ 113.838373][ T7] [ 113.838373][ T7] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 113.839852][ T7] __flush_work+0xf4/0x1bc [ 113.840653][ T7] flush_work+0x24/0x38 [ 113.841460][ T7] hci_dev_do_close+0x164/0x105c [ 113.842408][ T7] hci_error_reset+0xe8/0x2a4 [ 113.843281][ T7] process_one_work+0x79c/0x1140 [ 113.844093][ T7] worker_thread+0x8f4/0x101c [ 113.844934][ T7] kthread+0x374/0x454 [ 113.845679][ T7] ret_from_fork+0x10/0x20 [ 113.846511][ T7] [ 113.846511][ T7] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 113.847646][ T7] __mutex_lock_common+0x194/0x1edc [ 113.848523][ T7] mutex_lock_nested+0xac/0x11c [ 113.849334][ T7] bg_scan_update+0x48/0x3d0 [ 113.850055][ T7] process_one_work+0x79c/0x1140 [ 113.850847][ T7] worker_thread+0x8f4/0x101c [ 113.851567][ T7] kthread+0x374/0x454 [ 113.852331][ T7] ret_from_fork+0x10/0x20 [ 113.853131][ T7] [ 113.853131][ T7] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 113.854646][ T7] __lock_acquire+0x2928/0x651c [ 113.855495][ T7] lock_acquire+0x1f4/0x620 [ 113.856337][ T7] __flush_work+0xf4/0x1bc [ 113.857174][ T7] __cancel_work_timer+0x2ec/0x448 [ 113.858044][ T7] cancel_work_sync+0x24/0x38 [ 113.858831][ T7] hci_request_cancel_all+0xbc/0x2d0 [ 113.859671][ T7] hci_dev_do_close+0x54/0x105c [ 113.860424][ T7] hci_rfkill_set_block+0xdc/0x1d0 [ 113.861212][ T7] rfkill_set_block+0x18c/0x374 [ 113.861973][ T7] rfkill_epo+0x8c/0x158 [ 113.862759][ T7] rfkill_op_handler+0x150/0x248 [ 113.863658][ T7] process_one_work+0x79c/0x1140 [ 113.864606][ T7] worker_thread+0x8f4/0x101c [ 113.865444][ T7] kthread+0x374/0x454 [ 113.866135][ T7] ret_from_fork+0x10/0x20 [ 113.866898][ T7] [ 113.866898][ T7] other info that might help us debug this: [ 113.866898][ T7] [ 113.868419][ T7] Chain exists of: [ 113.868419][ T7] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 113.868419][ T7] [ 113.870766][ T7] Possible unsafe locking scenario: [ 113.870766][ T7] [ 113.871881][ T7] CPU0 CPU1 [ 113.872685][ T7] ---- ---- [ 113.873488][ T7] lock(rfkill_global_mutex); [ 113.874207][ T7] lock(&data->open_mutex); [ 113.875371][ T7] lock(rfkill_global_mutex); [ 113.876507][ T7] lock((work_completion)(&hdev->bg_scan_update)); [ 113.877565][ T7] [ 113.877565][ T7] *** DEADLOCK *** [ 113.877565][ T7] [ 113.878759][ T7] 3 locks held by kworker/0:0/7: [ 113.879500][ T7] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 [ 113.881010][ T7] #1: ffff80001b2c7c00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 [ 113.882501][ T7] #2: ffff80001651bc28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 113.883908][ T7] [ 113.883908][ T7] stack backtrace: [ 113.884787][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 5.15.189-syzkaller #0 [ 113.886003][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 113.887418][ T7] Workqueue: events rfkill_op_handler [ 113.888215][ T7] Call trace: [ 113.888744][ T7] dump_backtrace+0x0/0x43c [ 113.889469][ T7] show_stack+0x2c/0x3c [ 113.890123][ T7] __dump_stack+0x30/0x40 [ 113.890813][ T7] dump_stack_lvl+0xf8/0x160 [ 113.891574][ T7] dump_stack+0x1c/0x5c [ 113.892246][ T7] print_circular_bug+0x148/0x1b0 [ 113.893077][ T7] check_noncircular+0x240/0x2d4 [ 113.893878][ T7] __lock_acquire+0x2928/0x651c [ 113.894609][ T7] lock_acquire+0x1f4/0x620 [ 113.895312][ T7] __flush_work+0xf4/0x1bc [ 113.896045][ T7] __cancel_work_timer+0x2ec/0x448 [ 113.896868][ T7] cancel_work_sync+0x24/0x38 [ 113.897586][ T7] hci_request_cancel_all+0xbc/0x2d0 [ 113.898400][ T7] hci_dev_do_close+0x54/0x105c [ 113.899098][ T7] hci_rfkill_set_block+0xdc/0x1d0 [ 113.899849][ T7] rfkill_set_block+0x18c/0x374 [ 113.900525][ T7] rfkill_epo+0x8c/0x158 [ 113.901110][ T7] rfkill_op_handler+0x150/0x248 [ 113.901870][ T7] process_one_work+0x79c/0x1140 [ 113.902628][ T7] worker_thread+0x8f4/0x101c [ 113.903320][ T7] kthread+0x374/0x454 [ 113.903935][ T7] ret_from_fork+0x10/0x20 [ 113.904620][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.966811][ T4391] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 113.967868][ T4391] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 113.968952][ T4391] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 113.971096][ T4391] kye 0003:0458:0138.0001: hidraw0: USB HID v0.08 Device [HID 0458:0138] on usb-dummy_hcd.0-1/input0 [ 114.170680][ T1541] usb 1-1: USB disconnect, device number 6