last executing test programs: 8m13.052080963s ago: executing program 3 (id=327): r0 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x73}, {0xfffffefffffffffd, 0xeca, 0x0, 0x0, 0x0, 0x0, 0x778a, 0xffff}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@multicast1}}, 0xe8) close(r0) 8m11.833948722s ago: executing program 3 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x11, 0x1, 0x0, 0x2, {0x7, 0x0, 0x0, r2, 0x0, 0x2a000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1c091}, 0x0) 8m11.399208659s ago: executing program 3 (id=331): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000440)='cq\xad\x87\xa5\xb5\xd5#/\xa4\xe9\xb8\xa4_\x1b\x11D\xcd\x15*\xdb\x02+cy]w\xb0u\x8cx\xcc\xbb\x1eO\x9dW(%\xa2d\xda\xf8C$u;x\xcfS\xfb', &(0x7f0000000740)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00 \xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$F\xba\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\x00\x00\x00\x00\x00\x00\x00\x01\xc7\xe6\xf28\x19\xa6\xa7\xb1\xc6x\x8cy\xcf\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x81g\x90\x01n%\x7f_\xe1.\xfd\xea\xd7j\xfb\"\xab\xdb\x062e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\xb1Co\xc07\x19\xc6\"\x9c\x8d\xdfA\xf8T\xe5\xae\xbf\x00)WNW2$B$\x84\xf7\x9b\xfd1\x91\xc0;\x9dJ\x94\x196f\x11\xcfp\xef]\x05fgw\fX\xb5\xdd\x8a\x13o\x05\xbe\x94\xbaR\x9a/dy\xe5K\xe9aiv\xa5nb\xfa5\x98\x91\x1d~b2@~j\xc3\xd44\x81\x91q\x9b\xaaLp\xe3C{OF\xd1\x9e\xa7\xb0v)T', 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="03c8003453242959f719ec866e7111ac2033dbafb07b092bf3fcd9494a2c57b3ce77b4a6bd58a14b97"], 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xca1, &(0x7f0000000100)={0x0, 0x8de3, 0x10310, 0xfffffffe, 0x4a}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000380)={0x8, 0xa0b0, 0x9, 0x6, 0x22, 0x2}) pipe2(0x0, 0x0) tee(r3, r6, 0x103, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250200000000000007ff"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000140)=0x2000) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$dsp(r9, &(0x7f0000000300)='U', 0x1) ppoll(&(0x7f00000000c0)=[{r8, 0x9620}], 0x1, 0x0, 0x0, 0x0) 8m9.355348111s ago: executing program 3 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) umount2(0x0, 0x2) 8m9.310080281s ago: executing program 3 (id=353): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m8.12183347s ago: executing program 3 (id=360): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000009b000000000000000000b3889430d8f9dd4f6c4c1dc84365b04a53b2b9515c3afd848158abbb6a933c5ff035514b93b8258f755d771c55406f7c2a68caff2faa68043436eb9bcd386fd71144f08b5d818f982dc061c1706782d694b1d1c454d7adff699c0a4ae621eb359b87666a4c7008ac", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r3, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000700)) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) 8m7.978553692s ago: executing program 32 (id=360): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000009b000000000000000000b3889430d8f9dd4f6c4c1dc84365b04a53b2b9515c3afd848158abbb6a933c5ff035514b93b8258f755d771c55406f7c2a68caff2faa68043436eb9bcd386fd71144f08b5d818f982dc061c1706782d694b1d1c454d7adff699c0a4ae621eb359b87666a4c7008ac", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r3, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000700)) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) 5.503446525s ago: executing program 5 (id=1668): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000000)=""/93, 0x5d) 5.500266605s ago: executing program 0 (id=1669): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$media(&(0x7f0000000180), 0x5, 0x201) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0xf69}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 5.319846578s ago: executing program 2 (id=1670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_generic(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x24, 0x2f, 0x400, 0x70bd2d, 0x25dfdbfb, {0x10}, [@typed={0x8, 0x46, 0x0, 0x0, @uid}, @generic="ba4f73d2dd69c40b"]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x40) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfb}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}]}, 0x2c}}, 0x0) 5.15325945s ago: executing program 2 (id=1671): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x1e01, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2a32}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) connect$phonet_pipe(r3, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20040010) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.5378903s ago: executing program 0 (id=1674): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r4}, 0x10) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x1, r3, 0x0, r1}, 0x10) 4.406273612s ago: executing program 0 (id=1675): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001000)="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"/466, 0x1d2}, {&(0x7f00000007c0)="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", 0x263}], 0x2}, 0x4) 4.296092564s ago: executing program 0 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.281227614s ago: executing program 0 (id=1679): syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 4.202148495s ago: executing program 2 (id=1680): socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) shutdown(r3, 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 4.201845775s ago: executing program 5 (id=1681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000062c0)=@base={0xa, 0x8001, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={r0, 0xfffffe38}, 0x10) 4.003974838s ago: executing program 5 (id=1682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.967249959s ago: executing program 1 (id=1683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) 3.180890721s ago: executing program 5 (id=1684): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$media(&(0x7f0000000180), 0x5, 0x201) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0xf69}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 3.099892692s ago: executing program 1 (id=1685): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 3.087376212s ago: executing program 4 (id=1686): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x1, r2, 0x0, r0}, 0x10) 2.255288966s ago: executing program 2 (id=1687): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x59) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 2.196203896s ago: executing program 5 (id=1688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x238, 0x0, 0x0, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x75, 0x7, 0x6, 0x5, 0xe, 0x6, "6cb11d0dff2b678f2f870d634cfa8258b8af9a4af3cb3564016d51af43dbdd7e6bd796962ec0a7a0462867db38af0cfe8c3c876ee9f1138fa134b0f4f30888c19b2c846a41c28f81ffff122bc2514acc2f124219180c1dec49fc0db35ee8c353c83b39445687914f1534ffe413468de9694c4ab666"}}, 0x18d) 2.140026617s ago: executing program 1 (id=1689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.106162318s ago: executing program 4 (id=1690): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x13, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0xce, &(0x7f0000000180), &(0x7f0000000300)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a40000000060a090400000000000000000200000014000480100001800700010072740000040002800900010073797a30000000000900020073797a320000000014000000110001000000000ad6c338547c1725af81ae7b86f6b1843114b39f3d5d5f9477248381565670566146f30afad8aea11265b435e462bbb4ed50a264f2ae3a395d84"], 0x68}}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = syz_io_uring_setup(0x67f2, &(0x7f0000000500)={0x0, 0xaa75, 0x400, 0x0, 0x24c}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7fff, 0x80000000}, 0x0, 0x0, 0x9, 0x8, 0x3, 0x800, 0x47, 0x6}}], 0x58}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x211}, 0x1}) io_uring_enter(r5, 0x234e, 0xb1e6, 0x1, 0x0, 0x14) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r9, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) mount$9p_fd(0x0, 0x0, &(0x7f0000001780), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b40000000000000061111400000000009500740000000000802c9f899d8473ebe909a2856fa5f0ae8b85ec69780607ba90a86b1d2fa2f41c42fe2e03f8166e9e31506768d675b36f5642bccd275e887d8dbf71d69560e34a8d30951c021cf3acf74df38301c6232b88c932dc390f940e5a4b48b5341b9ec7fede97"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.056421738s ago: executing program 1 (id=1691): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x24, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, 0x24}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB='8\x00+'], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0xc4) 1.899444381s ago: executing program 1 (id=1692): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x10000, &(0x7f0000000440)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newtaction={0x2fec, 0x30, 0x1, 0x0, 0x0, {}, [{0x2fd8, 0x1, [@m_pedit={0x2e90, 0x18, 0x0, 0x0, {{0xa}, {0x2de4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x4fb, 0x10, 0x1, 0x5, 0x5}, 0x9, 0x9, [{0x9, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x5, 0x8000, 0x2, 0x2, 0x7, 0xef}, {0x4, 0x7f, 0x6, 0x9, 0x9, 0x7fffffff}, {0x4, 0x80000000, 0x1, 0xff, 0x6, 0x100}, {0x1ff, 0x8, 0x1, 0x2, 0xffff, 0x6}, {0x8, 0x417, 0x1000, 0x3, 0x5c09, 0x80000001}]}, [{0x3, 0x8, 0xf3c8, 0xfffffffc, 0x9, 0x1ff}, {0x7, 0x4, 0x7, 0x80000000, 0x2, 0x6}, {0x3, 0x73, 0x7, 0x0, 0xfffffffe, 0x8}, {0x5, 0x100, 0x3, 0x7ff, 0x6c712ca7, 0x618}, {0x4, 0x4, 0x8, 0x3, 0x3}, {0xfffffff8, 0x9, 0x3, 0xfff, 0xffffffff, 0x5}, {0x0, 0x7f, 0x3ff, 0x81, 0x3, 0x8}, {0x1, 0x3, 0x4, 0x9, 0xffff, 0x3}, {0x5, 0x6b95, 0x6, 0x2f7, 0x40, 0x1}, {0x80000001, 0x10000, 0x3ff, 0x9b, 0x9, 0xffff}, {0x1ff, 0x10001, 0x7, 0xc, 0x7, 0xa}, {0x0, 0x1, 0x80, 0xef52, 0xc, 0x200}, {0x8, 0x4, 0x5, 0x66, 0x3, 0x1}, {0x6, 0x2, 0x8, 0x0, 0x626c, 0xe}, {0x1, 0x0, 0x4, 0x1, 0x1, 0x6f}, {0x4dd7, 0xff, 0x5, 0xc690a6f9, 0x2, 0x2}, {0xfffffff9, 0x0, 0x3, 0x9, 0x3, 0x1}, {0x6, 0x0, 0x3e, 0xf25, 0x1, 0x3}, {0x6, 0x7fff, 0x3, 0x82, 0x94, 0x7}, {0x1, 0xce5f, 0x1, 0xb, 0x2, 0x5}, {0xa, 0xfffffffb, 0x7ff, 0x477c, 0x5, 0x8}, {0x6, 0x5, 0x2, 0x3, 0xfe000000}, {0x935, 0x3, 0xa000000, 0x3, 0x81, 0x4}, {0x8, 0x24794264, 0x3a, 0x0, 0x6, 0x5}, {0x200, 0x7, 0x2, 0xef, 0x1, 0x5}, {0x1, 0x10, 0x8, 0xffffffff, 0xe, 0x80000001}, {0x3, 0x8, 0xfff, 0x912, 0xfffffff8, 0x9}, {0x8, 0x4, 0x0, 0x2, 0x10, 0x4}, {0x466c, 0x9, 0x3, 0x9, 0x9, 0x4}, {0x3ff, 0x5, 0x10001, 0x8, 0x5, 0x8}, {0xbde, 0xb7c1, 0xff, 0x306, 0x9, 0xffff}, {0xfffffe01, 0x0, 0x9, 0x9, 0x7, 0x6}, {0xfffffffb, 0x401, 0x200, 0x800, 0x5, 0x7}, {0x0, 0xa2c, 0x1, 0xfffffff9, 0x1ff}, {0x6, 0x1, 0xf, 0x3, 0xffffffff, 0x5a0}, {0x5, 0xe, 0x7fff, 0x1, 0x8, 0x1}, {0x1, 0xfff, 0x9, 0x7, 0xc4, 0x3}, {0x485b, 0x0, 0x4, 0x8, 0x8, 0x8}, {0xfffffff8, 0x1, 0x6, 0xffff, 0x6, 0x2}, {0x7, 0x5, 0x5, 0x2, 0x1, 0x3}, {0xb, 0x0, 0x2, 0x354, 0xffff, 0x3ff}, {0x60, 0x0, 0x4, 0x6, 0xeb1, 0x1}, {0x4, 0x2, 0x5, 0xd, 0x5, 0x101}, {0x1, 0x6, 0x612, 0xbdb, 0x2, 0x3}, {0x5, 0x6, 0x7ff, 0x2f, 0x4, 0x3}, {0x4, 0x10001, 0x1, 0x8, 0xc, 0x101}, {0x2, 0x2, 0x1, 0x1, 0x4, 0x3}, {0x4, 0x2, 0x4, 0x4, 0xc2, 0x7}, {0x6, 0x0, 0x3, 0x3, 0x7f, 0x9ea8}, {0x7, 0x5f2, 0x4, 0x9, 0x2, 0x7}, {0x10001, 0x3, 0x3, 0x9, 0x2f}, {0x2, 0x5, 0xfffffffd, 0x8, 0xe4bb, 0xb}, {0x6, 0x80000000, 0x7, 0xfffffffc, 0xd5, 0xff}, {0xa6, 0xc1, 0x3, 0x5, 0x7, 0x7}, {0xfffffff9, 0x9, 0x6, 0x8001, 0x4, 0x401}, {0x7, 0x5, 0x9, 0x3b56, 0x9, 0x8}, {0x2, 0x8, 0x5, 0x3ff, 0x9, 0x7}, {0x8, 0x80000000, 0x7, 0x4, 0x3, 0x8818}, {0x9, 0x0, 0x6, 0x9, 0x6, 0x338}, {0x3, 0x2000000, 0xfffffff8, 0xa, 0xfff, 0x3}, {0xfffffc01, 0x5, 0x2, 0x5, 0x4, 0x400}, {0x1000, 0xffff8df1, 0x4604, 0x5, 0x4, 0x4}, {0x0, 0x8000, 0x7, 0xffffffff, 0x200, 0x6}, {0x0, 0x2, 0x8, 0x7, 0x1, 0x683a}, {0xff, 0x5, 0x1000, 0x8, 0x3, 0x81}, {0x1, 0x3, 0x8, 0x3, 0x2, 0x9}, {0x7, 0x10000, 0xffffffff, 0x2, 0xc, 0x4}, {0x3, 0x70, 0x1, 0x6, 0x5, 0x7ff}, {0x2, 0x8b, 0x4, 0x6, 0x24, 0x69}, {0x7fffffff, 0x7f, 0x0, 0x0, 0x1, 0x8}, {0x6, 0x8, 0x7f1ebbae, 0x735c, 0x8, 0x7}, {0xb9, 0x3868, 0x7, 0x1, 0x37, 0x6}, {0x81, 0x8001, 0xe, 0x7fffffff, 0xfffffbff, 0x9}, {0x7b, 0x40, 0x5, 0x1, 0x4, 0xfffffffb}, {0x8, 0x13, 0x6, 0x3ff, 0x67}, {0x2, 0xfff, 0x7, 0x7, 0x4, 0x6}, {0x8, 0x7, 0x0, 0x8, 0x3, 0x1000}, {0x6, 0x9, 0x1, 0x9, 0x8, 0x7851}, {0x9, 0x8, 0x2958, 0x2, 0xffffff81, 0x7fffffff}, {0x10, 0x6, 0x4, 0x2, 0x8, 0x80000000}, {0xfffffffc, 0xffffffff, 0x0, 0xe64, 0xffff5eba, 0x10000}, {0xd, 0x2, 0x5, 0x9, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x0, 0x9, 0x1}, {0x7, 0x686e, 0x200, 0x7, 0x9, 0x2}, {0x9, 0x6, 0xfff, 0x981, 0x1, 0x2dbd}, {0x6, 0x3, 0x7e1, 0x6, 0xa6e0, 0x7ff}, {0x5fd921a4, 0xb, 0x4, 0x46, 0x4, 0xffffffff}, {0x28b, 0x956, 0x6c, 0x2, 0x7fffffff, 0xfffffffb}, {0xb5f7, 0x401, 0x8, 0x0, 0x800, 0x8}, {0x7, 0x2, 0xfffffff7, 0x6, 0x8, 0x9}, {0x0, 0x2158c8e5, 0x2, 0x7fffffff, 0x2, 0x8}, {0x7fffffff, 0x6, 0x7, 0x7, 0xf, 0x6}, {0xab, 0x4, 0x4, 0xffffff17, 0xc, 0x7}, {0x4, 0x8, 0xfff, 0x3, 0x1, 0x6}, {0x4, 0x8b05, 0x1, 0x4, 0x0, 0x400}, {0x6, 0x3, 0x101, 0xfffffffd, 0x9, 0x3}, {0x9, 0x1, 0x6, 0x7ff, 0x4, 0x7}, {0x80, 0x3, 0x8, 0x4, 0x3, 0x800}, {0xf, 0x4f5800, 0x3, 0x200, 0x0, 0x3}, {0xffff00, 0x3aeebf5a, 0x2, 0x3, 0x80000001, 0x7f}, {0x5, 0x5, 0x401, 0x8, 0x2, 0x81}, {0xf, 0x4, 0xffffbb22, 0x28, 0x400, 0x1}, {0x5, 0xfffffeff, 0x7fffffff, 0x4, 0x401, 0x44cc}, {0x7f, 0x1, 0x4, 0xd, 0xe80d}, {0x8, 0x1, 0x3, 0x9, 0x7, 0x8}, {0x9, 0x3, 0xe, 0x1, 0x7, 0x1}, {0x8, 0x4b, 0x2, 0x4, 0x7f, 0xfffffffc}, {0xe2, 0x4, 0x0, 0xb4, 0x4, 0xffffffff}, {0x4, 0x4, 0xfffffffb, 0x5, 0x9, 0xfffffffc}, {0xd, 0xffff, 0x2fa, 0x7f, 0x2, 0x9}, {0x1d, 0x8bc, 0x2491, 0x7, 0x7fff, 0x6ef8}, {0x0, 0x5, 0xe44, 0x3, 0xf8871edb, 0x7}, {0x7, 0x5, 0x10001, 0xa13f, 0xffffffa9, 0x4}, {0x3, 0x2, 0xae3, 0x5, 0x0, 0xafa}, {0x0, 0xd9b, 0x949, 0x7ff, 0x878, 0xfffffffe}, {0x7fffffff, 0x0, 0x5, 0x7ff, 0xfff, 0x3ff}, {0x9, 0x5, 0x100, 0xfffffff8, 0x8, 0x95eb}, {0x2, 0x2, 0x7, 0x9, 0xa935, 0x8}, {0x10000, 0x7, 0x6, 0x7ff, 0x8001, 0x30}, {0xc7, 0x2, 0x6, 0x8, 0x7fff, 0x5}, {0x9, 0x7, 0x0, 0x8, 0x400, 0x3}, {0x4, 0xa, 0x9, 0x1, 0x800, 0x9}, {0x69d5, 0x38, 0x5, 0x0, 0x2edc, 0x7f}, {0x62, 0x4, 0x1, 0x80, 0x101, 0x5}, {0x8, 0x5, 0x6, 0x7, 0x9, 0x5}, {0x9, 0x0, 0x2b, 0x401, 0x10, 0x9}, {0xfff, 0x0, 0xff, 0x2, 0x0, 0x3}, {0xe, 0x2, 0x4, 0xc, 0x8, 0xf85f}], [{0x5}, {}, {0x7}, {0x0, 0x1}, {0x8, 0x1}, {0x6}, {0x6, 0x1}, {0x4}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x3}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x1, 0x1}, {0x2}, {0x6}, {0x6d52c9b79c0fcce2, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x80394573886254c7}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x50, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0xfffffff8, 0x7ff, 0x2, 0x63, 0x100}, 0x9, 0xe, [{0x6, 0x6, 0x57, 0x3, 0x6, 0x6}, {0x1f, 0x6, 0x3, 0x6, 0x7, 0xa34e}, {0x5, 0x29, 0x3, 0xe8bc, 0x2, 0x7}, {0x800, 0x6, 0x4, 0x200000, 0x3, 0x9}, {0x49, 0x8001, 0x8, 0x9, 0x3, 0xe}, {0xdf0, 0x5, 0x0, 0xc, 0x973}, {0x9, 0x7, 0x9, 0x7fffffff, 0xa, 0x2}, {0x9, 0x8001, 0x8, 0x5, 0x101, 0x1}]}, [{0xccb6, 0xaf34, 0x0, 0x7fffffff, 0x7, 0x18}, {0x3, 0x3ff, 0xfff, 0x5, 0x81, 0xff}, {0x0, 0xfffffff8, 0x815, 0x6, 0x80000001, 0x81}, {0x6, 0xb, 0x5, 0x40, 0x3, 0x6}, {0x3ff, 0x5, 0x3, 0xffffffff, 0x3, 0x7}, {0x7, 0x276, 0xfffff000, 0x4, 0x9, 0x7}, {0x9, 0x5, 0x2, 0x7fffffff, 0x1ff, 0x2}, {0x1, 0x8, 0xffffff01, 0xdc0, 0x8, 0x3}, {0x23cd, 0x6, 0x6, 0x8, 0x0, 0x1}, {0x3, 0xda02, 0x9, 0xdf, 0x3ff, 0x7}, {0x6, 0x824, 0x3, 0x5, 0x920d, 0xceb}, {0x1, 0x6, 0x29c, 0x10000, 0x8, 0x9}, {0x3, 0xd, 0x5, 0x10001, 0x8, 0x9}, {0x8, 0x6, 0xf6, 0x401, 0x7, 0x6}, {0x7ff, 0x101, 0xffffffff, 0x7, 0x400}, {0x5, 0x3, 0x5, 0x7, 0x8001, 0x4}, {0x1, 0xfee1, 0x0, 0x7, 0x3, 0x7}, {0x30, 0x7d9, 0x9b7, 0x4, 0x5, 0x59b}, {0x7, 0x100, 0x200, 0x6, 0x7, 0xf}, {0x800, 0x3, 0x4, 0x3, 0x7, 0x6}, {0xec, 0x3, 0x2, 0x2, 0x8001, 0x200}, {0x4, 0x6, 0x1, 0x3, 0x52296133, 0xfffffffb}, {0xca9c, 0x7, 0x69, 0x80000001, 0x10001, 0x10}, {0x7, 0x6, 0x3, 0x2, 0xd47, 0x5}, {0x5, 0x0, 0x3, 0x6, 0x1, 0x260}, {0x2, 0x81, 0x400, 0x800, 0x8, 0x2}, {0x146d964e, 0xcc, 0x2, 0x0, 0x0, 0x3ff}, {0x400, 0x4, 0x10, 0x54be, 0x2, 0x101}, {0xe1, 0x9, 0x6, 0x0, 0x1, 0xf}, {0xa, 0x2e59, 0x5, 0x7f, 0x2, 0x5}, {0x2, 0x1, 0xb, 0x8, 0x80, 0x5}, {0x0, 0x0, 0x1, 0x1, 0x8, 0x10000}, {0xfffffffe, 0x3, 0x9, 0xfffffffc, 0x6, 0x2}, {0x1, 0x478c8a70, 0x1ff, 0x7, 0x1, 0x100}, {0x8, 0x3, 0xee9a, 0x2, 0x1, 0x6}, {0x7, 0x200, 0x40, 0x10, 0x0, 0x16}, {0x7, 0x1000, 0x3, 0x0, 0x5, 0x978e}, {0xfffffffb, 0x9, 0x67, 0x3, 0x8}, {0x0, 0x8001, 0x4, 0x2, 0x80000000, 0xe7e}, {0x3, 0x6, 0x7, 0x1, 0x60000, 0x6}, {0xfffffff9, 0x7, 0x7, 0x0, 0x7fff, 0x2}, {0x2, 0x0, 0x5, 0x2d0, 0x5, 0x3}, {0x5, 0x6, 0x9, 0x3, 0x0, 0x8001}, {0x9, 0x40, 0x800, 0x7, 0x6, 0xe}, {0x40, 0x7, 0x1, 0x2, 0x6, 0x3}, {0xb, 0x4, 0x4, 0x993c, 0xf27, 0x3}, {0x3, 0x8000, 0x1, 0xff, 0x7fffffff}, {0x3, 0xa44f, 0x74, 0x8, 0x5, 0x2}, {0x8, 0x0, 0x9, 0x187e, 0x10, 0x1000}, {0x9, 0x1, 0x5, 0x8, 0x9, 0x2}, {0x8, 0x8, 0x7, 0x6, 0x3, 0xffffffff}, {0x3, 0x852, 0x9, 0x7, 0xfffffffd}, {0x4, 0x3, 0xffff, 0x6, 0x2, 0x5}, {0x6, 0x90, 0x1, 0x6000000, 0x9, 0xd}, {0x6, 0x100, 0xe3, 0x1, 0x7, 0x8}, {0x1ff, 0x7fff, 0x8, 0x5, 0x2105}, {0xfffffff7, 0x10000, 0x2, 0xcb78, 0x4, 0x3}, {0x6, 0x7, 0x6, 0x3, 0x4, 0x8}, {0x7fff, 0x71, 0x1, 0x0, 0x5, 0x10000}, {0x3, 0x4, 0xe, 0x4, 0x5, 0x4}, {0x5, 0x5, 0x3, 0x8, 0xffff17be, 0x4}, {0x61, 0x8, 0x7, 0x1ff, 0x1, 0x8}, {0x5, 0xc, 0x8, 0x4, 0x3, 0x853}, {0x4, 0x1, 0xd, 0x7, 0x0, 0x1}, {0x3, 0x8, 0x8, 0xffffffff, 0x401, 0x80}, {0x9, 0x7, 0x2, 0x9, 0x7, 0x7}, {0x0, 0x1, 0x2, 0x34df6cad, 0xb4, 0xf7fb}, {0x4, 0x6, 0x9, 0x800, 0xa, 0x3}, {0x8001, 0x3, 0xffffffff, 0x4, 0x0, 0x3}, {0x8, 0x81, 0x7f, 0x1, 0x20000000}, {0xfffffffb, 0x2, 0x1ff, 0x13, 0x0, 0x6}, {0x0, 0x1, 0x81, 0xfed, 0x2}, {0xf9, 0xb41, 0x1, 0x3, 0x400, 0x5}, {0x2, 0x3, 0x3, 0xe, 0x9, 0x2}, {0x8, 0x2, 0x8, 0x7fffffff, 0x400, 0x8}, {0x6, 0x8329, 0xe, 0xc, 0x6, 0x7f886d0}, {0x4, 0x0, 0x401, 0x4, 0x7, 0xd7c}, {0x10000, 0x10000, 0x8, 0x0, 0x7, 0x3}, {0x2, 0x111, 0x5, 0x1, 0xb}, {0x0, 0x1, 0x3, 0x1, 0x8, 0x1}, {0x10, 0x8, 0x8, 0x0, 0x3, 0x6f44}, {0x3, 0x5394, 0x3, 0xf, 0x2, 0x8}, {0xffffff81, 0xffffffff, 0x7fffffff, 0x1, 0x5, 0xfffffffd}, {0x200, 0xe5, 0x5, 0x8, 0xf2, 0xa}, {0x37fd, 0x0, 0x7, 0x7, 0xa, 0x3}, {0x0, 0x6, 0x6, 0xf, 0x6, 0x1ff}, {0x0, 0x3, 0xc, 0x6, 0x67, 0x3643}, {0x9, 0x3, 0x3, 0x40, 0x2c08, 0x3}, {0x8, 0x4, 0x401, 0xffff, 0x542c, 0x6}, {0x0, 0x4, 0x9, 0x81, 0x2, 0x400}, {0xe4ed, 0x35, 0x80, 0x1, 0xce, 0x159}, {0x8, 0x1, 0x200, 0x4, 0x5, 0x1}, {0x9, 0x8, 0x4, 0x0, 0x96, 0x9}, {0xfffffffa, 0xf, 0x8001, 0xc2, 0x3, 0x8}, {0x4, 0x8, 0x5, 0x3ff, 0x5}, {0x81, 0x0, 0x3ff, 0x77b6, 0x6}, {0x3, 0x9, 0x1ff, 0x101, 0x9}, {0x7, 0x7f, 0x4, 0x8001, 0xefd, 0x24}, {0x7, 0x9, 0x80000000, 0x4, 0x3ff, 0x8}, {0x8, 0x1ff, 0x7d0e2497, 0x400, 0x7fffffff, 0x9}, {0x2, 0x25, 0x5340, 0x6, 0x6, 0x80}, {0x3, 0x1, 0x9, 0x0, 0xd, 0x4}, {0x9, 0x0, 0xf, 0x1, 0xfffffff9, 0x2}, {0x81, 0xfffffffd, 0x3, 0xffffff81, 0xedf, 0x5}, {0x80000000, 0x7, 0x9, 0x9, 0x6, 0xc}, {0x80000001, 0x79, 0x1, 0x200, 0xf, 0x9}, {0x7, 0x2, 0x2, 0x3, 0x24, 0x3b}, {0x5, 0x2, 0x0, 0x2, 0x38}, {0x8000, 0x4, 0x1000, 0x8, 0x304, 0x7}, {0x2, 0x5, 0x6, 0x40, 0x1, 0x200}, {0x10000, 0x4, 0x1, 0x7, 0xfffffffe, 0x2}, {0x3, 0x5, 0x6, 0x1, 0x8, 0x401}, {0x8, 0x3, 0x7, 0x6, 0x4, 0x9}, {0x7, 0x0, 0x3, 0x5, 0xb, 0x6}, {0x3, 0x8, 0xb2ee, 0x2, 0x9, 0x7f}, {0x6, 0xd74, 0x2f8, 0x774, 0x3, 0x2}, {0x2, 0x2448, 0x3ff, 0x8, 0x8}, {0x0, 0xfffffff8, 0x6, 0xfffffff2, 0xf3, 0x2}, {0x8, 0x6, 0x6, 0x7, 0x0, 0x8}, {0x7, 0x5, 0x2, 0x1, 0xc3d, 0x81}, {0xf555, 0xff, 0x2, 0x5, 0x0, 0x386e}, {0x7a0, 0x7, 0x6, 0x8, 0xffffffff, 0x8}, {0x3, 0x7, 0x1000, 0x0, 0x1ff, 0x80000000}, {0x7fffffff, 0xf9, 0x5, 0x0, 0x1d}, {0x6, 0x2, 0x6, 0x4, 0x100003, 0x4a38}, {0x80000001, 0x0, 0x662c, 0x4, 0x4f, 0x5}, {0x5, 0x4, 0x10000, 0x8, 0x3, 0x3}, {0x6, 0x18, 0x0, 0xb, 0x1ff, 0x5}], [{}, {0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {}, {}, {0x3}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x2}, {0x3, 0x1}, {0xc8a0e417c359748c, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x85f86eb521c6770a}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x8}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x7}, {0x1}, {0x3}, {0x1, 0x1}, {0x6}, {0x2}, {0x3}, {0x4}, {0x1}, {0x1}, {}, {0x1}, {0x4}, {0x2}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x6e429d26f8109ea, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x2}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x8, 0x874d29bcd8fb710c}, {0x3}, {0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x5, 0x9, 0x5, 0x682b, 0x6fb4b13c}, 0x0, 0x0, [{0x1, 0x80, 0x8, 0x8, 0x401, 0x80000000}, {0x9, 0x5e008cd4, 0x4, 0x3, 0x3, 0x7}, {0x9, 0x8, 0xfffffff5, 0x8c8d, 0xfffffffc, 0x7}, {0x9, 0x4, 0x8001, 0x5, 0x2ae, 0xe5}, {0x46e, 0x5, 0x9, 0xfffffff8, 0x3, 0x9}, {0x6, 0x7, 0x9, 0x3ff, 0x6, 0x7}, {0x9, 0x9, 0x200, 0xb, 0x7, 0x7fffffff}]}, [{0x6368, 0x1, 0xab, 0xb, 0xd, 0x63}, {0x1, 0x1, 0x32, 0xe3, 0xcdcc, 0x5879}, {0x7fb3280b, 0xf60a, 0x7, 0x5, 0x1, 0x1}, {0x9, 0x8, 0x9348, 0x0, 0x5, 0x6}, {0x1, 0xfffffffd, 0x400, 0x400, 0xc, 0x2}, {0x9, 0x9, 0x2, 0x1, 0x8, 0x4}, {0x4, 0x8, 0x1, 0x10, 0x2}, {0x7, 0x100, 0x0, 0x5, 0x3, 0x807}, {0x3, 0x2, 0x6, 0x4, 0xfffffffe, 0x4}, {0x1, 0x80, 0x4, 0x2, 0x4, 0x7fffffff}, {0x0, 0xfffeffff, 0xfff, 0x4, 0x2, 0x6}, {0x3, 0x8, 0x6, 0x4, 0x9, 0xd81}, {0x80, 0xffffffff, 0x12957fc9, 0x7, 0xe2, 0x10}, {0x3, 0x1, 0xb3, 0x1, 0x9, 0x2}, {0x0, 0x3, 0x3, 0x9, 0x0, 0x100}, {0x7, 0x4, 0x6, 0x2, 0xc, 0x7}, {0x2, 0x8001, 0xe, 0x7, 0x3, 0x7ff}, {0x1000, 0x3, 0x3ff, 0x10000, 0x7, 0x6f9a}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xa5}, {0x7, 0x8, 0x1, 0x81, 0x8}, {0x2ed5, 0x2, 0x80, 0x1c29, 0x8001, 0x1}, {0x7, 0x5f06, 0x3, 0x640, 0x5, 0x4}, {0x6, 0x3, 0x6106, 0xffffffb6, 0x3, 0xf8}, {0x7, 0x7, 0x3, 0x742, 0x8, 0xe2ec}, {0x4, 0x5fa3, 0x5, 0x8000, 0x7}, {0x6, 0x25, 0x3, 0x6, 0x7c8, 0x7ff}, {0x36, 0x6, 0x5d72, 0x80000001, 0x10000}, {0xffff, 0xb760, 0x3, 0x7df6, 0x4, 0xfffffff5}, {0x3ff, 0x0, 0x7, 0xc425, 0x6, 0x7}, {0x4, 0x3, 0x4, 0x7fffffff, 0xfffffff9, 0xfffffffa}, {0x1, 0x7, 0x1, 0x1, 0x7, 0x101}, {0x1, 0xd, 0xfff, 0x1ff, 0x5, 0xd}, {0x0, 0xd, 0xf, 0x10001, 0x1, 0x7fffffff}, {0x453496b9, 0x1000000, 0xfffffffe, 0x5c, 0x5, 0x7}, {0x0, 0x280000, 0x3, 0x3, 0x7ff, 0x9}, {0x16, 0x3bd1, 0x5, 0x800, 0x2, 0x4}, {0x8, 0x9f69, 0x2, 0x1, 0x6, 0xf6}, {0xfffffffd, 0x0, 0x7, 0x401, 0x400, 0x9}, {0xb, 0x7ff, 0x8, 0x401, 0x8, 0x3}, {0x2, 0x101, 0x1, 0x5, 0x10, 0x1}, {0x5, 0x0, 0x7ff, 0x4, 0xfffffffa, 0x2}, {0x8, 0x4, 0x4, 0x9, 0x3, 0x3}, {0x8, 0x100, 0x4, 0x0, 0x81}, {0x5, 0x800, 0x8ff, 0x3, 0x4}, {0x4, 0x0, 0xfff, 0x400, 0x8, 0xe}, {0x7, 0x792, 0x174, 0x2, 0x400, 0x1}, {0x8, 0x6, 0xfffffff4, 0x4, 0x9, 0x7}, {0x9, 0x7f, 0xffffffff, 0x6, 0x2, 0x5}, {0x1, 0x7, 0xc341, 0x5, 0x100, 0x2}, {0x8000, 0x0, 0xf3, 0x8000, 0x5c, 0x80}, {0x3, 0x6, 0x2, 0x8, 0x67c}, {0x6, 0x2, 0x6, 0x1, 0x1, 0xc}, {0x4, 0x8, 0xfffffffc, 0x135, 0x9, 0x2}, {0x422, 0xfff, 0xa96, 0x10000, 0xf, 0x5}, {0x9865, 0x0, 0x400, 0xfffffffc, 0x4, 0x9}, {0x4, 0xffffff9d, 0x7fffffff, 0xc, 0x2, 0x5}, {0x5, 0x5, 0xfc75, 0xc1e, 0xd839, 0x9c}, {0x5fdb, 0x81, 0x100, 0x9, 0xb, 0x9}, {0x0, 0x3aa, 0x3a2, 0x4b26, 0x6, 0x5}, {0x3, 0x1, 0x400, 0x0, 0xfffffffb, 0x75}, {0x401, 0xfffffffa, 0x3, 0x8, 0x6da, 0x7}, {0x9, 0xff, 0x7, 0x10001, 0x1, 0x6}, {0x7fffffff, 0x6, 0x61, 0xa, 0x3, 0x2}, {0x1, 0xffffd618, 0x7, 0x9865, 0x7, 0x22c992d4}, {0xa, 0x3, 0x7, 0x8, 0x4, 0x78d}, {0x8001, 0x10001, 0x6, 0xc, 0x3, 0xab}, {0x80000000, 0xb, 0x9, 0xb39, 0xfffffff7, 0xb8}, {0x8, 0x4, 0x3, 0x3, 0x4, 0x4}, {0x8, 0x0, 0x6, 0x9, 0xfffffffb, 0x9}, {0x4, 0xfffffff9, 0x80000001, 0x400, 0x5, 0x6c}, {0xffff, 0x3, 0x7, 0x8, 0x100, 0x200}, {0x6, 0x3ff, 0x21d, 0xffff, 0x4, 0x5}, {0x1, 0x5, 0x5, 0x4, 0x200, 0x20000}, {0x2, 0x6, 0x101, 0x0, 0x7148, 0xc744}, {0x5, 0x1, 0xffff, 0xa00, 0x1000}, {0x0, 0x6, 0x800, 0xd10, 0x0, 0x6}, {0x0, 0x0, 0x907, 0x3, 0x0, 0x6786}, {0x3, 0x0, 0x8, 0x0, 0x3, 0x7}, {0x0, 0x7, 0x0, 0x50, 0x4, 0x1ff}, {0x0, 0x6, 0x6, 0x3, 0x4, 0xffffb5f2}, {0x3, 0x4, 0xe, 0x4, 0x645, 0x67c}, {0x9, 0x1000, 0x200, 0x5, 0x0, 0xfffffe01}, {0x0, 0x0, 0x4, 0x46, 0xfffffff7, 0x8}, {0x4, 0x5, 0x6, 0xfffffff9, 0x4, 0x4}, {0x8, 0x6a4, 0xb, 0x0, 0xe65}, {0x2, 0x8000, 0x5, 0x65b, 0xfffffffd, 0x4}, {0x1, 0x1, 0x9, 0x3, 0x1ff, 0x2}, {0x1, 0x33ee, 0x80000001, 0x519, 0x0, 0xffffffc0}, {0x9, 0x2, 0xf, 0x6e75, 0x654, 0xfffffff7}, {0x8, 0xc, 0x3ff, 0x2, 0xe, 0x3}, {0xffffff84, 0x4, 0xfffffffd, 0xffff, 0x7fff, 0x5}, {0x9, 0x8, 0x9, 0x8, 0xc1, 0xa000000}, {0xff, 0x7, 0x5, 0x2, 0x0, 0x2}, {0x5, 0x4, 0x7, 0xfffffffe, 0x1, 0xffffffff}, {0x8, 0x1, 0xfffffff1, 0xd, 0x5, 0x1}, {0x1, 0x8, 0x5, 0x8, 0xbb, 0x8}, {0x3ff, 0xfffffffc, 0xd95, 0x1, 0x9e5000, 0x6}, {0x4, 0x0, 0x1, 0x8, 0x3, 0x1}, {0x4df, 0x8, 0x1, 0xe8, 0x800, 0x9}, {0x9, 0x4, 0x4, 0x80000001, 0x2, 0x2}, {0x0, 0x7, 0xe96, 0xffff8000, 0x4, 0x7}, {0x6, 0x8, 0x0, 0x7, 0x3ff}, {0x1000, 0x5, 0xb643, 0x4, 0xc82b, 0x7fff}, {0x3, 0x10000, 0x6, 0x1b0, 0x1, 0x4}, {0xebd, 0x4, 0xab0, 0x200, 0x7, 0x5}, {0x6, 0x1, 0x101, 0x7, 0x10, 0x3}, {0x0, 0x10001, 0x664, 0x8, 0x9, 0x6}, {0x9, 0x1020000, 0x19d, 0x8, 0x0, 0x7}, {0x9, 0x3, 0x5, 0x3, 0xe9a, 0x10001}, {0x2fbbe103, 0x80, 0x10, 0x180, 0x4, 0x7ff}, {0x2, 0x9, 0x7, 0x3, 0x9e, 0x7}, {0x3, 0x3, 0x80000000, 0xad, 0x0, 0xd}, {0x9, 0xff, 0x400, 0x2, 0x4000, 0x1000}, {0xffff8000, 0xe347, 0x1, 0xffff0001, 0x6, 0x8}, {0x7, 0x6, 0xc8, 0xc02d, 0x4, 0x4}, {0x2, 0x196, 0x10001, 0x7, 0x0, 0x3d3}, {0x8, 0x8, 0x9, 0x5, 0x1, 0xdf6}, {0x400, 0x5, 0x800, 0x4, 0x81, 0x25f3d2fb}, {0x400, 0xffffc9dd, 0x8, 0x0, 0xe, 0x2}, {0x2, 0x401, 0x6, 0x80000001, 0xffff, 0x9}, {0xa, 0x3, 0x3, 0x400000, 0x4, 0x8}, {0xe0, 0x6, 0x6, 0x61, 0x6, 0x5a}, {0x3, 0x445, 0xb, 0x7, 0x4, 0x80000000}, {0x1ff, 0x5, 0x0, 0x862, 0xd, 0x80000000}, {0x9, 0x4, 0x6, 0x6, 0x7, 0xc}, {0x0, 0xc, 0x3, 0x800, 0x54, 0x893}, {0x5, 0x2, 0x2, 0x4, 0x100, 0x5}, {0x4, 0x8, 0x0, 0xfffff800, 0x101}], [{0x4, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0xa, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x54acb9338a64f3f2}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x2, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x88354a04d22ed9c3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {0x3}, {0x3, 0x1}, {0xe28fc4e13e4a1b15, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0xaa01a11c45f88fd8}, {0x2, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x3}, {0x5, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x5}, {0x2, 0x1}, {}, {0x32f4c31f5a02a76c}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x138, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xe8bc85beec1c9b87}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x81, 0x6, "e0264a71adc227331452012fba9569473c9e25986516697c417ae174a0f0c53ef6f35490ceec7f4ab1d2b70e60d8f3cb666e860fc61dde10dbee77d02e0325ddd6be18b822e477fbd4c23a695c7ed54fae489163475ef6a5e8d3b2e95b6590b1ca04c500163e7f671874ecd62a3e05465265e3bb8510fa6ef6e51dcfe8"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x9f, 0x6, "51860a341fccf5eb16136ff490e243ea8e9d8dd96711b82adc89bf5399c37abf94b37404959f71e89f78cd904229ec311034e2ea1cb4d628921886eb15fdc2c2298b1ba1709e044698ee4599a4fb103d571e6077e91f790778748783b96332d0885c7c433a2b5c51592cab1dc52867ebe7d9adffb1475952d952c59fad3806147404126e6e553e7dd24f58e08bd0e84cac16cacc90688c446d16c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_tunnel_key={0x78, 0x7, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2fec}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x80000) r3 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x21) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0xfffffee7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010038b97000fcdbdf25067b00000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x480c0) 1.898938291s ago: executing program 2 (id=1693): openat$dlm_monitor(0xffffff9c, &(0x7f0000000440), 0x8000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.039855364s ago: executing program 4 (id=1694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.023079075s ago: executing program 4 (id=1695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) 928.606696ms ago: executing program 2 (id=1696): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000792c8fd5e1235f7bfdffc383c1621b773f0eb15d9c3fc026837e6d22126ee9907f6de89a4396d1bac46a130c1b51f869ad337e127e6d322549a12fe5137e2ebb352b7a3e9386abb2103ae7dee07ba9ead9f6e6ca563d29e229b74f351792e7f1da7c09429adda241aa74c97dbf102be152e1ba5868f6866ace6527b138035de7cc524a", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r6, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) getitimer(0x0, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 847.833707ms ago: executing program 0 (id=1697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0xd, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x1, 0x7}}, 0xe4) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000280)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) chdir(0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 847.665167ms ago: executing program 4 (id=1698): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$media(&(0x7f0000000180), 0x5, 0x201) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r2 = syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0xf69}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 146.340948ms ago: executing program 5 (id=1699): socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) 107.100679ms ago: executing program 1 (id=1700): setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x1, r2, 0x0, r0}, 0x10) 0s ago: executing program 4 (id=1701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): filter on device bond0 [ 40.529551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.542647][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.548702][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.551073][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.553498][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.556254][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.565176][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.567787][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.576574][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.579920][ T1647] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.581843][ T1647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.592553][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.594994][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.597748][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.600884][ T1647] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.602857][ T1647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.605121][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.607461][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.615983][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.620035][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.629745][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.632662][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.636409][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.652949][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.654991][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.657541][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.665653][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.668809][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.671260][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.673790][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.676253][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.678221][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.680607][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.691668][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.698558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.701757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.704416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.706752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.712347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.715295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.718509][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.720359][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.724021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.731433][ T4306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.735907][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.741318][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.744558][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.747266][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.752134][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.754653][ T1647] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.756553][ T1647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.765707][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.769189][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.782962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.785693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.794332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.797435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.801423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.804103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.806646][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.808588][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.836221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.839357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.842344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.844921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.847815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.852011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.854911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.857605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.861898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.865570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.869645][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.873427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.876251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.880911][ T4306] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.884977][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.887741][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.890521][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.892496][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.901864][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.904889][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.907433][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.916061][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.924824][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.934366][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.946593][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.954927][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.957602][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.962004][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.964650][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.967341][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.971417][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.974128][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.977603][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.991810][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.994527][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.996988][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.998934][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.014122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.016253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.032634][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.039158][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.052579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.055804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.059898][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.064751][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.075972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.094984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.102501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.114108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.121279][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.123902][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.127493][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.156330][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.160271][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.194895][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.197575][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.203600][ T4305] device veth0_vlan entered promiscuous mode [ 41.212928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.218549][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.239750][ T4305] device veth1_vlan entered promiscuous mode [ 41.264280][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.266851][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.274990][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.281416][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.295403][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.297478][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.301250][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.319506][ T4305] device veth0_macvtap entered promiscuous mode [ 41.325705][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.330950][ T4305] device veth1_macvtap entered promiscuous mode [ 41.339055][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.341572][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.344127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.346203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.349680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.351788][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.365638][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.368763][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.375077][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.393657][ T4297] device veth0_vlan entered promiscuous mode [ 41.402275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.404925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.421463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.423927][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.426221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.429890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.438404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.441625][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.444985][ T4297] device veth1_vlan entered promiscuous mode [ 41.450525][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.452672][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.455097][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.457780][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.483135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.485326][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.487359][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.490813][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.493430][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.495890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.501678][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.504829][ T4296] device veth0_vlan entered promiscuous mode [ 41.513741][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.517640][ T4305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.520716][ T4305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.523029][ T4305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.525375][ T4305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.531318][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.533872][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.536661][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.548070][ T4301] Bluetooth: hci3: command 0x041b tx timeout [ 41.548095][ T4311] Bluetooth: hci1: command 0x041b tx timeout [ 41.549823][ T4301] Bluetooth: hci2: command 0x041b tx timeout [ 41.551400][ T4311] Bluetooth: hci0: command 0x041b tx timeout [ 41.566000][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.569239][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.571820][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.575626][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.579311][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.581767][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.585028][ T4297] device veth0_macvtap entered promiscuous mode [ 41.593101][ T4296] device veth1_vlan entered promiscuous mode [ 41.595934][ T4302] device veth0_vlan entered promiscuous mode [ 41.606195][ T4297] device veth1_macvtap entered promiscuous mode [ 41.620632][ T4302] device veth1_vlan entered promiscuous mode [ 41.628572][ T4311] Bluetooth: hci4: command 0x041b tx timeout [ 41.660206][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.662743][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.666025][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.668695][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.671288][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.673957][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.691949][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.694705][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.722454][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.725273][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.731112][ T4296] device veth0_macvtap entered promiscuous mode [ 41.735682][ T4296] device veth1_macvtap entered promiscuous mode [ 41.752111][ T4302] device veth0_macvtap entered promiscuous mode [ 41.755300][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.764040][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.768676][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.775691][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.782828][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.785424][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.790265][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.793265][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.808343][ T4302] device veth1_macvtap entered promiscuous mode [ 41.813230][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.815986][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.820371][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.824289][ T288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.826564][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.830880][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.831463][ T288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.833491][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.839209][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.843092][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.845331][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.848287][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.850787][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.853543][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.857034][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.861220][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.869400][ T4297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.871809][ T4297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.874103][ T4297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.876378][ T4297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.892238][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.895136][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.897725][ T4296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.901134][ T4296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.904863][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.916371][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.919436][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.922067][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.924823][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.927654][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.931015][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.935024][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.939380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.942379][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.945131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.947805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.965797][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.969887][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.970682][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.972027][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.984401][ T4296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.986812][ T4296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.989416][ T4296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.991752][ T4296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.008859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.024272][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.029188][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.031790][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.034584][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.037127][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.040913][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.045017][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.049599][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.052386][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.054985][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.057657][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.061954][ T4306] device veth0_vlan entered promiscuous mode [ 42.075416][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.078648][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.082717][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.085146][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.087524][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.095047][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.127819][ T4306] device veth1_vlan entered promiscuous mode [ 42.133112][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.135382][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.151789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.157406][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.229342][ T4306] device veth0_macvtap entered promiscuous mode [ 42.233684][ T4306] device veth1_macvtap entered promiscuous mode [ 42.242607][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.245453][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.254874][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.257773][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.264398][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.267534][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.283766][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.286523][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.294722][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.299835][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.302577][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.305236][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.314396][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.317081][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.320711][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.323342][ T4306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.326315][ T4306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.335955][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.341690][ T4306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.344052][ T4306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.347367][ T4306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.355314][ T4306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.364954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.367558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.372084][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.374942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.377615][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.381293][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.383957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.386770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.594881][ T4381] loop2: detected capacity change from 0 to 256 [ 42.996916][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.153245][ T288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.155502][ T288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.199304][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.201520][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.214119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.216589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.261988][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.264218][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.278766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.374901][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.377042][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.380181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.430955][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.433137][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.463522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.503138][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.505288][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.509499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.534595][ T4383] loop2: detected capacity change from 0 to 32768 [ 43.545358][ T4383] ======================================================= [ 43.545358][ T4383] WARNING: The mand mount option has been deprecated and [ 43.545358][ T4383] and is ignored by this kernel. Remove the mand [ 43.545358][ T4383] option from the mount to silence this warning. [ 43.545358][ T4383] ======================================================= [ 43.572409][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.574638][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.577473][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.588626][ T4383] (syz.2.6,4383,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "coherencÌ*¨ÂR“‘y=full" or missing value [ 43.591988][ T4383] (syz.2.6,4383,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 43.627925][ T4303] Bluetooth: hci2: command 0x040f tx timeout [ 43.629659][ T4303] Bluetooth: hci1: command 0x040f tx timeout [ 43.631308][ T4303] Bluetooth: hci3: command 0x040f tx timeout [ 43.638462][ T4311] Bluetooth: hci0: command 0x040f tx timeout [ 43.718058][ T4303] Bluetooth: hci4: command 0x040f tx timeout [ 43.967581][ T4403] loop0: detected capacity change from 0 to 512 [ 44.756194][ T4403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.775502][ T4412] futex_wake_op: syz.4.13 tries to shift op by -1; fix this program [ 44.843457][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 44.856941][ T4388] loop1: detected capacity change from 0 to 32768 [ 44.966000][ T4388] XFS (loop1): Mounting V5 Filesystem [ 45.119508][ T4388] XFS (loop1): Ending clean mount [ 45.140459][ T4388] XFS (loop1): Quotacheck needed: Please wait. [ 45.182938][ T4388] XFS (loop1): Quotacheck: Done. [ 45.515171][ T4296] XFS (loop1): Unmounting Filesystem [ 45.668013][ T4343] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.708377][ T4311] Bluetooth: hci0: command 0x0419 tx timeout [ 45.710068][ T4311] Bluetooth: hci3: command 0x0419 tx timeout [ 45.711646][ T4311] Bluetooth: hci1: command 0x0419 tx timeout [ 45.713235][ T4311] Bluetooth: hci2: command 0x0419 tx timeout [ 45.849192][ T4343] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 45.853593][ T4343] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.857176][ T4343] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.863977][ T4343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.867516][ T4343] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.875235][ T4343] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.886826][ T4343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.891329][ T4343] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.894046][ T4343] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.897130][ T4343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.905067][ T4343] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.907700][ T4343] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.911925][ T4343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.914822][ T4343] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.917433][ T4343] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.926587][ T4343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.936953][ T4343] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.944055][ T4343] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.947281][ T4343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.952074][ T4343] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.954714][ T4343] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.962320][ T4343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.965808][ T4343] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.969814][ T4343] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.972933][ T4343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.977563][ T4343] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 45.985416][ T4343] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 45.989379][ T4343] usb 1-1: Product: syz [ 45.990811][ T4343] usb 1-1: Manufacturer: syz [ 45.992194][ T4343] usb 1-1: SerialNumber: syz [ 46.010698][ T4343] usb 1-1: config 0 descriptor?? [ 46.037176][ T4343] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 46.321007][ T4303] Bluetooth: hci4: command 0x0419 tx timeout [ 47.100016][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.103155][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.121993][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.125580][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.128937][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.131907][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.947878][ T4311] Bluetooth: hci3: command 0x0405 tx timeout [ 48.269673][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 48.282804][ T113] usb 1-1: USB disconnect, device number 2 [ 48.294529][ T113] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 48.745114][ T4518] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 49.281187][ T4514] Zero length message leads to an empty skb [ 49.315701][ T4524] netdevsim netdevsim0: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 49.374132][ T4524] netdevsim netdevsim0: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 50.180248][ T4554] syz.4.62 uses obsolete (PF_INET,SOCK_PACKET) [ 51.814163][ T4575] syz.2.65 sent an empty control message without MSG_MORE. [ 53.598559][ T4572] capability: warning: `syz.3.66' uses deprecated v2 capabilities in a way that may be insecure [ 53.745057][ T4590] can: request_module (can-proto-0) failed. [ 55.519806][ T4635] binder: 4634:4635 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 55.526887][ T4635] binder: 4635 RLIMIT_NICE not set [ 55.570549][ T4638] binder: 4634:4638 tried to acquire reference to desc 0, got 1 instead [ 55.574304][ T4635] binder: 4635 RLIMIT_NICE not set [ 55.763313][ T7] binder: release 4634:4638 transaction 5 out, still active [ 55.772853][ T7] binder: undelivered TRANSACTION_COMPLETE [ 55.821590][ T7] binder: release 4634:4635 transaction 5 in, still active [ 55.823612][ T7] binder: send failed reply for transaction 5, target dead [ 57.747833][ T4303] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 57.839108][ T4704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.98'. [ 59.795875][ T3421] cfg80211: failed to load regulatory.db [ 60.046615][ T4768] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.090851][ T4768] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 60.961573][ T4789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.964249][ T4789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.016298][ T4793] binder: 4791:4793 ioctl c0306201 20000080 returned -14 [ 61.030865][ T4793] binder: 4791:4793 tried to acquire reference to desc 0, got 1 instead [ 61.064203][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.069459][ T4793] binder_alloc: 4791: binder_alloc_buf size 4294971232 failed, no address space [ 61.071477][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.072148][ T4793] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 61.076710][ T4793] binder: cannot allocate buffer: no space left [ 61.076755][ T4793] binder: 4791:4793 transaction call to 4791:0 failed 10/29201/-28, size 80-4294967056 line 3239 [ 61.106760][ T4793] binder: 4791:4793 ioctl c0306201 200001c0 returned -14 [ 61.112710][ T4344] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.337919][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 62.615760][ T4831] tmpfs: Unknown parameter 'usrquota' [ 62.624608][ T4831] capability: warning: `syz.3.121' uses 32-bit capabilities (legacy support in use) [ 63.087295][ T4849] serio: Serial port ptm0 [ 64.369059][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 64.509427][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.511433][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.591589][ T4879] binder: 4878:4879 tried to acquire reference to desc 0, got 1 instead [ 64.595636][ T4879] binder: 4878:4879 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 64.616315][ T4879] binder: 4879 RLIMIT_NICE not set [ 64.618305][ T4879] binder: 4878:4879 ioctl c0306201 0 returned -14 [ 64.622587][ T3875] binder: undelivered TRANSACTION_COMPLETE [ 64.906597][ T4888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 64.936259][ T4888] netlink: 'syz.2.130': attribute type 5 has an invalid length. [ 64.984098][ T4888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'. [ 65.045165][ T4888] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 65.087197][ T4888] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 65.116177][ T4888] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 65.152022][ T4888] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 65.181258][ T4888] device geneve2 entered promiscuous mode [ 65.410580][ T4904] block device autoloading is deprecated and will be removed. [ 65.633959][ T4910] random: crng reseeded on system resumption [ 66.341325][ T4928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.385555][ T4928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.993740][ T4941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.158'. [ 67.126584][ T4948] binder: 4946:4948 tried to acquire reference to desc 0, got 1 instead [ 67.148588][ T4948] binder: 4946:4948 unknown command 1074553619 [ 67.150321][ T4948] binder: 4946:4948 ioctl c0306201 20000180 returned -22 [ 67.266312][ T4303] Bluetooth: hci3: unexpected cc 0x0c5b length: 5 > 1 [ 69.067938][ T4303] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 69.070602][ T4303] Bluetooth: hci4: Injecting HCI hardware error event [ 69.073896][ T4311] Bluetooth: hci4: hardware error 0x00 [ 70.405426][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 71.630278][ T4311] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 71.641328][ T5023] nbd: must specify a device to reconfigure [ 72.507192][ T4311] Bluetooth: hci3: command 0x0405 tx timeout [ 72.885232][ T5039] netlink: 'syz.2.190': attribute type 4 has an invalid length. [ 73.929552][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 76.957348][ T5108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.219'. [ 77.267364][ T5114] block nbd0: shutting down sockets [ 77.313198][ T5119] nbd0: detected capacity change from 0 to 4294967296 [ 77.319172][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.321910][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.328127][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.330505][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.333101][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.335939][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.338491][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.340993][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.343229][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.345685][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.348369][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.350866][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.353195][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.356313][ T79] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.476603][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.479064][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.481346][ T4485] ldm_validate_partition_table(): Disk read failed. [ 77.483377][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.485743][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.488591][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.491523][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 77.494392][ T4485] Dev nbd0: unable to read RDB block 0 [ 77.496765][ T4485] nbd0: unable to read partition table [ 77.512632][ T4485] ldm_validate_partition_table(): Disk read failed. [ 77.516427][ T4485] Dev nbd0: unable to read RDB block 0 [ 77.522158][ T4485] nbd0: unable to read partition table [ 78.432206][ T5137] random: crng reseeded on system resumption [ 78.877084][ T5151] fuse: Unknown parameter '0x0000000000000003' [ 81.279652][ T5184] random: crng reseeded on system resumption [ 81.352280][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.416763][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.422891][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.435689][ T5183] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.509337][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.512811][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.514931][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.585506][ T5189] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.901205][ T5194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.926297][ T5194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.153596][ T5258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.168805][ T5258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.107556][ T5268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.277'. [ 86.146801][ T5268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.277'. [ 86.360178][ T5270] [U]  [ 86.361075][ T5270] [U] K{‘ [ 86.361918][ T5270] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 86.363743][ T5270] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 86.380763][ T5270] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 86.394332][ T5270] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)޹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 86.445900][ T5270] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 86.452591][ T5270] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 86.463803][ T5270] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 86.474036][ T5270] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 86.591965][ T5270] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 86.607430][ T5282] binder: 5281:5282 unknown command 1074553619 [ 86.609166][ T5282] binder: 5281:5282 ioctl c0306201 200000c0 returned -22 [ 86.645965][ T5270] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 86.649862][ T5270] [U] 22½“Æ©Ðû©x?0;3u± [ 86.651085][ T5270] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 86.673201][ T5270] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 86.684226][ T5270] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 86.690251][ T5270] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 86.696528][ T5270] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 86.704847][ T5270] [U] ¹ ec [ 86.705677][ T5270] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 86.738808][ T5269] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8寥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 87.052361][ T5293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.060355][ T5293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.667763][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.673611][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.244908][ T5341] fuse: Unknown parameter 'group_i00000000000000000000' [ 90.333691][ T5354] device syzkaller1 entered promiscuous mode [ 91.171364][ T51] block nbd3: Attempted send on invalid socket [ 91.173263][ T51] blk_print_req_error: 24 callbacks suppressed [ 91.173273][ T51] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.180257][ T51] block nbd3: Attempted send on invalid socket [ 91.181971][ T51] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.184561][ T5375] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 91.187672][ T51] block nbd3: Attempted send on invalid socket [ 91.189463][ T51] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.192211][ T5375] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 91.196100][ T51] block nbd3: Attempted send on invalid socket [ 91.197920][ T51] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.200673][ T51] block nbd3: Attempted send on invalid socket [ 91.202395][ T51] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.205292][ T5375] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 91.208449][ T51] block nbd3: Attempted send on invalid socket [ 91.210192][ T51] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.212926][ T5375] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 91.216469][ T51] block nbd3: Attempted send on invalid socket [ 91.218185][ T51] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.220953][ T51] block nbd3: Attempted send on invalid socket [ 91.222746][ T51] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.225481][ T5375] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 91.230438][ T51] block nbd3: Attempted send on invalid socket [ 91.232172][ T51] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.234706][ T5375] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 91.238065][ T51] block nbd3: Attempted send on invalid socket [ 91.239893][ T51] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.242960][ T5375] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 91.245973][ T5375] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 91.248712][ T5375] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 93.754962][ T5392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.321'. [ 93.883301][ T39] bond0: (slave bond_slave_0): interface is now down [ 93.890480][ T39] bond0: (slave bond_slave_1): interface is now down [ 93.906949][ T39] bond0: (slave bond_slave_0): interface is now down [ 93.913391][ T39] bond0: (slave bond_slave_1): interface is now down [ 93.919618][ T5407] netlink: 'syz.4.326': attribute type 10 has an invalid length. [ 93.963793][ T5407] device syz_tun entered promiscuous mode [ 93.965525][ T4605] bond0: (slave bond_slave_0): interface is now down [ 93.967567][ T4605] bond0: (slave bond_slave_1): interface is now down [ 93.986406][ T11] bond0: (slave bond_slave_0): interface is now down [ 93.988246][ T11] bond0: (slave bond_slave_1): interface is now down [ 94.006052][ T4605] bond0: (slave bond_slave_0): interface is now down [ 94.007902][ T4605] bond0: (slave bond_slave_1): interface is now down [ 94.026587][ T4605] bond0: (slave bond_slave_0): interface is now down [ 94.028474][ T4605] bond0: (slave bond_slave_1): interface is now down [ 94.069393][ T113] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.310497][ T113] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 94.313676][ T113] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 94.442766][ T4605] bond0: (slave bond_slave_0): interface is now down [ 94.444672][ T4605] bond0: (slave bond_slave_1): interface is now down [ 94.674731][ T113] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 95.050466][ T5407] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 95.053049][ T4605] bond0: (slave syz_tun): interface is now down [ 95.054900][ T113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.070766][ T4605] bond0: (slave bond_slave_0): interface is now down [ 95.072727][ T4605] bond0: (slave bond_slave_1): interface is now down [ 95.085113][ T5404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.111997][ T4605] bond0: (slave syz_tun): interface is now down [ 95.138071][ T9] bond0: (slave bond_slave_0): interface is now down [ 95.154299][ T9] bond0: (slave bond_slave_1): interface is now down [ 95.170573][ T9] bond0: (slave syz_tun): interface is now down [ 95.215952][ T9] bond0: (slave bond_slave_0): interface is now down [ 95.234317][ T9] bond0: (slave bond_slave_1): interface is now down [ 95.249253][ T9] bond0: (slave syz_tun): interface is now down [ 95.286345][ T4605] bond0: (slave bond_slave_0): interface is now down [ 95.288193][ T4605] bond0: (slave bond_slave_1): interface is now down [ 95.290143][ T4605] bond0: (slave syz_tun): interface is now down [ 95.307256][ T113] usb 1-1: USB disconnect, device number 3 [ 95.315405][ T4605] bond0: (slave bond_slave_0): interface is now down [ 95.317167][ T4605] bond0: (slave bond_slave_1): interface is now down [ 95.318905][ T4605] bond0: (slave syz_tun): interface is now down [ 95.358560][ T9] bond0: (slave bond_slave_0): interface is now down [ 95.360546][ T9] bond0: (slave bond_slave_1): interface is now down [ 95.406433][ T9] bond0: (slave syz_tun): interface is now down [ 95.427945][ T4605] bond0: (slave bond_slave_0): interface is now down [ 95.429809][ T4605] bond0: (slave bond_slave_1): interface is now down [ 95.431558][ T4605] bond0: (slave syz_tun): interface is now down [ 95.449631][ T9] bond0: (slave bond_slave_0): interface is now down [ 95.451474][ T9] bond0: (slave bond_slave_1): interface is now down [ 95.453276][ T9] bond0: (slave syz_tun): interface is now down [ 95.516648][ T11] bond0: (slave bond_slave_0): interface is now down [ 95.518514][ T11] bond0: (slave bond_slave_1): interface is now down [ 95.520388][ T11] bond0: (slave syz_tun): interface is now down [ 95.558437][ T11] bond0: now running without any active interface! [ 95.675949][ T4407] udevd[4407]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.725055][ T5434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 97.924422][ T5515] tipc: Started in network mode [ 97.926156][ T5515] tipc: Node identity ffffa848, cluster identity 4711 [ 97.927995][ T5515] tipc: Node number set to 4294944840 [ 97.947316][ T4301] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 99.184748][ T4311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.191227][ T4311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.193950][ T4311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.197113][ T4311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.199504][ T4311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.201769][ T4311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.250556][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.478328][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.667758][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.927388][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.268738][ T5539] chnl_net:caif_netlink_parms(): no params data found [ 101.234962][ T4301] Bluetooth: hci1: command 0x0409 tx timeout [ 101.450850][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.452807][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.455678][ T5539] device bridge_slave_0 entered promiscuous mode [ 101.469072][ T5539] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.478623][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.481349][ T5539] device bridge_slave_1 entered promiscuous mode [ 101.577908][ T5539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.597094][ T5539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.790779][ T5539] team0: Port device team_slave_0 added [ 101.795187][ T5539] team0: Port device team_slave_1 added [ 101.880491][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.882476][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.914963][ T5539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.061209][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.063199][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.084838][ T5539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.376694][ T5539] device hsr_slave_0 entered promiscuous mode [ 102.425183][ T5539] device hsr_slave_1 entered promiscuous mode [ 102.465197][ T5539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.467259][ T5539] Cannot create hsr debugfs directory [ 102.645539][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.647917][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.440353][ T5539] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.528684][ T11] device hsr_slave_0 left promiscuous mode [ 103.566860][ T11] device hsr_slave_1 left promiscuous mode [ 103.625468][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.627653][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.630805][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.634014][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.647173][ T11] device bridge_slave_1 left promiscuous mode [ 103.653579][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.682815][ T5683] binder: 5682:5683 tried to acquire reference to desc 0, got 1 instead [ 103.686681][ T5683] binder: 5683:5682 failed to get security context [ 103.688696][ T5683] binder: 5682:5683 transaction async to 5682:0 failed 24/29201/-22, size 0-0 line 3206 [ 103.691932][ T5595] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.697383][ T11] device bridge_slave_0 left promiscuous mode [ 103.699218][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.856375][ T11] device veth1_macvtap left promiscuous mode [ 103.858358][ T11] device veth0_macvtap left promiscuous mode [ 103.860041][ T11] device veth1_vlan left promiscuous mode [ 103.869273][ T11] device veth0_vlan left promiscuous mode [ 104.665326][ T4311] Bluetooth: hci5: command 0x1003 tx timeout [ 104.665389][ T4301] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 106.368195][ T11] team0 (unregistering): Port device team_slave_1 removed [ 106.557535][ T11] team0 (unregistering): Port device team_slave_0 removed [ 106.765654][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.975841][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.391512][ T11] bond0 (unregistering): Released all slaves [ 109.618593][ T5539] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.656126][ T5539] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.772540][ T5539] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.884090][ T5539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.903541][ T5539] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.758456][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.760998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.763462][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.773883][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.786477][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.788403][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.799335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.802045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.807499][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.809499][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.820572][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 110.907973][ T27] audit: type=1326 audit(110.873:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1d5a7a8 code=0x7ffc0000 [ 110.919456][ T27] audit: type=1326 audit(110.883:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffa1d5a7a8 code=0x7ffc0000 [ 110.932397][ T27] audit: type=1326 audit(110.883:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1d5a7a8 code=0x7ffc0000 [ 110.944201][ T27] audit: type=1326 audit(110.893:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffffa1d5a7a8 code=0x7ffc0000 [ 110.952571][ T27] audit: type=1326 audit(110.893:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5724 comm="syz.0.400" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1d5a7a8 code=0x7ffc0000 [ 111.138879][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.141456][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.144864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.148030][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.166385][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.173152][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.177964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.180648][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.199074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.205591][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.221613][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.226274][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.232539][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.556713][ T5760] mmap: syz.0.413 (5760) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.731974][ T5539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.734600][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.736775][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.186193][ T5776] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.251694][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.256606][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.305923][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.310131][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.321900][ T5539] device veth0_vlan entered promiscuous mode [ 112.324837][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.327289][ T4574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.339998][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.343336][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.379748][ T5539] device veth1_vlan entered promiscuous mode [ 112.382741][ T5776] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 112.386135][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.389065][ T5776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.426400][ T5776] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 112.448140][ T5776] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 112.459352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.464053][ T5776] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 112.464834][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.470948][ T5776] usb 1-1: Manufacturer: syz [ 112.475045][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.484107][ T5776] usb 1-1: config 0 descriptor?? [ 112.495251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.518132][ T5539] device veth0_macvtap entered promiscuous mode [ 112.522636][ T5539] device veth1_macvtap entered promiscuous mode [ 112.567353][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.570329][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.573055][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.584221][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.587154][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.590073][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.592816][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.621097][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.636464][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.670425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.673249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.676417][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.692809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.724791][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.727797][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.730482][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.763883][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.771565][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.784300][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.794374][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.809410][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.818999][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.843859][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.847181][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.858605][ T5539] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.874273][ T5539] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.876764][ T5539] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.879156][ T5539] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.895532][ T5776] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 112.898168][ T5776] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 112.920474][ T5776] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 113.053856][ T4604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.061312][ T4604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.079074][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.128340][ T4567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.130664][ T4567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.141622][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.167211][ T5776] usb 1-1: USB disconnect, device number 4 [ 113.345691][ T5825] netlink: 'syz.5.362': attribute type 28 has an invalid length. [ 113.377485][ T5816] fido_id[5816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 113.715122][ T5837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.717362][ T5837] IPv6: NLM_F_CREATE should be set when creating new route [ 114.121181][ T5852] blk_print_req_error: 2 callbacks suppressed [ 114.121195][ T5852] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.132320][ T5852] F2FS-fs (loop9): Unable to read 1th superblock [ 114.135613][ T5852] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.138328][ T5852] F2FS-fs (loop9): Unable to read 2th superblock [ 117.720191][ T5937] fuse: Bad value for 'fd' [ 119.244256][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.246852][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.695902][ T6000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'. [ 123.648191][ T6031] input: syz1 as /devices/virtual/input/input6 [ 124.739561][ T6059] tipc: Started in network mode [ 124.740973][ T6059] tipc: Node identity 4, cluster identity 4711 [ 124.748266][ T6059] tipc: Node number set to 4 [ 125.945495][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.948825][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.852127][ T6094] sctp: failed to load transform for md5: -2 [ 127.496662][ T6114] loop5: detected capacity change from 0 to 32768 [ 127.627278][ T6114] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 127.687161][ T6114] loop3: detected capacity change from 0 to 1 [ 127.706947][ T6114] Dev loop3: unable to read RDB block 1 [ 127.708601][ T6114] loop3: unable to read partition table [ 127.710163][ T6114] loop3: partition table beyond EOD, truncated [ 127.711968][ T6114] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.043672][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.046023][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.051018][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.053242][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.056431][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.058632][ T6119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.329160][ T5539] ocfs2: Unmounting device (7,5) on (node local) [ 128.740066][ T6133] tipc: Started in network mode [ 128.751733][ T6133] tipc: Node identity 4, cluster identity 4711 [ 128.760179][ T6133] tipc: Node number set to 4 [ 129.401641][ T6152] lo speed is unknown, defaulting to 1000 [ 129.422832][ T6152] lo speed is unknown, defaulting to 1000 [ 129.433069][ T6152] lo speed is unknown, defaulting to 1000 [ 129.812668][ T6152] infiniband sz1: set active [ 129.814588][ T6152] infiniband sz1: added lo [ 129.845868][ T3875] lo speed is unknown, defaulting to 1000 [ 130.024871][ T6152] infiniband sz1: Couldn't open port 1 [ 130.052326][ T6152] RDS/IB: sz1: added [ 130.053980][ T6152] smc: adding ib device sz1 with port count 1 [ 130.055717][ T6152] smc: ib device sz1 port 1 has pnetid [ 130.059317][ T6152] lo speed is unknown, defaulting to 1000 [ 130.087394][ T3875] lo speed is unknown, defaulting to 1000 [ 130.111821][ T6152] lo speed is unknown, defaulting to 1000 [ 130.216306][ T6152] lo speed is unknown, defaulting to 1000 [ 130.388898][ T6152] lo speed is unknown, defaulting to 1000 [ 130.432327][ T6152] lo speed is unknown, defaulting to 1000 [ 131.219128][ T6162] rdma_rxe: rxe_register_device failed with error -23 [ 131.221426][ T6162] rdma_rxe: failed to add lo [ 131.536760][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.539174][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.231502][ T6187] tipc: Started in network mode [ 132.243280][ T6187] tipc: Node identity 4, cluster identity 4711 [ 132.244939][ T6187] tipc: Node number set to 4 [ 132.738776][ T6200] rdma_rxe: rxe_register_device failed with error -23 [ 132.741285][ T6200] rdma_rxe: failed to add lo [ 133.526397][ T6212] IPv6: Can't replace route, no match found [ 133.589954][ T6215] input: syz1 as /devices/virtual/input/input7 [ 134.435467][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.438574][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.456037][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.458917][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.462314][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.465376][ T6235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.418694][ T6242] sctp: [Deprecated]: syz.4.525 (pid 6242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.418694][ T6242] Use struct sctp_sack_info instead [ 135.884512][ T6261] rdma_rxe: rxe_register_device failed with error -23 [ 135.886955][ T6261] rdma_rxe: failed to add lo [ 138.812038][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 138.982404][ T6315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.991290][ T6315] bond1: (slave bond2): Enslaving as an active interface with an up link [ 139.015978][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 139.076964][ T6310] bond1 (unregistering): (slave bond2): Releasing backup interface [ 139.170210][ T6310] bond1 (unregistering): Released all slaves [ 139.908379][ T6331] rdma_rxe: rxe_register_device failed with error -23 [ 139.910764][ T6331] rdma_rxe: failed to add lo [ 140.709529][ T6339] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 141.757992][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.558'. [ 142.019278][ T6371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.058585][ T6371] bond1: (slave bond2): Enslaving as an active interface with an up link [ 142.083978][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 142.115873][ T6368] bond1 (unregistering): (slave bond2): Releasing backup interface [ 142.214037][ T6368] bond1 (unregistering): Released all slaves [ 142.879769][ T6409] rdma_rxe: rxe_register_device failed with error -23 [ 142.882339][ T6409] rdma_rxe: failed to add lo [ 144.558907][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'. [ 144.709155][ T6450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.711877][ T6450] bond1: (slave bond2): Enslaving as an active interface with an up link [ 144.947489][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 144.957095][ T6463] tmpfs: Unknown parameter 'usrquota' [ 145.003363][ T6443] bond1 (unregistering): (slave bond2): Releasing backup interface [ 145.048014][ T6443] bond1 (unregistering): Released all slaves [ 147.389080][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 148.268957][ T6518] fuse: root generation should be zero [ 148.331326][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.335267][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.480602][ T6506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.485081][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 157.805323][ T6548] 9pnet_virtio: no channels available for device syz [ 159.665987][ T6570] loop5: detected capacity change from 0 to 4096 [ 159.743098][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 159.808878][ T6570] ntfs: volume version 3.1. [ 159.850064][ T6582] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.472873][ T6636] binder: 6635:6636 tried to acquire reference to desc 0, got 1 instead [ 162.475955][ T6636] binder: 6635:6636 got transaction with invalid parent offset or type [ 162.478100][ T6636] binder: 6636:6635 failed to fixup parent [ 162.479754][ T6636] binder: 6635:6636 transaction async to 6635:0 failed 29/29201/-22, size 88-24 line 3549 [ 162.483545][ T3875] binder: undelivered TRANSACTION_ERROR: 29201 [ 172.296237][ T6612] bridge0: port 3(syz_tun) entered blocking state [ 172.298254][ T6612] bridge0: port 3(syz_tun) entered disabled state [ 172.301891][ T6612] device syz_tun entered promiscuous mode [ 172.306094][ T6612] bridge0: port 3(syz_tun) entered blocking state [ 172.308047][ T6612] bridge0: port 3(syz_tun) entered forwarding state [ 172.311612][ T6628] tipc: Enabling of bearer rejected, failed to enable media [ 172.434908][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 172.443868][ T6645] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.078080][ T6673] device syzkaller1 entered promiscuous mode [ 173.379402][ T6700] usb usb1: usbfs: process 6700 (syz.2.645) did not claim interface 0 before use [ 173.393122][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 173.469043][ T6696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.472030][ T6696] bond1: (slave bond2): Enslaving as an active interface with an up link [ 174.769313][ T6729] netlink: 'syz.5.653': attribute type 1 has an invalid length. [ 174.771980][ T6729] netlink: 'syz.5.653': attribute type 2 has an invalid length. [ 184.338159][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 184.355638][ T6718] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 184.866742][ T6743] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 185.348737][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.359344][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.509466][ T5778] hid-generic 0002:0004:0000.0002: unknown main item tag 0x0 [ 185.519218][ T5778] hid-generic 0002:0004:0000.0002: unknown main item tag 0x0 [ 185.523934][ T5778] hid-generic 0002:0004:0000.0002: unknown main item tag 0x0 [ 185.536139][ T5778] hid-generic 0002:0004:0000.0002: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 185.548986][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.664'. [ 185.568928][ T6764] Bluetooth: MGMT ver 1.22 [ 185.619674][ T6760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.629553][ T6762] fido_id[6762]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 185.645105][ T6760] bond1: (slave bond3): Enslaving as an active interface with an up link [ 185.652777][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 185.751847][ T6775] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.606942][ T6789] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 186.976956][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 187.020182][ T6798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.025257][ T6798] bond1: (slave bond3): Enslaving as an active interface with an up link [ 187.067234][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 187.381520][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.383301][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.492528][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 191.325699][ T6847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.330844][ T6847] bond1: (slave bond3): Enslaving as an active interface with an up link [ 191.401778][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 191.661309][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.663721][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.666664][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 191.718070][ T6866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.726141][ T6866] bond4: (slave bond5): Enslaving as an active interface with an up link [ 191.733263][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 191.808330][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 191.897598][ T6876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.913191][ T6876] bond3: (slave bond4): Enslaving as an active interface with an up link [ 191.965485][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 191.981724][ T6885] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.025212][ T6915] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 195.140517][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 195.273746][ T6924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.276405][ T6924] bond4: (slave bond5): Enslaving as an active interface with an up link [ 195.340482][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 195.355421][ T6930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.476321][ T6937] device wg2 entered promiscuous mode [ 195.669638][ T5778] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 195.859644][ T5778] usb 1-1: Using ep0 maxpacket: 16 [ 195.862566][ T5778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.865436][ T5778] usb 1-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 195.867959][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.900701][ T5778] usb 1-1: config 0 descriptor?? [ 196.362954][ T6955] netlink: 'syz.1.729': attribute type 2 has an invalid length. [ 196.367802][ T6955] netlink: 224 bytes leftover after parsing attributes in process `syz.1.729'. [ 196.429652][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.564294][ T6959] loop4: detected capacity change from 0 to 1024 [ 196.564626][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 196.568793][ T6959] EXT4-fs: Ignoring removed nobh option [ 196.571395][ T6959] EXT4-fs: Ignoring removed bh option [ 196.596683][ T6959] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.617303][ T6961] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.623421][ T6961] bond6: (slave bond7): Enslaving as an active interface with an up link [ 196.625308][ T6959] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.731: bad orphan inode 32767 [ 196.630910][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 196.638778][ T6959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.753765][ T14] Process accounting resumed [ 196.793500][ T4306] EXT4-fs (loop4): unmounting filesystem. [ 196.820767][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.823388][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.841494][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 198.042304][ T6994] 8021q: adding VLAN 0 to HW filter on device bond7 [ 198.067321][ T6994] bond6: (slave bond7): Enslaving as an active interface with an up link [ 198.409719][ T5778] usbhid 1-1:0.0: can't add hid device: -71 [ 198.411464][ T5778] usbhid: probe of 1-1:0.0 failed with error -71 [ 198.438850][ T5778] usb 1-1: USB disconnect, device number 5 [ 198.442493][ T6751] udevd[6751]: setting mode of /dev/bus/usb/001/005 to 020664 failed: No such file or directory [ 198.448319][ T6751] udevd[6751]: setting owner of /dev/bus/usb/001/005 to uid=0, gid=0 failed: No such file or directory [ 198.593654][ T7009] lo speed is unknown, defaulting to 1000 [ 199.026900][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 199.116162][ T7029] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.118946][ T7029] bond4: (slave bond5): Enslaving as an active interface with an up link [ 199.371447][ T7039] bond0: (slave syz_tun): Releasing backup interface [ 199.458158][ T7047] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.466086][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.468608][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.512302][ T7044] overlayfs: missing 'lowerdir' [ 200.332237][ T7044] process 'syz.0.761' launched './file2' with NULL argv: empty string added [ 200.497541][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 200.500087][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.588165][ T7083] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.602180][ T7083] bond5: (slave bond6): Enslaving as an active interface with an up link [ 201.316526][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 201.329717][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'. [ 201.397886][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 201.454741][ T7136] 8021q: adding VLAN 0 to HW filter on device bond9 [ 201.457487][ T7136] bond8: (slave bond9): Enslaving as an active interface with an up link [ 202.314802][ T7148] binder: 7147:7148 tried to acquire reference to desc 0, got 1 instead [ 202.395930][ T7152] binder: 7147:7152 got transaction with invalid offsets ptr [ 202.398128][ T7152] binder: 7147:7152 transaction call to 7147:0 failed 36/29201/-14, size 0-48 line 3278 [ 202.458877][ T5778] binder: release 7147:7148 transaction 35 out, still active [ 202.461195][ T5778] binder: undelivered TRANSACTION_COMPLETE [ 202.462795][ T5778] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.555832][ T5778] binder: send failed reply for transaction 35, target dead [ 202.637617][ T7167] bridge0: port 3(syz_tun) entered disabled state [ 202.731746][ T7167] device syz_tun left promiscuous mode [ 202.733422][ T7167] bridge0: port 3(syz_tun) entered disabled state [ 202.839062][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 202.882471][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 202.927184][ T7174] bond10 (unregistering): Released all slaves [ 204.525997][ T7207] 9pnet_virtio: no channels available for device 127.0.0.1 [ 204.563112][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.706363][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.286576][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.289154][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.348503][ T7211] netlink: 440 bytes leftover after parsing attributes in process `syz.1.801'. [ 205.409864][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 205.438823][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 205.443480][ T7217] bond7 (unregistering): Released all slaves [ 205.853055][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.821'. [ 206.640867][ T7238] netlink: 80 bytes leftover after parsing attributes in process `syz.2.822'. [ 206.699353][ T7242] 9pnet_virtio: no channels available for device 127.0.0.1 [ 206.900962][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'. [ 206.994738][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 207.180621][ T7251] bond8 (unregistering): Released all slaves [ 209.938114][ T7277] 9pnet_virtio: no channels available for device 127.0.0.1 [ 210.577157][ T7295] bond8 (unregistering): Released all slaves [ 212.298593][ C0] sched: RT throttling activated [ 213.030330][ T7338] bond7 (unregistering): Released all slaves [ 213.054328][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 215.504462][ T7369] device syzkaller1 entered promiscuous mode [ 216.582703][ T7375] bond10 (unregistering): Released all slaves [ 216.595078][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 216.678903][ T7378] block nbd0: shutting down sockets [ 217.056503][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 217.572518][ T27] audit: type=1326 audit(217.549:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.585414][ T27] audit: type=1326 audit(217.549:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.595409][ T27] audit: type=1326 audit(217.549:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.638543][ T27] audit: type=1326 audit(217.549:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.667058][ T27] audit: type=1326 audit(217.549:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.703724][ T27] audit: type=1326 audit(217.589:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.733985][ T27] audit: type=1326 audit(217.589:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.743923][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 217.779776][ T27] audit: type=1326 audit(217.589:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.816490][ T27] audit: type=1326 audit(217.599:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.848359][ T27] audit: type=1326 audit(217.599:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.893" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff89b7781c code=0x7ffc0000 [ 217.889309][ T7432] block device autoloading is deprecated and will be removed. [ 217.896724][ T7431] md: md2 stopped. [ 219.228951][ T7446] binder: BINDER_SET_CONTEXT_MGR already set [ 219.230954][ T7446] binder: 7445:7446 ioctl 4018620d 20000040 returned -16 [ 219.245564][ T7446] binder: tried to use weak ref as strong ref [ 219.247425][ T7446] binder: 7445:7446 Acquire 1 refcount change on invalid ref 0 ret -22 [ 219.256954][ T7446] binder: 7445:7446 got transaction to invalid handle, 1 [ 219.265785][ T7446] binder: 7446:7445 cannot find target node [ 219.267687][ T7446] binder: 7445:7446 transaction call to 0:0 failed 39/29201/-22, size 0-0 line 3054 [ 219.276177][ T7446] binder: 7445:7446 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 219.289321][ T7446] binder: 7446 RLIMIT_NICE not set [ 219.290702][ T7446] binder: 7445:7446 ioctl c0306201 20001440 returned -11 [ 219.296769][ T5778] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.369974][ T7448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.896'. [ 219.372378][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.896'. [ 219.638645][ T7458] netlink: 'syz.2.898': attribute type 7 has an invalid length. [ 220.818490][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 221.117333][ T7490] dlm: no local IP address has been set [ 221.138402][ T7490] dlm: cannot start dlm midcomms -107 [ 234.533057][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.916'. [ 234.936085][ T7528] loop5: detected capacity change from 0 to 40427 [ 234.954294][ T7528] F2FS-fs (loop5): invalid crc value [ 234.960936][ T7528] F2FS-fs (loop5): Found nat_bits in checkpoint [ 234.984416][ T7528] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 235.027829][ T7544] 9pnet_virtio: no channels available for device syz [ 235.092406][ T5539] syz-executor: attempt to access beyond end of device [ 235.092406][ T5539] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.665293][ T7559] lo speed is unknown, defaulting to 1000 [ 236.807424][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 236.855853][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 237.915844][ T7561] loop5: detected capacity change from 0 to 40427 [ 237.978485][ T7561] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 237.980674][ T7561] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 237.997735][ T7561] F2FS-fs (loop5): invalid crc value [ 238.093037][ T7561] F2FS-fs (loop5): Found nat_bits in checkpoint [ 238.145612][ T7561] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 238.148704][ T7561] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 239.241242][ T4301] block nbd4: Receive control failed (result -32) [ 239.249357][ T7605] block nbd4: shutting down sockets [ 239.613474][ T7616] loop2: detected capacity change from 0 to 2048 [ 239.683854][ T7618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.817447][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.138253][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 249.157775][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 249.266659][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.956'. [ 249.466738][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 249.556745][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 249.738136][ T14] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.741914][ T14] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.746077][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.754061][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.764164][ T7629] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.981870][ T14] usb 1-1: USB disconnect, device number 6 [ 249.992177][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.948'. [ 261.053897][ T7658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.056022][ T7658] IPv6: NLM_F_CREATE should be set when creating new route [ 261.059061][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 261.204320][ T7681] loop5: detected capacity change from 0 to 512 [ 261.236854][ T7681] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 261.256063][ T7681] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 261.263393][ T7685] tipc: Enabled bearer , priority 0 [ 261.293402][ T7685] device syzkaller0 entered promiscuous mode [ 261.307553][ T7684] tipc: Resetting bearer [ 261.337235][ T7681] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.968: invalid indirect mapped block 83886080 (level 1) [ 261.371496][ T7681] EXT4-fs (loop5): Remounting filesystem read-only [ 261.390249][ T7681] EXT4-fs (loop5): 1 orphan inode deleted [ 261.391887][ T7681] EXT4-fs (loop5): 1 truncate cleaned up [ 261.393351][ T7681] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 261.483193][ T7681] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #2: block 13: comm syz.5.968: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 261.532173][ T7681] EXT4-fs (loop5): Remounting filesystem read-only [ 261.534009][ T7681] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #2: comm syz.5.968: directory missing '..' [ 261.847182][ T7681] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.968: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 261.853730][ T7681] EXT4-fs (loop5): Remounting filesystem read-only [ 262.181616][ T7702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.550913][ T7684] tipc: Disabling bearer [ 272.585730][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'. [ 272.636802][ T5539] EXT4-fs (loop5): unmounting filesystem. [ 272.766656][ T7726] netlink: 224 bytes leftover after parsing attributes in process `syz.0.982'. [ 272.775133][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'. [ 272.887562][ T7730] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 272.890794][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.892865][ T7730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.895643][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.897558][ T7730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.951735][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.953789][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.424005][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'. [ 273.780987][ T7756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'. [ 274.156396][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 274.345489][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 274.348766][ T14] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 274.351358][ T14] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 274.358702][ T14] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 274.366532][ T14] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 274.373632][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 274.379788][ T14] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 274.385423][ T14] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 274.392364][ T14] usb 1-1: Product: syz [ 274.394820][ T14] usb 1-1: Manufacturer: syz [ 274.397369][ T14] usb 1-1: SerialNumber: syz [ 274.410954][ T14] usb 1-1: config 0 descriptor?? [ 274.414958][ T14] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 274.431126][ T14] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 274.694950][ T4347] usb 1-1: USB disconnect, device number 7 [ 274.694963][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 274.706768][ T7759] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 274.715802][ T4347] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 274.920185][ T7779] bond14 (unregistering): Released all slaves [ 275.121947][ T7786] netlink: 'syz.5.1003': attribute type 10 has an invalid length. [ 275.127372][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.129613][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.153749][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.155826][ T7786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.159326][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.161406][ T7786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.176292][ T7786] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 275.179022][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 276.308989][ T7822] bond8 (unregistering): Released all slaves [ 276.357500][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 276.446175][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.479992][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.169986][ T7846] input: syz1 as /devices/virtual/input/input9 [ 277.188187][ T7848] bond6 (unregistering): Released all slaves [ 277.211825][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 277.256305][ T7853] netlink: 'syz.0.1024': attribute type 10 has an invalid length. [ 277.262201][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.264305][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.332354][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.334435][ T7853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.336570][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.338584][ T7853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.391183][ T7853] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 277.405207][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 277.561839][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.595423][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.818604][ T27] kauditd_printk_skb: 1140 callbacks suppressed [ 277.818617][ T27] audit: type=1326 audit(277.792:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b5a7a8 code=0x7ffc0000 [ 277.839594][ T27] audit: type=1326 audit(277.792:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=271 compat=0 ip=0xffffb0b5a7a8 code=0x7ffc0000 [ 277.854681][ T27] audit: type=1326 audit(277.792:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b5a7a8 code=0x7ffc0000 [ 278.299791][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1040'. [ 278.332220][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1040'. [ 279.046942][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.055264][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.134495][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1053'. [ 279.244524][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1053'. [ 279.658652][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.660098][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'. [ 279.673231][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.773891][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 279.791284][ T7943] netlink: 'syz.4.1055': attribute type 10 has an invalid length. [ 279.795567][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.797638][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.820037][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.822075][ T7943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.824130][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.826136][ T7943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.842364][ T7943] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 279.851332][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 279.856695][ T55] bond0: (slave bridge0): interface is now down [ 279.858572][ T55] bond0: now running without any active interface! [ 281.233450][ T7971] tmpfs: Bad value for 'mpol' [ 281.343711][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1071'. [ 281.348546][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1072'. [ 281.395355][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 281.743288][ T7991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.766962][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.360878][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1083'. [ 283.473433][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'. [ 283.493883][ T8020] tmpfs: Unknown parameter 'gd' [ 283.652586][ T8020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1087'. [ 285.109336][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.111809][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.295375][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1099'. [ 285.351472][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1099'. [ 286.801034][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 288.131569][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 288.499622][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 291.208645][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1138'. [ 291.949009][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1152'. [ 293.044764][ T8212] 9pnet_virtio: no channels available for device syz [ 293.465113][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1163'. [ 294.814566][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1175'. [ 306.039735][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 308.160054][ T8340] bond10 (unregistering): Released all slaves [ 308.205276][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1202'. [ 308.318363][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 310.261639][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.665788][ T8386] bond10 (unregistering): Released all slaves [ 320.729330][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1214'. [ 324.135243][ T8431] [U] : [ 324.136093][ T8431] [U] [ 324.136810][ T8431] [U] [ 324.137570][ T8431] [U] [ 324.138506][ T8431] [U] [ 324.139227][ T8431] [U] [ 324.139971][ T8431] [U] [ 324.140670][ T8431] [U] [ 324.141595][ T8431] [U] [ 324.142297][ T8431] [U] [ 324.143005][ T8431] [U] [ 324.143753][ T8431] [U] [ 324.145470][ T8431] [U] [ 324.146205][ T8431] [U] [ 324.146929][ T8431] [U] [ 324.147649][ T8431] [U] [ 324.148381][ T8431] [U] [ 324.149128][ T8431] [U] [ 324.149892][ T8431] [U] [ 324.150670][ T8431] [U] [ 324.151649][ T8431] [U] [ 324.152396][ T8431] [U] [ 324.153118][ T8431] [U] [ 324.153839][ T8431] [U] [ 324.155539][ T8431] [U] [ 324.156283][ T8431] [U] [ 324.157024][ T8431] [U] [ 324.157708][ T8431] [U] [ 324.158469][ T8431] [U] [ 324.159179][ T8431] [U] [ 324.159897][ T8431] [U] [ 324.160612][ T8431] [U] [ 324.161365][ T8431] [U] [ 324.162099][ T8431] [U] [ 324.162872][ T8431] [U] [ 324.163602][ T8431] [U] [ 324.165449][ T8431] [U] [ 324.166165][ T8431] [U] [ 324.166865][ T8431] [U] [ 324.167562][ T8431] [U] [ 324.168309][ T8431] [U] [ 324.169037][ T8431] [U] [ 324.169728][ T8431] [U] [ 324.170446][ T8431] [U] [ 324.171238][ T8431] [U] [ 324.171957][ T8431] [U] [ 324.172691][ T8431] [U] [ 324.173428][ T8431] [U] [ 324.175172][ T8431] [U] [ 324.175930][ T8431] [U] [ 324.176643][ T8431] [U] [ 324.177342][ T8431] [U] [ 324.178222][ T8431] [U] [ 324.178941][ T8431] [U] [ 324.179747][ T8431] [U] [ 324.180489][ T8431] [U] [ 324.181319][ T8431] [U] [ 324.182042][ T8431] [U] [ 324.182781][ T8431] [U] [ 324.183495][ T8431] [U] [ 324.185341][ T8431] [U] [ 324.186133][ T8431] [U] [ 324.186902][ T8431] [U] [ 324.187605][ T8431] [U] [ 324.193702][ T8431] [U] [ 324.194472][ T8431] [U] [ 324.195193][ T8431] [U] [ 324.195937][ T8431] [U] [ 324.196722][ T8431] [U] [ 324.197425][ T8431] [U] [ 324.198176][ T8431] [U] [ 324.198908][ T8431] [U] [ 324.199746][ T8431] [U] [ 324.200469][ T8431] [U] [ 324.201168][ T8431] [U] [ 324.201872][ T8431] [U] [ 324.207570][ T8431] [U] [ 324.208294][ T8431] [U] [ 324.209022][ T8431] [U] [ 324.209719][ T8431] [U] [ 324.210466][ T8431] [U] [ 324.211192][ T8431] [U] [ 324.211915][ T8431] [U] [ 324.212612][ T8431] [U] [ 324.219892][ T8431] [U] [ 324.220610][ T8431] [U] [ 324.221289][ T8431] [U] [ 324.222069][ T8431] [U] [ 324.229453][ T8431] [U] [ 324.230177][ T8431] [U] [ 324.230924][ T8431] [U] [ 324.231605][ T8431] [U] [ 324.234426][ T8431] [U] [ 324.235159][ T8431] [U] [ 324.235888][ T8431] [U] [ 324.236607][ T8431] [U] [ 324.237361][ T8431] [U] [ 324.238074][ T8431] [U] [ 324.238756][ T8431] [U] [ 324.239480][ T8431] [U] [ 324.240324][ T8431] [U] [ 324.241084][ T8431] [U] [ 324.241850][ T8431] [U] [ 324.242530][ T8431] [U] [ 324.248632][ T8431] [U] [ 324.249431][ T8431] [U] [ 324.250159][ T8431] [U] [ 324.250902][ T8431] [U] [ 324.251674][ T8431] [U] [ 324.252386][ T8431] [U] [ 324.253112][ T8431] [U] [ 324.253823][ T8431] [U] [ 324.261438][ T8431] [U] [ 324.262170][ T8431] [U] [ 324.262901][ T8431] [U] [ 324.263636][ T8431] [U] [ 324.269519][ T8431] [U] [ 324.270335][ T8431] [U] [ 324.271035][ T8431] [U] [ 324.271725][ T8431] [U] [ 324.273938][ T8431] [U] [ 324.274655][ T8431] [U] [ 324.275403][ T8431] [U] [ 324.276144][ T8431] [U] [ 324.276885][ T8431] [U] [ 324.277619][ T8431] [U] [ 324.278354][ T8431] [U] [ 324.444532][ T8429] [U] [ 333.334929][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 333.361280][ T8409] lo speed is unknown, defaulting to 1000 [ 333.479710][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 335.615825][ T8473] bond15 (unregistering): Released all slaves [ 335.634879][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 336.552794][ T8487] lo speed is unknown, defaulting to 1000 [ 337.127764][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 338.083783][ T8516] bond13 (unregistering): Released all slaves [ 338.148913][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 350.716510][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 350.721358][ T8565] lo speed is unknown, defaulting to 1000 [ 351.328209][ T8605] bond10 (unregistering): Released all slaves [ 351.371228][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 351.630390][ T8610] lo speed is unknown, defaulting to 1000 [ 352.143279][ T8599] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 352.228675][ T8613] netlink: 'syz.2.1289': attribute type 4 has an invalid length. [ 352.323046][ T8616] netlink: 'syz.2.1289': attribute type 4 has an invalid length. [ 365.196988][ T8637] lo speed is unknown, defaulting to 1000 [ 365.236497][ T8640] lo speed is unknown, defaulting to 1000 [ 365.415318][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.418146][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.465097][ T8651] block device autoloading is deprecated and will be removed. [ 365.508604][ T8656] bond8 (unregistering): Released all slaves [ 365.542284][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 365.545828][ T8651] [U]  [ 366.888499][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 371.690341][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.054846][ T8695] lo speed is unknown, defaulting to 1000 [ 379.074153][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 379.213951][ T8724] fuse: Bad value for 'fd' [ 379.426300][ T8737] 9pnet_fd: Insufficient options for proto=fd [ 379.571103][ T8742] bond11 (unregistering): Released all slaves [ 379.611232][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 381.424747][ T8790] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1342'. [ 381.548116][ T8791] ceph: No mds server is up or the cluster is laggy [ 391.765161][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 392.955678][ T8820] 9pnet_virtio: no channels available for device syz [ 393.780469][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1355'. [ 394.516069][ T8834] bond11 (unregistering): Released all slaves [ 394.585011][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 398.043780][ T8882] 9pnet_virtio: no channels available for device syz [ 407.994716][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1369'. [ 408.005169][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 408.275515][ T8908] netlink: 'syz.2.1372': attribute type 4 has an invalid length. [ 408.286873][ T8910] delete_channel: no stack [ 409.490345][ T8925] 9pnet_virtio: no channels available for device syz [ 409.947426][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1378'. [ 410.023446][ T8921] bond11 (unregistering): Released all slaves [ 410.088942][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 410.277640][ T4345] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 410.580427][ T4345] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 410.583397][ T4345] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 410.586481][ T4345] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.596621][ T4345] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 410.599301][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.618918][ T4345] usb 1-1: invalid MIDI out EP 0 [ 411.412377][ T4345] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 411.478144][ T8953] udevd[8953]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.735726][ T4345] usb 1-1: USB disconnect, device number 8 [ 422.948170][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1392'. [ 422.961582][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1392'. [ 426.367601][ T9012] 9pnet_virtio: no channels available for device syz [ 427.834882][ T9030] netlink: 'syz.2.1404': attribute type 1 has an invalid length. [ 427.866250][ T9030] netlink: 'syz.2.1404': attribute type 2 has an invalid length. [ 433.126895][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.764919][ T9024] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1400'. [ 440.782727][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1400'. [ 440.948871][ T9055] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1412'. [ 443.877390][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1426'. [ 444.707584][ T9096] bond11 (unregistering): Released all slaves [ 444.735951][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 445.626539][ T9119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.628921][ T9119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.679530][ T9117] lo speed is unknown, defaulting to 1000 [ 457.826298][ T9144] bond10 (unregistering): Released all slaves [ 469.762438][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1443'. [ 471.386178][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.393996][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.443090][ T9200] bond11 (unregistering): Released all slaves [ 471.461490][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 482.839298][ T9214] netlink: 'syz.5.1467': attribute type 1 has an invalid length. [ 482.864369][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 484.431294][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1486'. [ 484.451027][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1489'. [ 486.134557][ T9278] team0 (unregistering): Port device team_slave_0 removed [ 486.178243][ T9278] team0 (unregistering): Port device team_slave_1 removed [ 486.251462][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 486.998109][ T9323] random: crng reseeded on system resumption [ 494.574801][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 498.289969][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1513'. [ 498.306784][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1513'. [ 498.476479][ T27] audit: type=1326 audit(498.465:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa075a7a8 code=0x7ffc0000 [ 498.521160][ T27] audit: type=1326 audit(498.505:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa075a7a8 code=0x7ffc0000 [ 498.547586][ T27] audit: type=1326 audit(498.505:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa075a7a8 code=0x7ffc0000 [ 498.569867][ T27] audit: type=1326 audit(498.505:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.2.1514" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa075a7a8 code=0x7ffc0000 [ 499.605067][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1527'. [ 499.673960][ T9384] bond10 (unregistering): Released all slaves [ 499.708936][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1527'. [ 511.589829][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1542'. [ 511.599500][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1542'. [ 512.908600][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1557'. [ 512.929847][ T9469] bond13 (unregistering): Released all slaves [ 515.133051][ T9497] ALSA: mixer_oss: invalid OSS volume '' [ 525.331880][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'. [ 525.336699][ T9487] netlink: 'syz.5.1565': attribute type 10 has an invalid length. [ 526.118147][ T9534] ALSA: mixer_oss: invalid OSS volume '' [ 538.923155][ T9548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1584'. [ 538.927188][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'. [ 538.954961][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1585'. [ 539.083255][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1595'. [ 540.885498][ T9614] ALSA: mixer_oss: invalid OSS volume '' [ 551.758132][ T9594] device netdevsim0 entered promiscuous mode [ 551.770600][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'. [ 551.775459][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 553.383570][ T9662] ALSA: mixer_oss: invalid OSS volume '' [ 554.158217][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1622'. [ 554.282997][ T9670] bond11 (unregistering): Released all slaves [ 554.300688][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 554.667506][ T9681] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 554.670250][ T9681] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 554.820715][ T9682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.009981][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.881146][ T9701] fuse: Bad value for 'fd' [ 567.071376][ T9709] netlink: 'syz.4.1632': attribute type 4 has an invalid length. [ 567.085639][ T9710] netlink: 'syz.4.1632': attribute type 4 has an invalid length. [ 567.298127][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'. [ 567.408024][ T9727] bond8 (unregistering): Released all slaves [ 567.476039][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 567.627556][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.631600][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.692515][ T9740] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1641'. [ 567.815634][ T9744] tipc: Enabling of bearer rejected, failed to enable media [ 580.264334][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1653'. [ 580.285115][ T9777] bond16 (unregistering): Released all slaves [ 580.305304][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 580.307893][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 580.311325][ T9792] netlink: 'syz.1.1659': attribute type 4 has an invalid length. [ 581.396311][ T9812] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1664'. [ 581.960515][ T9806] tipc: Enabled bearer , priority 10 [ 582.424076][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1673'. [ 582.525339][ T9835] bond8 (unregistering): Released all slaves [ 582.544907][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1673'. [ 583.208359][ T4346] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 583.738022][ T4346] usb 1-1: Using ep0 maxpacket: 8 [ 583.786738][ T4346] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 583.823799][ T4346] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 583.826532][ T4346] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 583.829752][ T4346] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.833330][ T4346] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 583.835879][ T4346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.962235][ T9866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1685'. [ 583.964771][ T9866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1685'. [ 584.106396][ T4346] usb 1-1: GET_CAPABILITIES returned 0 [ 584.108229][ T4346] usbtmc 1-1:16.0: can't read capabilities [ 584.827021][ T4346] usb 1-1: USB disconnect, device number 9 [ 584.845226][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1687'. [ 584.894970][ T9878] 9pnet_virtio: no channels available for device syz [ 584.920586][ T9874] bond16 (unregistering): Released all slaves [ 584.946192][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 586.256996][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'. [ 586.259891][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'. [ 586.273542][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'. [ 586.276252][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1692'. [ 587.037657][ C0] ------------[ cut here ]------------ [ 587.039544][ C0] refcount_t: addition on 0; use-after-free. [ 587.041518][ C0] WARNING: CPU: 0 PID: 9910 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 587.044022][ C0] Modules linked in: [ 587.045104][ C0] CPU: 0 PID: 9910 Comm: syz.5.1699 Not tainted 6.1.141-syzkaller #0 [ 587.047319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.050138][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 587.052285][ C0] pc : refcount_warn_saturate+0x134/0x1f8 [ 587.053896][ C0] lr : refcount_warn_saturate+0x134/0x1f8 [ 587.055502][ C0] sp : ffff8000080078c0 [ 587.056624][ C0] x29: ffff8000080078c0 x28: ffff0000f5126800 x27: ffff0000d5d7fe08 [ 587.058814][ C0] x26: ffff0000d7ba2af0 x25: dfff800000000000 x24: 1fffe0001abaffc1 [ 587.060998][ C0] x23: ffff0000f2ad6800 x22: ffff0000d3a339d4 x21: ffff0000dbc31880 [ 587.063220][ C0] x20: ffff0000d3a339d4 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 587.065385][ C0] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 587.067634][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 587.069825][ C0] x11: ff0080000819149c x10: 0000000000000000 x9 : 42dacffb61ad9e00 [ 587.072024][ C0] x8 : 42dacffb61ad9e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 587.074256][ C0] x5 : ffff800008007358 x4 : ffff800015154700 x3 : ffff80000852da40 [ 587.076526][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000000 [ 587.078612][ C0] Call trace: [ 587.079543][ C0] refcount_warn_saturate+0x134/0x1f8 [ 587.081067][ C0] tipc_crypto_xmit+0x1518/0x2014 [ 587.082416][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 587.083884][ C0] tipc_disc_timeout+0x4c8/0x608 [ 587.085246][ C0] call_timer_fn+0x1b8/0x964 [ 587.086435][ C0] __run_timers+0x460/0x6bc [ 587.087617][ C0] run_timer_softirq+0x7c/0x114 [ 587.088954][ C0] handle_softirqs+0x318/0xc6c [ 587.090251][ C0] __do_softirq+0x14/0x20 [ 587.091431][ C0] ____do_softirq+0x14/0x20 [ 587.092718][ C0] call_on_irq_stack+0x24/0x4c [ 587.094018][ C0] do_softirq_own_stack+0x20/0x2c [ 587.095449][ C0] __irq_exit_rcu+0x23c/0x43c [ 587.096835][ C0] irq_exit_rcu+0x14/0x84 [ 587.097989][ C0] el1_interrupt+0x38/0x54 [ 587.099223][ C0] el1h_64_irq_handler+0x18/0x24 [ 587.100609][ C0] el1h_64_irq+0x64/0x68 [ 587.101763][ C0] caches_clean_inval_pou+0x7c/0x84 [ 587.103262][ C0] __set_pte_at+0x70/0x3b0 [ 587.104541][ C0] do_set_pte+0x39c/0x49c [ 587.105676][ C0] finish_fault+0x560/0x65c [ 587.106883][ C0] handle_mm_fault+0x1ae4/0x2fd4 [ 587.108280][ C0] __get_user_pages+0x338/0x798 [ 587.109581][ C0] populate_vma_page_range+0x1f4/0x298 [ 587.111081][ C0] __mm_populate+0x208/0x330 [ 587.112402][ C0] vm_mmap_pgoff+0x1cc/0x284 [ 587.113666][ C0] ksys_mmap_pgoff+0xd0/0x5a0 [ 587.114971][ C0] __arm64_sys_mmap+0xf8/0x110 [ 587.116264][ C0] invoke_syscall+0x98/0x2bc [ 587.117539][ C0] el0_svc_common+0x138/0x258 [ 587.118808][ C0] do_el0_svc+0x58/0x13c [ 587.119924][ C0] el0_svc+0x58/0x138 [ 587.121041][ C0] el0t_64_sync_handler+0x84/0xf0 [ 587.122408][ C0] el0t_64_sync+0x18c/0x190 [ 587.123628][ C0] irq event stamp: 6529 [ 587.124769][ C0] hardirqs last enabled at (6528): [] __up_console_sem+0xb4/0x100 [ 587.127370][ C0] hardirqs last disabled at (6529): [] el1_dbg+0x24/0x80 [ 587.129675][ C0] softirqs last enabled at (6186): [] handle_softirqs+0xaf8/0xc6c [ 587.132229][ C0] softirqs last disabled at (6499): [] __do_softirq+0x14/0x20 [ 587.134697][ C0] ---[ end trace 0000000000000000 ]--- [ 587.136177][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.137883][ C0] ------------[ cut here ]------------ [ 587.139371][ C0] refcount_t: underflow; use-after-free. [ 587.141206][ C0] WARNING: CPU: 0 PID: 9910 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 587.143730][ C0] Modules linked in: [ 587.144748][ C0] CPU: 0 PID: 9910 Comm: syz.5.1699 Tainted: G W 6.1.141-syzkaller #0 [ 587.147299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.150063][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 587.152167][ C0] pc : refcount_warn_saturate+0x154/0x1f8 [ 587.153832][ C0] lr : refcount_warn_saturate+0x154/0x1f8 [ 587.155350][ C0] sp : ffff8000080078c0 [ 587.156462][ C0] x29: ffff8000080078c0 x28: ffff0000f5126800 x27: 0000000000000000 [ 587.158601][ C0] x26: ffff0000d7ba2af0 x25: dfff800000000000 x24: 1fffe0001af74568 [ 587.160766][ C0] x23: 1fffe0001acd6a69 x22: ffff0000d5d7fe00 x21: 00000000c0000000 [ 587.162873][ C0] x20: ffff0000d3a339d4 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 587.165055][ C0] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 587.167177][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 587.169364][ C0] x11: ff0080000819149c x10: 0000000000000000 x9 : 42dacffb61ad9e00 [ 587.171499][ C0] x8 : 42dacffb61ad9e00 x7 : 0000000000000001 x6 : 0000000000000001 [ 587.173647][ C0] x5 : ffff800008007358 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 587.175734][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000000 [ 587.177911][ C0] Call trace: [ 587.178792][ C0] refcount_warn_saturate+0x154/0x1f8 [ 587.180314][ C0] tipc_crypto_xmit+0x1664/0x2014 [ 587.181676][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 587.183093][ C0] tipc_disc_timeout+0x4c8/0x608 [ 587.184481][ C0] call_timer_fn+0x1b8/0x964 [ 587.185747][ C0] __run_timers+0x460/0x6bc [ 587.187036][ C0] run_timer_softirq+0x7c/0x114 [ 587.188343][ C0] handle_softirqs+0x318/0xc6c [ 587.189622][ C0] __do_softirq+0x14/0x20 [ 587.190884][ C0] ____do_softirq+0x14/0x20 [ 587.192071][ C0] call_on_irq_stack+0x24/0x4c [ 587.193319][ C0] do_softirq_own_stack+0x20/0x2c [ 587.194689][ C0] __irq_exit_rcu+0x23c/0x43c [ 587.195963][ C0] irq_exit_rcu+0x14/0x84 [ 587.197171][ C0] el1_interrupt+0x38/0x54 [ 587.198359][ C0] el1h_64_irq_handler+0x18/0x24 [ 587.199676][ C0] el1h_64_irq+0x64/0x68 [ 587.200875][ C0] caches_clean_inval_pou+0x7c/0x84 [ 587.202274][ C0] __set_pte_at+0x70/0x3b0 [ 587.203445][ C0] do_set_pte+0x39c/0x49c [ 587.204617][ C0] finish_fault+0x560/0x65c [ 587.205851][ C0] handle_mm_fault+0x1ae4/0x2fd4 [ 587.207213][ C0] __get_user_pages+0x338/0x798 [ 587.208596][ C0] populate_vma_page_range+0x1f4/0x298 [ 587.210079][ C0] __mm_populate+0x208/0x330 [ 587.211361][ C0] vm_mmap_pgoff+0x1cc/0x284 [ 587.212713][ C0] ksys_mmap_pgoff+0xd0/0x5a0 [ 587.214014][ C0] __arm64_sys_mmap+0xf8/0x110 [ 587.215345][ C0] invoke_syscall+0x98/0x2bc [ 587.216625][ C0] el0_svc_common+0x138/0x258 [ 587.217926][ C0] do_el0_svc+0x58/0x13c [ 587.219076][ C0] el0_svc+0x58/0x138 [ 587.220152][ C0] el0t_64_sync_handler+0x84/0xf0 [ 587.221511][ C0] el0t_64_sync+0x18c/0x190 [ 587.222735][ C0] irq event stamp: 6561 [ 587.223861][ C0] hardirqs last enabled at (6560): [] __up_console_sem+0xb4/0x100 [ 587.226387][ C0] hardirqs last disabled at (6561): [] el1_dbg+0x24/0x80 [ 587.228652][ C0] softirqs last enabled at (6186): [] handle_softirqs+0xaf8/0xc6c [ 587.231341][ C0] softirqs last disabled at (6499): [] __do_softirq+0x14/0x20 [ 587.233791][ C0] ---[ end trace 0000000000000000 ]--- [ 587.235296][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 587.299003][ T4311] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.309237][ T4311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.313139][ T4311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.316604][ T4311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.321853][ T4311] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 587.325317][ T4311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.365421][ T4301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.369889][ T4301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.446375][ T4301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.473534][ T4605] ------------[ cut here ]------------ [ 587.475315][ T4605] refcount_t: saturated; leaking memory. [ 587.477194][ T4605] WARNING: CPU: 0 PID: 4605 at lib/refcount.c:19 refcount_warn_saturate+0x174/0x1f8 [ 587.479786][ T4605] Modules linked in: [ 587.480883][ T4605] CPU: 0 PID: 4605 Comm: kworker/u4:14 Tainted: G W 6.1.141-syzkaller #0 [ 587.483591][ T4605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.486353][ T4605] Workqueue: netns cleanup_net [ 587.487657][ T4605] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 587.489790][ T4605] pc : refcount_warn_saturate+0x174/0x1f8 [ 587.491418][ T4605] lr : refcount_warn_saturate+0x174/0x1f8 [ 587.492984][ T4605] sp : ffff800020e87280 [ 587.494130][ T4605] x29: ffff800020e87280 x28: 1ffff000041d0e58 x27: dfff800000000000 [ 587.496340][ T4605] x26: 00000000c0000000 x25: 00000000c0000000 x24: ffff0000d3a339d4 [ 587.498530][ T4605] x23: 0000000000000046 x22: 0000000000000cc0 x21: 000000007ffffffe [ 587.500713][ T4605] x20: ffff0000d3a339d4 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 587.502908][ T4605] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 587.505059][ T4605] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 587.507256][ T4605] x11: ff0080000819149c x10: 0000000000000000 x9 : 6722b263fd537a00 [ 587.509395][ T4605] x8 : 6722b263fd537a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 587.511610][ T4605] x5 : ffff800020e86d18 x4 : ffff800015154700 x3 : ffff80000852da40 [ 587.513841][ T4605] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 587.516097][ T4605] Call trace: [ 587.516995][ T4605] refcount_warn_saturate+0x174/0x1f8 [ 587.518487][ T4605] nf_nat_masq_schedule+0x478/0x54c [ 587.519978][ T4605] masq_device_event+0x9c/0xe0 [ 587.521301][ T4605] raw_notifier_call_chain+0xd4/0x164 [ 587.522780][ T4605] dev_close_many+0x2cc/0x440 [ 587.524037][ T4605] unregister_netdevice_many+0x3c4/0x1740 [ 587.525616][ T4605] unregister_netdevice_queue+0x2ac/0x2f8 [ 587.527194][ T4605] nsim_destroy+0x58/0x164 [ 587.528385][ T4605] __nsim_dev_port_del+0x144/0x1a4 [ 587.529761][ T4605] nsim_dev_reload_destroy+0x240/0x43c [ 587.531220][ T4605] nsim_dev_reload_down+0x9c/0xd4 [ 587.532627][ T4605] devlink_reload+0x1b4/0x570 [ 587.533887][ T4605] devlink_pernet_pre_exit+0x118/0x2a8 [ 587.535393][ T4605] cleanup_net+0x470/0xa74 [ 587.536598][ T4605] process_one_work+0x7f4/0x13a8 [ 587.537955][ T4605] worker_thread+0x8c8/0xfbc [ 587.539195][ T4605] kthread+0x250/0x2d8 [ 587.540306][ T4605] ret_from_fork+0x10/0x20 [ 587.541499][ T4605] irq event stamp: 10970800 [ 587.542763][ T4605] hardirqs last enabled at (10970799): [] __up_console_sem+0xb4/0x100 [ 587.545450][ T4605] hardirqs last disabled at (10970800): [] el1_dbg+0x24/0x80 [ 587.547912][ T4605] softirqs last enabled at (10970776): [] pppoe_device_event+0x48c/0x4bc [ 587.550696][ T4605] softirqs last disabled at (10970774): [] pppoe_device_event+0xdc/0x4bc [ 587.553472][ T4605] ---[ end trace 0000000000000000 ]--- [ 587.555016][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.566767][ T4301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.578440][ T4301] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 587.587986][ T4301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.621154][ T4605] ------------[ cut here ]------------ [ 587.622646][ T4605] WARNING: CPU: 1 PID: 4605 at lib/ref_tracker.c:77 ref_tracker_alloc+0x230/0x3cc [ 587.625169][ T4605] Modules linked in: [ 587.626210][ T4605] CPU: 1 PID: 4605 Comm: kworker/u4:14 Tainted: G W 6.1.141-syzkaller #0 [ 587.628833][ T4605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.631572][ T4605] Workqueue: netns cleanup_net [ 587.632879][ T4605] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 587.635020][ T4605] pc : ref_tracker_alloc+0x230/0x3cc [ 587.636450][ T4605] lr : ref_tracker_alloc+0x230/0x3cc [ 587.637878][ T4605] sp : ffff800020e87160 [ 587.639002][ T4605] x29: ffff800020e87240 x28: 1ffff000041d0e58 x27: dfff800000000000 [ 587.641192][ T4605] x26: dfff800000000000 x25: ffff7000041d0e2c x24: ffff0000d2fd3308 [ 587.643380][ T4605] x23: ffff800020e87160 x22: ffff0000d3a33a24 x21: ffff0000d2fd3350 [ 587.645568][ T4605] x20: 0000000000000cc0 x19: ffff0000d3a339d8 x18: ffff800011a7bce0 [ 587.647762][ T4605] x17: 0000000000000000 x16: ffff8000082d1c00 x15: ffff800010a233ec [ 587.649933][ T4605] x14: ffff80000d4f3814 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 587.652065][ T4605] x11: ff0080000aa23d44 x10: 0000000000000000 x9 : ffff80000aa23d44 [ 587.654178][ T4605] x8 : ffff0000c9a63780 x7 : 0000000000000000 x6 : 000000000000003f [ 587.656306][ T4605] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 587.658546][ T4605] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800020e87180 [ 587.660672][ T4605] Call trace: [ 587.661552][ T4605] ref_tracker_alloc+0x230/0x3cc [ 587.662969][ T4605] nf_nat_masq_schedule+0x328/0x54c [ 587.664380][ T4605] masq_device_event+0x9c/0xe0 [ 587.665681][ T4605] raw_notifier_call_chain+0xd4/0x164 [ 587.667173][ T4605] dev_close_many+0x2cc/0x440 [ 587.668447][ T4605] unregister_netdevice_many+0x3c4/0x1740 [ 587.669981][ T4605] unregister_netdevice_queue+0x2ac/0x2f8 [ 587.671548][ T4605] nsim_destroy+0x58/0x164 [ 587.672784][ T4605] __nsim_dev_port_del+0x144/0x1a4 [ 587.674193][ T4605] nsim_dev_reload_destroy+0x240/0x43c [ 587.675698][ T4605] nsim_dev_reload_down+0x9c/0xd4 [ 587.677087][ T4605] devlink_reload+0x1b4/0x570 [ 587.678421][ T4605] devlink_pernet_pre_exit+0x118/0x2a8 [ 587.679938][ T4605] cleanup_net+0x470/0xa74 [ 587.681114][ T4605] process_one_work+0x7f4/0x13a8 [ 587.682474][ T4605] worker_thread+0x8c8/0xfbc [ 587.683712][ T4605] kthread+0x250/0x2d8 [ 587.684877][ T4605] ret_from_fork+0x10/0x20 [ 587.686063][ T4605] irq event stamp: 10971018 [ 587.687263][ T4605] hardirqs last enabled at (10971017): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 587.690155][ T4605] hardirqs last disabled at (10971018): [] el1_dbg+0x24/0x80 [ 587.692608][ T4605] softirqs last enabled at (10970992): [] handle_softirqs+0xaf8/0xc6c [ 587.695231][ T4605] softirqs last disabled at (10970805): [] __do_softirq+0x14/0x20 [ 587.697771][ T4605] ---[ end trace 0000000000000000 ]--- [ 587.709108][ T3875] ------------[ cut here ]------------ [ 587.710870][ T3875] WARNING: CPU: 1 PID: 3875 at lib/ref_tracker.c:110 ref_tracker_free+0x484/0x694 [ 587.713328][ T3875] Modules linked in: [ 587.714428][ T3875] CPU: 1 PID: 3875 Comm: kworker/1:3 Tainted: G W 6.1.141-syzkaller #0 [ 587.716886][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.719503][ T3875] Workqueue: events iterate_cleanup_work [ 587.720994][ T3875] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 587.723099][ T3875] pc : ref_tracker_free+0x484/0x694 [ 587.724542][ T3875] lr : ref_tracker_free+0x484/0x694 [ 587.725988][ T3875] sp : ffff800023227940 [ 587.727081][ T3875] x29: ffff800023227a40 x28: ffff00019f750800 x27: ffff0000d2fd3300 [ 587.729206][ T3875] x26: dfff800000000000 x25: ffff700004644f2c x24: ffff800023227aa0 [ 587.731336][ T3875] x23: ffff700004644f54 x22: ffff800023227960 x21: ffff0000d3a33a24 [ 587.733596][ T3875] x20: ffff0000d2fd3350 x19: ffff0000d3a339d8 x18: ffff800011a7bce0 [ 587.735736][ T3875] x17: ffff8000181a1000 x16: ffff8000082d0750 x15: ffff800017c81fc0 [ 587.737927][ T3875] x14: ffff0000c9a64218 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 587.740089][ T3875] x11: ff0080000aa2441c x10: 0000000000000000 x9 : ffff80000aa2441c [ 587.742256][ T3875] x8 : ffff0000d83e5340 x7 : 0000000000000000 x6 : 000000000000003f [ 587.744405][ T3875] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 587.746521][ T3875] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800023227980 [ 587.748712][ T3875] Call trace: [ 587.749576][ T3875] ref_tracker_free+0x484/0x694 [ 587.750881][ T3875] iterate_cleanup_work+0xe8/0x230 [ 587.752334][ T3875] process_one_work+0x7f4/0x13a8 [ 587.753724][ T3875] worker_thread+0x8c8/0xfbc [ 587.754944][ T3875] kthread+0x250/0x2d8 [ 587.756052][ T3875] ret_from_fork+0x10/0x20 [ 587.757246][ T3875] irq event stamp: 368590 [ 587.758420][ T3875] hardirqs last enabled at (368589): [] __local_bh_enable_ip+0x1f8/0x380 [ 587.761128][ T3875] hardirqs last disabled at (368590): [] el1_dbg+0x24/0x80 [ 587.763537][ T3875] softirqs last enabled at (368588): [] local_bh_enable+0x10/0x34 [ 587.766242][ T3875] softirqs last disabled at (368586): [] local_bh_disable+0x10/0x34 [ 587.768779][ T3875] ---[ end trace 0000000000000000 ]--- [ 588.011254][ T4605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.077601][ C0] ------------[ cut here ]------------ [ 588.079192][ C0] refcount_t: saturated; leaking memory. [ 588.081016][ C0] WARNING: CPU: 0 PID: 9912 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 588.083577][ C0] Modules linked in: [ 588.084633][ C0] CPU: 0 PID: 9912 Comm: syz.0.1697 Tainted: G W 6.1.141-syzkaller #0 [ 588.087269][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 588.090071][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 588.092256][ C0] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 588.093836][ C0] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 588.095350][ C0] sp : ffff8000080078c0 [ 588.096440][ C0] x29: ffff8000080078c0 x28: ffff0000f5249800 x27: ffff0000d5d7fe08 [ 588.098648][ C0] x26: ffff0000d7ba2af0 x25: dfff800000000000 x24: 1fffe0001abaffc1 [ 588.100838][ C0] x23: ffff0000f2ad6800 x22: ffff0000d3a339d4 x21: 000000007ffffffe [ 588.103039][ C0] x20: ffff0000d3a339d4 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 588.105227][ C0] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 588.107469][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 588.109634][ C0] x11: ff0080000819149c x10: 0000000000000000 x9 : d3a60d81f6f9a400 [ 588.111795][ C0] x8 : d3a60d81f6f9a400 x7 : 0000000000000001 x6 : 0000000000000001 [ 588.113964][ C0] x5 : ffff800008007358 x4 : ffff800015154700 x3 : ffff80000852da40 [ 588.116167][ C0] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000000 [ 588.118340][ C0] Call trace: [ 588.119197][ C0] refcount_warn_saturate+0x1b4/0x1f8 [ 588.120652][ C0] tipc_crypto_xmit+0x1518/0x2014 [ 588.122014][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 588.123383][ C0] tipc_disc_timeout+0x4c8/0x608 [ 588.124720][ C0] call_timer_fn+0x1b8/0x964 [ 588.125960][ C0] __run_timers+0x460/0x6bc [ 588.127141][ C0] run_timer_softirq+0x7c/0x114 [ 588.128435][ C0] handle_softirqs+0x318/0xc6c [ 588.129727][ C0] __do_softirq+0x14/0x20 [ 588.130908][ C0] ____do_softirq+0x14/0x20 [ 588.132135][ C0] call_on_irq_stack+0x24/0x4c [ 588.133408][ C0] do_softirq_own_stack+0x20/0x2c [ 588.134817][ C0] __irq_exit_rcu+0x23c/0x43c [ 588.136018][ C0] irq_exit_rcu+0x14/0x84 [ 588.137187][ C0] el1_interrupt+0x38/0x54 [ 588.138360][ C0] el1h_64_irq_handler+0x18/0x24 [ 588.139714][ C0] el1h_64_irq+0x64/0x68 [ 588.140828][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 588.142420][ C0] __skb_try_recv_datagram+0x134/0x410 [ 588.143861][ C0] __unix_dgram_recvmsg+0x21c/0xae8 [ 588.145333][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 588.146701][ C0] ____sys_recvmsg+0x62c/0x71c [ 588.147984][ C0] do_recvmmsg+0x364/0x96c [ 588.149187][ C0] __arm64_sys_recvmmsg+0x17c/0x238 [ 588.150642][ C0] invoke_syscall+0x98/0x2bc [ 588.151895][ C0] el0_svc_common+0x138/0x258 [ 588.153231][ C0] do_el0_svc+0x58/0x13c [ 588.154379][ C0] el0_svc+0x58/0x138 [ 588.155464][ C0] el0t_64_sync_handler+0x84/0xf0 [ 588.156825][ C0] el0t_64_sync+0x18c/0x190 [ 588.158080][ C0] irq event stamp: 70989 [ 588.159214][ C0] hardirqs last enabled at (70988): [] __up_console_sem+0xb4/0x100 [ 588.161879][ C0] hardirqs last disabled at (70989): [] el1_dbg+0x24/0x80 [ 588.164273][ C0] softirqs last enabled at (69482): [] handle_softirqs+0xaf8/0xc6c [ 588.166923][ C0] softirqs last disabled at (70951): [] __do_softirq+0x14/0x20 [ 588.169391][ C0] ---[ end trace 0000000000000000 ]--- [ 588.244905][ T4605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.274915][ T9915] lo speed is unknown, defaulting to 1000 [ 588.369109][ T4605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.510787][ T4605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.653046][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 588.691129][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.697879][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.701490][ T9915] device bridge_slave_0 entered promiscuous mode [ 588.730097][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.732018][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.736503][ T9915] device bridge_slave_1 entered promiscuous mode [ 588.761364][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.783206][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.807453][ T9915] team0: Port device team_slave_0 added [ 588.828426][ T9915] team0: Port device team_slave_1 added [ 588.864645][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.866537][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.875125][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.899114][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.900997][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.908164][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.928223][ T4605] tipc: Disabling bearer [ 588.932216][ T4605] tipc: Left network mode [ 589.002250][ T9915] device hsr_slave_0 entered promiscuous mode [ 589.044746][ T9915] device hsr_slave_1 entered promiscuous mode [ 589.078006][ T9915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.080125][ T9915] Cannot create hsr debugfs directory [ 589.599572][ T4301] Bluetooth: hci4: command 0x0409 tx timeout [ 590.126571][ T9915] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 590.252028][ T9915] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 590.289579][ T9915] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 590.370629][ T9915] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 590.636349][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.643158][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 590.645738][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 590.651419][ T9915] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.656321][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 590.659184][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 590.661957][ T1647] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.664038][ T1647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.673814][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 590.732713][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 590.738598][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 590.741236][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.743269][ T4476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.761024][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 590.764051][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 590.766946][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 590.782199][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 590.785192][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 590.791931][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 590.794675][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 590.797289][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 590.804957][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 590.811454][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 590.814121][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 590.818850][ T9915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 591.416633][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 591.419029][ T6333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 591.425324][ T9915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.620817][ T4605] device hsr_slave_0 left promiscuous mode [ 591.667681][ T4605] device hsr_slave_1 left promiscuous mode [ 591.677713][ T4301] Bluetooth: hci4: command 0x041b tx timeout [ 591.757667][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.759756][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.762258][ T4605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.764696][ T4605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.767146][ T4605] device bridge_slave_1 left promiscuous mode [ 591.769047][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.818414][ T4605] device bridge_slave_0 left promiscuous mode [ 591.820199][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.958369][ T4605] device veth1_macvtap left promiscuous mode [ 591.960125][ T4605] device veth0_macvtap left promiscuous mode [ 591.961857][ T4605] device veth1_vlan left promiscuous mode [ 591.963469][ T4605] device veth0_vlan left promiscuous mode [ 592.383824][ T4605] bond10 (unregistering): Released all slaves [ 592.394604][ T4605] bond9 (unregistering): Released all slaves [ 592.403118][ T4605] bond8 (unregistering): Released all slaves [ 592.411529][ T4605] bond7 (unregistering): Released all slaves [ 592.419520][ T4605] bond6 (unregistering): Released all slaves [ 593.201778][ T4605] bond4 (unregistering): (slave bond5): Releasing backup interface [ 593.239410][ T4605] bond5 (unregistering): Released all slaves [ 593.247663][ T4605] bond4 (unregistering): Released all slaves [ 593.767372][ T4311] Bluetooth: hci4: command 0x040f tx timeout [ 593.938945][ T4605] bond1 (unregistering): (slave bond3): Releasing backup interface [ 593.980225][ T4605] bond3 (unregistering): Released all slaves [ 593.988232][ T4605] bond1 (unregistering): Released all slaves [ 594.679031][ T4605] bond2 (unregistering): Released all slaves [ 595.837496][ T4311] Bluetooth: hci4: command 0x0419 tx timeout [ 596.917979][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface