last executing test programs: 2.259701017s ago: executing program 0 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './cgroup\x00'}) 2.245033598s ago: executing program 0 (id=99): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 2.188576773s ago: executing program 0 (id=100): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000880)={'dmm32at\x00', [0x804f27, 0x2, 0x2, 0x7, 0x1, 0xcc7, 0x2, 0x9, 0x7, 0x3f7, 0x802, 0x3, 0x1, 0x719, 0x9, 0x7fff, 0x7, 0x4, 0x5, 0x395, 0x0, 0x3, 0x0, 0xfffffff5, 0xfeffcadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xc1e]}) 2.188162582s ago: executing program 0 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de05", 0x12}, {&(0x7f0000000800)="37a8a6c41ef711513a5554633f6ecf4ca35059861081eda00fc92512425af281e45325101699c301", 0x28}], 0x3) 2.109463628s ago: executing program 0 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x8, 0x401, 0x1, 0x5}) 2.09486129s ago: executing program 0 (id=106): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000440)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xff4a}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.692125732s ago: executing program 2 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f0000000200)="b700000006000000000000", 0xb}], 0x2) 1.628899978s ago: executing program 2 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@generic={0x3, 0x6, "3dd440", 0x0, 0x89, 0x0, @private1, @mcast1}}}, 0x36) 1.579515501s ago: executing program 2 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)={0x1c, 0x3f, 0x711, 0x70bd23, 0x0, {0x3}, [@nested={0x8, 0x12e, 0x0, 0x1, [@nested={0x4, 0xa}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.520574016s ago: executing program 2 (id=115): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.35003125s ago: executing program 1 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x3, 0x0, {0x17, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x2f, 0x1, @local, @local, {[@timestamp_prespec={0x44, 0x14, 0x56, 0x3, 0x9, [{@broadcast, 0x6558}, {@rand_addr=0x64010100, 0x4041}]}, @ssrr={0x89, 0xb, 0xcc, [@loopback, @broadcast]}, @generic={0x83, 0x12, "073b4c1e45bb5cc1c8081dcf1435dd97"}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x9}, {@rand_addr=0x64010100, 0x7}]}]}}}}}, 0x86) 1.278332846s ago: executing program 4 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c00018006000600800a000064380280603814"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.278112896s ago: executing program 4 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.216599171s ago: executing program 4 (id=126): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d0001000000000904000002030000000921000000012205000905810300000000000905560300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.216289451s ago: executing program 1 (id=128): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e187b, 0x40, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x1) 1.210926591s ago: executing program 1 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="06002a00dd0000002d002d800a0000"], 0x34}}, 0x0) 1.136554658s ago: executing program 1 (id=132): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$dsp(r0, &(0x7f0000000100)="97da27fa", 0x4) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.049111055s ago: executing program 2 (id=133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="ed9815e1dcada78176de151105d9589fc2cee8986306ff4dd0664ae2a844400f2c7ebdb83725525567bb874088a8decb9e38e72c13bf5750aacb2ec8e645ee81b759722aaa451b54a6b87cf26dd5ffb1"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 730.42784ms ago: executing program 4 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)={0x18, 0x3f, 0x711, 0x70bd23, 0x0, {0x3}, [@nested={0x4, 0x12e}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 672.658575ms ago: executing program 4 (id=135): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) 588.648882ms ago: executing program 3 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280500003d0007010000000000000000037c0000040000040c00018006"], 0x528}}, 0xc000) 588.428432ms ago: executing program 3 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000f1dd0fccd5de059d3679", 0x15}, {&(0x7f00000004c0)="37a8a6c41ea162b47dfee9ec4a94dfa26ff10653d57d4cf1fc1a15779a5a6ba064369b3603942fd8669dfe1b3f1d017f4c8e6e23f4e592d9701c2ab12c24190dd0d198d1d453f78549", 0x49}], 0x3) 508.916488ms ago: executing program 3 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x48, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x800, 0x3, 0x4, 0x0, {0xffff, 0xc, 0x0, 0x9, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x400, 0x2, 0xff}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 491.195769ms ago: executing program 3 (id=142): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) 387.731618ms ago: executing program 3 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000017c0)={0x30, r1, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}}, 0x0) 387.325188ms ago: executing program 3 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070011000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 338.820402ms ago: executing program 1 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000000c0)={0x28, r1, 0x205, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c4}, 0x4048844) 16.215648ms ago: executing program 1 (id=146): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 764.56µs ago: executing program 2 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 0s ago: executing program 4 (id=148): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x4, 0x0, 0x3ff}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xfffffffd, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x95, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x3], [0x2, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x2, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0xffffff01, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 30.054900][ T4033] cgroup: Unknown subsys name 'net' [ 30.319424][ T4033] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.593288][ T4033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.214257][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 32.242815][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 32.267626][ T4056] chnl_net:caif_netlink_parms(): no params data found [ 32.275369][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.277177][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.278741][ T4048] device bridge_slave_0 entered promiscuous mode [ 32.289369][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 32.292869][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.294111][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.295627][ T4048] device bridge_slave_1 entered promiscuous mode [ 32.318772][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.324377][ T4050] chnl_net:caif_netlink_parms(): no params data found [ 32.326411][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.327850][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.329300][ T4043] device bridge_slave_0 entered promiscuous mode [ 32.331661][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.340128][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.341352][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.342851][ T4043] device bridge_slave_1 entered promiscuous mode [ 32.362491][ T4048] team0: Port device team_slave_0 added [ 32.363630][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.364877][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.366432][ T4056] device bridge_slave_0 entered promiscuous mode [ 32.372507][ T4056] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.373623][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.375137][ T4056] device bridge_slave_1 entered promiscuous mode [ 32.385181][ T4048] team0: Port device team_slave_1 added [ 32.386323][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.387708][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.389273][ T4044] device bridge_slave_0 entered promiscuous mode [ 32.392209][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.393388][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.394847][ T4044] device bridge_slave_1 entered promiscuous mode [ 32.397093][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.413120][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.418845][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.434179][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.435343][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.439644][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.442603][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.445436][ T4056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.450692][ T4043] team0: Port device team_slave_0 added [ 32.451934][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.452962][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.457672][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.463545][ T4056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.465066][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.466201][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.467843][ T4050] device bridge_slave_0 entered promiscuous mode [ 32.470079][ T4043] team0: Port device team_slave_1 added [ 32.476327][ T4044] team0: Port device team_slave_0 added [ 32.478331][ T4044] team0: Port device team_slave_1 added [ 32.484569][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.485781][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.487473][ T4050] device bridge_slave_1 entered promiscuous mode [ 32.494671][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.495808][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.500650][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.515425][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.516477][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.521015][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.525704][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.529596][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.533773][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.536956][ T4056] team0: Port device team_slave_0 added [ 32.538168][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.539290][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.543408][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.597846][ T4048] device hsr_slave_0 entered promiscuous mode [ 32.636811][ T4048] device hsr_slave_1 entered promiscuous mode [ 32.678453][ T4056] team0: Port device team_slave_1 added [ 32.684755][ T4050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.699569][ T4050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.701299][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.702467][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.709683][ T4056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.757647][ T4044] device hsr_slave_0 entered promiscuous mode [ 32.796729][ T4044] device hsr_slave_1 entered promiscuous mode [ 32.836594][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.837921][ T4044] Cannot create hsr debugfs directory [ 32.850920][ T4056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.852073][ T4056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.856226][ T4056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.897644][ T4043] device hsr_slave_0 entered promiscuous mode [ 32.966721][ T4043] device hsr_slave_1 entered promiscuous mode [ 33.016672][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.017826][ T4043] Cannot create hsr debugfs directory [ 33.031612][ T4050] team0: Port device team_slave_0 added [ 33.033705][ T4050] team0: Port device team_slave_1 added [ 33.057485][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.058638][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.062800][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.072863][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.073947][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.081276][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.117931][ T4056] device hsr_slave_0 entered promiscuous mode [ 33.156779][ T4056] device hsr_slave_1 entered promiscuous mode [ 33.196697][ T4056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.197880][ T4056] Cannot create hsr debugfs directory [ 33.300536][ T4050] device hsr_slave_0 entered promiscuous mode [ 33.336766][ T4050] device hsr_slave_1 entered promiscuous mode [ 33.386678][ T4050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.387915][ T4050] Cannot create hsr debugfs directory [ 33.444698][ T4044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.480182][ T4044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.522216][ T4044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.557618][ T4044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.636359][ T4048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.660506][ T4048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.729692][ T4048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.770417][ T4048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.838112][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.840679][ T4056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.883370][ T4056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.921159][ T4056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.960856][ T4056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.015652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.017683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.022290][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.025462][ T4050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.060489][ T4050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.087021][ T4102] Bluetooth: hci3: command 0x0409 tx timeout [ 34.087022][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 34.087168][ T4102] Bluetooth: hci1: command 0x0409 tx timeout [ 34.088044][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 34.088973][ T4102] Bluetooth: hci2: command 0x0409 tx timeout [ 34.104474][ T4050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.150458][ T4050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.190199][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.191830][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.193403][ T1609] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.194530][ T1609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.196119][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.197960][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.199535][ T1609] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.200616][ T1609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.202193][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.217394][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.219069][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.225550][ T4043] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.248971][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.250725][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.252432][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.255743][ T4043] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.297699][ T4043] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.340679][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.342368][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.344010][ T4043] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.382072][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.390242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.391874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.393600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.395165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.396763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.398188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.399999][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.408360][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.433426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.435013][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.436476][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.437627][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.443440][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.445104][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.446881][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.447929][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.449228][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.450870][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.452685][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.456446][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.458805][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.460895][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.469226][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.470899][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.474495][ T4056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.491428][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.493081][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.498541][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.500067][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.503728][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.511551][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.512912][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.514314][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.515585][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.519790][ T4056] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.522554][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.529744][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.531267][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.532836][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.534359][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.535476][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.537365][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.545842][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.547531][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.548917][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.550072][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.552857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.554310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.559040][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.561749][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.563992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.576325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.578125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.579476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.580949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.582409][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.583591][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.584937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.587909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.589690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.592409][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.593901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.602343][ T4044] device veth0_vlan entered promiscuous mode [ 34.605675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.610163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.611881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.617193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.618615][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.619734][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.621163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.622622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.626504][ T4044] device veth1_vlan entered promiscuous mode [ 34.635933][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.637617][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.639268][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.640733][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.642197][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.643365][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.644708][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.646393][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.648437][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.649957][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.651505][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.659867][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.661412][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.662950][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.664443][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.665885][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.667059][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.672221][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.674086][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.675683][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.677195][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.678759][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.684046][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.685563][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.691098][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.692657][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.702660][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.704183][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.705725][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.708529][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.709815][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.711459][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.713132][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.714743][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.718620][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.724204][ T4056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.732359][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.733898][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.735326][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.737690][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.739250][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.740713][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.743329][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.744935][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.749380][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.750933][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.754482][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.756148][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.759132][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.760875][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.762613][ T4044] device veth0_macvtap entered promiscuous mode [ 34.764313][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.769219][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.780822][ T4044] device veth1_macvtap entered promiscuous mode [ 34.802045][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.803661][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.805137][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.807634][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.809777][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.811545][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.815994][ T4048] device veth0_vlan entered promiscuous mode [ 34.820772][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.823012][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.824689][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.833423][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.836087][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.837785][ T270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.846144][ T4056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.850033][ T4048] device veth1_vlan entered promiscuous mode [ 34.851834][ T4044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.853314][ T4044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.854666][ T4044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.855987][ T4044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.859678][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.861138][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.862382][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.872987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.874466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.875708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.885316][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.905219][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.907371][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.908898][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.910395][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.911940][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.913146][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.918358][ T4048] device veth0_macvtap entered promiscuous mode [ 34.922159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.923668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.925174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.935981][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.938384][ T4048] device veth1_macvtap entered promiscuous mode [ 34.963123][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.964674][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.966223][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.968572][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.970806][ T4145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.973025][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.974544][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.980425][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.983391][ T4043] device veth0_vlan entered promiscuous mode [ 34.988713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.990357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.991985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.993570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.000213][ T4056] device veth0_vlan entered promiscuous mode [ 35.004559][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.006235][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.010174][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.011991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.013511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.014858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.016382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.023293][ T4043] device veth1_vlan entered promiscuous mode [ 35.032096][ T1609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.033439][ T1609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.034080][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.035097][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.036274][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.038907][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.040774][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.042594][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.044339][ T4056] device veth1_vlan entered promiscuous mode [ 35.049074][ T4048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.050496][ T4048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.051846][ T4048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.053270][ T4048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.055356][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.076986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.078567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.080242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.081777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.083344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.093477][ T4043] device veth0_macvtap entered promiscuous mode [ 35.096127][ T4043] device veth1_macvtap entered promiscuous mode [ 35.105270][ T4050] device veth0_vlan entered promiscuous mode [ 35.111624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.113924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.115833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.119362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.121025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.129971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.131537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.132958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.149537][ T4056] device veth0_macvtap entered promiscuous mode [ 35.160819][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.161112][ T4157] udc-core: couldn't find an available UDC or it's busy [ 35.162466][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.163638][ T4157] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 35.165204][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.170685][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.172891][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.174992][ T4050] device veth1_vlan entered promiscuous mode [ 35.180865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.182408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.183871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.185323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.187647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.190382][ T4056] device veth1_macvtap entered promiscuous mode [ 35.192488][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.193757][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.197430][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.199002][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.204440][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.206422][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.209527][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.211181][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.213288][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.222321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.223845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.229751][ T4043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.231099][ T4043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.232504][ T4043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.233918][ T4043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.239837][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.241470][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.243174][ T1609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.244417][ T1609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.249845][ T4050] device veth0_macvtap entered promiscuous mode [ 35.251414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.252946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.256303][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.258476][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.259954][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.261846][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.263425][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.265111][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.268285][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.272530][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.274298][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.278892][ T4050] device veth1_macvtap entered promiscuous mode [ 35.284014][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.285712][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.288168][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.289875][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.291369][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.293060][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.294654][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.296236][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.299266][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.304282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.305783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.307819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.314256][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.321915][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.323620][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.325209][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.329925][ T4056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.331611][ T4056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.334305][ T4056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.338108][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.339724][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.346018][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.350878][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.352460][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.354072][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.355875][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.358669][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.360235][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.361963][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.364081][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.365358][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.368347][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.372607][ T4056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.373976][ T4056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.375306][ T4056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.378007][ T4056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.383564][ T4050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.385207][ T4050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.387683][ T4050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.389183][ T4050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.417248][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.418461][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.425382][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.437676][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.439032][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.444234][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.445516][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.449591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.451133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.474454][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.475848][ T1609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.477981][ T1609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.479660][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.481058][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.483489][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.516069][ T1609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.518467][ T1609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.521974][ T1609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.535236][ T4161] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 35.540073][ T4161] device syzkaller1 entered promiscuous mode [ 35.544583][ T4163] binder: 4162:4163 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.552171][ T4163] binder: 4163 RLIMIT_NICE not set [ 35.596960][ T4168] binder: tried to use weak ref as strong ref [ 35.598106][ T4168] binder: 4162:4168 Acquire 1 refcount change on invalid ref 0 ret -22 [ 35.601406][ T4168] binder: 4162:4168 got transaction to invalid handle, 1 [ 35.602677][ T4168] binder: 4162:4168 transaction failed 29201/-22, size 72-24 line 2917 [ 35.604596][ T4168] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.167841][ T4091] Bluetooth: hci2: command 0x041b tx timeout [ 36.169194][ T4091] Bluetooth: hci0: command 0x041b tx timeout [ 36.170385][ T4091] Bluetooth: hci1: command 0x041b tx timeout [ 36.171404][ T4091] Bluetooth: hci4: command 0x041b tx timeout [ 36.172434][ T4091] Bluetooth: hci3: command 0x041b tx timeout [ 36.429606][ T4179] device syzkaller1 entered promiscuous mode [ 36.936677][ T1541] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.296638][ T1541] usb 1-1: config 11 has an invalid interface number: 130 but max is 0 [ 37.298071][ T1541] usb 1-1: config 11 has no interface number 0 [ 37.299134][ T1541] usb 1-1: config 11 interface 130 has no altsetting 0 [ 37.456622][ T1541] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a0.98 [ 37.458077][ T1541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.459429][ T1541] usb 1-1: Product: syz [ 37.460115][ T1541] usb 1-1: Manufacturer: syz [ 37.460807][ T1541] usb 1-1: SerialNumber: syz [ 37.516275][ T4194] udc-core: couldn't find an available UDC or it's busy [ 37.517654][ T4194] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.702635][ T4196] udc-core: couldn't find an available UDC or it's busy [ 37.703800][ T4196] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.778004][ T1541] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 37.781329][ T1541] usb 1-1: USB disconnect, device number 2 [ 38.244080][ T4200] binder: 4198:4200 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.246145][ T4200] binder: 4200 RLIMIT_NICE not set [ 38.248822][ T4091] Bluetooth: hci3: command 0x040f tx timeout [ 38.249931][ T4091] Bluetooth: hci4: command 0x040f tx timeout [ 38.250911][ T4091] Bluetooth: hci1: command 0x040f tx timeout [ 38.251975][ T4091] Bluetooth: hci0: command 0x040f tx timeout [ 38.253015][ T4091] Bluetooth: hci2: command 0x040f tx timeout [ 38.253268][ T4203] udc-core: couldn't find an available UDC or it's busy [ 38.255080][ T4203] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 38.295050][ T4204] binder: tried to use weak ref as strong ref [ 38.296019][ T4204] binder: 4198:4204 Acquire 1 refcount change on invalid ref 0 ret -22 [ 38.297992][ T4204] binder: 4198:4204 got transaction to invalid handle, 1 [ 38.299052][ T4204] binder: 4198:4204 transaction failed 29201/-22, size 72-24 line 2917 [ 38.301041][ T4204] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.207793][ T4211] udc-core: couldn't find an available UDC or it's busy [ 39.209129][ T4211] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.644064][ T4215] netlink: 180 bytes leftover after parsing attributes in process `syz.3.28'. [ 39.657551][ T4217] udc-core: couldn't find an available UDC or it's busy [ 39.658723][ T4217] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.734235][ T4221] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.31'. [ 39.735783][ T4221] netlink: get zone limit has 8 unknown bytes [ 39.753970][ T4225] udc-core: couldn't find an available UDC or it's busy [ 39.759372][ T4225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.953539][ T4232] binder: 4230:4232 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.955641][ T4232] binder: 4232 RLIMIT_NICE not set [ 39.966778][ T4236] udc-core: couldn't find an available UDC or it's busy [ 39.968143][ T4236] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.004065][ T4237] binder: tried to use weak ref as strong ref [ 40.005086][ T4237] binder: 4230:4237 Acquire 1 refcount change on invalid ref 0 ret -22 [ 40.007543][ T4237] binder: 4230:4237 got transaction to invalid handle, 1 [ 40.008706][ T4237] binder: 4230:4237 transaction failed 29201/-22, size 72-24 line 2917 [ 40.012230][ T4237] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.302110][ T4247] misc userio: Can't change port type on an already running userio instance [ 40.327233][ T4090] Bluetooth: hci2: command 0x0419 tx timeout [ 40.328692][ T4090] Bluetooth: hci0: command 0x0419 tx timeout [ 40.329731][ T4090] Bluetooth: hci1: command 0x0419 tx timeout [ 40.330743][ T4090] Bluetooth: hci4: command 0x0419 tx timeout [ 40.331749][ T4090] Bluetooth: hci3: command 0x0419 tx timeout [ 40.365961][ T4254] udc-core: couldn't find an available UDC or it's busy [ 40.367310][ T4254] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.398935][ T4257] udc-core: couldn't find an available UDC or it's busy [ 40.400150][ T4257] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.484465][ T4051] Bluetooth: Wrong link type (-57) [ 40.495947][ T4261] udc-core: couldn't find an available UDC or it's busy [ 40.498214][ T4261] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.889298][ T26] audit: type=1326 audit(40.870:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4264 comm="syz.3.51" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9b350a8 code=0x0 [ 41.161649][ T4277] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 41.366876][ T7] atkbd serio0: keyboard reset failed on [ 41.404620][ T4288] udc-core: couldn't find an available UDC or it's busy [ 41.405765][ T4288] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 41.411615][ T4288] netlink: 'syz.2.57': attribute type 2 has an invalid length. [ 41.412971][ T4288] netlink: 244 bytes leftover after parsing attributes in process `syz.2.57'. [ 41.775645][ T4302] binder: 4301:4302 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 41.781567][ T4302] binder: 4302 RLIMIT_NICE not set [ 41.812368][ T4308] device syzkaller1 entered promiscuous mode [ 41.815517][ T4307] binder: 4305:4307 unknown command 0 [ 41.816338][ T4307] binder: 4305:4307 ioctl c0306201 20000080 returned -22 [ 41.822259][ T4307] binder: 4305:4307 tried to acquire reference to desc 0, got 1 instead [ 41.824206][ T4307] binder: 4305:4307 got transaction with invalid parent offset [ 41.825512][ T4307] binder: 4305:4307 transaction failed 29201/-22, size 104-24 line 3381 [ 41.827874][ T4102] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.829386][ T4309] binder: 4301:4309 tried to acquire reference to desc 0, got 1 instead [ 41.834994][ T4302] binder: 4302 RLIMIT_NICE not set [ 41.835382][ T4309] binder: release 4301:4309 transaction 19 out, still active [ 41.837893][ T4309] binder: undelivered TRANSACTION_COMPLETE [ 41.861890][ T4102] binder: release 4301:4302 transaction 26 in, still active [ 41.863170][ T4102] binder: send failed reply for transaction 26 to 4301:4309 [ 41.864509][ T4102] binder: undelivered TRANSACTION_COMPLETE [ 41.865434][ T4102] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.866471][ T4102] binder: send failed reply for transaction 19, target dead [ 41.882231][ T4315] netlink: 129704 bytes leftover after parsing attributes in process `syz.4.66'. [ 41.901831][ T4318] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.68'. [ 41.909675][ T4318] netlink: set zone limit has 8 unknown bytes [ 41.931662][ T4325] udc-core: couldn't find an available UDC or it's busy [ 41.932892][ T4325] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 41.965485][ T4330] udc-core: couldn't find an available UDC or it's busy [ 41.971360][ T4330] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 41.982040][ T4045] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 42.021576][ T4337] Zero length message leads to an empty skb [ 42.034878][ T4339] binder: 4338:4339 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.038562][ T4339] binder: 4339 RLIMIT_NICE not set [ 42.059850][ T4341] udc-core: couldn't find an available UDC or it's busy [ 42.061093][ T4341] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 42.087888][ T4342] binder: 4338:4342 tried to acquire reference to desc 0, got 1 instead [ 42.090149][ T4339] binder: 4339 RLIMIT_NICE not set [ 42.090237][ T4342] binder: release 4338:4342 transaction 31 out, still active [ 42.092168][ T4342] binder: undelivered TRANSACTION_COMPLETE [ 42.098626][ T7] binder: release 4338:4339 transaction 38 in, still active [ 42.099814][ T7] binder: send failed reply for transaction 38 to 4338:4342 [ 42.101101][ T7] binder: undelivered TRANSACTION_COMPLETE [ 42.102110][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.104499][ T7] binder: send failed reply for transaction 31, target dead [ 42.128195][ T4346] device syzkaller1 entered promiscuous mode [ 42.229509][ T4348] udc-core: couldn't find an available UDC or it's busy [ 42.230639][ T4348] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 42.407184][ T1970] Bluetooth: hci4: command 0x0411 tx timeout [ 42.453226][ T4352] udc-core: couldn't find an available UDC or it's busy [ 42.454343][ T4352] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 42.580270][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 42.592077][ T4358] binder: 4357:4358 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.594202][ T4358] binder: 4358 RLIMIT_NICE not set [ 42.643695][ T4359] binder: 4357:4359 tried to acquire reference to desc 0, got 1 instead [ 42.645886][ T4358] binder: 4358 RLIMIT_NICE not set [ 42.645910][ T4359] binder: release 4357:4359 transaction 43 out, still active [ 42.650916][ T4359] binder: undelivered TRANSACTION_COMPLETE [ 42.656393][ T1542] binder: release 4357:4358 transaction 50 in, still active [ 42.657697][ T1542] binder: send failed reply for transaction 50 to 4357:4359 [ 42.659091][ T1542] binder: undelivered TRANSACTION_COMPLETE [ 42.660201][ T1542] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.666919][ T1542] binder: send failed reply for transaction 43, target dead [ 42.714193][ T4367] udc-core: couldn't find an available UDC or it's busy [ 42.715383][ T4367] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 42.742817][ T4369] binder: 4368:4369 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.744949][ T4369] binder: 4369 RLIMIT_NICE not set [ 42.763676][ T4373] udc-core: couldn't find an available UDC or it's busy [ 42.764981][ T4373] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 42.795179][ T4374] binder: 4368:4374 tried to acquire reference to desc 0, got 1 instead [ 42.798117][ T4369] binder: 4369 RLIMIT_NICE not set [ 42.798201][ T4374] binder: release 4368:4374 transaction 55 out, still active [ 42.800175][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 42.805699][ T4102] binder: release 4368:4369 transaction 62 in, still active [ 42.807105][ T4102] binder: send failed reply for transaction 62 to 4368:4374 [ 42.814709][ T4376] udc-core: couldn't find an available UDC or it's busy [ 42.815833][ T4376] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 42.816913][ T4102] binder: undelivered TRANSACTION_COMPLETE [ 42.817228][ T7] Bluetooth: hci5: command 0xfc11 tx timeout [ 42.818208][ T4102] binder: undelivered TRANSACTION_ERROR: 29189 [ 42.819039][ T4051] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 42.820860][ T4102] binder: send failed reply for transaction 55, target dead [ 42.841869][ T4378] capability: warning: `syz.0.94' uses deprecated v2 capabilities in a way that may be insecure [ 43.003095][ T4398] binder: 4397:4398 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.005241][ T4398] binder: 4398 RLIMIT_NICE not set [ 43.055402][ T4399] binder: 4397:4399 tried to acquire reference to desc 0, got 1 instead [ 43.057563][ T4399] binder: 4397:4399 BC_FREE_BUFFER u0000000020ffe000 no match [ 43.058933][ T4399] binder: release 4397:4399 transaction 67 out, still active [ 43.060207][ T4399] binder: undelivered TRANSACTION_COMPLETE [ 43.080232][ T4401] tmpfs: Unknown parameter 'usrquota' [ 43.231143][ T4405] udc-core: couldn't find an available UDC or it's busy [ 43.232351][ T4405] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.282415][ T4407] udc-core: couldn't find an available UDC or it's busy [ 43.284811][ T4407] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.366985][ T1970] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 43.622446][ T4421] udc-core: couldn't find an available UDC or it's busy [ 43.623573][ T4421] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.803063][ T4429] device syzkaller1 entered promiscuous mode [ 43.814512][ T4431] binder: 4430:4431 tried to acquire reference to desc 0, got 1 instead [ 43.818274][ T4431] binder_alloc: 4430: pid 4430 spamming oneway? 2 buffers allocated for a total size of 5120 [ 43.820241][ T4431] binder_alloc: 4430: pid 4430 spamming oneway? 3 buffers allocated for a total size of 5128 [ 43.822283][ T4090] binder: undelivered TRANSACTION_COMPLETE [ 43.828091][ T4102] binder: undelivered transaction 79, process died. [ 43.829224][ T4102] binder: undelivered transaction 80, process died. [ 43.830219][ T4102] binder: undelivered transaction 78, process died. [ 43.839555][ T4091] binder: send failed reply for transaction 67, target dead [ 43.864006][ T4433] device syzkaller1 entered promiscuous mode [ 43.906824][ T1970] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 43.908286][ T1970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.909487][ T1970] usb 1-1: Product: syz [ 43.910171][ T1970] usb 1-1: Manufacturer: syz [ 43.910954][ T1970] usb 1-1: SerialNumber: syz [ 43.915871][ T1970] usb 1-1: config 0 descriptor?? [ 43.941932][ T4447] udc-core: couldn't find an available UDC or it's busy [ 43.943059][ T4447] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.984996][ T4454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.130'. [ 43.989624][ T4456] udc-core: couldn't find an available UDC or it's busy [ 43.990924][ T4456] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.143005][ T4462] binder: 4461:4462 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.145043][ T4462] binder: 4462 RLIMIT_NICE not set [ 44.176740][ T1970] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 44.194716][ T4464] binder: 4461:4464 tried to acquire reference to desc 0, got 1 instead [ 44.197148][ T4464] binder: 4461:4464 BC_FREE_BUFFER u0000000020ffe000 no match [ 44.198638][ T4464] binder: release 4461:4464 transaction 85 out, still active [ 44.471389][ T4468] udc-core: couldn't find an available UDC or it's busy [ 44.472541][ T4468] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.557003][ T4476] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.139'. [ 44.558565][ T4476] netlink: get zone limit has 8 unknown bytes [ 45.169480][ T4090] binder: send failed reply for transaction 85, target dead [ 45.200891][ T4496] input: syz0 as /devices/virtual/input/input3 [ 45.235329][ T1542] [ 45.235719][ T1542] ====================================================== [ 45.236903][ T1542] WARNING: possible circular locking dependency detected [ 45.238150][ T1542] 5.15.189-syzkaller #0 Not tainted [ 45.238978][ T1542] ------------------------------------------------------ [ 45.240072][ T1542] kworker/1:3/1542 is trying to acquire lock: [ 45.241088][ T1542] ffff0000c0d2cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 45.242977][ T1542] [ 45.242977][ T1542] but task is already holding lock: [ 45.244202][ T1542] ffff80001651bc28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 45.245656][ T1542] [ 45.245656][ T1542] which lock already depends on the new lock. [ 45.245656][ T1542] [ 45.247284][ T1542] [ 45.247284][ T1542] the existing dependency chain (in reverse order) is: [ 45.248653][ T1542] [ 45.248653][ T1542] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 45.249932][ T1542] __mutex_lock_common+0x194/0x1edc [ 45.250827][ T1542] mutex_lock_nested+0xac/0x11c [ 45.251650][ T1542] rfkill_register+0x44/0x77c [ 45.252452][ T1542] hci_register_dev+0x3d8/0x854 [ 45.253335][ T1542] vhci_create_device+0x2bc/0x564 [ 45.254236][ T1542] vhci_write+0x30c/0x3ac [ 45.254930][ T1542] vfs_write+0x7c8/0xa2c [ 45.255705][ T1542] ksys_write+0x120/0x210 [ 45.256494][ T1542] __arm64_sys_write+0x7c/0x90 [ 45.257366][ T1542] invoke_syscall+0x98/0x2b8 [ 45.258171][ T1542] el0_svc_common+0x138/0x258 [ 45.259065][ T1542] do_el0_svc+0x58/0x14c [ 45.259875][ T1542] el0_svc+0x78/0x1e0 [ 45.260636][ T1542] el0t_64_sync_handler+0xcc/0xe4 [ 45.261574][ T1542] el0t_64_sync+0x1a0/0x1a4 [ 45.262432][ T1542] [ 45.262432][ T1542] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 45.263682][ T1542] __mutex_lock_common+0x194/0x1edc [ 45.264566][ T1542] mutex_lock_nested+0xac/0x11c [ 45.265398][ T1542] vhci_send_frame+0x88/0x118 [ 45.266204][ T1542] hci_send_frame+0x194/0x2f0 [ 45.267028][ T1542] hci_tx_work+0x7e4/0x1394 [ 45.267822][ T1542] process_one_work+0x79c/0x1140 [ 45.268702][ T1542] worker_thread+0x8f4/0x101c [ 45.269567][ T1542] kthread+0x374/0x454 [ 45.270320][ T1542] ret_from_fork+0x10/0x20 [ 45.271191][ T1542] [ 45.271191][ T1542] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 45.272648][ T1542] __flush_work+0xf4/0x1bc [ 45.273478][ T1542] flush_work+0x24/0x38 [ 45.274233][ T1542] hci_dev_do_open+0x980/0x1000 [ 45.275083][ T1542] hci_power_on+0x13c/0x650 [ 45.275879][ T1542] process_one_work+0x79c/0x1140 [ 45.276804][ T1542] worker_thread+0x8f4/0x101c [ 45.277711][ T1542] kthread+0x374/0x454 [ 45.278464][ T1542] ret_from_fork+0x10/0x20 [ 45.279271][ T1542] [ 45.279271][ T1542] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 45.280514][ T1542] __mutex_lock_common+0x194/0x1edc [ 45.281422][ T1542] mutex_lock_nested+0xac/0x11c [ 45.282339][ T1542] bg_scan_update+0x48/0x3d0 [ 45.283202][ T1542] process_one_work+0x79c/0x1140 [ 45.284119][ T1542] worker_thread+0x8f4/0x101c [ 45.284959][ T1542] kthread+0x374/0x454 [ 45.285717][ T1542] ret_from_fork+0x10/0x20 [ 45.286500][ T1542] [ 45.286500][ T1542] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 45.288153][ T1542] __lock_acquire+0x2928/0x651c [ 45.289057][ T1542] lock_acquire+0x1f4/0x620 [ 45.289944][ T1542] __flush_work+0xf4/0x1bc [ 45.290803][ T1542] __cancel_work_timer+0x2ec/0x448 [ 45.291772][ T1542] cancel_work_sync+0x24/0x38 [ 45.292595][ T1542] hci_request_cancel_all+0xbc/0x2d0 [ 45.293507][ T1542] hci_dev_do_close+0x54/0x105c [ 45.294380][ T1542] hci_rfkill_set_block+0xdc/0x1d0 [ 45.295280][ T1542] rfkill_set_block+0x18c/0x374 [ 45.296099][ T1542] rfkill_epo+0x8c/0x158 [ 45.296885][ T1542] rfkill_op_handler+0x150/0x248 [ 45.297796][ T1542] process_one_work+0x79c/0x1140 [ 45.298718][ T1542] worker_thread+0x8f4/0x101c [ 45.299588][ T1542] kthread+0x374/0x454 [ 45.300358][ T1542] ret_from_fork+0x10/0x20 [ 45.301132][ T1542] [ 45.301132][ T1542] other info that might help us debug this: [ 45.301132][ T1542] [ 45.302813][ T1542] Chain exists of: [ 45.302813][ T1542] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 45.302813][ T1542] [ 45.305306][ T1542] Possible unsafe locking scenario: [ 45.305306][ T1542] [ 45.306534][ T1542] CPU0 CPU1 [ 45.307415][ T1542] ---- ---- [ 45.308325][ T1542] lock(rfkill_global_mutex); [ 45.309137][ T1542] lock(&data->open_mutex); [ 45.310338][ T1542] lock(rfkill_global_mutex); [ 45.311566][ T1542] lock((work_completion)(&hdev->bg_scan_update)); [ 45.312641][ T1542] [ 45.312641][ T1542] *** DEADLOCK *** [ 45.312641][ T1542] [ 45.313935][ T1542] 3 locks held by kworker/1:3/1542: [ 45.314806][ T1542] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 [ 45.316515][ T1542] #1: ffff8000236d7c00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 [ 45.318264][ T1542] #2: ffff80001651bc28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x58/0x158 [ 45.319799][ T1542] [ 45.319799][ T1542] stack backtrace: [ 45.320709][ T1542] CPU: 1 PID: 1542 Comm: kworker/1:3 Not tainted 5.15.189-syzkaller #0 [ 45.322067][ T1542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 45.323729][ T1542] Workqueue: events rfkill_op_handler [ 45.324628][ T1542] Call trace: [ 45.325120][ T1542] dump_backtrace+0x0/0x43c [ 45.325819][ T1542] show_stack+0x2c/0x3c [ 45.326504][ T1542] __dump_stack+0x30/0x40 [ 45.327235][ T1542] dump_stack_lvl+0xf8/0x160 [ 45.328046][ T1542] dump_stack+0x1c/0x5c [ 45.328766][ T1542] print_circular_bug+0x148/0x1b0 [ 45.329614][ T1542] check_noncircular+0x240/0x2d4 [ 45.330420][ T1542] __lock_acquire+0x2928/0x651c [ 45.331253][ T1542] lock_acquire+0x1f4/0x620 [ 45.332009][ T1542] __flush_work+0xf4/0x1bc [ 45.332761][ T1542] __cancel_work_timer+0x2ec/0x448 [ 45.333657][ T1542] cancel_work_sync+0x24/0x38 [ 45.334423][ T1542] hci_request_cancel_all+0xbc/0x2d0 [ 45.335324][ T1542] hci_dev_do_close+0x54/0x105c [ 45.336130][ T1542] hci_rfkill_set_block+0xdc/0x1d0 [ 45.336987][ T1542] rfkill_set_block+0x18c/0x374 [ 45.337777][ T1542] rfkill_epo+0x8c/0x158 [ 45.338473][ T1542] rfkill_op_handler+0x150/0x248 [ 45.339273][ T1542] process_one_work+0x79c/0x1140 [ 45.340032][ T1542] worker_thread+0x8f4/0x101c [ 45.340738][ T1542] kthread+0x374/0x454 [ 45.341385][ T1542] ret_from_fork+0x10/0x20 [ 46.306631][ T1970] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 46.309590][ T1970] usb 1-1: USB disconnect, device number 3