last executing test programs: 10.420025088s ago: executing program 1 (id=645): r0 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0xf000, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 10.419747328s ago: executing program 1 (id=646): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) 9.39999702s ago: executing program 1 (id=651): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000028501, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) 8.379826353s ago: executing program 1 (id=661): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140), 0x4240a2ca) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 7.30599269s ago: executing program 1 (id=668): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r7, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 6.282277932s ago: executing program 1 (id=676): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x1) 2.645552106s ago: executing program 3 (id=715): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000640)={0x40, 0xb, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.127480328s ago: executing program 3 (id=727): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5577c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.018415177s ago: executing program 4 (id=728): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001540)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f100000"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000004000003000000000000000001000000"], 0x14}}, 0x0) r6 = userfaultfd(0x801) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000280)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000180)=""/73, 0x49, 0xac8c) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="000000789dcd2e7a0c54883d6071", 0x0, 0x4bc7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) fallocate(r0, 0x2, 0x8, 0x6) 1.963874141s ago: executing program 2 (id=729): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000340), 0x10) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r1, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.338856252s ago: executing program 0 (id=734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006900)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x2004c814) 1.279852207s ago: executing program 0 (id=735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.262498858s ago: executing program 3 (id=736): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)) 1.247071599s ago: executing program 3 (id=737): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000001080)=0x2) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1) r7 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3ed8, 0x2, 0x1, 0x20f}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000000)={r7}, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="00000000000000006200f4ff0000000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xd}, 0x94) 1.202638083s ago: executing program 0 (id=738): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="580100001000130702000000000000000000000022d43cb3b5d9a54b7bc51d33effab75eab9eaa96095e18020000000027320b2b0200000000aa000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e0000001000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000002"], 0x158}}, 0x0) 1.143931618s ago: executing program 0 (id=739): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140), 0x4240a2ca) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 1.141582637s ago: executing program 4 (id=740): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7c9, 0x10, &(0x7f0000000400)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) truncate(&(0x7f0000000000)='./file7\x00', 0xd) 1.133005168s ago: executing program 2 (id=741): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x70, r7, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 926.966095ms ago: executing program 4 (id=742): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0x2, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x42, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1001]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000024c0)="fed9fcf36e"}) 668.023135ms ago: executing program 4 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 667.739715ms ago: executing program 4 (id=744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff0f000000000000000000000000000a000000000000d427a70d2f967c55b4b517db0ff4c2f459b9b18863529500d3a07d74e1a1b4afa82c901fd5423f04b778b6fb2872b73381357499e000a186f85fb241b086c901543ed8af8211bd88a200000000000000"], 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000e40)='ramfs\x00', 0x1) mount(&(0x7f0000000180)=@filename='./bus\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='exfat\x00', 0x2080, &(0x7f0000000100)='dII\xf4\x91\xf4\xe5s\xc2\xcc\x0e6iUcard') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r9, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(0xee01) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)) 285.398647ms ago: executing program 2 (id=745): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000001080)=0x2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3ed8, 0x2, 0x1, 0x20f}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r6, 0x1e, &(0x7f0000000000)={r6}, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd6, &(0x7f0000000780)=""/214, 0x41000, 0x20, '\x00', 0x0, 0x2, r7, 0x8, &(0x7f00000001c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x6, 0x1, 0x6}, 0x10, 0x1f5e7, 0xffffffffffffffff, 0x3, &(0x7f0000000040)=[0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x2, 0x2, 0xc}, {0x2, 0x3, 0x8, 0x4}, {0x4, 0x2, 0x4, 0xa}], 0x10, 0xc4e7}, 0x94) 277.553147ms ago: executing program 4 (id=746): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5577c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 234.866431ms ago: executing program 3 (id=747): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 234.543831ms ago: executing program 2 (id=748): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 143.933928ms ago: executing program 2 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 143.681978ms ago: executing program 3 (id=750): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x2133, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0xf88}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x2, 0x5f}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x79, &(0x7f0000000200)=@string={0x79, 0x3, "1c4e634b3333bfa55fdb2e9641b111910d89d006fada288405425bd2e1e3bbdecbc34eb766cdab79c1df4328a7a0698e6febe34ac4d4eb317d338f01285b050eb1771fb87c38d4f394d2d9a0c53922f23d1f60efbd861204e67fb69218f782fdc299d994f12954d05fa1ddef2041de33c0d4ca9328c4eb"}}, {0x6e, &(0x7f0000000500)=@string={0x6e, 0x3, "7701565f4959ba29ca57888fe9b4af943d53c1852f3dc47565bedafb9042262a7efcb502cb54e770b652c80fac6dcb0e3ee3621e6b80fe7b7a4c0e1656f1ac955932df008c972485852b11ee7eb6f681321712446a8f034c60b2efdf415fb2a07d1442b418ec710168626f02"}}]}) 115.690691ms ago: executing program 0 (id=751): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r1, 0x0, 0x0, 0x80800) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 96.480032ms ago: executing program 2 (id=752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x1) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r3) 0s ago: executing program 0 (id=753): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000008000000000010000000c0002000000000000000000400007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYRES32=r1], 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000c40)=""/241, 0xf1}], 0x1}, 0x40012003) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 33.651604][ T4032] cgroup: Unknown subsys name 'net' [ 33.879260][ T4032] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.119301][ T4032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 34.917724][ T4046] chnl_net:caif_netlink_parms(): no params data found [ 34.984205][ T4046] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.985426][ T4046] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.987192][ T4046] device bridge_slave_0 entered promiscuous mode [ 34.991003][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 34.992900][ T4058] chnl_net:caif_netlink_parms(): no params data found [ 35.002774][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.003983][ T4046] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.005525][ T4046] device bridge_slave_1 entered promiscuous mode [ 35.021327][ T4042] chnl_net:caif_netlink_parms(): no params data found [ 35.025535][ T4046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.037849][ T4046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.046114][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.047653][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.049186][ T4058] device bridge_slave_0 entered promiscuous mode [ 35.055518][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.058404][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.059953][ T4043] device bridge_slave_0 entered promiscuous mode [ 35.063736][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 35.069957][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.071186][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.072647][ T4058] device bridge_slave_1 entered promiscuous mode [ 35.073954][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.075076][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.078888][ T4043] device bridge_slave_1 entered promiscuous mode [ 35.082456][ T4046] team0: Port device team_slave_0 added [ 35.097830][ T4046] team0: Port device team_slave_1 added [ 35.098970][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.100190][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.101682][ T4042] device bridge_slave_0 entered promiscuous mode [ 35.112709][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.117876][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.119034][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.120610][ T4042] device bridge_slave_1 entered promiscuous mode [ 35.123001][ T4058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.125217][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.138753][ T4058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.145273][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.146343][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.150643][ T4046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.160017][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.161243][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.162758][ T4049] device bridge_slave_0 entered promiscuous mode [ 35.164501][ T4046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.165644][ T4046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.172900][ T4046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.175776][ T4042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.180683][ T4043] team0: Port device team_slave_0 added [ 35.181803][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.182976][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.184432][ T4049] device bridge_slave_1 entered promiscuous mode [ 35.190897][ T4042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.193406][ T4058] team0: Port device team_slave_0 added [ 35.195101][ T4043] team0: Port device team_slave_1 added [ 35.204630][ T4058] team0: Port device team_slave_1 added [ 35.218149][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.219391][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.223722][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.257704][ T4046] device hsr_slave_0 entered promiscuous mode [ 35.306789][ T4046] device hsr_slave_1 entered promiscuous mode [ 35.347570][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.350063][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.352228][ T4042] team0: Port device team_slave_0 added [ 35.359210][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.360290][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.364533][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.367780][ T4042] team0: Port device team_slave_1 added [ 35.371452][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.372559][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.379628][ T4058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.386088][ T4049] team0: Port device team_slave_0 added [ 35.387497][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.388713][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.392819][ T4058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.403898][ T4049] team0: Port device team_slave_1 added [ 35.408334][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.409534][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.413666][ T4042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.425937][ T4042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.427382][ T4042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.431637][ T4042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.433924][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.435031][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.439420][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.448968][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.450067][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.453979][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.497582][ T4043] device hsr_slave_0 entered promiscuous mode [ 35.536854][ T4043] device hsr_slave_1 entered promiscuous mode [ 35.576669][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.577919][ T4043] Cannot create hsr debugfs directory [ 35.627583][ T4058] device hsr_slave_0 entered promiscuous mode [ 35.666753][ T4058] device hsr_slave_1 entered promiscuous mode [ 35.706606][ T4058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.707772][ T4058] Cannot create hsr debugfs directory [ 35.767494][ T4042] device hsr_slave_0 entered promiscuous mode [ 35.826765][ T4042] device hsr_slave_1 entered promiscuous mode [ 35.886605][ T4042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.887740][ T4042] Cannot create hsr debugfs directory [ 35.947585][ T4049] device hsr_slave_0 entered promiscuous mode [ 35.986799][ T4049] device hsr_slave_1 entered promiscuous mode [ 36.026660][ T4049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.027896][ T4049] Cannot create hsr debugfs directory [ 36.113556][ T4046] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.159831][ T4046] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.207585][ T4046] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.250744][ T4046] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.320129][ T4058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.369935][ T4058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.416210][ T4043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.447580][ T4058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.491252][ T4043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.527868][ T4043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.579558][ T4058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.627911][ T4043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.672608][ T4046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.686312][ T4046] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.689072][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.690794][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.708610][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.710133][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.711688][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.712879][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.714405][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.718432][ T4049] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.748019][ T4042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.789689][ T4049] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.827963][ T4042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.867936][ T4042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.886838][ T4098] Bluetooth: hci0: command 0x0409 tx timeout [ 36.886880][ T4111] Bluetooth: hci4: command 0x0409 tx timeout [ 36.887966][ T4098] Bluetooth: hci1: command 0x0409 tx timeout [ 36.888836][ T4111] Bluetooth: hci3: command 0x0409 tx timeout [ 36.890709][ T4111] Bluetooth: hci2: command 0x0409 tx timeout [ 36.908111][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.909715][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.911364][ T523] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.912454][ T523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.913794][ T4042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.959494][ T4049] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.007668][ T4049] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.051400][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.057055][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.080445][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.082202][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.083775][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.085296][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.087546][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.097766][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.099247][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.101901][ T4058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.109898][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.111488][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.114615][ T4046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.130550][ T4058] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.133430][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.134850][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.145040][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.147305][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.148916][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.150032][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.156161][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.163005][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.164863][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.166301][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.167469][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.171200][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.176130][ T4042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.179868][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.182841][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.194379][ T4046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.197647][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.199134][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.200555][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.201761][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.203049][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.209286][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.211068][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.212539][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.214363][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.215916][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.220492][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.222845][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.225841][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.227523][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.229087][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.230552][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.232078][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.233661][ T523] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.234812][ T523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.236283][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.240884][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.242491][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.244016][ T523] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.245189][ T523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.247534][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.249195][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.250622][ T523] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.251754][ T523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.260830][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.262354][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.264018][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.265573][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.267681][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.269248][ T523] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.270335][ T523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.271735][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.273256][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.274722][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.276332][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.278180][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.279679][ T523] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.280752][ T523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.282055][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.283544][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.294110][ T4058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.295543][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.297706][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.299186][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.300648][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.302230][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.303854][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.305442][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.307511][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.308994][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.310416][ T523] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.311472][ T523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.312850][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.314482][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.324799][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.326471][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.328931][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.330801][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.332423][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.333976][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.335815][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.337763][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.339221][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.340730][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.342147][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.343703][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.352500][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.354204][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.359336][ T4046] device veth0_vlan entered promiscuous mode [ 37.364489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.366395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.368745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.370295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.372787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.374508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.375999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.378038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.379400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.381852][ T4046] device veth1_vlan entered promiscuous mode [ 37.390370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.391929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.393373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.394973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.396462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.399322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.400913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.410329][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.412858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.414333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.415825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.420803][ T4043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.422812][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.425539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.427938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.431497][ T4046] device veth0_macvtap entered promiscuous mode [ 37.435331][ T4046] device veth1_macvtap entered promiscuous mode [ 37.440152][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.441676][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.443089][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.444411][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.449294][ T4058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.460597][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.473949][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.475597][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.477521][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.478882][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.480179][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.481762][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.484381][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.489448][ T4058] device veth0_vlan entered promiscuous mode [ 37.490754][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.492357][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.494213][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.495606][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.498456][ T4046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.503071][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.504797][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.507905][ T4046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.509261][ T4046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.510579][ T4046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.511898][ T4046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.529006][ T4058] device veth1_vlan entered promiscuous mode [ 37.542138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.543760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.545225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.546446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.557858][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.559425][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.573516][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.574802][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.578771][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.581098][ T4058] device veth0_macvtap entered promiscuous mode [ 37.583230][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.584756][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.591514][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.595585][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.597292][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.598799][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.600059][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.603124][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.604353][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.605912][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.609774][ T4058] device veth1_macvtap entered promiscuous mode [ 37.635029][ T4043] device veth0_vlan entered promiscuous mode [ 37.715034][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.717533][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.720162][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.722524][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.724016][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.725632][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.727867][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.729352][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.731006][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.732663][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.734201][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.735564][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.740982][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.743049][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.745436][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.749256][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.750746][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.752187][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.753829][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.756945][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.759211][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.761630][ T4058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.763081][ T4058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.764554][ T4058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.766068][ T4058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.105691][ T4049] device veth0_vlan entered promiscuous mode [ 38.120785][ T4043] device veth1_vlan entered promiscuous mode [ 38.126352][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.128280][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.133084][ T4049] device veth1_vlan entered promiscuous mode [ 38.146200][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.147885][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.149933][ T4042] device veth0_vlan entered promiscuous mode [ 38.152662][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.154404][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.175311][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.180422][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.186525][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.189146][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.191016][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.192551][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.193146][ T4042] device veth1_vlan entered promiscuous mode [ 38.198759][ T4049] device veth0_macvtap entered promiscuous mode [ 38.200168][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.201746][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.203270][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.209343][ T4043] device veth0_macvtap entered promiscuous mode [ 38.212806][ T4043] device veth1_macvtap entered promiscuous mode [ 38.220292][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.223450][ T4049] device veth1_macvtap entered promiscuous mode [ 38.224758][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.230836][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.232311][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.234506][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.236044][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.238408][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.239719][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.241178][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.246077][ T4042] device veth0_macvtap entered promiscuous mode [ 38.253688][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.255264][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.259424][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.261050][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.263375][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.265866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.267492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.269025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.282144][ T4042] device veth1_macvtap entered promiscuous mode [ 38.288468][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.290184][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.291959][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.293631][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.295271][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.297654][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.300235][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.303287][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.304842][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.306355][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.308923][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.310539][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.312305][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.314015][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.316401][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.322295][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.324005][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.325392][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.328243][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.329801][ T4042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.331494][ T4042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.333621][ T4042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.334992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.337211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.338812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.340447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.343345][ T4043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.344846][ T4043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.346372][ T4043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.349349][ T4043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.352753][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.354552][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.356394][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.358806][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.360494][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.362282][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.364021][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.365853][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.372436][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.375493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.378068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.396505][ T4042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.398349][ T4042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.399859][ T4042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.401319][ T4042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.404996][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.410621][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.412344][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.414414][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.416064][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.418493][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.420118][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.421763][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.423846][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.430246][ T4160] device bridge0 entered promiscuous mode [ 38.431275][ T4160] device macsec1 entered promiscuous mode [ 38.433566][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.434257][ T4160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.435240][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.463785][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.465154][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.470573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.483010][ T4049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.484408][ T4049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.485753][ T4049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.492992][ T4049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.555167][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.556506][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.559059][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.560639][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.561893][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.567848][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.603267][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.604619][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.606229][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.625817][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.630860][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.632513][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.695510][ T4168] udc-core: couldn't find an available UDC or it's busy [ 38.697093][ T4168] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 38.705901][ T1621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.710926][ T1621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.712979][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.737174][ T4170] tipc: Enabling of bearer rejected, failed to enable media [ 39.280531][ T1969] Bluetooth: hci2: command 0x041b tx timeout [ 39.282224][ T1969] Bluetooth: hci3: command 0x041b tx timeout [ 39.283356][ T1969] Bluetooth: hci1: command 0x041b tx timeout [ 39.284313][ T1969] Bluetooth: hci4: command 0x041b tx timeout [ 39.285374][ T1969] Bluetooth: hci0: command 0x041b tx timeout [ 41.423825][ T4227] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 42.139497][ T4156] Bluetooth: hci0: command 0x040f tx timeout [ 42.140743][ T4156] Bluetooth: hci4: command 0x040f tx timeout [ 42.141852][ T4156] Bluetooth: hci1: command 0x040f tx timeout [ 42.142802][ T4156] Bluetooth: hci3: command 0x040f tx timeout [ 42.145373][ T4156] Bluetooth: hci2: command 0x040f tx timeout [ 42.238632][ T4239] tipc: Enabling of bearer rejected, failed to enable media [ 43.773131][ T4295] tipc: Enabling of bearer rejected, failed to enable media [ 44.535188][ T4251] Bluetooth: hci2: command 0x0419 tx timeout [ 44.536511][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 44.538210][ T4251] Bluetooth: hci1: command 0x0419 tx timeout [ 44.539294][ T4251] Bluetooth: hci4: command 0x0419 tx timeout [ 44.540344][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 45.293952][ T234] block nbd4: Attempted send on invalid socket [ 45.295280][ T234] blk_update_request: I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.297723][ T234] block nbd4: Attempted send on invalid socket [ 45.298874][ T234] blk_update_request: I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 45.300801][ T4330] Mount JFS Failure: -5 [ 45.592945][ T4342] tipc: Enabling of bearer rejected, failed to enable media [ 46.933156][ T4380] process 'syz.4.60' launched './file0' with NULL argv: empty string added [ 47.378168][ T1969] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 47.399063][ T4388] tipc: Enabling of bearer rejected, failed to enable media [ 47.645723][ T4402] udc-core: couldn't find an available UDC or it's busy [ 47.647186][ T4402] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.657302][ T1969] usb 1-1: Using ep0 maxpacket: 16 [ 48.076682][ T1969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 48.559338][ T4411] udc-core: couldn't find an available UDC or it's busy [ 48.562750][ T4411] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.617072][ T1969] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 48.619386][ T1969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.621907][ T1969] usb 1-1: Product: syz [ 48.622583][ T1969] usb 1-1: Manufacturer: syz [ 48.625285][ T1969] usb 1-1: SerialNumber: syz [ 48.633078][ T1969] usb 1-1: config 0 descriptor?? [ 48.668340][ T1969] hub 1-1:0.0: bad descriptor, ignoring hub [ 48.669800][ T1969] hub: probe of 1-1:0.0 failed with error -5 [ 49.081531][ T4111] usb 1-1: USB disconnect, device number 2 [ 49.310763][ T4432] tipc: Enabling of bearer rejected, failed to enable media [ 50.661853][ T4468] tipc: Enabling of bearer rejected, failed to enable media [ 50.717468][ T4473] tipc: Started in network mode [ 50.718393][ T4473] tipc: Node identity , cluster identity 4711 [ 50.719520][ T4473] tipc: Failed to obtain node identity [ 50.720411][ T4473] tipc: Enabling of bearer rejected, failed to enable media [ 50.722264][ T4473] device syzkaller0 entered promiscuous mode [ 52.088354][ T4511] tipc: Enabling of bearer rejected, failed to enable media [ 52.646752][ T1969] Bluetooth: hci5: command 0x1003 tx timeout [ 52.651930][ T4056] Bluetooth: hci5: sending frame failed (-49) [ 52.781197][ T4252] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 54.442670][ T4591] tipc: Enabling of bearer rejected, failed to enable media [ 54.543172][ T4601] udc-core: couldn't find an available UDC or it's busy [ 54.544407][ T4601] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.736658][ T4111] Bluetooth: hci5: command 0x1001 tx timeout [ 54.737812][ T4056] Bluetooth: hci5: sending frame failed (-49) [ 55.079416][ T4612] udc-core: couldn't find an available UDC or it's busy [ 55.080571][ T4612] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.091780][ T4612] udc-core: couldn't find an available UDC or it's busy [ 55.093038][ T4612] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.409778][ T4633] tipc: Enabling of bearer rejected, failed to enable media [ 56.540890][ T4650] udc-core: couldn't find an available UDC or it's busy [ 56.542888][ T4650] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.677819][ T4653] netlink: 44 bytes leftover after parsing attributes in process `syz.4.144'. [ 56.961175][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 58.454335][ T4682] tipc: Started in network mode [ 58.455213][ T4682] tipc: Node identity 66ce59d9b1f4, cluster identity 4711 [ 58.456502][ T4682] tipc: Enabled bearer , priority 0 [ 58.475255][ T4682] tipc: Resetting bearer [ 58.478051][ T4681] tipc: Disabling bearer [ 59.203749][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 59.539913][ T4714] tipc: Enabling of bearer rejected, failed to enable media [ 60.599563][ T4739] device bridge0 entered promiscuous mode [ 60.600654][ T4739] device macsec1 entered promiscuous mode [ 60.603463][ T4739] Zero length message leads to an empty skb [ 60.604608][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 61.640472][ T4755] tipc: Enabled bearer , priority 0 [ 61.645075][ T4755] tipc: Resetting bearer [ 61.648178][ T4754] tipc: Disabling bearer [ 62.333088][ T4784] overlayfs: overlapping lowerdir path [ 62.476590][ T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 62.766914][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 63.108175][ T13] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 63.109560][ T13] usb 1-1: config 0 has no interface number 0 [ 63.110543][ T13] usb 1-1: config 0 interface 184 has no altsetting 0 [ 63.123094][ T4798] device syzkaller0 entered promiscuous mode [ 63.199028][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 63.324566][ T13] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 63.328073][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.329387][ T13] usb 1-1: Product: syz [ 63.330034][ T13] usb 1-1: Manufacturer: syz [ 63.330864][ T13] usb 1-1: SerialNumber: syz [ 63.332937][ T13] usb 1-1: config 0 descriptor?? [ 63.367528][ T13] smsc75xx v1.0.0 [ 63.850161][ T4821] udc-core: couldn't find an available UDC or it's busy [ 63.851493][ T4821] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 64.706659][ T13] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 64.708483][ T13] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 64.790953][ T4840] device syzkaller0 entered promiscuous mode [ 65.180477][ T4845] udc-core: couldn't find an available UDC or it's busy [ 65.181620][ T4845] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.046676][ T13] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 66.048600][ T13] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 66.050138][ T13] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 66.051986][ T13] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 66.056283][ T13] usb 1-1: USB disconnect, device number 3 [ 66.160860][ T4877] device syzkaller0 entered promiscuous mode [ 66.691681][ T4888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 66.714329][ T4890] udc-core: couldn't find an available UDC or it's busy [ 66.715512][ T4890] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 67.655373][ T4913] device syzkaller0 entered promiscuous mode [ 67.938217][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.941798][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.943291][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.957664][ T4921] device macsec1 left promiscuous mode [ 68.733576][ T4929] device bridge0 entered promiscuous mode [ 68.734660][ T4929] device macsec1 entered promiscuous mode [ 68.751804][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 68.761584][ T4928] udc-core: couldn't find an available UDC or it's busy [ 68.762664][ T4928] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.781778][ T4931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 69.286862][ T4196] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.553273][ T4950] device syzkaller0 entered promiscuous mode [ 69.653764][ T4196] usb 1-1: Using ep0 maxpacket: 8 [ 69.904718][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.905982][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.908546][ T7] cfg80211: failed to load regulatory.db [ 70.157150][ T4196] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 70.158564][ T4196] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.160184][ T4196] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.162423][ T4196] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.164206][ T4196] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.166457][ T4196] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.168590][ T4196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.046757][ T4196] usb 1-1: usb_control_msg returned -32 [ 71.047696][ T4196] usbtmc 1-1:16.0: can't read capabilities [ 71.086978][ T4971] delete_channel: no stack [ 72.190648][ T4196] usb 1-1: USB disconnect, device number 4 [ 72.259308][ T5000] device syzkaller0 entered promiscuous mode [ 72.981717][ T5015] udc-core: couldn't find an available UDC or it's busy [ 72.982919][ T5015] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 73.437041][ T5024] capability: warning: `syz.0.268' uses 32-bit capabilities (legacy support in use) [ 73.509288][ T5029] udc-core: couldn't find an available UDC or it's busy [ 73.514037][ T5029] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.570920][ T5045] device syzkaller0 entered promiscuous mode [ 75.567337][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 75.599533][ T5084] device syzkaller0 entered promiscuous mode [ 76.036741][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.039296][ T25] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 76.040865][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.110850][ T25] usb 1-1: config 0 descriptor?? [ 76.203376][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 76.553365][ T5106] udc-core: couldn't find an available UDC or it's busy [ 76.564922][ T5106] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.653332][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 76.687214][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 76.766228][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 76.817047][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 77.146593][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 77.199390][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 77.259407][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 77.299445][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 77.339517][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 77.379488][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 77.524029][ T5129] device syzkaller0 entered promiscuous mode [ 77.629897][ T5131] team0: Port device team_slave_0 removed [ 77.720175][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 78.200368][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 78.276970][ T25] pwc: recv_control_msg error -32 req 02 val 2900 [ 78.704289][ T5159] binder: 5158:5159 ioctl c0306201 20000080 returned -14 [ 78.707323][ T5159] binder: 5158:5159 tried to acquire reference to desc 0, got 1 instead [ 78.709202][ T5159] binder: 5158:5159 not enough space to store 6 fds in buffer [ 78.710587][ T5159] binder: 5158:5159 transaction failed 29201/-22, size 112-24 line 3331 [ 78.712372][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.719839][ T5161] udc-core: couldn't find an available UDC or it's busy [ 78.721130][ T5161] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.388806][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 79.402682][ T5167] device syzkaller0 entered promiscuous mode [ 79.416664][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 79.419418][ T25] pwc: Registered as video11. [ 79.420754][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 79.425871][ T25] usb 1-1: USB disconnect, device number 5 [ 80.052910][ T5196] capability: warning: `syz.0.329' uses deprecated v2 capabilities in a way that may be insecure [ 80.228922][ T5198] mkiss: ax0: crc mode is auto. [ 81.513472][ T5216] udc-core: couldn't find an available UDC or it's busy [ 81.524912][ T5216] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.202438][ T5236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 82.216120][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 83.459435][ T5266] device veth0_to_team entered promiscuous mode [ 83.471728][ T26] audit: type=1326 audit(83.450:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 83.482128][ T26] audit: type=1326 audit(83.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 83.490566][ T26] audit: type=1326 audit(83.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=87 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 83.493908][ T26] audit: type=1326 audit(83.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 83.498164][ T26] audit: type=1326 audit(83.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5254 comm="syz.2.346" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 83.571954][ T5278] udc-core: couldn't find an available UDC or it's busy [ 83.577554][ T5278] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.158789][ T5311] bpf_jit: unknown atomic op code 50 [ 85.504345][ T5319] udc-core: couldn't find an available UDC or it's busy [ 85.505510][ T5319] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.590994][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 86.211281][ T5342] device veth0 entered promiscuous mode [ 86.212852][ T5341] device veth0 left promiscuous mode [ 87.066741][ T5379] udc-core: couldn't find an available UDC or it's busy [ 87.068137][ T5379] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.100959][ T5383] udc-core: couldn't find an available UDC or it's busy [ 87.102216][ T5383] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.104915][ T5383] udc-core: couldn't find an available UDC or it's busy [ 87.106131][ T5383] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.333165][ T5419] tmpfs: Unknown parameter 'noswap' [ 88.852673][ T5446] ptrace attach of "./syz-executor exec"[4058] was attempted by "./syz-executor exec"[5446] [ 88.855936][ T5446] udc-core: couldn't find an available UDC or it's busy [ 88.857949][ T5446] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.019147][ T5512] block nbd1: shutting down sockets [ 91.176638][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.236839][ T5529] udc-core: couldn't find an available UDC or it's busy [ 91.238022][ T5529] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.491407][ T5532] udc-core: couldn't find an available UDC or it's busy [ 91.492711][ T5532] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.536660][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.538561][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 91.539892][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.542944][ T7] usb 1-1: config 0 descriptor?? [ 92.317964][ T7] magicmouse 0003:05AC:0265.0001: unbalanced collection at end of report description [ 92.319887][ T7] magicmouse 0003:05AC:0265.0001: magicmouse hid parse failed [ 92.321100][ T7] magicmouse: probe of 0003:05AC:0265.0001 failed with error -22 [ 92.559891][ T7] usb 1-1: USB disconnect, device number 6 [ 92.856013][ T144] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 92.858628][ T144] CPU: 0 PID: 144 Comm: kworker/u5:0 Not tainted 5.15.189-syzkaller #0 [ 92.859881][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 92.861325][ T144] Workqueue: hci4 hci_rx_work [ 92.862017][ T144] Call trace: [ 92.862487][ T144] dump_backtrace+0x0/0x43c [ 92.863147][ T144] show_stack+0x2c/0x3c [ 92.863750][ T144] __dump_stack+0x30/0x40 [ 92.864379][ T144] dump_stack_lvl+0xf8/0x160 [ 92.865035][ T144] dump_stack+0x1c/0x5c [ 92.865648][ T144] sysfs_create_dir_ns+0x22c/0x24c [ 92.866398][ T144] kobject_add_internal+0x590/0xc54 [ 92.867144][ T144] kobject_add+0x134/0x1f8 [ 92.867787][ T144] device_add+0x3f0/0xf94 [ 92.868403][ T144] hci_conn_add_sysfs+0xbc/0x1cc [ 92.869101][ T144] le_conn_complete_evt+0x9a4/0x11bc [ 92.869858][ T144] hci_le_meta_evt+0x85c/0x3010 [ 92.870602][ T144] hci_event_packet+0xd10/0x11bc [ 92.871453][ T144] hci_rx_work+0x1cc/0x880 [ 92.872232][ T144] process_one_work+0x79c/0x1140 [ 92.873037][ T144] worker_thread+0x8f4/0x101c [ 92.873830][ T144] kthread+0x374/0x454 [ 92.874576][ T144] ret_from_fork+0x10/0x20 [ 93.229618][ T144] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 93.234234][ T144] Bluetooth: hci4: failed to register connection device [ 93.620107][ T5571] udc-core: couldn't find an available UDC or it's busy [ 93.621327][ T5571] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.681596][ T5579] device syzkaller0 entered promiscuous mode [ 94.965060][ T5602] udc-core: couldn't find an available UDC or it's busy [ 94.970158][ T5602] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.988939][ T5605] udc-core: couldn't find an available UDC or it's busy [ 94.990186][ T5605] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.045794][ T4252] Bluetooth: hci5: Frame reassembly failed (-84) [ 95.286618][ T4098] Bluetooth: hci4: command 0x2016 tx timeout [ 95.579042][ T26] audit: type=1326 audit(95.560:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 95.584846][ T26] audit: type=1326 audit(95.560:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 95.594545][ T26] audit: type=1326 audit(95.570:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 95.605167][ T26] audit: type=1326 audit(95.570:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 95.614246][ T26] audit: type=1326 audit(95.570:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 96.406804][ T26] audit: type=1326 audit(95.580:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 96.430698][ T26] audit: type=1326 audit(95.580:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 96.434432][ T26] audit: type=1326 audit(95.580:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 96.455313][ T26] audit: type=1326 audit(95.580:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 96.468713][ T26] audit: type=1326 audit(95.580:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.2.480" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff998c3f28 code=0x7ffc0000 [ 96.573674][ T5633] device syzkaller0 entered promiscuous mode [ 97.046650][ T7] Bluetooth: hci5: command 0x1003 tx timeout [ 97.047875][ T4056] Bluetooth: hci5: sending frame failed (-49) [ 97.078888][ T5654] udc-core: couldn't find an available UDC or it's busy [ 97.080116][ T5654] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.340388][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 99.253471][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 99.254660][ T4056] Bluetooth: hci5: sending frame failed (-49) [ 99.374524][ T5705] udc-core: couldn't find an available UDC or it's busy [ 99.376093][ T5705] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 99.699672][ T5705] udc-core: couldn't find an available UDC or it's busy [ 99.700805][ T5705] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 99.844110][ T5722] netlink: 'syz.2.518': attribute type 12 has an invalid length. [ 99.845544][ T5722] netlink: 'syz.2.518': attribute type 29 has an invalid length. [ 99.847695][ T5722] netlink: 148 bytes leftover after parsing attributes in process `syz.2.518'. [ 99.849300][ T5722] netlink: 'syz.2.518': attribute type 2 has an invalid length. [ 99.850617][ T5722] netlink: 23 bytes leftover after parsing attributes in process `syz.2.518'. [ 100.227116][ T5733] udc-core: couldn't find an available UDC or it's busy [ 100.228416][ T5733] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.299580][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 101.301770][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 102.439375][ T5813] udc-core: couldn't find an available UDC or it's busy [ 102.440606][ T5813] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 102.656751][ T4098] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 103.076783][ T4098] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 103.078202][ T4098] usb 1-1: config 0 has no interface number 0 [ 103.079278][ T4098] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 103.080987][ T4098] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 103.606689][ T4098] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 103.610315][ T4098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.611896][ T4098] usb 1-1: Product: syz [ 103.612548][ T4098] usb 1-1: Manufacturer: syz [ 103.613393][ T4098] usb 1-1: SerialNumber: syz [ 103.615356][ T4098] usb 1-1: config 0 descriptor?? [ 103.636862][ T5807] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.638157][ T5807] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.667082][ T4098] smsc95xx v2.0.0 [ 103.881139][ T5807] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.890849][ T5807] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.116707][ T4098] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 104.118613][ T4098] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.576644][ T4098] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 104.578595][ T4098] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 104.581379][ T4098] usb 1-1: USB disconnect, device number 7 [ 104.584103][ T4440] udevd[4440]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: No such file or directory [ 104.876299][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 104.901217][ T5874] ksmbd: Unknown IPC event: 6, ignore. [ 104.951879][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 105.029950][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 105.425608][ T5894] udc-core: couldn't find an available UDC or it's busy [ 105.431672][ T5894] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.504355][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 106.031590][ T5919] qrtr: Invalid version 0 [ 107.452610][ T5948] udc-core: couldn't find an available UDC or it's busy [ 107.464114][ T5948] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.372165][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 108.491718][ T13] hid-generic 1000:989C:01FF.0002: unknown main item tag 0x0 [ 108.493359][ T13] hid-generic 1000:989C:01FF.0002: unknown main item tag 0x0 [ 108.494780][ T13] hid-generic 1000:989C:01FF.0002: unknown main item tag 0x0 [ 108.515452][ T13] hid-generic 1000:989C:01FF.0002: hidraw0: HID v0.f4 Device [syz1] on syz1 [ 109.071558][ T5989] udc-core: couldn't find an available UDC or it's busy [ 109.073074][ T5989] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 109.073927][ T5987] device syzkaller0 entered promiscuous mode [ 109.303740][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 109.826719][ T13] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 109.828670][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.830199][ T13] usb 1-1: Product: syz [ 109.830865][ T13] usb 1-1: Manufacturer: syz [ 109.831690][ T13] usb 1-1: SerialNumber: syz [ 109.834674][ T13] usb 1-1: config 0 descriptor?? [ 109.878304][ T13] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 110.230821][ T6020] Bluetooth: hci0: service_discovery: too big uuid_count value 65535 [ 110.250372][ T6022] device syzkaller0 entered promiscuous mode [ 110.316649][ T13] sonixb 1-1:0.0: Error writing register 01: -71 [ 110.317764][ T13] sonixb: probe of 1-1:0.0 failed with error -71 [ 110.319612][ T13] usb 1-1: USB disconnect, device number 8 [ 110.360231][ T6024] udc-core: couldn't find an available UDC or it's busy [ 110.361493][ T6024] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.893961][ T6052] device syzkaller0 entered promiscuous mode [ 112.457241][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.522202][ T6096] device syzkaller0 entered promiscuous mode [ 112.696716][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 112.836729][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.838793][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.840930][ T7] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 112.844225][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.853637][ T7] usb 1-1: config 0 descriptor?? [ 113.327968][ T7] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x1 [ 113.334111][ T7] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x6 [ 113.339254][ T7] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 113.533984][ T7] usb 1-1: USB disconnect, device number 9 [ 114.530447][ T6131] device syzkaller0 entered promiscuous mode [ 115.274906][ T6153] binder: 6152:6153 tried to acquire reference to desc 0, got 1 instead [ 115.277671][ T6153] binder: 6152:6153 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 115.279945][ T6153] binder: 6153 RLIMIT_NICE not set [ 115.283625][ T6153] binder: 6153 RLIMIT_NICE not set [ 115.285659][ T6153] binder: send failed reply for transaction 10 to 6152:6153 [ 115.292576][ T6153] binder: 6152:6153 transaction 10 fd fixups failed 29201/-12, line 4507 [ 115.295349][ T4098] binder: undelivered TRANSACTION_COMPLETE [ 115.296371][ T4098] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.339966][ T6156] udc-core: couldn't find an available UDC or it's busy [ 115.341066][ T6156] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.518310][ T6162] udc-core: couldn't find an available UDC or it's busy [ 115.519440][ T6162] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 116.154294][ T6176] device syzkaller0 entered promiscuous mode [ 116.927983][ T346] nci: nci_rx_work: unknown MT 0x4 [ 117.180805][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 117.226779][ T6205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.219411][ T6230] device syzkaller0 entered promiscuous mode [ 118.436751][ T9] Bluetooth: Error in BCSP hdr checksum [ 118.555221][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.684'. [ 118.628156][ T6243] device syz_tun entered promiscuous mode [ 118.662699][ T6245] binder: 6238:6245 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 118.666158][ T6245] binder: 6245 RLIMIT_NICE not set [ 118.670476][ T6243] device batadv_slave_0 entered promiscuous mode [ 118.707362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 118.898775][ T6257] mmap: syz.0.688 (6257) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 119.336696][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.354030][ T6265] device syzkaller0 entered promiscuous mode [ 119.393495][ T1969] binder: undelivered death notification, 0000000000000000 [ 119.606764][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 119.736660][ T7] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 119.738158][ T7] usb 1-1: config 0 has no interface number 0 [ 119.739183][ T7] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 119.743724][ T7] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 119.746305][ T7] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.762361][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 119.775043][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.798465][ T7] usb 1-1: config 0 descriptor?? [ 119.899422][ T7] ldusb 1-1:0.55: Interrupt in endpoint not found [ 120.062596][ T7] usb 1-1: USB disconnect, device number 10 [ 120.086625][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 120.087835][ T4056] Bluetooth: hci5: sending frame failed (-49) [ 120.522707][ T6303] device syzkaller0 entered promiscuous mode [ 120.563354][ T6309] udc-core: couldn't find an available UDC or it's busy [ 120.564482][ T6309] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 120.640242][ T6314] udc-core: couldn't find an available UDC or it's busy [ 120.641415][ T6314] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.323113][ T6323] udc-core: couldn't find an available UDC or it's busy [ 121.324484][ T6323] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.497051][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 121.497057][ T26] audit: type=1326 audit(121.480:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b754f28 code=0x7ffc0000 [ 121.501844][ T26] audit: type=1326 audit(121.480:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b754f28 code=0x7ffc0000 [ 121.505486][ T26] audit: type=1326 audit(121.480:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=271 compat=0 ip=0xffff8b754f28 code=0x7ffc0000 [ 121.509172][ T26] audit: type=1326 audit(121.480:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.0.720" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b754f28 code=0x7ffc0000 [ 121.555275][ T6340] device syzkaller0 entered promiscuous mode [ 122.166834][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 122.170095][ T4056] Bluetooth: hci5: sending frame failed (-49) [ 122.646860][ T6370] device syzkaller0 entered promiscuous mode [ 122.764081][ T6376] netlink: 104 bytes leftover after parsing attributes in process `syz.0.738'. [ 123.238287][ T6388] binder: 6387:6388 tried to acquire reference to desc 0, got 1 instead [ 123.240578][ T6388] binder: 6387:6388 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 30) [ 123.242772][ T6388] binder: 6388 RLIMIT_NICE not set [ 123.244003][ T1969] binder: release 6387:6388 transaction 20 out, still active [ 123.259643][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.743'. [ 123.344957][ T1969] binder: undelivered TRANSACTION_COMPLETE [ 123.376698][ T1969] binder: send failed reply for transaction 20, target dead [ 123.797977][ T6411] udc-core: couldn't find an available UDC or it's busy [ 123.799140][ T6411] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 124.047700][ T6422] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 124.048875][ T6422] Modules linked in: [ 124.049411][ T6422] CPU: 0 PID: 6422 Comm: syz.2.752 Not tainted 5.15.189-syzkaller #0 [ 124.050687][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 124.052132][ T6422] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 124.053376][ T6422] pc : futex_requeue+0x5ac/0x1838 [ 124.054177][ T6422] lr : futex_requeue+0x588/0x1838 [ 124.054955][ T6422] sp : ffff80001fd376e0 [ 124.055577][ T6422] x29: ffff80001fd37840 x28: 1fffe00018ed42a9 x27: ffff0000c76a1548 [ 124.056753][ T6422] x26: dfff800000000000 x25: ffff0000c76a0024 x24: 0000000000000000 [ 124.058038][ T6422] x23: 1fffe00018ed4004 x22: ffff0000c76a0000 x21: 00000000000000d5 [ 124.059350][ T6422] x20: ffff0000c0d30000 x19: 00000000fffffff2 x18: 0000000000000000 [ 124.060621][ T6422] x17: 0000000000000000 x16: ffff8000083c25fc x15: 00000000b491807d [ 124.061931][ T6422] x14: 000000006a2a1f82 x13: 1ffff0000282e06b x12: 0000000000080000 [ 124.063150][ T6422] x11: 0000ffffffffffff x10: 0000000000000000 x9 : 0000000000000000 [ 124.064301][ T6422] x8 : 0000000000000000 x7 : ffff8000083c24d8 x6 : 0000000000000000 [ 124.065461][ T6422] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d608c [ 124.066655][ T6422] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 124.067861][ T6422] Call trace: [ 124.068398][ T6422] futex_requeue+0x5ac/0x1838 [ 124.069105][ T6422] do_futex+0xb88/0x257c [ 124.069751][ T6422] __arm64_sys_futex+0x388/0x400 [ 124.070484][ T6422] invoke_syscall+0x98/0x2b8 [ 124.071207][ T6422] el0_svc_common+0x138/0x258 [ 124.071839][ T6422] do_el0_svc+0x58/0x14c [ 124.072509][ T6422] el0_svc+0x78/0x1e0 [ 124.073130][ T6422] el0t_64_sync_handler+0xcc/0xe4 [ 124.073925][ T6422] el0t_64_sync+0x1a0/0x1a4 [ 124.074657][ T6422] Code: d503229f b94083e0 2a0003f3 b8400918 (2a1303e1) [ 124.075631][ T6422] ---[ end trace 1dd0d4edaec37544 ]--- [ 124.257223][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 124.308260][ T6422] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 124.309355][ T6422] SMP: stopping secondary CPUs [ 124.310116][ T6422] Kernel Offset: disabled [ 124.310811][ T6422] CPU features: 0x8,000003c1,7d33ffd9 [ 124.311592][ T6422] Memory Limit: none [ 124.525329][ T6422] Rebooting in 86400 seconds..