last executing test programs: 2m25.640270428s ago: executing program 3 (id=7): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x2000022a, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)='`', 0x8200, 0x600}]) 2m25.582561859s ago: executing program 3 (id=8): syz_mount_image$ocfs2(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r1, 0x0, &(0x7f0000002680)) 2m24.521845542s ago: executing program 3 (id=21): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a400090582"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m23.879746752s ago: executing program 3 (id=27): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1409, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x51}, 0x4) 2m23.808158835s ago: executing program 3 (id=28): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) 2m22.576672003s ago: executing program 3 (id=35): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r0, 0x2000, 0x0) 2m7.52647418s ago: executing program 32 (id=35): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r0, 0x2000, 0x0) 27.980163141s ago: executing program 4 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x98, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x76, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@broadcast, {0xa, 0xb}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0xc, 0x4380, @void, @val, @void, @val={0x4, 0x6, {0x2, 0x0, 0x7, 0x2}}, @void, @val={0x5, 0x3, {0x3, 0x22, 0x8}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x68, 0xf}}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x7, 0x0, {0x7, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x4, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x28}}, @val={0x76, 0x6, {0xfc, 0x1, 0x2b, 0x9c2f}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x98}}, 0x44000) 27.979565701s ago: executing program 4 (id=673): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x9e9, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x2}, 0xfff}], 0x1, 0x10022, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40281, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x4, 0x80000000, 0x4, 0x6, 0x6, 0x1, 0x100, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 24.79837099s ago: executing program 1 (id=692): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x12000) 24.77772055s ago: executing program 1 (id=693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000019200)="ad56b6c5820fae9d6dcdabf5f2f500000000", 0x12) 24.692136523s ago: executing program 1 (id=694): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14018891) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r0, &(0x7f0000007640), 0x0, 0x48040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf80", 0x85}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0006280000002823f70ba381030000000000000000cba62859584fdca056"], 0x0, 0x0, 0x0, 0x0}, 0x0) 24.16754776s ago: executing program 1 (id=695): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xc5, @remote, 0x2}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000004c0)={r1, 0x100, 0x9}, 0x8) 24.14648173s ago: executing program 1 (id=696): request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 23.224098079s ago: executing program 1 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x9}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 15.375823002s ago: executing program 0 (id=698): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x60000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x2, 0x17, 0x4, "85a2bb8005b6fcb7306b4995f8feb11f748b833936c39a8e4babb80c941814977b961b68b8d342b4e1d159ed0a949c2275189abe8821b2b4df8829d228547e64", "773c7c80ba9827abd74676f72e4c37434c5e709442740c5c75ba43de55fff44d592d8ced836a24fa2d41a08939a0e355a1b4f931d68587af6bf8663272b7873a", "0e85890fe225c9fc83e425fd86149247774df727f86a3e105d53bc6cc5432f8d", [0x3, 0x5]}) 15.274004176s ago: executing program 4 (id=701): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb324, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0xa0, 0xc, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x3f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8c, 0x7, 0x2b}}}}}]}}]}}, 0x0) 15.273688826s ago: executing program 0 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_IE={0x1e, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x53}, 0x9, 0x3, @broadcast, 0x1, 0x7, 0x7fff}}, @dsss={0x3, 0x1, 0x8}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x88}}, 0x0) 14.50002814s ago: executing program 4 (id=708): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x0) getpeername(r2, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000440)=0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008811) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf80800456a00280066000003069078ac1414bbac1414234e234e22", @ANYRES32=0x41424344, @ANYRES8=r0, @ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000000000000ffffffffffffff00000000000000800000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00"/136], 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc0000002100010027bd7000fefffffffe8800000000000000000000000000017f000001000000000000000000000000dffc0000000000000a00e0800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000015e00000010000000000000000000000000a01010200000000000000000000000000000000000000000000ffff0a01010200000000000002000a002c001300fe80000000000000000000000000002b0a0101000000000000000000000000000000000002000000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x8, 0x0, 0x8, 0x2}, 0x0, 0x7, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x1, 0x0}}) 7.330598033s ago: executing program 33 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x9}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 2.57404483s ago: executing program 4 (id=712): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000040)=""/1) 2.539317591s ago: executing program 0 (id=713): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00002da000/0x1000)=nil, &(0x7f0000081000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000076e000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.409765835s ago: executing program 2 (id=715): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x12000) 2.408797705s ago: executing program 5 (id=717): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0xec1, 0x0, 0x1}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.360229447s ago: executing program 2 (id=718): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 2.359712277s ago: executing program 0 (id=719): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x2, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8004, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x8000, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x10009, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x20000, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.331281538s ago: executing program 2 (id=720): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x4436, 0x80, 0x1024002, 0x4d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0x618, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000340), 0x8) 2.297634068s ago: executing program 2 (id=721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b936, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0xa, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0xc, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.212256161s ago: executing program 5 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000110000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c00990002000000250000000800260080090000080027000200"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 2.030712537s ago: executing program 4 (id=723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r9, 0x3a}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)="e53327e0ef9ed34796e4fe7ddd1f5140df0a33bc60c0d770d454e8456ec7c4567cf0e6b7df6f257c", 0x28}], 0x1}, 0x44) 1.92994884s ago: executing program 5 (id=724): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x20000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x4]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000002c0)=0x7) 1.359232408s ago: executing program 2 (id=725): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b2", 0x8f}], 0x1}], 0x1, 0x40800) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) 1.353514198s ago: executing program 0 (id=734): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r1, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0xc8080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000000c060300000000040000000007000003050001000700000005000100070000000900020073797a310000000020eb095a9d7f1faaf3de342af31c1cabda0d75fa2fdca782bb40"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) 1.049834287s ago: executing program 5 (id=726): openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 975.10729ms ago: executing program 5 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x6, 0x0, 0x88ba5c8f19cacbb0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1) 411.199237ms ago: executing program 2 (id=728): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14018891) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r0, &(0x7f0000007640), 0x0, 0x48040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf80", 0x85}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x2801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0006280000002823f70ba381030000000000000000cba62859584fdca056"], 0x0, 0x0, 0x0, 0x0}, 0x0) 385.731158ms ago: executing program 0 (id=729): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x5, 0x180) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f0000000040)={&(0x7f0000000040), 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xa) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_DESTROY(r4, 0x5502) socket$inet_smc(0x2b, 0x1, 0x0) fsopen(&(0x7f0000000080)='qnx6\x00', 0x1) setreuid(0x0, 0xee01) 0s ago: executing program 5 (id=730): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_delete(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r1, r2, 0x0, 0x201f00) 0s ago: executing program 0 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000240008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x40054}, 0x24044010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 29.200216][ T4315] cgroup: Unknown subsys name 'net' [ 29.415547][ T4315] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.730506][ T4315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.434907][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.439696][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.441287][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.443365][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.444920][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.446711][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.448213][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.449605][ T4330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.451213][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.467486][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.469179][ T4333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.470644][ T4333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.472521][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.474599][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.476130][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.485573][ T4328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.488263][ T4328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.489743][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.497175][ T4328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.498731][ T4328] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.500135][ T4328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.501656][ T4328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.503438][ T4328] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.504671][ T4328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.508202][ T4328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.511602][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.514482][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.518076][ T4330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.519665][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.521052][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.574256][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.623861][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 30.645203][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.668940][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.673870][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.675233][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.676802][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.679339][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.680449][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.681955][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.688378][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.689650][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.691272][ T4336] device bridge_slave_0 entered promiscuous mode [ 30.711213][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.712548][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.714867][ T4336] device bridge_slave_1 entered promiscuous mode [ 30.716249][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.717395][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.718904][ T4331] device bridge_slave_0 entered promiscuous mode [ 30.725289][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.728071][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.729300][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.730830][ T4331] device bridge_slave_1 entered promiscuous mode [ 30.737491][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.741371][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.747040][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.755651][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.757433][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.758713][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.760469][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.767524][ T4327] team0: Port device team_slave_0 added [ 30.770166][ T4327] team0: Port device team_slave_1 added [ 30.772153][ T4336] team0: Port device team_slave_0 added [ 30.779101][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.783503][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.784784][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.786243][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.789875][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.791139][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.796068][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.798642][ T4336] team0: Port device team_slave_1 added [ 30.807668][ T4331] team0: Port device team_slave_0 added [ 30.810787][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.811955][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.816673][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.819050][ T4331] team0: Port device team_slave_1 added [ 30.822060][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.825411][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.828568][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.829820][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.836110][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.841335][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.842632][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.847020][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.849635][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.859052][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.860297][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.866705][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.871470][ T4335] team0: Port device team_slave_0 added [ 30.879967][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.881123][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.888271][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.890935][ T4335] team0: Port device team_slave_1 added [ 30.933699][ T4336] device hsr_slave_0 entered promiscuous mode [ 30.982875][ T4336] device hsr_slave_1 entered promiscuous mode [ 31.063608][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.102882][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.152758][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.154182][ T4327] Cannot create hsr debugfs directory [ 31.168690][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.169924][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.174638][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.186418][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.187605][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.191790][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.263708][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.302874][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.352785][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.354041][ T4331] Cannot create hsr debugfs directory [ 31.355001][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.356260][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.357663][ T4334] device bridge_slave_0 entered promiscuous mode [ 31.367903][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.369250][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.370720][ T4334] device bridge_slave_1 entered promiscuous mode [ 31.392017][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.453703][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.492943][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.532775][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.534016][ T4335] Cannot create hsr debugfs directory [ 31.535678][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.545884][ T4334] team0: Port device team_slave_0 added [ 31.555519][ T4334] team0: Port device team_slave_1 added [ 31.574713][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.575829][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.580054][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.590535][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.591727][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.596572][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.630678][ T4327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.704060][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.742882][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.782739][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.784047][ T4334] Cannot create hsr debugfs directory [ 31.791203][ T4327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.833728][ T4327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.882243][ T4327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.938074][ T4336] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.979624][ T4336] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.006236][ T4336] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.051431][ T4336] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.112447][ T4331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.135902][ T4331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.176692][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.214770][ T4331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.265796][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.306084][ T4331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.375961][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.377202][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.414715][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.473013][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 32.485823][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.514197][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.552821][ T4333] Bluetooth: hci4: command 0x0409 tx timeout [ 32.552829][ T4340] Bluetooth: hci3: command 0x0409 tx timeout [ 32.552894][ T4340] Bluetooth: hci2: command 0x0409 tx timeout [ 32.553891][ T4333] Bluetooth: hci1: command 0x0409 tx timeout [ 32.558943][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.594503][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.651447][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.653822][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.659947][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.665764][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.667447][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.669104][ T1616] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.670344][ T1616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.675388][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.680016][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.681770][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.684171][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.685362][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.691846][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.697246][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.708535][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.710480][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.712187][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.715447][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.717208][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.718837][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.720344][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.721994][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.731097][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.733454][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.737940][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.739486][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.749931][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.754141][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.755612][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.762597][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.768324][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.769930][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.771667][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.772797][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.774369][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.782282][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.784422][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.785894][ T1616] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.787038][ T1616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.796524][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.804418][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.806849][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.808595][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.810047][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.818901][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.821971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.824729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.826453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.828253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.829781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.831313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.835308][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.836534][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.838481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.839956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.842374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.844340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.847785][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.849942][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.857213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.858914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.860551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.862239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.865426][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.866708][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.869614][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.879683][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.882091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.884043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.885558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.886960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.888204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.892019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.893768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.899689][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.901578][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.903731][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.905413][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.913573][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.915182][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.916329][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.917660][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.921595][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.930032][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.936663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.938498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.940108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.941639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.943994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.945718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.947172][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.948410][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.951540][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.956279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.957803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.959312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.965832][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.967545][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.969125][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.970702][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.972276][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.974872][ T1700] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.976154][ T1700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.977686][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.979470][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.988254][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.989703][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.991014][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.995907][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.997659][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.999183][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.000873][ T1700] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.002137][ T1700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.004093][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.005944][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.009140][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.020078][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.022028][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.024428][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.026083][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.027675][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.029329][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.030973][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.032457][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.038900][ T4327] device veth0_vlan entered promiscuous mode [ 33.044250][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.046056][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.047622][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.050703][ T4327] device veth1_vlan entered promiscuous mode [ 33.057414][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.060504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.062073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.064493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.066734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.080714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.082358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.085709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.087414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.089370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.090997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.092551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.097672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.099056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.101089][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.108891][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.110419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.112031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.121255][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.122815][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.125424][ T4327] device veth0_macvtap entered promiscuous mode [ 33.132349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.134163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.135811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.137635][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.139106][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.144264][ T4336] device veth0_vlan entered promiscuous mode [ 33.146099][ T4327] device veth1_macvtap entered promiscuous mode [ 33.156094][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.157615][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.159216][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.162572][ T4336] device veth1_vlan entered promiscuous mode [ 33.165986][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.167472][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.168786][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.175805][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.177205][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.178663][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.180213][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.181568][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.186527][ T4331] device veth0_vlan entered promiscuous mode [ 33.189691][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.201298][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.204806][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.206663][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.209004][ T4331] device veth1_vlan entered promiscuous mode [ 33.221021][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.222637][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.225134][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.226873][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.229246][ T4336] device veth0_macvtap entered promiscuous mode [ 33.231478][ T4336] device veth1_macvtap entered promiscuous mode [ 33.234342][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.237058][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.238542][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.239985][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.241627][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.247278][ T4327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.248779][ T4327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.250266][ T4327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.251667][ T4327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.269476][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.271183][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.278754][ T4331] device veth0_macvtap entered promiscuous mode [ 33.281266][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.283389][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.284674][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.286712][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.288448][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.290867][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.296446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.298163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.306253][ T4331] device veth1_macvtap entered promiscuous mode [ 33.308468][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.327835][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.329491][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.331018][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.337113][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.338950][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.340886][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.342117][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.344494][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.350404][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.352235][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.356558][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.358342][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.360639][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.364088][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.365763][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.367631][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.369390][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.371609][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.379943][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.381675][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.384133][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.385730][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.389607][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.391157][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.392593][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.394578][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.399834][ T4336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.401268][ T4336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.406027][ T4336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.407421][ T4336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.410772][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.412483][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.415244][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.416621][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.418226][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.419621][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.428866][ T1700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.430126][ T1700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.434079][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.435483][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.437067][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.438779][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.440143][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.443550][ T4335] device veth0_vlan entered promiscuous mode [ 33.445820][ T4334] device veth0_vlan entered promiscuous mode [ 33.456939][ T4335] device veth1_vlan entered promiscuous mode [ 33.459238][ T4334] device veth1_vlan entered promiscuous mode [ 33.473415][ T1616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.474797][ T1616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.478629][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.480144][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.481700][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.487048][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.489535][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.500861][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.502430][ T1700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.510906][ T4335] device veth0_macvtap entered promiscuous mode [ 33.525874][ T4335] device veth1_macvtap entered promiscuous mode [ 33.535143][ T1700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.536498][ T1700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.538145][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.539640][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.541112][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.542480][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.547486][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.549215][ T319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.550580][ T319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.560150][ T4334] device veth0_macvtap entered promiscuous mode [ 33.562468][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.566683][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.577533][ T1616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.578932][ T1616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.582875][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.594317][ T4334] device veth1_macvtap entered promiscuous mode [ 33.599708][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.601591][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.604021][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.605613][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.606372][ T4404] loop0: detected capacity change from 0 to 512 [ 33.607219][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.610143][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.612280][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.622203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.624141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.625769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.642900][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.644542][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.646037][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.647639][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.649131][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.656540][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.673259][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.717852][ T1616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.719223][ T1616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.730029][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.731827][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.733767][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.739787][ T4404] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 33.741571][ T4404] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 33.745402][ T4404] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1: Failed to acquire dquot type 1 [ 33.745697][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.749466][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.749633][ T4404] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 33.751037][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.753601][ T4404] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 33.756458][ T4404] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1: Failed to acquire dquot type 1 [ 33.761056][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.762609][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.763016][ T4404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1: bg 0: block 248: padding at end of block bitmap is not set [ 33.765660][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.768541][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.768579][ T4404] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.770464][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.772193][ T4404] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 33.776184][ T4404] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 33.776793][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.824109][ T4404] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1: Failed to acquire dquot type 1 [ 33.830803][ T4411] ======================================================= [ 33.830803][ T4411] WARNING: The mand mount option has been deprecated and [ 33.830803][ T4411] and is ignored by this kernel. Remove the mand [ 33.830803][ T4411] option from the mount to silence this warning. [ 33.830803][ T4411] ======================================================= [ 34.056870][ T4404] EXT4-fs (loop0): 1 orphan inode deleted [ 34.057867][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.075479][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.077539][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.093781][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.095715][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.097645][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.100445][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.130110][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.132889][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.133055][ T4327] EXT4-fs (loop0): unmounting filesystem. [ 34.134590][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.137262][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.138896][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.140608][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.142052][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.144605][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.147261][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.159769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.161586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.177226][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.178827][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.180231][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.181622][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.208380][ T319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.210167][ T319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.213710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.250653][ T319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.250903][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.252468][ T319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.255429][ T1616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.255756][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.257955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.268002][ T4422] loop0: detected capacity change from 0 to 4096 [ 34.272199][ T4422] ntfs: (device loop0): parse_options(): Unrecognized mount option IY 1 [ 52.453124][ T4340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 52.454707][ T4340] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 52.456331][ T4340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 52.457865][ T4340] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 52.459032][ T4340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 52.964690][ T4704] (syz.1.93,4704,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 52.966417][ T4704] (syz.1.93,4704,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 54.393461][ T4372] vhci_hcd: vhci_device speed not set [ 54.472748][ T4340] Bluetooth: hci5: command 0x0409 tx timeout [ 56.562710][ T4340] Bluetooth: hci5: command 0x041b tx timeout [ 58.632719][ T4340] Bluetooth: hci5: command 0x040f tx timeout [ 60.712708][ T4333] Bluetooth: hci5: command 0x0419 tx timeout [ 62.921022][ T4677] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.85'. [ 63.047609][ T4720] netlink: 48 bytes leftover after parsing attributes in process `syz.1.99'. [ 63.202410][ T4699] chnl_net:caif_netlink_parms(): no params data found [ 63.273922][ T4733] 9pnet_virtio: no channels available for device syz [ 64.208172][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.210085][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.460541][ T4752] netlink: 120 bytes leftover after parsing attributes in process `syz.1.110'. [ 64.522429][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.527899][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.673788][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 64.808034][ T4412] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.916112][ T4750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 65.039925][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.045631][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.047966][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.050007][ T22] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 65.051584][ T22] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 65.055582][ T4412] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.061883][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.064056][ T22] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 65.072027][ T22] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 65.079552][ T4340] Bluetooth: hci4: Malformed LE Event: 0x1d [ 65.081384][ T22] usb 1-1: config 1 interface 1 has no altsetting 0 [ 65.086739][ T4699] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.088356][ T4699] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.091116][ T4699] device bridge_slave_0 entered promiscuous mode [ 65.099960][ T22] usb 1-1: string descriptor 0 read error: -22 [ 65.102407][ T22] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 65.105128][ T4699] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.106767][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.108560][ T4699] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.130146][ T4699] device bridge_slave_1 entered promiscuous mode [ 65.184300][ T4412] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.199630][ T4699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.210610][ T4699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.226752][ T4699] team0: Port device team_slave_0 added [ 65.229195][ T4699] team0: Port device team_slave_1 added [ 65.238514][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.239955][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.248686][ T4699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.251298][ T4699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.252643][ T4699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.257808][ T4699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.345886][ T4412] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.361487][ T4769] binder: 4768:4769 Acquire 1 refcount change on invalid ref 0 ret -22 [ 65.365291][ T4769] binder: 4768:4769 ioctl c0306201 20000080 returned -14 [ 65.414871][ T4699] device hsr_slave_0 entered promiscuous mode [ 65.470603][ T4699] device hsr_slave_1 entered promiscuous mode [ 65.513016][ T4699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.514403][ T4699] Cannot create hsr debugfs directory [ 65.719059][ T4699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 65.774425][ T4699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.794654][ T4699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.010067][ T4793] MPI: mpi too large (113288 bits) [ 66.026090][ T22] usb 1-1: USB disconnect, device number 5 [ 66.127097][ T4699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.295313][ T4699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.342584][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.345267][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.348187][ T4699] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.354183][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.358894][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.361427][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.362761][ T4584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.369540][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.374995][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.377077][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.378863][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.380179][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.382941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.438871][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.440771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.443516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.449431][ T4699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.451213][ T4699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.487321][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.489048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.495461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.500441][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.501969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.516713][ T4837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.518805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.520345][ T4837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.526886][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.527036][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.529769][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.530771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.535572][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.538730][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.269402][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.270916][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.277230][ T4699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.279959][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 68.281487][ T4880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.136'. [ 68.303378][ T4880] device geneve2 entered promiscuous mode [ 68.311665][ T4880] Zero length message leads to an empty skb [ 68.491490][ T4699] device veth0_vlan entered promiscuous mode [ 68.521276][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.522963][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.524503][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.526425][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.531669][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.537458][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.563845][ T4901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.570794][ T4901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.586671][ T4699] device veth1_vlan entered promiscuous mode [ 68.643230][ T4908] syz.0.142 uses obsolete (PF_INET,SOCK_PACKET) [ 68.882452][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.884237][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.887819][ T4699] device veth0_macvtap entered promiscuous mode [ 68.897646][ T4699] device veth1_macvtap entered promiscuous mode [ 68.957076][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.964116][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.968067][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.973211][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.979419][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.986835][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.991387][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.996587][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.999105][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.001200][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.005046][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.009275][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.010905][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.012482][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.015866][ T4882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.021750][ T4370] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 69.025509][ T4922] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 69.123442][ T4927] [U] [ 69.156190][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.158750][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.285871][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.287700][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.289191][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.292742][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.294259][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.295855][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.297499][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.299180][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.300708][ T4699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.302599][ T4699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.309119][ T4699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.311195][ T4926] netlink: 27 bytes leftover after parsing attributes in process `syz.0.146'. [ 69.314199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.315929][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.370707][ T4412] device hsr_slave_0 left promiscuous mode [ 69.413330][ T4412] device hsr_slave_1 left promiscuous mode [ 69.462837][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.464110][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.466002][ T4412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.467549][ T4412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.469473][ T4412] device bridge_slave_1 left promiscuous mode [ 69.472311][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.498771][ T4947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.501423][ T4947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.504368][ T4412] device bridge_slave_0 left promiscuous mode [ 69.505542][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.593368][ T14] cfg80211: failed to load regulatory.db [ 69.613022][ T4412] device veth1_macvtap left promiscuous mode [ 69.614179][ T4412] device veth0_macvtap left promiscuous mode [ 69.615280][ T4412] device veth1_vlan left promiscuous mode [ 69.616240][ T4412] device veth0_vlan left promiscuous mode [ 69.833524][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.835933][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.233335][ T4340] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 70.234927][ T4340] Bluetooth: hci4: Injecting HCI hardware error event [ 70.236749][ T4333] Bluetooth: hci4: hardware error 0x00 [ 71.664051][ T4412] team0 (unregistering): Port device team_slave_1 removed [ 71.826173][ T4412] team0 (unregistering): Port device team_slave_0 removed [ 71.983160][ T4412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.183309][ T4412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.472762][ T4333] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 72.952758][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 73.704639][ T4412] bond0 (unregistering): Released all slaves [ 73.995763][ T4699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.997226][ T4699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.998583][ T4699] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.999963][ T4699] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.157375][ T4445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.158614][ T4445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.159949][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.202843][ T4736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.204240][ T4736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.205810][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.374425][ T5001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.163'. [ 74.495631][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 74.641046][ T5033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.642619][ T5033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.672781][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 74.681966][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.686859][ T7] usb 1-1: config 4 has an invalid interface number: 127 but max is 0 [ 74.688408][ T7] usb 1-1: config 4 has no interface number 0 [ 74.689404][ T7] usb 1-1: config 4 interface 127 has no altsetting 0 [ 74.694417][ T5040] device syzkaller0 entered promiscuous mode [ 74.709979][ T7] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.40 [ 74.711912][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.713639][ T7] usb 1-1: Product: syz [ 74.716238][ T7] usb 1-1: SerialNumber: syz [ 74.942629][ T7] usb 1-1: USB disconnect, device number 6 [ 75.587880][ T5066] device syzkaller0 entered promiscuous mode [ 75.981726][ T5100] random: crng reseeded on system resumption [ 76.030624][ T5102] binder: 5101:5102 ERROR: BC_REGISTER_LOOPER called without request [ 76.036924][ T5102] binder: 5102 RLIMIT_NICE not set [ 76.088528][ T4372] binder: undelivered death notification, 0000000000000000 [ 76.155336][ T5108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.182'. [ 76.613798][ T5127] binder: 5126:5127 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 76.811759][ T5127] binder: 5127 RLIMIT_NICE not set [ 77.484267][ T7] kernel write not supported for file /bluetooth/6lowpan_control (pid: 7 comm: kworker/0:0) [ 77.530743][ T5161] device syzkaller0 entered promiscuous mode [ 77.646728][ T5166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.651398][ T5166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.036866][ T5172] lo speed is unknown, defaulting to 1000 [ 78.039686][ T5172] lo speed is unknown, defaulting to 1000 [ 78.041374][ T5172] lo speed is unknown, defaulting to 1000 [ 78.086698][ T2333] lo speed is unknown, defaulting to 1000 [ 78.092930][ T5172] infiniband syz2: set active [ 78.093942][ T5172] infiniband syz2: added lo [ 78.167563][ T5172] RDS/IB: syz2: added [ 78.169239][ T5172] smc: adding ib device syz2 with port count 1 [ 78.170496][ T5172] smc: ib device syz2 port 1 has pnetid [ 78.172328][ T4372] lo speed is unknown, defaulting to 1000 [ 78.175141][ T5172] lo speed is unknown, defaulting to 1000 [ 78.199329][ T5172] lo speed is unknown, defaulting to 1000 [ 78.548013][ T5172] lo speed is unknown, defaulting to 1000 [ 78.572860][ T5172] lo speed is unknown, defaulting to 1000 [ 78.592654][ T5172] lo speed is unknown, defaulting to 1000 [ 78.966858][ T5194] siw: device registration error -23 [ 78.969304][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.5.208'. [ 78.991234][ T5196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 79.047702][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 79.275067][ T5199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.279088][ T5199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.539736][ T5209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.215'. [ 79.988155][ T5214] xt_policy: output policy not valid in PREROUTING and INPUT [ 80.501017][ T4370] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 80.595684][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.598213][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.622037][ T5246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.624188][ T5246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.651450][ T5247] binder: 5242:5247 unknown command 1074553619 [ 80.652848][ T5247] binder: 5242:5247 ioctl c0306201 20000040 returned -22 [ 80.712763][ T4370] usb 1-1: Using ep0 maxpacket: 16 [ 80.714963][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.716687][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.718374][ T4370] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 80.719887][ T4370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.722527][ T4370] usb 1-1: config 0 descriptor?? [ 81.112734][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 81.385291][ T5266] Bluetooth: MGMT ver 1.22 [ 81.466464][ T27] audit: type=1326 audit(81.460:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5273 comm="syz.4.236" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f377b68 code=0x0 [ 81.520465][ T5271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.618398][ T5229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.632631][ T5229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.223943][ T5271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.249473][ T5271] mmap: syz.5.235 (5271) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.306852][ T4370] usbhid 1-1:0.0: can't add hid device: -71 [ 82.308128][ T4370] usbhid: probe of 1-1:0.0 failed with error -71 [ 82.316703][ T4370] usb 1-1: USB disconnect, device number 7 [ 82.365289][ T5283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.375217][ T5283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.540530][ T5289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.542048][ T5289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.458047][ T5322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.461159][ T5322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.521479][ T5330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.525397][ T5330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.532198][ T5330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.535908][ T5330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.538981][ T5330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.542263][ T5330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.935507][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 84.045057][ T4371] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 84.420429][ T4371] usb 1-1: not running at top speed; connect to a high speed hub [ 84.425274][ T4371] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 84.427387][ T4371] usb 1-1: config 1 interface 0 has no altsetting 0 [ 84.434040][ T4371] usb 1-1: New USB device found, idVendor=056a, idProduct=0101, bcdDevice= 0.40 [ 84.435871][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.438460][ T4371] usb 1-1: Product: 䏭굅﫚寤猻给즱㪩隇趶훹ጵ띹⚌뎆썃옌㳩抓눼㪿鿠鿇ፂ蕓볮뒋ﳮ违妡뤵椄熟ㄤ≭卼 [ 84.451289][ T4371] usb 1-1: Manufacturer: 错侊ᠦ顖눔ⶫ呀⡛荑뗽뎶展벺㻃줔⥍⟲춬⥺翧삻ꚿ晆➷ﱣ㝭饠짊莱槸釫騮쟅␁㽺籹간芄⏫ꇚ뷑䁳ﳧឯ㾯톅㎺孾䚻쵕䲘嵠後甹懮䃂⇢ꩭ経䣏ಪ䓷릜໦濈樓官䆊⚎兿黎㨮䵩窉 [ 84.472136][ T4371] usb 1-1: SerialNumber: ᰉ [ 84.488537][ T5341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.512427][ T5360] xt_nfacct: accounting object `syz1' does not exist [ 84.580105][ T5357] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 84.581251][ T5357] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.586574][ T5357] vhci_hcd vhci_hcd.0: Device attached [ 84.708114][ T4371] usbhid 1-1:1.0: can't add hid device: -71 [ 84.709969][ T4371] usbhid: probe of 1-1:1.0 failed with error -71 [ 84.718411][ T4371] usb 1-1: USB disconnect, device number 8 [ 84.783813][ T4370] vhci_hcd: vhci_device speed not set [ 84.855915][ T4370] usb 12-1: new full-speed USB device number 2 using vhci_hcd [ 84.910574][ T5358] vhci_hcd: connection reset by peer [ 84.912326][ T319] vhci_hcd: stop threads [ 84.913435][ T319] vhci_hcd: release socket [ 84.920978][ T319] vhci_hcd: disconnect device [ 85.564332][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.569736][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.043878][ T5388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.045547][ T5388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.055976][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.063120][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.362663][ C1] sched: RT throttling activated [ 87.575879][ T5411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 87.577420][ T5411] bridge: RTM_NEWNEIGH with invalid ether address [ 87.608219][ T5411] netlink: 75 bytes leftover after parsing attributes in process `syz.0.272'. [ 87.609708][ T5411] bridge: RTM_NEWNEIGH with invalid ether address [ 87.663821][ T5411] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 87.995758][ T5430] overlayfs: missing 'lowerdir' [ 88.733754][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 88.741411][ T5456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.743793][ T5456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.942878][ T4371] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.944676][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 89.110507][ T4371] usb 1-1: device descriptor read/64, error -32 [ 89.483724][ T4371] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 89.541342][ T5478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.544922][ T5478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.682718][ T4371] usb 1-1: Using ep0 maxpacket: 8 [ 89.687466][ T4371] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 89.689357][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.690849][ T4371] usb 1-1: Product: syz [ 89.691651][ T4371] usb 1-1: Manufacturer: syz [ 89.692576][ T4371] usb 1-1: SerialNumber: syz [ 89.698398][ T4371] usb 1-1: config 0 descriptor?? [ 89.704264][ T4371] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 89.709343][ T4371] dvb-usb: bulk message failed: -22 (2/0) [ 89.720887][ T4371] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 89.726934][ T4371] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 89.728877][ T4371] usb 1-1: media controller created [ 89.738615][ T4371] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.932772][ T4371] cxusb: set interface failed [ 89.933688][ T4371] dvb-usb: bulk message failed: -22 (1/0) [ 89.965697][ T4371] DVB: Unable to find symbol mt352_attach() [ 89.966792][ T4371] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 89.968764][ T4371] Registered IR keymap rc-dvico-portable [ 89.971738][ T4371] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 89.979801][ T4371] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input3 [ 89.989506][ T4371] dvb-usb: schedule remote query interval to 100 msecs. [ 89.991801][ T4371] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 89.993673][ T4370] vhci_hcd: vhci_device speed not set [ 90.006241][ T4371] usb 1-1: USB disconnect, device number 10 [ 90.822642][ T4371] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 91.231336][ T5540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.247801][ T5540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.426685][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.429355][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.457868][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 91.695157][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 91.892711][ T4371] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 92.079240][ T4371] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 92.080803][ T4371] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.082404][ T4371] usb 1-1: config 0 has no interfaces? [ 92.083972][ T4371] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 92.086790][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.097194][ T5584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.098812][ T4371] usb 1-1: config 0 descriptor?? [ 92.101920][ T5584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.195523][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.197108][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.084230][ T5596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.303'. [ 93.091019][ T4333] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 93.122043][ T5600] binder: 5599:5600 tried to acquire reference to desc 0, got 1 instead [ 93.125394][ T5600] binder: 5599:5600 got transaction with fd, 1, but target does not allow fds [ 93.127146][ T5600] binder: 5600:5599 translate fd failed [ 93.128448][ T5600] binder: 5599:5600 transaction call to 5599:0 failed 9/29201/-1, size 104-24 line 3415 [ 93.130966][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.347210][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.348736][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.079065][ T5622] syz.2.314 sent an empty control message without MSG_MORE. [ 94.440731][ T4371] usb 1-1: USB disconnect, device number 11 [ 95.998212][ T5652] overlayfs: overlapping lowerdir path [ 96.379686][ T4370] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 96.472766][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 97.249094][ T5659] netlink: 120 bytes leftover after parsing attributes in process `syz.2.325'. [ 97.402805][ T4370] usb 1-1: Using ep0 maxpacket: 16 [ 97.693002][ T4370] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.695027][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.696992][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.698740][ T4370] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.701458][ T4370] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.707244][ T4370] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 97.709227][ T4370] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.710779][ T4370] usb 1-1: Manufacturer: syz [ 97.719572][ T4370] usb 1-1: config 0 descriptor?? [ 97.972469][ T4370] Registered IR keymap rc-hauppauge [ 98.072756][ T4370] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 98.074615][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.363769][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.509787][ T4370] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 98.687840][ T4370] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4 [ 98.696742][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.698514][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.709609][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.733069][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.772737][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.805170][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.833027][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.862813][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.902772][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.932890][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.962944][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.970310][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.971755][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.002793][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.034093][ T4370] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 99.035565][ T4370] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.041006][ T4370] usb 1-1: USB disconnect, device number 12 [ 99.058396][ T5695] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 99.064764][ T5695] netlink: 244 bytes leftover after parsing attributes in process `syz.1.337'. [ 99.434969][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.436727][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.660062][ T5707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.669193][ T5707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.878520][ T5717] device syzkaller1 entered promiscuous mode [ 100.161033][ T5731] binder: 5730:5731 ioctl c0306201 0 returned -14 [ 100.181798][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 100.183414][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 100.187896][ T5733] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.189581][ T5733] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.191169][ T5733] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.192583][ T5733] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.196931][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 100.199127][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'. [ 100.724730][ T5742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.726487][ T5742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.768065][ T5747] device syzkaller0 entered promiscuous mode [ 101.035361][ T5753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.037779][ T5753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.051868][ T5758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.053697][ T5758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.225151][ T5773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.226748][ T5773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.659296][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.661228][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.145679][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.145785][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.688005][ T5803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.689847][ T5803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.750594][ T5811] overlayfs: failed to resolve './file2': -2 [ 102.757567][ T5811] overlayfs: overlapping lowerdir path [ 102.992992][ T4371] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 103.324992][ T4371] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 103.327190][ T4371] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 103.331522][ T4371] usb 1-1: string descriptor 0 read error: -22 [ 103.333155][ T4371] usb 1-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 103.335056][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.340583][ T4371] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 103.346830][ T4371] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 103.361111][ T5536] udevd[5536]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.740077][ T27] audit: type=1326 audit(103.730:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5804 comm="syz.0.381" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff86577b68 code=0x0 [ 105.184271][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.185921][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.711039][ T5827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.715217][ T5827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.736048][ T4371] usb 1-1: USB disconnect, device number 13 [ 113.663061][ T5815] netlink: 'syz.5.384': attribute type 3 has an invalid length. [ 113.753457][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 113.782513][ T5847] xt_nfacct: accounting object `syz1' does not exist [ 115.128477][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.139408][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.186302][ T5872] device dummy0 entered promiscuous mode [ 115.188035][ T5872] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 115.189619][ T5872] netlink: 756 bytes leftover after parsing attributes in process `syz.0.405'. [ 115.191499][ T5871] device dummy0 left promiscuous mode [ 115.673302][ T5897] tipc: Started in network mode [ 115.674197][ T5897] tipc: Node identity b650fbfb74ba, cluster identity 4711 [ 115.675387][ T5897] tipc: Enabled bearer , priority 0 [ 115.698746][ T5897] device syzkaller0 entered promiscuous mode [ 115.705826][ T5897] tipc: Resetting bearer [ 115.713539][ T5895] tipc: Resetting bearer [ 116.593289][ T5930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.594776][ T5930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.913274][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.914479][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.552758][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 126.786609][ T5895] tipc: Disabling bearer [ 126.812733][ T4371] tipc: Node number set to 3270179835 [ 126.952018][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 127.261301][ T5980] netlink: 32 bytes leftover after parsing attributes in process `syz.5.436'. [ 128.014159][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.017046][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.092778][ T4372] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 128.220471][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.221905][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.253237][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.254856][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.282754][ T4372] usb 1-1: Using ep0 maxpacket: 8 [ 128.288021][ T4372] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 128.289641][ T4372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.291185][ T4372] usb 1-1: Product: syz [ 128.291830][ T4372] usb 1-1: Manufacturer: syz [ 128.293000][ T4372] usb 1-1: SerialNumber: syz [ 128.294799][ T4372] usb 1-1: config 0 descriptor?? [ 128.297153][ T4372] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 128.357623][ T5998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 128.426336][ T6004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.428586][ T6004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.807110][ T6015] tipc: Failed to remove unknown binding: 66,0,0/0:769478975/769478976 [ 129.222167][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.229667][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.501144][ T6051] device syzkaller0 entered promiscuous mode [ 129.575758][ T4372] usb 1-1: USB disconnect, device number 14 [ 130.024246][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.030711][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.959388][ T6123] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 131.964497][ T6126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.969595][ T6123] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 131.969608][ T6126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.064252][ T6134] Bluetooth: MGMT ver 1.22 [ 132.656148][ T6150] block nbd1: shutting down sockets [ 132.760540][ T6153] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 133.063405][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.070864][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.180226][ C1] vcan0: j1939_tp_rxtimer: 0x00000000ae25faa5: rx timeout, send abort [ 133.182450][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000ae25faa5: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 133.658997][ T6175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.666901][ T6175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.722095][ T6174] 0xfffffffffffffffd-0x000000020000 : "" [ 133.724271][ T6174] mtd: partition "" is out of reach -- disabled [ 133.745678][ T6174] ftl_cs: FTL header not found. [ 133.837405][ T6181] device syzkaller0 entered promiscuous mode [ 133.893975][ T6181] tipc: Started in network mode [ 133.894796][ T6181] tipc: Node identity 8ef682dc2eec, cluster identity 4711 [ 133.896451][ T6181] tipc: Enabled bearer , priority 0 [ 133.945563][ T6180] tipc: Resetting bearer [ 134.033982][ T6180] tipc: Disabling bearer [ 134.256005][ T6205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.260054][ T6205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.836058][ T6224] lo speed is unknown, defaulting to 1000 [ 134.982872][ T5526] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 135.218965][ T6229] netem: change failed [ 135.309221][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.311630][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.372797][ T5526] usb 1-1: Using ep0 maxpacket: 8 [ 135.375294][ T5526] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.377069][ T5526] usb 1-1: config 179 has no interface number 0 [ 135.378251][ T5526] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.382580][ T5526] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.387047][ T5526] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.389949][ T5526] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 135.392135][ T5526] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.394812][ T5526] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.396667][ T5526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.410640][ T6219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 135.413850][ T5526] xpad: probe of 1-1:179.65 failed with error -5 [ 135.939647][ T3900] usb 1-1: USB disconnect, device number 15 [ 135.994512][ T6254] overlayfs: upper fs does not support file handles, falling back to index=off. [ 136.115820][ T6267] binder: 6266:6267 tried to acquire reference to desc 0, got 1 instead [ 136.117574][ T6267] binder: 6266:6267 got transaction with out-of-order buffer fixup [ 136.119035][ T6267] binder: 6267:6266 failed to fixup parent [ 136.120257][ T6267] binder: 6266:6267 transaction async to 6266:0 failed 14/29201/-22, size 104-24 line 3540 [ 136.122468][ T4372] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.156701][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.163529][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.168542][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.540'. [ 136.170407][ T6274] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 136.839092][ T6296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.841986][ T6296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.256042][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.258939][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.272797][ T4340] Bluetooth: hci2: command 0x0406 tx timeout [ 138.450752][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.460942][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.570053][ T6335] binder: 6334:6335 tried to acquire reference to desc 0, got 1 instead [ 138.576518][ T6335] binder: 6334:6335 got transaction with too large buffer [ 138.580262][ T6335] binder: 6334:6335 transaction async to 6334:0 failed 19/29201/-22, size 88-24 line 3504 [ 138.584697][ T3900] binder: undelivered TRANSACTION_ERROR: 29201 [ 138.640568][ T6337] tmpfs: Bad value for 'uid' [ 139.329277][ T6368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.331400][ T6368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.365083][ T6368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.881762][ T6380] netlink: 188 bytes leftover after parsing attributes in process `syz.0.574'. [ 139.883415][ T6380] netlink: 92 bytes leftover after parsing attributes in process `syz.0.574'. [ 140.552723][ T4333] Bluetooth: hci2: command 0x0401 tx timeout [ 141.435739][ T6440] block device autoloading is deprecated and will be removed. [ 143.046889][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.049275][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.266162][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.268693][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.343937][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.346186][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.439613][ T6543] device ip6gre1 entered promiscuous mode [ 143.858655][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.860263][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.053296][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 144.058849][ T6562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.158531][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.162474][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.165430][ T2333] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 144.175829][ T6566] bond0: Error: Cannot enslave bond to itself. [ 144.573439][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.590360][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.008785][ T2333] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 145.010454][ T2333] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.012177][ T2333] usb 1-1: config 0 has no interfaces? [ 145.013479][ T2333] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 145.015111][ T2333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.024459][ T2333] usb 1-1: config 0 descriptor?? [ 145.149885][ T6581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.151355][ T6581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.180612][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.182315][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.902210][ T6630] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 147.101262][ T2333] usb 1-1: string descriptor 0 read error: -71 [ 147.106582][ T2333] usb 1-1: USB disconnect, device number 16 [ 147.889856][ T6657] device syzkaller0 entered promiscuous mode [ 148.379576][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.646'. [ 149.571806][ T6680] random: crng reseeded on system resumption [ 150.472652][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.484181][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.687465][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.689056][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.880796][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.660'. [ 150.919243][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.935230][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.419769][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.421587][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.866025][ T6723] device syzkaller0 entered promiscuous mode [ 153.060946][ T6748] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.676'. [ 154.041612][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.045425][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.367009][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.368983][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.892132][ T6787] usb usb8: usbfs: process 6787 (syz.5.691) did not claim interface 0 before use [ 155.208431][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.211001][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.569150][ T6813] device syzkaller0 entered promiscuous mode [ 164.617208][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.618981][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.645343][ T6833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.646903][ T6833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.828378][ T6830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.830170][ T6830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.176658][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.178239][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.676587][ T6847] netlink: 104 bytes leftover after parsing attributes in process `syz.4.708'. [ 172.606384][ T4333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.608688][ T4333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.610169][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.611875][ T4333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.613814][ T4333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.616896][ T4333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.626701][ T4340] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.627970][ T4340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.629180][ T4340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.631052][ T4340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.632432][ T4340] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.635736][ T4340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.712717][ T4340] Bluetooth: hci1: command 0x0409 tx timeout [ 176.792739][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 177.267224][ T6840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.706'. [ 177.328927][ T6870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.347995][ T6870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.399966][ T6854] lo speed is unknown, defaulting to 1000 [ 177.500224][ T6885] input: syz1 as /devices/virtual/input/input5 [ 177.510540][ T6887] binder: 6886:6887 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 177.518323][ T6887] binder: 6886:6887 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 177.519730][ T6887] binder: 6886:6887 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 177.543044][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 177.587071][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.588321][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.589961][ T6854] device bridge_slave_0 entered promiscuous mode [ 177.592996][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.594522][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.601174][ T6854] device bridge_slave_1 entered promiscuous mode [ 177.607397][ T6892] device syzkaller0 entered promiscuous mode [ 177.617227][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.619792][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.628662][ T6854] team0: Port device team_slave_0 added [ 177.630512][ T6854] team0: Port device team_slave_1 added [ 177.649720][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.722'. [ 177.683031][ T6898] device syzkaller0 entered promiscuous mode [ 177.685619][ T6898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.903168][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.945223][ T6107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.950780][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.951867][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.956764][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.466061][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.467338][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.471253][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.487068][ T6910] device syzkaller0 entered promiscuous mode [ 178.534025][ T6107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.563415][ T6920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.564944][ T6920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.872834][ T4340] Bluetooth: hci1: command 0x040f tx timeout [ 179.557599][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.560976][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.927996][ T6940] [ 179.928449][ T6940] ====================================================== [ 179.929684][ T6940] WARNING: possible circular locking dependency detected [ 179.930920][ T6940] syzkaller #0 Not tainted [ 179.931690][ T6940] ------------------------------------------------------ [ 179.932926][ T6940] syz.0.731/6940 is trying to acquire lock: [ 179.933944][ T6940] ffff80001c990478 (nfnl_subsys_ipset){+.+.}-{3:3}, at: nfnl_lock+0x50/0x78 [ 179.935389][ T6940] [ 179.935389][ T6940] but task is already holding lock: [ 179.936662][ T6940] ffff0000c305acb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x44/0x120 [ 179.938343][ T6940] [ 179.938343][ T6940] which lock already depends on the new lock. [ 179.938343][ T6940] [ 179.940137][ T6940] [ 179.940137][ T6940] the existing dependency chain (in reverse order) is: [ 179.941652][ T6940] [ 179.941652][ T6940] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 179.943044][ T6940] __mutex_lock_common+0x1a0/0x1f3c [ 179.943968][ T6940] mutex_lock_nested+0x38/0x44 [ 179.944851][ T6940] nf_tables_dumpreset_obj+0x78/0xa8 [ 179.945859][ T6940] netlink_dump+0x538/0xaf8 [ 179.946704][ T6940] __netlink_dump_start+0x478/0x694 [ 179.947665][ T6940] nft_netlink_dump_start_rcu+0xec/0x1a8 [ 179.948707][ T6940] nf_tables_getobj_reset+0x188/0x524 [ 179.949725][ T6940] nfnetlink_rcv_msg+0x710/0xf88 [ 179.950630][ T6940] netlink_rcv_skb+0x220/0x3ec [ 179.951531][ T6940] nfnetlink_rcv+0x210/0x1c54 [ 179.952450][ T6940] netlink_unicast+0x5fc/0x80c [ 179.953333][ T6940] netlink_sendmsg+0x6f0/0x9d8 [ 179.954225][ T6940] ____sys_sendmsg+0x588/0x90c [ 179.955168][ T6940] __sys_sendmsg+0x288/0x374 [ 179.955999][ T6940] __arm64_sys_sendmsg+0x80/0x94 [ 179.956925][ T6940] invoke_syscall+0x98/0x290 [ 179.957811][ T6940] el0_svc_common+0x13c/0x258 [ 179.958623][ T6940] do_el0_svc+0x5c/0x134 [ 179.959431][ T6940] el0_svc+0x58/0x128 [ 179.960176][ T6940] el0t_64_sync_handler+0x84/0xf0 [ 179.961104][ T6940] el0t_64_sync+0x18c/0x190 [ 179.961940][ T6940] [ 179.961940][ T6940] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 179.963314][ T6940] __mutex_lock_common+0x1a0/0x1f3c [ 179.964305][ T6940] mutex_lock_nested+0x38/0x44 [ 179.965145][ T6940] __netlink_dump_start+0x104/0x694 [ 179.966102][ T6940] ip_set_dump+0x134/0x1bc [ 179.966906][ T6940] nfnetlink_rcv_msg+0xaac/0xf88 [ 179.967823][ T6940] netlink_rcv_skb+0x220/0x3ec [ 179.968751][ T6940] nfnetlink_rcv+0x210/0x1c54 [ 179.969643][ T6940] netlink_unicast+0x5fc/0x80c [ 179.970505][ T6940] netlink_sendmsg+0x6f0/0x9d8 [ 179.971465][ T6940] ____sys_sendmsg+0x588/0x90c [ 179.972358][ T6940] __sys_sendmsg+0x288/0x374 [ 179.973194][ T6940] __arm64_sys_sendmsg+0x80/0x94 [ 179.974199][ T6940] invoke_syscall+0x98/0x290 [ 179.975125][ T6940] el0_svc_common+0x13c/0x258 [ 179.976039][ T6940] do_el0_svc+0x5c/0x134 [ 179.976894][ T6940] el0_svc+0x58/0x128 [ 179.977674][ T6940] el0t_64_sync_handler+0x84/0xf0 [ 179.978657][ T6940] el0t_64_sync+0x18c/0x190 [ 179.979525][ T6940] [ 179.979525][ T6940] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 179.980885][ T6940] __lock_acquire+0x27c8/0x6610 [ 179.981830][ T6940] lock_acquire+0x20c/0x638 [ 179.982668][ T6940] __mutex_lock_common+0x1a0/0x1f3c [ 179.983659][ T6940] mutex_lock_nested+0x38/0x44 [ 179.984532][ T6940] nfnl_lock+0x50/0x78 [ 179.985336][ T6940] ip_set_nfnl_get_byindex+0x7c/0x248 [ 179.986314][ T6940] set_match_v1_checkentry+0x74/0x224 [ 179.987404][ T6940] xt_check_match+0x3d8/0xa54 [ 179.988298][ T6940] __nft_match_init+0x50c/0x6dc [ 179.989237][ T6940] nft_match_init+0x38/0x4c [ 179.990215][ T6940] nf_tables_newrule+0x11b8/0x1be4 [ 179.991192][ T6940] nfnetlink_rcv+0xc7c/0x1c54 [ 179.992096][ T6940] netlink_unicast+0x5fc/0x80c [ 179.992995][ T6940] netlink_sendmsg+0x6f0/0x9d8 [ 179.993909][ T6940] ____sys_sendmsg+0x588/0x90c [ 179.994823][ T6940] __sys_sendmsg+0x288/0x374 [ 179.995665][ T6940] __arm64_sys_sendmsg+0x80/0x94 [ 179.996567][ T6940] invoke_syscall+0x98/0x290 [ 179.997510][ T6940] el0_svc_common+0x13c/0x258 [ 179.998359][ T6940] do_el0_svc+0x5c/0x134 [ 179.999172][ T6940] el0_svc+0x58/0x128 [ 179.999908][ T6940] el0t_64_sync_handler+0x84/0xf0 [ 180.000783][ T6940] el0t_64_sync+0x18c/0x190 [ 180.001651][ T6940] [ 180.001651][ T6940] other info that might help us debug this: [ 180.001651][ T6940] [ 180.003368][ T6940] Chain exists of: [ 180.003368][ T6940] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 180.003368][ T6940] [ 180.005829][ T6940] Possible unsafe locking scenario: [ 180.005829][ T6940] [ 180.007044][ T6940] CPU0 CPU1 [ 180.007893][ T6940] ---- ---- [ 180.008804][ T6940] lock(&nft_net->commit_mutex); [ 180.009640][ T6940] lock(nlk_cb_mutex-NETFILTER); [ 180.010918][ T6940] lock(&nft_net->commit_mutex); [ 180.012410][ T6940] lock(nfnl_subsys_ipset); [ 180.013327][ T6940] [ 180.013327][ T6940] *** DEADLOCK *** [ 180.013327][ T6940] [ 180.014631][ T6940] 1 lock held by syz.0.731/6940: [ 180.015399][ T6940] #0: ffff0000c305acb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x44/0x120 [ 180.017128][ T6940] [ 180.017128][ T6940] stack backtrace: [ 180.018082][ T6940] CPU: 0 PID: 6940 Comm: syz.0.731 Not tainted syzkaller #0 [ 180.019263][ T6940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 180.020851][ T6940] Call trace: [ 180.021384][ T6940] dump_backtrace+0x1c4/0x1f0 [ 180.022138][ T6940] show_stack+0x2c/0x3c [ 180.022805][ T6940] __dump_stack+0x30/0x40 [ 180.023516][ T6940] dump_stack_lvl+0xf4/0x15c [ 180.024278][ T6940] dump_stack+0x1c/0x5c [ 180.024999][ T6940] print_circular_bug+0x148/0x1b0 [ 180.025859][ T6940] check_noncircular+0x264/0x2f8 [ 180.026695][ T6940] __lock_acquire+0x27c8/0x6610 [ 180.027582][ T6940] lock_acquire+0x20c/0x638 [ 180.028415][ T6940] __mutex_lock_common+0x1a0/0x1f3c [ 180.029313][ T6940] mutex_lock_nested+0x38/0x44 [ 180.030118][ T6940] nfnl_lock+0x50/0x78 [ 180.030790][ T6940] ip_set_nfnl_get_byindex+0x7c/0x248 [ 180.031685][ T6940] set_match_v1_checkentry+0x74/0x224 [ 180.032593][ T6940] xt_check_match+0x3d8/0xa54 [ 180.033394][ T6940] __nft_match_init+0x50c/0x6dc [ 180.034242][ T6940] nft_match_init+0x38/0x4c [ 180.034974][ T6940] nf_tables_newrule+0x11b8/0x1be4 [ 180.035843][ T6940] nfnetlink_rcv+0xc7c/0x1c54 [ 180.036620][ T6940] netlink_unicast+0x5fc/0x80c [ 180.037403][ T6940] netlink_sendmsg+0x6f0/0x9d8 [ 180.038187][ T6940] ____sys_sendmsg+0x588/0x90c [ 180.039006][ T6940] __sys_sendmsg+0x288/0x374 [ 180.039797][ T6940] __arm64_sys_sendmsg+0x80/0x94 [ 180.040695][ T6940] invoke_syscall+0x98/0x290 [ 180.041460][ T6940] el0_svc_common+0x13c/0x258 [ 180.042255][ T6940] do_el0_svc+0x5c/0x134 [ 180.042954][ T6940] el0_svc+0x58/0x128 [ 180.043573][ T6940] el0t_64_sync_handler+0x84/0xf0 [ 180.044389][ T6940] el0t_64_sync+0x18c/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 180.060639][ T6940] Cannot find set identified by id 0 to match [ 180.952688][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 187.353163][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.354276][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.894201][ T6107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0