last executing test programs: 2m41.2635113s ago: executing program 3 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m40.346783118s ago: executing program 3 (id=927): syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r3) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001640)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f383163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b3107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1066) 2m39.464793765s ago: executing program 3 (id=932): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1) 2m39.398870636s ago: executing program 3 (id=933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r3) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2m28.424968376s ago: executing program 1 (id=960): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)={[], [], 0x2f}) readv(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000300), 0x805080, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}, 0x5c}]}) r6 = memfd_create(0x0, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)=[{&(0x7f0000001380)={0x184, 0x33, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x6, 0x141, 0x0, 0x0, @str='#\x00'}, @nested={0x161, 0x1c, 0x0, 0x1, [@generic="25d88f155f8518e52e33bd67f084e2b63470611d4a974d66da5e80648c79ae61f22de355ed979d9188830a43367feeb6428e1fd0dd717f64297f087f4b7d243e418ceec14d8694d3560d6b2107ed809786248d8597a1fccecb081d530f1eee22fe14dfad862e5caf0bc1853780c047022d25327483fcc3dfc29294ed0c62bbce18ddb2a38765cf5be0ee378b56917c2a059ce9a37bae010610ba4352c80412df5311304563364a80d1df6c778a60581c79c6943248d3aaeb3807da51", @generic, @nested={0x4, 0x96}, @nested={0x4, 0x77}, @generic="3792baba8eb38cae711294db8b63f15ff5e117a791777784fa52171df69e58a5397d67e7b6fbeda1f87fb6ef23ca7c3f8d227dc3a90778f70bb11bf083771e9880be44fe7d4d1b239334aef22e6e", @nested={0x4, 0xfe}, @typed={0x8, 0x40, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="a614211128119fd5a870fddcb3e684a7892305b8419184d4a39a7572688fb7d87ee6e7b76d22fce4ea2c6bc7383db9f955422641b4af7ea10c6b2c482d3745"]}, @generic, @typed={0x8, 0x107, 0x0, 0x0, @pid=r3}]}, 0x184}, {&(0x7f0000000740)={0x10, 0x22, 0x2, 0x70bd27, 0x25dfdbfd}, 0x10}, {0x0}, {0x0}], 0x4, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r2]}}], 0x40}, 0x4050) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x2a, 0x6, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r9 = fsopen(&(0x7f0000000240)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x1) 2m27.911217467s ago: executing program 0 (id=961): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r3 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) 2m27.506895024s ago: executing program 1 (id=962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406c256d00dc950012000109022400010000000009041000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) 2m27.038432503s ago: executing program 0 (id=963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x58}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 2m27.017018154s ago: executing program 1 (id=964): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) 2m26.375483156s ago: executing program 3 (id=965): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 2m26.205584679s ago: executing program 2 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) 2m26.124912021s ago: executing program 1 (id=968): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) 2m26.122224881s ago: executing program 0 (id=969): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0xf0}, 0x0) 2m26.092407841s ago: executing program 0 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 2m25.994883264s ago: executing program 2 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000008600000008000300", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 2m25.886287265s ago: executing program 2 (id=973): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r3 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) 2m25.242849098s ago: executing program 1 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x80000001, 0x1, {0x1, 0x180, 0x4, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fc, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r8, r8, &(0x7f0000000080)=0x2, 0x7f03) 2m25.193993829s ago: executing program 0 (id=975): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8000) sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 2m24.641234369s ago: executing program 3 (id=977): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 2m24.522888211s ago: executing program 0 (id=978): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 2m24.437630584s ago: executing program 2 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x58}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 2m24.342610575s ago: executing program 1 (id=980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m23.55611467s ago: executing program 2 (id=981): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 2m23.459341022s ago: executing program 2 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}}, 0x14}, 0x1, 0xf0}, 0x0) 2m9.590239458s ago: executing program 32 (id=977): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 2m9.215510695s ago: executing program 33 (id=978): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 2m9.181985016s ago: executing program 34 (id=980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m8.128495816s ago: executing program 35 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r1, 0x303, 0x70bd2a, 0x25dfdbfb, {0xa}}, 0x14}, 0x1, 0xf0}, 0x0) 6.491382436s ago: executing program 7 (id=1323): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040801) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x7) syz_open_dev$video4linux(&(0x7f0000002300), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, &(0x7f0000000200)) fsopen(&(0x7f0000000440)='ext2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_disconnect(r0) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 6.141729192s ago: executing program 5 (id=1325): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 6.015929115s ago: executing program 5 (id=1327): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x80000001, 0x1, {0x1, 0x180, 0x4, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fc, 0x1}}, {0x0, 0x11}}}, 0xa0) 5.24757513s ago: executing program 8 (id=1329): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 4.840520678s ago: executing program 5 (id=1332): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040801) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x7) r4 = syz_open_dev$video4linux(&(0x7f0000002300), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0205649, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000380)) fsopen(&(0x7f0000000440)='ext2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x786c0, 0x0) syz_usb_disconnect(r0) r5 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 4.426924896s ago: executing program 8 (id=1335): ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x8902, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.540609763s ago: executing program 8 (id=1337): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 3.491200503s ago: executing program 4 (id=1338): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030880"], 0x40}, 0x1, 0x7}, 0x0) 3.477522054s ago: executing program 8 (id=1339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 3.443992024s ago: executing program 7 (id=1341): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 3.17296335s ago: executing program 4 (id=1342): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x80000001, 0x1, {0x1, 0x180, 0x4, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fc, 0x1}}, {0x0, 0x11}}}, 0xa0) 2.592765871s ago: executing program 8 (id=1343): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x69, 0x3}}]}, 0xa0}}, 0x0) 2.559797811s ago: executing program 6 (id=1344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r2, r0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 2.514157212s ago: executing program 6 (id=1345): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0) 2.513066823s ago: executing program 7 (id=1346): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 2.489640593s ago: executing program 6 (id=1347): ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x8902, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.197025838s ago: executing program 4 (id=1348): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mprotect(&(0x7f0000953000/0x3000)=nil, 0x3000, 0xb) 1.770820407s ago: executing program 5 (id=1349): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 1.765167557s ago: executing program 5 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = getpid() r6 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r5, 0x0, 0x7fff, 'syz1\x00', 0x0}) 1.736645077s ago: executing program 8 (id=1351): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040801) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x7) syz_open_dev$video4linux(&(0x7f0000002300), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, &(0x7f0000000200)) fsopen(&(0x7f0000000440)='ext2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_disconnect(r0) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 1.681381808s ago: executing program 7 (id=1352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) 1.619020889s ago: executing program 6 (id=1353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 942.662772ms ago: executing program 4 (id=1354): syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) 865.277554ms ago: executing program 5 (id=1355): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket(0x2c, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r2) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r3) 830.150195ms ago: executing program 4 (id=1356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r2, r0, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 725.697146ms ago: executing program 6 (id=1357): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) 670.848698ms ago: executing program 4 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x80000001, 0x1, {0x1, 0x180, 0x4, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fc, 0x1}}, {0x0, 0x11}}}, 0xa0) 603.278419ms ago: executing program 6 (id=1359): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040801) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x7) r4 = syz_open_dev$video4linux(&(0x7f0000002300), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0205649, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, 0x0, &(0x7f0000000380)) fsopen(&(0x7f0000000440)='ext2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x786c0, 0x0) syz_usb_disconnect(r0) r5 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) close_range(r5, 0xffffffffffffffff, 0x0) 40.97854ms ago: executing program 7 (id=1360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, r0, 0x2) socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xe, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000810) 0s ago: executing program 7 (id=1361): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x69, 0x3}}]}, 0xa4}}, 0x0) kernel console output (not intermixed with test programs): nded to keep mac addresses unique to avoid problems! [ 35.524053][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.525630][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.527116][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.528614][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.531049][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.534042][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.535286][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.539408][ T4323] device veth1_macvtap entered promiscuous mode [ 35.540938][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.542920][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.544395][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.546037][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.566912][ T4324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.568327][ T4324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.571034][ T4324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.572449][ T4324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.582385][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.584114][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.585759][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.587266][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.588793][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.595632][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.597172][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.598774][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.601853][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.603037][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.606150][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.625122][ T1620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.626431][ T1620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.628173][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.631527][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.633234][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.634700][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.636229][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.637661][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.641965][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.643597][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.645674][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.648041][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.653194][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.654803][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.678873][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.681316][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.682801][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.684169][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.721227][ T1620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.722586][ T1620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.724273][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.726362][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.727949][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.731390][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.751099][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.752470][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.754195][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.766770][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.768124][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.770055][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.783994][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.785200][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.081402][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.099327][ T1620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.100799][ T1620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.102845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.113705][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.115361][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.117155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.178389][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.181425][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.431387][ T4460] random: crng reseeded on system resumption [ 37.021911][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 37.022882][ T4336] Bluetooth: hci0: command 0x041b tx timeout [ 37.023866][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 37.038215][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 37.039598][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 37.103908][ T4466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.105432][ T4466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.139764][ T4459] ceph: No mds server is up or the cluster is laggy [ 37.141489][ T4396] libceph: connect (1)[c::]:6789 error -101 [ 37.141868][ T4396] libceph: mon0 (1)[c::]:6789 connect error [ 37.168559][ T4473] binder: tried to use weak ref as strong ref [ 37.168585][ T4473] binder: 4472:4473 Acquire 1 refcount change on invalid ref 0 ret -22 [ 37.168681][ T4473] binder: 4472:4473 got transaction to invalid handle, 1 [ 37.168702][ T4473] binder: 4473:4472 cannot find target node [ 37.168709][ T4473] binder: 4472:4473 transaction async to 0:0 failed 3/29201/-22, size 0-77 line 3054 [ 37.168968][ T4311] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.669248][ T4330] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.967629][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.969812][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.971448][ T4330] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 37.974253][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.978221][ T4330] usb 1-1: config 0 descriptor?? [ 37.982871][ T4509] device syzkaller0 entered promiscuous mode [ 38.608580][ T4519] Bluetooth: MGMT ver 1.22 [ 39.021994][ T4330] usb 1-1: string descriptor 0 read error: -22 [ 39.044803][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 39.045863][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 39.046931][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 39.074985][ T4522] random: crng reseeded on system resumption [ 39.141015][ T4334] Bluetooth: hci1: command 0x040f tx timeout [ 39.146289][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 39.416472][ T4330] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 39.536433][ T4533] netlink: 64 bytes leftover after parsing attributes in process `syz.3.26'. [ 39.635725][ T4543] binder: 4542:4543 unknown command 0 [ 39.641622][ T4543] binder: 4542:4543 ioctl c0306201 20000080 returned -22 [ 39.710483][ T4543] binder: 4542:4543 tried to acquire reference to desc 0, got 1 instead [ 39.712592][ T4543] binder: 4542:4543 got transaction with invalid handle, 2 [ 39.714101][ T4543] binder: 4543:4542 translate handle failed [ 39.715775][ T4543] binder: 4542:4543 transaction call to 4542:0 failed 8/29201/-22, size 88-24 line 3402 [ 39.717815][ T4523] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.738841][ T4525] usb 1-1: USB disconnect, device number 2 [ 41.120265][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 41.120293][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 41.200365][ T4334] Bluetooth: hci1: command 0x0419 tx timeout [ 41.201606][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 41.202882][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 42.427016][ T4580] random: crng reseeded on system resumption [ 42.950738][ T4595] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 46.347100][ T4336] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 46.348675][ T4336] CPU: 0 PID: 4336 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 46.349999][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 46.351520][ T4336] Workqueue: hci3 hci_rx_work [ 46.352211][ T4336] Call trace: [ 46.353011][ T4336] dump_backtrace+0x1c8/0x1f4 [ 46.353690][ T4336] show_stack+0x2c/0x3c [ 46.354327][ T4336] __dump_stack+0x30/0x40 [ 46.354379][ T4634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.354984][ T4336] dump_stack_lvl+0xf8/0x160 [ 46.357027][ T4336] dump_stack+0x1c/0x5c [ 46.357585][ T4634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.357684][ T4336] sysfs_create_dir_ns+0x22c/0x24c [ 46.359616][ T4336] kobject_add_internal+0x5a8/0xb30 [ 46.360443][ T4336] kobject_add+0x134/0x1f8 [ 46.361143][ T4336] device_add+0x3f0/0xf94 [ 46.361778][ T4336] hci_conn_add_sysfs+0xbc/0x1cc [ 46.362514][ T4336] le_conn_complete_evt+0xa24/0xf8c [ 46.363252][ T4336] hci_le_conn_complete_evt+0x114/0x3f8 [ 46.364137][ T4336] hci_le_meta_evt+0x2c0/0x4a4 [ 46.364904][ T4336] hci_event_packet+0x6ac/0xf08 [ 46.365682][ T4336] hci_rx_work+0x324/0xaa0 [ 46.366388][ T4336] process_one_work+0x7f4/0x13a8 [ 46.367117][ T4336] worker_thread+0x8c8/0xfbc [ 46.367773][ T4336] kthread+0x250/0x2d8 [ 46.368427][ T4336] ret_from_fork+0x10/0x20 [ 46.369310][ T4336] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 46.371368][ T4336] Bluetooth: hci3: failed to register connection device [ 46.926217][ T4638] random: crng reseeded on system resumption [ 46.947697][ T4640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.949317][ T4640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.691013][ T4648] vivid-000: ================= START STATUS ================= [ 47.692378][ T4648] vivid-000: Test Pattern: 75% Colorbar [ 47.693262][ T4648] vivid-000: Fill Percentage of Frame: 100 [ 47.694113][ T4648] vivid-000: Horizontal Movement: No Movement [ 47.695099][ T4648] vivid-000: Vertical Movement: No Movement [ 47.696080][ T4648] vivid-000: OSD Text Mode: All [ 47.696937][ T4648] vivid-000: Show Border: false [ 47.697903][ T4648] vivid-000: Show Square: false [ 47.698758][ T4648] vivid-000: Sensor Flipped Horizontally: false [ 47.700478][ T4648] vivid-000: Sensor Flipped Vertically: false [ 47.701457][ T4648] vivid-000: Insert SAV Code in Image: false [ 47.702347][ T4648] vivid-000: Insert EAV Code in Image: false [ 47.703263][ T4648] vivid-000: Insert Video Guard Band: false [ 47.704298][ T4648] vivid-000: Reduced Framerate: false [ 47.705118][ T4648] vivid-000: Enable Capture Cropping: true [ 47.706009][ T4648] vivid-000: Enable Capture Composing: true [ 47.706912][ T4648] vivid-000: Enable Capture Scaler: true [ 47.707770][ T4648] vivid-000: Timestamp Source: End of Frame [ 47.708698][ T4648] vivid-000: Colorspace: sRGB [ 47.710280][ T4648] vivid-000: Transfer Function: Default [ 47.711188][ T4648] vivid-000: Y'CbCr Encoding: Default [ 47.712084][ T4648] vivid-000: HSV Encoding: Hue 0-179 [ 47.713018][ T4648] vivid-000: Quantization: Default [ 47.713881][ T4648] vivid-000: Apply Alpha To Red Only: false [ 47.714879][ T4648] vivid-000: Standard Aspect Ratio: 4x3 [ 47.715833][ T4648] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 47.717027][ T4648] vivid-000: DV Timings: 640x480p59 inactive [ 47.717947][ T4648] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 47.720141][ T4648] vivid-000: Maximum EDID Blocks: 2 [ 47.720958][ T4648] vivid-000: Limited RGB Range (16-235): false [ 47.721897][ T4648] vivid-000: Rx RGB Quantization Range: Automatic [ 47.722976][ T4648] vivid-000: Power Present: 0x00000001 [ 47.723931][ T4648] tpg source WxH: 640x360 (Y'CbCr) [ 47.724704][ T4648] tpg field: 1 [ 47.725295][ T4648] tpg crop: 640x360@0x0 [ 47.726010][ T4648] tpg compose: 640x360@0x0 [ 47.726765][ T4648] tpg colorspace: 8 [ 47.727383][ T4648] tpg transfer function: 0/0 [ 47.728778][ T4648] tpg Y'CbCr encoding: 0/0 [ 47.729671][ T4648] tpg quantization: 0/0 [ 47.730274][ T4648] tpg RGB range: 0/2 [ 47.730907][ T4648] vivid-000: ================== END STATUS ================== [ 49.774306][ T4336] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 49.778774][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.781205][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.357588][ T4670] random: crng reseeded on system resumption [ 50.380415][ T4672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.381909][ T4672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.058452][ T4679] binder: 4678:4679 unknown command 0 [ 53.059468][ T4679] binder: 4678:4679 ioctl c0306201 20000080 returned -22 [ 53.061015][ T4679] binder: tried to use weak ref as strong ref [ 53.061982][ T4679] binder: 4678:4679 Acquire 1 refcount change on invalid ref 0 ret -22 [ 53.063318][ T4679] binder: 4678:4679 got transaction to invalid handle, 1 [ 53.064438][ T4679] binder: 4679:4678 cannot find target node [ 53.065341][ T4679] binder: 4678:4679 transaction call to 0:0 failed 11/29201/-22, size 88-24 line 3054 [ 53.067065][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.186845][ T4691] binder: 4687:4691 tried to acquire reference to desc 0, got 1 instead [ 53.425519][ T4691] binder_alloc: 4687: binder_alloc_buf, no vma [ 53.426802][ T4691] binder: cannot allocate buffer: vma cleared, target dead or dying [ 53.426831][ T4691] binder: 4687:4691 transaction async to 4687:0 failed 16/29189/-3, size 0-77 line 3239 [ 53.460019][ T4325] binder: undelivered TRANSACTION_ERROR: 29189 [ 53.485830][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 53.487590][ T4333] CPU: 1 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 53.488733][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 53.490219][ T4333] Workqueue: hci0 hci_rx_work [ 53.490917][ T4333] Call trace: [ 53.491486][ T4333] dump_backtrace+0x1c8/0x1f4 [ 53.492232][ T4333] show_stack+0x2c/0x3c [ 53.492853][ T4333] __dump_stack+0x30/0x40 [ 53.493556][ T4333] dump_stack_lvl+0xf8/0x160 [ 53.494240][ T4333] dump_stack+0x1c/0x5c [ 53.494886][ T4333] sysfs_create_dir_ns+0x22c/0x24c [ 53.495637][ T4333] kobject_add_internal+0x5a8/0xb30 [ 53.496423][ T4333] kobject_add+0x134/0x1f8 [ 53.497117][ T4333] device_add+0x3f0/0xf94 [ 53.497856][ T4333] hci_conn_add_sysfs+0xbc/0x1cc [ 53.498700][ T4333] le_conn_complete_evt+0xa24/0xf8c [ 53.499521][ T4333] hci_le_conn_complete_evt+0x114/0x3f8 [ 53.500369][ T4333] hci_le_meta_evt+0x2c0/0x4a4 [ 53.501126][ T4333] hci_event_packet+0x6ac/0xf08 [ 53.501872][ T4333] hci_rx_work+0x324/0xaa0 [ 53.502600][ T4333] process_one_work+0x7f4/0x13a8 [ 53.503446][ T4333] worker_thread+0x8c8/0xfbc [ 53.504189][ T4333] kthread+0x250/0x2d8 [ 53.504806][ T4333] ret_from_fork+0x10/0x20 [ 53.508105][ T4333] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 53.511219][ T4333] Bluetooth: hci0: failed to register connection device [ 53.530992][ T4697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.532625][ T4697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.166348][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 54.173167][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 54.308426][ T4718] binder: 4713:4718 unknown command 0 [ 54.313149][ T4718] binder: 4713:4718 ioctl c0306201 20000080 returned -22 [ 54.314733][ T4718] binder: tried to use weak ref as strong ref [ 54.315670][ T4718] binder: 4713:4718 Acquire 1 refcount change on invalid ref 0 ret -22 [ 54.317242][ T4718] binder: 4713:4718 got transaction to invalid handle, 1 [ 54.318219][ T4718] binder: 4718:4713 cannot find target node [ 54.320912][ T4718] binder: 4713:4718 transaction call to 0:0 failed 19/29201/-22, size 88-24 line 3054 [ 54.322788][ T4325] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.346562][ T4721] device syzkaller0 entered promiscuous mode [ 54.432561][ T4722] netlink: 260 bytes leftover after parsing attributes in process `syz.0.80'. [ 54.441233][ T4325] libceph: connect (1)[c::]:6789 error -101 [ 54.448415][ T4325] libceph: mon0 (1)[c::]:6789 connect error [ 54.680106][ T4708] ceph: No mds server is up or the cluster is laggy [ 55.173668][ T4737] binder: tried to use weak ref as strong ref [ 55.174832][ T4737] binder: 4736:4737 Acquire 1 refcount change on invalid ref 0 ret -22 [ 55.176507][ T4737] binder: 4736:4737 got transaction to invalid handle, 1 [ 55.177657][ T4737] binder: 4737:4736 cannot find target node [ 55.583505][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 55.585637][ T4333] CPU: 0 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 55.586789][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 55.588330][ T4333] Workqueue: hci4 hci_rx_work [ 55.589042][ T4333] Call trace: [ 55.589580][ T4333] dump_backtrace+0x1c8/0x1f4 [ 55.590309][ T4333] show_stack+0x2c/0x3c [ 55.590953][ T4333] __dump_stack+0x30/0x40 [ 55.591619][ T4333] dump_stack_lvl+0xf8/0x160 [ 55.592336][ T4333] dump_stack+0x1c/0x5c [ 55.593003][ T4333] sysfs_create_dir_ns+0x22c/0x24c [ 55.593827][ T4333] kobject_add_internal+0x5a8/0xb30 [ 55.594674][ T4333] kobject_add+0x134/0x1f8 [ 55.595382][ T4333] device_add+0x3f0/0xf94 [ 55.596097][ T4333] hci_conn_add_sysfs+0xbc/0x1cc [ 55.596842][ T4333] le_conn_complete_evt+0xa24/0xf8c [ 55.597583][ T4333] hci_le_conn_complete_evt+0x114/0x3f8 [ 55.598524][ T4333] hci_le_meta_evt+0x2c0/0x4a4 [ 55.599351][ T4333] hci_event_packet+0x6ac/0xf08 [ 55.600185][ T4333] hci_rx_work+0x324/0xaa0 [ 55.600915][ T4333] process_one_work+0x7f4/0x13a8 [ 55.601681][ T4333] worker_thread+0x8c8/0xfbc [ 55.602364][ T4333] kthread+0x250/0x2d8 [ 55.602976][ T4333] ret_from_fork+0x10/0x20 [ 55.604149][ T4333] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 55.606476][ T4333] Bluetooth: hci4: failed to register connection device [ 55.624894][ T4752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.639380][ T4752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.807223][ T4758] Zero length message leads to an empty skb [ 56.198512][ T4767] device syzkaller0 entered promiscuous mode [ 56.257445][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.258959][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.471203][ T4777] device syzkaller0 entered promiscuous mode [ 56.667742][ T4786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.104'. [ 57.224740][ T4805] device syzkaller0 entered promiscuous mode [ 57.545307][ T4333] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 57.547141][ T4333] CPU: 0 PID: 4333 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 57.548375][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 57.550010][ T4333] Workqueue: hci1 hci_rx_work [ 57.550812][ T4333] Call trace: [ 57.551363][ T4333] dump_backtrace+0x1c8/0x1f4 [ 57.552184][ T4333] show_stack+0x2c/0x3c [ 57.552904][ T4333] __dump_stack+0x30/0x40 [ 57.553606][ T4333] dump_stack_lvl+0xf8/0x160 [ 57.554394][ T4333] dump_stack+0x1c/0x5c [ 57.555066][ T4333] sysfs_create_dir_ns+0x22c/0x24c [ 57.555941][ T4333] kobject_add_internal+0x5a8/0xb30 [ 57.556802][ T4333] kobject_add+0x134/0x1f8 [ 57.557504][ T4333] device_add+0x3f0/0xf94 [ 57.558230][ T4333] hci_conn_add_sysfs+0xbc/0x1cc [ 57.559080][ T4333] le_conn_complete_evt+0xa24/0xf8c [ 57.559980][ T4333] hci_le_conn_complete_evt+0x114/0x3f8 [ 57.560948][ T4333] hci_le_meta_evt+0x2c0/0x4a4 [ 57.561772][ T4333] hci_event_packet+0x6ac/0xf08 [ 57.562619][ T4333] hci_rx_work+0x324/0xaa0 [ 57.563287][ T4333] process_one_work+0x7f4/0x13a8 [ 57.564059][ T4333] worker_thread+0x8c8/0xfbc [ 57.564810][ T4333] kthread+0x250/0x2d8 [ 57.565447][ T4333] ret_from_fork+0x10/0x20 [ 57.570066][ T4333] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 57.572211][ T4333] Bluetooth: hci1: failed to register connection device [ 57.679293][ T4333] Bluetooth: hci4: command 0x2016 tx timeout [ 58.120154][ T1965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 58.312118][ T4832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 58.313871][ T4832] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 58.559609][ T1965] usb 1-1: Using ep0 maxpacket: 16 [ 58.565390][ T1965] usb 1-1: too many configurations: 97, using maximum allowed: 8 [ 58.577688][ T1965] usb 1-1: string descriptor 0 read error: -71 [ 58.578847][ T1965] usb 1-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 58.580446][ T1965] usb 1-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 58.583153][ T1965] usb 1-1: rejected 8 configurations due to insufficient available bus power [ 58.584560][ T1965] usb 1-1: no configuration chosen from 8 choices [ 58.593565][ T1965] usb 1-1: USB disconnect, device number 3 [ 58.604491][ T4836] device syzkaller0 entered promiscuous mode [ 58.750839][ T4840] device syzkaller0 entered promiscuous mode [ 58.981586][ T4851] netlink: 'syz.4.125': attribute type 1 has an invalid length. [ 58.983091][ T4851] netlink: 244 bytes leftover after parsing attributes in process `syz.4.125'. [ 59.612626][ T4333] Bluetooth: hci1: command 0x2016 tx timeout [ 59.754390][ T4876] binder: BINDER_SET_CONTEXT_MGR already set [ 59.756030][ T4876] binder: 4875:4876 ioctl 4018620d 200002c0 returned -16 [ 59.757420][ T4876] binder_user_error: 3 callbacks suppressed [ 59.757425][ T4876] binder: 4875:4876 got transaction to invalid handle, 1 [ 59.759733][ T4876] binder_debug: 5 callbacks suppressed [ 59.759740][ T4876] binder: 4876:4875 cannot find target node [ 59.761680][ T4876] binder: 4875:4876 transaction async to 0:0 failed 28/29201/-22, size 0-77 line 3054 [ 59.765779][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.783559][ T4878] device syzkaller0 entered promiscuous mode [ 60.253695][ T4892] block device autoloading is deprecated and will be removed. [ 60.286549][ T4891] md: md2 stopped. [ 60.347671][ T4895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.395611][ T4895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.264882][ T4925] device syzkaller0 entered promiscuous mode [ 63.935422][ T4985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.093528][ T4985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.481846][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.524316][ T24] cfg80211: failed to load regulatory.db [ 65.137146][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.138851][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.589368][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.607015][ T5004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.936184][ T5004] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.937597][ T5004] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.938994][ T5004] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.942876][ T5004] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.302507][ T5030] device syzkaller0 entered promiscuous mode [ 66.902898][ T5042] fuse: Bad value for 'rootmode' [ 67.286483][ T5051] device syzkaller0 entered promiscuous mode [ 68.155387][ T5078] fuse: Bad value for 'rootmode' [ 68.436118][ T5085] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 69.192346][ T4333] block nbd0: Receive control failed (result -32) [ 69.192768][ T5089] block nbd0: shutting down sockets [ 71.952033][ T5123] fuse: Bad value for 'rootmode' [ 73.815326][ T5141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.816917][ T5141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.194476][ T5143] block device autoloading is deprecated and will be removed. [ 80.943342][ T5165] fuse: Unknown parameter 'use00000000000000000000' [ 82.439741][ T5212] fuse: Unknown parameter 'use00000000000000000000' [ 82.512613][ T5214] tipc: Enabling of bearer rejected, failed to enable media [ 82.515895][ T5214] device syzkaller0 entered promiscuous mode [ 82.616156][ T5222] device syzkaller0 entered promiscuous mode [ 84.487397][ T5255] fuse: Unknown parameter 'use00000000000000000000' [ 85.092082][ T5273] tipc: Enabling of bearer rejected, failed to enable media [ 85.093992][ T5273] device syzkaller0 entered promiscuous mode [ 85.193440][ T5277] device syzkaller0 entered promiscuous mode [ 86.106757][ T5299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.111099][ T5299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.217817][ T5309] binder: 5308:5309 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 86.220728][ T5309] binder: 5308:5309 got transaction to invalid handle, 1 [ 86.222026][ T5309] binder: 5309:5308 cannot find target node [ 86.222880][ T5309] binder: 5308:5309 transaction async to 0:0 failed 30/29201/-22, size 0-77 line 3054 [ 86.224946][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 86.254098][ T5311] tipc: Enabling of bearer rejected, failed to enable media [ 86.255903][ T5311] device syzkaller0 entered promiscuous mode [ 86.293536][ T5313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 86.395193][ T5315] ======================================================= [ 86.395193][ T5315] WARNING: The mand mount option has been deprecated and [ 86.395193][ T5315] and is ignored by this kernel. Remove the mand [ 86.395193][ T5315] option from the mount to silence this warning. [ 86.395193][ T5315] ======================================================= [ 86.464107][ T5319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.465686][ T5319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.038317][ T5331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 87.040104][ T5331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 87.478598][ T5342] binder: 5341:5342 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 87.487706][ T5342] binder: 5341:5342 got transaction to invalid handle, 1 [ 87.488874][ T5342] binder: 5342:5341 cannot find target node [ 87.490631][ T5342] binder: 5341:5342 transaction async to 0:0 failed 32/29201/-22, size 0-77 line 3054 [ 87.494849][ T4325] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.551466][ T5346] tipc: Enabling of bearer rejected, failed to enable media [ 87.553505][ T5346] device syzkaller0 entered promiscuous mode [ 87.607872][ T5356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.609640][ T5356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.394230][ T5393] tipc: Enabling of bearer rejected, failed to enable media [ 89.396074][ T5393] device syzkaller0 entered promiscuous mode [ 89.859844][ T5403] syz.3.285 uses obsolete (PF_INET,SOCK_PACKET) [ 89.972609][ T5401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'. [ 89.974248][ T5401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.284'. [ 90.088402][ T5409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.097608][ T5409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.236972][ T5416] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3 [ 91.821880][ T5450] tipc: Enabling of bearer rejected, failed to enable media [ 91.824185][ T5449] device syzkaller0 entered promiscuous mode [ 92.456640][ T5462] random: crng reseeded on system resumption [ 92.475596][ T5464] fuse: Unknown parameter 'user_id00000000000000000000' [ 92.531171][ T5466] binder: 5465:5466 ioctl 4018620d 0 returned -22 [ 92.555195][ T5466] binder: 5465:5466 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 92.564779][ T5466] binder: 5465:5466 got transaction to invalid handle, 1 [ 92.566126][ T5466] binder: 5466:5465 cannot find target node [ 92.571007][ T5466] binder: 5465:5466 transaction async to 0:0 failed 35/29201/-22, size 0-77 line 3054 [ 92.575066][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.796702][ T5492] mmap: syz.3.311 (5492) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.135643][ T5497] device syzkaller0 entered promiscuous mode [ 94.194776][ T5502] fuse: Unknown parameter 'user_id00000000000000000000' [ 94.236056][ T5504] binder: 5500:5504 ioctl 4018620d 0 returned -22 [ 94.246249][ T5504] binder: 5500:5504 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 94.251991][ T5504] binder: 5500:5504 got transaction to invalid handle, 1 [ 94.253168][ T5504] binder: 5504:5500 cannot find target node [ 94.254368][ T5504] binder: 5500:5504 transaction async to 0:0 failed 38/29201/-22, size 0-77 line 3054 [ 94.256439][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.525222][ T5539] fuse: Bad value for 'fd' [ 95.661090][ T5547] binder: BINDER_SET_CONTEXT_MGR already set [ 95.662293][ T5547] binder: 5546:5547 ioctl 4018620d 200002c0 returned -16 [ 95.726000][ T5551] device syzkaller0 entered promiscuous mode [ 96.268658][ T5572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.342'. [ 96.812417][ T5573] fuse: Bad value for 'fd' [ 96.892845][ T5584] binder: BINDER_SET_CONTEXT_MGR already set [ 96.893998][ T5584] binder: 5583:5584 ioctl 4018620d 200002c0 returned -16 [ 97.436635][ T5598] device syzkaller0 entered promiscuous mode [ 97.944415][ T5613] binder: BINDER_SET_CONTEXT_MGR already set [ 98.233222][ T5613] binder: 5612:5613 ioctl 4018620d 200002c0 returned -16 [ 98.246606][ T5620] fuse: Bad value for 'fd' [ 99.461294][ T5655] binder: 5654:5655 ioctl c0306201 0 returned -14 [ 99.464375][ T5655] binder: 5654:5655 got transaction to invalid handle, 1 [ 99.465747][ T5655] binder: 5655:5654 cannot find target node [ 99.467141][ T5655] binder: 5654:5655 transaction async to 0:0 failed 45/29201/-22, size 0-77 line 3054 [ 99.470127][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.504911][ T5657] fuse: Unknown parameter '0x0000000000000003' [ 99.527783][ T5658] tipc: Started in network mode [ 99.533480][ T5658] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 99.534839][ T5658] tipc: Enabled bearer , priority 0 [ 99.674917][ T5662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.676684][ T5662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.466508][ T5683] binder: 5681:5683 ioctl c0306201 0 returned -14 [ 100.470777][ T5683] binder: 5681:5683 got transaction to invalid handle, 1 [ 100.472324][ T5683] binder: 5683:5681 cannot find target node [ 100.473380][ T5683] binder: 5681:5683 transaction async to 0:0 failed 49/29201/-22, size 0-77 line 3054 [ 100.539899][ T24] tipc: Node number set to 11578026 [ 100.541789][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.596640][ T5687] fuse: Unknown parameter '0x0000000000000003' [ 101.467368][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.468999][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.592060][ T5714] binder: 5713:5714 ioctl c0306201 0 returned -14 [ 101.595749][ T5714] binder: 5713:5714 got transaction to invalid handle, 1 [ 101.600330][ T5714] binder: 5714:5713 cannot find target node [ 101.602471][ T5714] binder: 5713:5714 transaction async to 0:0 failed 53/29201/-22, size 0-77 line 3054 [ 101.607803][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.650166][ T5716] binder: 5715:5716 unknown command 0 [ 101.653016][ T5716] binder: 5715:5716 ioctl c0306201 20000080 returned -22 [ 101.655983][ T5716] binder: 5715:5716 tried to acquire reference to desc 0, got 1 instead [ 101.657603][ T5716] binder: 5715:5716 got transaction with invalid fd, -1 [ 101.659047][ T5716] binder: 5716:5715 translate fd failed [ 101.689882][ T5721] fuse: Unknown parameter '0x0000000000000003' [ 102.768743][ T5748] binder: 5747:5748 got transaction to invalid handle, 1 [ 102.797271][ T5750] binder: 5749:5750 unknown command 0 [ 102.798546][ T5750] binder: 5749:5750 ioctl c0306201 20000080 returned -22 [ 102.803537][ T5750] binder: 5749:5750 tried to acquire reference to desc 0, got 1 instead [ 102.805913][ T5750] binder: 5749:5750 got transaction with invalid fd, -1 [ 102.835143][ T5752] fuse: Unknown parameter '0x0000000000000003' [ 103.085493][ T5765] tipc: Enabling of bearer rejected, failed to enable media [ 103.088032][ T5765] device syzkaller0 entered promiscuous mode [ 103.382987][ T5766] block device autoloading is deprecated and will be removed. [ 103.546853][ T5776] binder: 5775:5776 got transaction to invalid handle, 1 [ 103.582916][ T5778] binder: 5777:5778 unknown command 0 [ 103.584047][ T5778] binder: 5777:5778 ioctl c0306201 20000080 returned -22 [ 103.587624][ T5778] binder: 5777:5778 tried to acquire reference to desc 0, got 1 instead [ 103.611564][ T5780] fuse: Unknown parameter '0x0000000000000003' [ 104.657300][ T5805] tipc: Enabling of bearer rejected, failed to enable media [ 104.664886][ T5805] device syzkaller0 entered promiscuous mode [ 104.708458][ T5809] binder_user_error: 1 callbacks suppressed [ 104.708468][ T5809] binder: 5808:5809 got transaction to invalid handle, 1 [ 104.713304][ T5809] binder_debug: 14 callbacks suppressed [ 104.713319][ T5809] binder: 5809:5808 cannot find target node [ 104.715415][ T5809] binder: 5808:5809 transaction async to 0:0 failed 80/29201/-22, size 0-77 line 3054 [ 104.717272][ T1965] binder: undelivered TRANSACTION_ERROR: 29201 [ 104.807351][ T5813] binder: 5812:5813 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 104.808970][ T5813] binder: 5812:5813 unknown command 0 [ 104.810212][ T5813] binder: 5812:5813 ioctl c0306201 20000080 returned -22 [ 104.838223][ T5815] fuse: Unknown parameter '0x0000000000000003' [ 104.969237][ T4333] Bluetooth: hci4: command 0x0405 tx timeout [ 105.881854][ T5840] binder: 5836:5840 got transaction to invalid handle, 1 [ 105.883047][ T5840] binder: 5840:5836 cannot find target node [ 105.884177][ T5840] binder: 5836:5840 transaction async to 0:0 failed 85/29201/-22, size 0-77 line 3054 [ 105.885857][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 105.914578][ T5842] tipc: Enabling of bearer rejected, failed to enable media [ 105.916372][ T5842] device syzkaller0 entered promiscuous mode [ 106.418061][ T5850] binder: 5849:5850 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 106.421979][ T5850] binder: 5849:5850 unknown command 0 [ 106.424157][ T5850] binder: 5849:5850 ioctl c0306201 20000080 returned -22 [ 106.921057][ T5856] fuse: Unknown parameter 'fd0x0000000000000003' [ 106.940244][ T5858] netlink: 64 bytes leftover after parsing attributes in process `syz.2.440'. [ 107.835049][ T5877] binder: 5876:5877 got transaction to invalid handle, 1 [ 107.836970][ T5877] binder: 5877:5876 cannot find target node [ 107.838118][ T5877] binder: 5876:5877 transaction async to 0:0 failed 90/29201/-22, size 0-77 line 3054 [ 107.840752][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.974328][ T5883] tipc: Enabling of bearer rejected, failed to enable media [ 107.976000][ T5879] binder: 5878:5879 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 107.977351][ T5879] binder: 5878:5879 unknown command 0 [ 107.978176][ T5879] binder: 5878:5879 ioctl c0306201 20000080 returned -22 [ 107.982042][ T5883] device syzkaller0 entered promiscuous mode [ 107.985227][ T5888] fuse: Unknown parameter 'fd0x0000000000000003' [ 109.477175][ T5916] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 109.530325][ T5921] binder: 5920:5921 got transaction to invalid handle, 1 [ 109.531685][ T5921] binder: 5921:5920 cannot find target node [ 109.649938][ T5928] fuse: Unknown parameter 'fd0x0000000000000003' [ 110.049801][ T5936] tipc: Enabling of bearer rejected, failed to enable media [ 110.062294][ T5936] device syzkaller0 entered promiscuous mode [ 110.826478][ T5967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 111.025892][ T5974] tipc: Enabling of bearer rejected, failed to enable media [ 111.027649][ T5974] device syzkaller0 entered promiscuous mode [ 112.600607][ T6007] tipc: Enabling of bearer rejected, failed to enable media [ 112.611096][ T6007] device syzkaller0 entered promiscuous mode [ 113.905421][ T6045] device syzkaller0 entered promiscuous mode [ 114.367707][ T6055] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 114.381730][ T6068] binder: BINDER_SET_CONTEXT_MGR already set [ 114.382936][ T6068] binder: 6065:6068 ioctl 4018620d 20000300 returned -16 [ 114.384425][ T6068] binder: 6065:6068 got transaction to invalid handle, 1 [ 114.385711][ T6068] binder_debug: 2 callbacks suppressed [ 114.385722][ T6068] binder: 6068:6065 cannot find target node [ 114.387824][ T6068] binder: 6065:6068 transaction call to 0:0 failed 97/29201/-22, size 88-24 line 3054 [ 114.390940][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 115.673894][ T6099] binder: BINDER_SET_CONTEXT_MGR already set [ 115.678356][ T6099] binder: 6098:6099 ioctl 4018620d 20000300 returned -16 [ 115.683109][ T6099] binder: 6098:6099 got transaction to invalid handle, 1 [ 115.684310][ T6099] binder: 6099:6098 cannot find target node [ 115.685200][ T6099] binder: 6098:6099 transaction call to 0:0 failed 99/29201/-22, size 88-24 line 3054 [ 115.694492][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 119.586903][ T6204] binder: 6201:6204 ioctl c0306201 0 returned -14 [ 119.590728][ T6204] binder: 6201:6204 got transaction to invalid handle, 1 [ 119.592139][ T6204] binder: 6204:6201 cannot find target node [ 119.593002][ T6204] binder: 6201:6204 transaction call to 0:0 failed 103/29201/-22, size 88-24 line 3054 [ 119.595007][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.122430][ T6216] netlink: 64 bytes leftover after parsing attributes in process `syz.4.568'. [ 121.398738][ T6245] binder: 6244:6245 got transaction to invalid handle, 1 [ 121.402642][ T6245] binder: 6245:6244 cannot find target node [ 121.403779][ T6245] binder: 6244:6245 transaction call to 0:0 failed 107/29201/-22, size 88-24 line 3054 [ 121.409841][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 122.461049][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.462507][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.664742][ T6279] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 122.875436][ T6284] binder: 6283:6284 got transaction to invalid handle, 1 [ 122.876552][ T6284] binder: 6284:6283 cannot find target node [ 122.877454][ T6284] binder: 6283:6284 transaction call to 0:0 failed 111/29201/-22, size 88-24 line 3054 [ 122.892545][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.213549][ T6321] binder: 6320:6321 got transaction to invalid handle, 1 [ 124.215021][ T6321] binder: 6321:6320 cannot find target node [ 124.341729][ T6325] netlink: 'syz.2.597': attribute type 11 has an invalid length. [ 124.555119][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.556704][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.472479][ T6354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.475263][ T6354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.685830][ T6358] binder: 6357:6358 got transaction to invalid handle, 1 [ 125.687038][ T6358] binder_debug: 2 callbacks suppressed [ 125.687049][ T6358] binder: 6358:6357 cannot find target node [ 125.689568][ T6358] binder: 6357:6358 transaction call to 0:0 failed 119/29201/-22, size 88-24 line 3054 [ 125.692178][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 125.725694][ T6360] device syzkaller0 entered promiscuous mode [ 125.929626][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.058332][ T6365] netlink: 64 bytes leftover after parsing attributes in process `syz.4.615'. [ 126.544408][ T6373] random: crng reseeded on system resumption [ 126.679163][ T4369] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.850534][ T6375] binder: 6374:6375 got transaction to invalid handle, 1 [ 126.851790][ T6375] binder: 6375:6374 cannot find target node [ 126.852670][ T6375] binder: 6374:6375 transaction async to 0:0 failed 123/29201/-22, size 0-77 line 3054 [ 126.854471][ T1965] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.859184][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 126.860873][ T4369] usb 1-1: no configurations [ 126.861642][ T4369] usb 1-1: can't read configurations, error -22 [ 127.009127][ T4369] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.189139][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 127.190880][ T4369] usb 1-1: no configurations [ 127.191685][ T4369] usb 1-1: can't read configurations, error -22 [ 127.192713][ T4369] usb usb1-port1: attempt power cycle [ 127.599450][ T4369] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.629673][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 127.631185][ T4369] usb 1-1: no configurations [ 127.631937][ T4369] usb 1-1: can't read configurations, error -22 [ 127.779145][ T4369] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.809652][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 127.810817][ T4369] usb 1-1: no configurations [ 127.811520][ T4369] usb 1-1: can't read configurations, error -22 [ 127.812528][ T4369] usb usb1-port1: unable to enumerate USB device [ 129.452981][ T6392] binder: 6391:6392 got transaction to invalid handle, 1 [ 129.454193][ T6392] binder: 6392:6391 cannot find target node [ 129.455232][ T6392] binder: 6391:6392 transaction call to 0:0 failed 127/29201/-22, size 88-24 line 3054 [ 129.457236][ T4325] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.077815][ T6415] binder: 6414:6415 got transaction to invalid handle, 1 [ 133.079592][ T6415] binder: 6415:6414 cannot find target node [ 133.080517][ T6415] binder: 6414:6415 transaction async to 0:0 failed 131/29201/-22, size 0-77 line 3054 [ 133.083239][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.287699][ T6421] random: crng reseeded on system resumption [ 134.279142][ T4369] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.469134][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 134.470623][ T4369] usb 1-1: no configurations [ 134.471327][ T4369] usb 1-1: can't read configurations, error -22 [ 134.619158][ T4369] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.819113][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 134.821878][ T4369] usb 1-1: no configurations [ 134.822671][ T4369] usb 1-1: can't read configurations, error -22 [ 134.823751][ T4369] usb usb1-port1: attempt power cycle [ 135.229098][ T4369] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 135.259646][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 135.260963][ T4369] usb 1-1: no configurations [ 135.261746][ T4369] usb 1-1: can't read configurations, error -22 [ 135.419161][ T4369] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.449464][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 135.450714][ T4369] usb 1-1: no configurations [ 135.451358][ T4369] usb 1-1: can't read configurations, error -22 [ 135.452475][ T4369] usb usb1-port1: unable to enumerate USB device [ 138.697008][ T6451] binder: 6449:6451 got transaction to invalid handle, 1 [ 138.706785][ T6451] binder: 6451:6449 cannot find target node [ 138.707972][ T6451] binder: 6449:6451 transaction async to 0:0 failed 135/29201/-22, size 0-77 line 3054 [ 138.717401][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.960105][ T6475] device syzkaller0 entered promiscuous mode [ 140.077885][ T6481] random: crng reseeded on system resumption [ 141.273778][ T6502] binder: 6501:6502 got transaction to invalid handle, 1 [ 141.275261][ T6502] binder: 6502:6501 cannot find target node [ 141.276122][ T6502] binder: 6501:6502 transaction async to 0:0 failed 139/29201/-22, size 0-77 line 3054 [ 141.277947][ T4369] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.298842][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.302039][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.611399][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 152.178861][ T6536] binder: 6534:6536 tried to acquire reference to desc 0, got 1 instead [ 152.186381][ T6536] binder: 6534:6536 ioctl c0306201 0 returned -14 [ 152.417600][ T6550] random: crng reseeded on system resumption [ 154.042028][ T6570] device syzkaller0 entered promiscuous mode [ 154.357534][ T6575] binder: 6574:6575 tried to acquire reference to desc 0, got 1 instead [ 154.359378][ T6575] binder: 6574:6575 ioctl c0306201 0 returned -14 [ 154.545836][ T6587] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 154.548599][ T78] block nbd4: Attempted send on invalid socket [ 154.549690][ T78] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.185120][ T6596] netlink: 96 bytes leftover after parsing attributes in process `syz.2.681'. [ 156.306868][ T6618] binder: 6617:6618 tried to acquire reference to desc 0, got 1 instead [ 156.308713][ T6618] binder: 6617:6618 ioctl c0306201 0 returned -14 [ 157.218922][ T6635] netlink: 96 bytes leftover after parsing attributes in process `syz.2.692'. [ 158.254029][ T6655] binder: 6654:6655 tried to acquire reference to desc 0, got 1 instead [ 158.729187][ T4336] Bluetooth: hci2: command 0x0406 tx timeout [ 158.730286][ T4333] Bluetooth: hci3: command 0x0406 tx timeout [ 158.730325][ T4333] Bluetooth: hci0: command 0x0406 tx timeout [ 158.730348][ T4333] Bluetooth: hci1: command 0x0406 tx timeout [ 159.008850][ T6662] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 160.394822][ T6671] netlink: 96 bytes leftover after parsing attributes in process `syz.4.703'. [ 163.154686][ T6693] binder: 6692:6693 tried to acquire reference to desc 0, got 1 instead [ 165.048515][ T6705] netlink: 80 bytes leftover after parsing attributes in process `syz.4.714'. [ 165.247011][ T6709] netlink: 260 bytes leftover after parsing attributes in process `syz.4.715'. [ 168.274294][ T6612] tipc: Started in network mode [ 168.275158][ T6612] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 168.276359][ T6612] tipc: Enabled bearer , priority 0 [ 168.334036][ T6727] binder: 6726:6727 tried to acquire reference to desc 0, got 1 instead [ 168.372617][ T1965] hid-generic 0000:0003:0001.0002: unknown main item tag 0x0 [ 168.374261][ T1965] hid-generic 0000:0003:0001.0002: unknown main item tag 0x0 [ 168.377992][ T1965] hid-generic 0000:0003:0001.0002: hidraw0: HID v0.03 Device [syz0] on syz1 [ 168.429093][ T6734] fido_id[6734]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.435731][ T6739] tipc: Enabled bearer , priority 0 [ 168.438295][ T6739] device syzkaller0 entered promiscuous mode [ 168.450419][ T6739] tipc: Resetting bearer [ 168.456992][ T6736] tipc: Resetting bearer [ 168.554985][ T6736] tipc: Disabling bearer [ 169.468782][ T6764] tipc: Started in network mode [ 169.480285][ T6764] tipc: Node identity 0a21286a132a, cluster identity 4711 [ 169.482318][ T6764] tipc: Enabled bearer , priority 0 [ 169.485091][ T6764] device syzkaller0 entered promiscuous mode [ 169.500193][ T6762] device syzkaller0 entered promiscuous mode [ 169.511004][ T6763] tipc: Resetting bearer [ 169.551724][ T6763] tipc: Disabling bearer [ 169.604840][ T4325] tipc: Node number set to 11578026 [ 169.949760][ T6770] binder: 6768:6770 unknown command 0 [ 169.950777][ T6770] binder: 6768:6770 ioctl c0306201 20000080 returned -22 [ 169.953216][ T6770] binder: 6768:6770 tried to acquire reference to desc 0, got 1 instead [ 170.093122][ T4325] hid-generic 0000:0003:0001.0003: unknown main item tag 0x0 [ 170.095168][ T4325] hid-generic 0000:0003:0001.0003: unknown main item tag 0x0 [ 170.106163][ T4325] hid-generic 0000:0003:0001.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 170.151689][ T6780] fido_id[6780]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 181.617837][ T6790] tipc: Enabling of bearer rejected, failed to enable media [ 181.902434][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 181.936925][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 181.940623][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 181.944760][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 181.946913][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 182.775401][ T22] hid-generic 0000:0003:0001.0004: unknown main item tag 0x0 [ 182.776651][ T22] hid-generic 0000:0003:0001.0004: unknown main item tag 0x0 [ 182.778625][ T22] hid-generic 0000:0003:0001.0004: hidraw0: HID v0.03 Device [syz0] on syz1 [ 182.781514][ T6838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 182.805289][ T6844] fido_id[6844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.845730][ T6873] tipc: Enabled bearer , priority 0 [ 183.853369][ T6873] device syzkaller0 entered promiscuous mode [ 183.870940][ T6873] tipc: Resetting bearer [ 183.876541][ T6872] tipc: Resetting bearer [ 183.876805][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.882204][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.940251][ T6872] tipc: Disabling bearer [ 183.947410][ T6868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.755'. [ 184.043079][ T6879] tipc: Enabled bearer , priority 0 [ 184.048227][ T6879] device syzkaller0 entered promiscuous mode [ 184.065226][ T6878] tipc: Resetting bearer [ 184.140094][ T6878] tipc: Disabling bearer [ 185.333097][ T6899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.764'. [ 185.658686][ T27] audit: type=1326 audit(185.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.765" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf5c0a8 code=0x0 [ 186.133277][ T6913] tipc: Enabled bearer , priority 0 [ 186.135113][ T6913] device syzkaller0 entered promiscuous mode [ 186.148186][ T6913] tipc: Resetting bearer [ 186.158968][ T6910] tipc: Resetting bearer [ 186.200613][ T6910] tipc: Disabling bearer [ 186.469955][ T6923] binder: 6917:6923 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 186.471499][ T6923] binder: 6917:6923 ioctl c0306201 20000080 returned -14 [ 187.360083][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.811737][ T6950] tipc: Started in network mode [ 187.814556][ T6950] tipc: Node identity 323276caf785, cluster identity 4711 [ 187.816184][ T6950] tipc: Enabled bearer , priority 0 [ 187.818229][ T6950] device syzkaller0 entered promiscuous mode [ 187.879973][ T6950] tipc: Resetting bearer [ 187.883610][ T6949] tipc: Resetting bearer [ 187.959791][ T6949] tipc: Disabling bearer [ 192.104034][ T7031] netlink: 88 bytes leftover after parsing attributes in process `syz.2.804'. [ 192.123976][ T7028] netlink: 'syz.2.804': attribute type 21 has an invalid length. [ 192.125423][ T7028] netlink: 128 bytes leftover after parsing attributes in process `syz.2.804'. [ 192.127098][ T7028] netlink: 'syz.2.804': attribute type 4 has an invalid length. [ 192.128379][ T7028] netlink: 3 bytes leftover after parsing attributes in process `syz.2.804'. [ 192.137329][ T7028] device batadv1 entered promiscuous mode [ 192.142329][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 203.379390][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.380883][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.963240][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.964809][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.970454][ T7191] netlink: 'syz.1.851': attribute type 3 has an invalid length. [ 215.103541][ T7361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.105284][ T7361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.732564][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.734105][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.521253][ T7291] tipc: Enabling of bearer rejected, failed to enable media [ 223.749231][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 224.039232][ T24] usb 1-1: device descriptor read/64, error -71 [ 224.063815][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.066148][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.309130][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 224.489236][ T24] usb 1-1: device descriptor read/64, error -71 [ 224.609252][ T24] usb usb1-port1: attempt power cycle [ 224.652274][ T7458] random: crng reseeded on system resumption [ 225.049204][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 225.079698][ T24] usb 1-1: device descriptor read/8, error -71 [ 225.349142][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 225.395441][ T24] usb 1-1: device descriptor read/8, error -71 [ 225.420143][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.421632][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.509696][ T24] usb usb1-port1: unable to enumerate USB device [ 228.154150][ T7499] random: crng reseeded on system resumption [ 230.479138][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 230.629164][ T24] usb 1-1: device descriptor read/64, error -71 [ 230.899136][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 231.049161][ T24] usb 1-1: device descriptor read/64, error -71 [ 231.169712][ T24] usb usb1-port1: attempt power cycle [ 231.487576][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.488956][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.611818][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 231.651951][ T24] usb 1-1: device descriptor read/8, error -71 [ 231.929618][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 231.959433][ T24] usb 1-1: device descriptor read/8, error -71 [ 232.079285][ T24] usb usb1-port1: unable to enumerate USB device [ 235.088777][ T7541] random: crng reseeded on system resumption [ 235.555018][ T7545] process 'syz.1.960' launched '/dev/fd/-1' with NULL argv: empty string added [ 236.264715][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.268452][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.371813][ T7457] tipc: Enabled bearer , priority 0 [ 237.373565][ T7459] device syzkaller0 entered promiscuous mode [ 237.399695][ T7453] tipc: Resetting bearer [ 237.440892][ T7453] tipc: Disabling bearer [ 237.853646][ T7583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.972'. [ 238.093000][ T7580] random: crng reseeded on system resumption [ 238.193350][ T7564] Set syz1 is full, maxelem 65536 reached [ 238.648825][ T7595] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 238.679025][ T7595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.689704][ T7595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.690970][ T7595] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 238.693311][ T7595] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 239.154942][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.156469][ T7602] device batadv_slave_1 entered promiscuous mode [ 239.171984][ T7602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.182463][ T7602] bond1: (slave batadv_slave_1): making interface the new active one [ 239.186844][ T7602] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 239.211831][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.975'. [ 239.213900][ T7595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.232086][ T7605] device syzkaller0 entered promiscuous mode [ 248.799740][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.497548][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.499526][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.161304][ T7642] random: crng reseeded on system resumption [ 254.255371][ T4336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.257299][ T4336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.258763][ T4336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.265171][ T4336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.266672][ T4336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 254.268035][ T4336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.664654][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.667308][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.668916][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.673460][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.680575][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 254.681920][ T4336] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.727995][ T4334] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.730837][ T4334] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.732639][ T4334] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.734648][ T4334] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.736205][ T4334] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 254.737530][ T4334] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.731055][ T4334] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.732827][ T4334] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.734317][ T4334] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.735824][ T4334] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.737156][ T4334] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 255.738408][ T4334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.999145][ T4333] Bluetooth: hci4: command 0x0406 tx timeout [ 256.319196][ T4333] Bluetooth: hci5: command 0x0409 tx timeout [ 256.719415][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 256.809187][ T4333] Bluetooth: hci6: command 0x0409 tx timeout [ 257.759142][ T4333] Bluetooth: hci7: command 0x0409 tx timeout [ 258.399178][ T4334] Bluetooth: hci5: command 0x041b tx timeout [ 258.799214][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 258.879157][ T4334] Bluetooth: hci6: command 0x041b tx timeout [ 259.839097][ T4334] Bluetooth: hci7: command 0x041b tx timeout [ 260.479132][ T4334] Bluetooth: hci5: command 0x040f tx timeout [ 260.879121][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 260.959092][ T4334] Bluetooth: hci6: command 0x040f tx timeout [ 261.919107][ T4334] Bluetooth: hci7: command 0x040f tx timeout [ 262.065538][ T7620] tipc: Enabling of bearer rejected, failed to enable media [ 262.169300][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.170747][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.292482][ T7657] chnl_net:caif_netlink_parms(): no params data found [ 262.326806][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.328158][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.330550][ T7657] device bridge_slave_0 entered promiscuous mode [ 262.333146][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.334264][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.335864][ T7657] device bridge_slave_1 entered promiscuous mode [ 262.354251][ T7657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.559097][ T4333] Bluetooth: hci5: command 0x0419 tx timeout [ 262.595647][ T7657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.822347][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.851209][ T7657] team0: Port device team_slave_0 added [ 262.858945][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 262.862496][ T7657] team0: Port device team_slave_1 added [ 262.959860][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 263.146908][ T4333] Bluetooth: hci6: command 0x0419 tx timeout [ 263.161401][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.185783][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.186997][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.191546][ T7657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.196418][ T7665] chnl_net:caif_netlink_parms(): no params data found [ 263.200768][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.201957][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.206095][ T7657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.260391][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.267335][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.268593][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.270646][ T7669] device bridge_slave_0 entered promiscuous mode [ 263.281240][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.282309][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.283892][ T7669] device bridge_slave_1 entered promiscuous mode [ 263.288400][ T7676] chnl_net:caif_netlink_parms(): no params data found [ 263.340405][ T7657] device hsr_slave_0 entered promiscuous mode [ 263.379367][ T7657] device hsr_slave_1 entered promiscuous mode [ 263.429130][ T7657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.430302][ T7657] Cannot create hsr debugfs directory [ 263.442081][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.445863][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.447228][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.448819][ T7665] device bridge_slave_0 entered promiscuous mode [ 263.491349][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.495993][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.504476][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.505774][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.507423][ T7665] device bridge_slave_1 entered promiscuous mode [ 263.520862][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.522103][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.523574][ T7676] device bridge_slave_0 entered promiscuous mode [ 263.533943][ T7669] team0: Port device team_slave_0 added [ 263.535131][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.536459][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.538003][ T7676] device bridge_slave_1 entered promiscuous mode [ 263.554467][ T7669] team0: Port device team_slave_1 added [ 263.561575][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.567954][ T7676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.570822][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.577660][ T7676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.632918][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.633980][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.637718][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.647940][ T7665] team0: Port device team_slave_0 added [ 263.656516][ T7657] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.734382][ T7665] team0: Port device team_slave_1 added [ 263.737299][ T7676] team0: Port device team_slave_0 added [ 263.738790][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.740124][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.744233][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.763063][ T7657] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.009948][ T4334] Bluetooth: hci7: command 0x0419 tx timeout [ 264.052332][ T7676] team0: Port device team_slave_1 added [ 264.064081][ T7657] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.100668][ T7657] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.155626][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.156870][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.161633][ T7676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.164231][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.165487][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.169615][ T7676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.220245][ T7669] device hsr_slave_0 entered promiscuous mode [ 264.279384][ T7669] device hsr_slave_1 entered promiscuous mode [ 264.319397][ T7669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.321346][ T7669] Cannot create hsr debugfs directory [ 264.322880][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.323993][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.327883][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.352964][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.354163][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.358212][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.368734][ T11] tipc: Disabling bearer [ 264.371888][ T11] tipc: Left network mode [ 264.450847][ T7665] device hsr_slave_0 entered promiscuous mode [ 264.502348][ T7665] device hsr_slave_1 entered promiscuous mode [ 264.530538][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.531841][ T7665] Cannot create hsr debugfs directory [ 264.563870][ T7676] device hsr_slave_0 entered promiscuous mode [ 264.569722][ T7676] device hsr_slave_1 entered promiscuous mode [ 264.599176][ T7676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.600426][ T7676] Cannot create hsr debugfs directory [ 264.703595][ T7747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.999'. [ 264.704979][ T7747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.999'. [ 264.776440][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.777967][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.852797][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.930859][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.932380][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.936442][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.946305][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.947976][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.951085][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.952341][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.964385][ T7669] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 264.980814][ T7669] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 265.013801][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.015358][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.016840][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.018332][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.019464][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.021081][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.022678][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.024338][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.026310][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.027958][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.062726][ T7669] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 265.110528][ T7669] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 265.203606][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.205269][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.229679][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.231445][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.242661][ T7665] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 265.336916][ T7665] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 265.574068][ T7793] 9pnet_fd: Insufficient options for proto=fd [ 265.748685][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.755347][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.756769][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.760755][ T7665] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 265.832307][ T7657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.836453][ T7665] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 265.938762][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.951302][ T7676] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 265.991454][ T7676] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 266.040619][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 266.042114][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.043490][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 266.045220][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.046558][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.047682][ T1627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.049029][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.106151][ T7676] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 266.141409][ T7676] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 266.192737][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.194154][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.196832][ T7657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.198218][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.199938][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.201414][ T1627] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.202516][ T1627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.203715][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.205398][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.207112][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.208362][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.470919][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.473080][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.474564][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.476174][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.477608][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.479123][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.480686][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.482215][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.483726][ T1627] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.542683][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.558457][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.275318][ T11] device hsr_slave_0 left promiscuous mode [ 267.309712][ T11] device hsr_slave_1 left promiscuous mode [ 267.349954][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.351274][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.353164][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.354442][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.355884][ T11] device bridge_slave_1 left promiscuous mode [ 267.357928][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.400542][ T11] device bridge_slave_0 left promiscuous mode [ 267.401645][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.539392][ T11] device veth1_macvtap left promiscuous mode [ 267.540611][ T11] device veth0_macvtap left promiscuous mode [ 267.541665][ T11] device veth1_vlan left promiscuous mode [ 267.543412][ T11] device veth0_vlan left promiscuous mode [ 269.782091][ T11] team0 (unregistering): Port device team_slave_1 removed [ 269.940213][ T11] team0 (unregistering): Port device team_slave_0 removed [ 270.110415][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.343745][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.439172][ T4333] Bluetooth: hci7: command 0x0405 tx timeout [ 272.720957][ T11] bond0 (unregistering): Released all slaves [ 272.937876][ T7657] device veth0_vlan entered promiscuous mode [ 272.940482][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.942158][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.943721][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.945098][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.946533][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.948123][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.951853][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 272.953157][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.954354][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.955787][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.961873][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 272.963267][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 273.000777][ T7870] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 273.121143][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.138514][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.150473][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.157159][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.158906][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.160870][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.162081][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.183583][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.185675][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.187257][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.188345][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.191505][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.193946][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.195480][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.198735][ T7657] device veth1_vlan entered promiscuous mode [ 273.215677][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.217202][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.236187][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.240498][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.248900][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.254457][ T7657] device veth0_macvtap entered promiscuous mode [ 273.258177][ T7657] device veth1_macvtap entered promiscuous mode [ 273.267045][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.268299][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1011'. [ 273.270463][ T7882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1011'. [ 273.274581][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.276389][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.277762][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.304774][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.313424][ T7665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.317054][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.318537][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.325069][ T7665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.334598][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.336345][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.337845][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.341789][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.344790][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.346463][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.349821][ T4406] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.351076][ T4406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.352587][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.354144][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.355584][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.357111][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.358703][ T4406] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.359861][ T4406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.366493][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.367976][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 273.380190][ T139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 273.385322][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.386907][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.388534][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.391595][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.394251][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.396071][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.404768][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.411722][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.413332][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.414935][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 273.431137][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.433333][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.434964][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 273.436556][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.438103][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 273.445585][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.447266][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.448882][ T7657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.461552][ T7657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.464257][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.467231][ T7657] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.468699][ T7657] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.478339][ T7657] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.484544][ T7657] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.488129][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.491174][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.492728][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.496612][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.512623][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.515462][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 273.517179][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.518594][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.522276][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.542484][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 273.544047][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.548781][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.550451][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.552425][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.553760][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.560882][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.564610][ T7669] device veth0_vlan entered promiscuous mode [ 273.604186][ T7669] device veth1_vlan entered promiscuous mode [ 273.613755][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.615198][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.617875][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.619547][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.655287][ T4659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.656611][ T4659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.660097][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.661985][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.711962][ T7669] device veth0_macvtap entered promiscuous mode [ 273.714224][ T7669] device veth1_macvtap entered promiscuous mode [ 273.718433][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.730779][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.732491][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.734144][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.735540][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.737103][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.738610][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.759467][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.762583][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.780066][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.781773][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.783391][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.784919][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.791175][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.792760][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.793953][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.796454][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.798064][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.802472][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.804211][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.805735][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.815870][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.818743][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.822081][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.823657][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.825137][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.895613][ T7669] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.922559][ T7669] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.923927][ T7669] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.925218][ T7669] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.964514][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 273.966299][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.976967][ T5119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.979365][ T5119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.980896][ T6472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.982629][ T6472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.271185][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.272757][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.297000][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.317557][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.327704][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 274.361419][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 274.366759][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 274.376086][ T7665] device veth0_vlan entered promiscuous mode [ 274.388180][ T7665] device veth1_vlan entered promiscuous mode [ 274.420362][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 274.422005][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 274.423623][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.425247][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.430475][ T7665] device veth0_macvtap entered promiscuous mode [ 274.446021][ T7665] device veth1_macvtap entered promiscuous mode [ 274.986598][ T7948] tmpfs: Bad value for 'mpol' [ 275.541184][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 275.546259][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.823718][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.871583][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.876595][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.885589][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.893453][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.897476][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.905919][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.908005][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.934821][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.936457][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.938219][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.967398][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.989579][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.991273][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.022219][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.456180][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.514515][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.516351][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.517918][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.522210][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.525856][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.527456][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.529231][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.530799][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.533248][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.539045][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.544638][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.562428][ T7665] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.568694][ T7665] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.577111][ T7665] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.578615][ T7665] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.692034][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.697827][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.699970][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.078600][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.081478][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.085691][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.089538][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.127190][ T4406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.128730][ T4406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.145005][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.159740][ T7676] device veth0_vlan entered promiscuous mode [ 277.164166][ T7676] device veth1_vlan entered promiscuous mode [ 277.171494][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.173463][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.181317][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.186244][ T4406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.201984][ T7676] device veth0_macvtap entered promiscuous mode [ 277.205257][ T7676] device veth1_macvtap entered promiscuous mode [ 277.271445][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.281916][ T4506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.283786][ T4506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.289962][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.291599][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.293098][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.294639][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.296188][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.297925][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.308734][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.313021][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.314606][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.316255][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.317957][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.329179][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.331603][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.332953][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.334870][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.336755][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.338357][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.344385][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.350452][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.352870][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.354356][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.355957][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.357362][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.358858][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.367294][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.372506][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.374010][ T7676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.375737][ T7676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.378602][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.471938][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.481931][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.484070][ T6472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.486767][ T7676] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.488165][ T7676] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.491408][ T7676] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.492754][ T7676] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.501695][ T7998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 277.507663][ T7998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1023'. [ 277.541109][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.722079][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.723339][ T4406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.727917][ T4406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.735604][ T6310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.740849][ T6310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.742619][ T6310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.745243][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 278.117719][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.121225][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.219850][ T11] tipc: Disabling bearer [ 278.221271][ T11] tipc: Left network mode [ 278.864706][ T8067] tmpfs: Bad value for 'mpol' [ 279.159618][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1027'. [ 279.161240][ T8045] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1027'. [ 279.264286][ T8057] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 279.699084][ T78] block nbd7: Attempted send on invalid socket [ 279.700084][ T78] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 279.843422][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1033'. [ 279.849259][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1033'. [ 281.462634][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1044'. [ 281.464151][ T8125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1044'. [ 281.590281][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1045'. [ 281.591720][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1045'. [ 282.013971][ T27] audit: type=1326 audit(282.000:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa495c0a8 code=0x7ffc0000 [ 282.027032][ T27] audit: type=1326 audit(282.000:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa495c0a8 code=0x7ffc0000 [ 282.042533][ T27] audit: type=1326 audit(282.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.4.1048" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffa495c0a8 code=0x7ffc0000 [ 282.659569][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.667567][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.466609][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.468334][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.806304][ T8229] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1062'. [ 283.807911][ T8229] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1062'. [ 284.423658][ T11] device hsr_slave_0 left promiscuous mode [ 284.458098][ T11] device hsr_slave_1 left promiscuous mode [ 284.731307][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.737288][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.743214][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.744778][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.748368][ T11] device bridge_slave_1 left promiscuous mode [ 284.752646][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.771881][ T11] device bridge_slave_0 left promiscuous mode [ 284.774127][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.812063][ T11] device hsr_slave_0 left promiscuous mode [ 284.870824][ T11] device hsr_slave_1 left promiscuous mode [ 284.919140][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.920452][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.921995][ T11] device bridge_slave_1 left promiscuous mode [ 284.923024][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.974520][ T11] device bridge_slave_0 left promiscuous mode [ 284.975706][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.139261][ T11] device veth1_macvtap left promiscuous mode [ 285.140494][ T11] device veth0_macvtap left promiscuous mode [ 285.141727][ T11] device veth1_vlan left promiscuous mode [ 285.142665][ T11] device veth0_vlan left promiscuous mode [ 285.239769][ T11] device veth1_macvtap left promiscuous mode [ 285.241087][ T11] device veth0_macvtap left promiscuous mode [ 285.242276][ T11] device veth1_vlan left promiscuous mode [ 285.243477][ T11] device veth0_vlan left promiscuous mode [ 285.930818][ T8295] misc userio: No port type given on /dev/userio [ 286.757336][ T8300] fuse: Bad value for 'fd' [ 287.551565][ T11] team0 (unregistering): Port device team_slave_1 removed [ 287.709886][ T11] team0 (unregistering): Port device team_slave_0 removed [ 287.909703][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.110582][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.476374][ T8321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.477920][ T8321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.181372][ T11] bond0 (unregistering): Released all slaves [ 292.091469][ T11] bond1 (unregistering): (slave batadv_slave_1): Releasing active interface [ 292.139846][ T11] bond1 (unregistering): Released all slaves [ 293.742385][ T11] team0 (unregistering): Port device team_slave_1 removed [ 293.900549][ T11] team0 (unregistering): Port device team_slave_0 removed [ 294.060603][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.259550][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.782983][ T11] bond0 (unregistering): Released all slaves [ 297.038597][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.039816][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.041527][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.044271][ T8292] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 297.047323][ T8292] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 297.061180][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.063126][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.065081][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.066288][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.067638][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.068765][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.070752][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.072029][ T8292] wlan0 speed is unknown, defaulting to 1000 [ 297.119539][ T8346] netlink: 'syz.8.1089': attribute type 1 has an invalid length. [ 297.217860][ T8349] __nla_validate_parse: 1 callbacks suppressed [ 297.217878][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1089'. [ 297.223621][ T8354] fuse: Bad value for 'fd' [ 297.243308][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.244896][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.149904][ T8438] fuse: Bad value for 'fd' [ 300.158977][ T8442] netlink: 'syz.8.1103': attribute type 1 has an invalid length. [ 300.257486][ T8447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.268598][ T8447] device batadv_slave_1 entered promiscuous mode [ 300.296090][ T8447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.326927][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1103'. [ 301.408070][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1113'. [ 301.420275][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1113'. [ 301.638814][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.642914][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.678046][ T8506] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1118'. [ 301.680484][ T8506] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1118'. [ 302.212793][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.218511][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.769000][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1125'. [ 302.776221][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1125'. [ 303.311708][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1131'. [ 303.319136][ T8584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1131'. [ 303.805717][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1136'. [ 303.811077][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1136'. [ 304.069597][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1139'. [ 304.073367][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1139'. [ 304.907755][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 304.911332][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1147'. [ 305.618764][ T27] audit: type=1326 audit(305.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8705 comm="syz.4.1152" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa495c0a8 code=0x0 [ 306.162351][ T8732] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.280617][ T8732] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.380777][ T8732] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.386525][ T8743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.390768][ T8743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.460538][ T8732] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.611129][ T8732] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.614206][ T8732] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.617137][ T8732] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.620742][ T8732] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.045684][ T8798] fuse: Invalid rootmode [ 309.182427][ T27] audit: type=1326 audit(309.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.7.1167" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5d5c0a8 code=0x0 [ 310.240148][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.521661][ T8818] __nla_validate_parse: 4 callbacks suppressed [ 318.521677][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 318.524189][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1171'. [ 318.578760][ T8841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.596009][ T8841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.003516][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.005295][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.047942][ T27] audit: type=1326 audit(320.030:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.7.1180" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5d5c0a8 code=0x0 [ 320.986396][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.989681][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.993071][ T8927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.995012][ T8927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.000821][ T8927] netlink: 'syz.6.1183': attribute type 10 has an invalid length. [ 321.003619][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.005475][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.320528][ T8931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.323207][ T8931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.327700][ T8927] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.329052][ T8927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.330737][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.332017][ T8927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.334768][ T8927] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 321.336634][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1183'. [ 321.338278][ T8929] device bridge_slave_1 left promiscuous mode [ 321.340083][ T8929] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.372755][ T8929] device bridge_slave_0 left promiscuous mode [ 321.373879][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.480403][ T8929] bond0: (slave bridge0): Releasing backup interface [ 323.483193][ T27] audit: type=1326 audit(323.470:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.6.1193" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83f5c0a8 code=0x0 [ 334.086824][ T8954] netlink: 'syz.5.1189': attribute type 21 has an invalid length. [ 334.088199][ T8954] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1189'. [ 334.096758][ T8954] netlink: 'syz.5.1189': attribute type 4 has an invalid length. [ 334.098036][ T8954] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1189'. [ 334.101244][ T8959] device batadv1 entered promiscuous mode [ 334.115209][ T8959] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 334.173053][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.174622][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.188104][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.194550][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.671491][ T9032] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 336.656776][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 336.663759][ T9067] device bridge_slave_1 left promiscuous mode [ 336.668181][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.705900][ T9067] device bridge_slave_0 left promiscuous mode [ 336.707262][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.060430][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.062381][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.559819][ T9118] syz.8.1220 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 339.748923][ T9128] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 339.756099][ T9128] cramfs: wrong magic [ 349.476733][ T9139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.478259][ T9139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.090569][ T9118] wlan0 speed is unknown, defaulting to 1000 [ 350.124699][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1228'. [ 350.134891][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1228'. [ 350.135618][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.137943][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.049974][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'. [ 354.051705][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1240'. [ 354.053405][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.055160][ T9312] device batadv_slave_1 entered promiscuous mode [ 354.075176][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.099602][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1241'. [ 354.594011][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.596257][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.942948][ T9380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.945800][ T9380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.273073][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 356.274549][ T9410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1256'. [ 356.276312][ T9413] netlink: 'syz.6.1257': attribute type 1 has an invalid length. [ 356.286088][ T9413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.310532][ T9414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.311821][ T9414] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 356.323636][ T9414] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 356.355350][ T9415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.359566][ T9415] device batadv_slave_1 entered promiscuous mode [ 356.364709][ T9415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.379852][ T9415] bond1: (slave batadv_slave_1): making interface the new active one [ 356.381819][ T9415] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 359.199717][ T9497] netlink: 'syz.7.1270': attribute type 1 has an invalid length. [ 359.224769][ T9497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.226522][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1271'. [ 359.227926][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1271'. [ 359.237375][ T9500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.238711][ T9500] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 359.241930][ T9500] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 359.272992][ T9502] bond1: (slave batadv_slave_1): making interface the new active one [ 359.277053][ T9502] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 359.289331][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.290890][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.496474][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.501671][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.799215][ T9552] netlink: 'syz.7.1287': attribute type 1 has an invalid length. [ 361.805439][ T9552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.834079][ T9553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.835453][ T9553] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 361.837700][ T9553] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 361.850457][ T9554] bond1: (slave batadv_slave_1): Releasing active interface [ 361.895067][ T9554] bond2: (slave batadv_slave_1): making interface the new active one [ 361.896984][ T9554] bond2: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 361.898681][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1289'. [ 361.900282][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1289'. [ 363.084305][ T9590] netlink: 'syz.5.1294': attribute type 1 has an invalid length. [ 363.088394][ T9590] netlink: 'syz.5.1294': attribute type 2 has an invalid length. [ 363.090581][ T9590] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1294'. [ 363.665989][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'. [ 363.667545][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1300'. [ 363.679249][ T9600] netlink: 'syz.6.1301': attribute type 1 has an invalid length. [ 363.700322][ T9600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.729924][ T9601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.731199][ T9601] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 363.733459][ T9601] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 363.847487][ T9602] bond1: (slave batadv_slave_1): Releasing active interface [ 363.891620][ T9602] bond2: (slave batadv_slave_1): making interface the new active one [ 363.893393][ T9602] bond2: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 363.898234][ T9603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1301'. [ 363.901022][ T9603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.902456][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1302'. [ 363.945587][ T9590] syz.5.1294 (9590): drop_caches: 2 [ 363.973259][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.982157][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.013716][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.017721][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.679932][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.678871][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1313'. [ 376.680529][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1313'. [ 377.346206][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.347805][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.879162][ T4333] Bluetooth: hci0: command 0x0406 tx timeout [ 378.880226][ T4333] Bluetooth: hci5: command 0x0406 tx timeout [ 378.881169][ T4333] Bluetooth: hci6: command 0x0406 tx timeout [ 378.882046][ T4333] Bluetooth: hci7: command 0x0406 tx timeout [ 378.971561][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.973114][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.320105][ T9702] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.327694][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1331'. [ 379.329957][ T9706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1331'. [ 382.058788][ T9750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.081596][ T9767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.083146][ T9767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.085277][ T9756] bond2: (slave batadv_slave_1): Releasing active interface [ 383.225139][ T9794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.227587][ T9794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.778613][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1360'. [ 383.780459][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1360'. [ 383.821946][ T9806] ------------[ cut here ]------------ [ 383.823014][ T9806] WARNING: CPU: 1 PID: 9806 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x13c/0x16c [ 383.824555][ T9806] Modules linked in: [ 383.825172][ T9806] CPU: 1 PID: 9806 Comm: syz.7.1361 Not tainted syzkaller #0 [ 383.826336][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 383.827941][ T9806] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 383.829111][ T9806] pc : taprio_get_start_time+0x13c/0x16c [ 383.830061][ T9806] lr : taprio_get_start_time+0x13c/0x16c [ 383.830972][ T9806] sp : ffff800022766ba0 [ 383.831675][ T9806] x29: ffff800022766ba0 x28: 0000000000000000 x27: ffff7000044ecd94 [ 383.832940][ T9806] x26: ffff0000fadd2e00 x25: ffff0000f2c76000 x24: dfff800000000000 [ 383.834273][ T9806] x23: 0000000000000001 x22: 000000595d048205 x21: 0000000000000000 [ 383.835642][ T9806] x20: 0000000000000000 x19: ffff800022766c98 x18: 0000000000000000 [ 383.836904][ T9806] x17: ffff8000181f9000 x16: ffff8000082d22d4 x15: ffff800017cd9fc0 [ 383.838082][ T9806] x14: ffff0000d8cb4218 x13: 1ffff00002a180b1 x12: 0000000000080000 [ 383.839471][ T9806] x11: 00000000000054d3 x10: ffff800038870000 x9 : ffff80000ffeda44 [ 383.840865][ T9806] x8 : 00000000000054d4 x7 : ffff80000ffed99c x6 : 0000000000000000 [ 383.842243][ T9806] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 383.843488][ T9806] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 0000000000000000 [ 383.844727][ T9806] Call trace: [ 383.845223][ T9806] taprio_get_start_time+0x13c/0x16c [ 383.846052][ T9806] taprio_change+0x3670/0x4ca0 [ 383.846790][ T9806] taprio_init+0x498/0x520 [ 383.847486][ T9806] qdisc_create+0x6f0/0xe20 [ 383.848191][ T9806] tc_modify_qdisc+0x950/0x178c [ 383.848958][ T9806] rtnetlink_rcv_msg+0x734/0xce4 [ 383.849783][ T9806] netlink_rcv_skb+0x208/0x3c4 [ 383.850525][ T9806] rtnetlink_rcv+0x28/0x38 [ 383.851212][ T9806] netlink_unicast+0x60c/0x824 [ 383.852027][ T9806] netlink_sendmsg+0x6e8/0x9b0 [ 383.852806][ T9806] ____sys_sendmsg+0x5b8/0x918 [ 383.853558][ T9806] __sys_sendmsg+0x25c/0x320 [ 383.854306][ T9806] __arm64_sys_sendmsg+0x80/0x94 [ 383.855062][ T9806] invoke_syscall+0x98/0x2bc [ 383.855714][ T9806] el0_svc_common+0x138/0x258 [ 383.856482][ T9806] do_el0_svc+0x58/0x13c [ 383.857183][ T9806] el0_svc+0x58/0x138 [ 383.857824][ T9806] el0t_64_sync_handler+0x84/0xf0 [ 383.858610][ T9806] el0t_64_sync+0x18c/0x190 [ 383.859346][ T9806] irq event stamp: 325 [ 383.859964][ T9806] hardirqs last enabled at (324): [] ktime_mono_to_any+0x14c/0x22c [ 383.861585][ T9806] hardirqs last disabled at (325): [] el1_dbg+0x24/0x80 [ 383.862911][ T9806] softirqs last enabled at (260): [] local_bh_enable+0x10/0x34 [ 383.864275][ T9806] softirqs last disabled at (316): [] taprio_change+0x3500/0x4ca0 [ 383.865586][ T9806] ---[ end trace 0000000000000000 ]--- [ 383.866441][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.709592][ T4406] tipc: Left network mode