last executing test programs: 9.462547191s ago: executing program 0 (id=341): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x27) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000500)) r7 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x0, r7}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9], 0x40}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000000000063aa87ff00000000b5090000000000007b8af0ff00000000bfa100000000000407010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.718823714s ago: executing program 0 (id=349): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40500000000000071103d00000000000600000000000000950000000000000099b2c958e17222c54e17b242e3c6bacb4cc117ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r0, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001780), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7.502749653s ago: executing program 0 (id=352): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket(0x10, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@remote, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x154}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c3400000000001090224000100"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef", 0x11) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d17, &(0x7f0000000980)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="330300000000000000001c0000005c00018008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="186772653000000000"], 0x94}, 0x1, 0xa60d000000000000}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001300)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.373688594s ago: executing program 2 (id=380): bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x0, 0x0, 0x3, 0x0, 0x0, 0x82}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_read(r3, 0x1, 0x12, &(0x7f0000000080)=""/18) pwritev(r4, &(0x7f00000008c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1}, 0x3}], 0x1, 0x7fb10727dcab, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0x20}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001007665746830"], 0xfc}}, 0x0) 3.363500785s ago: executing program 1 (id=381): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TIOCL_SETVESABLANK(r0, 0x560e, &(0x7f0000000140)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x0, 0x0) fchdir(r3) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0x1, 0x0, 0xf5f2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r5, 0x5, 0x4, 0x0, @link_fd, r6}, 0x20) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x2) 3.318017079s ago: executing program 0 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) ioctl$int_in(r1, 0x5452, &(0x7f0000000840)=0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 3.214800298s ago: executing program 1 (id=383): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x48000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x5, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 3.214590018s ago: executing program 0 (id=384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000004000)=""/102399, 0x18fff}, {&(0x7f0000000ac0)=""/4095, 0xfff}], 0x2, 0xfffffffd, 0x0) r1 = mq_open(&(0x7f0000000200)='^-!-):(%@^+\x00', 0x40, 0x104, 0x0) mq_getsetattr(r1, 0x0, &(0x7f0000000380)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) preadv2(r2, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000840)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000b1401000000000042c6c0647ff08f2b5754feb8ab8ac5000c000008000100000000004e"], 0x28}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000c002b80080003000e00000008000a00", @ANYRES32=0x0, @ANYBLOB="2397663cd0d52c27815e65e295af3c28a3bac1e2491ada10f1429a534b1565e1c3c2b3604ff3ae9791b1a1cc49a5a7883856193e90be30a3812fe18f5bcda99dfcfdbb08d49acbd4808698489a5cdeffa96a881c8878856b5a5f5c7400cf222055f2aeea8f2f9efa0d4d83f7b4a4800814fff2d381beb10bea12ccb9a867e30d0762b8c1107314544f958add5c7352f2a8155806ae53c56ad60a53e3685d8958bc0b5b0bfaaccc8ddfa915566e1e29030bea"], 0x34}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f0000000000)=""/2, &(0x7f0000003fc0)=0x2) 3.187603191s ago: executing program 1 (id=385): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406a0584000000000000010902240001000000000904000001030000000921000000012205000905810300000000003f8295d27a1f4a5629eaf08691e8e6362c9756f6c7aac8d78cce2661f7b676b93085b56bf0c3861a0520f3e844e59b41927690b07e231a0272402883a6e49b1aff03b256a069b6b7bfee69"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23ded2aa000000", 0xb8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x2}}], 0x18}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000000101041900000000000000020000002400018014005536018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000b0000000000280007400000002c9966cccca64a08c973c41ade5f00f59bd4818de50bfa59801387d4af259fb80bd39043da6f28e97ef482958d6f082c3a81f1694c088d2353e7d7a3b1e9959928a866ecdc90eb04f15d2afd9a0d17888f38baa0ec552739610efc21860290ba7d5b99df152e31ec7094fe1a1be07922"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fsi_master_aspeed_opb_read\x00', r2}, 0x10) 2.697957463s ago: executing program 4 (id=391): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x0, 0x0) 1.720598319s ago: executing program 1 (id=392): syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25fd120100"], 0x14}, 0x1, 0x0, 0x0, 0x2}, 0xc800) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x1, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xe0, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7fffffff}, @CTA_TUPLE_ORIG={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1.572770572s ago: executing program 4 (id=393): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.48284561s ago: executing program 0 (id=394): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @timestamp, @window], 0x21a5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 1.410880046s ago: executing program 4 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) ioctl$int_in(r1, 0x5452, &(0x7f0000000840)=0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 1.314880914s ago: executing program 4 (id=396): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=r2], 0xbc}, 0x1, 0x0, 0x0, 0x20048090}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb90500000001090222000100000000090400000101035100090502fffffffff000"], 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000004000004f16cab22fafae71b8db4a6aa69904840fc4f542018b6fd589b6bf13c97cd7d025b9b9ed7ab14b29fd41804c8edbafc67cc430819e3919ed83c62b6b0dde9716a0e30117bca5d416762545a19e29edb06b51c6e05278b983fafbb183c038d3c9505ea18bd2842e5c0c1172c9c325bec3400e99e02953853bf93d952d94a1bcd59abf5eaf01634e719c32a33d5faab371fb6013b359e5015f57d304cf07364ee120fa6050e1b07", @ANYRESHEX], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(r3, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x2) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f0d6166b00e7e4810cf02d8347ae8edafdf14d56273b7f49a2c10a88986d", @ANYRES32, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 624.319355ms ago: executing program 1 (id=397): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x80, 0x0}, 0x0) 506.565605ms ago: executing program 1 (id=398): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x27) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x640401, 0x0) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x0, r8}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10], 0x40}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000000000063aa87ff00000000b5090000000000007b8af0ff00000000bfa100000000000407010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 369.008367ms ago: executing program 3 (id=399): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000002300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x16ec7077c8c871d9}, 0x38) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 337.036ms ago: executing program 2 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000060000008500000086", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f20000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 254.880597ms ago: executing program 3 (id=401): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0xa, 0x2, 0x1d, "5748d20a4f0dcb623d994e00d1b9fe678683c0fffa4bb255c991e76739e199d8cdd2183b76c78176568e7f86ef95553afdbab1b0d5c60911194649d33d81094a", "e5d755ed8dc712c710eaf7a158e7425902d092eae9849a21a601141d546c89ae9edc3443d78840023f6b31e677978f71d1408c73027bf3a182f6d8b48ea2d940", "02f19ebd0f58e3bf691bd5476d1ac7ae9997e063067d19d99652c4a5a777405e", [0x4, 0x1]}) 254.725447ms ago: executing program 2 (id=402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 238.987439ms ago: executing program 2 (id=403): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xd7, 0x0, &(0x7f00000000c0)) 203.743872ms ago: executing program 2 (id=404): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)=""/2, &(0x7f0000003fc0)=0x2) 165.022005ms ago: executing program 3 (id=405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x30}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 164.020995ms ago: executing program 2 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) ioctl$int_in(r1, 0x5452, &(0x7f0000000840)=0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 105.51013ms ago: executing program 3 (id=407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 92.558431ms ago: executing program 3 (id=408): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0xfff, 0xfff, 0x6b, 0x2a7, 0x3, 0x7f, 0x8001, {0x0, @in={{0x2, 0x4e21, @loopback}}, 0x3, 0x3ff, 0x4, 0x2, 0x800}}, &(0x7f0000000240)=0xb0) 10.739768ms ago: executing program 3 (id=409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2}}], 0x40002db, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000440)=0x808, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000002180), 0x4) sendto$inet(r2, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r2, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) 10.519698ms ago: executing program 4 (id=410): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 4 (id=411): r0 = syz_io_uring_setup(0x24fa, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32, @ANYBLOB="0000000000000000b703000000000031"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, r3, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x104eb4, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. [ 35.615759][ T4281] cgroup: Unknown subsys name 'net' [ 35.896176][ T4281] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.266868][ T4281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.286714][ T4296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.289217][ T4296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.291793][ T4296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.294455][ T4296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.302164][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.304296][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.307425][ T4298] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.315534][ T4298] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.317867][ T4298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.320404][ T4298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.323022][ T4298] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.324898][ T4298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.350595][ T4296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.354220][ T4296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.356441][ T4296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.358956][ T4296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.361110][ T4296] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.363976][ T4296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.368758][ T4294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.388884][ T4305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.396203][ T4294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 37.398863][ T4294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 37.400982][ T4305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.403280][ T4305] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 37.406531][ T4294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.406582][ T4305] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 37.410990][ T4305] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 37.413326][ T4305] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.425002][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.434992][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.573576][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 37.603256][ T4293] chnl_net:caif_netlink_parms(): no params data found [ 37.655755][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 37.658879][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 37.688185][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.690046][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.692419][ T4293] device bridge_slave_0 entered promiscuous mode [ 37.696717][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.698387][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.700459][ T4293] device bridge_slave_1 entered promiscuous mode [ 37.703618][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.705321][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.707523][ T4297] device bridge_slave_0 entered promiscuous mode [ 37.733326][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.735102][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.737435][ T4297] device bridge_slave_1 entered promiscuous mode [ 37.752630][ T4293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.770592][ T4293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.797418][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.799142][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.801414][ T4301] device bridge_slave_0 entered promiscuous mode [ 37.805430][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.810542][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.819515][ T4293] team0: Port device team_slave_0 added [ 37.822451][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.824308][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.826642][ T4301] device bridge_slave_1 entered promiscuous mode [ 37.840105][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.842092][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.844374][ T4302] device bridge_slave_0 entered promiscuous mode [ 37.847758][ T4293] team0: Port device team_slave_1 added [ 37.865433][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.867254][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.869548][ T4302] device bridge_slave_1 entered promiscuous mode [ 37.879873][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.883650][ T4297] team0: Port device team_slave_0 added [ 37.886469][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.905553][ T4297] team0: Port device team_slave_1 added [ 37.907533][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.909296][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.916135][ T4293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.930905][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.938184][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.939930][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.946993][ T4293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.960824][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.972036][ T4301] team0: Port device team_slave_0 added [ 37.975080][ T4301] team0: Port device team_slave_1 added [ 37.986699][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.988346][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.999098][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.023798][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.025626][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.032748][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.036192][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.037898][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.044173][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.103142][ T4293] device hsr_slave_0 entered promiscuous mode [ 38.151816][ T4293] device hsr_slave_1 entered promiscuous mode [ 38.195434][ T4302] team0: Port device team_slave_0 added [ 38.197203][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.198909][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.206834][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.226930][ T4302] team0: Port device team_slave_1 added [ 38.303158][ T4297] device hsr_slave_0 entered promiscuous mode [ 38.341762][ T4297] device hsr_slave_1 entered promiscuous mode [ 38.401648][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.403641][ T4297] Cannot create hsr debugfs directory [ 38.473183][ T4301] device hsr_slave_0 entered promiscuous mode [ 38.511784][ T4301] device hsr_slave_1 entered promiscuous mode [ 38.581466][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.583424][ T4301] Cannot create hsr debugfs directory [ 38.590742][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.592596][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.598315][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.603387][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.605145][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.611191][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.725430][ T4302] device hsr_slave_0 entered promiscuous mode [ 38.771747][ T4302] device hsr_slave_1 entered promiscuous mode [ 38.821539][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.823379][ T4302] Cannot create hsr debugfs directory [ 38.837427][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 38.970768][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.972534][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.974677][ T4300] device bridge_slave_0 entered promiscuous mode [ 38.977909][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.980546][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.982915][ T4300] device bridge_slave_1 entered promiscuous mode [ 38.992560][ T4293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.043187][ T4293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.093762][ T4293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.145061][ T4293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.204714][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.228286][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.252436][ T4301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.294146][ T4300] team0: Port device team_slave_0 added [ 39.295598][ T4301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.325065][ T4301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.361977][ T4296] Bluetooth: hci0: command tx timeout [ 39.361985][ T47] Bluetooth: hci1: command tx timeout [ 39.367935][ T4300] team0: Port device team_slave_1 added [ 39.373285][ T4301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.442247][ T4305] Bluetooth: hci3: command tx timeout [ 39.442279][ T47] Bluetooth: hci2: command tx timeout [ 39.451765][ T47] Bluetooth: hci4: command tx timeout [ 39.463816][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.502956][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.504520][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.510472][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.519245][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.521053][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.527719][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.551889][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.554494][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.613543][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.668270][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.719391][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.727867][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.730512][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.773765][ T4300] device hsr_slave_0 entered promiscuous mode [ 39.821835][ T4300] device hsr_slave_1 entered promiscuous mode [ 39.861615][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.863320][ T4300] Cannot create hsr debugfs directory [ 39.874065][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.877129][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.879487][ T191] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.881251][ T191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.883930][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.886406][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.888633][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.890436][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.894970][ T4302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.954033][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.956785][ T4302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.994349][ T4302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.046591][ T4302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.095488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.098225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.100830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.104939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.107342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.129127][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.132031][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.150523][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.156282][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.158658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.190982][ T4293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.196125][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.202571][ T4300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.253521][ T4300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.294570][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.296773][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.299760][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.302640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.305005][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.313277][ T4300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.353841][ T4300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.422523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.425026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.428488][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.430343][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.438148][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.440712][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.444865][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.446591][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.449552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.463208][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.472894][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.491166][ T4301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.496495][ T4301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.506319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.508964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.513462][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.516374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.518964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.522325][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.524873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.527164][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.529850][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.532917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.535294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.537525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.541993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.544256][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.549910][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.566323][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.568764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.570928][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.572830][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.580807][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.583517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.585771][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.587488][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.589512][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.592830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.594909][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.605254][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.616727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.619400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.621293][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.623675][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.628783][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.668272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.671010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.675011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.677525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.679835][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.681753][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.684555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.687175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.689686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.693266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.695585][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.697298][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.699353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.702915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.705029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.707624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.710259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.714068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.716550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.719101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.722238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.724467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.726705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.736831][ T4297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.739368][ T4297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.751120][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.772775][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.777154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.779613][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.783172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.785430][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.788083][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.790324][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.794280][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.797493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.799709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.802125][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.805084][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.807143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.816072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.818446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.839851][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.848021][ T4293] device veth0_vlan entered promiscuous mode [ 40.854818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.857105][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.859265][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.867833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.870341][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.874588][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.880976][ T4293] device veth1_vlan entered promiscuous mode [ 40.897088][ T4301] device veth0_vlan entered promiscuous mode [ 40.907777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.910060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.915658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.918013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.920351][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.922209][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.924882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.927685][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.929939][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.931651][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.935280][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.937767][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.961274][ T4293] device veth0_macvtap entered promiscuous mode [ 40.971797][ T4301] device veth1_vlan entered promiscuous mode [ 40.974113][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.976668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.978993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.981620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.983975][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.986471][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.989118][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.995977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.998574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.001089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.005102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.008154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.010536][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.014231][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.016702][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.019128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.021997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.024365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.030512][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.035034][ T4293] device veth1_macvtap entered promiscuous mode [ 41.045721][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.051051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.054247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.056224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.058156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.060453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.064208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.066040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.076351][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.078265][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.080500][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.085511][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.090669][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.097276][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.110203][ T4293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.112594][ T4293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.114757][ T4293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.116707][ T4293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.135665][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.138129][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.177742][ T4301] device veth0_macvtap entered promiscuous mode [ 41.197461][ T4302] device veth0_vlan entered promiscuous mode [ 41.206910][ T4301] device veth1_macvtap entered promiscuous mode [ 41.210641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.214686][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.217267][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.224876][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.227410][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.229703][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.235286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.240988][ T4297] device veth0_vlan entered promiscuous mode [ 41.263851][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.265748][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.273350][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.275589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.277805][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.280193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.283795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.286144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.291255][ T4297] device veth1_vlan entered promiscuous mode [ 41.295490][ T4302] device veth1_vlan entered promiscuous mode [ 41.305071][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.307686][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.311022][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.320777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.324060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.326289][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.329269][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.333829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.336085][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.338355][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.340759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.344118][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.346051][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.349346][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.355175][ T4301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.357739][ T4301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.360776][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.364893][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.370654][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.378504][ T4297] device veth0_macvtap entered promiscuous mode [ 41.381477][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.383544][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.385941][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.388458][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.390834][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.396908][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.410200][ T4297] device veth1_macvtap entered promiscuous mode [ 41.414128][ T4301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.416301][ T4301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.418364][ T4301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.420268][ T4301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.442091][ T47] Bluetooth: hci1: command tx timeout [ 41.443397][ T47] Bluetooth: hci0: command tx timeout [ 41.444630][ T4302] device veth0_macvtap entered promiscuous mode [ 41.449068][ T4302] device veth1_macvtap entered promiscuous mode [ 41.465618][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.468057][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.470281][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.473728][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.477265][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.479206][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.484214][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.486873][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.489442][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.493995][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.496322][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.498816][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.511487][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.514309][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.516662][ T4297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.518826][ T4297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.523192][ T4296] Bluetooth: hci4: command tx timeout [ 41.524713][ T4296] Bluetooth: hci2: command tx timeout [ 41.526103][ T4296] Bluetooth: hci3: command tx timeout [ 41.531055][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.539934][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.539993][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.545962][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.548733][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.551030][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.554551][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.558089][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.595928][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.609233][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.618619][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.620619][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.624183][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.626712][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.629206][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.640150][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.674250][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.676356][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.679853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.711617][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.714046][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.716399][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.718969][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.721255][ T4302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.724863][ T4302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.728247][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.776861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.850910][ T27] audit: type=1326 audit(41.830:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4365 comm="syz.1.2" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa33493e8 code=0x0 [ 41.874336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.493508][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.493542][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.498896][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 42.652360][ T4302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.654529][ T4302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.656555][ T4302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.658566][ T4302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.722345][ T4376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.830531][ T4381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.867675][ T4300] device veth0_vlan entered promiscuous mode [ 42.874735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.877176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.880869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.883792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.894752][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.896546][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.962453][ T4377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6'. [ 42.966552][ T4386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.034682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.037088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.039244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.044497][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.046663][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.235256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.238053][ T4300] device veth1_vlan entered promiscuous mode [ 43.242003][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.243909][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.247794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.254694][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.272769][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.276827][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.313235][ T4300] device veth0_macvtap entered promiscuous mode [ 43.317523][ T4300] device veth1_macvtap entered promiscuous mode [ 43.319771][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.330528][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.333714][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.336050][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.385596][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.387978][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.400540][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.404255][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.406555][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.408808][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.411292][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.414224][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.418712][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.419025][ T4392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.430140][ T47] Bluetooth: to_multiplier 42238 > 3200 [ 43.442499][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.445207][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.448575][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.449100][ T4393] mmap: syz.0.1 (4393) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.452535][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.460608][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.464763][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.467083][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.469634][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.478946][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.484685][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.497466][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.500361][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.502778][ T4392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.505304][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.510911][ T4300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.513773][ T4300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.515807][ T4300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.517990][ T4300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.537801][ T4296] Bluetooth: hci0: command tx timeout [ 43.539107][ T4296] Bluetooth: hci1: command tx timeout [ 43.577737][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.579697][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.587728][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.605151][ T47] Bluetooth: hci3: command tx timeout [ 43.605334][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.606616][ T47] Bluetooth: hci2: command tx timeout [ 43.608711][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.609547][ T47] Bluetooth: hci4: command tx timeout [ 43.615835][ T191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.775723][ T4336] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.824910][ T4396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.849104][ T4400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.873366][ T4400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.878509][ T4396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.063325][ T4403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.098214][ T4403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.108339][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10'. [ 44.171633][ T4336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.174515][ T4336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.177395][ T4336] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 44.179869][ T4336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.198507][ T4336] usb 1-1: config 0 descriptor?? [ 44.693888][ T4336] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 44.696478][ T4336] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 44.698532][ T4336] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 44.700368][ T4336] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 44.706415][ T4336] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 44.712010][ T4336] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 44.715000][ T4336] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 44.829274][ T4416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.881592][ T4416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.903810][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 44.903989][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 44.966192][ T4416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.001876][ T4416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.077899][ T4424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.124405][ T4424] wlan1: authenticate with 50:50:50:50:50:50 [ 45.129886][ T4424] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 45.143700][ T39] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 45.145946][ T39] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 45.150270][ T39] wlan1: authentication with 50:50:50:50:50:50 timed out [ 45.238789][ T4424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'. [ 45.457978][ T4429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.471920][ T4431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.481750][ T4429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.586979][ T4435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21'. [ 45.602361][ T4296] Bluetooth: hci1: command tx timeout [ 45.603780][ T4296] Bluetooth: hci0: command tx timeout [ 45.628231][ T4436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.661839][ T4436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.682091][ T47] Bluetooth: hci4: command tx timeout [ 45.683592][ T47] Bluetooth: hci2: command tx timeout [ 45.685018][ T47] Bluetooth: hci3: command tx timeout [ 46.043349][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.061349][ C1] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -108 [ 46.073078][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.211670][ T1515] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 46.305072][ T4443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.341733][ T4443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.347414][ T4443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.25'. [ 46.383948][ T1515] usb 1-1: device descriptor read/64, error -32 [ 46.507198][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 46.759759][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.812185][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.824343][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.32'. [ 46.874844][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.901651][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.008722][ T4466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.043237][ T4466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.377455][ T4468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.465121][ T24] usb 1-1: USB disconnect, device number 2 [ 47.478052][ T4473] loop1: detected capacity change from 0 to 256 [ 47.487842][ T4470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.536854][ T4468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.36'. [ 47.655154][ T4475] wlan1: authenticate with 50:50:50:50:50:50 [ 47.657833][ T4475] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 47.660305][ T4361] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 47.664643][ T4361] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 47.666580][ T4361] wlan1: authentication with 50:50:50:50:50:50 timed out [ 47.681843][ T4296] Bluetooth: hci1: command tx timeout [ 47.765013][ T4485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.811743][ T4485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.621116][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.638844][ T4337] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 48.671841][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.161588][ T4337] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 49.164568][ T4337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.166920][ T4337] usb 1-1: Product: syz [ 49.168359][ T4337] usb 1-1: Manufacturer: syz [ 49.170048][ T4337] usb 1-1: SerialNumber: syz [ 49.181713][ T4337] usb 1-1: config 0 descriptor?? [ 49.312325][ T4515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.382458][ T4515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.393315][ T4515] __nla_validate_parse: 2 callbacks suppressed [ 49.393329][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 49.394431][ T4519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.397644][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 49.419263][ T4515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.435979][ T4495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.45'. [ 49.451520][ T4337] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 49.453853][ T4337] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 49.458836][ T4515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.463428][ T4519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.55'. [ 49.474877][ T4522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.522464][ T4337] peak_usb: probe of 1-1:0.0 failed with error -71 [ 49.527338][ T4337] usb 1-1: USB disconnect, device number 3 [ 49.664484][ T4523] netlink: 36 bytes leftover after parsing attributes in process `syz.2.56'. [ 49.729936][ T4527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.754561][ T4527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.814905][ T4527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'. [ 50.004460][ T4530] loop4: detected capacity change from 0 to 256 [ 50.052284][ T4287] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.601454][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 50.991444][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.993564][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 50.997528][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 51.000204][ T7] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 51.003922][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.009035][ T7] usb 1-1: config 0 descriptor?? [ 51.032138][ T4541] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 51.047134][ T4555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.065118][ T7] gspca_main: spca561-2.14.0 probing abcd:cdee [ 51.072060][ T4555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.085756][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 51.107341][ T4555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.161556][ T4555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.351636][ T7] spca561: probe of 1-1:0.0 failed with error -22 [ 51.354994][ T7] usb 1-1: MIDIStreaming interface descriptor not found [ 51.375819][ T7] usb 1-1: USB disconnect, device number 4 [ 51.406317][ T4419] udevd[4419]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 51.414836][ T4557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 51.456943][ T4563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.605994][ T4567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.610025][ T4564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.70'. [ 51.631771][ T4567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.636342][ T4567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.71'. [ 51.728994][ T4571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.761887][ T4571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.930870][ T4577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.951204][ T4580] loop0: detected capacity change from 0 to 256 [ 51.988014][ T4562] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.590169][ T4595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.641679][ T4595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.687710][ T4595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.721845][ T4595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.130908][ T4608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.172695][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.201710][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.277007][ T4613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.312308][ T4613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.401584][ T1515] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 53.791642][ T1515] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.794247][ T1515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 53.796931][ T1515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 53.809928][ T1515] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 53.816778][ T1515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.824267][ T1515] usb 1-1: config 0 descriptor?? [ 53.843708][ T4607] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.857586][ T4621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.863258][ T1515] gspca_main: spca561-2.14.0 probing abcd:cdee [ 53.918711][ T4624] loop2: detected capacity change from 0 to 256 [ 53.985854][ T4560] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.168447][ T4638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.194665][ T4638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.244978][ T1515] spca561: probe of 1-1:0.0 failed with error -22 [ 54.248434][ T1515] usb 1-1: MIDIStreaming interface descriptor not found [ 54.263011][ T1515] usb 1-1: USB disconnect, device number 5 [ 54.293242][ T4562] udevd[4562]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 54.827627][ T4644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.866790][ T4644] __nla_validate_parse: 10 callbacks suppressed [ 54.866803][ T4644] netlink: 36 bytes leftover after parsing attributes in process `syz.1.102'. [ 54.879106][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 54.933513][ T4650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.963707][ T4650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.965301][ T4652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.968393][ T4650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.105'. [ 54.979016][ T4654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.002140][ T4652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.022954][ T4654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.450503][ T4656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'. [ 55.629047][ T4667] loop1: detected capacity change from 0 to 256 [ 55.638077][ T4668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.660080][ T4669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.685598][ T4668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.698469][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 55.735038][ T4671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.836847][ T4669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.855474][ T4674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.115'. [ 56.380056][ T4680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.464045][ T4680] netlink: 36 bytes leftover after parsing attributes in process `syz.4.118'. [ 56.630988][ T4687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.656943][ T4689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.691791][ T4687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.694503][ T4689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.699503][ T4687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.121'. [ 56.921395][ T7] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 57.230884][ T4704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.272206][ T4704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.281257][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 57.326233][ T4707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.371726][ T4707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.501493][ T7] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 57.503604][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.505421][ T7] usb 1-1: Product: syz [ 57.506394][ T7] usb 1-1: Manufacturer: syz [ 57.507381][ T7] usb 1-1: SerialNumber: syz [ 57.516379][ T7] usb 1-1: config 0 descriptor?? [ 57.734084][ T4715] loop3: detected capacity change from 0 to 256 [ 57.762839][ T4560] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 57.772888][ T7] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 57.774829][ T7] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 57.939576][ T7] peak_usb: probe of 1-1:0.0 failed with error -71 [ 57.944077][ T7] usb 1-1: USB disconnect, device number 6 [ 58.030393][ T4724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.038302][ T4725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.099703][ T4727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.136'. [ 60.521332][ C0] sched: RT throttling activated [ 60.672928][ T4746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.731978][ T4746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.753235][ T4746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.812464][ T4746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.850630][ T4752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.916781][ T4752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.359836][ T4760] loop4: detected capacity change from 0 to 256 [ 61.383732][ T4562] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.437535][ T4762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 61.514656][ T4764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.551808][ T7] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 61.555743][ T4767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.575693][ T4764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.151'. [ 61.582376][ T4767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.613581][ T4769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.629839][ T4767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.152'. [ 61.641769][ T4769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.645855][ T4769] capability: warning: `syz.1.153' uses deprecated v2 capabilities in a way that may be insecure [ 62.131435][ T7] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 62.133525][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.135513][ T7] usb 1-1: Product: syz [ 62.136827][ T7] usb 1-1: Manufacturer: syz [ 62.137993][ T7] usb 1-1: SerialNumber: syz [ 62.147104][ T7] usb 1-1: config 0 descriptor?? [ 62.258438][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 62.333395][ T4336] wlan1: authenticate with 50:50:50:50:50:50 [ 62.336763][ T4336] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 62.342503][ T4361] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 62.345286][ T4361] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 62.347924][ T4361] wlan1: authentication with 50:50:50:50:50:50 timed out [ 62.350933][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.495645][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.861173][ T7] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 62.863813][ T7] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 62.870786][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.006837][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.542787][ T7] peak_usb: probe of 1-1:0.0 failed with error -71 [ 63.548030][ T7] usb 1-1: USB disconnect, device number 7 [ 63.805920][ T4797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.918128][ T4797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.152720][ T4802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.226459][ T4803] netlink: 36 bytes leftover after parsing attributes in process `syz.4.165'. [ 64.535030][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.536722][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.625725][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.764576][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.770990][ T4807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 64.784081][ T4815] loop2: detected capacity change from 0 to 256 [ 64.899867][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 65.549616][ T4832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.612048][ T110] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 65.633594][ T4832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.192293][ T110] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 66.195820][ T110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.197863][ T110] usb 1-1: Product: syz [ 66.199043][ T110] usb 1-1: Manufacturer: syz [ 66.200281][ T110] usb 1-1: SerialNumber: syz [ 66.346547][ T110] usb 1-1: config 0 descriptor?? [ 67.530274][ T4822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'. [ 67.552746][ T110] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 67.554704][ T110] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 67.736855][ T4853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.769755][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 67.831837][ T4853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.878338][ T4855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.401892][ T110] peak_usb: probe of 1-1:0.0 failed with error -71 [ 68.411672][ T110] usb 1-1: USB disconnect, device number 8 [ 68.492892][ T4865] loop2: detected capacity change from 0 to 256 [ 68.605227][ T4868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 68.746506][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.816085][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.464756][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.479697][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.502690][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.509781][ T4886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 69.512502][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.666172][ T14] cfg80211: failed to load regulatory.db [ 69.762192][ T4388] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 70.183557][ T4388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.186459][ T4388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.189444][ T4388] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.205510][ T4388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.241996][ T4388] usb 1-1: config 0 descriptor?? [ 71.494032][ T4903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.950154][ T4388] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input3 [ 72.042938][ T4388] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input4 [ 72.060283][ T4388] uclogic 0003:256C:006D.0002: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 72.145059][ T4884] input: syz1 as /devices/virtual/input/input2 [ 72.271749][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.368654][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.486397][ T4388] usb 1-1: USB disconnect, device number 9 [ 72.759820][ T4921] loop3: detected capacity change from 0 to 256 [ 72.826634][ T4562] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.075360][ T4927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.104563][ T4927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.436277][ T4937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.511599][ T27] audit: type=1326 audit(75.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4955 comm="syz.2.222" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff821493e8 code=0x0 [ 75.545193][ T4957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.660561][ T4957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.759122][ T4960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.863025][ T4960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.874064][ T4960] input: syz1 as /devices/virtual/input/input5 [ 76.156792][ T4977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.246566][ T4980] netlink: 36 bytes leftover after parsing attributes in process `syz.3.230'. [ 78.853473][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 79.028647][ T5017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 79.081726][ T27] audit: type=1326 audit(79.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5018 comm="syz.1.243" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa33493e8 code=0x0 [ 79.231563][ T4283] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 79.559996][ T5028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.602473][ T5028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.612472][ T5028] input: syz1 as /devices/virtual/input/input6 [ 79.971852][ T5033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.132077][ T4283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.143598][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 80.169220][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 80.188739][ T4283] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 80.308575][ T4283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.525431][ T4283] usb 1-1: config 0 descriptor?? [ 80.584022][ T5015] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.728823][ T4283] gspca_main: spca561-2.14.0 probing abcd:cdee [ 81.382176][ T4283] spca561: probe of 1-1:0.0 failed with error -22 [ 81.390294][ T4283] usb 1-1: MIDIStreaming interface descriptor not found [ 81.602066][ T4283] usb 1-1: USB disconnect, device number 10 [ 81.691229][ T4562] udevd[4562]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.765316][ T5036] netlink: 36 bytes leftover after parsing attributes in process `syz.3.248'. [ 81.924883][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 84.228836][ T5075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.261'. [ 84.761443][ T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 84.772421][ T5091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.267'. [ 86.238619][ T5093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 86.404518][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.462857][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.510914][ T5104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.273'. [ 87.281807][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.298527][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.312333][ T14] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 87.314955][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.394804][ T14] usb 1-1: config 0 descriptor?? [ 88.491971][ T14] usb 1-1: can't set config #0, error -71 [ 88.498054][ T14] usb 1-1: USB disconnect, device number 11 [ 88.571056][ T5122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'. [ 88.836300][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 89.175151][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.179190][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.181084][ T5139] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.795391][ T5148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.252780][ T5148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.575799][ T5157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.293'. [ 91.688454][ T5160] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 91.738530][ T5161] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 91.891492][ T4283] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 92.028502][ T5166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 92.268736][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.277265][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.280479][ T4283] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.305912][ T4283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.485647][ T4283] usb 1-1: config 0 descriptor?? [ 92.721567][ C1] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 93.607266][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.648707][ T5186] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 93.712376][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.819865][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.886957][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.103528][ T4283] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input9 [ 94.182814][ T4283] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input10 [ 94.192641][ T4283] uclogic 0003:256C:006D.0003: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 94.325009][ T5158] input: syz1 as /devices/virtual/input/input8 [ 94.388457][ T4283] usb 1-1: USB disconnect, device number 12 [ 94.538214][ T5192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.303'. [ 94.629821][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.304'. [ 94.748549][ T5203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.823864][ T5205] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 94.839340][ T5203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.986078][ T5203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'. [ 96.001481][ C0] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 96.598793][ T27] audit: type=1326 audit(96.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 96.605767][ T27] audit: type=1326 audit(96.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 96.630407][ T5220] netlink: 'syz.0.313': attribute type 21 has an invalid length. [ 96.637774][ T5220] netlink: 164 bytes leftover after parsing attributes in process `syz.0.313'. [ 96.705244][ T5206] syz.4.306 (5206): drop_caches: 1 [ 97.230122][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.317'. [ 97.251418][ T27] audit: type=1326 audit(97.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 97.259445][ T27] audit: type=1326 audit(97.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 97.306596][ T27] audit: type=1326 audit(97.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 97.333875][ T5236] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 97.417740][ T27] audit: type=1326 audit(97.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 97.497464][ T27] audit: type=1326 audit(97.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 97.642374][ T27] audit: type=1326 audit(97.230:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 97.762330][ T27] audit: type=1326 audit(97.230:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 97.878038][ T27] audit: type=1326 audit(97.230:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5217 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7fc00000 [ 98.401640][ C0] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 98.565435][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.651572][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.850863][ T5248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.990440][ T5255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.321'. [ 99.149891][ T5259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.322'. [ 99.178079][ T5259] device bridge_slave_1 left promiscuous mode [ 99.199170][ T5259] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.369563][ T5259] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 100.542718][ T5271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 100.914406][ T5284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 100.945908][ T5284] CIFS: iocharset name too long [ 101.076913][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.158970][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.211836][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.760506][ T5313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.764108][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 102.877681][ T5313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'. [ 103.016269][ T5322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.344'. [ 103.021126][ T5323] tipc: Started in network mode [ 103.031048][ T5323] tipc: Node identity 7f000001, cluster identity 4711 [ 103.037022][ T5323] tipc: Enabled bearer , priority 10 [ 104.272305][ T14] tipc: Node number set to 2130706433 [ 104.518751][ T5339] bpf_jit: unknown opcode 06 [ 104.930159][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 105.042563][ T5356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.126845][ T5356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.208788][ T5359] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 105.391553][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 105.408112][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 105.413279][ T5365] device veth8 entered promiscuous mode [ 105.514267][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 105.514278][ T27] audit: type=1326 audit(105.500:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.527680][ T27] audit: type=1326 audit(105.510:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.537500][ T27] audit: type=1326 audit(105.510:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=35 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.552895][ T27] audit: type=1326 audit(105.510:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.559328][ T27] audit: type=1326 audit(105.510:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.569457][ T27] audit: type=1326 audit(105.520:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.579650][ T27] audit: type=1326 audit(105.520:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.589795][ T27] audit: type=1326 audit(105.520:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.605189][ T27] audit: type=1326 audit(105.520:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=35 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.616870][ T27] audit: type=1326 audit(105.520:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5364 comm="syz.3.357" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03493e8 code=0x7ffc0000 [ 105.631464][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 105.652472][ T5371] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 105.652472][ T5371] The task syz.3.357 (5371) triggered the difference, watch for misbehavior. [ 105.771483][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.774021][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 105.777227][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 105.784119][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.798629][ T14] usb 1-1: config 0 descriptor?? [ 105.847157][ T5375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.957042][ T5377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.359'. [ 106.107866][ T5347] netlink: 80 bytes leftover after parsing attributes in process `syz.0.352'. [ 106.386791][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 106.400637][ T5391] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 107.607395][ T5403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.656913][ T5403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.828509][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 108.348720][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 108.469303][ T5425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.664454][ T5426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.379'. [ 108.802054][ T110] usb 1-1: USB disconnect, device number 13 [ 108.888362][ T5432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.931586][ T5432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.025559][ T5442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.077603][ T5442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.097497][ T5442] netlink: 44 bytes leftover after parsing attributes in process `syz.1.385'. [ 109.099881][ T5442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 109.146540][ T5447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.384'. [ 109.149877][ T5447] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 109.353212][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 110.963304][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.011665][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.111419][ T1515] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 111.351407][ T1515] usb 1-1: Using ep0 maxpacket: 32 [ 111.471598][ T1515] usb 1-1: config 0 has no interfaces? [ 111.634760][ T1515] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 111.637015][ T1515] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.638737][ T1515] usb 1-1: Product: syz [ 111.639674][ T1515] usb 1-1: Manufacturer: syz [ 111.640658][ T1515] usb 1-1: SerialNumber: syz [ 111.664066][ T1515] usb 1-1: config 0 descriptor?? [ 111.687401][ T5480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.799160][ T5482] netlink: 36 bytes leftover after parsing attributes in process `syz.1.398'. [ 111.850359][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 113.322499][ T39] ------------[ cut here ]------------ [ 113.324113][ T39] WARNING: CPU: 1 PID: 39 at net/mac80211/offchannel.c:403 ieee80211_start_next_roc+0x1d4/0x21c [ 113.326539][ T39] Modules linked in: [ 113.327522][ T39] CPU: 1 PID: 39 Comm: kworker/u4:2 Not tainted 6.1.109-syzkaller #0 [ 113.329458][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 113.331977][ T39] Workqueue: events_unbound cfg80211_wiphy_work [ 113.333561][ T39] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 113.335588][ T39] pc : ieee80211_start_next_roc+0x1d4/0x21c [ 113.337091][ T39] lr : ieee80211_start_next_roc+0x1d4/0x21c [ 113.338619][ T39] sp : ffff80001d637870 [ 113.339756][ T39] x29: ffff80001d637870 x28: 0000000000000001 x27: dfff800000000000 [ 113.341811][ T39] x26: ffff0000d9ab4000 x25: ffff0000d0f6ac78 x24: ffff0000d0f6abb8 [ 113.343949][ T39] x23: ffff0000f1cf55b8 x22: ffff0000d4d2e400 x21: dfff800000000000 [ 113.346068][ T39] x20: 0000000000000001 x19: ffff0000d0f68ea0 x18: 1fffe000367a3376 [ 113.348278][ T39] x17: ffff8000159cd000 x16: ffff8000084fa148 x15: ffff0001b3d19bbc [ 113.350338][ T39] x14: 1ffff00002b3a0b0 x13: 1fffe000367a3376 x12: 0000000000000003 [ 113.352340][ T39] x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800011b33964 [ 113.354439][ T39] x8 : ffff0000c2e79bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 113.356482][ T39] x5 : 0000000000000080 x4 : 0000000000000008 x3 : 0000000000000000 [ 113.358500][ T39] x2 : 0000000000000006 x1 : 0000000000000001 x0 : 0000000000000000 [ 113.360583][ T39] Call trace: [ 113.361451][ T39] ieee80211_start_next_roc+0x1d4/0x21c [ 113.362962][ T39] __ieee80211_scan_completed+0x6ec/0xa88 [ 113.364447][ T39] ieee80211_scan_work+0x148/0x1968 [ 113.365815][ T39] cfg80211_wiphy_work+0x1fc/0x240 [ 113.367174][ T39] process_one_work+0x7ac/0x1404 [ 113.368381][ T39] worker_thread+0x8e4/0xfec [ 113.369491][ T39] kthread+0x250/0x2d8 [ 113.370556][ T39] ret_from_fork+0x10/0x20 [ 113.371691][ T39] irq event stamp: 2401454 [ 113.372804][ T39] hardirqs last enabled at (2401453): [] exit_to_kernel_mode+0xe8/0x118 [ 113.375257][ T39] hardirqs last disabled at (2401454): [] el1_dbg+0x24/0x80 [ 113.377477][ T39] softirqs last enabled at (2401426): [] ieee80211_configure_filter+0x628/0x1364 [ 113.380192][ T39] softirqs last disabled at (2401422): [] ieee80211_configure_filter+0x3fc/0x1364 [ 113.382788][ T39] ---[ end trace 0000000000000000 ]--- [ 113.767495][ T24] usb 1-1: USB disconnect, device number 14