last executing test programs: 1m12.681960639s ago: executing program 3 (id=63): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x1, r1, 0x1, 0x10, 0x6, @multicast}, 0x14) sendmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x885) 1m12.505057513s ago: executing program 3 (id=66): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f00000000c0)=[{0x3, 0xa78c, 0x1000}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f00000003c0)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000001c0)={{r5, r4, 0x1, [0xfffffffe, 0xf7df]}, {r5, r6, 0x4, [0x6, 0xffbffffc]}, 0x1, [0x8, 0x3df]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r7, 0x2, &(0x7f0000000180)={0x100000001, 0x2}, 0x0) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = fanotify_init(0x200, 0x0) fanotify_mark(r11, 0x1, 0x40001019, r10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) 1m12.28118162s ago: executing program 3 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x2, 0xab51, 0x4, 0x0, 0x0, 0x6, 0x7, 0x3, r2}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="680000000206010200000000000000000a00000005000400000000000900020073797a32000000001c0007800800064000000000080012400000098d080008400000000f0600050002000000050001000600000014000300686173683a69702c706f7274"], 0x68}, 0x1, 0x0, 0x0, 0x80820}, 0x80) 1m12.28106236s ago: executing program 3 (id=70): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000004c0)='syzkaller\x00', 0xa) 1m11.418754307s ago: executing program 3 (id=77): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x2, 0x0, 0x4}, {0x2, 0xff, 0x4}, 0xfd, 0x1}, {0x0, 0x0, {0x0, 0xff, 0x4}, {0x2, 0xff}, 0xfd}, {0x0, 0x3, {0x2, 0xff, 0x1}, {0x0, 0x5e9895ca49a3ae43, 0x4}, 0x2, 0xff}], 0x60) 1m10.665082995s ago: executing program 3 (id=78): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 55.636979382s ago: executing program 32 (id=78): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 2.413131633s ago: executing program 0 (id=1022): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) listen(0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x90) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 2.412846843s ago: executing program 1 (id=1023): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0xf0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40080333}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2de, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x71, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x444}}]}) 2.351519508s ago: executing program 5 (id=1025): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0x2, 0xfffffffd, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) read(r1, &(0x7f0000001bc0)=""/4096, 0x1000) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x1) 1.870040045s ago: executing program 1 (id=1030): openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r0, 0x2b9c, 0x2, 0x0, 0x0, 0xffffffffffffff11) 1.869866616s ago: executing program 1 (id=1031): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, @remote, @loopback={0x0, 0xffff888101827518}, 0x0, 0x40}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14090000", @ANYRES16=0x0, @ANYBLOB="010600000000000000000900"], 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x40c4854) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) 1.868869425s ago: executing program 1 (id=1033): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100002b64791086050015972e01020301090224"], 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 1.557138209s ago: executing program 0 (id=1034): r0 = socket(0xa, 0x3, 0xff) fsync(0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x10000500, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @mcast1, @local, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) 1.500752543s ago: executing program 0 (id=1035): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.488437094s ago: executing program 5 (id=1036): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) 1.434676839s ago: executing program 0 (id=1037): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x40, r0, 0x801, 0x400, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6e615216fe"}]}]}, 0x40}}, 0x0) 1.434478349s ago: executing program 5 (id=1038): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) 1.434383239s ago: executing program 0 (id=1039): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r1, &(0x7f0000000080)="255b2a20f709b4a43a1307c6", 0xc, 0x4008010, 0x0, 0x0) 1.433688709s ago: executing program 0 (id=1040): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000040)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x2, 0x1001, 0x53, &(0x7f00000004c0)="066644d55b40ab45193add9617f9d38177990ef3049cb6367d308d5bd940756752b4791dd64f10661ce83bc1dcb03d16bf37fd88f09f1084753f512b6ef63062e4441d72b580dd9585ffdaa5d39c5b27506562"}], 0x2}) 1.304973379s ago: executing program 1 (id=1042): syz_clone3(&(0x7f00000003c0)={0x84000000, &(0x7f00000000c0), &(0x7f0000000480), &(0x7f0000000200), {0x2d}, &(0x7f0000000240)=""/153, 0x99, &(0x7f0000004740)=""/4118, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r2, 0x5420, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x7, 0x400, 0x3}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0xb4, 0x13, 0xa, 0x102, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x5a, 0x8, "fc232618f30ff77a0a4bc5a087c7b7cb70a371ae6c9a61318c6a246e181d13fe9bb4ff6de20c7854d27f3a58673665c4185c40441ddfea8037628d6933d9b30711140c5e863e59640c1e56841c5669505b327db3c0a6"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x80) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff05000700"], 0x6c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) 813.090176ms ago: executing program 2 (id=1049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 808.876417ms ago: executing program 2 (id=1050): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f00000007c0)={0x0, 0x0}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 738.929522ms ago: executing program 2 (id=1051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r1, &(0x7f0000000080)="255b2a20f709b4a43a1307c6", 0xc, 0x4008010, 0x0, 0x0) 714.956044ms ago: executing program 2 (id=1052): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0xfffffffd}}) unshare(0x2a060400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r4) socket(0x40000000015, 0x805, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x10448) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r12, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 580.909434ms ago: executing program 5 (id=1053): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cmac-aes-neon\x00'}}) 493.197491ms ago: executing program 2 (id=1054): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 493.040511ms ago: executing program 2 (id=1055): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) 464.323783ms ago: executing program 1 (id=1056): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xf792, 0x80, 0x9, 0x201}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d0928800"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000001ac0)=@ethtool_regs={0x4, 0x4000005}}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0x1, 0x1, "cc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 333.182953ms ago: executing program 4 (id=1058): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r1, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x24048004) 327.188564ms ago: executing program 4 (id=1059): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x4, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e, 0xb000000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 221.030242ms ago: executing program 4 (id=1060): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b09", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) 170.427736ms ago: executing program 4 (id=1061): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x400000000}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x6}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x801}, 0x1c) 170.291556ms ago: executing program 4 (id=1062): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r1, &(0x7f0000000080)="255b2a20f709b4a43a1307c6", 0xc, 0x4008010, 0x0, 0x0) 169.181296ms ago: executing program 4 (id=1063): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0xa8, 0x108, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'wlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r5 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) 9.101668ms ago: executing program 5 (id=1064): socket$packet(0x11, 0x2, 0x300) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1065): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400000000000000000032bfa5", @ANYRES32=r4, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f0000000a00)="31bb6f", 0x3, 0x6040004, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @random="b59a81d0b9ec"}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 25.782750][ T4308] cgroup: Unknown subsys name 'net' [ 26.034699][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 26.316963][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 27.015827][ T4320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 27.017728][ T4320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 27.019001][ T4320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 27.020664][ T4320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 27.023021][ T4320] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 27.031080][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 27.032712][ T4333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 27.033969][ T4333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 27.033973][ T4334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 27.035551][ T4333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 27.036528][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 27.037803][ T4333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 27.038608][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 27.039881][ T4333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 27.041291][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 27.048294][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 27.049558][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 27.051004][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 27.051320][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 27.052422][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 27.053796][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 27.055868][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 27.058380][ T4333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 27.059850][ T4334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 27.060065][ T4333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 27.063426][ T4320] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 27.064517][ T4320] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 27.073514][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 27.081052][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 27.083893][ T4331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 27.174020][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 27.207839][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 27.212496][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.213784][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.215363][ T4322] device bridge_slave_0 entered promiscuous mode [ 27.219735][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 27.227120][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.228168][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.229622][ T4322] device bridge_slave_1 entered promiscuous mode [ 27.260216][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.261321][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.263193][ T4318] device bridge_slave_0 entered promiscuous mode [ 27.265606][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.269673][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.270693][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.272560][ T4318] device bridge_slave_1 entered promiscuous mode [ 27.279265][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.307127][ T4322] team0: Port device team_slave_0 added [ 27.309853][ T4322] team0: Port device team_slave_1 added [ 27.313204][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.314741][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.315897][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.317350][ T4319] device bridge_slave_0 entered promiscuous mode [ 27.319102][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 27.321058][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.322841][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.324200][ T4319] device bridge_slave_1 entered promiscuous mode [ 27.330756][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 27.335197][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.340089][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.341105][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.345552][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.356491][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.357575][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.361495][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.370753][ T4318] team0: Port device team_slave_0 added [ 27.376271][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.378600][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.383215][ T4318] team0: Port device team_slave_1 added [ 27.404605][ T4319] team0: Port device team_slave_0 added [ 27.414499][ T4319] team0: Port device team_slave_1 added [ 27.417800][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.418927][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.422996][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.424870][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.425978][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.427524][ T4324] device bridge_slave_0 entered promiscuous mode [ 27.473094][ T4322] device hsr_slave_0 entered promiscuous mode [ 27.532150][ T4322] device hsr_slave_1 entered promiscuous mode [ 27.582141][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.583298][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.587341][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.589208][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.590351][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.591822][ T4325] device bridge_slave_0 entered promiscuous mode [ 27.593633][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.594629][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.596042][ T4324] device bridge_slave_1 entered promiscuous mode [ 27.598907][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.599909][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.604245][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.607184][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.608322][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.609786][ T4325] device bridge_slave_1 entered promiscuous mode [ 27.618388][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.619498][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.623815][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.635605][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.641736][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.644204][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.652407][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.682870][ T4318] device hsr_slave_0 entered promiscuous mode [ 27.742122][ T4318] device hsr_slave_1 entered promiscuous mode [ 27.782045][ T4318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.783248][ T4318] Cannot create hsr debugfs directory [ 27.853010][ T4319] device hsr_slave_0 entered promiscuous mode [ 27.892162][ T4319] device hsr_slave_1 entered promiscuous mode [ 27.942052][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.943161][ T4319] Cannot create hsr debugfs directory [ 27.945033][ T4324] team0: Port device team_slave_0 added [ 27.946655][ T4324] team0: Port device team_slave_1 added [ 27.960613][ T4325] team0: Port device team_slave_0 added [ 27.967274][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.968334][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.972358][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.975133][ T4325] team0: Port device team_slave_1 added [ 27.976307][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.977420][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.981273][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.003626][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.004780][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.008767][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.017913][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.019063][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.022972][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.053029][ T4324] device hsr_slave_0 entered promiscuous mode [ 28.102129][ T4324] device hsr_slave_1 entered promiscuous mode [ 28.172086][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.173267][ T4324] Cannot create hsr debugfs directory [ 28.273161][ T4325] device hsr_slave_0 entered promiscuous mode [ 28.312363][ T4325] device hsr_slave_1 entered promiscuous mode [ 28.352064][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.353196][ T4325] Cannot create hsr debugfs directory [ 28.380088][ T4322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.425221][ T4322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.473858][ T4322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.513149][ T4322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.587813][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.623164][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.663377][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.714448][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.764373][ T4318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.808554][ T4318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.844536][ T4318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.896868][ T4318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.954207][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.968164][ T4324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.987185][ T4324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.013234][ T4324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.052507][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 29.066183][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.068265][ T4325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.102993][ T4324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.132261][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 29.132335][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 29.133254][ T4326] Bluetooth: hci3: command 0x0409 tx timeout [ 29.142364][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 29.145166][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.146986][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.149758][ T4325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.193203][ T4325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.238433][ T4325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.286253][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.297661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.299329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.300921][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.302208][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.303956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.305510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.311391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.313241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.315887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.317606][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.318675][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.321825][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.327671][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.329231][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.335541][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.337378][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.338838][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.346932][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.348505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.350019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.351485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.354984][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.356114][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.357581][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.359067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.360322][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.361351][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.363471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.364984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.368093][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.369761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.384774][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.388230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.390260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.391703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.395875][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.397180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.407710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.409382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.410870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.415042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.416601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.418175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.420059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.421418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.423220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.424649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.426418][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.427494][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.428920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.433282][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.438023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.439543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.440996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.443045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.444416][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.445498][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.447258][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.455202][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.460312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.467394][ T4318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.469004][ T4318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.478332][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.480819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.482627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.484064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.485618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.487119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.488534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.490091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.491514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.508776][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.518412][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.520163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.521674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.523750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.533665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.538442][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.539778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.541619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.546104][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.547542][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.548917][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.549959][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.551245][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.557221][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.558844][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.560343][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.561490][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.578541][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.581227][ T4324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.586505][ T4324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.590546][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.592247][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.593731][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.595144][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.596210][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.597401][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.598839][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.600451][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.606001][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.607849][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.609127][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.610300][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.611870][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.615163][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.616611][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.618078][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.619509][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.621107][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.624729][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.633388][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.634905][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.636407][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.637442][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.638680][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 29.640128][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.641713][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.646266][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.647897][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.649353][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.650829][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 29.658504][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.664863][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.666021][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.677082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.678585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.680023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.681588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.684144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.685353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.688066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.689552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.698180][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.699772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.704268][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 29.707193][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.720036][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.721557][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.725082][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.726507][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.728532][ T4322] device veth0_vlan entered promiscuous mode [ 29.731515][ T4322] device veth1_vlan entered promiscuous mode [ 29.740354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.741798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.743844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.748346][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.749782][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.751203][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.755843][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.760000][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.763989][ T4318] device veth0_vlan entered promiscuous mode [ 29.776881][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.778437][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.779937][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.785215][ T4318] device veth1_vlan entered promiscuous mode [ 29.800821][ T4319] device veth0_vlan entered promiscuous mode [ 29.806568][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.808156][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.809590][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.811035][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.813684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.815290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.816751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.818228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.819893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.821218][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.824742][ T4319] device veth1_vlan entered promiscuous mode [ 29.831183][ T4319] device veth0_macvtap entered promiscuous mode [ 29.835259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.836655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.838117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.839533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.841325][ T4322] device veth0_macvtap entered promiscuous mode [ 29.847185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.848623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.850054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.851765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.857534][ T4319] device veth1_macvtap entered promiscuous mode [ 29.861339][ T4318] device veth0_macvtap entered promiscuous mode [ 29.864684][ T4322] device veth1_macvtap entered promiscuous mode [ 29.867596][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.869036][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.870414][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.873168][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.874437][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.875632][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.877827][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.884233][ T4324] device veth0_vlan entered promiscuous mode [ 29.887213][ T4324] device veth1_vlan entered promiscuous mode [ 29.889733][ T4318] device veth1_macvtap entered promiscuous mode [ 29.891000][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.893598][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.894918][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.896334][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.901113][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.903785][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.906946][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.910665][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.912556][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.914094][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.915485][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.917996][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.919310][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.920623][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.922607][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.926074][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.927722][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.929819][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.936192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.937773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.939314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.946556][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.948213][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.949832][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.951513][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.956194][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.957564][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.959203][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.961247][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.965563][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.967313][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.968978][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.970548][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.981664][ T4322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.983795][ T4322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.985131][ T4322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.986512][ T4322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.989528][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.990995][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.010838][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.013359][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.014852][ T4318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.016562][ T4318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.018743][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.019914][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.021705][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.027332][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.028633][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.028727][ T4324] device veth0_macvtap entered promiscuous mode [ 30.036569][ T4324] device veth1_macvtap entered promiscuous mode [ 30.038135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 30.039706][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.040990][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.051053][ T4318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.053238][ T4318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.054621][ T4318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.056025][ T4318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.073854][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.075475][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.077052][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.078691][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.080200][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.081661][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.085005][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.088897][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.090560][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.103263][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.104660][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.104868][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.105854][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.108359][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.109395][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.109597][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.114161][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.116150][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.117528][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.120653][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.122577][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.124198][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.126409][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.130292][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.131692][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.133750][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.144435][ T4324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.145865][ T4324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.147156][ T4324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.148457][ T4324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.156654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.158240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.159800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.161099][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.169678][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.175426][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.179768][ T4325] device veth0_vlan entered promiscuous mode [ 30.181231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.185754][ T4325] device veth1_vlan entered promiscuous mode [ 30.192860][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.194170][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.199735][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 30.201247][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 30.205028][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.229983][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.231216][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.233790][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.320796][ T4325] device veth0_macvtap entered promiscuous mode [ 30.330035][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.331708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.335803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 30.340532][ T4325] device veth1_macvtap entered promiscuous mode [ 30.608515][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.610038][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.611906][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.613724][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.615225][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.616874][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.618424][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.619991][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.630638][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.652385][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.655635][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.659302][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.660633][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.702348][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.704940][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.707576][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.709133][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 30.710489][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 30.714517][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.716627][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.718163][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.719779][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.721249][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.724669][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.726379][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.728070][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.730323][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.736986][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.740893][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.750542][ T4325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.751914][ T4325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.753595][ T4325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.755118][ T4325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.138298][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 31.212612][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 31.213824][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 31.215075][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 31.216277][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 31.699833][ T4452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.770980][ T4452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.868311][ T4456] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 32.206049][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.208597][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.211324][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.226722][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.228287][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.251809][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.256956][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.259792][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.156970][ T4487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.165866][ T4487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.214400][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 33.394852][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 33.395885][ T4331] Bluetooth: hci2: command 0x040f tx timeout [ 33.396975][ T4331] Bluetooth: hci1: command 0x040f tx timeout [ 33.398004][ T4331] Bluetooth: hci4: command 0x040f tx timeout [ 33.435896][ T4333] Bluetooth: hci4: hcon 00000000e90e7263 sent 1 < count 41123 [ 33.551019][ T4506] Zero length message leads to an empty skb [ 34.142320][ T4374] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 34.144323][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 34.289850][ T4520] netlink: 'syz.4.30': attribute type 10 has an invalid length. [ 34.292259][ T4374] usb 1-1: device descriptor read/64, error -32 [ 34.317791][ T4520] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 34.325313][ T4520] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.328083][ T4520] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 34.595867][ T4374] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 35.093589][ T4374] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 35.095351][ T4374] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 35.099079][ T4374] usb 1-1: string descriptor 0 read error: -22 [ 35.100184][ T4374] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=e3.ea [ 35.101801][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.118831][ T4562] binder: 4561:4562 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.120970][ T4562] binder: 4562 RLIMIT_NICE not set [ 35.124874][ T4374] ati_remote2 1-1:4.0: ati_remote2_probe(): interface 0 must have an endpoint [ 35.170335][ T4562] binder: 4561:4562 ioctl c0306201 20000600 returned -14 [ 35.308668][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 35.327001][ T4517] usb 1-1: USB disconnect, device number 3 [ 36.171733][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 36.177391][ T4331] Bluetooth: hci1: command 0x0419 tx timeout [ 36.178270][ T4331] Bluetooth: hci2: command 0x0419 tx timeout [ 36.178595][ T4326] Bluetooth: hci3: command 0x0419 tx timeout [ 36.325603][ T4602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.328976][ T4602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.332814][ T4602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.334274][ T4602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.789850][ T4624] netlink: 'syz.3.69': attribute type 5 has an invalid length. [ 38.388031][ T4320] Bluetooth: hci3: command 0x2016 tx timeout [ 38.416644][ T4656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.418215][ T4656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.599912][ T4669] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 38.607737][ T4672] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 1 [ 38.609742][ T4673] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 2 [ 38.611474][ T4674] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 3 [ 38.894460][ T4402] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.935852][ T4678] binder: 4677:4678 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 38.950343][ T4678] binder: 4677:4678 got transaction to invalid handle, 1 [ 38.953631][ T4678] binder: 4678:4677 cannot find target node [ 38.956020][ T4678] binder: 4677:4678 transaction call to 0:0 failed 5/29201/-22, size 72-24 line 3045 [ 38.960657][ T4678] binder: 4677:4678 got transaction to invalid handle, 3 [ 38.964834][ T4678] binder: 4678:4677 cannot find target node [ 38.967010][ T4678] binder: 4677:4678 transaction call to 0:0 failed 6/29201/-22, size 0-0 line 3045 [ 38.993859][ T4517] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.995008][ T4517] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.122027][ T4402] usb 1-1: Using ep0 maxpacket: 16 [ 39.124448][ T4402] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.126115][ T4402] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.130400][ T4402] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.132621][ T4402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.139612][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.143080][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.144479][ T4402] usb 1-1: Product: syz [ 39.145097][ T4402] usb 1-1: Manufacturer: syz [ 39.146907][ T4402] usb 1-1: SerialNumber: syz [ 39.398691][ T4402] usb 1-1: 0:2 : does not exist [ 39.404341][ T4402] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 39.418517][ T4402] usb 1-1: USB disconnect, device number 4 [ 39.633854][ T4583] udevd[4583]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 39.674133][ T4698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.675739][ T4698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.681881][ T4698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.683867][ T4698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.858095][ T4700] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 39.868676][ T4700] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 39.870421][ T4700] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 39.873149][ T4700] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 39.875229][ T4700] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 40.742814][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.744529][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.416816][ T4733] netlink: 'syz.4.104': attribute type 12 has an invalid length. [ 41.440579][ T4735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.443678][ T4735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.142905][ T4743] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 42.353983][ T4705] Bluetooth: (null): Invalid header checksum [ 42.355384][ T4705] Bluetooth: (null): Invalid header checksum [ 42.472557][ T39] Bluetooth: (null): Invalid header checksum [ 42.583032][ T4411] Bluetooth: (null): Invalid header checksum [ 42.704520][ T4705] Bluetooth: (null): Invalid header checksum [ 42.823246][ T4441] Bluetooth: (null): Invalid header checksum [ 42.900645][ T4760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.903125][ T4760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.933257][ T4411] Bluetooth: (null): Invalid header checksum [ 43.208786][ T4775] syz.0.121 uses obsolete (PF_INET,SOCK_PACKET) [ 44.618659][ T4804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.627779][ T4804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.166222][ T4827] netlink: 666 bytes leftover after parsing attributes in process `syz.2.137'. [ 46.289123][ T4845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.290628][ T4845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.812204][ T4326] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 46.818990][ T4326] Bluetooth: hci1: Injecting HCI hardware error event [ 46.840585][ T4320] Bluetooth: hci1: hardware error 0x00 [ 47.234571][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 48.031542][ T4872] ======================================================= [ 48.031542][ T4872] WARNING: The mand mount option has been deprecated and [ 48.031542][ T4872] and is ignored by this kernel. Remove the mand [ 48.031542][ T4872] option from the mount to silence this warning. [ 48.031542][ T4872] ======================================================= [ 49.062540][ T4320] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 51.096269][ T4957] netlink: 'syz.1.186': attribute type 4 has an invalid length. [ 51.188151][ T4963] 9pnet_fd: Insufficient options for proto=fd [ 51.739271][ T4320] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 51.740921][ T4320] CPU: 1 PID: 4320 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 51.742049][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 51.743553][ T4320] Workqueue: hci3 hci_rx_work [ 51.744238][ T4320] Call trace: [ 51.744702][ T4320] dump_backtrace+0x1c8/0x1f4 [ 51.745441][ T4320] show_stack+0x2c/0x3c [ 51.746027][ T4320] __dump_stack+0x30/0x40 [ 51.746646][ T4320] dump_stack_lvl+0xf8/0x160 [ 51.747259][ T4320] dump_stack+0x1c/0x5c [ 51.747897][ T4320] sysfs_create_dir_ns+0x22c/0x24c [ 51.748648][ T4320] kobject_add_internal+0x5a8/0xb30 [ 51.749498][ T4320] kobject_add+0x134/0x1f8 [ 51.750182][ T4320] device_add+0x3f0/0xf94 [ 51.750790][ T4320] hci_conn_add_sysfs+0xbc/0x1cc [ 51.751555][ T4320] le_conn_complete_evt+0xcb0/0x1220 [ 51.752368][ T4320] hci_le_conn_complete_evt+0x114/0x3f8 [ 51.753168][ T4320] hci_le_meta_evt+0x2c0/0x4a4 [ 51.753876][ T4320] hci_event_packet+0x6ac/0xf08 [ 51.754594][ T4320] hci_rx_work+0x324/0xaa0 [ 51.755249][ T4320] process_one_work+0x7f4/0x13a8 [ 51.756013][ T4320] worker_thread+0x8c8/0xfbc [ 51.756814][ T4320] kthread+0x250/0x2d8 [ 51.757430][ T4320] ret_from_fork+0x10/0x20 [ 51.758716][ T4320] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 51.761106][ T4320] Bluetooth: hci3: failed to register connection device [ 52.758984][ T27] audit: type=1326 audit(52.748:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5b9e8 code=0x7ffc0000 [ 52.769136][ T27] audit: type=1326 audit(52.758:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5b9e8 code=0x7ffc0000 [ 52.777487][ T5004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.202'. [ 52.779184][ T27] audit: type=1326 audit(52.768:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff85f5b9e8 code=0x7ffc0000 [ 52.795373][ T27] audit: type=1326 audit(52.768:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5b9e8 code=0x7ffc0000 [ 52.803307][ T5004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.202'. [ 52.807393][ T27] audit: type=1326 audit(52.768:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff85f5b9e8 code=0x7ffc0000 [ 52.823882][ T27] audit: type=1326 audit(52.768:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5b9e8 code=0x7ffc0000 [ 52.836108][ T27] audit: type=1326 audit(52.768:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff85f5b9e8 code=0x7ffc0000 [ 52.848769][ T27] audit: type=1326 audit(52.768:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5b9e8 code=0x7ffc0000 [ 52.859223][ T27] audit: type=1326 audit(52.768:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff85f59dd4 code=0x7ffc0000 [ 52.873372][ T27] audit: type=1326 audit(52.768:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff85f59dd4 code=0x7ffc0000 [ 53.291347][ T5021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'. [ 53.295412][ T5021] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 53.373266][ T5023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.376465][ T5023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.492225][ T4326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.500141][ T4326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 53.504162][ T4326] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 53.506417][ T4326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 53.508011][ T4326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 53.509569][ T4326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 53.579243][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.581412][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.623737][ T5029] chnl_net:caif_netlink_parms(): no params data found [ 53.640191][ T5029] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.641660][ T5029] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.643664][ T5029] device bridge_slave_0 entered promiscuous mode [ 53.645723][ T5029] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.646746][ T5029] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.648097][ T5029] device bridge_slave_1 entered promiscuous mode [ 53.661279][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 53.664996][ T5029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.668035][ T5029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.678503][ T5029] team0: Port device team_slave_0 added [ 53.680464][ T5029] team0: Port device team_slave_1 added [ 53.692531][ T5029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.693639][ T5029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.697690][ T5029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.700288][ T5029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.701404][ T5029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.705556][ T5029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.750762][ T5029] device hsr_slave_0 entered promiscuous mode [ 53.782066][ T4326] Bluetooth: hci3: command 0x2016 tx timeout [ 53.792653][ T5029] device hsr_slave_1 entered promiscuous mode [ 53.852479][ T5029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.853640][ T5029] Cannot create hsr debugfs directory [ 53.890863][ T5029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.191635][ T4386] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 54.203784][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.205990][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.223177][ T5029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.254131][ T5029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.293145][ T5029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.357404][ T5029] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.358590][ T5029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.360110][ T5029] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.361197][ T5029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.394257][ T5029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.398554][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.400438][ T4946] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.406242][ T4946] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.408731][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 54.413232][ T4386] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 54.414793][ T4386] usb 1-1: config 0 has no interface number 0 [ 54.415990][ T4386] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.417510][ T4386] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.417524][ T5029] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.418936][ T4386] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.421529][ T4386] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 54.423150][ T4386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.425358][ T4386] usb 1-1: config 0 descriptor?? [ 54.429484][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.431115][ T4946] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.432321][ T4946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.437350][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.438984][ T4946] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.440119][ T4946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.778489][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.787998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.789697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.791473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.798305][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.800183][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.811206][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.812803][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.816586][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.818158][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.821072][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.954908][ T5086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.956466][ T5086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.958661][ T5086] Bluetooth: MGMT ver 1.22 [ 54.987705][ T5029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.989434][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.990691][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.072936][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.075126][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.092764][ T5029] device veth0_vlan entered promiscuous mode [ 55.094991][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.096560][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.099078][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.100480][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.110838][ T5029] device veth1_vlan entered promiscuous mode [ 55.121601][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.125511][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.134473][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.136124][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.140431][ T5029] device veth0_macvtap entered promiscuous mode [ 55.148288][ T5029] device veth1_macvtap entered promiscuous mode [ 55.157526][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.159352][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.160991][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.206153][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.207904][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.210178][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.211854][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.217882][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.219435][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.221082][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.224184][ T5029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.225871][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.227532][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.229138][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.230770][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.237662][ T4386] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0001/input/input5 [ 55.244342][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.246175][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.247810][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.258464][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.259883][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.261451][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.263654][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.265259][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.266913][ T5098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.267640][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.269669][ T4386] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 55.269848][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.274282][ T5029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.275796][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.277589][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.280665][ T5098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.281899][ T5029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.283461][ T5029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.284720][ T5029] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.286016][ T5029] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.290121][ T4386] usb 1-1: USB disconnect, device number 5 [ 55.327779][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.329085][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.331249][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.350131][ T5099] fido_id[5099]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 55.358019][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.359513][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.361443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.531035][ T5107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.533371][ T4326] Bluetooth: hci5: command 0x0409 tx timeout [ 55.536215][ T5107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.920879][ T5117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.924187][ T5117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.883934][ T5143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.885569][ T5143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.085717][ T5154] fuse: Bad value for 'fd' [ 57.612682][ T4320] Bluetooth: hci5: command 0x041b tx timeout [ 57.959550][ T5165] netlink: 3536 bytes leftover after parsing attributes in process `syz.5.256'. [ 57.960987][ T5165] netlink: 158 bytes leftover after parsing attributes in process `syz.5.256'. [ 57.962971][ T5165] netlink: 158 bytes leftover after parsing attributes in process `syz.5.256'. [ 58.330414][ T5179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.260'. [ 59.397049][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.399882][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 59.399889][ T27] audit: type=1326 audit(59.388:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 59.405303][ T27] audit: type=1326 audit(59.388:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 59.408931][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.413267][ T27] audit: type=1326 audit(59.388:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 59.416579][ T27] audit: type=1326 audit(59.388:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 59.421325][ T27] audit: type=1326 audit(59.388:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 59.424923][ T27] audit: type=1326 audit(59.388:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 59.428118][ T27] audit: type=1326 audit(59.388:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 59.431223][ T27] audit: type=1326 audit(59.388:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 59.434920][ T27] audit: type=1326 audit(59.388:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 59.438160][ T27] audit: type=1326 audit(59.388:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5227 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb155b9e8 code=0x7ffc0000 [ 60.039370][ T4320] Bluetooth: hci5: command 0x040f tx timeout [ 60.822850][ T5251] process 'syz.2.282' launched './file0' with NULL argv: empty string added [ 60.899278][ T5257] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 61.720979][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 61.725791][ T5288] device hsr_slave_0 left promiscuous mode [ 61.762168][ T5288] device hsr_slave_1 left promiscuous mode [ 61.997628][ T5306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.003822][ T5306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.129450][ T5311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.139886][ T5311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.269234][ T5315] netlink: 28 bytes leftover after parsing attributes in process `syz.5.303'. [ 63.161717][ T5332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.164592][ T5332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.401676][ T5339] mmap: syz.2.314 (5339) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.436711][ T5339] netlink: 192 bytes leftover after parsing attributes in process `syz.2.314'. [ 63.616094][ T5346] netlink: 'syz.0.318': attribute type 11 has an invalid length. [ 63.824833][ T5355] device bond0 entered promiscuous mode [ 63.825760][ T5355] device bond_slave_0 entered promiscuous mode [ 63.826746][ T5355] device bond_slave_1 entered promiscuous mode [ 64.285042][ T5382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.335'. [ 64.288508][ T5382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.335'. [ 64.428547][ T5391] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 64.436608][ T5391] device bond1 entered promiscuous mode [ 64.437983][ T5391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.449265][ T5391] bond1: (slave erspan1): making interface the new active one [ 64.450813][ T5391] device erspan1 entered promiscuous mode [ 64.454096][ T5391] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 64.455621][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 64.460171][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 64.494237][ T7] cfg80211: failed to load regulatory.db [ 64.499901][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.500979][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.512827][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.515971][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.527725][ T5403] netlink: 388 bytes leftover after parsing attributes in process `syz.0.344'. [ 64.996887][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 64.996896][ T27] audit: type=1326 audit(64.988:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.014635][ T27] audit: type=1326 audit(64.998:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.017940][ T27] audit: type=1326 audit(64.998:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.021143][ T27] audit: type=1326 audit(64.998:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.027447][ T27] audit: type=1326 audit(64.998:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.030835][ T27] audit: type=1326 audit(64.998:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.034423][ T27] audit: type=1326 audit(64.998:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.037817][ T27] audit: type=1326 audit(64.998:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.040807][ T27] audit: type=1326 audit(64.998:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.044871][ T27] audit: type=1326 audit(64.998:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.5.329" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x7fc00000 [ 65.144231][ T5391] bond1 (unregistering): (slave erspan1): Releasing active interface [ 65.145569][ T5391] device erspan1 left promiscuous mode [ 65.174617][ T5391] bond1 (unregistering): Released all slaves [ 65.184583][ T5410] device syzkaller1 entered promiscuous mode [ 65.318923][ T5434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.320373][ T5434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.582099][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 65.773686][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 65.774898][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.776445][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.777874][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.788913][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 65.796137][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 65.797414][ T24] usb 1-1: Product: syz [ 65.798129][ T24] usb 1-1: Manufacturer: syz [ 65.813191][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 65.814059][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 65.833484][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 65.834433][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 65.895661][ T5454] device macsec1 entered promiscuous mode [ 65.896585][ T5454] device macvlan0 entered promiscuous mode [ 65.898598][ T5454] device macvlan0 left promiscuous mode [ 67.385311][ T5481] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 67.411949][ T5483] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 67.438343][ T5485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.377'. [ 67.977990][ T5513] device team_slave_0 entered promiscuous mode [ 67.979154][ T5513] device team_slave_1 entered promiscuous mode [ 67.980847][ T5513] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.986410][ T5513] device team_slave_0 left promiscuous mode [ 67.987384][ T5513] device team_slave_1 left promiscuous mode [ 68.136354][ T5522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.392'. [ 68.309709][ T111] usb 1-1: USB disconnect, device number 6 [ 68.625656][ T5563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.627257][ T5563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.226757][ T5576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 69.542015][ T4373] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 69.752047][ T4373] usb 1-1: Using ep0 maxpacket: 32 [ 69.758604][ T4373] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 69.759803][ T4373] usb 1-1: config 0 has no interface number 0 [ 69.760708][ T4373] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.766859][ T4373] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 69.770562][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.775118][ T4373] usb 1-1: Product: syz [ 69.775764][ T4373] usb 1-1: Manufacturer: syz [ 69.779775][ T4373] usb 1-1: SerialNumber: syz [ 69.782701][ T4373] usb 1-1: config 0 descriptor?? [ 69.794490][ T4373] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 69.801296][ T4373] em28xx 1-1:0.132: Video interface 132 found: [ 70.195673][ T4373] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 71.375418][ T4373] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 71.377173][ T4373] em28xx 1-1:0.132: board has no eeprom [ 71.442051][ T4373] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 71.443341][ T4373] em28xx 1-1:0.132: analog set to bulk mode. [ 71.446530][ T4373] usb 1-1: USB disconnect, device number 7 [ 71.447946][ T4373] em28xx 1-1:0.132: Disconnecting em28xx [ 71.449869][ T24] em28xx 1-1:0.132: Registering V4L2 extension [ 71.556114][ T24] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 71.557515][ T24] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 71.558749][ T24] em28xx 1-1:0.132: No AC97 audio processor [ 71.565717][ T24] usb 1-1: Decoder not found [ 71.567292][ T24] em28xx 1-1:0.132: failed to create media graph [ 71.569629][ T24] em28xx 1-1:0.132: V4L2 device video11 deregistered [ 71.579261][ T24] em28xx 1-1:0.132: Remote control support is not available for this card. [ 71.584671][ T4373] em28xx 1-1:0.132: Closing input extension [ 71.597692][ T4373] em28xx 1-1:0.132: Freeing device [ 71.807384][ T5659] capability: warning: `syz.5.437' uses deprecated v2 capabilities in a way that may be insecure [ 71.895522][ T5670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.901814][ T5670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.920083][ T5671] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 71.976342][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 72.046560][ T5685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.447'. [ 72.102857][ T5686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.348370][ T5713] device syzkaller0 entered promiscuous mode [ 72.404472][ T5707] netlink: 128 bytes leftover after parsing attributes in process `syz.0.450'. [ 72.472669][ T5718] loop6: detected capacity change from 0 to 7 [ 72.476416][ T4583] loop6: [ 72.477030][ T4583] loop6: partition table partially beyond EOD, truncated [ 72.485272][ T5718] loop6: [ 72.485826][ T5718] loop6: partition table partially beyond EOD, truncated [ 72.684417][ T4374] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 72.721156][ T5735] netlink: 64 bytes leftover after parsing attributes in process `syz.1.461'. [ 72.844961][ T5749] device syzkaller0 entered promiscuous mode [ 72.863183][ T4374] usb 1-1: config 0 has no interfaces? [ 72.864103][ T4374] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 72.865500][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.868060][ T4374] usb 1-1: config 0 descriptor?? [ 72.995978][ T5753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.003788][ T5753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.133611][ T5759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.137056][ T5759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.209532][ T5753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.210914][ T5753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.281062][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.282523][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.677041][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.690669][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.008339][ T5759] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.009831][ T5759] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.011276][ T5759] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.012818][ T5759] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.562698][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.480'. [ 74.565986][ T5778] device ip6gretap0 entered promiscuous mode [ 74.567161][ T5778] device macvtap1 entered promiscuous mode [ 74.613317][ T5778] device ip6gretap0 left promiscuous mode [ 74.728016][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.729258][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.730425][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.731541][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.732934][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.734691][ T5783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.736137][ T5783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.737382][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.738556][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.739569][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.740559][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.741622][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.745888][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.747012][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.748183][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.749243][ T24] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 74.752945][ T24] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 74.784464][ T5786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.786606][ T5786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.801018][ T5784] fido_id[5784]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.804150][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 75.138621][ T4373] usb 1-1: USB disconnect, device number 8 [ 75.325295][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 75.325306][ T27] audit: type=1326 audit(75.318:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5811 comm="syz.2.492" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b9e8 code=0x0 [ 75.759569][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.501'. [ 75.803146][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.806523][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.116581][ T5844] tipc: Started in network mode [ 76.117490][ T5844] tipc: Node identity 427756d7a2fb, cluster identity 4711 [ 76.119982][ T5844] tipc: Enabled bearer , priority 0 [ 76.132847][ T5844] device syzkaller0 entered promiscuous mode [ 76.205587][ T5843] tipc: Resetting bearer [ 76.303317][ T5843] tipc: Disabling bearer [ 76.364382][ T5859] device netdevsim0 entered promiscuous mode [ 76.365585][ T5859] device macsec1 entered promiscuous mode [ 76.368354][ T5859] device netdevsim0 left promiscuous mode [ 76.547539][ T27] audit: type=1326 audit(76.518:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.4.516" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5b9e8 code=0x0 [ 77.464434][ T5906] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 77.489791][ T5906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.503233][ T5906] binder: 5905:5906 tried to acquire reference to desc 0, got 1 instead [ 77.505966][ T5906] binder: 5905:5906 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 77.510258][ T5906] binder: 5906 RLIMIT_NICE not set [ 77.654884][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.656486][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.667360][ T5906] bond1: (slave veth0_to_bond): making interface the new active one [ 77.670493][ T5921] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 77.671523][ T5906] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 77.672579][ T5921] netlink: 5 bytes leftover after parsing attributes in process `syz.4.531'. [ 77.678752][ T5916] device bond1 entered promiscuous mode [ 77.679727][ T5916] device veth0_to_bond entered promiscuous mode [ 77.726685][ T5921] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 77.727988][ T5921] netlink: 'syz.4.531': attribute type 2 has an invalid length. [ 77.742489][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.743997][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.309172][ T5963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.311505][ T5963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.157693][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 79.512680][ T6014] netlink: 'syz.1.568': attribute type 29 has an invalid length. [ 79.514332][ T6014] netlink: 'syz.1.568': attribute type 29 has an invalid length. [ 79.671820][ T6019] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 79.679855][ T6019] syz.1.571 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.688968][ T6019] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 79.902087][ T4374] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 80.083920][ T4374] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.085595][ T4374] usb 1-1: config 0 has no interfaces? [ 80.088326][ T4374] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 80.090160][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.091525][ T4374] usb 1-1: Product: syz [ 80.095266][ T4374] usb 1-1: Manufacturer: syz [ 80.096003][ T4374] usb 1-1: SerialNumber: syz [ 80.102829][ T4374] usb 1-1: config 0 descriptor?? [ 80.148029][ T27] audit: type=1326 audit(80.138:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6052 comm="syz.5.573" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x0 [ 80.387390][ T6076] netlink: 64 bytes leftover after parsing attributes in process `syz.4.576'. [ 80.479683][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.481638][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.920028][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.939456][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.219950][ T6020] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.221450][ T6020] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.227653][ T6020] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.229186][ T6020] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.472977][ T5193] usb 1-1: USB disconnect, device number 9 [ 81.664911][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.666501][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.979887][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.981579][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.272048][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 82.452101][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 82.455801][ T24] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 82.457277][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.458470][ T24] usb 1-1: Product: syz [ 82.459101][ T24] usb 1-1: Manufacturer: syz [ 82.459754][ T24] usb 1-1: SerialNumber: syz [ 82.461889][ T24] usb 1-1: config 0 descriptor?? [ 82.497529][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.499041][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.870849][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 82.873766][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.875546][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 82.876796][ T24] usb 1-1: media controller created [ 82.881411][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.143770][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.596'. [ 83.305427][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 83.422140][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 83.423307][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 83.424491][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 83.500155][ T7] usb 1-1: USB disconnect, device number 10 [ 83.517149][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 83.621485][ T6173] syz.5.607 (6173): drop_caches: 1 [ 83.645957][ T6170] syz.5.607 (6170): drop_caches: 1 [ 83.686608][ T6170] syz.5.607 (6170): drop_caches: 1 [ 84.321807][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.325489][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.331014][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.337964][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.429193][ T6208] netlink: 256 bytes leftover after parsing attributes in process `syz.4.623'. [ 84.516140][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.625'. [ 84.539661][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.541768][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.543598][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.551203][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.617859][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.620264][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.623388][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.5.619'. [ 84.850462][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.851918][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.165413][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.166850][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.703307][ T6256] netlink: 76 bytes leftover after parsing attributes in process `syz.4.640'. [ 85.923454][ T6271] random: crng reseeded on system resumption [ 85.939624][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.946690][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.402660][ T6292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.404205][ T6292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.501762][ T6300] fuse: Bad value for 'fd' [ 86.651117][ T6309] netlink: 'syz.1.661': attribute type 11 has an invalid length. [ 86.654760][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 87.641193][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.644447][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.651528][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.654354][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.754803][ T27] audit: type=1326 audit(88.748:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.1.695" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb35b9e8 code=0x0 [ 88.860290][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 88.867205][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.912535][ T6403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.709003][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.715'. [ 89.793761][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.799224][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.821266][ T6465] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.151445][ T6478] device veth0 entered promiscuous mode [ 90.153787][ T6478] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 90.424119][ T6494] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 90.490599][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.493443][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.541698][ T6502] device syzkaller0 entered promiscuous mode [ 90.913046][ T6517] device syzkaller0 entered promiscuous mode [ 90.917041][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.920213][ T6517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.123919][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.742'. [ 91.129027][ T6527] device macvtap1 entered promiscuous mode [ 91.130131][ T6527] device erspan0 entered promiscuous mode [ 91.164813][ T6527] device erspan0 left promiscuous mode [ 91.167014][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.746'. [ 91.239913][ T6534] device syzkaller0 entered promiscuous mode [ 91.421402][ T6540] device bridge_slave_0 left promiscuous mode [ 91.430560][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.464102][ T6540] device bridge_slave_1 left promiscuous mode [ 91.465194][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.517206][ T6540] bond0: (slave bond_slave_0): Releasing backup interface [ 91.553295][ T6540] bond0: (slave bond_slave_1): Releasing backup interface [ 91.594974][ T6540] team0: Port device team_slave_0 removed [ 91.608489][ T6540] team0: Port device team_slave_1 removed [ 91.609507][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.616339][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.622445][ T6543] netlink: 'syz.2.749': attribute type 10 has an invalid length. [ 91.631095][ T6543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.633431][ T6543] team0: Port device bond0 added [ 91.639493][ T6544] netlink: 2188 bytes leftover after parsing attributes in process `syz.2.749'. [ 91.992025][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 92.186244][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.187885][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 92.191550][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.193407][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.194777][ T7] usb 1-1: Product: syz [ 92.195455][ T7] usb 1-1: Manufacturer: syz [ 92.196625][ T7] usb 1-1: SerialNumber: syz [ 92.350589][ T6544] team0 (unregistering): Port device bond0 removed [ 92.406101][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.407622][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.412364][ T7] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 92.415525][ T7] usb 1-1: USB disconnect, device number 11 [ 92.623269][ T6566] device syzkaller0 entered promiscuous mode [ 92.866386][ T6572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.867873][ T6572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.002123][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 93.192259][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 93.195044][ T7] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 93.196744][ T7] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 93.198574][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.200194][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.203168][ T7] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 93.205161][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 93.207059][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 93.208879][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.211063][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.220230][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.428652][ T6592] device syzkaller0 entered promiscuous mode [ 93.474348][ T7] usb 1-1: usb_control_msg returned -32 [ 93.475233][ T7] usbtmc 1-1:16.0: can't read capabilities [ 93.544444][ C0] usbtmc 1-1:16.0: overflow with length 1024, actual length is 1024 [ 93.599011][ T6601] netlink: 168 bytes leftover after parsing attributes in process `syz.5.774'. [ 93.600582][ T6601] tipc: Started in network mode [ 93.601420][ T6601] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 93.604347][ T6601] tipc: Enabling of bearer rejected, failed to enable media [ 93.657084][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.658573][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.666580][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'. [ 93.674428][ T24] usb 1-1: USB disconnect, device number 12 [ 94.596060][ T6673] device wg1 entered promiscuous mode [ 95.218145][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.220851][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.225447][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.227868][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.432415][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.433950][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.438393][ T6698] sock: sock_set_timeout: `syz.4.817' (pid 6698) tries to set negative timeout [ 95.491918][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.497868][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.500868][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.806'. [ 95.818062][ T6728] usb usb8: usbfs: process 6728 (syz.1.828) did not claim interface 0 before use [ 96.037558][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.835'. [ 96.262345][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.269545][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.476663][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.478110][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.421605][ T6793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.858'. [ 97.762561][ T5193] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 97.963448][ T5193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.965236][ T5193] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 97.966618][ T5193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.968920][ T5193] usb 1-1: config 0 descriptor?? [ 98.073486][ T27] audit: type=1326 audit(98.068:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6813 comm="syz.2.866" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b9e8 code=0x0 [ 98.256597][ T6821] netlink: 36 bytes leftover after parsing attributes in process `syz.5.869'. [ 98.374390][ T5193] hid-alps 0003:044E:1215.0003: hidraw0: USB HID v58.6c Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 98.671785][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.880'. [ 98.695215][ T5193] usb 1-1: USB disconnect, device number 13 [ 98.783170][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.784571][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.878295][ T6863] netlink: 'syz.5.885': attribute type 1 has an invalid length. [ 98.888869][ T6863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.913182][ T6863] bond1: (slave erspan0): making interface the new active one [ 98.915681][ T6863] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 98.922352][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 98.931397][ T6866] device macvtap2 entered promiscuous mode [ 98.936131][ T6866] device netdevsim0 entered promiscuous mode [ 99.091137][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.891'. [ 99.345146][ T27] audit: type=1326 audit(99.338:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.896" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b9e8 code=0x0 [ 99.743298][ T27] audit: type=1326 audit(99.738:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6915 comm="syz.0.905" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b9e8 code=0x0 [ 100.238789][ T6962] tipc: Enabling of bearer rejected, failed to enable media [ 100.296276][ T6966] device dummy0 entered promiscuous mode [ 100.301201][ T6966] device dummy0 left promiscuous mode [ 100.473353][ T6973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.477076][ T6973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.821586][ T6984] netlink: 304 bytes leftover after parsing attributes in process `syz.0.929'. [ 101.009652][ T27] audit: type=1326 audit(100.998:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.932" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x0 [ 101.510272][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 101.586214][ T7030] fuse: Bad value for 'fd' [ 101.923725][ T7038] IPv6: NLM_F_REPLACE set, but no existing node found! [ 102.158571][ T27] audit: type=1326 audit(102.148:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.0.960" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b9e8 code=0x0 [ 102.369797][ T7058] usb usb8: usbfs: process 7058 (syz.1.961) did not claim interface 0 before use [ 103.148896][ T7084] netlink: 'syz.0.971': attribute type 4 has an invalid length. [ 103.150094][ T7084] netlink: 17 bytes leftover after parsing attributes in process `syz.0.971'. [ 103.296446][ T7086] delete_channel: no stack [ 103.770201][ T7103] device syzkaller1 entered promiscuous mode [ 103.866214][ T27] audit: type=1326 audit(103.858:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7105 comm="syz.5.980" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f75b9e8 code=0x0 [ 104.763112][ T7140] netlink: 108 bytes leftover after parsing attributes in process `syz.5.995'. [ 104.785526][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 104.788344][ T7146] device bridge0 entered promiscuous mode [ 104.794780][ T7146] bridge0: port 3(macsec1) entered blocking state [ 104.795890][ T7146] bridge0: port 3(macsec1) entered disabled state [ 104.798549][ T7146] device bridge0 left promiscuous mode [ 104.803137][ T7140] netlink: 360 bytes leftover after parsing attributes in process `syz.5.995'. [ 105.082216][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 105.264661][ T27] audit: type=1326 audit(105.258:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.2.1004" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffac95b9e8 code=0x0 [ 105.423336][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.425245][ T7] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.426899][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.428417][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.435929][ T7148] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.643530][ T4386] usb 1-1: USB disconnect, device number 14 [ 106.668295][ T27] audit: type=1326 audit(106.658:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.0.1022" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffb155b9e8 code=0x0 [ 106.681322][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.683903][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.259111][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.260838][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.266171][ T7231] ptrace attach of "./syz-executor exec"[7232] was attempted by "./syz-executor exec"[7231] [ 107.870098][ T27] audit: type=1326 audit(107.858:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.4.1044" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5b9e8 code=0x0 [ 107.962104][ T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 107.974741][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1042'. [ 107.987820][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 108.062501][ T7266] tipc: Started in network mode [ 108.063525][ T7266] tipc: Node identity 826132f8122, cluster identity 4711 [ 108.065935][ T7266] tipc: Enabled bearer , priority 0 [ 108.067953][ T7264] tipc: Resetting bearer [ 108.123003][ T7264] tipc: Disabling bearer [ 108.162056][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 108.166497][ T14] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 108.167969][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.169409][ T14] usb 1-1: Product: syz [ 108.170354][ T14] usb 1-1: Manufacturer: syz [ 108.171285][ T14] usb 1-1: SerialNumber: syz [ 108.180016][ T14] usb 1-1: config 0 descriptor?? [ 108.325383][ T7274] netlink: 'syz.2.1050': attribute type 10 has an invalid length. [ 108.404632][ T7278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1052'. [ 108.527060][ T7278] netlink: 'syz.2.1052': attribute type 10 has an invalid length. [ 108.530679][ T7278] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.579611][ T7283] futex_wake_op: syz.2.1054 tries to shift op by 144; fix this program [ 108.584525][ T14] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 108.587713][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.589459][ T14] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 108.597605][ T14] usb 1-1: media controller created [ 108.600879][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.651795][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.654514][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.173274][ T14] zl10353_read_register: readreg error (reg=127, ret==0) [ 109.174401][ T14] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 109.175701][ T14] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 109.178998][ T7248] ================================================================== [ 109.180161][ T7248] BUG: KASAN: slab-out-of-bounds in dtv5100_i2c_msg+0x17c/0x270 [ 109.181293][ T7248] Write of size 83 at addr ffff0000d332a500 by task syz.0.1040/7248 [ 109.182536][ T7248] [ 109.182908][ T7248] CPU: 0 PID: 7248 Comm: syz.0.1040 Not tainted syzkaller #0 [ 109.184073][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 109.185630][ T7248] Call trace: [ 109.186113][ T7248] dump_backtrace+0x1c8/0x1f4 [ 109.186822][ T7248] show_stack+0x2c/0x3c [ 109.187491][ T7248] __dump_stack+0x30/0x40 [ 109.188081][ T7248] dump_stack_lvl+0xf8/0x160 [ 109.188801][ T7248] print_address_description+0x88/0x218 [ 109.189609][ T7248] print_report+0x50/0x68 [ 109.190247][ T7248] kasan_report+0xa8/0x100 [ 109.190887][ T7248] kasan_check_range+0x260/0x2a0 [ 109.191688][ T7248] memcpy+0x60/0x90 [ 109.192264][ T7248] dtv5100_i2c_msg+0x17c/0x270 [ 109.192962][ T7248] dtv5100_i2c_xfer+0x210/0x358 [ 109.193668][ T7248] __i2c_transfer+0x610/0x21c0 [ 109.194380][ T7248] i2c_transfer+0x1c8/0x2e4 [ 109.195005][ T7248] i2cdev_ioctl_rdwr+0x318/0x680 [ 109.195707][ T7248] i2cdev_ioctl+0x74c/0x948 [ 109.196338][ T7248] __arm64_sys_ioctl+0x14c/0x1c8 [ 109.197104][ T7248] invoke_syscall+0x98/0x2bc [ 109.197769][ T7248] el0_svc_common+0x138/0x258 [ 109.198492][ T7248] do_el0_svc+0x58/0x13c [ 109.199178][ T7248] el0_svc+0x58/0x138 [ 109.199765][ T7248] el0t_64_sync_handler+0x84/0xf0 [ 109.200505][ T7248] el0t_64_sync+0x18c/0x190 [ 109.201248][ T7248] [ 109.201652][ T7248] Allocated by task 14: [ 109.202239][ T7248] kasan_set_track+0x4c/0x80 [ 109.202907][ T7248] kasan_save_alloc_info+0x28/0x34 [ 109.203663][ T7248] __kasan_kmalloc+0xa0/0xb8 [ 109.204408][ T7248] __kmalloc+0xec/0x178 [ 109.205002][ T7248] dvb_usb_device_init+0x6e4/0x1958 [ 109.205794][ T7248] dtv5100_probe+0x288/0x2c4 [ 109.206440][ T7248] usb_probe_interface+0x4fc/0x994 [ 109.207176][ T7248] really_probe+0x39c/0xae0 [ 109.207832][ T7248] __driver_probe_device+0x180/0x314 [ 109.208591][ T7248] driver_probe_device+0x78/0x330 [ 109.209328][ T7248] __device_attach_driver+0x290/0x4e0 [ 109.210081][ T7248] bus_for_each_drv+0x150/0x1d8 [ 109.210797][ T7248] __device_attach+0x2a8/0x3d4 [ 109.211472][ T7248] device_initial_probe+0x24/0x34 [ 109.212208][ T7248] bus_probe_device+0xbc/0x1c4 [ 109.212958][ T7248] device_add+0xb04/0xf94 [ 109.213602][ T7248] usb_set_configuration+0x1598/0x1b0c [ 109.214429][ T7248] usb_generic_driver_probe+0x8c/0x144 [ 109.215241][ T7248] usb_probe_device+0x120/0x25c [ 109.215962][ T7248] really_probe+0x39c/0xae0 [ 109.216602][ T7248] __driver_probe_device+0x180/0x314 [ 109.217455][ T7248] driver_probe_device+0x78/0x330 [ 109.218215][ T7248] __device_attach_driver+0x290/0x4e0 [ 109.219075][ T7248] bus_for_each_drv+0x150/0x1d8 [ 109.219759][ T7248] __device_attach+0x2a8/0x3d4 [ 109.220459][ T7248] device_initial_probe+0x24/0x34 [ 109.221218][ T7248] bus_probe_device+0xbc/0x1c4 [ 109.221946][ T7248] device_add+0xb04/0xf94 [ 109.222555][ T7248] usb_new_device+0x7f0/0x11c4 [ 109.223303][ T7248] hub_event+0x221c/0x3e2c [ 109.223936][ T7248] process_one_work+0x7f4/0x13a8 [ 109.224649][ T7248] worker_thread+0x8c8/0xfbc [ 109.225315][ T7248] kthread+0x250/0x2d8 [ 109.225995][ T7248] ret_from_fork+0x10/0x20 [ 109.226653][ T7248] [ 109.227075][ T7248] Last potentially related work creation: [ 109.227939][ T7248] kasan_save_stack+0x40/0x70 [ 109.228661][ T7248] __kasan_record_aux_stack+0xc0/0xdc [ 109.229450][ T7248] kasan_record_aux_stack_noalloc+0x14/0x20 [ 109.230315][ T7248] kvfree_call_rcu+0xb4/0x6f0 [ 109.231036][ T7248] sctp_inet6addr_event+0x5a4/0x628 [ 109.231804][ T7248] atomic_notifier_call_chain+0x174/0x2a0 [ 109.232672][ T7248] inet6addr_notifier_call_chain+0x30/0x40 [ 109.233613][ T7248] addrconf_ifdown+0xc34/0x15dc [ 109.234369][ T7248] addrconf_notify+0x2f4/0xca8 [ 109.235101][ T7248] raw_notifier_call_chain+0xd4/0x164 [ 109.235908][ T7248] dev_close_many+0x2cc/0x440 [ 109.236630][ T7248] unregister_netdevice_many+0x3c4/0x1740 [ 109.237483][ T7248] unregister_netdevice_queue+0x2ac/0x2f8 [ 109.238267][ T7248] __tun_detach+0xb04/0x122c [ 109.238986][ T7248] tun_chr_close+0x118/0x1f8 [ 109.239704][ T7248] __fput+0x1bc/0x7c0 [ 109.240272][ T7248] ____fput+0x20/0x30 [ 109.240855][ T7248] task_work_run+0x1ec/0x270 [ 109.241469][ T7248] do_notify_resume+0x2038/0x2b28 [ 109.242160][ T7248] el0_svc+0x98/0x138 [ 109.242707][ T7248] el0t_64_sync_handler+0x84/0xf0 [ 109.243407][ T7248] el0t_64_sync+0x18c/0x190 [ 109.244048][ T7248] [ 109.244371][ T7248] The buggy address belongs to the object at ffff0000d332a500 [ 109.244371][ T7248] which belongs to the cache kmalloc-128 of size 128 [ 109.246241][ T7248] The buggy address is located 0 bytes inside of [ 109.246241][ T7248] 128-byte region [ffff0000d332a500, ffff0000d332a580) [ 109.248117][ T7248] [ 109.248450][ T7248] The buggy address belongs to the physical page: [ 109.249369][ T7248] page:00000000f511fa2e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11332a [ 109.250834][ T7248] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 109.251966][ T7248] raw: 05ffc00000000200 fffffc00036fc880 dead000000000003 ffff0000c0002300 [ 109.253181][ T7248] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 109.254422][ T7248] page dumped because: kasan: bad access detected [ 109.255332][ T7248] [ 109.255655][ T7248] Memory state around the buggy address: [ 109.256473][ T7248] ffff0000d332a400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.257686][ T7248] ffff0000d332a480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.258859][ T7248] >ffff0000d332a500: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 109.259960][ T7248] ^ [ 109.260901][ T7248] ffff0000d332a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.262108][ T7248] ffff0000d332a600: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 109.263246][ T7248] ================================================================== [ 109.272024][ T7248] Disabling lock debugging due to kernel taint [ 109.309263][ T4386] usb 1-1: USB disconnect, device number 15 [ 109.319895][ T4386] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.