last executing test programs: 2.257026948s ago: executing program 1 (id=236): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000008205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.444720574s ago: executing program 1 (id=244): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) listen(0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0x1, 0x1}, 0x6) 1.431607895s ago: executing program 1 (id=245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb0805"], 0x1015) 1.324880483s ago: executing program 1 (id=246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0xab, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002780), &(0x7f00000027c0)=0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002600)={0x32, 0x1, '\x00', [@ra={0x5, 0x2, 0x80}, @padn, @ra={0x5, 0x2, 0x40}, @padn={0x1, 0x1, [0x0]}]}, 0x18) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)="00120b", 0x3, 0x4090, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 1.304045385s ago: executing program 1 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 1.204056483s ago: executing program 0 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r3, @ANYBLOB="06003600440000000a0006"], 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) 1.142996568s ago: executing program 3 (id=252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), 0x0}, 0x20) recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) 1.142852888s ago: executing program 0 (id=253): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1.139226738s ago: executing program 3 (id=255): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=[{0x6, 0x0, 0xb187}], 0x1, 0x201, 0x0, 0x0, 0xa5, 0x5c}) 1.106535401s ago: executing program 3 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) 1.054823256s ago: executing program 0 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) sync() 1.054695795s ago: executing program 3 (id=259): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0xab, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002780), &(0x7f00000027c0)=0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)="00120b", 0x3, 0x4090, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 942.753584ms ago: executing program 3 (id=261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003012000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 562.798945ms ago: executing program 3 (id=266): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200010000000009"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x8000006}) 347.036802ms ago: executing program 2 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x24, 0x64, 0x300, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x88c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xcd}}}}}}}}, 0x36) 258.148789ms ago: executing program 2 (id=271): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0xab, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002780), &(0x7f00000027c0)=0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)="00120b", 0x3, 0x4090, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 205.995883ms ago: executing program 4 (id=272): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x4, 0x7fff, 0xbb38, 0x4}) 205.455854ms ago: executing program 2 (id=273): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000002740)={'pcm3724\x00', [0x4f27, 0x4, 0x2, 0x3, 0x5, 0xcc5, 0xf, 0x6, 0x4a, 0xe8aa, 0x3, 0x1, 0xffffbffd, 0x1, 0x40000, 0xa0000, 0x0, 0x1a449, 0x3ff, 0x40000006, 0x20009d, 0xcaa3, 0x0, 0x20001e57, 0x7, 0x401, 0x3d, 0xd0, 0x2, 0x1, 0xfce]}) 162.671517ms ago: executing program 2 (id=274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x68001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x40}}}}}}}, 0x3e) 162.521407ms ago: executing program 4 (id=275): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0xb) 161.889667ms ago: executing program 0 (id=276): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xfdef) 114.865321ms ago: executing program 4 (id=277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), 0x0}, 0x20) recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) 114.219391ms ago: executing program 1 (id=278): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mincore(&(0x7f000043d000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/101) 99.347492ms ago: executing program 4 (id=279): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x3a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x1, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x9, 0x2, 0x1, 0x7, 0x800, 0xcb, @none, 0x20, "6cc86d5ef9159f733056076441c0779c00198d134438092bad72d1e287a75cb3"}]}}}}, 0x3d) 34.759217ms ago: executing program 4 (id=280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0, 0x10000}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f710020004000500"], 0xc) mount(0x0, 0x0, 0x0, 0x2a3d002, 0x0) 34.502087ms ago: executing program 0 (id=281): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe6b) 34.347207ms ago: executing program 4 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x34}}, 0x0) 34.157067ms ago: executing program 2 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc, 0x3, "5ae3420e80c07506"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 11.783819ms ago: executing program 0 (id=284): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0xab, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002780), &(0x7f00000027c0)=0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)="00120b", 0x3, 0x4090, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 0s ago: executing program 2 (id=285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x55) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000200000406d0487c20000000000010902"], 0x0) writev(r0, &(0x7f0000000880)=[{&(0x7f00000002c0)="c8", 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 29.368089][ T4033] cgroup: Unknown subsys name 'net' [ 29.637204][ T4033] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.915098][ T4033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.727291][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 30.784509][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 30.808653][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.809824][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.811326][ T4048] device bridge_slave_0 entered promiscuous mode [ 30.824045][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 30.827504][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.828664][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.830261][ T4048] device bridge_slave_1 entered promiscuous mode [ 30.836819][ T4049] chnl_net:caif_netlink_parms(): no params data found [ 30.865961][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.872777][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.889243][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.890488][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.892110][ T4043] device bridge_slave_0 entered promiscuous mode [ 30.895456][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.896590][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.898039][ T4047] device bridge_slave_0 entered promiscuous mode [ 30.901064][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.902261][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.903718][ T4047] device bridge_slave_1 entered promiscuous mode [ 30.908046][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.909196][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.910711][ T4043] device bridge_slave_1 entered promiscuous mode [ 30.919230][ T4050] chnl_net:caif_netlink_parms(): no params data found [ 30.927935][ T4048] team0: Port device team_slave_0 added [ 30.938472][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.940805][ T4048] team0: Port device team_slave_1 added [ 30.942698][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.945776][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.950505][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.951635][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.953256][ T4049] device bridge_slave_0 entered promiscuous mode [ 30.956057][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.969891][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.971031][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.972597][ T4049] device bridge_slave_1 entered promiscuous mode [ 30.981119][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.982198][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.986519][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.995204][ T4043] team0: Port device team_slave_0 added [ 30.997161][ T4047] team0: Port device team_slave_0 added [ 31.000027][ T4047] team0: Port device team_slave_1 added [ 31.001199][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.002352][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.006652][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.012651][ T4043] team0: Port device team_slave_1 added [ 31.021721][ T4049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.031768][ T4050] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.032933][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.034757][ T4050] device bridge_slave_0 entered promiscuous mode [ 31.040851][ T4049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.042665][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.046715][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.051103][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.053258][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.054621][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.056099][ T4050] device bridge_slave_1 entered promiscuous mode [ 31.057742][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.058875][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.063000][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.065877][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.067011][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.071169][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.078754][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.079759][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.083493][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.093557][ T4049] team0: Port device team_slave_0 added [ 31.095759][ T4049] team0: Port device team_slave_1 added [ 31.145034][ T4048] device hsr_slave_0 entered promiscuous mode [ 31.184027][ T4048] device hsr_slave_1 entered promiscuous mode [ 31.227798][ T4050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.230187][ T4050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.247691][ T4050] team0: Port device team_slave_0 added [ 31.251827][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.252927][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.257513][ T4049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.265334][ T4050] team0: Port device team_slave_1 added [ 31.269366][ T4049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.270345][ T4049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.274789][ T4049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.304795][ T4047] device hsr_slave_0 entered promiscuous mode [ 31.363972][ T4047] device hsr_slave_1 entered promiscuous mode [ 31.403899][ T4047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.405168][ T4047] Cannot create hsr debugfs directory [ 31.464727][ T4043] device hsr_slave_0 entered promiscuous mode [ 31.504020][ T4043] device hsr_slave_1 entered promiscuous mode [ 31.573854][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.575183][ T4043] Cannot create hsr debugfs directory [ 31.582559][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.583648][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.588151][ T4050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.599089][ T4050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.600208][ T4050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.604749][ T4050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.665001][ T4049] device hsr_slave_0 entered promiscuous mode [ 31.704077][ T4049] device hsr_slave_1 entered promiscuous mode [ 31.743872][ T4049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.745095][ T4049] Cannot create hsr debugfs directory [ 31.834864][ T4050] device hsr_slave_0 entered promiscuous mode [ 31.874042][ T4050] device hsr_slave_1 entered promiscuous mode [ 31.933944][ T4050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.935215][ T4050] Cannot create hsr debugfs directory [ 31.991173][ T4048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.015580][ T4048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.055982][ T4048] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.095485][ T4048] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.166844][ T4047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.214973][ T4047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.256907][ T4047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.316371][ T4047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.374906][ T4043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.424908][ T4043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.490304][ T4043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.548288][ T4043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.601084][ T4049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.664188][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 32.664323][ T1969] Bluetooth: hci1: command 0x0409 tx timeout [ 32.665384][ T25] Bluetooth: hci3: command 0x0409 tx timeout [ 32.666212][ T1969] Bluetooth: hci0: command 0x0409 tx timeout [ 32.667232][ T25] Bluetooth: hci2: command 0x0409 tx timeout [ 32.671821][ T4049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.713268][ T4049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.765291][ T4049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.799534][ T4050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.848627][ T4050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.897360][ T4050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.945106][ T4050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.994845][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.999039][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.007399][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.014601][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.016337][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.017777][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.019313][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.020839][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.022029][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.023565][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.027001][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.028536][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.029706][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.031079][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.032748][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.036358][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.043298][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.045104][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.047284][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.056062][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.057720][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.059335][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.060942][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.075500][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.080837][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.082624][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.085117][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.086796][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.088296][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.089479][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.090882][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.102872][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.105410][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.107078][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.108775][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.110337][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.111505][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.112901][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.116592][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.121767][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.134249][ T4048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.135888][ T4048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.137953][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.139821][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.141697][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.143285][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.146884][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.148782][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.150444][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.151972][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.157406][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.159103][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.187041][ T4049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.192635][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.200329][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.208306][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.209879][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.217817][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.219267][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.221821][ T4049] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.230080][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.232495][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.234302][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.235779][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.237079][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.238301][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.239795][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.241208][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.242367][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.248447][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.257665][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.259283][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.260867][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.262398][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.263644][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.265907][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.267548][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.268989][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.270084][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.271382][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.273017][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.274544][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.275820][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.277425][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.278850][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.279958][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.281372][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.283022][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.285457][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.286458][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.287715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.289237][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.298162][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.299892][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.301564][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.305392][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.307057][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.309930][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.313370][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.314992][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.316638][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.318163][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.319759][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.321198][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.322309][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.323655][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.331679][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.333328][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.335936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.337503][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.338985][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.340534][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.342944][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.353709][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.355788][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.357158][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.367394][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.368898][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.370315][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.371898][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.373398][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.376088][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.377692][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.379249][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.380870][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.383456][ T4050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.387361][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.395497][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.397112][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.398864][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.405438][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.408864][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.412511][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.415172][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.419206][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.420719][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.422097][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.427722][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.429359][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.430837][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.436329][ T4043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.438038][ T4043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.448357][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.449880][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.451449][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.452974][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.456155][ T4048] device veth0_vlan entered promiscuous mode [ 33.459480][ T4048] device veth1_vlan entered promiscuous mode [ 33.464884][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.468140][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.469904][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.472167][ T4047] device veth0_vlan entered promiscuous mode [ 33.483970][ T4050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.486714][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.488018][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.491090][ T4047] device veth1_vlan entered promiscuous mode [ 33.492550][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.494835][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.496457][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.503384][ T4048] device veth0_macvtap entered promiscuous mode [ 33.517972][ T4048] device veth1_macvtap entered promiscuous mode [ 33.527358][ T4049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.530472][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.531899][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.533324][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.538266][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.539501][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.555680][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.558000][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.559510][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.561068][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.562607][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.567709][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.578914][ T4047] device veth0_macvtap entered promiscuous mode [ 33.580409][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.581918][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.583425][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.589260][ T4048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.590769][ T4048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.592195][ T4048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.593653][ T4048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.600890][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.602489][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.604723][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.606029][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.608908][ T4047] device veth1_macvtap entered promiscuous mode [ 33.619378][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.626991][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.628432][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.629982][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.631631][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.632986][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.636338][ T4049] device veth0_vlan entered promiscuous mode [ 33.641808][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.643389][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.651573][ T4049] device veth1_vlan entered promiscuous mode [ 33.668655][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.670214][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.671668][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.673210][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.682331][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.685382][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.687547][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.690027][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.691629][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.693152][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.695451][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.697014][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.698430][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.700799][ T4050] device veth0_vlan entered promiscuous mode [ 33.706748][ T4047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.708609][ T4047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.710770][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.718811][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.720426][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.722050][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.723575][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.725477][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.726842][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.729603][ T4043] device veth0_vlan entered promiscuous mode [ 33.740354][ T4047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.741744][ T4047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.743135][ T4047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.745513][ T4047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.748684][ T356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.749976][ T356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.753121][ T4142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.765227][ T4050] device veth1_vlan entered promiscuous mode [ 33.767253][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.768686][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.768775][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.769947][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.771525][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.775627][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.777766][ T4043] device veth1_vlan entered promiscuous mode [ 33.781507][ T4049] device veth0_macvtap entered promiscuous mode [ 33.789374][ T4049] device veth1_macvtap entered promiscuous mode [ 33.817913][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.819636][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.821290][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.822783][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.826137][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.829018][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.830791][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.832312][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.837110][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.838614][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.840106][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.841662][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.843243][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.845851][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.867476][ T4050] device veth0_macvtap entered promiscuous mode [ 33.870115][ T4050] device veth1_macvtap entered promiscuous mode [ 33.872539][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.874781][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.876441][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.882690][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.886963][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.888466][ T4049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.889950][ T4049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.892032][ T4049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.893287][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.896131][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.897724][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.901644][ T356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.902945][ T356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.908688][ T4043] device veth0_macvtap entered promiscuous mode [ 33.912045][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.919270][ T356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.920339][ T4043] device veth1_macvtap entered promiscuous mode [ 33.920577][ T356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.927405][ T4049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.928722][ T4049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.930076][ T4049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.931369][ T4049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.935903][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.939813][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.941550][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.943264][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.946586][ T4156] block device autoloading is deprecated and will be removed. [ 33.953202][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.954954][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.956670][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.959317][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.969559][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.971184][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.974646][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.976298][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.977980][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.979594][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.981786][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.983518][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.988859][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.990529][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.992978][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.996713][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.998521][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.000109][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.001828][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.003518][ T4050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.005960][ T4050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.008071][ T4050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.014285][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.016037][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.017596][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.019185][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.040466][ T4162] udc-core: couldn't find an available UDC or it's busy [ 34.041589][ T4162] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 34.056633][ T4050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.058062][ T4050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.059540][ T4050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.060892][ T4050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.070626][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.072269][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.073769][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.076286][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.077832][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.079463][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.081010][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.082659][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.085636][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.088158][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.089829][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.128074][ T4043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.129481][ T4043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.130933][ T4043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.132400][ T4043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.162746][ T356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.164172][ T356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.166702][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.192238][ T1606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.193567][ T1606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.196189][ T1606] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.231614][ T1606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.232936][ T1606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.234109][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.235537][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.235809][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.238321][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.258465][ T4174] MPTCP: addr_signal error, rm_addr=1 [ 34.272953][ T4142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.278004][ T4142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.279701][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.293469][ T4179] udc-core: couldn't find an available UDC or it's busy [ 34.304060][ T4179] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 34.313634][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.315767][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.317976][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.371967][ T4095] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.378045][ T4095] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.382197][ T4189] udc-core: couldn't find an available UDC or it's busy [ 34.383357][ T4189] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 34.439963][ T4192] binder: 4191:4192 tried to acquire reference to desc 0, got 1 instead [ 34.443147][ T4095] binder: release 4191:4192 transaction 5 out, still active [ 34.444885][ T4095] binder: undelivered TRANSACTION_COMPLETE [ 34.450542][ T4095] binder: send failed reply for transaction 5, target dead [ 34.583666][ T4197] udc-core: couldn't find an available UDC or it's busy [ 34.588132][ T4199] sctp: [Deprecated]: syz.0.17 (pid 4199) Use of int in max_burst socket option. [ 34.588132][ T4199] Use struct sctp_assoc_value instead [ 34.589329][ T4197] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 34.591887][ T4199] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 34.744143][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 34.744232][ T4095] Bluetooth: hci3: command 0x041b tx timeout [ 34.745391][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 34.746236][ T4095] Bluetooth: hci1: command 0x041b tx timeout [ 34.748128][ T4095] Bluetooth: hci4: command 0x041b tx timeout [ 34.930099][ T4207] device syzkaller1 entered promiscuous mode [ 34.943969][ T4124] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 35.142951][ T4210] udc-core: couldn't find an available UDC or it's busy [ 35.148877][ T4210] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 35.334381][ T4124] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.336070][ T4124] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 35.503994][ T4124] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.505418][ T4124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.506677][ T4124] usb 1-1: Product: syz [ 35.507316][ T4124] usb 1-1: Manufacturer: syz [ 35.508088][ T4124] usb 1-1: SerialNumber: syz [ 35.544268][ T4201] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 35.678932][ T4212] udc-core: couldn't find an available UDC or it's busy [ 35.680484][ T4212] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 35.838559][ T4217] block device autoloading is deprecated and will be removed. [ 35.883771][ T4219] udc-core: couldn't find an available UDC or it's busy [ 35.885049][ T4219] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 35.892135][ T4219] udc-core: couldn't find an available UDC or it's busy [ 35.893247][ T4219] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 36.096204][ T4219] udc-core: couldn't find an available UDC or it's busy [ 36.097371][ T4219] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 36.258967][ T4222] udc-core: couldn't find an available UDC or it's busy [ 36.260083][ T4222] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 36.664771][ T4124] cdc_ncm 1-1:1.0: bind() failure [ 36.693974][ T4124] usbtest: probe of 1-1:1.1 failed with error -71 [ 36.700971][ T4124] usb 1-1: USB disconnect, device number 2 [ 36.753724][ T4230] netlink: 'syz.1.31': attribute type 12 has an invalid length. [ 36.793597][ T4234] udc-core: couldn't find an available UDC or it's busy [ 36.795466][ T4234] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 36.824113][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 36.825406][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 36.826393][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 36.827492][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 36.828501][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 36.871334][ T4238] udc-core: couldn't find an available UDC or it's busy [ 36.872682][ T4238] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.332297][ T4242] loop1: detected capacity change from 0 to 512 [ 37.348557][ T4242] ======================================================= [ 37.348557][ T4242] WARNING: The mand mount option has been deprecated and [ 37.348557][ T4242] and is ignored by this kernel. Remove the mand [ 37.348557][ T4242] option from the mount to silence this warning. [ 37.348557][ T4242] ======================================================= [ 37.410761][ T4244] udc-core: couldn't find an available UDC or it's busy [ 37.411886][ T4244] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.426997][ T4242] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.836590][ T4256] loop1: detected capacity change from 0 to 16 [ 37.850502][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.936728][ T4256] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.073546][ T4259] udc-core: couldn't find an available UDC or it's busy [ 38.076221][ T4259] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 38.224489][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.226352][ T7] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 38.227945][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.231172][ T7] usb 1-1: config 0 descriptor?? [ 38.265910][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 38.429301][ T4264] process 'syz.3.40' launched './file0' with NULL argv: empty string added [ 38.441848][ T4266] loop1: detected capacity change from 0 to 8 [ 38.475083][ T4266] squashfs: Unknown parameter '18446744073709551615Í ' [ 38.606726][ T4273] loop3: detected capacity change from 0 to 512 [ 38.612617][ T4273] EXT2-fs (loop3): error: couldn't mount because of unsupported optional features (18400) [ 39.034899][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 39.035889][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 39.036861][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 39.037752][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 39.038966][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 39.047838][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 39.083897][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 39.124176][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 39.166735][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 39.203896][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 39.243937][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 39.317992][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 39.434155][ T4287] loop2: detected capacity change from 0 to 164 [ 39.681458][ T4288] udc-core: couldn't find an available UDC or it's busy [ 39.682654][ T4288] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.694025][ T7] pwc: recv_control_msg error -71 req 04 val 1500 [ 39.705596][ T4290] udc-core: couldn't find an available UDC or it's busy [ 39.725015][ T7] pwc: recv_control_msg error -71 req 02 val 2500 [ 39.728293][ T4290] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.743864][ T7] pwc: recv_control_msg error -71 req 02 val 2400 [ 39.763893][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 39.783983][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 39.804696][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 39.823972][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 39.846253][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 39.848568][ T7] pwc: Registered as video11. [ 39.850374][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 39.854199][ T7] usb 1-1: USB disconnect, device number 3 [ 39.965915][ T4295] udc-core: couldn't find an available UDC or it's busy [ 39.967300][ T4295] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.453742][ T4314] udc-core: couldn't find an available UDC or it's busy [ 40.457681][ T4314] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.505342][ T4317] syz.0.61 uses obsolete (PF_INET,SOCK_PACKET) [ 40.653314][ T4322] loop0: detected capacity change from 0 to 512 [ 40.858267][ T4327] loop4: detected capacity change from 0 to 164 [ 41.117262][ T4322] EXT2-fs (loop0): error: couldn't mount because of unsupported optional features (18400) [ 41.151168][ T4330] udc-core: couldn't find an available UDC or it's busy [ 41.152333][ T4330] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 41.508991][ T4334] loop0: detected capacity change from 0 to 8 [ 41.527226][ T4336] udc-core: couldn't find an available UDC or it's busy [ 41.528395][ T4336] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 41.554336][ T4334] squashfs: Unknown parameter '18446744073709551615Í ' [ 42.390455][ T4359] loop2: detected capacity change from 0 to 16 [ 42.560666][ T4359] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.960523][ T4105] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.962675][ T4105] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.973617][ T4376] device syzkaller1 entered promiscuous mode [ 43.001853][ T4379] udc-core: couldn't find an available UDC or it's busy [ 43.003409][ T4379] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.119114][ T4383] udc-core: couldn't find an available UDC or it's busy [ 43.120321][ T4383] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.161536][ T4385] sctp: [Deprecated]: syz.3.79 (pid 4385) Use of int in max_burst socket option. [ 43.161536][ T4385] Use struct sctp_assoc_value instead [ 43.167790][ T4385] netlink: 'syz.3.79': attribute type 4 has an invalid length. [ 43.520820][ T4390] udc-core: couldn't find an available UDC or it's busy [ 43.522048][ T4390] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 43.736074][ T4399] udc-core: couldn't find an available UDC or it's busy [ 43.737458][ T4399] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 44.270220][ T4404] loop3: detected capacity change from 0 to 8 [ 44.289310][ T4404] squashfs: Unknown parameter '18446744073709551615Í ' [ 44.927428][ T4413] udc-core: couldn't find an available UDC or it's busy [ 44.928567][ T4413] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 45.159155][ T7] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.161022][ T7] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.201758][ T4417] device syzkaller1 entered promiscuous mode [ 45.329651][ T4422] udc-core: couldn't find an available UDC or it's busy [ 45.330802][ T4422] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 45.491844][ T4425] sctp: [Deprecated]: syz.1.93 (pid 4425) Use of int in max_burst socket option. [ 45.491844][ T4425] Use struct sctp_assoc_value instead [ 45.539166][ T4427] binder: 4426:4427 tried to acquire reference to desc 0, got 1 instead [ 45.541841][ T4105] binder: release 4426:4427 transaction 16 out, still active [ 45.543034][ T4105] binder: undelivered TRANSACTION_COMPLETE [ 45.554016][ T4105] binder: send failed reply for transaction 16, target dead [ 45.658069][ T4432] udc-core: couldn't find an available UDC or it's busy [ 45.659253][ T4432] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 45.947835][ T4095] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.951625][ T4439] udc-core: couldn't find an available UDC or it's busy [ 45.952804][ T4439] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.303974][ T4095] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 46.305776][ T4095] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 46.438238][ T4443] udc-core: couldn't find an available UDC or it's busy [ 46.439326][ T4443] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 46.483941][ T4095] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 46.485456][ T4095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.486950][ T4095] usb 1-1: Product: syz [ 46.487590][ T4095] usb 1-1: Manufacturer: syz [ 46.488468][ T4095] usb 1-1: SerialNumber: syz [ 46.505339][ T4095] usb 1-1: config 0 descriptor?? [ 46.553043][ T4447] device syzkaller1 entered promiscuous mode [ 46.555443][ T4434] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 46.556868][ T4434] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 46.565235][ T4095] usb 1-1: ucan: probing device on interface #0 [ 46.566314][ T4095] usb 1-1: ucan: invalid EP count (1) [ 46.567148][ T4095] usb 1-1: ucan: probe failed; try to update the device firmware [ 46.581372][ T4450] netlink: 'syz.3.104': attribute type 12 has an invalid length. [ 46.700021][ T4457] sctp: [Deprecated]: syz.3.107 (pid 4457) Use of int in max_burst socket option. [ 46.700021][ T4457] Use struct sctp_assoc_value instead [ 46.972235][ T4469] udc-core: couldn't find an available UDC or it's busy [ 46.973512][ T4469] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.026478][ T4472] udc-core: couldn't find an available UDC or it's busy [ 47.029898][ T4472] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.416271][ T4476] udc-core: couldn't find an available UDC or it's busy [ 47.417455][ T4476] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.679847][ T4481] udc-core: couldn't find an available UDC or it's busy [ 47.681304][ T4481] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.685518][ T4481] udc-core: couldn't find an available UDC or it's busy [ 47.685965][ T4483] netlink: 'syz.2.117': attribute type 12 has an invalid length. [ 47.686714][ T4481] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 47.839985][ T4488] sctp: [Deprecated]: syz.2.120 (pid 4488) Use of int in max_burst socket option. [ 47.839985][ T4488] Use struct sctp_assoc_value instead [ 47.899378][ T4481] udc-core: couldn't find an available UDC or it's busy [ 47.900559][ T4481] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.422656][ T4494] udc-core: couldn't find an available UDC or it's busy [ 48.424529][ T4494] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 48.664654][ T4095] usb 1-1: USB disconnect, device number 4 [ 48.840650][ T4505] udc-core: couldn't find an available UDC or it's busy [ 48.842029][ T4505] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.283888][ T4095] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 49.558293][ T4095] usb 1-1: Using ep0 maxpacket: 32 [ 49.673990][ T4519] sctp: [Deprecated]: syz.4.133 (pid 4519) Use of int in max_burst socket option. [ 49.673990][ T4519] Use struct sctp_assoc_value instead [ 49.676811][ T4095] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 49.677358][ T4519] netlink: 'syz.4.133': attribute type 4 has an invalid length. [ 49.678033][ T4095] usb 1-1: config 0 has no interface number 0 [ 49.833875][ T4095] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 49.835594][ T4095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.838590][ T4095] usb 1-1: Product: syz [ 49.839390][ T4095] usb 1-1: Manufacturer: syz [ 49.840771][ T4095] usb 1-1: SerialNumber: syz [ 49.848042][ T4095] usb 1-1: config 0 descriptor?? [ 49.886705][ T4095] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 50.126474][ T4095] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 50.129532][ T4095] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 50.375402][ T4523] udc-core: couldn't find an available UDC or it's busy [ 50.376553][ T4523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.383237][ T4525] udc-core: couldn't find an available UDC or it's busy [ 50.385014][ T4523] udc-core: couldn't find an available UDC or it's busy [ 50.386142][ T4523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.388271][ T4525] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 50.575039][ T25] usb 1-1: USB disconnect, device number 5 [ 50.583813][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 50.587834][ T25] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 50.595602][ T25] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 50.597752][ T25] quatech2 1-1:0.51: device disconnected [ 50.602316][ T4523] udc-core: couldn't find an available UDC or it's busy [ 50.603537][ T4523] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.191578][ T4537] udc-core: couldn't find an available UDC or it's busy [ 51.192698][ T4537] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.234277][ T4540] udc-core: couldn't find an available UDC or it's busy [ 51.235463][ T4540] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.493833][ T4102] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 51.809069][ T4545] sctp: [Deprecated]: syz.3.145 (pid 4545) Use of int in max_burst socket option. [ 51.809069][ T4545] Use struct sctp_assoc_value instead [ 51.823845][ T4102] usb 1-1: Using ep0 maxpacket: 8 [ 51.831166][ T4545] netlink: 'syz.3.145': attribute type 4 has an invalid length. [ 51.864778][ T4548] sctp: [Deprecated]: syz.2.157 (pid 4548) Use of int in max_burst socket option. [ 51.864778][ T4548] Use struct sctp_assoc_value instead [ 51.877756][ T4548] netlink: 'syz.2.157': attribute type 4 has an invalid length. [ 51.923735][ T4553] udc-core: couldn't find an available UDC or it's busy [ 51.925419][ T4553] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.953961][ T4102] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 51.955446][ T4102] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 51.956812][ T4102] usb 1-1: config 0 has no interface number 0 [ 51.957836][ T4102] usb 1-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 52.034515][ T4102] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 52.036050][ T4102] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 52.037300][ T4102] usb 1-1: Product: syz [ 52.043550][ T4102] usb 1-1: config 0 descriptor?? [ 52.064022][ T4539] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 52.705320][ T4556] sctp: [Deprecated]: syz.2.159 (pid 4556) Use of int in max_burst socket option. [ 52.705320][ T4556] Use struct sctp_assoc_value instead [ 52.710917][ T4556] netlink: 'syz.2.159': attribute type 4 has an invalid length. [ 52.804839][ T4564] udc-core: couldn't find an available UDC or it's busy [ 52.806061][ T4564] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.480865][ T4580] udc-core: couldn't find an available UDC or it's busy [ 53.482601][ T4581] udc-core: couldn't find an available UDC or it's busy [ 53.488804][ T4581] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 53.490249][ T4580] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.063471][ T4589] sctp: [Deprecated]: syz.4.161 (pid 4589) Use of int in max_burst socket option. [ 54.063471][ T4589] Use struct sctp_assoc_value instead [ 54.071266][ T4589] netlink: 'syz.4.161': attribute type 4 has an invalid length. [ 54.149615][ T25] usb 1-1: USB disconnect, device number 6 [ 54.513886][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 54.753821][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 54.934585][ T4606] udc-core: couldn't find an available UDC or it's busy [ 54.935751][ T4606] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.957082][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 55.089772][ T4613] loop3: detected capacity change from 0 to 512 [ 55.093586][ T4613] EXT4-fs (loop3): Mount option "nojournal_checksum" incompatible with ext3 [ 55.464009][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 55.465540][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.466845][ T25] usb 1-1: Product: syz [ 55.469141][ T25] usb 1-1: Manufacturer: syz [ 55.469917][ T25] usb 1-1: SerialNumber: syz [ 55.484841][ T25] usb 1-1: config 0 descriptor?? [ 55.541550][ T25] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 55.543401][ T25] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 55.877989][ T4624] sctp: [Deprecated]: syz.1.176 (pid 4624) Use of int in max_burst socket option. [ 55.877989][ T4624] Use struct sctp_assoc_value instead [ 55.881116][ T4624] netlink: 'syz.1.176': attribute type 4 has an invalid length. [ 55.916905][ T4626] udc-core: couldn't find an available UDC or it's busy [ 55.918159][ T4626] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.203908][ T25] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 56.459400][ T4631] sctp: [Deprecated]: syz.1.190 (pid 4631) Use of int in max_burst socket option. [ 56.459400][ T4631] Use struct sctp_assoc_value instead [ 56.490530][ T4639] udc-core: couldn't find an available UDC or it's busy [ 56.491693][ T4639] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.543005][ T4643] udc-core: couldn't find an available UDC or it's busy [ 56.547663][ T4643] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.645407][ T4656] udc-core: couldn't find an available UDC or it's busy [ 56.646500][ T4656] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 56.923881][ T25] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 56.925583][ T25] em28xx 1-1:0.0: board has no eeprom [ 57.033841][ T25] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 57.035134][ T25] em28xx 1-1:0.0: dvb set to bulk mode. [ 57.036591][ T4053] em28xx 1-1:0.0: Binding DVB extension [ 57.116847][ T25] usb 1-1: USB disconnect, device number 7 [ 57.118739][ T25] em28xx 1-1:0.0: Disconnecting em28xx [ 57.131680][ T4053] em28xx 1-1:0.0: Registering input extension [ 57.132937][ T25] em28xx 1-1:0.0: Closing input extension [ 57.139434][ T25] em28xx 1-1:0.0: Freeing device [ 58.017104][ T4674] udc-core: couldn't find an available UDC or it's busy [ 58.022708][ T4051] Bluetooth: unknown link type 132 [ 58.026700][ T4674] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.059819][ T4680] sctp: [Deprecated]: syz.2.196 (pid 4680) Use of int in max_burst socket option. [ 58.059819][ T4680] Use struct sctp_assoc_value instead [ 58.125591][ T4684] udc-core: couldn't find an available UDC or it's busy [ 58.126801][ T4684] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 58.238976][ T4686] device syzkaller1 entered promiscuous mode [ 58.882736][ T4701] device syzkaller1 entered promiscuous mode [ 58.917345][ T4705] sctp: [Deprecated]: syz.3.212 (pid 4705) Use of int in max_burst socket option. [ 58.917345][ T4705] Use struct sctp_assoc_value instead [ 58.969252][ T4711] udc-core: couldn't find an available UDC or it's busy [ 58.970538][ T4711] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.128795][ T4729] sctp: [Deprecated]: syz.2.224 (pid 4729) Use of int in max_burst socket option. [ 59.128795][ T4729] Use struct sctp_assoc_value instead [ 59.149152][ T4731] udc-core: couldn't find an available UDC or it's busy [ 59.150666][ T4731] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.508693][ T4738] udc-core: couldn't find an available UDC or it's busy [ 59.509970][ T4738] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.593634][ T4743] udc-core: couldn't find an available UDC or it's busy [ 59.597627][ T4743] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 59.702181][ T4745] binder: 4744:4745 unknown command 1074553619 [ 59.704216][ T4745] binder: 4744:4745 ioctl c0306201 20000040 returned -22 [ 59.714542][ T4745] binder: 4744:4745 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.717577][ T4745] binder: 4745 RLIMIT_NICE not set [ 59.837116][ T4746] binder: 4744:4746 unknown command 1074553620 [ 59.843863][ T4746] binder: 4744:4746 ioctl c0306201 20000640 returned -22 [ 60.009354][ T4752] udc-core: couldn't find an available UDC or it's busy [ 60.010574][ T4752] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.034387][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 60.039196][ T4754] sctp: [Deprecated]: syz.1.235 (pid 4754) Use of int in max_burst socket option. [ 60.039196][ T4754] Use struct sctp_assoc_value instead [ 60.056914][ T4756] udc-core: couldn't find an available UDC or it's busy [ 60.058063][ T4756] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.199320][ T4763] device syzkaller1 entered promiscuous mode [ 60.590533][ T4770] udc-core: couldn't find an available UDC or it's busy [ 60.591892][ T4770] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.603528][ T4772] udc-core: couldn't find an available UDC or it's busy [ 60.608732][ T4772] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.611933][ T4772] udc-core: couldn't find an available UDC or it's busy [ 60.612986][ T4772] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 60.994333][ T4780] sctp: [Deprecated]: syz.1.246 (pid 4780) Use of int in max_burst socket option. [ 60.994333][ T4780] Use struct sctp_assoc_value instead [ 61.051023][ T4784] udc-core: couldn't find an available UDC or it's busy [ 61.052206][ T4784] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 61.144201][ T4102] Bluetooth: hci4: command 0x0405 tx timeout [ 61.149945][ T4795] netlink: 32 bytes leftover after parsing attributes in process `syz.2.254'. [ 61.282088][ T4806] sctp: [Deprecated]: syz.3.259 (pid 4806) Use of int in max_burst socket option. [ 61.282088][ T4806] Use struct sctp_assoc_value instead [ 61.350086][ T4810] netlink: 'syz.3.259': attribute type 4 has an invalid length. [ 61.390215][ T4812] device syzkaller1 entered promiscuous mode [ 61.727053][ T4822] udc-core: couldn't find an available UDC or it's busy [ 61.728176][ T4822] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.084133][ T4841] sctp: [Deprecated]: syz.2.271 (pid 4841) Use of int in max_burst socket option. [ 62.084133][ T4841] Use struct sctp_assoc_value instead [ 62.087104][ T4841] netlink: 'syz.2.271': attribute type 4 has an invalid length. [ 62.259888][ T4862] netlink: 'syz.0.281': attribute type 1 has an invalid length. [ 62.261130][ T4862] netlink: 'syz.0.281': attribute type 4 has an invalid length. [ 62.262281][ T4862] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.281'. [ 62.322278][ T4870] sctp: [Deprecated]: syz.0.284 (pid 4870) Use of int in max_burst socket option. [ 62.322278][ T4870] Use struct sctp_assoc_value instead [ 62.327552][ T4868] udc-core: couldn't find an available UDC or it's busy [ 62.334587][ T4868] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.336907][ T4870] netlink: 'syz.0.284': attribute type 4 has an invalid length. [ 62.339507][ T4051] Bluetooth: hci4: Unknown advertising packet type: 0x3476 [ 62.339564][ T4051] ================================================================== [ 62.342398][ T4051] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xcd0/0x3010 [ 62.343739][ T4051] Read of size 1 at addr ffff0000d17a6c01 by task kworker/u5:3/4051 [ 62.344992][ T4051] [ 62.345335][ T4051] CPU: 0 PID: 4051 Comm: kworker/u5:3 Not tainted 5.15.189-syzkaller #0 [ 62.346734][ T4051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 62.348198][ T4051] Workqueue: hci4 hci_rx_work [ 62.348974][ T4051] Call trace: [ 62.349517][ T4051] dump_backtrace+0x0/0x43c [ 62.350178][ T4051] show_stack+0x2c/0x3c [ 62.350786][ T4051] __dump_stack+0x30/0x40 [ 62.351539][ T4051] dump_stack_lvl+0xf8/0x160 [ 62.352259][ T4051] print_address_description+0x78/0x30c [ 62.353145][ T4051] kasan_report+0xec/0x15c [ 62.353818][ T4051] __asan_report_load1_noabort+0x44/0x50 [ 62.354676][ T4051] hci_le_meta_evt+0xcd0/0x3010 [ 62.355388][ T4051] hci_event_packet+0xd10/0x11bc [ 62.356183][ T4051] hci_rx_work+0x1cc/0x880 [ 62.356871][ T4051] process_one_work+0x79c/0x1140 [ 62.357648][ T4051] worker_thread+0x8f4/0x101c [ 62.358417][ T4051] kthread+0x374/0x454 [ 62.359013][ T4051] ret_from_fork+0x10/0x20 [ 62.359732][ T4051] [ 62.360100][ T4051] Allocated by task 4872: [ 62.360838][ T4051] __kasan_kmalloc+0xb0/0xf0 [ 62.361585][ T4051] __kmalloc_node_track_caller+0x234/0x3bc [ 62.362441][ T4051] kmalloc_reserve+0xe4/0x26c [ 62.363159][ T4051] __alloc_skb+0x23c/0x67c [ 62.363888][ T4051] vhci_write+0xb8/0x3ac [ 62.364550][ T4051] vfs_write+0x7c8/0xa2c [ 62.365312][ T4051] ksys_write+0x120/0x210 [ 62.365933][ T4051] __arm64_sys_write+0x7c/0x90 [ 62.366634][ T4051] invoke_syscall+0x98/0x2b8 [ 62.367287][ T4051] el0_svc_common+0x138/0x258 [ 62.367940][ T4051] do_el0_svc+0x58/0x14c [ 62.368643][ T4051] el0_svc+0x78/0x1e0 [ 62.369296][ T4051] el0t_64_sync_handler+0xcc/0xe4 [ 62.370035][ T4051] el0t_64_sync+0x1a0/0x1a4 [ 62.370717][ T4051] [ 62.371032][ T4051] The buggy address belongs to the object at ffff0000d17a6800 [ 62.371032][ T4051] which belongs to the cache kmalloc-1k of size 1024 [ 62.373114][ T4051] The buggy address is located 1 bytes to the right of [ 62.373114][ T4051] 1024-byte region [ffff0000d17a6800, ffff0000d17a6c00) [ 62.375261][ T4051] The buggy address belongs to the page: [ 62.376134][ T4051] page:000000009fb79ef9 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1117a0 [ 62.377733][ T4051] head:000000009fb79ef9 order:3 compound_mapcount:0 compound_pincount:0 [ 62.379001][ T4051] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 62.380273][ T4051] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002780 [ 62.381533][ T4051] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 62.382856][ T4051] page dumped because: kasan: bad access detected [ 62.383843][ T4051] [ 62.384218][ T4051] Memory state around the buggy address: [ 62.385140][ T4051] ffff0000d17a6b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.386421][ T4051] ffff0000d17a6b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.387693][ T4051] >ffff0000d17a6c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.388992][ T4051] ^ [ 62.389579][ T4051] ffff0000d17a6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.390855][ T4051] ffff0000d17a6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.392084][ T4051] ================================================================== [ 62.393297][ T4051] Disabling lock debugging due to kernel taint [ 69.624265][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.628554][ T1540] cfg80211: failed to load regulatory.db