last executing test programs: 4.316773149s ago: executing program 3 (id=610): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4605, &(0x7f0000000040)) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) getsockopt$inet_mptcp_buf(r0, 0x29, 0x4, 0x0, 0x0) 3.384313151s ago: executing program 3 (id=618): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 3.232326784s ago: executing program 2 (id=621): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20) sendmmsg$inet6(r2, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) 2.434843923s ago: executing program 2 (id=622): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 2.349074035s ago: executing program 0 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00), 0x0) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 2.348731585s ago: executing program 2 (id=624): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000700)=""/217, 0x205}, {&(0x7f0000000840)=""/124, 0x7c}, {&(0x7f00000008c0)=""/150, 0x96}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x4}], 0x2, 0x60, 0x0) 2.300943116s ago: executing program 1 (id=625): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[], 0x54}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000180)={'veth1_macvtap\x00', 0x44}) 2.284043017s ago: executing program 3 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 2.242008547s ago: executing program 0 (id=627): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.237399578s ago: executing program 2 (id=628): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r2 = fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4605, &(0x7f0000000040)) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) getsockopt$inet_mptcp_buf(r0, 0x29, 0x4, 0x0, 0x0) 2.103329341s ago: executing program 1 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00), 0x0) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 2.097267831s ago: executing program 3 (id=630): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000002, 0x3a, 'Ui\xe7\xc7\x10\xd8t*Y\xed{ot\x1b\x1a\xde*\xb0d.', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x43, 0x50, 0x43]}, 0x4d) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) 2.064047182s ago: executing program 1 (id=632): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x4004415) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 2.027126213s ago: executing program 4 (id=633): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x7, 0xee01}, {0x2, 0x3}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x7}}, 0x4c, 0x3) 1.993950284s ago: executing program 4 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0', 0x1) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='\n', 0x1) 1.679722191s ago: executing program 4 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 1.655734751s ago: executing program 1 (id=636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x8, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xec, &(0x7f0000001d40)=""/236, 0x40f00}, 0x94) 1.627935362s ago: executing program 1 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00), 0x0) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 1.627536982s ago: executing program 0 (id=638): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000700)=""/217, 0x205}, {&(0x7f0000000840)=""/124, 0x7c}, {&(0x7f00000008c0)=""/150, 0x96}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x4}], 0x2, 0x60, 0x0) 1.613789742s ago: executing program 1 (id=639): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001540)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)={0x2, 0x0, [{0x0, 0x5d, &(0x7f00000025c0)=""/93}, {0xdddd1000, 0xea, &(0x7f0000000400)=""/234}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/182, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="83800377591dd55c"}}) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.603975743s ago: executing program 0 (id=640): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f00000000c0)={[], [{@flag='async'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0x1, 0x585, &(0x7f0000009ec0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) socket$igmp(0x2, 0x3, 0x2) truncate(&(0x7f0000000000)='./file1\x00', 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 1.587808993s ago: executing program 4 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 1.560647044s ago: executing program 4 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x20, 0x0, 0x7fff8000}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) connect$unix(r4, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x15) close_range(r3, 0xffffffffffffffff, 0x0) 410.627861ms ago: executing program 3 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00), 0x0) close(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 102.460328ms ago: executing program 2 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 93.537349ms ago: executing program 0 (id=645): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0', 0x1) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(0xffffffffffffffff, &(0x7f00000004c0)='\n', 0x1) 90.829758ms ago: executing program 3 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 19.31358ms ago: executing program 4 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 8.949571ms ago: executing program 0 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) 0s ago: executing program 2 (id=649): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 29.728458][ T4316] cgroup: Unknown subsys name 'net' [ 29.952882][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.208821][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.852744][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.856858][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.858388][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.859923][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.868200][ T4333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.870084][ T4333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.871613][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.881471][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.883048][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.884469][ T4337] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.886184][ T4341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.887561][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.888977][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.889889][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.890410][ T4341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.892468][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.894910][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.896323][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.897427][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.899424][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.900850][ T4344] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.902266][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.911636][ T4344] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.913605][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.915348][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.916724][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.918444][ T4344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.920993][ T4329] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.922493][ T4329] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.923917][ T4329] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.031336][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 31.051846][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 31.074293][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 31.079222][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 31.097220][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.098535][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.101959][ T4328] device bridge_slave_0 entered promiscuous mode [ 31.105697][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.106836][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.108506][ T4328] device bridge_slave_1 entered promiscuous mode [ 31.130064][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.135836][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.137164][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.138771][ T4336] device bridge_slave_0 entered promiscuous mode [ 31.147203][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.150115][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.151977][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.153572][ T4336] device bridge_slave_1 entered promiscuous mode [ 31.155149][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.156522][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.158090][ T4335] device bridge_slave_0 entered promiscuous mode [ 31.166585][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.167807][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.169375][ T4335] device bridge_slave_1 entered promiscuous mode [ 31.175757][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 31.182426][ T4328] team0: Port device team_slave_0 added [ 31.187644][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.188877][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.190552][ T4332] device bridge_slave_0 entered promiscuous mode [ 31.197969][ T4328] team0: Port device team_slave_1 added [ 31.202670][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.207786][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.209474][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.211330][ T4332] device bridge_slave_1 entered promiscuous mode [ 31.213894][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.217722][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.223927][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.241181][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.242497][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.244173][ T4340] device bridge_slave_0 entered promiscuous mode [ 31.248513][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.249767][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.254892][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.257938][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.265243][ T4336] team0: Port device team_slave_0 added [ 31.267027][ T4336] team0: Port device team_slave_1 added [ 31.271866][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.273115][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.274584][ T4340] device bridge_slave_1 entered promiscuous mode [ 31.276433][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.277696][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.285153][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.287831][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.290783][ T4335] team0: Port device team_slave_0 added [ 31.292114][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.293300][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.297973][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.308868][ T4335] team0: Port device team_slave_1 added [ 31.312349][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.313593][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.317891][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.323300][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.326044][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.332570][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.333782][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.337992][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.343246][ T4332] team0: Port device team_slave_0 added [ 31.345831][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.347018][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.354184][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.361591][ T4332] team0: Port device team_slave_1 added [ 31.365861][ T4340] team0: Port device team_slave_0 added [ 31.374908][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.376093][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.380110][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.382910][ T4340] team0: Port device team_slave_1 added [ 31.421382][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.470392][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.519850][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.521157][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.525979][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.591252][ T4336] device hsr_slave_0 entered promiscuous mode [ 31.640502][ T4336] device hsr_slave_1 entered promiscuous mode [ 31.690566][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.691951][ T4336] Cannot create hsr debugfs directory [ 31.693186][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.694495][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.698809][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.705940][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.707115][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.711474][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.763689][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.800498][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.840350][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.841677][ T4335] Cannot create hsr debugfs directory [ 31.891352][ T4332] device hsr_slave_0 entered promiscuous mode [ 31.940469][ T4332] device hsr_slave_1 entered promiscuous mode [ 31.980363][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.981610][ T4332] Cannot create hsr debugfs directory [ 32.041309][ T4340] device hsr_slave_0 entered promiscuous mode [ 32.080473][ T4340] device hsr_slave_1 entered promiscuous mode [ 32.120365][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.121754][ T4340] Cannot create hsr debugfs directory [ 32.207446][ T4328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.253652][ T4328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.300060][ T4328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.348606][ T4328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.404676][ T4335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.444200][ T4335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.481356][ T4335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.532673][ T4335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.593827][ T4332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.627288][ T4332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.661517][ T4332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.694931][ T4332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.749203][ T4336] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.791487][ T4336] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.855968][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.857668][ T4336] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.894699][ T4336] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.957994][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.967320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.969586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.970606][ T4329] Bluetooth: hci2: command 0x0409 tx timeout [ 32.971953][ T4329] Bluetooth: hci4: command 0x0409 tx timeout [ 32.972945][ T4329] Bluetooth: hci0: command 0x0409 tx timeout [ 32.973949][ T4329] Bluetooth: hci3: command 0x0409 tx timeout [ 32.974544][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.974996][ T4329] Bluetooth: hci1: command 0x0409 tx timeout [ 32.977161][ T4340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.014057][ T4340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.061820][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.063415][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.068853][ T4340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.101576][ T4340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.142763][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.144760][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.146414][ T832] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.147768][ T832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.149469][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.151422][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.153032][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.154338][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.155898][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.157698][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.166141][ T4335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.167798][ T4335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.173450][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.175317][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.177425][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.179130][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.181821][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.183545][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.185164][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.187223][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.188838][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.190866][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.192414][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.197769][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.210168][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.212504][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.214079][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.215352][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.216938][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.233022][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.234652][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.236790][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.238021][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.254191][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.256237][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.267048][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.273592][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.275871][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.277521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.292014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.293779][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.303931][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.306971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.308934][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.312381][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.314039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.315552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.316970][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.318404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.319732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.323929][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.333400][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.335102][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.337117][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.338731][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.340346][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.341583][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.343339][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.345044][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.346597][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.347882][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.349360][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.354630][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.366373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.368275][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.370009][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.384662][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.386285][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.395263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.397298][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.399034][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.401834][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.403449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.404954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.407262][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.411915][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.417728][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.419540][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.421786][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.423084][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.424626][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.431082][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.432747][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.434332][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.436125][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.437605][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.438998][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.442479][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.445127][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.448163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.449868][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.451971][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.453215][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.456731][ T4335] device veth0_vlan entered promiscuous mode [ 33.474258][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.476147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.477614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.484140][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.486047][ T4335] device veth1_vlan entered promiscuous mode [ 33.487668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.489196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.493527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.495933][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.498098][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.499817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.502620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.506863][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.508182][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.518204][ T4340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.519893][ T4340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.527220][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.529565][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.532173][ T832] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.533422][ T832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.535137][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.536846][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.538414][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.539677][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.543738][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.545561][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.547321][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.548947][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.551580][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.553378][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.554980][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.556584][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.558182][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.559845][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.562885][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.564337][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.565925][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.573770][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.576823][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.578467][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.580128][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.584382][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.586615][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.593182][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.596389][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.598087][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.599729][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.602948][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.617028][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.618902][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.625111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.626986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.628648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.637979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.642051][ T4335] device veth0_macvtap entered promiscuous mode [ 33.648363][ T4335] device veth1_macvtap entered promiscuous mode [ 33.668847][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.670677][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.672210][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.673872][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.675712][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.677202][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.680125][ T4328] device veth0_vlan entered promiscuous mode [ 33.683179][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.684870][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.686739][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.688217][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.689972][ T4332] device veth0_vlan entered promiscuous mode [ 33.708713][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.712814][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.714642][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.716214][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.717541][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.720425][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.726902][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.728592][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.732580][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.734680][ T4328] device veth1_vlan entered promiscuous mode [ 33.737310][ T4332] device veth1_vlan entered promiscuous mode [ 33.742706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.744370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.745846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.747235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.749666][ T4335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.751789][ T4335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.753318][ T4335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.754834][ T4335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.765526][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.767240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.768943][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.777073][ T4332] device veth0_macvtap entered promiscuous mode [ 33.779969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.782163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.783811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.785405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.788364][ T4328] device veth0_macvtap entered promiscuous mode [ 33.791839][ T4328] device veth1_macvtap entered promiscuous mode [ 33.796246][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.804384][ T4332] device veth1_macvtap entered promiscuous mode [ 33.815695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.817404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.818796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.821509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.823263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.829669][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.832626][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.834985][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.837231][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.839070][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.841135][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.842904][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.845232][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.847104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.849513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.854305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.856141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.867615][ T4336] device veth0_vlan entered promiscuous mode [ 33.870929][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.872669][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.874882][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.877282][ T4332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.878735][ T4332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.881156][ T4332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.882589][ T4332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.884981][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.886639][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.888162][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.889745][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.891949][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.893530][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.896442][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.898191][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.899781][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.904587][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.907395][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.911203][ T4328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.912812][ T4328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.914484][ T4328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.915990][ T4328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.918649][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.920945][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.925577][ T4336] device veth1_vlan entered promiscuous mode [ 33.947723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.949477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.952421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.954084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.987041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.988809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.996205][ T832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.997498][ T832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.999809][ T4336] device veth0_macvtap entered promiscuous mode [ 34.003148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.004766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.006513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.008192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.009832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.012836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.015898][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.017242][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.022400][ T4340] device veth0_vlan entered promiscuous mode [ 34.024202][ T4336] device veth1_macvtap entered promiscuous mode [ 34.025698][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.027339][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.048322][ T4340] device veth1_vlan entered promiscuous mode [ 34.055503][ T832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.056932][ T832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.058260][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.059916][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.062953][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.065319][ T832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.066763][ T832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.068317][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.068571][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.072746][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.074140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.088630][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.091483][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.093276][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.095001][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.096588][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.098306][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.105178][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.111367][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.113133][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.115950][ T832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.117399][ T832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.118846][ T832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.126568][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.128442][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.140749][ T4340] device veth0_macvtap entered promiscuous mode [ 34.143201][ T4340] device veth1_macvtap entered promiscuous mode [ 34.147566][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.149381][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.157635][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.159247][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.172671][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.174403][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.176075][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.177742][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.191911][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.196412][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.198069][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.199519][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.204922][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.208547][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.213859][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.215622][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.219795][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.227401][ T4419] syz.2.6 sent an empty control message without MSG_MORE. [ 34.236895][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.239398][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.242129][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.243524][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.256657][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.263048][ T4417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.264844][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.267826][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.273434][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.274867][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.374491][ T4336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.376100][ T4336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.377688][ T4336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.379101][ T4336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.470610][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.472506][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.474261][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.476120][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.477830][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.479541][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.489712][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.505138][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.507036][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.516123][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.517708][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.519425][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.525101][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.567119][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.568563][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.574715][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.623139][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.624622][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.633308][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.646238][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.647652][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.649427][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.676040][ T4433] binder: 4432:4433 unknown command 1074553619 [ 34.677243][ T4433] binder: 4432:4433 ioctl c0306201 20000040 returned -22 [ 34.678821][ T4433] binder: 4432:4433 unknown command 1074553620 [ 34.679886][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.679900][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.680049][ T90] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.686081][ T4433] binder: 4432:4433 ioctl c0306201 20000640 returned -22 [ 34.688105][ T4433] binder: 4432:4433 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 34.719366][ T4433] binder: 4433 RLIMIT_NICE not set [ 34.726377][ T4433] binder: 4432:4433 ioctl c0306201 200001c0 returned -11 [ 34.776838][ T4441] loop4: detected capacity change from 0 to 256 [ 34.847339][ T4444] loop0: detected capacity change from 0 to 256 [ 35.266501][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 35.268138][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 35.269916][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 35.271791][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 35.273349][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 35.765533][ T4447] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 35.766626][ T4447] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 35.822015][ T4447] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 35.823421][ T4447] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 35.824486][ T4447] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 35.833781][ T4447] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 35.835174][ T4447] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 35.836177][ T4447] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 35.868813][ T4447] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 35.870331][ T4447] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 35.871385][ T4447] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 35.876701][ T4447] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 35.877934][ T4447] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 35.879013][ T4447] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 35.882525][ T4447] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 35.902664][ T4329] Bluetooth: hci0: unexpected event for opcode 0x0c0d [ 37.028916][ T4483] Zero length message leads to an empty skb [ 37.870429][ T4329] Bluetooth: hci2: command 0x0419 tx timeout [ 37.872070][ T4329] Bluetooth: hci1: command 0x0419 tx timeout [ 37.940233][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 37.941545][ T4329] Bluetooth: hci3: command 0x0419 tx timeout [ 39.765999][ T4539] loop3: detected capacity change from 0 to 256 [ 39.784283][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 39.829346][ T4543] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 39.993418][ T4329] Bluetooth: hci1: command 0x0c1a tx timeout [ 39.994500][ T4329] Bluetooth: hci2: command 0x0c1a tx timeout [ 40.131149][ T4333] Bluetooth: hci3: command 0x0c1a tx timeout [ 40.132203][ T4333] Bluetooth: hci4: command 0x0c1a tx timeout [ 40.292296][ T4513] Set syz1 is full, maxelem 65536 reached [ 40.398044][ T4561] loop2: detected capacity change from 0 to 512 [ 40.863960][ T4561] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.874739][ T4561] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 41.025329][ T4335] EXT4-fs (loop2): unmounting filesystem. [ 41.219515][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 42.030677][ T4329] Bluetooth: hci2: command 0x0406 tx timeout [ 42.032083][ T4329] Bluetooth: hci1: command 0x0406 tx timeout [ 42.170324][ T4333] Bluetooth: hci4: command 0x0406 tx timeout [ 42.171402][ T4333] Bluetooth: hci3: command 0x0406 tx timeout [ 42.184426][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 42.217102][ T4599] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 42.582307][ T4610] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 43.294021][ T4604] Set syz1 is full, maxelem 65536 reached [ 43.378697][ T4622] syz.3.74 uses obsolete (PF_INET,SOCK_PACKET) [ 43.468495][ T4626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 43.554521][ T4630] loop4: detected capacity change from 0 to 512 [ 43.695001][ T4630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.706020][ T4630] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 43.765326][ T4643] gadgetfs: bound to dummy_udc driver [ 43.813836][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 43.827018][ T4649] loop3: detected capacity change from 0 to 512 [ 43.829234][ T4647] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 43.854573][ T4649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.857693][ T4649] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 43.887558][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 44.277668][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 45.221585][ T4684] se_dev->se_dev_ptr already set for storage object [ 45.229265][ T4683] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 45.243009][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 45.744818][ T4706] se_dev->se_dev_ptr already set for storage object [ 45.753010][ T4710] se_dev->se_dev_ptr already set for storage object [ 47.577221][ T4726] loop4: detected capacity change from 0 to 512 [ 47.641806][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 47.677020][ T4726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.564885][ T4735] sched: RT throttling activated [ 49.015386][ T4757] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 49.050172][ T4762] se_dev->se_dev_ptr already set for storage object [ 49.060514][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 49.082770][ T4764] se_dev->se_dev_ptr already set for storage object [ 49.113647][ T4321] udevd[4321]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 49.115499][ T4321] udevd[4321]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 49.159813][ T4765] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 52.513649][ T4874] netlink: 'syz.2.166': attribute type 10 has an invalid length. [ 52.522614][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.524058][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.562432][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.563851][ T4874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.565728][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.567044][ T4874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.569947][ T4874] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 52.668608][ T4885] se_dev->se_dev_ptr already set for storage object [ 52.757712][ T4894] se_dev->se_dev_ptr already set for storage object [ 53.556653][ T4905] se_dev->se_dev_ptr already set for storage object [ 53.558303][ T4904] se_dev->se_dev_ptr already set for storage object [ 53.639409][ T4909] se_dev->se_dev_ptr already set for storage object [ 53.664176][ T4911] se_dev->se_dev_ptr already set for storage object [ 53.766613][ T4915] se_dev->se_dev_ptr already set for storage object [ 54.866755][ T4940] se_dev->se_dev_ptr already set for storage object [ 54.911341][ T4944] se_dev->se_dev_ptr already set for storage object [ 54.914074][ T4946] se_dev->se_dev_ptr already set for storage object [ 54.945639][ T4948] se_dev->se_dev_ptr already set for storage object [ 55.199092][ T4964] device syzkaller0 entered promiscuous mode [ 55.882589][ T4954] Set syz1 is full, maxelem 65536 reached [ 56.085263][ T4976] se_dev->se_dev_ptr already set for storage object [ 56.119037][ T4978] se_dev->se_dev_ptr already set for storage object [ 56.156782][ T4982] se_dev->se_dev_ptr already set for storage object [ 57.856348][ T4999] binder: 4998:4999 unknown command 1074553619 [ 57.857551][ T4999] binder: 4998:4999 ioctl c0306201 20000040 returned -22 [ 58.286635][ T5013] se_dev->se_dev_ptr already set for storage object [ 58.332527][ T5017] se_dev->se_dev_ptr already set for storage object [ 64.492751][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493980][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.337914][ T4968] netlink: 'syz.1.202': attribute type 4 has an invalid length. [ 67.375014][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 67.480365][ T5041] se_dev->se_dev_ptr already set for storage object [ 67.897477][ T5054] bridge0: port 3(syz_tun) entered blocking state [ 67.899997][ T5054] bridge0: port 3(syz_tun) entered disabled state [ 67.907334][ T5054] device syz_tun entered promiscuous mode [ 67.911804][ T5054] bridge0: port 3(syz_tun) entered blocking state [ 67.913016][ T5054] bridge0: port 3(syz_tun) entered forwarding state [ 67.932185][ T5056] netlink: 'syz.3.236': attribute type 4 has an invalid length. [ 67.999433][ T5060] device syzkaller0 entered promiscuous mode [ 68.264758][ T5073] se_dev->se_dev_ptr already set for storage object [ 68.590631][ T5092] device syzkaller0 entered promiscuous mode [ 68.673925][ T5101] se_dev->se_dev_ptr already set for storage object [ 69.345054][ T5122] binder: 5121:5122 unknown command 1074553619 [ 69.346330][ T5122] binder: 5121:5122 ioctl c0306201 20000040 returned -22 [ 69.406142][ T5128] bridge0: port 3(syz_tun) entered blocking state [ 69.407649][ T5128] bridge0: port 3(syz_tun) entered disabled state [ 69.413679][ T5128] device syz_tun entered promiscuous mode [ 69.415454][ T5128] bridge0: port 3(syz_tun) entered blocking state [ 69.416711][ T5128] bridge0: port 3(syz_tun) entered forwarding state [ 69.423993][ T5130] device syzkaller0 entered promiscuous mode [ 69.607115][ T5140] netlink: 'syz.3.275': attribute type 4 has an invalid length. [ 69.611315][ T24] cfg80211: failed to load regulatory.db [ 70.586560][ T5153] binder: 5152:5153 unknown command 1074553619 [ 70.587710][ T5153] binder: 5152:5153 ioctl c0306201 20000040 returned -22 [ 70.836001][ T5157] se_dev->se_dev_ptr already set for storage object [ 70.869620][ T5159] se_dev->se_dev_ptr already set for storage object [ 70.960027][ T5163] se_dev->se_dev_ptr already set for storage object [ 71.324196][ T5169] se_dev->se_dev_ptr already set for storage object [ 71.353315][ T5179] se_dev->se_dev_ptr already set for storage object [ 71.363104][ T5176] netlink: 'syz.1.287': attribute type 4 has an invalid length. [ 71.431607][ T5184] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 71.566049][ T5195] se_dev->se_dev_ptr already set for storage object [ 72.416601][ T5206] se_dev->se_dev_ptr already set for storage object [ 72.540172][ T5211] se_dev->se_dev_ptr already set for storage object [ 72.613527][ T5214] netlink: 'syz.1.302': attribute type 4 has an invalid length. [ 72.627411][ T5216] se_dev->se_dev_ptr already set for storage object [ 72.754390][ T5230] device syz_tun left promiscuous mode [ 72.755718][ T5230] bridge0: port 3(syz_tun) entered disabled state [ 72.756012][ T5226] se_dev->se_dev_ptr already set for storage object [ 73.112846][ T5230] bond0: (slave bridge0): Releasing backup interface [ 73.182833][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.184211][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.190541][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.192700][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.194136][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.196243][ T5230] device bridge_slave_0 left promiscuous mode [ 73.197399][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.522839][ T5230] device bridge_slave_1 left promiscuous mode [ 74.000483][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.031862][ T5246] se_dev->se_dev_ptr already set for storage object [ 74.064541][ T5230] bond0: (slave bond_slave_0): Releasing backup interface [ 74.182177][ T5230] bond0: (slave bond_slave_1): Releasing backup interface [ 74.287554][ T5230] team0: Port device team_slave_0 removed [ 74.312657][ T5230] team0: Port device team_slave_1 removed [ 74.317414][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.319185][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.323798][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.325240][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.331088][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.332844][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.410283][ T5255] se_dev->se_dev_ptr already set for storage object [ 74.536597][ T5264] netlink: 'syz.2.317': attribute type 4 has an invalid length. [ 74.575306][ T5267] se_dev->se_dev_ptr already set for storage object [ 75.899387][ T5280] se_dev->se_dev_ptr already set for storage object [ 75.942719][ T5287] se_dev->se_dev_ptr already set for storage object [ 76.020163][ T5282] se_dev->se_dev_ptr already set for storage object [ 76.923997][ T5305] se_dev->se_dev_ptr already set for storage object [ 78.494744][ T5325] se_dev->se_dev_ptr already set for storage object [ 78.602641][ T5331] se_dev->se_dev_ptr already set for storage object [ 78.607157][ T5333] se_dev->se_dev_ptr already set for storage object [ 78.634608][ T5335] netlink: 'syz.4.342': attribute type 4 has an invalid length. [ 78.677001][ T5339] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 79.660443][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 80.327625][ T5362] se_dev->se_dev_ptr already set for storage object [ 80.333386][ T5368] se_dev->se_dev_ptr already set for storage object [ 80.390722][ T5372] netlink: 'syz.2.357': attribute type 4 has an invalid length. [ 80.430447][ T5380] se_dev->se_dev_ptr already set for storage object [ 80.437580][ T5378] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 80.458624][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 80.916194][ T5397] se_dev->se_dev_ptr already set for storage object [ 80.973136][ T5400] se_dev->se_dev_ptr already set for storage object [ 81.034214][ T5408] netlink: 'syz.2.370': attribute type 4 has an invalid length. [ 81.489332][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 81.748485][ T5430] se_dev->se_dev_ptr already set for storage object [ 81.789404][ T5434] se_dev->se_dev_ptr already set for storage object [ 81.817778][ T5436] netlink: 'syz.1.383': attribute type 4 has an invalid length. [ 81.823598][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 81.879183][ T5446] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 82.266556][ T5451] device syzkaller0 entered promiscuous mode [ 82.333849][ T5455] se_dev->se_dev_ptr already set for storage object [ 82.407766][ T5465] se_dev->se_dev_ptr already set for storage object [ 83.354511][ T5484] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 83.382737][ T5486] se_dev->se_dev_ptr already set for storage object [ 83.476715][ T5496] se_dev->se_dev_ptr already set for storage object [ 93.630855][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'. [ 93.635723][ T5472] netlink: 'syz.0.397': attribute type 4 has an invalid length. [ 93.678649][ T5507] se_dev->se_dev_ptr already set for storage object [ 93.730935][ T5513] se_dev->se_dev_ptr already set for storage object [ 93.809134][ T5524] se_dev->se_dev_ptr already set for storage object [ 93.834288][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 94.138099][ T5536] se_dev->se_dev_ptr already set for storage object [ 94.187075][ T5540] netlink: 'syz.4.425': attribute type 4 has an invalid length. [ 94.663504][ T5567] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 95.131817][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 95.137264][ T5573] se_dev->se_dev_ptr already set for storage object [ 95.138973][ T5575] se_dev->se_dev_ptr already set for storage object [ 95.428867][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 95.720973][ T5607] se_dev->se_dev_ptr already set for storage object [ 95.785256][ T5615] se_dev->se_dev_ptr already set for storage object [ 95.912203][ T5625] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 95.993906][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 96.455892][ T5640] se_dev->se_dev_ptr already set for storage object [ 96.489175][ T5642] se_dev->se_dev_ptr already set for storage object [ 96.521065][ T5646] se_dev->se_dev_ptr already set for storage object [ 97.058908][ T5671] se_dev->se_dev_ptr already set for storage object [ 97.062192][ T5673] se_dev->se_dev_ptr already set for storage object [ 97.084167][ T5676] se_dev->se_dev_ptr already set for storage object [ 97.182539][ T5689] se_dev->se_dev_ptr already set for storage object [ 97.689886][ T5702] se_dev->se_dev_ptr already set for storage object [ 97.727733][ T5705] se_dev->se_dev_ptr already set for storage object [ 97.729434][ T5707] se_dev->se_dev_ptr already set for storage object [ 98.202014][ T5718] se_dev->se_dev_ptr already set for storage object [ 98.407396][ T5734] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 98.480868][ T5740] se_dev->se_dev_ptr already set for storage object [ 98.505887][ T5742] se_dev->se_dev_ptr already set for storage object [ 98.565236][ T5750] se_dev->se_dev_ptr already set for storage object [ 98.713718][ T5770] se_dev->se_dev_ptr already set for storage object [ 99.436532][ T5782] se_dev->se_dev_ptr already set for storage object [ 99.560835][ T5800] se_dev->se_dev_ptr already set for storage object [ 99.598588][ T5807] se_dev->se_dev_ptr already set for storage object [ 99.611378][ T5804] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 99.630532][ T5808] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 99.808012][ T5830] se_dev->se_dev_ptr already set for storage object [ 99.822160][ T5834] se_dev->se_dev_ptr already set for storage object [ 100.178094][ T5845] netlink: 32 bytes leftover after parsing attributes in process `syz.0.555'. [ 100.249938][ T5859] file system registered [ 100.292412][ T5865] se_dev->se_dev_ptr already set for storage object [ 100.449518][ T5866] infiniband syz2: set down [ 100.450469][ T5866] infiniband syz2: added ipvlan0 [ 100.761834][ T5866] RDS/IB: syz2: added [ 100.763263][ T5866] smc: adding ib device syz2 with port count 1 [ 100.764724][ T5866] smc: ib device syz2 port 1 has pnetid [ 101.679716][ T5875] se_dev->se_dev_ptr already set for storage object [ 101.756356][ T5885] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 101.764361][ T5882] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 101.804108][ T5891] using random self ethernet address [ 101.805191][ T5891] using random host ethernet address [ 103.411102][ T5907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.412116][ T5907] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.432102][ T5907] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 103.433359][ T5907] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.434657][ T5907] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 103.475895][ T5915] se_dev->se_dev_ptr already set for storage object [ 103.510612][ T5907] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 103.511968][ T5907] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.513433][ T5907] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.517895][ T5907] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 103.519256][ T5907] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.521205][ T5907] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.531109][ T5907] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 103.532488][ T5907] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.533475][ T5907] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 103.534772][ T5907] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 103.739795][ T5924] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 103.757789][ T5928] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 103.971147][ T5910] Set syz1 is full, maxelem 65536 reached [ 104.580104][ T5958] se_dev->se_dev_ptr already set for storage object [ 105.450636][ T4329] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.451723][ T4329] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.508707][ T5976] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 105.530559][ T4333] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.531781][ T4333] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.608307][ T5974] fuse: Bad value for 'fd' [ 105.610549][ T4329] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.630441][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.631695][ T5959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.632702][ T5959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 105.633715][ T5959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.634713][ T5959] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.721218][ T5991] overlayfs: missing 'lowerdir' [ 106.287531][ T5998] vivid-000: kernel_thread() failed [ 106.492367][ T6012] se_dev->se_dev_ptr already set for storage object [ 106.519733][ T6014] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 106.572112][ T6014] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 106.631657][ T6017] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 106.638557][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.622333][ T6023] configfs-gadget.g1 gadget.1: uvc: uvc_function_bind() [ 107.657161][ T6031] se_dev->se_dev_ptr already set for storage object [ 107.700414][ T4329] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.701522][ T4329] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.702501][ T4329] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.703527][ T4329] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.704595][ T4329] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.708519][ T6028] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.709835][ T6028] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.711125][ T6028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.712121][ T6028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.713168][ T6028] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.834578][ T6040] se_dev->se_dev_ptr already set for storage object [ 107.966719][ T6049] se_dev->se_dev_ptr already set for storage object [ 108.067622][ T6060] configfs-gadget.g1 gadget.1: uvc: uvc_function_unbind() [ 108.461800][ T6076] se_dev->se_dev_ptr already set for storage object [ 109.913493][ T6082] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.914845][ T6082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.915877][ T6082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.916980][ T6082] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.918043][ T6082] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.982517][ T6091] se_dev->se_dev_ptr already set for storage object [ 110.054778][ T6095] se_dev->se_dev_ptr already set for storage object [ 110.062707][ T6098] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 110.063959][ T6098] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 110.065219][ T6098] ================================================================== [ 110.066480][ T6098] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x44/0x84 [ 110.067701][ T6098] Read of size 8 at addr ffff0000f4007cf0 by task syz.0.648/6098 [ 110.068908][ T6098] [ 110.069271][ T6098] CPU: 1 PID: 6098 Comm: syz.0.648 Not tainted syzkaller #0 [ 110.070468][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 110.072204][ T6098] Call trace: [ 110.072782][ T6098] dump_backtrace+0x1c4/0x1f0 [ 110.073579][ T6098] show_stack+0x2c/0x3c [ 110.074289][ T6098] __dump_stack+0x30/0x40 [ 110.075027][ T6098] dump_stack_lvl+0xf4/0x15c [ 110.075790][ T6098] print_address_description+0x88/0x218 [ 110.076684][ T6098] print_report+0x50/0x68 [ 110.077439][ T6098] kasan_report+0xa8/0xfc [ 110.078193][ T6098] __asan_report_load8_noabort+0x2c/0x38 [ 110.079144][ T6098] dummy_free_request+0x44/0x84 [ 110.079988][ T6098] usb_ep_free_request+0x138/0x34c [ 110.080830][ T6098] uvc_function_bind+0x8b0/0xfe8 [ 110.081685][ T6098] usb_add_function+0x234/0x7a8 [ 110.082428][ T6098] configfs_composite_bind+0x7e0/0xce4 [ 110.083343][ T6098] gadget_bind_driver+0x26c/0x684 [ 110.084172][ T6098] really_probe+0x3a0/0xac4 [ 110.084913][ T6098] __driver_probe_device+0x1c8/0x368 [ 110.085796][ T6098] driver_probe_device+0x78/0x324 [ 110.086652][ T6098] __driver_attach+0x3bc/0x614 [ 110.087519][ T6098] bus_for_each_dev+0x148/0x1d0 [ 110.088372][ T6098] driver_attach+0x50/0x60 [ 110.089239][ T6098] bus_add_driver+0x2c0/0x518 [ 110.090110][ T6098] driver_register+0x200/0x37c [ 110.091035][ T6098] usb_gadget_register_driver_owner+0xf0/0x25c [ 110.092196][ T6098] gadget_dev_desc_UDC_store+0x168/0x268 [ 110.093226][ T6098] configfs_write_iter+0x260/0x338 [ 110.094119][ T6098] vfs_write+0x3c8/0x7c8 [ 110.094860][ T6098] ksys_write+0x12c/0x228 [ 110.095588][ T6098] __arm64_sys_write+0x7c/0x90 [ 110.096396][ T6098] invoke_syscall+0x98/0x290 [ 110.097196][ T6098] el0_svc_common+0x13c/0x258 [ 110.097994][ T6098] do_el0_svc+0x5c/0x134 [ 110.098717][ T6098] el0_svc+0x58/0x128 [ 110.099393][ T6098] el0t_64_sync_handler+0x84/0xf0 [ 110.100233][ T6098] el0t_64_sync+0x18c/0x190 [ 110.101002][ T6098] [ 110.101378][ T6098] Allocated by task 4328: [ 110.102130][ T6098] kasan_set_track+0x4c/0x80 [ 110.102898][ T6098] kasan_save_alloc_info+0x24/0x30 [ 110.103728][ T6098] __kasan_kmalloc+0xa0/0xb8 [ 110.104619][ T6098] kmalloc_trace+0x7c/0x94 [ 110.105410][ T6098] sctp_inet6addr_event+0x2f8/0x610 [ 110.106334][ T6098] atomic_notifier_call_chain+0x178/0x2a4 [ 110.107516][ T6098] inet6addr_notifier_call_chain+0x30/0x40 [ 110.108740][ T6098] ipv6_add_addr+0xa90/0xd74 [ 110.109664][ T6098] addrconf_add_linklocal+0x23c/0x60c [ 110.110739][ T6098] addrconf_addr_gen+0x3ec/0x500 [ 110.111697][ T6098] addrconf_init_auto_addrs+0x5a8/0x91c [ 110.112713][ T6098] addrconf_notify+0x8cc/0xc98 [ 110.113560][ T6098] raw_notifier_call_chain+0xd8/0x168 [ 110.114497][ T6098] __dev_notify_flags+0x260/0x490 [ 110.115382][ T6098] dev_change_flags+0xd0/0x15c [ 110.116210][ T6098] do_setlink+0x9d0/0x2158 [ 110.116992][ T6098] rtnl_newlink+0x142c/0x1af0 [ 110.117824][ T6098] rtnetlink_rcv_msg+0x694/0xcc4 [ 110.118705][ T6098] netlink_rcv_skb+0x220/0x3ec [ 110.119548][ T6098] rtnetlink_rcv+0x28/0x38 [ 110.120335][ T6098] netlink_unicast+0x5fc/0x80c [ 110.121145][ T6098] netlink_sendmsg+0x6f0/0x9d8 [ 110.121938][ T6098] __sys_sendto+0x324/0x440 [ 110.122678][ T6098] __arm64_sys_sendto+0xe4/0x104 [ 110.123465][ T6098] invoke_syscall+0x98/0x290 [ 110.124226][ T6098] el0_svc_common+0x13c/0x258 [ 110.125040][ T6098] do_el0_svc+0x5c/0x134 [ 110.125760][ T6098] el0_svc+0x58/0x128 [ 110.126450][ T6098] el0t_64_sync_handler+0x84/0xf0 [ 110.127276][ T6098] el0t_64_sync+0x18c/0x190 [ 110.128023][ T6098] [ 110.128404][ T6098] The buggy address belongs to the object at ffff0000f4007c00 [ 110.128404][ T6098] which belongs to the cache kmalloc-128 of size 128 [ 110.130829][ T6098] The buggy address is located 112 bytes to the right of [ 110.130829][ T6098] 128-byte region [ffff0000f4007c00, ffff0000f4007c80) [ 110.133184][ T6098] [ 110.133578][ T6098] The buggy address belongs to the physical page: [ 110.134652][ T6098] page:00000000e7d56655 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x134007 [ 110.136352][ T6098] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 110.137634][ T6098] raw: 05ffc00000000200 dead000000000100 dead000000000122 ffff0000c0002300 [ 110.139057][ T6098] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 110.140459][ T6098] page dumped because: kasan: bad access detected [ 110.141559][ T6098] [ 110.141933][ T6098] Memory state around the buggy address: [ 110.142884][ T6098] ffff0000f4007b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.144259][ T6098] ffff0000f4007c00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 110.145658][ T6098] >ffff0000f4007c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.147071][ T6098] ^ [ 110.148328][ T6098] ffff0000f4007d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.149614][ T6098] ffff0000f4007d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.150907][ T6098] ================================================================== [ 110.153943][ T6098] Disabling lock debugging due to kernel taint [ 110.157322][ T6098] ------------[ cut here ]------------ [ 110.158396][ T6098] WARNING: CPU: 0 PID: 6098 at drivers/usb/gadget/udc/dummy_hcd.c:690 dummy_free_request+0x7c/0x84 [ 110.160443][ T6098] Modules linked in: [ 110.161159][ T6098] CPU: 0 PID: 6098 Comm: syz.0.648 Tainted: G B syzkaller #0 [ 110.162737][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 110.164472][ T6098] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 110.165831][ T6098] pc : dummy_free_request+0x7c/0x84 [ 110.166777][ T6098] lr : dummy_free_request+0x7c/0x84 [ 110.167763][ T6098] sp : ffff8000219374d0 [ 110.168567][ T6098] x29: ffff8000219374d0 x28: ffff0000f5f424a0 x27: 1fffe0001ebe8494 [ 110.170137][ T6098] x26: ffff0000f5f57150 x25: dfff800000000000 x24: 0000000000000003 [ 110.171663][ T6098] x23: dfff800000000000 x22: ffff80001537d160 x21: ffff800013110c00 [ 110.173141][ T6098] x20: ffff0000cff0c068 x19: ffff0000f4007cf0 x18: 1fffe00033e7277e [ 110.174769][ T6098] x17: ffff80001537d000 x16: ffff800011b90540 x15: 0000000040000000 [ 110.176158][ T6098] x14: 0000000000000001 x13: 1ffff00002ff016c x12: 0000000000080000 [ 110.177553][ T6098] x11: 000000000002da07 x10: ffff80002239b000 x9 : ffff80000dcedfc0 [ 110.178913][ T6098] x8 : 000000000002da08 x7 : ffff800011cec160 x6 : ffff80000825ab4c [ 110.180282][ T6098] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008195a38 [ 110.181696][ T6098] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000001 [ 110.183060][ T6098] Call trace: [ 110.183608][ T6098] dummy_free_request+0x7c/0x84 [ 110.184434][ T6098] usb_ep_free_request+0x138/0x34c [ 110.185288][ T6098] uvc_function_bind+0x8b0/0xfe8 [ 110.186151][ T6098] usb_add_function+0x234/0x7a8 [ 110.186982][ T6098] configfs_composite_bind+0x7e0/0xce4 [ 110.187928][ T6098] gadget_bind_driver+0x26c/0x684 [ 110.188785][ T6098] really_probe+0x3a0/0xac4 [ 110.189569][ T6098] __driver_probe_device+0x1c8/0x368 [ 110.190494][ T6098] driver_probe_device+0x78/0x324 [ 110.191365][ T6098] __driver_attach+0x3bc/0x614 [ 110.192199][ T6098] bus_for_each_dev+0x148/0x1d0 [ 110.193191][ T6098] driver_attach+0x50/0x60 [ 110.194091][ T6098] bus_add_driver+0x2c0/0x518 [ 110.194901][ T6098] driver_register+0x200/0x37c [ 110.195766][ T6098] usb_gadget_register_driver_owner+0xf0/0x25c [ 110.196842][ T6098] gadget_dev_desc_UDC_store+0x168/0x268 [ 110.197821][ T6098] configfs_write_iter+0x260/0x338 [ 110.198686][ T6098] vfs_write+0x3c8/0x7c8 [ 110.199411][ T6098] ksys_write+0x12c/0x228 [ 110.200131][ T6098] __arm64_sys_write+0x7c/0x90 [ 110.200922][ T6098] invoke_syscall+0x98/0x290 [ 110.201695][ T6098] el0_svc_common+0x13c/0x258 [ 110.202489][ T6098] do_el0_svc+0x5c/0x134 [ 110.203185][ T6098] el0_svc+0x58/0x128 [ 110.203853][ T6098] el0t_64_sync_handler+0x84/0xf0 [ 110.204678][ T6098] el0t_64_sync+0x18c/0x190 [ 110.205401][ T6098] irq event stamp: 1033 [ 110.206128][ T6098] hardirqs last enabled at (1033): [] finish_lock_switch+0xb0/0x1c8 [ 110.207753][ T6098] hardirqs last disabled at (1032): [] __schedule+0x294/0x1a6c [ 110.209313][ T6098] softirqs last enabled at (716): [] local_bh_enable+0x10/0x34 [ 110.210818][ T6098] softirqs last disabled at (714): [] local_bh_disable+0x10/0x34 [ 110.212383][ T6098] ---[ end trace 0000000000000000 ]--- [ 110.220385][ T6098] udc dummy_udc.0: failed to start g1: -22 [ 110.221502][ T6098] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 110.223938][ T6098] UDC core: g1: couldn't find an available UDC or it's busy [ 111.690263][ T4337] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.010371][ T4329] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.011566][ T4329] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.012550][ T4329] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.013519][ T4329] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.770268][ T4337] Bluetooth: hci0: command 0x0c1a tx timeout