last executing test programs: 30.010373106s ago: executing program 1 (id=561): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0x18, &(0x7f0000000500)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 29.454432829s ago: executing program 1 (id=567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) 29.43520617s ago: executing program 1 (id=568): r0 = socket(0x2c, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x6}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0xcc61}, 0x1c) listen(r1, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, 0x0, 0x40488d0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x6000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x67, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000c80)={@void, @val={0x1, 0x4, 0x0, 0x3, 0xffff, 0x6}, @x25={0x3, 0x1, 0x23, "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"}}, 0x749) sendmmsg$inet(r5, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 29.332343255s ago: executing program 1 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) 29.332143255s ago: executing program 1 (id=570): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x800, 0x0, 0x2, 0xe, 0x6, 0x1}, 0x20) bind$l2tp6(r0, 0x0, 0x0) 28.896246483s ago: executing program 1 (id=573): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000040a01020000000000000000010000037b000c00d55296284136d9577210a24ff3e9161bd0c187370f822d5c631241cc4bebc0103dc2ca795463727714029acf5610d7875645724e5dc53f66b8e6946415a91eef850271634c423d19d76eeeb4d25075d7fa649ac2e0f41c359246926f120f0e1319c3bb1099d15f5594c17c3ad2a9a5e2740cbbb60008000a400000000465045c56418a12c7d77343ecc4a86c35c5409421ab2c5e75273c612b4a4863babe482b61c0f3479f0114"], 0x98}}, 0x400c110) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000003c0)=ANY=[@ANYBLOB="79cbc0", @ANYRES8=r0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 28.896072803s ago: executing program 32 (id=573): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000040a01020000000000000000010000037b000c00d55296284136d9577210a24ff3e9161bd0c187370f822d5c631241cc4bebc0103dc2ca795463727714029acf5610d7875645724e5dc53f66b8e6946415a91eef850271634c423d19d76eeeb4d25075d7fa649ac2e0f41c359246926f120f0e1319c3bb1099d15f5594c17c3ad2a9a5e2740cbbb60008000a400000000465045c56418a12c7d77343ecc4a86c35c5409421ab2c5e75273c612b4a4863babe482b61c0f3479f0114"], 0x98}}, 0x400c110) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000003c0)=ANY=[@ANYBLOB="79cbc0", @ANYRES8=r0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.901395249s ago: executing program 3 (id=1069): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.204344269s ago: executing program 3 (id=1095): r0 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB], 0xa4}}, 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1.204235329s ago: executing program 5 (id=1096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.181195839s ago: executing program 5 (id=1099): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x10000, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000000)="83de94fa8a", 0x5}], 0x2}}], 0x1, 0x4004c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.112325423s ago: executing program 3 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x18, 0x1, 0x4f, 0x3}}], 0x18}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'wlan0\x00', 0x400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x3}, 0x2000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000100)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008800}, 0x40800) 1.112193143s ago: executing program 5 (id=1101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80801, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.097870563s ago: executing program 5 (id=1102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="73a3", 0x2}], 0x1}}], 0x1, 0x40000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40090}, 0x404c044) 1.028154546s ago: executing program 3 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202209a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x80, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) 346.571645ms ago: executing program 0 (id=1132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x64, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x7, 0x3, 0x3f, 0x29}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x20000014) 306.391507ms ago: executing program 4 (id=1135): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24004808) 305.975087ms ago: executing program 0 (id=1136): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2}, 0xfd}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) 236.38195ms ago: executing program 4 (id=1137): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000056d70082b800a9890080000000000000929500000900000000000000ffffff0000000000000000b0acb9010000000000000000040000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 236.19403ms ago: executing program 2 (id=1138): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000), 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r1, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x1}}, 0xfe7c, 0x0}, 0x0) 236.10776ms ago: executing program 2 (id=1139): connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x6, 0x0, 0x0, 0x9, 0x1, 0xc49, 0x1012, 0xf, 0x6, 0x7, 'syz0\x00'}) 225.464511ms ago: executing program 2 (id=1140): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000001c0)="d33dd4edc9ee576551234edcd9c29e0ee1279915798e9582c47f", 0x1a, 0x8011, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 220.321281ms ago: executing program 0 (id=1141): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x4c}}, 0x4008080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 220.158101ms ago: executing program 4 (id=1142): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 148.383054ms ago: executing program 4 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 148.150614ms ago: executing program 2 (id=1144): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 147.959864ms ago: executing program 0 (id=1145): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedae", 0x94}, {0x0}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 136.341164ms ago: executing program 5 (id=1146): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="040014000a000100000000000000000008"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c8008"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 131.185434ms ago: executing program 3 (id=1147): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0}, 0x50) 64.439387ms ago: executing program 4 (id=1148): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x400c087}, 0x4040800) recvmmsg(0xffffffffffffffff, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000002680)=""/4138, 0x102a}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/233, 0xe9}, {&(0x7f00000036c0)=""/247, 0xf7}, {&(0x7f0000000340)=""/250, 0xfa}], 0x6}, 0x5}], 0x1, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000005840), 0x4000000000000ef, 0x20dc, 0x0) 64.253977ms ago: executing program 0 (id=1149): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x1) writev(0xffffffffffffffff, &(0x7f0000000600), 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d30000000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 64.065587ms ago: executing program 2 (id=1150): socket$inet6(0xa, 0x3, 0x100) socket(0xa, 0x3, 0x101) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @random='1a@+3\'', @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) 63.983427ms ago: executing program 5 (id=1151): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$netlink(0x10, 0x3, 0x12) write$cgroup_devices(r0, &(0x7f00000003c0)=ANY=[], 0x8) 54.960148ms ago: executing program 0 (id=1152): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 35.909689ms ago: executing program 4 (id=1153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4) 1.46278ms ago: executing program 2 (id=1154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x6}, {0xffff, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x18}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="03", 0x1}], 0x1}, 0x4) 0s ago: executing program 3 (id=1155): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000140)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0xc0, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x77f}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48097}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) kernel console output (not intermixed with test programs): 8.273801][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.280224][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.285318][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.288683][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.290194][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.292441][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.301823][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.305943][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.307915][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.309381][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.310856][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.312118][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.313184][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.316206][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.317653][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.323262][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.327818][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.329593][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.331041][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.332359][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.334803][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.336107][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.337381][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.338930][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.341320][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.348898][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.365855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.367441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.368812][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.369862][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.371187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.372516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.378295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.380018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.381400][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.382471][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.385157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.387452][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.391180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.392531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.400339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.402094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.403502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.405405][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.406612][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.407914][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.413232][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.415286][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.423206][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.427610][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.429152][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.430642][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.431966][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.433359][ T250] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.434489][ T250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.437172][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.438626][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.445986][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.447547][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.449051][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.450667][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.452002][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.454915][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.456338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.465979][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.467627][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.469045][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.470109][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.471409][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.472924][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.474775][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.476226][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.477665][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.478888][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.481595][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.490803][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.492346][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.494703][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.496297][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.499312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.500896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.516803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.518453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.520181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.521677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.523547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.528445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.534933][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.538784][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.540328][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.541836][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.543362][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.545948][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.547874][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.552422][ T4320] device veth0_vlan entered promiscuous mode [ 28.555089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.556539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.560230][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.561649][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.565209][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.569349][ T4320] device veth1_vlan entered promiscuous mode [ 28.590248][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.591678][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.593093][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.595953][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.600643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.601931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.610685][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.613194][ T4320] device veth0_macvtap entered promiscuous mode [ 28.619159][ T4320] device veth1_macvtap entered promiscuous mode [ 28.628198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.629726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.631105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.634533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.642510][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.643826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.645780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.658020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.659578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.661400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.662636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.676712][ T4327] device veth0_vlan entered promiscuous mode [ 28.679107][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.680241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.681783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.693854][ T4327] device veth1_vlan entered promiscuous mode [ 28.705041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.706587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.707975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.716762][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.718050][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.719194][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.720406][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.729082][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.730558][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.732044][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.736702][ T4332] device veth0_vlan entered promiscuous mode [ 28.738888][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.740239][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.741530][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.742627][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.743672][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.745519][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.749769][ T4332] device veth1_vlan entered promiscuous mode [ 28.760048][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.768673][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.773164][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.774679][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.776026][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.777434][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.787179][ T4327] device veth0_macvtap entered promiscuous mode [ 28.791606][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.793054][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.795366][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.803692][ T4327] device veth1_macvtap entered promiscuous mode [ 28.807305][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.808808][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.810266][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.811695][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.813207][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.830881][ T4332] device veth0_macvtap entered promiscuous mode [ 28.832460][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.834442][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.835859][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.837230][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.838514][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.843313][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.845435][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.847619][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.850187][ T4332] device veth1_macvtap entered promiscuous mode [ 28.853753][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.855822][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.857300][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.858793][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.860251][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.861935][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.863309][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.867198][ T4331] device veth0_vlan entered promiscuous mode [ 28.869497][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.870924][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.872992][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.880345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.881910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.883617][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.884967][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.887446][ T4324] device veth0_vlan entered promiscuous mode [ 28.890490][ T4324] device veth1_vlan entered promiscuous mode [ 28.893808][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.895897][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.905179][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.906468][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.907732][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.909163][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.912161][ T4331] device veth1_vlan entered promiscuous mode [ 28.920392][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.922099][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.923394][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.925662][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.927774][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.930175][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.931431][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.935988][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.937549][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.938911][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.940311][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.941814][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.943200][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.951835][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.953388][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.957314][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.958866][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.960261][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.961781][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.963753][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.968662][ T4324] device veth0_macvtap entered promiscuous mode [ 28.969956][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.971545][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.973086][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.975620][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.977089][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.980048][ T4331] device veth0_macvtap entered promiscuous mode [ 28.989231][ T4331] device veth1_macvtap entered promiscuous mode [ 28.992753][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.994680][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.995974][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.997297][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.000446][ T4324] device veth1_macvtap entered promiscuous mode [ 29.012720][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.014066][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.019373][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.020806][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.022135][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.023638][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.027160][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.028481][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.030716][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.034589][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.036072][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.037582][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.039002][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.040339][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.041757][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.060653][ T4429] binder: 4428:4429 ioctl 4018620d 0 returned -22 [ 29.062262][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.063864][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.066079][ T4429] binder: 4428:4429 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 29.068747][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.070104][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.070416][ T4429] binder: 4428:4429 ioctl 6611 0 returned -22 [ 29.071384][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.073710][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.077546][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.080294][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.081918][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.083370][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.086066][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.087490][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.088897][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.090330][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.091727][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.093805][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.101383][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.102980][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.104867][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.106957][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.120412][ T316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.121537][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.123368][ T316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.126318][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.127703][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.129099][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.130502][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.131835][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.133171][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.138077][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.140349][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.146372][ T4331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.147739][ T4331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.148904][ T4331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.150141][ T4331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.157700][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.159244][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.160803][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.170970][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.172202][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.173795][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.185582][ T4324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.187485][ T4324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.188813][ T4324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.190165][ T4324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.208556][ T4429] loop0: detected capacity change from 0 to 32768 [ 29.224646][ T4429] ======================================================= [ 29.224646][ T4429] WARNING: The mand mount option has been deprecated and [ 29.224646][ T4429] and is ignored by this kernel. Remove the mand [ 29.224646][ T4429] option from the mount to silence this warning. [ 29.224646][ T4429] ======================================================= [ 29.235378][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.236667][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.238399][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.242774][ T4429] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4429) [ 29.255364][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.256796][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.261979][ T4429] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 29.263503][ T4429] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 29.265541][ T4429] BTRFS info (device loop0): turning on flush-on-commit [ 29.266638][ T4429] BTRFS info (device loop0): doing ref verification [ 29.267590][ T4429] BTRFS info (device loop0): turning off barriers [ 29.269971][ T4429] BTRFS info (device loop0): using free space tree [ 29.309105][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.309128][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.309684][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.328854][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.330028][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.332171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.347337][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.348617][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.358032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.367156][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.368525][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.370139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.402713][ T4453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.406905][ T4453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.472995][ T4429] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.498545][ T4462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.501549][ T4462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.519137][ T4320] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 29.572248][ T4323] Bluetooth: hci4: unexpected subevent 0x1b length: 16 < 18 [ 29.792255][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.793832][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.873983][ T4477] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.000640][ T4487] process 'syz.4.12' launched './file0' with NULL argv: empty string added [ 30.017549][ T4323] Bluetooth: hci0: command 0x041b tx timeout [ 30.017630][ T4329] Bluetooth: hci2: command 0x041b tx timeout [ 30.018565][ T4323] Bluetooth: hci1: command 0x041b tx timeout [ 30.019481][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 30.053998][ T4477] usb 1-1: Using ep0 maxpacket: 32 [ 30.057088][ T4477] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 30.058484][ T4477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.061488][ T4477] usb 1-1: config 0 descriptor?? [ 30.068415][ T4477] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 30.094555][ T4321] Bluetooth: hci4: command 0x041b tx timeout [ 30.168730][ T4508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.171407][ T4508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.185593][ T4507] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 30.333693][ T4519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.337203][ T4519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.499216][ T4532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.500772][ T4532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.548761][ T4535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.551077][ T4535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.572343][ T4537] netlink: 768 bytes leftover after parsing attributes in process `syz.2.29'. [ 30.714868][ T4545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.716428][ T4545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.900522][ T4549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.901929][ T4549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.459322][ T4561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.462960][ T4561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.554624][ T4565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.674664][ T4573] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 31.676020][ T4573] device syzkaller0 entered promiscuous mode [ 31.967327][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.019607][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.021207][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.119253][ T4577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.120698][ T4577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.182352][ T4477] gspca_vc032x: reg_w err -71 [ 32.183118][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.183908][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.184659][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.185462][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.186270][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.186990][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.188181][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.189014][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.189780][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.190641][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.191391][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.192158][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.192976][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.193756][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.194479][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.195155][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.195875][ T4477] gspca_vc032x: I2c Bus Busy Wait 00 [ 32.196649][ T4477] gspca_vc032x: Unknown sensor... [ 32.197366][ T4477] vc032x: probe of 1-1:0.0 failed with error -22 [ 32.198585][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 32.200024][ T4329] Bluetooth: hci0: command 0x040f tx timeout [ 32.200947][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 32.202441][ T4477] usb 1-1: USB disconnect, device number 2 [ 32.284012][ T4321] Bluetooth: hci4: command 0x040f tx timeout [ 32.551082][ T4321] Bluetooth: hci2: command 0x0419 tx timeout [ 32.721438][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.723794][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.856226][ T4602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.858695][ T4602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.160827][ T4385] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.353256][ T4385] usb 1-1: Using ep0 maxpacket: 32 [ 33.355383][ T4385] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 33.357822][ T4385] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 33.359405][ T4385] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 33.366186][ T4385] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 33.367678][ T4385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.372666][ T4385] usb 1-1: Product: syz [ 33.373291][ T4385] usb 1-1: Manufacturer: syz [ 33.374033][ T4385] usb 1-1: SerialNumber: syz [ 33.377985][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.379386][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.382934][ T4385] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 33.384309][ T4385] imon 1-1:155.0: unable to initialize intf0, err -19 [ 33.386161][ T4385] imon:imon_probe: failed to initialize context! [ 33.387062][ T4385] imon 1-1:155.0: unable to register, err -19 [ 33.551432][ T4618] binder: 4617:4618 tried to acquire reference to desc 0, got 1 instead [ 33.593933][ T4622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.595446][ T4622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.599342][ T4385] binder: undelivered TRANSACTION_COMPLETE [ 33.600297][ T4385] binder: undelivered TRANSACTION_COMPLETE [ 33.601225][ T4385] binder: undelivered transaction 8, process died. [ 33.602207][ T4385] binder: undelivered transaction 7, process died. [ 33.691452][ T4624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.692858][ T4624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.773372][ T4630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.774795][ T4630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.936987][ T4632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.938733][ T4632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.152847][ T4635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.155665][ T4635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.255916][ T4637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.257262][ T4637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.379669][ T4642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.382011][ T4642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.423236][ T4321] Bluetooth: hci3: command 0x0419 tx timeout [ 34.423252][ T4329] Bluetooth: hci0: command 0x0419 tx timeout [ 34.424135][ T4321] Bluetooth: hci1: command 0x0419 tx timeout [ 34.509582][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 34.516768][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.518337][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.734978][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.736301][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.739248][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.740664][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.816121][ T4650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.817640][ T4650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.041152][ T4660] binder: 4659:4660 tried to acquire reference to desc 0, got 1 instead [ 35.042697][ T4660] binder: 4660:4659 failed to get security context [ 35.046274][ T4660] binder: 4659:4660 transaction call to 4659:0 failed 13/29201/-22, size 0-0 line 3197 [ 35.048077][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.077645][ T4321] Bluetooth: Frame is too long (len 12, expected len 4) [ 35.131051][ T4668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.132994][ T4668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.229784][ T4673] netlink: 256 bytes leftover after parsing attributes in process `syz.2.93'. [ 35.351035][ T4683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'. [ 35.382266][ T4685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.384347][ T4685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.437978][ T4687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.440620][ T4687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.527424][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.529026][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.690865][ T4693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.692719][ T4693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.032119][ T4695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.034037][ T4695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.098486][ T4477] usb 1-1: USB disconnect, device number 3 [ 36.175987][ T4709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.180684][ T4710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.180780][ T4709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.182505][ T4710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.440663][ T4321] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 36.647439][ T4321] Bluetooth: hci3: command 0x0406 tx timeout [ 36.743917][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 36.854425][ T4733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.855800][ T4733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.990396][ T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 36.991820][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.993234][ T24] usb 1-1: Product: syz [ 36.993935][ T24] usb 1-1: Manufacturer: syz [ 36.994654][ T24] usb 1-1: SerialNumber: syz [ 36.999336][ T24] usb 1-1: config 0 descriptor?? [ 37.087667][ T4743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.099677][ T4743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.337741][ T4762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.340029][ T4762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.412410][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.413841][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.465882][ T24] airspy 1-1:0.0: Board ID: 00 [ 37.466766][ T24] airspy 1-1:0.0: Firmware version: [ 37.581911][ T4783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.583500][ T4783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.887454][ T4790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.891030][ T4790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.906155][ T4792] device syzkaller1 entered promiscuous mode [ 38.000319][ T4796] binder: 4795:4796 tried to acquire reference to desc 0, got 1 instead [ 38.001878][ T4796] binder: 4795:4796 got transaction with invalid parent offset or type [ 38.003266][ T4796] binder: 4795:4796 transaction call to 4795:0 failed 18/29201/-22, size 96-24 line 3439 [ 38.005018][ T114] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.023169][ T4798] binder: 4797:4798 tried to acquire reference to desc 0, got 1 instead [ 38.034619][ T3899] binder: release 4797:4798 transaction 23 out, still active [ 38.038794][ T4800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.040583][ T4800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.052590][ T4802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.054063][ T4802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.268142][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.269663][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.514540][ T4811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.516254][ T4811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.543320][ T24] airspy 1-1:0.0: usb_control_msg() failed -71 request 10 [ 38.545866][ T24] airspy 1-1:0.0: Registered as swradio1 [ 38.546693][ T24] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 38.549695][ T24] usb 1-1: USB disconnect, device number 4 [ 38.608376][ T4814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.609676][ T4814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.073089][ T4826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.074566][ T4826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.197877][ T4832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.200767][ T4832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.632497][ T4852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.633995][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.706174][ T4385] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.902039][ T4385] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 39.903530][ T4385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.904656][ T4385] usb 1-1: Product: syz [ 39.905236][ T4385] usb 1-1: Manufacturer: syz [ 39.905940][ T4385] usb 1-1: SerialNumber: syz [ 39.907770][ T4385] usb 1-1: config 0 descriptor?? [ 39.910459][ T4385] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 40.122337][ T4863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.124985][ T4863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.153543][ T4866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.157861][ T4866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.345026][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.346719][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.709224][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 40.765898][ T4323] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 40.767169][ T4323] Bluetooth: hci0: Injecting HCI hardware error event [ 40.768529][ T4323] Bluetooth: hci0: hardware error 0x00 [ 40.785989][ T3899] usb 1-1: USB disconnect, device number 5 [ 40.792487][ T4892] netlink: 92 bytes leftover after parsing attributes in process `syz.3.174'. [ 40.817236][ T4894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.818727][ T4894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.916350][ T4903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.917935][ T4903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.920727][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.922691][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.394967][ T4916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 41.396473][ T4916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 41.397730][ T4916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'. [ 41.398927][ T4916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'. [ 41.438449][ T4920] overlayfs: overlapping lowerdir path [ 41.442149][ T4920] netlink: 'syz.0.186': attribute type 4 has an invalid length. [ 41.491057][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.494686][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.598103][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.599811][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.602031][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.603366][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.845198][ T4477] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.037824][ T4477] usb 1-1: Using ep0 maxpacket: 32 [ 42.039831][ T4477] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 42.041158][ T4477] usb 1-1: config 0 has no interface number 0 [ 42.042115][ T4477] usb 1-1: config 0 interface 105 has no altsetting 0 [ 42.044602][ T4477] usb 1-1: New USB device found, idVendor=14aa, idProduct=0221, bcdDevice=bd.9a [ 42.045845][ T4477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.046956][ T4477] usb 1-1: Product: syz [ 42.047520][ T4477] usb 1-1: Manufacturer: syz [ 42.048181][ T4477] usb 1-1: SerialNumber: syz [ 42.050305][ T4477] usb 1-1: config 0 descriptor?? [ 42.139281][ T4943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.140794][ T4943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.158763][ T4943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.160160][ T4943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.229198][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.231999][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.268753][ T4477] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 42.270364][ T4477] dvb-usb: bulk message failed: -22 (2/0) [ 42.271269][ T4477] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 42.272743][ T4477] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 42.274369][ T4477] usb 1-1: media controller created [ 42.275843][ T4477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 42.278552][ T4477] usb 1-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 42.279968][ T4477] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 42.283610][ T4477] Registered IR keymap rc-dtt200u [ 42.286836][ T4477] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 42.288980][ T4477] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input2 [ 42.292081][ T4477] dvb-usb: schedule remote query interval to 300 msecs. [ 42.293107][ T4477] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 42.296618][ T4477] usb 1-1: USB disconnect, device number 6 [ 42.394551][ T4477] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 42.602271][ T4961] device syzkaller1 entered promiscuous mode [ 42.888073][ T4986] input: syz1 as /devices/virtual/input/input3 [ 42.892011][ T4987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.907168][ T4987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.020908][ T4995] binder: 4994:4995 tried to acquire reference to desc 0, got 1 instead [ 43.022837][ T4995] binder_debug: 2 callbacks suppressed [ 43.022842][ T4995] binder: cannot allocate buffer [ 43.023673][ T4995] binder: 4994:4995 transaction call to 4994:0 failed 28/29201/-22, size 0-240 line 3230 [ 43.026201][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.058244][ T4997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.060585][ T4999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.061954][ T4999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.064747][ T4323] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 43.065533][ T4997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.099098][ T5003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.100534][ T5003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.203514][ T4477] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.396036][ T4477] usb 1-1: Using ep0 maxpacket: 16 [ 43.398328][ T4477] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 43.401402][ T4477] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 43.402706][ T4477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.403827][ T4477] usb 1-1: Product: syz [ 43.404461][ T4477] usb 1-1: Manufacturer: syz [ 43.405126][ T4477] usb 1-1: SerialNumber: syz [ 43.406919][ T4477] usb 1-1: config 0 descriptor?? [ 43.480922][ T5006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 43.635789][ T5012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.637213][ T5012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.649897][ T5014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.651390][ T5014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.676891][ T5018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.678409][ T5018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.113527][ T5024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.115059][ T5024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.210224][ T5031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.211671][ T5031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.236523][ T5033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.238011][ T5033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.265314][ T39] nci: nci_rsp_packet: unknown rsp opcode 0x806 [ 44.902182][ T5050] Zero length message leads to an empty skb [ 44.988248][ T5055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.990194][ T5055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.180735][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.183377][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.232445][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.234103][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.544081][ T5074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.546214][ T5074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.785222][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.786770][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.854591][ T5086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.857018][ T5086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.103842][ T5090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.105397][ T5090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.140546][ T24] usb 1-1: USB disconnect, device number 7 [ 46.412142][ T4321] Bluetooth: hci4: command 0x201b tx timeout [ 46.590011][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.591591][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.733116][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.815534][ T5133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.816956][ T5133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.835630][ T4323] Bluetooth: hci3: ACL packet too small [ 46.891528][ T5141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.893014][ T5141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.925628][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 46.928102][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 46.929293][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 46.930708][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 46.932066][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 46.933375][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.935175][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 46.936628][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.110986][ T5141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.112411][ T5141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.154102][ T5143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.155435][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 47.156330][ T24] usbtmc 1-1:16.0: can't read capabilities [ 47.159437][ T5143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.373140][ T7] usb 1-1: USB disconnect, device number 8 [ 47.437641][ T5152] binder: 5151:5152 tried to acquire reference to desc 0, got 1 instead [ 47.439310][ T5152] binder: 5151:5152 got transaction with invalid data ptr [ 47.440458][ T5152] binder: 5151:5152 transaction async to 5151:0 failed 33/29201/-14, size 0-24 line 3333 [ 47.442193][ T5152] binder_alloc: 5151: pid 5151 spamming oneway? 1 buffers allocated for a total size of 4096 [ 47.450911][ T24] binder: undelivered transaction 34, process died. [ 47.462804][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 47.524679][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.526152][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.684359][ T5160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.686583][ T5160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.790735][ T5170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.792246][ T5170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.183445][ T5180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.185231][ T5180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.243792][ T5182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.245349][ T5182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.251696][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 48.346069][ T5184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.347567][ T5184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.444141][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 48.446720][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 48.447968][ T24] usb 1-1: config 0 has no interface number 0 [ 48.451202][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 48.452723][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.453935][ T24] usb 1-1: Product: syz [ 48.454563][ T24] usb 1-1: Manufacturer: syz [ 48.455325][ T24] usb 1-1: SerialNumber: syz [ 48.457327][ T24] usb 1-1: config 0 descriptor?? [ 48.460230][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 48.679045][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 48.682233][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 48.862788][ T5194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.864911][ T5194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.935592][ T5198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.937484][ T5198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.959555][ T5202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.960871][ T5202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.107005][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 49.108978][ T112] usb 1-1: USB disconnect, device number 9 [ 49.112294][ T112] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 49.115280][ T112] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 49.118648][ T112] quatech2 1-1:0.51: device disconnected [ 49.421705][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.423430][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.492485][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.493926][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.575488][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.577037][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.952234][ T4477] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 49.965103][ T5236] binder: 5235:5236 tried to acquire reference to desc 0, got 1 instead [ 49.966578][ T5236] binder: 5235:5236 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 49.968498][ T5236] binder: 5236 RLIMIT_NICE not set [ 50.000991][ T5240] device syzkaller1 entered promiscuous mode [ 50.021901][ T5236] binder: 5236 RLIMIT_NICE not set [ 50.024109][ T112] binder: release 5235:5241 transaction 39 out, still active [ 50.025247][ T112] binder: undelivered TRANSACTION_COMPLETE [ 50.032586][ T112] binder: release 5235:5236 transaction 39 in, still active [ 50.033675][ T112] binder: send failed reply for transaction 39, target dead [ 50.083955][ T5243] usb usb9: usbfs: process 5243 (syz.2.313) did not claim interface 0 before use [ 50.085517][ T5243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.313'. [ 50.166472][ T4477] usb 1-1: Using ep0 maxpacket: 8 [ 50.176359][ T4477] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 50.178549][ T4477] usb 1-1: config 0 has no interface number 0 [ 50.179440][ T4477] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 50.180973][ T4477] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 50.182430][ T4477] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 50.184175][ T4477] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 50.185409][ T4477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.195923][ T5260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.197222][ T5260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.202223][ T5259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.203762][ T5259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.204975][ T4477] usb 1-1: config 0 descriptor?? [ 50.207752][ T4477] ldusb 1-1:0.55: Interrupt in endpoint not found [ 50.378781][ T5287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.381787][ T5287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.425570][ T4477] usb 1-1: USB disconnect, device number 10 [ 50.637532][ T5291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.325'. [ 50.656173][ T5293] binder: 5292:5293 ioctl 4018620d 0 returned -22 [ 50.677399][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.678852][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.801793][ T5299] syz.3.329 (5299): drop_caches: 0 [ 50.845607][ T5301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.847031][ T5301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.909040][ T5303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.910542][ T5303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.037516][ T5309] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 51.263820][ T5317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.266155][ T5317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.382106][ T5318] binder: binder_mmap: 5314 20001000-2000b000 bad vm_flags failed -1 [ 51.559025][ T5330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.560447][ T5330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.706238][ T7] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 51.846571][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.857987][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.911321][ T7] usb 1-1: config 8 has an invalid interface number: 196 but max is 0 [ 51.912665][ T7] usb 1-1: config 8 has no interface number 0 [ 51.913711][ T7] usb 1-1: config 8 interface 196 has no altsetting 0 [ 51.914765][ T7] usb 1-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=e5.59 [ 51.916153][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.919943][ T7] quatech2 1-1:8.196: Quatech 2nd gen USB to Serial Driver converter detected [ 52.008735][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.010199][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.116474][ T5343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.117909][ T5343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.134657][ T7] usb 1-1: qt2_attach - failed to power on unit: -71 [ 52.135778][ T7] quatech2: probe of 1-1:8.196 failed with error -71 [ 52.137980][ T7] usb 1-1: USB disconnect, device number 11 [ 52.547002][ T5349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.548967][ T5349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.695174][ T5355] UBIFS error (pid: 5355): cannot open "./file0", error -22 [ 52.716859][ T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.720535][ T7] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.747976][ T5358] fido_id[5358]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.941414][ T5362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.943141][ T5362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.216816][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.218453][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.287477][ T5366] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 53.514578][ T5378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.515988][ T5378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.526030][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.527450][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.684789][ T4478] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.809777][ T5386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.811124][ T5386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.877293][ T4478] usb 1-1: Using ep0 maxpacket: 32 [ 53.879267][ T4478] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 53.880368][ T4478] usb 1-1: config 0 has no interface number 0 [ 53.881270][ T4478] usb 1-1: config 0 interface 12 has no altsetting 0 [ 53.883711][ T4478] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 53.885112][ T4478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.886322][ T4478] usb 1-1: Product: syz [ 53.886991][ T4478] usb 1-1: Manufacturer: syz [ 53.887658][ T4478] usb 1-1: SerialNumber: syz [ 53.889462][ T4478] usb 1-1: config 0 descriptor?? [ 54.101056][ T5391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.103464][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.106704][ T5391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.107371][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.387501][ T5396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.388848][ T5396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.675221][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.677175][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.700375][ T5402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.703151][ T5402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.707608][ T5404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.709147][ T5404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.073923][ T250] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 55.233625][ T5416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.235042][ T5416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.841097][ T5428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.842688][ T5428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.953968][ T5432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.956677][ T5432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.965652][ T5432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.967236][ T5432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.968798][ T4323] Bluetooth: hci1: Malformed LE Event: 0x0d [ 56.002032][ T5436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.003362][ T5436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.047929][ T4478] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 56.049209][ T4478] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 56.050322][ T4478] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 56.051454][ T4478] f81534: probe of 1-1:0.12 failed with error -71 [ 56.054147][ T4478] usb 1-1: USB disconnect, device number 12 [ 56.278561][ T5443] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 56.561594][ T5454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.563494][ T5454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.648293][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.649731][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.002400][ T5443] team0 (unregistering): Port device team_slave_0 removed [ 57.009795][ T5443] team0 (unregistering): Port device team_slave_1 removed [ 57.127850][ T5468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 57.202750][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.204446][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.209500][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.216984][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.217725][ T5479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.223632][ T5481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.223725][ T5479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.230500][ T5481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.535059][ T4478] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 57.731748][ T4478] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 57.733158][ T4478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.734307][ T4478] usb 1-1: Product: syz [ 57.734917][ T4478] usb 1-1: Manufacturer: syz [ 57.735554][ T4478] usb 1-1: SerialNumber: syz [ 57.737582][ T4478] usb 1-1: config 0 descriptor?? [ 57.807099][ T5485] overlayfs: statfs failed on './file0' [ 57.844280][ T5491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.847164][ T5491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.851230][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.852681][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.919482][ T5497] device syzkaller1 entered promiscuous mode [ 57.956187][ T4478] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 58.008381][ T5499] tipc: Started in network mode [ 58.009153][ T5499] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 58.010698][ T5499] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 58.012930][ T5499] tipc: Enabled bearer , priority 10 [ 58.035961][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.037389][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.104779][ T5507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.106318][ T5507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.461885][ T5516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.463378][ T5516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.466401][ T5517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.467826][ T5517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.613603][ T5521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.615082][ T5521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.621980][ T7] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 58.623741][ T7] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.947841][ T5541] binder: 5540:5541 tried to acquire reference to desc 0, got 1 instead [ 58.949427][ T5541] binder: 5540:5541 got transaction with invalid offsets ptr [ 58.950576][ T5541] binder: 5540:5541 transaction call to 5540:0 failed 44/29201/-14, size 0-240 line 3269 [ 58.952359][ T3899] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.973455][ T5543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.974862][ T5543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.035933][ T5550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.037286][ T5550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.204297][ T7] tipc: Node number set to 1 [ 59.391776][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.393276][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.525874][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.527410][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.566754][ T5567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.568417][ T5567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.614429][ T5571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.615863][ T5571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.681301][ T4478] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 59.684572][ T4478] usb 1-1: USB disconnect, device number 13 [ 60.120047][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.121794][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.143706][ T5582] IPVS: Scheduler module ip_vs_noƒe not found [ 60.190931][ T5589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.192388][ T5589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.247825][ T5594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.249267][ T5594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.260505][ T5597] device syzkaller0 entered promiscuous mode [ 60.262657][ T5595] netlink: 'syz.4.460': attribute type 10 has an invalid length. [ 60.263967][ T5595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.270465][ T5595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.276759][ T5595] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 60.525463][ T5603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.527051][ T5603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.700223][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.701601][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.813547][ T5613] tipc: Can't bind to reserved service type 0 [ 61.601771][ T5622] binder: 5621:5622 tried to acquire reference to desc 0, got 1 instead [ 61.603206][ T5622] binder: 5621:5622 got transaction with invalid offset (48, min 24 max 88) or object. [ 61.604672][ T5622] binder: 5621:5622 transaction call to 5621:0 failed 49/29201/-22, size 88-24 line 3346 [ 61.606374][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.628139][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.629528][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.795016][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.796939][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.190167][ T5628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.191738][ T5628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.351254][ T5630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.352619][ T5630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.922773][ T5638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.924215][ T5638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.481364][ T5640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.483238][ T5640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.041152][ T5642] 9pnet_fd: Insufficient options for proto=fd [ 64.104026][ T5646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.106348][ T5646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.645406][ T5654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.646783][ T5654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.235794][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.237248][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.851990][ T14] cfg80211: failed to load regulatory.db [ 66.865197][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.866342][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.868358][ T5684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.869850][ T5684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.876064][ T5685] binder: 5682:5685 unknown command 1074553619 [ 71.877154][ T5685] binder: 5682:5685 ioctl c0306201 20000040 returned -22 [ 71.879054][ T5685] binder: 5682:5685 unknown command 1074553620 [ 71.880005][ T5685] binder: 5682:5685 ioctl c0306201 20000640 returned -22 [ 71.977187][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.978608][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.980421][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.981862][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.262362][ T114] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 72.295391][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.296843][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.488177][ T114] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 72.489676][ T114] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 72.492716][ T114] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 72.494133][ T114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.495583][ T114] usb 1-1: Product: syz [ 72.496234][ T114] usb 1-1: Manufacturer: syz [ 72.496942][ T114] usb 1-1: SerialNumber: syz [ 72.509963][ T114] usb 1-1: config 0 descriptor?? [ 72.511163][ T5699] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.512308][ T5699] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.515347][ T114] usb 1-1: ucan: probing device on interface #0 [ 72.516286][ T114] usb 1-1: ucan: invalid EP count (1) [ 72.517062][ T114] usb 1-1: ucan: probe failed; try to update the device firmware [ 72.555699][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.558078][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.591067][ T5718] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 72.826574][ T5728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.828187][ T5728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.115187][ T5735] futex_wake_op: syz.0.500 tries to shift op by -1; fix this program [ 73.133985][ T5737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.136294][ T5737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.617730][ T5748] binder: 5747:5748 tried to acquire reference to desc 0, got 1 instead [ 73.619716][ T5748] binder: 5747:5748 got transaction with invalid parent offset or type [ 73.623292][ T5748] binder: 5748:5747 failed to fixup parent [ 73.624364][ T5748] binder: 5747:5748 transaction call to 5747:0 failed 58/29201/-22, size 88-24 line 3540 [ 73.626327][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.839234][ T5759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.840714][ T5759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.036957][ T5764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.047235][ T5764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.405991][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.410791][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.633200][ T5776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.634666][ T5776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.934272][ T5784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 75.059950][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.061379][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.077880][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.079485][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.115722][ T114] usb 1-1: USB disconnect, device number 14 [ 75.341874][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.343434][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.540388][ T5813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.541926][ T5813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.642382][ T114] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 75.716502][ T5825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.718443][ T5825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.845413][ T114] usb 1-1: Using ep0 maxpacket: 8 [ 75.847656][ T114] usb 1-1: config 162 has an invalid interface number: 166 but max is 0 [ 75.848849][ T114] usb 1-1: config 162 has no interface number 0 [ 75.849788][ T114] usb 1-1: config 162 interface 166 has no altsetting 0 [ 75.852304][ T114] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 75.853591][ T114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.854714][ T114] usb 1-1: Product: syz [ 75.855319][ T114] usb 1-1: Manufacturer: syz [ 75.856091][ T114] usb 1-1: SerialNumber: syz [ 76.079530][ T114] appledisplay 1-1:162.166: Could not find int-in endpoint [ 76.081241][ T114] usbhid 1-1:162.166: couldn't find an input interrupt endpoint [ 76.083858][ T114] usb 1-1: USB disconnect, device number 15 [ 76.106177][ T5829] binder: 5828:5829 tried to acquire reference to desc 0, got 1 instead [ 76.107908][ T5829] binder: 5828:5829 got reply transaction with bad transaction stack, transaction 66 has target 5828:0 [ 76.109916][ T5829] binder: 5828:5829 transaction reply to 0:0 failed 69/29201/-71, size 0-0 line 2961 [ 76.118079][ T4478] binder: send failed reply for transaction 66 to 5828:5829 [ 76.136595][ T4478] binder: undelivered TRANSACTION_COMPLETE [ 76.137569][ T4478] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.138498][ T4478] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.162648][ T5833] ALSA: seq fatal error: cannot create timer (-16) [ 76.164071][ T5833] ALSA: seq fatal error: cannot create timer (-16) [ 76.272333][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.273938][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.470614][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.472093][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.639153][ T4323] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 76.677429][ T5854] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 76.678590][ T5854] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 76.682046][ T5854] vhci_hcd vhci_hcd.0: Device attached [ 76.684129][ T4323] Bluetooth: hci0: unexpected event for opcode 0x080f [ 76.685444][ T5855] vhci_hcd: connection closed [ 76.686798][ T4411] vhci_hcd: stop threads [ 76.688561][ T4411] vhci_hcd: release socket [ 76.689268][ T4411] vhci_hcd: disconnect device [ 77.026754][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.028178][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.289583][ T5796] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 77.409691][ T4321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.411674][ T4321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.413195][ T4321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.414556][ T4321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.416854][ T4321] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.418776][ T4321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.524366][ T4385] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 77.591368][ T5874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.593071][ T5874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.595119][ T4323] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 77.623605][ T5620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.665548][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 77.681188][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.682389][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.683879][ T5868] device bridge_slave_0 entered promiscuous mode [ 77.727742][ T4385] usb 1-1: Using ep0 maxpacket: 32 [ 77.730734][ T4385] usb 1-1: unable to get BOS descriptor or descriptor too short [ 77.732693][ T4385] usb 1-1: config 4 has an invalid interface number: 136 but max is 0 [ 77.734122][ T4385] usb 1-1: config 4 has no interface number 0 [ 77.735142][ T4385] usb 1-1: config 4 interface 136 has no altsetting 0 [ 77.738573][ T4385] usb 1-1: string descriptor 0 read error: -22 [ 77.739508][ T4385] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8 [ 77.740288][ T5620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.740740][ T4385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.746850][ T4385] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 77.748208][ T4385] dvb-usb: bulk message failed: -22 (4/0) [ 77.749630][ T4385] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.750544][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.751017][ T4385] dvb-usb: bulk message failed: -22 (5/0) [ 77.752153][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.752734][ T4385] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.754283][ T5868] device bridge_slave_1 entered promiscuous mode [ 77.758793][ T4385] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.760266][ T4385] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.762050][ T4385] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 77.763196][ T4385] usb 1-1: media controller created [ 77.767313][ T4385] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.769461][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.771502][ T4385] ttusb2: set interface to alts=3 failed [ 77.773284][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.785729][ T5868] team0: Port device team_slave_0 added [ 77.787625][ T5868] team0: Port device team_slave_1 added [ 77.789135][ T4385] DVB: Unable to find symbol tda10023_attach() [ 77.790033][ T4385] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 77.791775][ T4385] Registered IR keymap rc-tt-1500 [ 77.794168][ T4385] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 77.796118][ T4385] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 77.798900][ T4385] dvb-usb: schedule remote query interval to 150 msecs. [ 77.800083][ T4385] dvb-usb: bulk message failed: -22 (4/0) [ 77.800699][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.800824][ T4385] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.802120][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.803466][ T4385] dvb-usb: bulk message failed: -22 (5/0) [ 77.803477][ T4385] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.803495][ T4385] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected. [ 77.810898][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.813443][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.814530][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.822958][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.849405][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.850787][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.879604][ T5620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.942687][ T5868] device hsr_slave_0 entered promiscuous mode [ 77.963733][ T114] dvb-usb: bulk message failed: -22 (4/0) [ 77.964816][ T114] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 77.964967][ T4478] usb 1-1: USB disconnect, device number 16 [ 77.966316][ T114] dvb-usb: error -5 while querying for an remote control event. [ 77.995365][ T5868] device hsr_slave_1 entered promiscuous mode [ 78.038248][ T5868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.039452][ T5868] Cannot create hsr debugfs directory [ 78.071745][ T5620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.074660][ T4478] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected. [ 78.111352][ T5868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.148837][ T5868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.150243][ T5886] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 78.151172][ T5886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.152799][ T5886] vhci_hcd vhci_hcd.0: Device attached [ 78.156418][ T5886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.157814][ T5886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.159453][ T5887] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 78.160856][ T4411] vhci_hcd: stop threads [ 78.161454][ T4411] vhci_hcd: release socket [ 78.162100][ T4411] vhci_hcd: disconnect device [ 78.190731][ T5868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.246908][ T5868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.331995][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.336534][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.338587][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.342616][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.346169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.349824][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.351297][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.352374][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.354386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.355849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.357501][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.358584][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.366809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.375023][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.376763][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.378681][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.381852][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.386130][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.388909][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.390533][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.400574][ T5868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.403857][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.410680][ T5620] tipc: Disabling bearer [ 78.415156][ T5620] tipc: Left network mode [ 78.417389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.418963][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.421726][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.426801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.431652][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.503358][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.505143][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.506378][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.743699][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.745309][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.755845][ T5943] netlink: 'syz.2.583': attribute type 10 has an invalid length. [ 78.765464][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.767437][ T5943] bond0: (slave team0): Enslaving as an active interface with an up link [ 78.773733][ T5868] device veth0_vlan entered promiscuous mode [ 78.779182][ T5868] device veth1_vlan entered promiscuous mode [ 78.782925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.784380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.785737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.821697][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.823464][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.840017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.841692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.843268][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.851394][ T5868] device veth0_macvtap entered promiscuous mode [ 78.854980][ T5868] device veth1_macvtap entered promiscuous mode [ 78.858187][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.860606][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.908868][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.910432][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.911781][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.913323][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.915948][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.917726][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.919418][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.921047][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.924285][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.925699][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.927213][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.928757][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.930388][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.933356][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.935077][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.936762][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.938203][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.939646][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.944312][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.945889][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.947929][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.949308][ T5868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.950797][ T5868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.953712][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.955025][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.956618][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.957611][ T114] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 79.025205][ T5868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.026618][ T5868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.027838][ T5868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.029214][ T5868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.132165][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.133516][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.135687][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.152418][ T114] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 79.153837][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.156380][ T114] usb 1-1: config 0 descriptor?? [ 79.158676][ T114] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 79.206457][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.207781][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.210850][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.311374][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.313042][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.427413][ T5993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.433925][ T5993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.599425][ T4323] Bluetooth: hci2: command 0x0409 tx timeout [ 79.717463][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.719560][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.802681][ T114] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 79.804271][ T114] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 80.019287][ T114] usb 1-1: USB disconnect, device number 17 [ 80.279082][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.281300][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.331949][ T6025] device syzkaller1 entered promiscuous mode [ 80.378682][ T5620] device hsr_slave_0 left promiscuous mode [ 80.412141][ T5620] device hsr_slave_1 left promiscuous mode [ 80.497708][ T5620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.498934][ T5620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.500479][ T5620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.501614][ T5620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.502936][ T5620] device bridge_slave_1 left promiscuous mode [ 80.504636][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.541683][ T5620] device bridge_slave_0 left promiscuous mode [ 80.542666][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.647679][ T5620] device veth1_macvtap left promiscuous mode [ 80.648759][ T5620] device veth0_macvtap left promiscuous mode [ 80.649714][ T5620] device veth1_vlan left promiscuous mode [ 80.650663][ T5620] device veth0_vlan left promiscuous mode [ 80.852787][ T6035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.862826][ T114] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 80.887106][ T6040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.888491][ T6040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.076754][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.078365][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.079719][ T114] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 81.080929][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.083424][ T114] usb 1-1: config 0 descriptor?? [ 81.453328][ T6042] input: syz0 as /devices/virtual/input/input7 [ 81.518209][ T114] pyra 0003:1E7D:2CF6.0003: item fetching failed at offset 3/7 [ 81.519592][ T114] pyra 0003:1E7D:2CF6.0003: parse failed [ 81.520445][ T114] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -22 [ 81.535519][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.537312][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.797078][ T6048] Bluetooth: MGMT ver 1.22 [ 81.823847][ T4323] Bluetooth: hci2: command 0x041b tx timeout [ 82.723403][ T5620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.947713][ T5620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.787879][ T7] usb 1-1: USB disconnect, device number 18 [ 84.048380][ T4323] Bluetooth: hci2: command 0x040f tx timeout [ 84.273033][ T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 84.467455][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.468995][ T7] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 84.470356][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.472643][ T7] usb 1-1: config 0 descriptor?? [ 84.475123][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 84.637855][ T5620] bond0 (unregistering): Released all slaves [ 84.904584][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 84.906339][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 84.907594][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 84.908913][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 84.910177][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 84.911487][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 84.912893][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 84.914199][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 85.031160][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.040431][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.093635][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 85.125027][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.127328][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.130546][ T7] pwc: recv_control_msg error -71 req 02 val 2500 [ 85.131718][ T7] pwc: recv_control_msg error -71 req 02 val 2400 [ 85.132895][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 85.134134][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 85.135303][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 85.137106][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 85.144546][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 85.147095][ T7] pwc: Registered as video11. [ 85.147490][ T6089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.148185][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 85.149207][ T6089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.168086][ T7] usb 1-1: USB disconnect, device number 19 [ 85.418471][ T6114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.419810][ T6114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.605535][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.607053][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.769212][ T6136] binder: 6134:6136 tried to acquire reference to desc 0, got 1 instead [ 85.773719][ T6136] binder: 6134:6136 got transaction with invalid parent offset or type [ 85.775159][ T6136] binder: 6134:6136 transaction call to 6134:0 failed 74/29201/-22, size 80-24 line 3439 [ 85.776983][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.842252][ T6142] device syzkaller1 entered promiscuous mode [ 85.984391][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.985800][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.016932][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.018394][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.048743][ T4478] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 86.194690][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.196178][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.240915][ T4478] usb 1-1: Using ep0 maxpacket: 16 [ 86.243134][ T4478] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.244560][ T4478] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.247435][ T4478] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.248742][ T4478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.249849][ T4478] usb 1-1: Product: syz [ 86.250478][ T4478] usb 1-1: Manufacturer: syz [ 86.251177][ T4478] usb 1-1: SerialNumber: syz [ 86.283758][ T4321] Bluetooth: hci2: command 0x0419 tx timeout [ 86.473366][ T4478] usb 1-1: 0:2 : does not exist [ 86.476593][ T4478] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 86.489931][ T4478] usb 1-1: USB disconnect, device number 20 [ 86.543341][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.544881][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.674606][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.675934][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.714681][ T5680] udevd[5680]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.762060][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.763504][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.855895][ T6169] device syzkaller1 entered promiscuous mode [ 86.925263][ T6175] netlink: 'syz.5.641': attribute type 4 has an invalid length. [ 87.041184][ T6182] device syzkaller1 entered promiscuous mode [ 87.061856][ T27] audit: type=1400 audit(83.360:2): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6179 comm="syz.5.643" [ 87.062095][ T4321] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 87.609921][ T4478] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 87.802465][ T4478] usb 1-1: Using ep0 maxpacket: 32 [ 87.804784][ T4478] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.806234][ T4478] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 87.807736][ T4478] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.811838][ T4478] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.813309][ T4478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.814421][ T4478] usb 1-1: Product: syz [ 87.815016][ T4478] usb 1-1: Manufacturer: syz [ 87.815631][ T4478] usb 1-1: SerialNumber: syz [ 87.818786][ T4478] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 87.819968][ T4478] imon 1-1:155.0: unable to initialize intf0, err -19 [ 87.820971][ T4478] imon:imon_probe: failed to initialize context! [ 87.821934][ T4478] imon 1-1:155.0: unable to register, err -19 [ 87.926761][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.928632][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.222544][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.224360][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.304226][ T4321] Bluetooth: unknown link type 68 [ 88.331821][ T6217] binder: 6216:6217 tried to acquire reference to desc 0, got 1 instead [ 88.333527][ T6217] binder: 6216:6217 unknown command 0 [ 88.334323][ T6217] binder: 6216:6217 ioctl c0306201 20000440 returned -22 [ 88.360274][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.362699][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.601649][ T6243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.602977][ T6243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.783046][ T6246] sctp: Trying to GSO but underlying device doesn't support it. [ 88.929917][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.933345][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.185193][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.187321][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.244884][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.247709][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.603057][ T4323] Bluetooth: hci2: hardware error 0xff [ 89.743388][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.744855][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.735133][ T6302] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.737688][ T6302] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.742919][ T6302] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 90.745142][ T6302] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.746320][ T6302] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 90.750281][ T6302] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 90.751995][ T6302] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 90.753108][ T6302] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 90.756426][ T6302] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 90.758182][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.759610][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.764487][ T6336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.769528][ T6336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.886207][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.888594][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.227652][ T4477] usb 1-1: USB disconnect, device number 21 [ 91.329552][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.330972][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.346157][ T6365] ucma_write: process 66 (syz.5.713) changed security contexts after opening file descriptor, this is not allowed. [ 91.426156][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.431658][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.437592][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.443697][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.813125][ T4477] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 91.834509][ T4323] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 91.919924][ T6404] device syzkaller0 entered promiscuous mode [ 92.005840][ T4477] usb 1-1: Using ep0 maxpacket: 8 [ 92.011509][ T4477] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 92.012841][ T4477] usb 1-1: config 0 has no interface number 0 [ 92.013774][ T4477] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 92.015383][ T4477] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 92.016845][ T4477] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 92.018572][ T4477] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 92.019862][ T4477] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.022038][ T4477] usb 1-1: config 0 descriptor?? [ 92.024163][ T4477] ldusb 1-1:0.55: Interrupt in endpoint not found [ 92.091560][ T4323] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.192655][ T6418] device syzkaller0 entered promiscuous mode [ 92.264550][ T6418] tipc: Started in network mode [ 92.265395][ T6418] tipc: Node identity a29f647884f8, cluster identity 4711 [ 92.266605][ T6418] tipc: Enabled bearer , priority 0 [ 92.268261][ T14] usb 1-1: USB disconnect, device number 22 [ 92.334034][ T6417] tipc: Resetting bearer [ 92.467011][ T6417] tipc: Disabling bearer [ 92.498579][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 92.576119][ T6463] device syzkaller0 entered promiscuous mode [ 92.663406][ T6465] xt_connbytes: Forcing CT accounting to be enabled [ 92.766487][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 92.947498][ T4323] Bluetooth: hci4: command 0x0c1a tx timeout [ 92.948500][ T4323] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.154330][ T6519] netlink: 'syz.3.778': attribute type 12 has an invalid length. [ 93.155663][ T6519] netlink: 'syz.3.778': attribute type 29 has an invalid length. [ 93.156865][ T6519] netlink: 148 bytes leftover after parsing attributes in process `syz.3.778'. [ 93.158388][ T6519] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 93.159660][ T6519] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 93.308227][ T6528] tipc: Started in network mode [ 93.309329][ T6528] tipc: Node identity 9, cluster identity 4711 [ 93.310910][ T6528] tipc: Node number set to 9 [ 94.315838][ T4321] Bluetooth: hci1: command 0x0406 tx timeout [ 95.112949][ T6582] tipc: Started in network mode [ 95.113805][ T6582] tipc: Node identity e2bd44d62444, cluster identity 4711 [ 95.114832][ T6582] tipc: Enabled bearer , priority 0 [ 95.116546][ T6589] device syzkaller0 entered promiscuous mode [ 95.120907][ T6586] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 95.136107][ T6570] tipc: Resetting bearer [ 95.171437][ T4323] Bluetooth: hci3: command 0x0406 tx timeout [ 95.172344][ T4323] Bluetooth: hci4: command 0x0406 tx timeout [ 95.179451][ T6570] tipc: Disabling bearer [ 95.459282][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.5.822'. [ 95.460738][ T6640] device bridge1 entered promiscuous mode [ 95.507776][ T6653] netlink: 64 bytes leftover after parsing attributes in process `syz.5.825'. [ 95.562264][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.827'. [ 95.645538][ T6667] netlink: 76 bytes leftover after parsing attributes in process `syz.3.831'. [ 95.835764][ T6692] device syzkaller0 entered promiscuous mode [ 96.912310][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.854'. [ 97.024914][ T6772] netlink: 'syz.0.860': attribute type 3 has an invalid length. [ 97.065786][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.859'. [ 97.136977][ T24] hid-generic 0005:0C45:1012.0004: unknown main item tag 0x1 [ 97.138185][ T24] hid-generic 0005:0C45:1012.0004: ignoring exceeding usage max [ 97.139936][ T24] hid-generic 0005:0C45:1012.0004: unknown main item tag 0x4 [ 97.140994][ T24] hid-generic 0005:0C45:1012.0004: unknown main item tag 0x5 [ 97.142100][ T24] hid-generic 0005:0C45:1012.0004: unknown main item tag 0xd [ 97.143109][ T24] hid-generic 0005:0C45:1012.0004: item fetching failed at offset 31/60 [ 97.144473][ T24] hid-generic: probe of 0005:0C45:1012.0004 failed with error -22 [ 97.275306][ T6806] device syzkaller0 entered promiscuous mode [ 97.530198][ T6834] tipc: Cannot configure node identity twice [ 97.784761][ T6865] netlink: 'syz.2.889': attribute type 8 has an invalid length. [ 97.786055][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 97.806864][ T6865] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.808428][ T6865] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.809639][ T6865] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.810906][ T6865] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.922651][ T6870] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.929376][ T6865] netlink: 'syz.2.889': attribute type 8 has an invalid length. [ 97.930682][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 98.106658][ T6870] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.221686][ T6870] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.225439][ T6904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.226666][ T6904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.280219][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.900'. [ 98.340022][ T6870] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.575037][ T6870] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.587271][ T6870] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.591029][ T6870] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.613927][ T6870] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.747570][ T250] nci: nci_ntf_packet: unsupported ntf opcode 0xf2e [ 98.905075][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 99.790495][ T7034] tipc: Started in network mode [ 99.791317][ T7034] tipc: Node identity f6a861942a11, cluster identity 4711 [ 99.793887][ T7034] tipc: Enabled bearer , priority 0 [ 99.797377][ T7022] netlink: 'syz.2.934': attribute type 10 has an invalid length. [ 99.808121][ T7034] device syzkaller0 entered promiscuous mode [ 99.815015][ T7034] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 99.891309][ T7034] tipc: Resetting bearer [ 99.902965][ T7034] tipc: Resetting bearer [ 99.974410][ T7034] tipc: Disabling bearer [ 99.977433][ T7055] device syzkaller0 entered promiscuous mode [ 100.832468][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.833925][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.882761][ T4478] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 101.079016][ T4478] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 101.080583][ T4478] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.081480][ T4478] usb 1-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 101.082714][ T4478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.085621][ T4478] usb 1-1: config 0 descriptor?? [ 101.087622][ T7129] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.430095][ T7192] vcan0: tx drop: invalid sa for name 0x0040000000000000 [ 101.522557][ T4478] sony 0003:054C:0374.0005: unknown main item tag 0x0 [ 101.523726][ T4478] sony 0003:054C:0374.0005: item fetching failed at offset 3/5 [ 101.532085][ T4478] sony 0003:054C:0374.0005: parse failed [ 101.535259][ T4478] sony: probe of 0003:054C:0374.0005 failed with error -22 [ 101.574151][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 101.601491][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.603069][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.752427][ T24] usb 1-1: USB disconnect, device number 23 [ 102.697395][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.706237][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.747699][ T7309] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.753071][ T7309] device syzkaller0 entered promiscuous mode [ 102.778602][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.782311][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.810240][ T7309] tipc: Enabled bearer , priority 0 [ 102.842436][ T7308] tipc: Resetting bearer [ 102.937482][ T7308] tipc: Disabling bearer [ 103.286582][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'. [ 103.289691][ T7389] device geneve2 entered promiscuous mode [ 103.347737][ T7392] device syzkaller0 entered promiscuous mode [ 104.127771][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 104.159825][ T7417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.161306][ T7417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.293481][ T7411] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 104.388860][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 104.439718][ T7441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.543441][ T7441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.546133][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 104.584846][ T7450] device bond0 entered promiscuous mode [ 104.585864][ T7450] device bond_slave_0 entered promiscuous mode [ 104.586845][ T7450] device bond_slave_1 entered promiscuous mode [ 104.626631][ T7450] device ip6gretap0 entered promiscuous mode [ 104.669779][ T7450] device hsr1 entered promiscuous mode [ 104.736355][ T7441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.801872][ T7441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.805063][ T7468] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1083'. [ 104.940149][ T7441] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.953312][ T7441] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.956711][ T7441] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.962620][ T7441] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.977374][ T7487] netlink: 'syz.0.1092': attribute type 3 has an invalid length. [ 104.999636][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 105.051033][ T7493] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 105.328827][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 105.445659][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 105.722477][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 105.823144][ T7562] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1125'. [ 106.282283][ T7620] device syzkaller0 entered promiscuous mode [ 106.309477][ T7623] device syzkaller0 entered promiscuous mode [ 106.315518][ T7623] ------------[ cut here ]------------ [ 106.316587][ T7623] WARNING: CPU: 1 PID: 7623 at include/linux/skbuff.h:2844 em_nbyte_match+0x294/0x350 [ 106.318046][ T7623] Modules linked in: [ 106.318652][ T7623] CPU: 1 PID: 7623 Comm: syz.2.1154 Not tainted syzkaller #0 [ 106.319826][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 106.321391][ T7623] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 106.322563][ T7623] pc : em_nbyte_match+0x294/0x350 [ 106.323300][ T7623] lr : em_nbyte_match+0x294/0x350 [ 106.324037][ T7623] sp : ffff800021307000 [ 106.324687][ T7623] x29: ffff800021307000 x28: 0000000000000001 x27: 000000000000ffff [ 106.325845][ T7623] x26: 1fffe0001ba0223e x25: 1fffe000194769c0 x24: dfff800000000000 [ 106.327007][ T7623] x23: 000000000000ffff x22: ffff0000dd0111f6 x21: ffff0000ca3b4e02 [ 106.328127][ T7623] x20: ffff0000dd011140 x19: ffff0000ca3b4e00 x18: 0000000000000000 [ 106.329273][ T7623] x17: ffff8000181f9000 x16: ffff8000082e7914 x15: 0000000000000002 [ 106.330399][ T7623] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000080000 [ 106.331492][ T7623] x11: 0000000000000666 x10: ffff80002785a000 x9 : ffff80001002fc2c [ 106.332616][ T7623] x8 : 0000000000000667 x7 : 0000000000000000 x6 : 000000000000003f [ 106.333713][ T7623] x5 : 0000000000000040 x4 : ffffffffffffffe0 x3 : 0000000000000020 [ 106.334847][ T7623] x2 : 0000000000000000 x1 : 000000000000ffff x0 : 000000000000ffff [ 106.335941][ T7623] Call trace: [ 106.336412][ T7623] em_nbyte_match+0x294/0x350 [ 106.337102][ T7623] __tcf_em_tree_match+0x164/0x5bc [ 106.337806][ T7623] basic_classify+0x138/0x30c [ 106.338424][ T7623] tcf_classify+0x1b8/0x9c8 [ 106.339035][ T7623] multiq_enqueue+0x100/0x404 [ 106.339657][ T7623] dev_qdisc_enqueue+0x5c/0x38c [ 106.340303][ T7623] __dev_queue_xmit+0xad0/0x309c [ 106.340967][ T7623] dev_queue_xmit+0x24/0x34 [ 106.341574][ T7623] packet_sendmsg+0x2f6c/0x3fac [ 106.342225][ T7623] ____sys_sendmsg+0x5b8/0x918 [ 106.342898][ T7623] __sys_sendmsg+0x25c/0x320 [ 106.343598][ T7623] __arm64_sys_sendmsg+0x80/0x94 [ 106.344411][ T7623] invoke_syscall+0x98/0x2bc [ 106.345124][ T7623] el0_svc_common+0x138/0x258 [ 106.345826][ T7623] do_el0_svc+0x58/0x13c [ 106.346412][ T7623] el0_svc+0x58/0x138 [ 106.347040][ T7623] el0t_64_sync_handler+0x84/0xf0 [ 106.347768][ T7623] el0t_64_sync+0x18c/0x190 [ 106.348415][ T7623] irq event stamp: 3199 [ 106.349035][ T7623] hardirqs last enabled at (3197): [] el0_svc_common+0x9c/0x258 [ 106.350340][ T7623] hardirqs last disabled at (3199): [] el1_dbg+0x24/0x80 [ 106.351555][ T7623] softirqs last enabled at (3192): [] local_bh_enable+0x10/0x34 [ 106.352881][ T7623] softirqs last disabled at (3198): [] local_bh_disable+0x10/0x34 [ 106.354178][ T7623] ---[ end trace 0000000000000000 ]---