last executing test programs: 12.980268184s ago: executing program 1 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.912700419s ago: executing program 2 (id=1977): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000040000002c000180060001"], 0x40}}, 0x0) 10.797741452s ago: executing program 2 (id=1979): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 10.785039786s ago: executing program 0 (id=1981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) accept4$inet6(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 10.482291459s ago: executing program 2 (id=1982): r0 = socket(0x28, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x100000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000440), 0x10) 9.517751722s ago: executing program 4 (id=1983): semtimedop(0x0, &(0x7f0000000500)=[{0x3, 0xf876, 0x1000}, {0x2, 0x40, 0x1000}], 0x2, &(0x7f0000000540)={0x0, 0x989680}) 9.409172008s ago: executing program 0 (id=1984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)='|', 0x1}], 0x1}, 0x0) 9.317426391s ago: executing program 2 (id=1985): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24040885) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 9.163957817s ago: executing program 4 (id=1986): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0xc, 0x6, 0x538, 0x750, 0x0, 0x450, 0x248, 0x248, 0x840, 0x840, 0x840, 0x840, 0x840, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x13, "43b8213dcb0c975cf3f720219c7009f89bcb6d462e1de44e324524a4257d"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 8.930106577s ago: executing program 4 (id=1987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) 8.865313038s ago: executing program 0 (id=1988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x8824000) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe888000000000000000000000000001ff020000000000000000000000000001030090780000000060fd906300003a00ff0100000000000001fc0100"/91], 0x0) recvfrom(r5, 0x0, 0x0, 0x2000, &(0x7f0000000140)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) 8.56451291s ago: executing program 4 (id=1990): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x60843, 0x0) 7.861173813s ago: executing program 4 (id=1991): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) 7.850853937s ago: executing program 0 (id=1992): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.467775587s ago: executing program 3 (id=1996): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000f6ff000000000000000000850000009b0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8eaffffb702000008000000b703000000000300850000009b000000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 4.473863715s ago: executing program 3 (id=1997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.393663449s ago: executing program 3 (id=1998): r0 = socket(0x40000000015, 0x5, 0x0) unshare(0x20000400) connect$inet(r0, 0x0, 0x0) 4.316720616s ago: executing program 3 (id=1999): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x1) ioctl$KDSIGACCEPT(r1, 0x800455c9, 0x20000001d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$kcm(0x2, 0xa, 0x2) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 4.05726107s ago: executing program 1 (id=2000): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) 3.992866796s ago: executing program 1 (id=2001): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap$xdp(&(0x7f000083d000/0x3000)=nil, 0x3000, 0xcf72427647ba2179, 0x4000010, 0xffffffffffffffff, 0x80000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap$dsp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000b, 0x10012, r4, 0x0) 2.461840108s ago: executing program 1 (id=2002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9eff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 2.046266276s ago: executing program 3 (id=2003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=@newchain={0x5b8, 0x64, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0xfff2, 0x5}, {0xffe0, 0xd}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0x3}}]}}, @f_tcindex={{0xc}, {0x558, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x3}, @TCA_TCINDEX_POLICE={0x430, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x324, 0xc, 0x0, 0x0, 0x7f, 0x5, 0xbd, 0x8, 0x736a, 0x9, 0x4, 0xffffffff, 0xfffffff8, 0x5, 0x80, 0x8000, 0x3, 0x0, 0x0, 0x1, 0x1, 0xfffffffc, 0x4, 0x0, 0xe68, 0x7, 0x3000, 0x6, 0x8, 0x3, 0xff, 0x6, 0x1, 0x6, 0x7, 0x5, 0xac, 0x0, 0x200, 0x1, 0x8, 0x80000000, 0x101, 0x10001, 0xfffffffd, 0x1e, 0xfc, 0xfffffffa, 0x6, 0x9, 0x3c2, 0x84, 0xffffff3d, 0xbc, 0x8, 0x8, 0x80, 0x7, 0x74, 0x8, 0xfffffff7, 0x1000, 0x4, 0x4, 0x3, 0x1, 0xc, 0x7a97, 0x16, 0x7, 0x8, 0x7, 0x6, 0x7ff, 0x9, 0x7, 0x11c8, 0x0, 0x5, 0x9, 0x2, 0xf, 0xe367, 0x4, 0x4, 0x10, 0x3, 0x0, 0xff, 0x1, 0x1f90, 0x7, 0xbc8, 0x0, 0x1, 0x6, 0x810, 0x0, 0x1000000, 0x10001, 0x6, 0xff, 0x2, 0xd, 0x10001, 0x1d, 0x81, 0x7, 0x2, 0x1, 0x8, 0x10, 0x6, 0x5, 0x8000a6, 0x5, 0x7, 0x0, 0x80000001, 0xddc, 0x9, 0x7, 0x10001, 0x1, 0x7, 0x1ff, 0x4, 0x95, 0x7, 0x7, 0x6, 0x0, 0x7, 0x7, 0xf, 0x800, 0xd, 0x8, 0x8, 0x69, 0xc2b, 0x3, 0x1, 0x5, 0x0, 0x1, 0x5, 0x3, 0x7, 0x4, 0x2, 0x24f8, 0x7, 0x2, 0x2, 0x2, 0x7, 0x9, 0x3d, 0x3, 0x6000000, 0x1, 0x6, 0x4, 0xffffffff, 0x10, 0xfcf, 0x1, 0x2, 0x3, 0x101, 0x0, 0x100, 0x800, 0x1000, 0x6, 0x6, 0x30, 0x8, 0x4, 0x7fffffff, 0xffffff09, 0x4, 0x0, 0xa, 0x3, 0x1, 0x3, 0x7, 0x9, 0xdb7, 0x0, 0x9, 0x10001, 0x3c4, 0x6, 0x9, 0xfffffff2, 0x7, 0xc, 0x6, 0x76a, 0x3809287f, 0x9, 0x7fff, 0x89, 0x9, 0x4, 0x10, 0x3, 0x1, 0x0, 0x5, 0xf, 0x4, 0x6, 0x6, 0x19f, 0xffffffff, 0x400, 0x3, 0x7, 0x8000, 0xa, 0x8, 0x3, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x7, 0x40, 0x9, 0xffffffff, 0x8, 0x10000, 0xd, 0x7, 0xffff, 0xf4, 0xa7, 0xc, 0x5, 0x338, 0x0, 0xf, 0x3ff, 0xf4ec, 0x10001, 0x101, 0x6, 0x0, 0x8, 0x10001]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_TCINDEX_ACT={0x11c, 0x7, [@m_gact={0x118, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0xea, 0x6, "5dbacd3ba2cf9951c2aaf65b3403acb7bbc699233dc4f801cc6e3ae3da1527ef217ca2acb02b24b4012f971622898d4e041cfb3b09b719812c01a5053d65601480da08cce53c7114aebfcfbdfc45b1cfd453836a51925d19175e1626e6e0ef3334a6bbd247aea5bbdde1e82463f86df6f88214e0b7ba0304128198c6ab5fc14a5654ca86645abab13583108c108a8126244f51be459b5d8dde89eef51c1695c5c6133fb43694294c53dc11ecb03f0ab39218ffee828d175fdad146c4985e615e552f0f6bdafa2b9e39ca8f5097840a2e4ee5684df82552988e9c5669008856d946a5a8ada07d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 1.268539649s ago: executing program 0 (id=2004): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x800, 0x0, 0xfd, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000240)='./file2\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./bus/file0\x00', 0x2) 1.220007488s ago: executing program 2 (id=2005): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000002c0)=@canfd={{0x3}, 0x35, 0x4, 0x0, 0x0, "edc426d7808c0f22c7303b0efc701341cd975854b39e79c1b80e83ba4c77a986680970565daf14987a164b8ec117d0ebddd0e99d72e057e86ee2460a9380669c"}, 0x48}}, 0x0) 1.146524559s ago: executing program 3 (id=2006): socket(0x28, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) socket$inet_smc(0x2b, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x100000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) 1.087011088s ago: executing program 1 (id=2007): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000092095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0}, 0x18) 1.045949246s ago: executing program 2 (id=2008): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448e1, &(0x7f0000000180)={0x0, 0x0, "140048", 0x4}) 666.88345ms ago: executing program 4 (id=2009): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r4, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10122, 0x0) sendmsg$sock(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 588.546112ms ago: executing program 1 (id=2010): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=2011): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.100' (ED25519) to the list of known hosts. [ 33.188427][ T6408] cgroup: Unknown subsys name 'net' [ 33.407005][ T6408] cgroup: Unknown subsys name 'cpuset' [ 33.411147][ T6408] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.834546][ T6408] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.253948][ T6426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.256477][ T6426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.259267][ T6428] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.261472][ T6428] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.264391][ T6428] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.266501][ T6428] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.269797][ T6428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.271794][ T6428] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.273760][ T6428] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.277533][ T6426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.284127][ T6426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.287741][ T6426] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.294608][ T6426] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.299044][ T6428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.301238][ T6428] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.303449][ T6428] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.306196][ T6434] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.306670][ T6423] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.310743][ T6423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.312767][ T6423] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.312821][ T6436] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.317045][ T6436] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.318190][ T6423] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.318609][ T6436] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.322497][ T6436] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.325393][ T6423] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.327359][ T6423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.334995][ T5990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.337689][ T5990] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.339734][ T5990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.573032][ T6420] chnl_net:caif_netlink_parms(): no params data found [ 35.660293][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 35.663717][ T6421] chnl_net:caif_netlink_parms(): no params data found [ 35.702584][ T6432] chnl_net:caif_netlink_parms(): no params data found [ 35.724015][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.726223][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.728028][ T6420] bridge_slave_0: entered allmulticast mode [ 35.730107][ T6420] bridge_slave_0: entered promiscuous mode [ 35.733594][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.736298][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.737979][ T6420] bridge_slave_1: entered allmulticast mode [ 35.739903][ T6420] bridge_slave_1: entered promiscuous mode [ 35.774839][ T6430] chnl_net:caif_netlink_parms(): no params data found [ 35.819687][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.821410][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.823039][ T6425] bridge_slave_0: entered allmulticast mode [ 35.824998][ T6425] bridge_slave_0: entered promiscuous mode [ 35.828675][ T6420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.830657][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.832125][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.833684][ T6425] bridge_slave_1: entered allmulticast mode [ 35.836239][ T6425] bridge_slave_1: entered promiscuous mode [ 35.847097][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.848834][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.850397][ T6421] bridge_slave_0: entered allmulticast mode [ 35.852451][ T6421] bridge_slave_0: entered promiscuous mode [ 35.860128][ T6420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.862272][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.863892][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.865947][ T6421] bridge_slave_1: entered allmulticast mode [ 35.867894][ T6421] bridge_slave_1: entered promiscuous mode [ 35.911072][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.916165][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.917874][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.919518][ T6432] bridge_slave_0: entered allmulticast mode [ 35.921459][ T6432] bridge_slave_0: entered promiscuous mode [ 35.930868][ T6420] team0: Port device team_slave_0 added [ 35.943222][ T6421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.946756][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.949770][ T6421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.962239][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.963816][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.970338][ T6432] bridge_slave_1: entered allmulticast mode [ 35.972305][ T6432] bridge_slave_1: entered promiscuous mode [ 35.974896][ T6420] team0: Port device team_slave_1 added [ 35.987000][ T6425] team0: Port device team_slave_0 added [ 35.989975][ T6425] team0: Port device team_slave_1 added [ 36.030509][ T6421] team0: Port device team_slave_0 added [ 36.036880][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.038545][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.040297][ T6430] bridge_slave_0: entered allmulticast mode [ 36.042141][ T6430] bridge_slave_0: entered promiscuous mode [ 36.045535][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.047128][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.048907][ T6430] bridge_slave_1: entered allmulticast mode [ 36.050946][ T6430] bridge_slave_1: entered promiscuous mode [ 36.054218][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.057311][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.058834][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.065023][ T6420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.069878][ T6421] team0: Port device team_slave_1 added [ 36.071682][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.073313][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.079223][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.093635][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.099244][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.100844][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.106669][ T6420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.114007][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.116369][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.122095][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.127393][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.145441][ T6432] team0: Port device team_slave_0 added [ 36.153530][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.164153][ T6432] team0: Port device team_slave_1 added [ 36.171889][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.173463][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.182842][ T6421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.211463][ T6421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.212953][ T6421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.218665][ T6421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.223074][ T6430] team0: Port device team_slave_0 added [ 36.226437][ T6430] team0: Port device team_slave_1 added [ 36.256130][ T6425] hsr_slave_0: entered promiscuous mode [ 36.304659][ T6425] hsr_slave_1: entered promiscuous mode [ 36.355287][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.356945][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.362634][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.366457][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.367986][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.373635][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.416278][ T6420] hsr_slave_0: entered promiscuous mode [ 36.465062][ T6420] hsr_slave_1: entered promiscuous mode [ 36.504492][ T6420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.506797][ T6420] Cannot create hsr debugfs directory [ 36.512323][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.514014][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.520306][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.543186][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.545030][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.550904][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.596638][ T6421] hsr_slave_0: entered promiscuous mode [ 36.634797][ T6421] hsr_slave_1: entered promiscuous mode [ 36.674469][ T6421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.676329][ T6421] Cannot create hsr debugfs directory [ 36.735978][ T6432] hsr_slave_0: entered promiscuous mode [ 36.774885][ T6432] hsr_slave_1: entered promiscuous mode [ 36.814459][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.816175][ T6432] Cannot create hsr debugfs directory [ 36.876540][ T6430] hsr_slave_0: entered promiscuous mode [ 36.924806][ T6430] hsr_slave_1: entered promiscuous mode [ 36.965418][ T6430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.966982][ T6430] Cannot create hsr debugfs directory [ 37.145590][ T6425] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.151766][ T6425] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.158743][ T6425] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.161926][ T6430] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.165889][ T6430] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.169106][ T6430] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.173833][ T6430] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.178668][ T6425] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.209058][ T6432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.220037][ T6432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.236658][ T6432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.240196][ T6432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.267365][ T6420] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.274732][ T6420] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.278057][ T6420] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.285374][ T6426] Bluetooth: hci2: command tx timeout [ 37.307070][ T6420] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.324158][ T6421] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.328269][ T6421] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.331653][ T6421] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.336292][ T6421] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.367273][ T6426] Bluetooth: hci4: command tx timeout [ 37.368934][ T6426] Bluetooth: hci0: command tx timeout [ 37.370476][ T6426] Bluetooth: hci1: command tx timeout [ 37.371975][ T6426] Bluetooth: hci3: command tx timeout [ 37.390133][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.415754][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.442842][ T2135] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.444602][ T2135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.448835][ T2135] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.450786][ T2135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.473039][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.480157][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.490840][ T6425] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.513389][ T6420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.519423][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.520955][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.525095][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.526701][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.560637][ T6420] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.568220][ T6425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.580872][ T6432] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.595606][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.599499][ T2135] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.601164][ T2135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.624582][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.626358][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.629185][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.630763][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.633310][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.634995][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.658558][ T6421] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.675214][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.677056][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.680506][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.682127][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.730012][ T6421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.732515][ T6421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.770223][ T6432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.772710][ T6432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.803040][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.810384][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.879055][ T6430] veth0_vlan: entered promiscuous mode [ 37.883315][ T6430] veth1_vlan: entered promiscuous mode [ 37.914279][ T6421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.988411][ T6421] veth0_vlan: entered promiscuous mode [ 37.992761][ T6421] veth1_vlan: entered promiscuous mode [ 38.007714][ T6430] veth0_macvtap: entered promiscuous mode [ 38.020256][ T6420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.023228][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.030488][ T6430] veth1_macvtap: entered promiscuous mode [ 38.043718][ T6421] veth0_macvtap: entered promiscuous mode [ 38.048005][ T6421] veth1_macvtap: entered promiscuous mode [ 38.071877][ T6425] veth0_vlan: entered promiscuous mode [ 38.080232][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.088401][ T6425] veth1_vlan: entered promiscuous mode [ 38.096291][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.098836][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.102042][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.106849][ T6421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.110677][ T6421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.113258][ T6421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.115793][ T6421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.118128][ T6421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.141742][ T6420] veth0_vlan: entered promiscuous mode [ 38.146852][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.149490][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.152438][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.164171][ T6432] veth0_vlan: entered promiscuous mode [ 38.175629][ T6430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.177897][ T6430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.179929][ T6430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.181880][ T6430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.188383][ T6432] veth1_vlan: entered promiscuous mode [ 38.202750][ T6425] veth0_macvtap: entered promiscuous mode [ 38.207634][ T6420] veth1_vlan: entered promiscuous mode [ 38.266543][ T6425] veth1_macvtap: entered promiscuous mode [ 38.293952][ T6432] veth0_macvtap: entered promiscuous mode [ 38.301545][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.303783][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.306990][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.309397][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.312332][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.324196][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.327102][ T6432] veth1_macvtap: entered promiscuous mode [ 38.327331][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.350491][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.355708][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.360789][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.363132][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.366064][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.368390][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.371261][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.373202][ T6420] veth0_macvtap: entered promiscuous mode [ 38.379364][ T6420] veth1_macvtap: entered promiscuous mode [ 38.381587][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.383822][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.386957][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.389203][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.391276][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.393750][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.400209][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.418577][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.420875][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.422963][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.425991][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.428336][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.430736][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.432869][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.435707][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.439297][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.442670][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.449162][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.451751][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.453857][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.457932][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.460352][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.463149][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.469061][ T6432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.470884][ T6432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.472850][ T6432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.475256][ T6432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.485227][ T6425] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.487101][ T6425] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.489008][ T6425] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.491056][ T6425] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.503950][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.506636][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.508851][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.511270][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.513554][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.516491][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.519022][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.521473][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.525647][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.529807][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.531457][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.536595][ T768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.540248][ T768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.547620][ T6420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.549548][ T6420] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.551586][ T6420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.553694][ T6420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.620205][ T6421] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.663052][ T701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.666452][ T701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.755527][ T316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.757684][ T316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.815541][ T701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.817331][ T701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.871718][ T2135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.873548][ T2135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.937530][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.937554][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.951586][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.953486][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.979611][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 39.196307][ T6533] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.236758][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 39.369099][ T6429] Bluetooth: hci2: command tx timeout [ 39.445061][ T6429] Bluetooth: hci3: command tx timeout [ 39.446655][ T6429] Bluetooth: hci1: command tx timeout [ 39.447957][ T6429] Bluetooth: hci0: command tx timeout [ 39.449132][ T6429] Bluetooth: hci4: command tx timeout [ 39.517073][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15'. [ 39.546302][ T6550] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 39.554131][ T6550] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 39.577218][ T6550] netlink: 15363 bytes leftover after parsing attributes in process `syz.0.17'. [ 39.590346][ T6546] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 39.618323][ T6546] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.630143][ T6546] bond0: (slave team0): Enslaving as an active interface with an up link [ 39.788008][ T6560] Bluetooth: MGMT ver 1.23 [ 39.797102][ T6559] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.903315][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 40.100461][ T6573] Illegal XDP return value 3647044424 on prog (id 1) dev N/A, expect packet loss! [ 40.142400][ T6578] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 40.176697][ T6581] netlink: 'syz.4.32': attribute type 1 has an invalid length. [ 40.178387][ T6581] netlink: 'syz.4.32': attribute type 4 has an invalid length. [ 40.180025][ T6581] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.32'. [ 40.197554][ T6581] netlink: 'syz.4.32': attribute type 10 has an invalid length. [ 40.213115][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.232876][ T6581] bond0: (slave team0): Enslaving as an active interface with an up link [ 40.570996][ T6610] tipc: Started in network mode [ 40.590703][ T6610] tipc: Node identity 3ad72468ce74, cluster identity 4711 [ 40.620195][ T6610] tipc: Enabled bearer , priority 0 [ 40.697382][ T6610] syzkaller0: entered promiscuous mode [ 40.698693][ T6610] syzkaller0: entered allmulticast mode [ 40.700793][ T6610] tipc: Resetting bearer [ 40.732071][ T316] tipc: Resetting bearer [ 40.737174][ T6630] Zero length message leads to an empty skb [ 40.758876][ T6622] team0: Device ipvlan2 failed to register rx_handler [ 40.848509][ T6609] tipc: Resetting bearer [ 41.444729][ T6426] Bluetooth: hci2: command tx timeout [ 41.525682][ T6429] Bluetooth: hci0: command tx timeout [ 41.525867][ T5990] Bluetooth: hci1: command tx timeout [ 41.526867][ T6429] Bluetooth: hci3: command tx timeout [ 41.529637][ T6426] Bluetooth: hci4: command tx timeout [ 41.685430][ T6472] tipc: Node number set to 4104332392 [ 43.525817][ T6426] Bluetooth: hci2: command tx timeout [ 43.604470][ T6426] Bluetooth: hci1: command tx timeout [ 43.605759][ T6426] Bluetooth: hci0: command tx timeout [ 43.615170][ T53] Bluetooth: hci4: command tx timeout [ 43.615335][ T6426] Bluetooth: hci3: command tx timeout [ 52.031663][ T6609] tipc: Disabling bearer [ 52.526232][ T6686] syz.1.69 uses obsolete (PF_INET,SOCK_PACKET) [ 55.003629][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85'. [ 56.149957][ T6753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 56.316299][ T6761] netlink: 'syz.2.101': attribute type 4 has an invalid length. [ 56.680521][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 57.006228][ T6803] bridge_slave_1: left allmulticast mode [ 57.046933][ T6803] bridge_slave_1: left promiscuous mode [ 57.090403][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.288479][ T6803] bridge_slave_0: left allmulticast mode [ 57.310130][ T6803] bridge_slave_0: left promiscuous mode [ 57.314675][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.326120][ T6809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 57.614968][ T6829] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 57.616823][ T6829] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.119'. [ 57.620906][ T6829] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 58.526196][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.128'. [ 58.551890][ T6866] netlink: 96 bytes leftover after parsing attributes in process `syz.4.130'. [ 58.756987][ T6880] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 58.758778][ T6880] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.136'. [ 58.785658][ T6880] netlink: 'syz.0.136': attribute type 10 has an invalid length. [ 59.149665][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.145'. [ 59.172768][ T6914] netlink: 152 bytes leftover after parsing attributes in process `syz.1.142'. [ 59.926887][ T6922] netlink: 'syz.4.148': attribute type 1 has an invalid length. [ 59.935671][ T6922] netlink: 'syz.4.148': attribute type 10 has an invalid length. [ 60.261194][ T6914] __nla_validate_parse: 1 callbacks suppressed [ 60.261216][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 60.311323][ T6914] warning: `syz.1.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.542609][ T6957] netlink: 32 bytes leftover after parsing attributes in process `syz.3.159'. [ 60.775077][ T6967] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 60.776866][ T6967] netlink: 'syz.4.166': attribute type 4 has an invalid length. [ 60.778487][ T6967] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.166'. [ 60.814678][ T6967] netlink: 'syz.4.166': attribute type 10 has an invalid length. [ 61.039972][ T6975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.167'. [ 61.536887][ T6999] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 61.540268][ T6999] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 61.544218][ T6999] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.560543][ T6999] netlink: 'syz.2.177': attribute type 10 has an invalid length. [ 61.608992][ T6999] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.625691][ T6999] bond0: (slave team0): Enslaving as an active interface with an up link [ 62.859293][ T7053] netlink: 'syz.4.191': attribute type 1 has an invalid length. [ 62.867970][ T7053] netlink: 'syz.4.191': attribute type 4 has an invalid length. [ 62.874138][ T7053] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.191'. [ 62.880101][ T7053] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 63.154578][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 63.357707][ T7083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.198'. [ 63.359709][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 63.361705][ T7083] netlink: 31 bytes leftover after parsing attributes in process `syz.2.198'. [ 63.363800][ T7083] netlink: 'syz.2.198': attribute type 2 has an invalid length. [ 63.448924][ T7083] netlink: 'syz.2.198': attribute type 6 has an invalid length. [ 64.498876][ T2356] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.721210][ T7145] ebt_among: dst integrity fail: 101 [ 65.632852][ T7195] __nla_validate_parse: 1 callbacks suppressed [ 65.632870][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.231'. [ 65.943424][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 66.127873][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 66.253784][ T7232] netlink: 152 bytes leftover after parsing attributes in process `syz.3.249'. [ 66.636343][ T7245] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 66.647513][ T7245] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 66.652031][ T7245] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 66.704153][ T7249] dccp_v6_rcv: dropped packet with invalid checksum [ 66.994649][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'. [ 67.119083][ T7263] syzkaller0: entered allmulticast mode [ 67.160929][ T7263] syzkaller0 (unregistering): left allmulticast mode [ 67.486509][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.272'. [ 67.633368][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 68.920571][ T7343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.287'. [ 69.755796][ T2263] cfg80211: failed to load regulatory.db [ 70.925983][ T7394] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.306'. [ 70.929258][ T7394] netlink: 'syz.3.306': attribute type 10 has an invalid length. [ 70.936027][ T7396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.305'. [ 71.070758][ T7394] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.073042][ T7394] bond0: (slave team0): Enslaving as an active interface with an up link [ 74.423084][ T7490] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.328'. [ 74.458020][ T7490] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 75.566205][ T7505] ax25_connect(): syz.0.332 uses autobind, please contact jreuter@yaina.de [ 75.818979][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.820983][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.298887][ T7407] Set syz1 is full, maxelem 65536 reached [ 76.450584][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.452714][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.456873][ T7539] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 76.459516][ T7539] netlink: 'syz.1.342': attribute type 4 has an invalid length. [ 76.466654][ T7539] netlink: 15363 bytes leftover after parsing attributes in process `syz.1.342'. [ 76.487726][ T7539] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 76.735595][ T7539] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.796453][ T7539] bond0: (slave team0): Enslaving as an active interface with an up link [ 76.913626][ T7548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'. [ 78.044616][ T7573] batadv_slave_1: entered promiscuous mode [ 78.059405][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.207880][ T7580] netlink: 'syz.4.354': attribute type 1 has an invalid length. [ 78.209889][ T7580] netlink: 'syz.4.354': attribute type 4 has an invalid length. [ 78.212501][ T7580] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.354'. [ 78.230620][ T7580] netlink: 'syz.4.354': attribute type 10 has an invalid length. [ 78.288365][ T7573] batadv_slave_1 (unregistering): left promiscuous mode [ 78.290571][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.864510][ T7597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.357'. [ 78.952794][ T7601] netlink: 44 bytes leftover after parsing attributes in process `syz.2.358'. [ 80.149256][ T7625] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 80.151192][ T7625] netlink: 'syz.2.365': attribute type 4 has an invalid length. [ 80.153143][ T7625] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.365'. [ 80.157804][ T7625] netlink: 'syz.2.365': attribute type 10 has an invalid length. [ 80.392701][ T7575] Set syz1 is full, maxelem 65536 reached [ 81.286336][ T7641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.288643][ T7641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.895871][ T7652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.898243][ T7652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.410715][ T7661] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 82.419031][ T7661] netlink: 'syz.3.377': attribute type 4 has an invalid length. [ 82.422893][ T7661] netlink: 15363 bytes leftover after parsing attributes in process `syz.3.377'. [ 82.444642][ T7661] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 84.807564][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.809648][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.228844][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.238349][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.241561][ T7665] Set syz1 is full, maxelem 65536 reached [ 85.571175][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 86.116227][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 87.073034][ T30] audit: type=1326 audit(87.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 87.094774][ T30] audit: type=1326 audit(87.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 87.281160][ T30] audit: type=1326 audit(87.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 87.285853][ T30] audit: type=1326 audit(87.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 87.291537][ T30] audit: type=1326 audit(87.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=264 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 88.007608][ T30] audit: type=1326 audit(87.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 88.012182][ T30] audit: type=1326 audit(87.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7764 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 88.067893][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.070200][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.133647][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.137327][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.169365][ T7809] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.429'. [ 89.371265][ T7809] netlink: 'syz.1.429': attribute type 10 has an invalid length. [ 90.975053][ T6426] Bluetooth: hci4: link tx timeout [ 90.976602][ T6426] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 91.120005][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.122135][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.167141][ T7857] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.447'. [ 91.175240][ T7857] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 92.368065][ T7890] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.459'. [ 92.387864][ T7890] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 93.172409][ T6426] Bluetooth: hci4: command 0x0406 tx timeout [ 93.351058][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 93.550798][ T7922] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.474'. [ 93.554248][ T7922] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 96.438896][ T30] audit: type=1326 audit(96.420:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.443708][ T30] audit: type=1326 audit(96.420:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.449073][ T30] audit: type=1326 audit(96.420:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.453407][ T30] audit: type=1326 audit(96.420:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.469100][ T30] audit: type=1326 audit(96.420:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.505505][ T30] audit: type=1326 audit(96.420:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.525581][ T30] audit: type=1326 audit(96.420:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.530061][ T30] audit: type=1326 audit(96.420:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.557038][ T30] audit: type=1326 audit(96.420:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=36 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.561674][ T30] audit: type=1326 audit(96.420:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8002 comm="syz.0.501" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed54b28 code=0x7ffc0000 [ 96.872786][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.512'. [ 97.907111][ T8051] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 98.575093][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.577035][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.604741][ T8070] netlink: 'syz.3.525': attribute type 10 has an invalid length. [ 98.713421][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.720443][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.814803][ T6472] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.064560][ T6472] usb 1-1: Using ep0 maxpacket: 8 [ 99.103442][ T6472] usb 1-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 99.121076][ T6472] usb 1-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 99.123630][ T6472] usb 1-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 99.133797][ T6472] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 99.136372][ T6472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.138766][ T6472] usb 1-1: Product: syz [ 99.139701][ T6472] usb 1-1: Manufacturer: syz [ 99.140651][ T6472] usb 1-1: SerialNumber: syz [ 99.683464][ T6472] usb 1-1: USB disconnect, device number 2 [ 100.392719][ T8116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.544'. [ 100.437332][ T8118] serio: Serial port pts0 [ 100.831036][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.547'. [ 101.355413][ T8142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.555'. [ 101.516561][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 101.858748][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.564'. [ 101.904148][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.910934][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.972090][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 104.197814][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.207228][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.309002][ T8244] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 104.361176][ T8244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.475362][ T2263] atkbd serio1: keyboard reset failed on [ 107.608185][ T8294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.612'. [ 109.975406][ T8332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.625'. [ 111.242560][ T8366] mmap: syz.2.630 (8366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.910934][ T8366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.990271][ T8375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.638'. [ 113.703591][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.649'. [ 114.377392][ T8407] vivid-000: kernel_thread() failed [ 114.885236][ T2809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.086242][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 115.164788][ T2809] usb 1-1: Using ep0 maxpacket: 32 [ 115.208740][ T2809] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 115.258163][ T2809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.830952][ T2809] usb 1-1: config 0 descriptor?? [ 116.031415][ T2809] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 117.203444][ T2809] gspca_vc032x: reg_w err -110 [ 117.204668][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.205805][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.206866][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.208036][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.209239][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.210366][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.211562][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.212734][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.213903][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.215297][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.216510][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.217744][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.218957][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.220076][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.221344][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.222390][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.223635][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.224852][ T2809] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.226018][ T2809] gspca_vc032x: Unknown sensor... [ 117.227075][ T2809] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 117.598289][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.610316][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.623608][ T8465] process 'syz.2.669' launched '/dev/fd/7' with NULL argv: empty string added [ 117.825726][ T8472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.818602][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.673'. [ 118.844362][ T2263] usb 1-1: USB disconnect, device number 3 [ 121.081353][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.687'. [ 122.267078][ T8534] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 122.273585][ T8534] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 122.283155][ T8534] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 122.642579][ T8546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.030591][ T8563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.699'. [ 123.918978][ T8583] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 123.926949][ T8585] batadv_slave_1: entered promiscuous mode [ 123.937148][ T8583] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 123.939068][ T8583] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 123.947004][ T8585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.135571][ T8585] batadv_slave_1 (unregistering): left promiscuous mode [ 124.137188][ T8585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.570064][ T8600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.712'. [ 125.516207][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.518332][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.606342][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.608463][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.619350][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.624587][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.830458][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 125.886342][ T8640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.725'. [ 125.935478][ T2356] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.921583][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.932028][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.084737][ T8663] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 127.090963][ T8663] netlink: 'syz.2.734': attribute type 4 has an invalid length. [ 127.092659][ T8663] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.734'. [ 127.113292][ T8663] netlink: 'syz.2.734': attribute type 10 has an invalid length. [ 127.203367][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 127.263615][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.736'. [ 127.273442][ T8669] syzkaller0: entered promiscuous mode [ 127.275364][ T8669] syzkaller0: entered allmulticast mode [ 127.341428][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.738'. [ 128.647071][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.652298][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.902589][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.904714][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.662721][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 131.711401][ T8703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.748'. [ 138.860344][ T8688] netlink: 32 bytes leftover after parsing attributes in process `syz.0.744'. [ 138.921822][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.923970][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.197185][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'. [ 140.209313][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.212716][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.218041][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.762'. [ 140.305289][ T8755] syzkaller0: entered promiscuous mode [ 140.306611][ T8755] syzkaller0: entered allmulticast mode [ 142.510588][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.512781][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.365489][ T8801] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 152.368194][ T8801] netlink: 'syz.4.780': attribute type 4 has an invalid length. [ 152.372991][ T8801] netlink: 15363 bytes leftover after parsing attributes in process `syz.4.780'. [ 152.387461][ T8801] netlink: 'syz.4.780': attribute type 10 has an invalid length. [ 152.540508][ T8806] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 152.547392][ T8806] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 152.560171][ T8806] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 153.405306][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.783'. [ 153.621508][ T8820] syzkaller0: entered promiscuous mode [ 153.628678][ T8820] syzkaller0: entered allmulticast mode [ 153.902428][ T8832] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 153.904100][ T8832] netlink: 'syz.0.791': attribute type 4 has an invalid length. [ 153.905998][ T8832] netlink: 15363 bytes leftover after parsing attributes in process `syz.0.791'. [ 153.909262][ T8832] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 158.727952][ T6436] Bluetooth: hci3: command 0x0406 tx timeout [ 158.729688][ T6436] Bluetooth: hci2: command 0x0406 tx timeout [ 158.730998][ T6436] Bluetooth: hci1: command 0x0406 tx timeout [ 158.732194][ T6436] Bluetooth: hci0: command 0x0406 tx timeout [ 165.100074][ T8848] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 165.101971][ T8848] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 165.104089][ T8848] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 165.108330][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.797'. [ 165.189226][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.191002][ T8857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.193690][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.195817][ T8857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.219711][ T8862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.801'. [ 165.349520][ T8866] netlink: 327 bytes leftover after parsing attributes in process `syz.1.803'. [ 165.529313][ T8875] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 165.531185][ T8875] netlink: 'syz.0.807': attribute type 4 has an invalid length. [ 165.532994][ T8875] netlink: 15363 bytes leftover after parsing attributes in process `syz.0.807'. [ 165.546318][ T8875] netlink: 'syz.0.807': attribute type 10 has an invalid length. [ 166.027730][ T8889] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 166.029811][ T8889] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 166.031796][ T8889] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 166.829192][ T8898] netlink: 68 bytes leftover after parsing attributes in process `syz.2.816'. [ 166.940109][ T8906] IPVS: length: 198 != 24 [ 166.950594][ T8913] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 166.958644][ T8913] netlink: 'syz.2.821': attribute type 4 has an invalid length. [ 166.962550][ T8913] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.821'. [ 166.970327][ T8913] netlink: 'syz.2.821': attribute type 10 has an invalid length. [ 169.768714][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.770711][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.792867][ T8969] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 169.795256][ T8969] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.833'. [ 169.799606][ T8969] netlink: 'syz.4.833': attribute type 10 has an invalid length. [ 171.192743][ T8998] netlink: 'syz.2.845': attribute type 1 has an invalid length. [ 171.194752][ T8998] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.845'. [ 171.198145][ T8998] netlink: 'syz.2.845': attribute type 10 has an invalid length. [ 171.532166][ T9018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.535085][ T9018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.715549][ T9057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.717698][ T9057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.958255][ T9104] block device autoloading is deprecated and will be removed. [ 178.454930][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.878'. [ 179.592140][ T9133] netlink: 327 bytes leftover after parsing attributes in process `syz.2.892'. [ 179.756634][ T9145] binder: BINDER_SET_CONTEXT_MGR already set [ 179.758231][ T9145] binder: 9144:9145 ioctl 4018620d 200001c0 returned -16 [ 179.760459][ T9145] binder: 9144:9145 got transaction to invalid handle, 1 [ 179.762580][ T9145] binder: 9145:9144 cannot find target node [ 179.763996][ T9145] binder: 9144:9145 transaction call to 0:0 failed 3/29201/-22, size 0--726 line 3151 [ 179.779471][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 181.502183][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.515558][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.266884][ T9181] netlink: 327 bytes leftover after parsing attributes in process `syz.2.904'. [ 183.039301][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.041080][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.042834][ T9185] bridge0: entered allmulticast mode [ 184.785885][ T9203] vivid-000: kernel_thread() failed [ 186.980406][ T9237] netlink: 327 bytes leftover after parsing attributes in process `syz.4.919'. [ 187.401600][ T2356] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.735535][ T53] Bluetooth: hci4: link tx timeout [ 187.736663][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 187.742327][ T9249] tipc: Enabling of bearer rejected, failed to enable media [ 187.782538][ T9253] batadv_slave_1: entered promiscuous mode [ 187.787324][ T9252] batadv_slave_1: left promiscuous mode [ 187.962399][ T9266] capability: warning: `syz.2.934' uses deprecated v2 capabilities in a way that may be insecure [ 188.018673][ T9268] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 188.039580][ T9268] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 188.048276][ T9268] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 189.264960][ T9284] netlink: 327 bytes leftover after parsing attributes in process `syz.0.936'. [ 189.371655][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.389454][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.842605][ T6429] Bluetooth: hci4: command 0x0406 tx timeout [ 191.307320][ T9343] netlink: 327 bytes leftover after parsing attributes in process `syz.1.951'. [ 193.218976][ T9384] batadv_slave_1: entered promiscuous mode [ 193.221719][ T9383] batadv_slave_1: left promiscuous mode [ 194.670421][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.673042][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.871621][ T9418] x_tables: duplicate underflow at hook 1 [ 195.094681][ T9421] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 197.260855][ T9448] netlink: 327 bytes leftover after parsing attributes in process `syz.3.973'. [ 197.300568][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.976'. [ 197.302765][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 197.566623][ T9459] support for cryptoloop has been removed. Use dm-crypt instead. [ 201.985031][ T9516] netlink: 308 bytes leftover after parsing attributes in process `syz.0.986'. [ 202.123238][ T9524] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 202.125348][ T9524] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 202.127121][ T9524] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 205.054705][ T9559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1000'. [ 206.842696][ T9601] loop2: detected capacity change from 0 to 7 [ 206.853746][ T9601] Dev loop2: unable to read RDB block 7 [ 206.858480][ T9601] loop2: AHDI p1 [ 206.859353][ T9601] loop2: partition table partially beyond EOD, truncated [ 206.912267][ T8851] udevd[8851]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 207.082283][ T9615] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 207.105836][ T9615] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 207.107725][ T9615] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 207.813236][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.836215][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.047218][ T9653] rdma_op 0000000093c8c81f conn xmit_rdma 0000000000000000 [ 209.201358][ T9677] netlink: 'syz.4.1033': attribute type 1 has an invalid length. [ 209.286444][ T9681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.448673][ T9684] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 209.455114][ T9684] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 209.459785][ T9684] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 210.639235][ T9710] ======================================================= [ 210.639235][ T9710] WARNING: The mand mount option has been deprecated and [ 210.639235][ T9710] and is ignored by this kernel. Remove the mand [ 210.639235][ T9710] option from the mount to silence this warning. [ 210.639235][ T9710] ======================================================= [ 211.239097][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.256047][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.301960][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.315679][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.810697][ T9726] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 211.913328][ T9728] bridge0: port 3(erspan0) entered blocking state [ 211.915034][ T9728] bridge0: port 3(erspan0) entered disabled state [ 211.916762][ T9728] erspan0: entered allmulticast mode [ 211.918988][ T9728] erspan0: entered promiscuous mode [ 211.920763][ T9728] bridge0: port 3(erspan0) entered blocking state [ 211.923115][ T9728] bridge0: port 3(erspan0) entered forwarding state [ 214.282726][ T9745] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 214.303225][ T9745] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 214.316870][ T9745] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 217.390142][ T9674] Set syz1 is full, maxelem 65536 reached [ 220.021834][ T9794] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 220.024764][ T9794] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 220.026744][ T9794] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 220.241315][ T9796] binder: 9795:9796 tried to acquire reference to desc 0, got 1 instead [ 220.249272][ T9796] binder: 9795:9796 got transaction with invalid data ptr [ 220.252373][ T9796] binder: 9795:9796 transaction call to 9795:0 failed 8/29201/-14, size 0-24 line 3442 [ 220.258214][ T2809] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.331885][ T9798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.341180][ T9798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.581386][ T9812] Set syz1 is full, maxelem 65536 reached [ 221.917610][ T9827] binder: 9826:9827 tried to acquire reference to desc 0, got 1 instead [ 221.929408][ T6473] binder: release 9826:9827 transaction 13 out, still active [ 221.931240][ T6473] binder: undelivered TRANSACTION_COMPLETE [ 221.966845][ T6473] binder: send failed reply for transaction 13, target dead [ 225.369213][ T10] IPVS: starting estimator thread 0... [ 225.465674][ T9872] IPVS: using max 32 ests per chain, 76800 per kthread [ 225.757671][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.760061][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.954017][ T9879] GUP no longer grows the stack in syz.2.1094 (9879): 20004000-2000a000 (20002000) [ 225.958784][ T9879] CPU: 1 UID: 0 PID: 9879 Comm: syz.2.1094 Not tainted 6.13.0-rc2-syzkaller-g2e7aff49b5da #0 [ 225.960949][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.963294][ T9879] Call trace: [ 225.963981][ T9879] show_stack+0x2c/0x3c (C) [ 225.965002][ T9879] dump_stack_lvl+0xe4/0x150 [ 225.966017][ T9879] dump_stack+0x1c/0x28 [ 225.966963][ T9879] __get_user_pages+0x2f94/0x3134 [ 225.968105][ T9879] get_user_pages_remote+0x328/0xa30 [ 225.969188][ T9879] __access_remote_vm+0x1fc/0x6e8 [ 225.970303][ T9879] access_remote_vm+0x48/0x60 [ 225.971328][ T9879] proc_pid_cmdline_read+0x3cc/0x91c [ 225.972513][ T9879] vfs_readv+0x548/0x844 [ 225.973556][ T9879] __arm64_sys_preadv+0x188/0x298 [ 225.974642][ T9879] invoke_syscall+0x98/0x2b8 [ 225.975711][ T9879] el0_svc_common+0x130/0x23c [ 225.976738][ T9879] do_el0_svc+0x48/0x58 [ 225.977699][ T9879] el0_svc+0x54/0x168 [ 225.978675][ T9879] el0t_64_sync_handler+0x84/0x108 [ 225.979866][ T9879] el0t_64_sync+0x198/0x19c [ 225.980826][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.900389][ T9855] Set syz1 is full, maxelem 65536 reached [ 228.509148][ T9940] binder: BINDER_SET_CONTEXT_MGR already set [ 228.511585][ T9940] binder: 9939:9940 ioctl 4018620d 20000040 returned -16 [ 228.514209][ T9940] binder: tried to use weak ref as strong ref [ 228.518388][ T9940] binder: 9939:9940 Acquire 1 refcount change on invalid ref 0 ret -22 [ 228.520785][ T9940] binder: 9939:9940 got transaction to invalid handle, 1 [ 228.522462][ T9940] binder: 9940:9939 cannot find target node [ 228.523833][ T9940] binder: 9939:9940 transaction call to 0:0 failed 20/29201/-22, size 112-0 line 3151 [ 228.528808][ T2809] binder: undelivered TRANSACTION_ERROR: 29201 [ 228.593133][ T9945] Set syz1 is full, maxelem 65536 reached [ 228.918850][ T2809] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 229.066240][ T2809] usb 1-1: Using ep0 maxpacket: 8 [ 229.071035][ T2809] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 229.073205][ T2809] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 229.075885][ T2809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.081642][ T2809] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.088917][ T2809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.092429][ T2809] usb 1-1: Product: syz [ 229.095380][ T2809] usb 1-1: Manufacturer: syz [ 229.096762][ T9967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1129'. [ 229.098903][ T2809] usb 1-1: SerialNumber: syz [ 229.679862][ T2809] usb 1-1: 0:2 : does not exist [ 229.737362][ T2809] usb 1-1: USB disconnect, device number 4 [ 229.747414][ T8995] udevd[8995]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 229.822489][ T8995] udevd[8995]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 231.051857][ T8851] udevd[8851]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.425304][T10008] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 232.603865][ T9971] Set syz1 is full, maxelem 65536 reached [ 233.016869][T10021] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.050454][T10030] netlink: 327 bytes leftover after parsing attributes in process `syz.0.1149'. [ 233.169230][T10021] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.365608][T10021] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.462889][T10041] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1154'. [ 233.526210][T10021] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.265792][T10021] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.280740][T10021] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.293879][T10021] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.322194][T10021] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.426095][T10058] netlink: 327 bytes leftover after parsing attributes in process `syz.2.1162'. [ 235.443019][T10069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.445845][T10069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.474016][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1163'. [ 237.690387][T10094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1171'. [ 238.614659][T10101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1175'. [ 238.841836][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1182'. [ 239.648192][T10124] netlink: 327 bytes leftover after parsing attributes in process `syz.3.1180'. [ 239.994284][T10134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1187'. [ 241.143707][T10146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1188'. [ 242.576998][T10163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1195'. [ 243.108883][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.113611][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.242486][ T10] IPVS: starting estimator thread 0... [ 244.252110][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.253998][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.368178][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1200'. [ 244.377943][T10181] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1202'. [ 244.414578][T10177] IPVS: using max 34 ests per chain, 81600 per kthread [ 245.370410][T10205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1208'. [ 246.352620][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.358236][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.631374][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1215'. [ 247.787597][T10232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1217'. [ 247.911321][T10241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1222'. [ 248.939727][ T2356] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.193449][T10263] binder: 10253:10263 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 250.006848][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 250.006866][ T30] audit: type=1326 audit(249.170:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.034538][T10269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1228'. [ 250.045718][ T30] audit: type=1326 audit(249.170:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.050364][ T30] audit: type=1326 audit(249.170:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.123523][ T30] audit: type=1326 audit(249.170:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.149008][ T30] audit: type=1326 audit(249.170:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.192623][ T30] audit: type=1326 audit(249.170:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=13 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.204139][ T30] audit: type=1326 audit(249.170:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.213112][T10274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1230'. [ 250.237595][ T30] audit: type=1326 audit(249.170:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.266237][ T30] audit: type=1326 audit(249.170:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.310313][ T30] audit: type=1326 audit(249.170:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10253 comm="syz.3.1224" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1154b28 code=0x7ffc0000 [ 250.768122][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1234'. [ 251.971562][T10289] batadv_slave_1: entered promiscuous mode [ 252.438264][T10287] batadv_slave_1: left promiscuous mode [ 252.707012][T10306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'. [ 253.520117][T10318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1245'. [ 254.283855][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1258'. [ 254.562593][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 254.777723][T10374] batadv_slave_1: entered promiscuous mode [ 254.781875][T10372] batadv_slave_1: left promiscuous mode [ 255.116629][T10389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1274'. [ 255.506303][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1279'. [ 255.783332][T10418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1285'. [ 257.901255][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1296'. [ 258.065227][T10458] netlink: 'syz.4.1299': attribute type 1 has an invalid length. [ 258.082590][T10458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.872744][T10508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1310'. [ 260.176533][T10516] netlink: 327 bytes leftover after parsing attributes in process `syz.2.1311'. [ 260.314542][T10522] batadv_slave_1: entered promiscuous mode [ 260.319531][T10519] batadv_slave_1: left promiscuous mode [ 260.600151][T10563] Set syz1 is full, maxelem 65536 reached [ 262.054411][ T2809] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 262.248845][ T2809] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 262.251043][ T2809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.252957][ T2809] usb 1-1: Product: syz [ 262.254018][ T2809] usb 1-1: Manufacturer: syz [ 262.255813][ T2809] usb 1-1: SerialNumber: syz [ 262.265281][ T2809] usb 1-1: config 0 descriptor?? [ 262.477235][ T2809] usb 1-1: ignoring: probably an ADSL modem [ 263.802701][ T2809] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 263.813024][ T2809] usb 1-1: USB disconnect, device number 5 [ 264.720957][ T2809] IPVS: starting estimator thread 0... [ 264.937857][T10669] IPVS: using max 35 ests per chain, 84000 per kthread [ 265.819820][T10690] ipip0: entered promiscuous mode [ 265.997748][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 265.997765][ T30] audit: type=1400 audit(265.980:54): lsm=SMACK fn=smack_task_kill action=denied subject="w" object="_" requested=w pid=10685 comm="syz.0.1368" opid=10685 ocomm="syz.0.1368" [ 266.056089][T10703] Set syz1 is full, maxelem 65536 reached [ 266.357680][T10721] ipip0: entered promiscuous mode [ 267.247817][T10734] netlink: 'syz.1.1386': attribute type 1 has an invalid length. [ 267.249676][T10734] netlink: 15411 bytes leftover after parsing attributes in process `syz.1.1386'. [ 267.313423][T10737] netlink: 'syz.1.1386': attribute type 10 has an invalid length. [ 270.020656][T10778] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 270.024410][T10778] netlink: 15411 bytes leftover after parsing attributes in process `syz.1.1402'. [ 270.031226][T10778] netlink: 'syz.1.1402': attribute type 10 has an invalid length. [ 270.083715][T10785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1406'. [ 270.117600][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.125487][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.216029][ T6411] IPVS: starting estimator thread 0... [ 270.304602][T10796] IPVS: using max 34 ests per chain, 81600 per kthread [ 270.961689][ T25] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 270.969114][ T25] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 271.002238][T10812] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 271.007625][T10812] netlink: 15411 bytes leftover after parsing attributes in process `syz.2.1417'. [ 271.011822][T10812] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 271.028053][T10814] Set syz1 is full, maxelem 65536 reached [ 271.087582][T10816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1419'. [ 272.069583][T10838] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 272.077191][T10838] netlink: 15411 bytes leftover after parsing attributes in process `syz.2.1429'. [ 272.095498][T10838] netlink: 'syz.2.1429': attribute type 10 has an invalid length. [ 272.101667][T10840] Set syz1 is full, maxelem 65536 reached [ 272.318883][T10852] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1432'. [ 272.406534][T10856] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.177714][T10856] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.325796][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.327947][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.347298][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 273.349762][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 273.382404][T10885] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 273.395764][T10885] netlink: 15411 bytes leftover after parsing attributes in process `syz.0.1442'. [ 273.396272][T10856] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.411776][T10885] netlink: 'syz.0.1442': attribute type 10 has an invalid length. [ 273.458347][T10894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1447'. [ 273.599265][T10856] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.434007][T10856] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.440183][T10856] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.446097][T10856] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.451189][T10856] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.480227][T10928] netlink: 'syz.4.1457': attribute type 1 has an invalid length. [ 274.481971][T10928] netlink: 15411 bytes leftover after parsing attributes in process `syz.4.1457'. [ 274.485585][T10928] netlink: 'syz.4.1457': attribute type 10 has an invalid length. [ 274.523850][T10930] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 274.574156][T10938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1461'. [ 274.617622][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.621720][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.625782][T10940] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 274.915166][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.917284][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.842761][T10967] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 275.854263][T10967] netlink: 15411 bytes leftover after parsing attributes in process `syz.2.1468'. [ 275.874218][T10967] netlink: 'syz.2.1468': attribute type 10 has an invalid length. [ 275.902509][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.919118][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.157601][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1473'. [ 276.179073][T10977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.295694][T10986] netlink: 'syz.2.1474': attribute type 1 has an invalid length. [ 276.354742][T10977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.486528][T10977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.669073][T10977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.892595][T10977] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.900970][T10977] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.911211][T10977] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.929518][T10977] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.011646][T11005] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 277.019598][T11005] netlink: 15411 bytes leftover after parsing attributes in process `syz.0.1482'. [ 277.034057][T11005] netlink: 'syz.0.1482': attribute type 10 has an invalid length. [ 277.085659][T11009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1484'. [ 277.095543][T11011] loop0: detected capacity change from 0 to 512 [ 277.117155][T11011] EXT4-fs (loop0): orphan cleanup on readonly fs [ 277.120308][T11011] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 277.125395][T11011] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 277.140391][T11011] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1485: attempt to clear invalid blocks 2 len 1 [ 277.145457][T11011] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1485: invalid indirect mapped block 1819239214 (level 0) [ 277.150707][T11011] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1485: invalid indirect mapped block 1819239214 (level 1) [ 277.156649][T11011] EXT4-fs (loop0): 1 truncate cleaned up [ 277.159469][T11011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.205677][T11011] EXT4-fs error (device loop0): __ext4_remount:6749: comm syz.0.1485: Abort forced by user [ 277.215099][T11011] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 277.247201][T11019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.249261][T11019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.252241][ T6421] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.559110][T11038] validate_nla: 1 callbacks suppressed [ 279.559127][T11038] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 279.562280][T11038] netlink: 15411 bytes leftover after parsing attributes in process `syz.3.1495'. [ 279.573503][T11040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1496'. [ 279.577721][T11038] netlink: 'syz.3.1495': attribute type 10 has an invalid length. [ 279.792747][T11049] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 279.970993][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 280.202223][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1508'. [ 280.264640][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 280.703395][T11078] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 280.706916][T11078] netlink: 15411 bytes leftover after parsing attributes in process `syz.1.1510'. [ 280.710829][T11078] netlink: 'syz.1.1510': attribute type 10 has an invalid length. [ 280.778153][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.780278][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.788620][T11081] binder: 11080:11081 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 280.794445][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 280.806530][ T10] usb 1-1: config 0 has an invalid interface number: 176 but max is 0 [ 280.808361][ T10] usb 1-1: config 0 has no interface number 0 [ 280.809759][ T10] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 280.811816][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.821286][ T10] usb 1-1: config 0 descriptor?? [ 280.951376][T11093] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 280.991298][T11093] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 281.268733][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.270687][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.616771][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1519'. [ 283.784085][ T6473] usb 1-1: USB disconnect, device number 6 [ 284.210795][T11132] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 284.223010][T11130] ipip0: entered promiscuous mode [ 284.575823][T11139] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 284.577901][T11139] netlink: 15411 bytes leftover after parsing attributes in process `syz.0.1531'. [ 284.581471][T11139] netlink: 'syz.0.1531': attribute type 10 has an invalid length. [ 284.829256][T11144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 285.192077][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.194268][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.714437][ T2809] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 285.884467][ T2809] usb 1-1: Using ep0 maxpacket: 32 [ 285.891048][ T2809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 285.893732][ T2809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 285.896556][ T2809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 285.898960][ T2809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 285.908107][ T2809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 285.922389][ T2809] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 286.541076][ T2809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.543167][ T2809] usb 1-1: Product: syz [ 286.546795][ T2809] usb 1-1: Manufacturer: syz [ 286.548036][ T2809] usb 1-1: SerialNumber: syz [ 286.607194][T11173] ipip0: entered promiscuous mode [ 286.628181][T11176] netlink: 'syz.2.1542': attribute type 1 has an invalid length. [ 286.632789][T11176] netlink: 15411 bytes leftover after parsing attributes in process `syz.2.1542'. [ 286.641662][T11177] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 286.660539][ T2809] usb 1-1: config 0 descriptor?? [ 286.661373][T11176] netlink: 'syz.2.1542': attribute type 10 has an invalid length. [ 286.700332][T11180] Set syz1 is full, maxelem 65536 reached [ 286.870636][T11146] binder: 11145:11146 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 286.881183][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.887356][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.889914][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.892621][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.900984][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.903883][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.909602][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.912358][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.916710][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.918420][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.920602][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.922416][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.924096][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.929591][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.931309][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.932914][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.934604][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 286.936307][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 288.034235][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 288.036002][ T2809] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 288.037448][ T2809] input input4: Timeout waiting for response from device. [ 288.051098][ T2809] usb 1-1: USB disconnect, device number 7 [ 288.205035][T11195] loop2: detected capacity change from 0 to 4096 [ 289.353874][T11217] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 289.368685][T11217] netlink: 15411 bytes leftover after parsing attributes in process `syz.4.1555'. [ 289.384018][T11217] netlink: 'syz.4.1555': attribute type 10 has an invalid length. [ 289.430911][T11220] Set syz1 is full, maxelem 65536 reached [ 289.596113][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.598598][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.926651][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.928737][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.529226][T11232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.531482][T11232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.208770][T11249] netlink: 'syz.2.1568': attribute type 1 has an invalid length. [ 291.218712][T11249] netlink: 15411 bytes leftover after parsing attributes in process `syz.2.1568'. [ 291.230707][T11249] netlink: 'syz.2.1568': attribute type 10 has an invalid length. [ 291.267859][T11251] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.286446][T11253] Set syz1 is full, maxelem 65536 reached [ 291.332554][T11251] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.517864][T11251] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.558120][T11251] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.260124][T11251] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.286377][T11251] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.312492][T11251] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.343722][T11251] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.049506][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.051606][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.062425][T11287] ipip0: entered promiscuous mode [ 294.143211][T11290] netlink: 'syz.1.1582': attribute type 1 has an invalid length. [ 294.149772][T11290] netlink: 15363 bytes leftover after parsing attributes in process `syz.1.1582'. [ 294.158093][T11290] netlink: 'syz.1.1582': attribute type 10 has an invalid length. [ 294.460646][T11300] binder: 11291:11300 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 294.463738][T11300] binder: 11300 RLIMIT_NICE not set [ 294.552527][T11301] binder: 11291:11301 tried to acquire reference to desc 0, got 1 instead [ 294.558644][T11300] binder: 11300 RLIMIT_NICE not set [ 294.573229][T11300] binder: 11300 RLIMIT_NICE not set [ 294.575118][T11300] binder_alloc: 11291: binder_alloc_buf, no vma [ 294.576688][T11300] binder: cannot allocate buffer: vma cleared, target dead or dying [ 294.577042][T11300] binder: 11291:11300 transaction reply to 11291:11301 failed 45/29189/-3, size 80-24 line 3339 [ 294.581505][T11300] binder: send failed reply for transaction 44 to 11291:11301 [ 295.515764][ T10] binder: undelivered TRANSACTION_ERROR: 29190 [ 295.517356][ T10] binder: undelivered TRANSACTION_COMPLETE [ 295.518656][ T10] binder: undelivered TRANSACTION_ERROR: 29189 [ 295.556804][ T10] IPVS: starting estimator thread 0... [ 296.517688][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.525242][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.869295][T11310] IPVS: using max 34 ests per chain, 81600 per kthread [ 297.761177][T11336] netlink: 'syz.3.1593': attribute type 1 has an invalid length. [ 297.778592][T11336] netlink: 15363 bytes leftover after parsing attributes in process `syz.3.1593'. [ 297.789793][T11336] netlink: 'syz.3.1593': attribute type 10 has an invalid length. [ 297.931583][T11346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.950554][T11346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.957707][T11346] binder: 11345:11346 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 299.096054][T11371] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 299.097899][T11371] netlink: 15363 bytes leftover after parsing attributes in process `syz.1.1608'. [ 299.102170][T11371] netlink: 'syz.1.1608': attribute type 10 has an invalid length. [ 300.023001][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.025381][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.837664][T11408] netlink: 'syz.1.1622': attribute type 1 has an invalid length. [ 300.839623][T11408] netlink: 15363 bytes leftover after parsing attributes in process `syz.1.1622'. [ 300.859452][T11408] netlink: 'syz.1.1622': attribute type 10 has an invalid length. [ 300.891671][T11409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.893925][T11409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.410684][ T6429] Bluetooth: hci4: command 0x0406 tx timeout [ 302.453373][T11438] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 302.455419][T11438] netlink: 15363 bytes leftover after parsing attributes in process `syz.3.1633'. [ 302.459245][T11438] netlink: 'syz.3.1633': attribute type 10 has an invalid length. [ 302.516820][ T6429] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 303.831553][T11476] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 303.843172][T11476] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.1647'. [ 303.851366][T11476] netlink: 'syz.2.1647': attribute type 10 has an invalid length. [ 304.632958][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.635612][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.759245][T11504] netlink: 'syz.0.1658': attribute type 10 has an invalid length. [ 305.599143][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.601192][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.429566][T11527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.435912][T11527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.454865][T11527] binder: BINDER_SET_CONTEXT_MGR already set [ 306.457729][T11527] binder: 11526:11527 ioctl 40046207 0 returned -16 [ 306.747369][T11540] netlink: 'syz.1.1670': attribute type 10 has an invalid length. [ 308.016335][T11567] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.839322][T11567] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.869238][T11571] netlink: 'syz.0.1681': attribute type 10 has an invalid length. [ 308.932029][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.934114][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.980029][T11575] binder: BINDER_SET_CONTEXT_MGR already set [ 308.981538][T11575] binder: 11574:11575 ioctl 40046207 0 returned -16 [ 309.025806][T11567] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.125673][T11567] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.992788][T11567] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.001291][T11567] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.039361][T11567] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.048586][T11567] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.274774][ T2356] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.474518][T11604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.476632][T11604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.540902][T11615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.562871][T11615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.699058][T11636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.705767][T11636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.719870][T11636] binder: BINDER_SET_CONTEXT_MGR already set [ 312.724828][T11636] binder: 11634:11636 ioctl 40046207 0 returned -16 [ 312.994490][ T2809] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 313.156148][ T2809] usb 1-1: Using ep0 maxpacket: 16 [ 313.158622][ T2809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.161128][ T2809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.163444][ T2809] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 313.166006][ T2809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.170171][ T2809] usb 1-1: config 0 descriptor?? [ 313.381367][ T2809] usbhid 1-1:0.0: can't add hid device: -71 [ 313.382913][ T2809] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 313.390610][ T2809] usb 1-1: USB disconnect, device number 8 [ 314.971373][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.973616][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.157479][T11692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.163770][T11692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.490317][T11702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.492521][T11702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.886138][T11727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.888090][T11727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.759635][T11733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.761744][T11733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.479893][T11760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.482110][T11760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.509169][T11760] binder: BINDER_SET_CONTEXT_MGR already set [ 320.522765][T11760] binder: 11755:11760 ioctl 40046207 0 returned -16 [ 320.545650][T11760] binder: 11755:11760 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 321.715614][T11789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.718029][T11789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.775659][ T6473] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 324.274407][ T6473] usb 1-1: Using ep0 maxpacket: 32 [ 324.286440][ T6473] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 324.288982][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 324.293994][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 324.299323][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 324.301657][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 325.280121][ T6473] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 325.282263][ T6473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.284091][ T6473] usb 1-1: Product: syz [ 325.285211][ T6473] usb 1-1: Manufacturer: syz [ 325.286266][ T6473] usb 1-1: SerialNumber: syz [ 325.288651][ T6473] usb 1-1: config 0 descriptor?? [ 326.151141][T11809] binder: BINDER_SET_CONTEXT_MGR already set [ 326.152541][T11809] binder: 11808:11809 ioctl 40046207 0 returned -16 [ 326.200425][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.202426][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.204207][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.208600][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.210242][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.211809][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.213361][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.226526][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.228063][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.229556][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.231119][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.232654][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.234271][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.236092][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.237750][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.239367][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.240983][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.242459][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.244034][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.257368][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 326.258787][ T6473] input input5: Timeout waiting for response from device. [ 326.269248][ T6473] usb 1-1: USB disconnect, device number 9 [ 326.367636][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.369732][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.752765][T11890] loop4: detected capacity change from 0 to 2048 [ 328.770277][T11890] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 328.772103][T11890] System zones: 0-7 [ 328.775492][T11890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.790641][ T6425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.117162][T11910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.120929][T11910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.158364][T11910] binder: BINDER_SET_CONTEXT_MGR already set [ 330.159829][T11910] binder: 11907:11910 ioctl 40046207 0 returned -16 [ 330.814048][T11917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.817681][T11917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.654919][T11943] netlink: 'syz.3.1810': attribute type 10 has an invalid length. [ 333.705076][T11921] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 334.072452][T11960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.921058][T11960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.927124][T11960] binder: BINDER_SET_CONTEXT_MGR already set [ 334.928427][T11960] binder: 11959:11960 ioctl 40046207 0 returned -16 [ 338.410282][ T2809] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 339.107491][T12012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.116759][T12012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.128209][T12012] binder: 12011:12012 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 339.316088][T12016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1831'. [ 339.381850][T12018] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1831'. [ 340.062983][T12039] overlayfs: missing 'lowerdir' [ 340.248630][T12040] loop4: detected capacity change from 0 to 512 [ 340.324181][T12040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.483817][T12040] EXT4-fs (loop4): orphan cleanup on readonly fs [ 340.506177][T12040] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1837: bg 0: block 248: padding at end of block bitmap is not set [ 340.515084][T12040] Quota error (device loop4): write_blk: dquota write failed [ 340.516967][T12040] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 340.519081][T12040] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1837: Failed to acquire dquot type 1 [ 340.528373][T12040] EXT4-fs (loop4): 1 truncate cleaned up [ 340.577172][T12040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.823578][ T6425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.557739][T12058] netlink: 'syz.0.1845': attribute type 1 has an invalid length. [ 341.572030][T12060] Cache volume key already in use (9p,(null),) [ 341.611739][T12058] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 344.456760][T12100] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.574208][T12104] netlink: 'syz.2.1860': attribute type 1 has an invalid length. [ 344.617659][T12107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.619799][T12107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.633768][T12100] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.327623][T12100] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.390337][T12115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1863'. [ 345.411594][T12100] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.037186][T12100] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.122000][T12100] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.132017][T12100] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.141599][T12100] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.448222][T12133] loop3: detected capacity change from 0 to 4096 [ 346.480193][T12133] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 346.795712][T12147] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 347.884548][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.886665][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.918023][T12148] loop3: detected capacity change from 0 to 32768 [ 347.928972][T12155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1875'. [ 348.041362][T12148] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.811849][T12148] XFS (loop3): Ending clean mount [ 349.028118][ T6420] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.372363][T12189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.382883][T12189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.395450][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.399246][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.443828][T12189] binder: 12188:12189 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 349.863593][T12195] hub 2-0:1.0: USB hub found [ 349.865614][T12195] hub 2-0:1.0: 8 ports detected [ 350.727162][T12202] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.905681][T12202] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.001865][T12210] loop3: detected capacity change from 0 to 8192 [ 351.022266][T12210] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.029561][T12202] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.737141][T12202] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.042153][T12219] loop3: detected capacity change from 0 to 8 [ 352.113037][T12202] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.115566][T12219] SQUASHFS error: xz decompression failed, data probably corrupt [ 352.121782][T12219] SQUASHFS error: Failed to read block 0x108: -5 [ 352.140200][T12219] SQUASHFS error: Unable to read metadata cache entry [106] [ 352.141860][T12219] SQUASHFS error: Unable to read inode 0x11f [ 352.159438][T12202] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.196766][T12202] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.256435][T12202] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.834736][ T6473] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 352.994478][ T6473] usb 1-1: Using ep0 maxpacket: 32 [ 352.997148][ T6473] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 353.092979][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 353.099018][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 353.103283][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 353.106343][ T6473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 353.110546][ T6473] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 353.112619][ T6473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.114577][ T6473] usb 1-1: Product: syz [ 353.115512][ T6473] usb 1-1: Manufacturer: syz [ 353.116474][ T6473] usb 1-1: SerialNumber: syz [ 353.119227][ T6473] usb 1-1: config 0 descriptor?? [ 353.135896][T12237] loop2: detected capacity change from 0 to 4096 [ 353.376837][T12225] binder: 12223:12225 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 353.382230][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.397469][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.400983][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.402865][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.425819][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.427624][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.429200][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.431058][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.432813][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.440212][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.446041][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.449366][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.454104][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.457651][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.462962][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.470536][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.478085][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.481971][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.489760][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.497964][ T6473] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 353.499905][ T6473] input input6: Timeout waiting for response from device. [ 353.511115][ T6473] usb 1-1: USB disconnect, device number 11 [ 353.669764][T12248] netlink: 'syz.4.1905': attribute type 10 has an invalid length. [ 357.287547][T12269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.300749][T12269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.317380][T12274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.319503][T12274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.767040][T12284] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 359.533529][T12292] loop4: detected capacity change from 0 to 512 [ 359.562598][T12292] EXT4-fs (loop4): orphan cleanup on readonly fs [ 359.564023][T12292] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 359.580190][T12292] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 359.594571][T12292] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1920: attempt to clear invalid blocks 2 len 1 [ 359.603286][T12292] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1920: invalid indirect mapped block 1819239214 (level 0) [ 359.613258][T12292] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1920: invalid indirect mapped block 1819239214 (level 1) [ 359.620469][T12292] EXT4-fs (loop4): 1 truncate cleaned up [ 359.622467][T12292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.686910][T12292] EXT4-fs error (device loop4): __ext4_remount:6749: comm syz.4.1920: Abort forced by user [ 359.689731][T12292] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 359.759569][ T6425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.711651][T12311] PKCS8: Unsupported PKCS#8 version [ 361.839882][T12315] loop3: detected capacity change from 0 to 256 [ 362.871151][T12329] loop2: detected capacity change from 0 to 256 [ 362.933262][T12329] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 363.083768][T12332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.099663][T12332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.200544][T12336] netlink: 'syz.0.1936': attribute type 10 has an invalid length. [ 364.207552][T12344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.209724][T12344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.283031][T12346] loop0: detected capacity change from 0 to 1024 [ 364.346302][T12349] Cache volume key already in use (9p,(null),) [ 365.397095][ T34] hfsplus: b-tree write err: -5, ino 4 [ 365.616600][T12362] loop2: detected capacity change from 0 to 2048 [ 366.780904][T12352] loop4: detected capacity change from 0 to 32768 [ 366.785204][T12362] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.885418][T12364] loop1: detected capacity change from 0 to 512 [ 367.048147][T12364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.103282][T12364] EXT4-fs (loop1): orphan cleanup on readonly fs [ 367.108855][T12364] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1945: bg 0: block 248: padding at end of block bitmap is not set [ 367.126460][T12364] Quota error (device loop1): write_blk: dquota write failed [ 367.128129][T12364] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 367.130182][T12364] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1945: Failed to acquire dquot type 1 [ 367.170931][T12364] EXT4-fs (loop1): 1 truncate cleaned up [ 367.194282][T12364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 367.417535][T12379] netlink: 'syz.2.1950': attribute type 10 has an invalid length. [ 367.420782][ T6432] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.104155][T12392] Cache volume key already in use (9p,(null),) [ 368.628672][T12394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.630648][T12394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.019757][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.021775][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.253636][T12381] loop2: detected capacity change from 0 to 32768 [ 370.376580][T12381] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 370.482336][T12416] loop4: detected capacity change from 0 to 64 [ 370.540969][T12416] hfs: get root inode failed [ 371.093760][T12421] netlink: 'syz.1.1963': attribute type 1 has an invalid length. [ 371.098291][T12421] netlink: 'syz.1.1963': attribute type 4 has an invalid length. [ 371.111122][T12421] netlink: 15363 bytes leftover after parsing attributes in process `syz.1.1963'. [ 371.166224][T12421] netlink: 'syz.1.1963': attribute type 10 has an invalid length. [ 371.195898][ T6430] ocfs2: Unmounting device (7,2) on (node local) [ 371.741086][ T2356] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.371126][T12456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1977'. [ 373.421620][T12458] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 373.423355][T12458] netlink: 'syz.2.1979': attribute type 4 has an invalid length. [ 373.425546][T12458] netlink: 15363 bytes leftover after parsing attributes in process `syz.2.1979'. [ 373.481519][T12458] netlink: 'syz.2.1979': attribute type 10 has an invalid length. [ 376.492846][T12500] netlink: 'syz.0.1992': attribute type 1 has an invalid length. [ 376.506983][T12500] netlink: 'syz.0.1992': attribute type 4 has an invalid length. [ 376.508708][T12500] netlink: 15363 bytes leftover after parsing attributes in process `syz.0.1992'. [ 376.533601][T12500] netlink: 'syz.0.1992': attribute type 10 has an invalid length. [ 377.135630][T12504] loop3: detected capacity change from 0 to 32768 [ 377.270770][T12504] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 377.471961][ T6420] ocfs2: Unmounting device (7,3) on (node local) [ 380.217765][T12522] binder: 12521:12522 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 382.094665][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 382.950800][T12528] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 383.541501][T12533] loop0: detected capacity change from 0 to 8192 [ 383.558465][T12533] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 384.431317][T12549] binder: 12548:12549 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 384.436468][T12547] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 421.606829][ C0] BUG: workqueue lockup - pool cpus=0-1 node=0 flags=0x4 nice=-20 stuck for 33s! [ 421.609154][ C0] Showing busy workqueues and worker pools: [ 421.610391][ C0] workqueue events: flags=0x0 [ 421.611396][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 421.611426][ C0] pending: 2*nsim_dev_hwstats_traffic_work, vmstat_shepherd, 4*psi_avgs_work, 2*ovs_dp_masks_rebalance [ 421.611489][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 421.611511][ C0] pending: 3*nsim_dev_hwstats_traffic_work, psi_avgs_work [ 421.611539][ C0] workqueue events_long: flags=0x0 [ 421.619729][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 421.619762][ C0] pending: 6*defense_work_handler [ 421.619787][ C0] workqueue events_unbound: flags=0x2 [ 421.623470][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=8 refcnt=9 [ 421.623499][ C0] pending: 4*cfg80211_wiphy_work, kfree_rcu_monitor, crng_reseed, cfg80211_wiphy_work, idle_cull_fn [ 421.623565][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=14 refcnt=16 [ 421.623584][ C0] in-flight: 2135:fsnotify_connector_destroy_workfn ,153:fsnotify_mark_destroy_workfn fsnotify_mark_destroy_workfn BAR(12542) [ 421.623628][ C0] pending: 2*cfg80211_wiphy_work, toggle_allocation_gate, 5*nsim_dev_trap_report_work, flush_memcg_stats_dwork, kfree_rcu_monitor, cfg80211_wiphy_work [ 421.623682][ C0] workqueue events_power_efficient: flags=0x82 [ 421.636105][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=4 refcnt=5 [ 421.636147][ C0] pending: 4*check_lifetime [ 421.636171][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=6 refcnt=7 [ 421.636190][ C0] pending: neigh_managed_work, wg_ratelimiter_gc_entries, neigh_managed_work, 2*neigh_periodic_work, do_cache_clean [ 421.636245][ C0] workqueue rcu_gp: flags=0x8 [ 421.643671][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 421.643708][ C0] pending: srcu_invoke_callbacks [ 421.643732][ C0] workqueue mm_percpu_wq: flags=0x8 [ 421.647357][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 421.647388][ C0] pending: vmstat_update [ 421.647411][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 421.647436][ C0] pending: vmstat_update [ 421.647456][ C0] workqueue writeback: flags=0x4a [ 421.653489][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 421.653523][ C0] pending: wb_update_bandwidth_workfn, wb_workfn [ 421.653611][ C0] workqueue krxrpcd: flags=0x2001a [ 421.657683][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=9 [ 421.657716][ C0] pending: rxrpc_peer_keepalive_worker [ 421.657734][ C0] inactive: 5*rxrpc_peer_keepalive_worker [ 421.657752][ C0] workqueue krdsd: flags=0x6000a [ 421.662503][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 421.662536][ C0] pending: rds_connect_worker [ 421.662563][ C0] workqueue bat_events: flags=0x6000a [ 421.666131][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=35 [ 421.666165][ C0] in-flight: 662:batadv_nc_worker [ 421.666197][ C0] inactive: 3*batadv_nc_worker, 3*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, 4*batadv_mcast_mla_update, 2*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_purge_orig, 3*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge [ 421.666374][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 421.677893][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 421.677928][ C0] pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker [ 421.677981][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 421.682798][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 421.682832][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 421.682871][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 421.687511][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 421.687544][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 421.687599][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 421.692274][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 421.692311][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 421.692357][ C0] workqueue wg-kex-wg0: flags=0x6 [ 421.697212][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 421.697248][ C0] pending: 2*wg_packet_handshake_send_worker [ 421.697281][ C0] workqueue wg-kex-wg1: flags=0x6 [ 421.701142][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 421.701175][ C0] pending: 2*wg_packet_handshake_send_worker [ 421.701205][ C0] workqueue wg-kex-wg2: flags=0x6 [ 421.705125][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 421.705156][ C0] pending: 2*wg_packet_handshake_send_worker [ 421.705184][ C0] workqueue wg-kex-wg0: flags=0x6 [ 421.708869][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 421.708901][ C0] pending: wg_packet_handshake_send_worker [ 421.708944][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 421.712827][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 421.712859][ C0] pending: wg_packet_decrypt_worker, wg_packet_tx_worker, wg_packet_encrypt_worker [ 421.712903][ C0] workqueue wg-kex-wg1: flags=0x6 [ 421.717594][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 421.717625][ C0] pending: wg_packet_handshake_send_worker [ 421.717652][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 421.721456][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 421.721486][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 421.721521][ C0] workqueue wg-kex-wg2: flags=0x6 [ 421.725865][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 421.725897][ C0] pending: wg_packet_handshake_send_worker [ 421.725930][ C0] workqueue wg-kex-wg0: flags=0x6 [ 421.729671][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 421.729698][ C0] pending: 2*wg_packet_handshake_send_worker [ 421.729727][ C0] workqueue wg-kex-wg1: flags=0x6 [ 421.733612][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 421.733638][ C0] pending: 2*wg_packet_handshake_send_worker [ 421.733668][ C0] workqueue wg-kex-wg2: flags=0x6 [ 421.737508][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 421.737539][ C0] pending: 2*wg_packet_handshake_send_worker [ 421.737573][ C0] workqueue bond1: flags=0x2000a [ 421.741295][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 421.741323][ C0] pending: bond_3ad_state_machine_handler [ 421.741345][ C0] inactive: bond_mii_monitor [ 421.741358][ C0] workqueue bond2: flags=0x2000a [ 421.746346][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 421.746375][ C0] pending: bond_mii_monitor [ 421.746395][ C0] inactive: bond_3ad_state_machine_handler [ 421.746433][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=4s workers=14 idle: 608 768 11 622 701 34 13 44 2092 316 332