last executing test programs: 9.089565866s ago: executing program 2 (id=2702): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) close(r0) r1 = syz_io_uring_setup(0xfba, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x4, 0x196}, &(0x7f00000000c0), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8.961492626s ago: executing program 0 (id=2705): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[], 0x294}, 0x1, 0x0, 0x0, 0x890}, 0x8811) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 8.903250926s ago: executing program 2 (id=2706): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000002740)=[{&(0x7f0000001280)="a22a70115c4812c3edd8a8239785066c111d0d5ec2dabb5eae4ffc76d5fc0a370d73227da430f46243e9189daf3cef7b0c8a47f66290ad2d04bff077c6", 0x3d}, {&(0x7f0000001380)="29610d4b932b4588833983f3f864cbc3a5c7799937fade3590316531c158202763b49a2c195c0bf593e020b8c68b10df2d7424fbdb76a3fceac01c677f8556c48de403576a91864ad487cf18554e701077423010e363e618a19831820fd1d55d7d810a9102e58900d2324e5ee093b3f901bad64141e2a6f1579c4ce09a", 0x7d}, {&(0x7f00000001c0)="45168c77f40296d13cd14a205ea2b6236d56742786326fda0d18ba2df431ba0f4985d6b31463c6ff8233557d0fa07bfc8cc9a7948349bb29f9d0c0a792a5ff3b6912b116fc79c990d01eb61f2a1df88a487c90de85409df797ace855bdcb4d4c82ccc9cfb7a61c828b01db", 0x6b}, {&(0x7f0000002540)="f8b7d2752b165182621a866d759761693e4a7ce5d3f0f3cfeaa1b06cf6", 0x1d}, {&(0x7f0000002800)="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", 0x15f}], 0x5) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x3) 8.052328742s ago: executing program 0 (id=2708): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e", 0x45}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eed", 0x25}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2", 0x64}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="9c886c2a4f73176208c595b50d882c8552b3", 0x12}, {&(0x7f00000004c0)="990dfec1b2441f804081fd351aa6794389d94870a5a285f472ebc123d871bc5ca6bf383ecf", 0x25}, {&(0x7f0000000a00)}, {&(0x7f0000000a80)="93c4b765239b83718183f24c3a296743d4d0f13b8ec9868b84cb7b132161510889546d90f09905f7d395fb43d8c654e16d4abcca449495627583584ad8202ade0c54", 0x42}], 0x4}}], 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 8.028455042s ago: executing program 3 (id=2709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0, 0x0, 0x5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='2\x00'/12, @ANYRES32=r3, @ANYBLOB="851a"], 0x20) 7.913563312s ago: executing program 1 (id=2711): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa8de}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 7.913306492s ago: executing program 3 (id=2712): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_handle={0x77682a85, 0x10b}, @fda={0x66646185, 0x70, 0x1, 0x2}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000f3030000000000000000000010000000fb03"], 0x420}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x40010, r4, 0x27242000) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x70, 0x13, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.894566082s ago: executing program 2 (id=2713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x80fe, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) 7.746787721s ago: executing program 3 (id=2714): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000000c0)={0x14}, 0x14) 6.136635565s ago: executing program 4 (id=2715): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000100)) 6.060355734s ago: executing program 4 (id=2716): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) 6.059947375s ago: executing program 0 (id=2717): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r2, 0x1, r0, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2}) 6.059172385s ago: executing program 2 (id=2718): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[], 0x294}, 0x1, 0x0, 0x0, 0x890}, 0x8811) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 5.969647864s ago: executing program 1 (id=2719): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x9, 0xccb, 0x2f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ef, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0xfbfd, 0x401d, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 5.873856174s ago: executing program 1 (id=2720): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8c"], 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.073423s ago: executing program 3 (id=2721): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0x3d}, 0x2) 4.96556064s ago: executing program 4 (id=2722): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="000377000000770304"], 0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) 4.93107499s ago: executing program 2 (id=2723): write$sndseq(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.780849069s ago: executing program 0 (id=2724): socket$inet6(0xa, 0x80003, 0xff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 3.801253565s ago: executing program 3 (id=2725): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000280)=[{0x2, 0x7, 0x0, 0x7ffc0002}, {0x7, 0x0, 0x6, 0x7fffffff}, {0xf, 0x40, 0x9, 0x80000}]}) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) eventfd2(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x4008844) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$kcm(0x2, 0x2, 0x73) 3.799795345s ago: executing program 4 (id=2735): chdir(&(0x7f0000000080)='./file1\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 3.747734875s ago: executing program 0 (id=2726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x0, &(0x7f0000000140)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 3.714221635s ago: executing program 2 (id=2727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x400}, &(0x7f0000000100)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095", @ANYRESDEC=r1, @ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x200000000004}]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) 3.451475774s ago: executing program 1 (id=2728): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e", 0x45}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eed", 0x25}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2", 0x64}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)="9c886c2a4f73176208c595b50d882c8552b3", 0x12}, {&(0x7f00000004c0)="990dfec1b2441f804081fd351aa6794389d94870a5a285f472ebc123d871bc5ca6bf383ecf", 0x25}, {&(0x7f0000000a00)}, {&(0x7f0000000a80)="93c4b765239b83718183f24c3a296743d4d0f13b8ec9868b84cb7b132161510889546d90f09905f7d395fb43d8c654e16d4abcca449495627583584ad8202ade0c54", 0x42}], 0x4}}], 0x3, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.450946824s ago: executing program 4 (id=2729): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x80fe, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) 161.767621ms ago: executing program 4 (id=2730): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x9, 0xccb, 0x2f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ef, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0xfbfd, 0x401d, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 93.593741ms ago: executing program 1 (id=2731): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x6f, 0x0, 0x7, 0xa, 0x0, 0x81}) 93.38554ms ago: executing program 1 (id=2732): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000000100)=[{0xf6f2, 0x200, 0x7a, &(0x7f00000001c0)="67856232af7a080ed541803afa90c5d61d0da77ec948c432912307b3b09c9018b2f88d776edda754d1c985f6f9af3b899e1e73ddaf72eba689446d7bf7a435dcddaf818732040d6ca6a0eab5814d1ab3a30047aea35fa4241963462f8facbd7ecac714f026e163bdad79255925cf4cefd4699856532729eee869"}], 0x1}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_ifreq(r1, 0x8929, &(0x7f0000000340)={'tunl0\x00', @ifru_settings={0x5, 0x8000, @te1=&(0x7f0000000300)={0x4, 0x6, 0x3ff, 0x7}}}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 67.61107ms ago: executing program 3 (id=2733): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[], 0x294}, 0x1, 0x0, 0x0, 0x890}, 0x8811) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=2734): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x4010) kernel console output (not intermixed with test programs): adv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.424159][ T4293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.498358][ T4303] device hsr_slave_0 entered promiscuous mode [ 35.537158][ T4303] device hsr_slave_1 entered promiscuous mode [ 35.576973][ T4303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.578754][ T4303] Cannot create hsr debugfs directory [ 35.586265][ T4294] team0: Port device team_slave_0 added [ 35.591441][ T4294] team0: Port device team_slave_1 added [ 35.643442][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.644980][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.650548][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.688798][ T4307] device hsr_slave_0 entered promiscuous mode [ 35.747335][ T4307] device hsr_slave_1 entered promiscuous mode [ 35.786987][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.788568][ T4307] Cannot create hsr debugfs directory [ 35.818574][ T4293] device hsr_slave_0 entered promiscuous mode [ 35.857461][ T4293] device hsr_slave_1 entered promiscuous mode [ 35.896990][ T4293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.898605][ T4293] Cannot create hsr debugfs directory [ 35.900142][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.901611][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.907139][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.048671][ T4294] device hsr_slave_0 entered promiscuous mode [ 36.087439][ T4294] device hsr_slave_1 entered promiscuous mode [ 36.126991][ T4294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.128735][ T4294] Cannot create hsr debugfs directory [ 36.241630][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.278770][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.330418][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.379038][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.453956][ T4303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.496060][ T4303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.497410][ T4310] Bluetooth: hci3: command 0x0409 tx timeout [ 36.497737][ T4299] Bluetooth: hci2: command 0x0409 tx timeout [ 36.498969][ T4310] Bluetooth: hci4: command 0x0409 tx timeout [ 36.500233][ T4299] Bluetooth: hci1: command 0x0409 tx timeout [ 36.501438][ T4310] Bluetooth: hci0: command 0x0409 tx timeout [ 36.548846][ T4303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.589133][ T4307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.631711][ T4307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.674975][ T4307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.748395][ T4303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.801222][ T4307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.877667][ T4293] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.908852][ T4293] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.979480][ T4293] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.019692][ T4293] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.105358][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.113895][ T4294] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.146728][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.149183][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.152753][ T4294] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.189042][ T4294] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.237665][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.240045][ T4294] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.288619][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.291326][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.293744][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.295378][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.307840][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.310576][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.313095][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.315242][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.316785][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.352494][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.358626][ T4303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.372326][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.385375][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.391693][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.398503][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.402028][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.404265][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.413967][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.420180][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.423247][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.425280][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.430638][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.433228][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.435551][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.438282][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.446620][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.448800][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.453050][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.458069][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.461899][ T4303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.464526][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.468193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.470431][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.472621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.474675][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.476270][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.485180][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.490265][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.501982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.504380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.506427][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.508008][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.510418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.512496][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.514439][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.516036][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.519080][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.521316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.523221][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.524957][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.530066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.532526][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.549839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.552378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.554648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.557080][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.558640][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.562765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.565025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.569756][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.571254][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.587032][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.589496][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.592220][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.594333][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.610398][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.612575][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.615139][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.618794][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.621215][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.623404][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.625922][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.636054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.638721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.651226][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.654054][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.656239][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.659562][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.670461][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.672705][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.675131][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.678108][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.680249][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.682392][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.684657][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.691601][ T4307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.693790][ T4307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.697993][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.700061][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.702636][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.704712][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.713949][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.716079][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.723831][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.729310][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.736383][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.747564][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.749773][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.751867][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.753777][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.764370][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.772195][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.775908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.779192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.781448][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.783072][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.785487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.804130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.805904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.815997][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.820134][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.822234][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.823764][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.828824][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.838334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.841099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.877322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.879794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.881956][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.884397][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.889546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.913958][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.916142][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.920226][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.922557][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.924793][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.932895][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.943683][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.964771][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.966477][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.999871][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.001667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.003754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.005921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.014463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.020862][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.024141][ T4300] device veth0_vlan entered promiscuous mode [ 38.033835][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.035935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.052819][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.054474][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.061751][ T4303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.066315][ T4300] device veth1_vlan entered promiscuous mode [ 38.076184][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.090131][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.092350][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.112701][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.114452][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.123076][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.125293][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.138671][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.140744][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.152138][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.154298][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.156770][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.160800][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.164324][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.166788][ T4307] device veth0_vlan entered promiscuous mode [ 38.179889][ T4300] device veth0_macvtap entered promiscuous mode [ 38.191358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.193901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.196004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.198513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.200747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.202899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.204974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.213601][ T4303] device veth0_vlan entered promiscuous mode [ 38.225299][ T4300] device veth1_macvtap entered promiscuous mode [ 38.235552][ T4307] device veth1_vlan entered promiscuous mode [ 38.242394][ T4293] device veth0_vlan entered promiscuous mode [ 38.246609][ T4303] device veth1_vlan entered promiscuous mode [ 38.249648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.251798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.253893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.255832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.259975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.268289][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.281914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.284108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.286058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.288721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.291565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.296481][ T4293] device veth1_vlan entered promiscuous mode [ 38.305396][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.314556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.316761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.320641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.322681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.324826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.333695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.336511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.341105][ T4307] device veth0_macvtap entered promiscuous mode [ 38.345623][ T4307] device veth1_macvtap entered promiscuous mode [ 38.352245][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.354238][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.356055][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.359177][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.389945][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.392095][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.395174][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.396693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.402044][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.404065][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.406264][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.409228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.411361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.426124][ T4303] device veth0_macvtap entered promiscuous mode [ 38.433954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.436098][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.438800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.440919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.443056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.463769][ T4303] device veth1_macvtap entered promiscuous mode [ 38.469488][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.471600][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.474634][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.483337][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.485326][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.488377][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.493160][ T4307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.494900][ T4307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.496606][ T4307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.499728][ T4307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.515752][ T4293] device veth0_macvtap entered promiscuous mode [ 38.543169][ T4293] device veth1_macvtap entered promiscuous mode [ 38.545272][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.547088][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.555340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.557787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.559661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.561519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.563585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.566092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.568971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.574084][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.576127][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.578841][ T4299] Bluetooth: hci0: command 0x041b tx timeout [ 38.580699][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.582731][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.586232][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.587966][ T4301] Bluetooth: hci1: command 0x041b tx timeout [ 38.587999][ T4301] Bluetooth: hci4: command 0x041b tx timeout [ 38.588022][ T4301] Bluetooth: hci2: command 0x041b tx timeout [ 38.588044][ T4301] Bluetooth: hci3: command 0x041b tx timeout [ 38.594256][ T4294] device veth0_vlan entered promiscuous mode [ 38.602465][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.604587][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.628696][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.630904][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.632779][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.634850][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.640224][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.643200][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.645299][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.655469][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.658976][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.660995][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.663046][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.665147][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.671375][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.674671][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.679623][ T4303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.681424][ T4303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.683112][ T4303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.684903][ T4303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.690923][ T4294] device veth1_vlan entered promiscuous mode [ 38.702751][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.705009][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.710324][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.719591][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.721347][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.739422][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.741083][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.751158][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.753514][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.755436][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.759080][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.761247][ T4293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.763469][ T4293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.766334][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.769286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.771402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.773307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.775270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.778211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.789993][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.791846][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.809380][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.819979][ T4293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.821928][ T4293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.823696][ T4293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.825393][ T4293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.925773][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.927510][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.949328][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.950968][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.045160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.049365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.051634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.053643][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.078857][ T4294] device veth0_macvtap entered promiscuous mode [ 39.155744][ T4379] atomic_op 000000003c664176 conn xmit_atomic 0000000000000000 [ 39.792507][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.836502][ T4294] device veth1_macvtap entered promiscuous mode [ 39.840392][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.842441][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.853896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.945311][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.951411][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.953367][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.955443][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.966912][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.968962][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.970870][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.972868][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.982308][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.991827][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.993984][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.034544][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.034968][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.039712][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.040072][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.043958][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.055338][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.059004][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.061141][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.063167][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.065289][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.074107][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.097973][ T4294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.101600][ T4294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.103641][ T4294] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.105692][ T4294] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.123497][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.125623][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.131398][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.229468][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.233538][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.244597][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.247864][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.250307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.265284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.552620][ T4407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11'. [ 40.722082][ T4310] Bluetooth: hci4: command 0x040f tx timeout [ 40.724359][ T4299] Bluetooth: hci1: command 0x040f tx timeout [ 40.726109][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 40.728203][ T4310] Bluetooth: hci3: command 0x040f tx timeout [ 40.746977][ T4301] Bluetooth: hci2: command 0x040f tx timeout [ 42.004121][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.006394][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.748018][ T4304] Bluetooth: hci0: command 0x0419 tx timeout [ 42.752116][ T4301] Bluetooth: hci3: command 0x0419 tx timeout [ 42.755093][ T4310] Bluetooth: hci1: command 0x0419 tx timeout [ 42.756422][ T4299] Bluetooth: hci4: command 0x0419 tx timeout [ 42.817974][ T4299] Bluetooth: hci2: command 0x0419 tx timeout [ 43.575879][ T4460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 44.102580][ T4477] atomic_op 00000000be55c8d9 conn xmit_atomic 0000000000000000 [ 45.865789][ T4494] device vlan2 entered promiscuous mode [ 46.019440][ T4500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 46.817475][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 47.605637][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.613908][ T7] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 48.019663][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.401398][ T4536] input: syz1 as /devices/virtual/input/input2 [ 48.591378][ T7] usb 1-1: config 0 descriptor?? [ 48.607997][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 48.670315][ T4546] device vlan2 entered promiscuous mode [ 48.987749][ T4555] atomic_op 000000001e8270f9 conn xmit_atomic 0000000000000000 [ 49.588301][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 49.802505][ T7] pwc: recv_control_msg error -71 req 02 val 2c00 [ 49.804849][ T7] pwc: recv_control_msg error -71 req 04 val 1000 [ 49.806775][ T7] pwc: recv_control_msg error -71 req 04 val 1300 [ 49.823014][ T7] pwc: recv_control_msg error -71 req 04 val 1400 [ 49.825184][ T7] pwc: recv_control_msg error -71 req 02 val 2000 [ 49.829025][ T7] pwc: recv_control_msg error -71 req 02 val 2100 [ 49.830836][ T7] pwc: recv_control_msg error -71 req 04 val 1500 [ 49.832545][ T7] pwc: recv_control_msg error -71 req 02 val 2500 [ 49.834290][ T7] pwc: recv_control_msg error -71 req 02 val 2400 [ 49.836086][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 49.842726][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 49.844461][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 49.846378][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 49.849786][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 49.860850][ T7] pwc: Registered as video11. [ 49.863804][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input3 [ 49.880084][ T7] usb 1-1: USB disconnect, device number 2 [ 50.072609][ T4504] loop7: detected capacity change from 0 to 16384 [ 50.688069][ T4504] I/O error, dev loop7, sector 1792 op 0x0:(READ) flags 0x80700 phys_seg 19 prio class 2 [ 51.042849][ T4578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.047100][ T4578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.207663][ T4596] device vlan2 entered promiscuous mode [ 52.391380][ T4606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.393375][ T4606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.790298][ T4606] loop7: detected capacity change from 0 to 16384 [ 53.550063][ T4613] I/O error, dev loop7, sector 10496 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 53.673244][ T4622] atomic_op 000000003fbd6d5b conn xmit_atomic 0000000000000000 [ 54.196937][ T4342] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 54.379123][ T4342] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 54.380919][ T4342] usb 1-1: config 0 has no interface number 0 [ 54.382163][ T4342] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 54.408918][ T4342] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 54.427000][ T4342] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 54.437369][ T4342] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 54.440626][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.444637][ T4342] usb 1-1: Product: syz [ 54.445563][ T4342] usb 1-1: Manufacturer: syz [ 54.449944][ T4342] usb 1-1: SerialNumber: syz [ 54.456467][ T4342] usb 1-1: config 0 descriptor?? [ 54.462834][ T4626] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 54.612483][ T4626] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 54.616313][ T4342] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 54.633025][ T4342] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 55.680048][ T4343] usb 1-1: USB disconnect, device number 3 [ 55.698138][ T4343] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 55.718151][ T4343] cyberjack 1-1:0.69: device disconnected [ 55.955825][ T4655] device vlan2 entered promiscuous mode [ 57.467462][ T4684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.469491][ T4684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.521382][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 57.936925][ T4684] loop7: detected capacity change from 0 to 16384 [ 58.519255][ T4696] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 58.557273][ T4700] device vlan2 entered promiscuous mode [ 59.146471][ T4343] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 59.163357][ T4717] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 59.221779][ T4717] tipc: Started in network mode [ 59.223099][ T4717] tipc: Node identity 7f000001, cluster identity 4711 [ 59.225433][ T4717] tipc: Enabled bearer , priority 10 [ 59.229321][ T4717] tipc: Enabled bearer , priority 0 [ 59.292473][ T4719] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 59.465411][ T4343] usb 1-1: Using ep0 maxpacket: 8 [ 59.477805][ T4343] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 59.479468][ T4343] usb 1-1: config 0 has no interface number 0 [ 59.480817][ T4343] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 59.485716][ T4343] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 59.488209][ T4343] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.490912][ T4343] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 59.493311][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.497537][ T4343] usb 1-1: config 0 descriptor?? [ 59.501990][ T4343] ldusb 1-1:0.55: Interrupt in endpoint not found [ 59.644967][ T4732] atomic_op 00000000872086e4 conn xmit_atomic 0000000000000000 [ 60.338588][ T4341] tipc: Node number set to 2130706433 [ 60.565315][ T7] usb 1-1: USB disconnect, device number 4 [ 60.621369][ T4741] device vlan2 entered promiscuous mode [ 60.833632][ T4747] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 60.870328][ T4750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.872285][ T4750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.955358][ T4756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.135'. [ 60.958247][ T4758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.960261][ T4758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.124346][ T4750] loop7: detected capacity change from 0 to 16384 [ 61.344443][ T4750] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 62.280566][ T4777] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 62.479647][ T4780] device vlan2 entered promiscuous mode [ 62.497634][ T4310] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 62.499559][ T4310] Bluetooth: hci0: Injecting HCI hardware error event [ 62.501934][ T4299] Bluetooth: hci0: hardware error 0x00 [ 62.725764][ T4781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.142'. [ 62.845117][ T4793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.854479][ T4793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.986595][ T4801] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 63.024116][ T4804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.040763][ T4804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.117926][ T4808] Zero length message leads to an empty skb [ 63.169393][ T4810] device vlan2 entered promiscuous mode [ 63.404403][ T4820] atomic_op 00000000898a640d conn xmit_atomic 0000000000000000 [ 63.564408][ T4828] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 64.656963][ T4299] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 65.856811][ C1] sched: RT throttling activated [ 65.858949][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.861709][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.871882][ T4840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.873936][ T4840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.009534][ T4842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.011455][ T4842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.064837][ T4843] delete_channel: no stack [ 66.169947][ T4848] device vlan2 entered promiscuous mode [ 66.489864][ T4861] netlink: 'syz.4.181': attribute type 1 has an invalid length. [ 66.515926][ T4861] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 69.878907][ T14] cfg80211: failed to load regulatory.db [ 69.887721][ T4876] mkiss: ax0: crc mode is auto. [ 70.155587][ T4876] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 70.479818][ T4895] device vlan2 entered promiscuous mode [ 70.481616][ T4895] batman_adv: batadv0: Adding interface: vlan2 [ 70.487954][ T4895] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.529818][ T4895] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 70.532647][ T4897] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 71.172106][ T4913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.174204][ T4913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.277256][ T4913] Bluetooth: MGMT ver 1.22 [ 72.918611][ T4927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.921243][ T4927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.855623][ T4299] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 74.903273][ T4928] atomic_op 00000000040da9c1 conn xmit_atomic 0000000000000000 [ 75.161373][ T4939] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 75.317823][ T4944] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 75.348960][ T4946] device vlan2 entered promiscuous mode [ 75.493815][ T112] kernel write not supported for file /sequencer2 (pid: 112 comm: kworker/0:2) [ 76.394818][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 77.862595][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 78.110312][ T4986] device vlan3 entered promiscuous mode [ 78.219954][ T4990] atomic_op 00000000567321cd conn xmit_atomic 0000000000000000 [ 78.403727][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.406307][ T4992] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.497200][ T4972] delete_channel: no stack [ 78.799193][ T4998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 79.956326][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 80.793820][ T5025] device vlan2 entered promiscuous mode [ 81.318064][ T5038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 83.816711][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 85.341525][ T4299] Bluetooth: hci1: Invalid handle: 0x73c2 > 0x0eff [ 87.597380][ T5097] atomic_op 000000000c567c43 conn xmit_atomic 0000000000000000 [ 88.721519][ T5116] device vlan3 entered promiscuous mode [ 92.137102][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.509315][ T5157] device vlan2 entered promiscuous mode [ 92.663760][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 92.667558][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 92.669334][ T24] usb 1-1: config 0 has no interface number 0 [ 92.677283][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 92.679250][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.681044][ T24] usb 1-1: Product: syz [ 92.681959][ T24] usb 1-1: Manufacturer: syz [ 92.687333][ T24] usb 1-1: SerialNumber: syz [ 92.702210][ T24] usb 1-1: config 0 descriptor?? [ 92.706641][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 93.515007][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 93.539532][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 94.607501][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 94.609876][ T4345] usb 1-1: USB disconnect, device number 5 [ 94.613576][ T4345] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 94.633028][ T4345] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 94.657591][ T4345] quatech2 1-1:0.51: device disconnected [ 94.753814][ T5183] atomic_op 000000003ec648aa conn xmit_atomic 0000000000000000 [ 96.128117][ T5205] device vlan2 entered promiscuous mode [ 97.807017][ T4299] Bluetooth: unknown link type 227 [ 97.900999][ T5230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.902979][ T5230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.934143][ T5233] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 97.936338][ T5233] EXT2-fs (loop3): error: unable to read superblock [ 98.041053][ T5237] netlink: 'syz.0.310': attribute type 2 has an invalid length. [ 99.261267][ T5252] device vlan2 entered promiscuous mode [ 99.857929][ T4310] Bluetooth: hci4: command 0x0409 tx timeout [ 100.396324][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.412632][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.727310][ T5291] device vlan2 entered promiscuous mode [ 100.913264][ T5301] atomic_op 000000002b8a15dc conn xmit_atomic 0000000000000000 [ 101.122055][ T5304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.349'. [ 102.449966][ T5330] device vlan2 entered promiscuous mode [ 102.475712][ T27] audit: type=1326 audit(102.450:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89552ba8 code=0x7ffc0000 [ 102.480800][ T27] audit: type=1326 audit(102.460:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89552ba8 code=0x7ffc0000 [ 102.485896][ T27] audit: type=1326 audit(102.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff89552ba8 code=0x7ffc0000 [ 102.491901][ T27] audit: type=1326 audit(102.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89552ba8 code=0x7ffc0000 [ 102.514136][ T27] audit: type=1326 audit(102.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89552ba8 code=0x7ffc0000 [ 102.521401][ T27] audit: type=1326 audit(102.470:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff895510d4 code=0x7ffc0000 [ 102.525816][ T27] audit: type=1326 audit(102.470:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89552ba8 code=0x7ffc0000 [ 102.533408][ T27] audit: type=1326 audit(102.470:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89552ba8 code=0x7ffc0000 [ 102.544270][ T27] audit: type=1326 audit(102.470:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff89552ba8 code=0x7ffc0000 [ 102.551393][ T27] audit: type=1326 audit(102.470:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5326 comm="syz.1.358" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89552ba8 code=0x7ffc0000 [ 102.559615][ T5333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'. [ 102.677107][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.679062][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.816908][ T4310] Bluetooth: hci1: command 0x2016 tx timeout [ 104.013131][ T5365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'. [ 104.810351][ T5372] device vlan2 entered promiscuous mode [ 104.844173][ T5373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.378'. [ 105.300478][ T5394] loop9: detected capacity change from 0 to 7 [ 105.305189][ T5394] loop9: [POWERTEC] p1 p2 [ 105.308440][ T5394] loop9: p1 size 139 extends beyond EOD, truncated [ 105.311971][ T5394] loop9: p2 size 18 extends beyond EOD, truncated [ 106.329704][ T5397] atomic_op 000000002eb45656 conn xmit_atomic 0000000000000000 [ 106.492379][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.504278][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.967367][ T5422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'. [ 106.998133][ T4284] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.177191][ T4284] usb 1-1: Using ep0 maxpacket: 32 [ 107.184026][ T4284] usb 1-1: config 1 interface 0 has no altsetting 0 [ 107.190334][ T4284] usb 1-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 107.199666][ T4284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.206745][ T4284] usb 1-1: Product: syz [ 107.211471][ T4284] usb 1-1: Manufacturer: syz [ 107.215832][ T4284] usb 1-1: SerialNumber: syz [ 107.255471][ T5442] device vlan2 entered promiscuous mode [ 107.433471][ T4299] Bluetooth: hci2: Malformed LE Event: 0x0b [ 107.444745][ T4284] usbhid 1-1:1.0: can't add hid device: -71 [ 107.446122][ T4284] usbhid: probe of 1-1:1.0 failed with error -71 [ 107.461708][ T4284] usb 1-1: USB disconnect, device number 6 [ 107.994685][ T5453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'. [ 109.194514][ T5473] device vlan2 entered promiscuous mode [ 110.043873][ T5486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.045791][ T5486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.066933][ T4299] Bluetooth: hci4: Malformed LE Event: 0x0b [ 110.168106][ T5494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'. [ 111.455105][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 111.499023][ T5518] device vlan2 entered promiscuous mode [ 111.578772][ T5524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 111.593002][ T5525] atomic_op 00000000c58f3a75 conn xmit_atomic 0000000000000000 [ 113.815891][ T5548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.835341][ T5548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.856362][ T4299] Bluetooth: hci1: Malformed LE Event: 0x0b [ 114.979892][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 115.097545][ T5566] device vlan2 entered promiscuous mode [ 116.378267][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.380270][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.645166][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 117.572081][ T5595] device vlan2 entered promiscuous mode [ 117.682689][ T5603] process 'syz.3.459' launched './file1' with NULL argv: empty string added [ 118.798102][ T5620] atomic_op 00000000baaf4cf3 conn xmit_atomic 0000000000000000 [ 119.030543][ T5628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'. [ 120.125833][ T5640] device vlan3 entered promiscuous mode [ 121.271498][ T5663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.482'. [ 123.277306][ T5686] device vlan2 entered promiscuous mode [ 123.625126][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.495'. [ 124.426963][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.429078][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.619314][ T5715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.621382][ T5715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.725229][ T5726] mmap: syz.2.506 (5726) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.930060][ T5734] device vlan2 entered promiscuous mode [ 126.012471][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.068472][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.174368][ T5739] netlink: 'syz.0.510': attribute type 1 has an invalid length. [ 127.125975][ T5752] netlink: 'syz.1.514': attribute type 10 has an invalid length. [ 127.178269][ T5757] capability: warning: `syz.2.517' uses deprecated v2 capabilities in a way that may be insecure [ 127.239470][ T5759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 127.421202][ T5768] atomic_op 000000002d0bf16a conn xmit_atomic 0000000000000000 [ 127.685764][ T5771] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 129.441818][ T5781] device vlan2 entered promiscuous mode [ 130.820610][ T5806] netlink: 'syz.2.533': attribute type 1 has an invalid length. [ 131.156430][ T5811] ======================================================= [ 131.156430][ T5811] WARNING: The mand mount option has been deprecated and [ 131.156430][ T5811] and is ignored by this kernel. Remove the mand [ 131.156430][ T5811] option from the mount to silence this warning. [ 131.156430][ T5811] ======================================================= [ 131.164551][ T5811] tmpfs: Bad value for 'mpol' [ 132.649271][ T5821] netlink: 180 bytes leftover after parsing attributes in process `syz.4.538'. [ 132.694764][ T5821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.538'. [ 132.696620][ T5821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.538'. [ 133.652847][ T5832] device vlan2 entered promiscuous mode [ 134.719794][ T5844] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 134.759190][ T5847] tipc: Can't bind to reserved service type 0 [ 136.262142][ T5859] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 136.263823][ T5859] netlink: 152 bytes leftover after parsing attributes in process `syz.0.552'. [ 136.298421][ T5859] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 137.913588][ T5882] device vlan2 entered promiscuous mode [ 138.924416][ T5891] tipc: Started in network mode [ 138.925549][ T5891] tipc: Node identity , cluster identity 4711 [ 138.927615][ T5891] tipc: Failed to set node id, please configure manually [ 138.929122][ T5891] tipc: Enabling of bearer rejected, failed to enable media [ 139.630868][ T5895] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 140.870247][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.872176][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.109565][ T5921] atomic_op 0000000012199c29 conn xmit_atomic 0000000000000000 [ 141.920866][ T5932] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 141.966119][ T5931] device vlan2 entered promiscuous mode [ 143.974073][ T5966] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 144.537356][ T5979] atomic_op 000000009ebaa02f conn xmit_atomic 0000000000000000 [ 144.924248][ T5986] device vlan3 entered promiscuous mode [ 145.272080][ T6005] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 145.679868][ T6033] atomic_op 0000000060b68de8 conn xmit_atomic 0000000000000000 [ 146.518573][ T6040] device vlan3 entered promiscuous mode [ 147.362712][ T6053] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 148.527736][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.529786][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.790086][ T6089] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 148.865653][ T6092] device vlan3 entered promiscuous mode [ 149.669028][ T4299] Bluetooth: hci1: Invalid handle: 0x73c2 > 0x0eff [ 149.948824][ T6098] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 149.961872][ T6109] atomic_op 00000000177943f7 conn xmit_atomic 0000000000000000 [ 150.720281][ T6123] device vlan2 entered promiscuous mode [ 151.790391][ T6137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.795628][ T6137] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.047324][ T6137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.220584][ T6145] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 152.626481][ T6157] device vlan2 entered promiscuous mode [ 153.227944][ T6176] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 153.845760][ T6206] atomic_op 00000000c19dd0f6 conn xmit_atomic 0000000000000000 [ 154.464534][ T6212] device vlan2 entered promiscuous mode [ 155.088601][ T6220] netlink: 'syz.0.682': attribute type 1 has an invalid length. [ 156.915220][ T6248] device vlan2 entered promiscuous mode [ 157.031015][ T6254] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 158.946960][ T4301] Bluetooth: hci1: command 0x0406 tx timeout [ 158.948688][ T4301] Bluetooth: hci2: command 0x0406 tx timeout [ 158.950242][ T4301] Bluetooth: hci3: command 0x0406 tx timeout [ 159.291061][ T6287] device vlan2 entered promiscuous mode [ 159.571546][ T6294] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 159.603450][ T6296] atomic_op 0000000081f18516 conn xmit_atomic 0000000000000000 [ 162.289493][ T6328] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 162.333825][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 162.568902][ T6337] device vlan2 entered promiscuous mode [ 164.683385][ T6352] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.713896][ T6352] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 164.843786][ T6362] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 164.892976][ T6352] siw: device registration error -19 [ 165.150894][ T6369] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 165.981161][ T6376] vivid-000: kernel_thread() failed [ 168.151317][ T6397] netlink: 272 bytes leftover after parsing attributes in process `syz.1.740'. [ 168.467127][ T6399] device vlan2 entered promiscuous mode [ 170.431731][ T6424] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 172.385084][ T6454] device vlan2 entered promiscuous mode [ 173.563495][ T6471] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 174.105620][ T6495] device vlan2 entered promiscuous mode [ 174.252280][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 174.276531][ T6500] netlink: 'syz.4.780': attribute type 1 has an invalid length. [ 175.749148][ T6533] netlink: 'syz.2.792': attribute type 1 has an invalid length. [ 175.772975][ T6531] device vlan2 entered promiscuous mode [ 177.561695][ T6565] loop2: detected capacity change from 0 to 7 [ 177.564976][ T6565] Dev loop2: unable to read RDB block 7 [ 177.566241][ T6565] loop2: unable to read partition table [ 177.568743][ T6565] loop2: partition table beyond EOD, truncated [ 177.570080][ T6565] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 178.626958][ T6569] atomic_op 000000009de868e2 conn xmit_atomic 0000000000000000 [ 178.990472][ T4301] Bluetooth: hci2: command 0x0401 tx timeout [ 178.996698][ T6574] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 179.028142][ T6573] device vlan2 entered promiscuous mode [ 179.139444][ T4299] Bluetooth: hci5: command 0x1003 tx timeout [ 179.147541][ T4310] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 179.171380][ T6549] can0: slcan on ptm0. [ 179.797898][ T6543] can0 (unregistered): slcan off ptm0. [ 180.293859][ T6603] netlink: 'syz.0.818': attribute type 1 has an invalid length. [ 180.520866][ T6609] device vlan2 entered promiscuous mode [ 181.554427][ T6628] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 181.631088][ T6634] random: crng reseeded on system resumption [ 181.914641][ T6642] atomic_op 00000000f5a5d8f3 conn xmit_atomic 0000000000000000 [ 182.048057][ T6645] device vlan2 entered promiscuous mode [ 183.225866][ T6665] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 184.246376][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 184.246389][ T27] audit: type=1326 audit(184.220:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.257110][ T27] audit: type=1326 audit(184.230:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.273440][ T27] audit: type=1326 audit(184.230:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.285472][ T27] audit: type=1326 audit(184.230:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.296284][ T27] audit: type=1326 audit(184.230:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.304229][ T27] audit: type=1326 audit(184.230:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.323930][ T27] audit: type=1326 audit(184.230:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.334683][ T27] audit: type=1326 audit(184.230:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.341143][ T27] audit: type=1326 audit(184.240:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.346155][ T27] audit: type=1326 audit(184.240:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.2.848" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9dd52ba8 code=0x7ffc0000 [ 184.540003][ T6687] device vlan2 entered promiscuous mode [ 185.681297][ T6698] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 185.970033][ T6713] block nbd0: shutting down sockets [ 186.892747][ T6724] device vlan2 entered promiscuous mode [ 186.998033][ T6726] netlink: 'syz.4.869': attribute type 1 has an invalid length. [ 187.380580][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.384165][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.825460][ T6734] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 189.040395][ T6774] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 189.248303][ T6778] device vlan2 entered promiscuous mode [ 189.490536][ T6788] atomic_op 0000000046c9d682 conn xmit_atomic 0000000000000000 [ 189.806950][ T4310] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 189.810111][ T4310] Bluetooth: hci4: Injecting HCI hardware error event [ 189.812535][ T4310] Bluetooth: hci4: hardware error 0x00 [ 191.482380][ T6809] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 191.689862][ T6813] device vlan2 entered promiscuous mode [ 192.047781][ T6827] device vlan2 entered promiscuous mode [ 193.169829][ T6840] xt_nat: multiple ranges no longer supported [ 193.861197][ T4310] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 193.948187][ T6846] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 193.961000][ T6844] loop2: detected capacity change from 0 to 7 [ 193.975507][ T6844] Dev loop2: unable to read RDB block 7 [ 194.003817][ T6844] loop2: unable to read partition table [ 194.005168][ T6844] loop2: partition table beyond EOD, truncated [ 194.029803][ T6844] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.032491][ T6852] atomic_op 000000008e3bfc7a conn xmit_atomic 0000000000000000 [ 195.539521][ T6874] device vlan2 entered promiscuous mode [ 196.616508][ T6902] device vlan2 entered promiscuous mode [ 199.064932][ T6940] device vlan2 entered promiscuous mode [ 199.182754][ T6926] syz.1.940 uses obsolete (PF_INET,SOCK_PACKET) [ 200.503275][ T6975] atomic_op 000000008f24e628 conn xmit_atomic 0000000000000000 [ 201.039776][ T6986] device vlan2 entered promiscuous mode [ 202.052952][ T7010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.079760][ T7010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.144089][ T7012] device vlan3 entered promiscuous mode [ 202.841765][ T4345] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 202.993408][ T7038] device vlan2 entered promiscuous mode [ 203.141532][ T4345] usb 1-1: Using ep0 maxpacket: 32 [ 203.145492][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.149243][ T4345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.155540][ T4345] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 203.161517][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.176077][ T4345] usb 1-1: config 0 descriptor?? [ 204.233465][ T4345] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 205.164700][ T3762] usb 1-1: USB disconnect, device number 7 [ 205.401889][ T7075] device vlan2 entered promiscuous mode [ 205.728121][ T7083] atomic_op 000000007403734e conn xmit_atomic 0000000000000000 [ 206.663410][ T7095] team0: No ports can be present during mode change [ 206.986192][ T7106] device vlan2 entered promiscuous mode [ 207.028614][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.032267][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.245258][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 208.251818][ T7119] netlink: 'syz.3.1020': attribute type 2 has an invalid length. [ 208.497757][ T7127] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 208.798516][ T7129] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 209.428065][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 209.988494][ T7151] device vlan3 entered promiscuous mode [ 210.043284][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.046638][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.893318][ T7175] atomic_op 0000000072d8cf72 conn xmit_atomic 0000000000000000 [ 211.980029][ T7185] device vlan2 entered promiscuous mode [ 212.094019][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.100503][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.103618][ T7193] netlink: 'syz.2.1046': attribute type 11 has an invalid length. [ 213.799098][ T7230] device vlan3 entered promiscuous mode [ 214.884714][ T7242] atomic_op 000000003d37d4ee conn xmit_atomic 0000000000000000 [ 216.390880][ T7274] device vlan3 entered promiscuous mode [ 217.516255][ T7293] atomic_op 00000000c1eb88c1 conn xmit_atomic 0000000000000000 [ 217.885355][ T7321] device vlan2 entered promiscuous mode [ 219.599626][ T7359] atomic_op 000000001efedfe9 conn xmit_atomic 0000000000000000 [ 222.166004][ T7374] device vlan3 entered promiscuous mode [ 222.622625][ T7398] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 224.198225][ T7433] atomic_op 00000000eddb0245 conn xmit_atomic 0000000000000000 [ 225.857062][ T7421] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 227.590368][ T7543] atomic_op 00000000b9da3554 conn xmit_atomic 0000000000000000 [ 228.207099][ T7533] could not allocate digest TFM handle sha256-avx [ 231.857111][ T7627] atomic_op 000000007bec03f9 conn xmit_atomic 0000000000000000 [ 232.536908][ T4284] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 232.718260][ T4284] usb 1-1: Using ep0 maxpacket: 32 [ 232.727915][ T4284] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.733013][ T4284] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 232.741942][ T4284] usb 1-1: can't read configurations, error -71 [ 233.946365][ T7656] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 236.512579][ T7696] atomic_op 0000000015b4977e conn xmit_atomic 0000000000000000 [ 240.327288][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 240.330071][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 240.761424][ T7781] atomic_op 00000000a6d8978c conn xmit_atomic 0000000000000000 [ 241.237319][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 241.239927][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 241.691712][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 241.837308][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 241.839456][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 241.936994][ T4380] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 242.075374][ T7845] device vlan2 entered promiscuous mode [ 242.266023][ T4380] usb 1-1: Using ep0 maxpacket: 32 [ 242.381948][ T4380] usb 1-1: config index 0 descriptor too short (expected 14723, got 36) [ 242.392663][ T4380] usb 1-1: config 0 has too many interfaces: 111, using maximum allowed: 32 [ 242.456498][ T4380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.467913][ T4380] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 111 [ 242.470302][ T4380] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 242.475385][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.543792][ T4380] usb 1-1: config 0 descriptor?? [ 242.891057][ T7] usb 1-1: USB disconnect, device number 10 [ 245.532489][ T7906] atomic_op 000000009a30e88a conn xmit_atomic 0000000000000000 [ 246.516507][ T7927] device vlan2 entered promiscuous mode [ 248.611917][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 248.624311][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 248.630410][ T7969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.675992][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 248.680327][ T7971] device vlan2 entered promiscuous mode [ 248.818016][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.819426][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.725287][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 250.044601][ T7999] atomic_op 000000005799b775 conn xmit_atomic 0000000000000000 [ 250.073700][ T8003] IPVS: Scheduler module ip_vs_sip not found [ 250.083723][ T8003] IPVS: length: 217 != 24 [ 250.250700][ T4345] kernel read not supported for file /rfkill (pid: 4345 comm: kworker/1:5) [ 250.448272][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 250.948925][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 251.854120][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 252.537652][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 252.542907][ T8111] device vlan3 entered promiscuous mode [ 252.948736][ T27] kauditd_printk_skb: 198 callbacks suppressed [ 252.949080][ T27] audit: type=1326 audit(252.870:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8114 comm="syz.2.1397" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd52ba8 code=0x0 [ 254.302739][ T8155] atomic_op 000000004a804520 conn xmit_atomic 0000000000000000 [ 255.940062][ T8181] device vlan2 entered promiscuous mode [ 257.330285][ T8212] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1433'. [ 257.332361][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 257.430467][ T8218] netlink: 'syz.4.1436': attribute type 10 has an invalid length. [ 257.522288][ T8218] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 257.531923][ T8217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.146738][ T8235] atomic_op 0000000037220b3c conn xmit_atomic 0000000000000000 [ 260.971509][ T8269] netlink: 'syz.0.1453': attribute type 10 has an invalid length. [ 261.088641][ T8269] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 261.146399][ T8268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.457188][ T8298] atomic_op 00000000a725795e conn xmit_atomic 0000000000000000 [ 267.838090][ T8356] atomic_op 0000000051922212 conn xmit_atomic 0000000000000000 [ 269.991072][ T8362] netlink: 'syz.3.1486': attribute type 10 has an invalid length. [ 270.177272][ T8360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.413665][ T8362] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 270.435403][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 271.850416][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1506'. [ 273.036031][ T8441] netlink: 'syz.1.1514': attribute type 10 has an invalid length. [ 273.150848][ T8441] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 273.190006][ T8438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.106410][ T8449] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 274.139158][ T8449] device bond9 entered promiscuous mode [ 274.177129][ T8453] block nbd3: shutting down sockets [ 274.194286][ T8449] team0: Port device team_slave_1 removed [ 274.200403][ T8449] bond9: (slave team_slave_1): making interface the new active one [ 274.202059][ T8449] device team_slave_1 entered promiscuous mode [ 274.205047][ T8449] bond9: (slave team_slave_1): Enslaving as an active interface with an up link [ 274.322988][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'. [ 274.398075][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1528'. [ 274.400095][ T8470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1528'. [ 274.451702][ T8470] device team0 entered promiscuous mode [ 274.453219][ T8470] device team_slave_0 entered promiscuous mode [ 274.478270][ T8470] device ip6gretap0 entered promiscuous mode [ 274.532182][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 275.012972][ T8485] netlink: 'syz.2.1532': attribute type 10 has an invalid length. [ 275.173532][ T8485] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 275.886463][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.259200][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1539'. [ 276.266922][ T5020] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 276.448389][ T5020] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.450228][ T5020] usb 1-1: config 0 has no interface number 0 [ 276.451600][ T5020] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 276.453807][ T5020] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 276.455945][ T5020] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 276.470131][ T5020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.474515][ T5020] usb 1-1: config 0 descriptor?? [ 276.480232][ T8491] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 276.505130][ T5020] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 276.690891][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 276.695325][ T5020] usb 1-1: USB disconnect, device number 11 [ 277.174650][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 277.330879][ T8530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1551'. [ 277.546097][ T8544] netlink: 'syz.0.1558': attribute type 10 has an invalid length. [ 277.609928][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.611903][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.143034][ T8567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1566'. [ 278.325825][ T8577] netlink: 'syz.1.1571': attribute type 10 has an invalid length. [ 279.469835][ T8593] capability: warning: `syz.1.1578' uses 32-bit capabilities (legacy support in use) [ 279.965833][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1580'. [ 280.326061][ T8609] netlink: 'syz.0.1584': attribute type 10 has an invalid length. [ 280.468934][ T8620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.472027][ T8620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.747531][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1592'. [ 281.227424][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.257610][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1605'. [ 281.868611][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1617'. [ 281.870563][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'. [ 281.876057][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.887628][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.231233][ T8702] atomic_op 00000000b3e73c48 conn xmit_atomic 0000000000000000 [ 283.123540][ T8717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.662395][ T8725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1633'. [ 283.664479][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'. [ 283.924184][ T8737] 9pnet_fd: Insufficient options for proto=fd [ 285.000320][ T8755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.092123][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1645'. [ 285.094187][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 285.452350][ T5020] libceph: connect (1)[c::]:6789 error -101 [ 285.454003][ T5020] libceph: mon0 (1)[c::]:6789 connect error [ 285.710138][ T4345] libceph: connect (1)[c::]:6789 error -101 [ 285.715795][ T4345] libceph: mon0 (1)[c::]:6789 connect error [ 286.106130][ T8778] ceph: No mds server is up or the cluster is laggy [ 286.130320][ T8797] atomic_op 00000000125ebaf6 conn xmit_atomic 0000000000000000 [ 286.892721][ T8807] device hsr0 entered promiscuous mode [ 286.895140][ T8806] device hsr0 left promiscuous mode [ 286.991874][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 287.218992][ T8820] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 287.222302][ T8819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.425863][ T8828] Process accounting resumed [ 287.815066][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 288.345299][ T8867] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 288.411818][ T8866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.423383][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 289.587869][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1705'. [ 290.693290][ T8936] netlink: 'syz.1.1711': attribute type 10 has an invalid length. [ 290.695165][ T8935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.780918][ T8938] atomic_op 00000000b2fbc445 conn xmit_atomic 0000000000000000 [ 291.600784][ T8946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.602725][ T8946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.797493][ T8954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1719'. [ 292.801968][ T8971] netlink: 'syz.0.1724': attribute type 10 has an invalid length. [ 292.811462][ T8968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.059514][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1733'. [ 294.319177][ T9010] 9pnet_fd: Insufficient options for proto=fd [ 294.404437][ T9010] block device autoloading is deprecated and will be removed. [ 294.452740][ T9018] netlink: 'syz.2.1743': attribute type 10 has an invalid length. [ 294.454702][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.672095][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 295.706926][ T4284] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 295.887792][ T4284] usb 1-1: Using ep0 maxpacket: 32 [ 295.894276][ T4284] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.899903][ T4284] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.903539][ T4284] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 295.905561][ T4284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.920598][ T4284] hub 1-1:4.0: USB hub found [ 296.952983][ T9060] netlink: 'syz.2.1759': attribute type 10 has an invalid length. [ 296.955223][ T9058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.972314][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.975941][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.990627][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.994279][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.002480][ T4284] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 297.040344][ T4284] usb 1-1: USB disconnect, device number 12 [ 297.362182][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 298.818999][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 298.938706][ T9102] netlink: 'syz.1.1776': attribute type 10 has an invalid length. [ 298.941267][ T9101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.920564][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 299.923057][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 300.073950][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.079416][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.094598][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.099757][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.114152][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.119478][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.265130][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 301.276485][ T9142] netlink: 'syz.3.1790': attribute type 10 has an invalid length. [ 301.331460][ T9141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.381820][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.391936][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.041209][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.047165][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.071700][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.075303][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.215874][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 304.516930][ T9202] netlink: 'syz.2.1813': attribute type 10 has an invalid length. [ 304.519925][ T9201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.126534][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 306.003885][ T9234] syz.0.1823 sent an empty control message without MSG_MORE. [ 306.104090][ T9240] netlink: 'syz.2.1829': attribute type 10 has an invalid length. [ 306.245655][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.260459][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.401679][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.428469][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.170932][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 307.173674][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.177055][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.462628][ T9275] netlink: 'syz.4.1841': attribute type 10 has an invalid length. [ 307.747318][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1847'. [ 308.330737][ T9315] netlink: 'syz.1.1856': attribute type 10 has an invalid length. [ 309.236002][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1859'. [ 309.601010][ T9345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.566769][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.569679][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.104880][ T9391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.242652][ T9422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.573701][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.582770][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.686455][ T9466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.719176][ T9483] 9pnet_fd: Insufficient options for proto=fd [ 314.760353][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.762592][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.816557][ T9491] batman_adv: batadv0: Adding interface: dummy0 [ 314.825820][ T9491] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.845318][ T9491] batman_adv: batadv0: Interface activated: dummy0 [ 314.868073][ T9491] batadv0: mtu less than device minimum [ 314.875709][ T9491] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.881278][ T9491] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.886459][ T9491] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.891544][ T9491] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.896663][ T9491] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.901854][ T9491] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.907036][ T9491] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.912194][ T9491] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 314.917285][ T9491] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 315.314964][ T9517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.224639][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.278448][ T9552] input: syz0 as /devices/virtual/input/input5 [ 317.659487][ T9561] trusted_key: encrypted_key: keyword 'Þf@äð°efault' not recognized [ 317.926402][ T9567] input: syz1 as /devices/virtual/input/input7 [ 318.845458][ T9583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1957'. [ 318.964294][ T9590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.916987][ T3762] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 320.117000][ T3762] usb 1-1: Using ep0 maxpacket: 32 [ 320.125940][ T3762] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 320.128341][ T3762] usb 1-1: config 0 has no interface number 0 [ 320.129722][ T3762] usb 1-1: config 0 interface 12 has no altsetting 0 [ 320.133158][ T3762] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 320.135271][ T3762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.137499][ T3762] usb 1-1: Product: syz [ 320.138526][ T3762] usb 1-1: Manufacturer: syz [ 320.139478][ T3762] usb 1-1: SerialNumber: syz [ 320.142195][ T3762] usb 1-1: config 0 descriptor?? [ 322.168803][ T3762] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 322.170560][ T3762] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 322.171973][ T3762] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 322.173545][ T3762] f81534: probe of 1-1:0.12 failed with error -71 [ 322.186206][ T3762] usb 1-1: USB disconnect, device number 13 [ 330.117046][ T9622] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1973'. [ 330.234071][ T9626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.234456][ T9629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1975'. [ 330.294489][ T9631] usb usb7: usbfs: process 9631 (syz.2.1976) did not claim interface 0 before use [ 331.278086][ T9645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.281741][ T9645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.349511][ T9650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1985'. [ 332.427112][ T27] audit: type=1326 audit(332.400:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe352ba8 code=0x7ffc0000 [ 332.445713][ T27] audit: type=1326 audit(332.420:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbe3510d4 code=0x7ffc0000 [ 332.456680][ T27] audit: type=1326 audit(332.430:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbe3510d4 code=0x7ffc0000 [ 332.478905][ T27] audit: type=1326 audit(332.430:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe352ba8 code=0x7ffc0000 [ 332.483696][ T27] audit: type=1326 audit(332.430:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe352ba8 code=0x7ffc0000 [ 332.494420][ T27] audit: type=1326 audit(332.460:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffffbe352ba8 code=0x7ffc0000 [ 332.520920][ T27] audit: type=1326 audit(332.460:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe352ba8 code=0x7ffc0000 [ 332.525510][ T27] audit: type=1326 audit(332.460:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe352ba8 code=0x7ffc0000 [ 332.531300][ T27] audit: type=1326 audit(332.460:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbe352ba8 code=0x7ffc0000 [ 332.535797][ T27] audit: type=1326 audit(332.460:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe352ba8 code=0x7ffc0000 [ 332.564015][ T9669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.705379][ T9684] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1998'. [ 333.472407][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.475549][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.680391][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.682788][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.306349][ T9704] syz.1.2005 (9704): /proc/9703/oom_adj is deprecated, please use /proc/9703/oom_score_adj instead. [ 335.364868][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.384205][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.693324][ T9723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2010'. [ 335.935408][ T9730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.712451][ T9751] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2022'. [ 336.839524][ T9759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.841428][ T9759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.064116][ T9767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.152224][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.155709][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.157831][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.093024][ T9787] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2035'. [ 340.206481][ T9826] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2050'. [ 340.214646][ T9822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.497396][ T9861] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2064'. [ 342.315888][ T9885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.358983][ T9893] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2077'. [ 343.505991][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2080'. [ 343.711336][ T9910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.889138][ T9919] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2081'. [ 344.425082][ T9931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2092'. [ 346.249733][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.352376][ T9962] smc: net device bond0 applied user defined pnetid SYZ2 [ 346.361271][ T9962] smc: net device bond0 erased user defined pnetid SYZ2 [ 346.405206][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2105'. [ 346.430946][ T9967] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2106'. [ 347.466705][ T9981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.503666][ T9986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2113'. [ 349.056726][T10027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.064086][T10029] tmpfs: Unknown parameter 'quota' [ 349.138894][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'. [ 350.306355][T10061] 9pnet_fd: Insufficient options for proto=fd [ 350.632860][T10070] hub 6-0:1.0: USB hub found [ 350.635536][T10070] hub 6-0:1.0: 8 ports detected [ 350.684040][T10070] ipt_CLUSTERIP: Please specify destination IP [ 351.853719][T10091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.936184][T10095] 9pnet_fd: Insufficient options for proto=fd [ 352.764241][T10121] 9pnet_fd: Insufficient options for proto=fd [ 352.857249][T10126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.689628][T10169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.015439][T10201] bridge0: port 3(gretap0) entered blocking state [ 357.032378][T10201] bridge0: port 3(gretap0) entered disabled state [ 357.147674][T10201] device gretap0 entered promiscuous mode [ 357.262759][T10201] bridge0: port 3(gretap0) entered blocking state [ 357.265255][T10201] bridge0: port 3(gretap0) entered forwarding state [ 357.797500][T10213] device gretap0 left promiscuous mode [ 357.799939][T10213] bridge0: port 3(gretap0) entered disabled state [ 358.870526][T10234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.345452][T10267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2220'. [ 361.374169][T10276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.462728][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 361.462741][ T27] audit: type=1326 audit(361.440:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 361.477282][ T27] audit: type=1326 audit(361.460:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 361.489936][ T27] audit: type=1326 audit(361.460:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 361.494871][ T27] audit: type=1326 audit(361.460:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 361.500473][ T27] audit: type=1326 audit(361.460:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 361.505342][ T27] audit: type=1326 audit(361.460:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 361.511857][ T27] audit: type=1326 audit(361.460:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 361.516594][ T27] audit: type=1326 audit(361.460:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 361.521531][ T27] audit: type=1326 audit(361.460:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 361.526337][ T27] audit: type=1326 audit(361.460:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.2225" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9152ba8 code=0x7ffc0000 [ 362.727963][T10302] atomic_op 00000000e8190559 conn xmit_atomic 0000000000000000 [ 365.608790][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.954621][T10365] atomic_op 0000000090c68429 conn xmit_atomic 0000000000000000 [ 370.008756][T10382] 9pnet_fd: Insufficient options for proto=fd [ 371.698299][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.699687][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.206555][T10391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.710600][T10415] 9pnet_fd: Insufficient options for proto=fd [ 381.340792][T10422] 9pnet_fd: Insufficient options for proto=fd [ 382.134119][T10443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.505263][T10461] bpf_jit: unknown opcode 06 [ 383.431358][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'. [ 384.442425][T10497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.867952][T10536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.831191][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2315'. [ 387.953017][T10567] 9pnet_fd: Insufficient options for proto=fd [ 388.135239][T10577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.656949][ T4310] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 388.656974][ T4299] Bluetooth: hci5: command 0x1003 tx timeout [ 389.771529][T10594] rtc-efi rtc-efi.0: write status is 3 [ 390.057679][T10603] 9pnet_fd: Insufficient options for proto=fd [ 390.187570][T10607] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 390.584219][T10613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.290882][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.306762][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.574903][T10632] 9pnet_fd: Insufficient options for proto=fd [ 391.617893][T10635] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 391.840682][T10646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.350641][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 392.538055][T10668] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 396.747152][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2396'. [ 399.256335][T10810] dlm: no local IP address has been set [ 399.257790][T10810] dlm: cannot start dlm midcomms -107 [ 400.247413][T10822] x_tables: ip6_tables: connbytes.0 match: invalid size 24 (kernel) != (user) 80 [ 411.537003][ C1] net_ratelimit: 11 callbacks suppressed [ 411.537025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.576964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.629044][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'. [ 412.631352][T10912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2449'. [ 413.018589][T10930] binder: 10924:10930 Acquire 1 refcount change on invalid ref 0 ret -22 [ 413.024670][T10930] binder: 10924:10930 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 413.034601][T10930] binder: 10930 RLIMIT_NICE not set [ 413.616950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.836843][ T4414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.888343][ T4454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.897864][ T4649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.196104][ T5020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.198645][ T178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.211962][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.215494][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.261439][T10932] binder: 10924:10932 got transaction to invalid handle, 1 [ 414.263312][T10932] binder: 10932:10924 cannot find target node [ 414.264651][T10932] binder: 10924:10932 transaction call to 0:0 failed 4/29201/-22, size 0-0 line 3054 [ 414.388957][ T5020] binder: undelivered TRANSACTION_ERROR: 29201 [ 414.474401][T10942] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.476652][T10942] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.478586][T10942] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.480602][T10942] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.497147][T10942] device vxlan0 entered promiscuous mode [ 414.508123][T10942] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.510010][T10942] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.511735][T10942] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.513525][T10942] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.736959][ C1] net_ratelimit: 9 callbacks suppressed [ 416.736973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.764587][ T5020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.956489][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.958808][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.960640][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.963441][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.965426][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.972943][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.974728][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.977105][T11013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.258876][T11011] syz.2.2486 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 418.347389][T11039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.349591][T11039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.816947][T10581] Bluetooth: hci3: command 0x0405 tx timeout [ 420.967345][ T4301] Bluetooth: hci3: command 0x0405 tx timeout [ 421.746878][T11089] net_ratelimit: 281 callbacks suppressed [ 421.746893][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.749907][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.751638][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.753476][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.755208][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.777116][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.779149][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.781064][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.782977][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.784857][T11089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.079266][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.081209][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.981290][ T27] kauditd_printk_skb: 28 callbacks suppressed [ 422.981302][ T27] audit: type=1326 audit(422.953:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4552ba8 code=0x7ffc0000 [ 422.990066][ T4301] Bluetooth: hci3: command 0x0405 tx timeout [ 423.135327][ T27] audit: type=1326 audit(423.083:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa45510d4 code=0x7ffc0000 [ 424.393074][ T27] audit: type=1326 audit(423.083:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa45510d4 code=0x7ffc0000 [ 424.419721][ T27] audit: type=1326 audit(423.083:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4552ba8 code=0x7ffc0000 [ 424.448711][ T27] audit: type=1326 audit(423.093:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa45510d4 code=0x7ffc0000 [ 424.515131][ T27] audit: type=1326 audit(423.093:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa45510d4 code=0x7ffc0000 [ 424.537890][ T27] audit: type=1326 audit(423.093:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4552ba8 code=0x7ffc0000 [ 424.565861][ T27] audit: type=1326 audit(423.093:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa4552ba8 code=0x7ffc0000 [ 424.623386][ T27] audit: type=1326 audit(423.093:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4552ba8 code=0x7ffc0000 [ 424.642995][ T27] audit: type=1326 audit(423.093:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.4.2522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=146 compat=0 ip=0xffffa4552ba8 code=0x7ffc0000 [ 427.136974][ C1] net_ratelimit: 21 callbacks suppressed [ 427.136991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.510919][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.557659][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.177011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.578244][ T5020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.216969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.247053][T11203] bridge0: port 3(hsr_slave_1) entered blocking state [ 429.249488][T11203] bridge0: port 3(hsr_slave_1) entered disabled state [ 429.620995][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.256919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.735303][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.186133][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.230371][T11223] usb usb8: usbfs: process 11223 (syz.1.2559) did not claim interface 0 before use [ 431.529375][T11243] input: syz1 as /devices/virtual/input/input8 [ 431.695755][T11248] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 431.704092][T11248] CIFS: Unable to determine destination address [ 432.060532][T11255] bond0: (slave wlan1): Error: Slave device does not support XDP [ 432.257321][ T3762] net_ratelimit: 5 callbacks suppressed [ 432.257335][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.336949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.138833][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.140319][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.301719][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.377001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.061082][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.063211][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.164415][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 434.164428][ T27] audit: type=1326 audit(434.133:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11286 comm="syz.0.2584" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe352ba8 code=0x0 [ 434.386784][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.415753][T11305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.417912][T11305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.419972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.478363][ T27] audit: type=1326 audit(435.453:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11313 comm="syz.4.2594" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4552ba8 code=0x0 [ 435.628811][ T4284] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 435.787305][ T4284] usb 1-1: device descriptor read/64, error -71 [ 436.067669][ T4284] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 436.347401][ T4284] usb 1-1: device descriptor read/64, error -71 [ 436.475231][ T4478] Bluetooth: hci5: Frame reassembly failed (-84) [ 436.477546][ T4284] usb usb1-port1: attempt power cycle [ 436.747857][T11357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.752589][T11357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.537173][ C1] net_ratelimit: 102 callbacks suppressed [ 437.537190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.606459][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.608615][ T4284] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 437.657663][ T4284] usb 1-1: device descriptor read/8, error -71 [ 437.677819][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.128100][ T4284] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 438.178652][ T4284] usb 1-1: device descriptor read/8, error -71 [ 438.314738][ T4284] usb usb1-port1: unable to enumerate USB device [ 438.498467][ T4301] Bluetooth: hci5: command 0x1003 tx timeout [ 438.500248][T10581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 438.576941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.740440][ T5020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.742619][T11338] can0: slcan on ptm0. [ 438.858452][T11337] can0 (unregistered): slcan off ptm0. [ 440.587607][T11408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.957094][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.035994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.040102][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.214194][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2627'. [ 442.097032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.136958][ C1] net_ratelimit: 1 callbacks suppressed [ 443.136974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.216092][T11452] afs: Bad value for 'source' [ 443.297004][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.398489][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.176915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.362527][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.377405][T11473] syz.4.2641 uses old SIOCAX25GETINFO [ 444.385958][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.216973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.485592][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.135523][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 446.256914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.497312][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.297087][T11558] netlink: 'syz.4.2670': attribute type 1 has an invalid length. [ 448.336924][ C1] net_ratelimit: 3 callbacks suppressed [ 448.336939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.573426][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 448.575346][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 448.577616][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.376966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.617271][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.416937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.821733][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.900758][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.981601][T11604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.995049][T11604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.457013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.408489][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.574605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.566837][ T24] net_ratelimit: 1 callbacks suppressed [ 453.566857][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.616973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.380780][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.588018][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.656948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.605786][T11684] binder: 11682:11684 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 455.622643][T11684] binder: 11682:11684 got transaction to invalid handle, 1 [ 455.626558][T11684] binder: 11684:11682 cannot find target node [ 455.633925][T11684] binder: 11682:11684 transaction call to 0:0 failed 7/29201/-22, size 96-24 line 3054 [ 455.653965][T11686] Illegal XDP return value 4294967274 on prog (id 37) dev N/A, expect packet loss! [ 455.671765][ T4380] binder: undelivered TRANSACTION_ERROR: 29201 [ 455.696993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.253533][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.736911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.297901][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.472606][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.557146][ T27] audit: type=1326 audit(457.503:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11703 comm="syz.0.2717" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe352ba8 code=0x0 [ 458.569256][T11718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.588306][T11718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.816903][ C1] net_ratelimit: 2 callbacks suppressed [ 458.816919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.750954][ T3762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.856968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.563795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.859454][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.867206][ T4453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.238277][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.293724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.426550][T11757] IPv6: ADDRCONF(NETDEV_CHANGE): rose1: link becomes ready [ 463.516156][T11757] [ 463.516720][T11757] ====================================================== [ 463.518234][T11757] WARNING: possible circular locking dependency detected [ 463.519714][T11757] 6.1.123-syzkaller #0 Not tainted [ 463.520881][T11757] ------------------------------------------------------ [ 463.522447][T11757] syz.1.2732/11757 is trying to acquire lock: [ 463.523720][T11757] ffff800018202b78 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xb8/0x6f8 [ 463.525698][T11757] [ 463.525698][T11757] but task is already holding lock: [ 463.527333][T11757] ffff800018202b18 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x38/0x6f8 [ 463.529396][T11757] [ 463.529396][T11757] which lock already depends on the new lock. [ 463.529396][T11757] [ 463.531787][T11757] [ 463.531787][T11757] the existing dependency chain (in reverse order) is: [ 463.533722][T11757] [ 463.533722][T11757] -> #2 (nr_neigh_list_lock){+...}-{2:2}: [ 463.535652][T11757] _raw_spin_lock_bh+0x54/0x6c [ 463.536790][T11757] nr_rt_ioctl+0x328/0xd24 [ 463.537840][T11757] nr_ioctl+0x14c/0x45c [ 463.538907][T11757] sock_do_ioctl+0x134/0x2dc [ 463.540078][T11757] sock_ioctl+0x4ec/0x858 [ 463.541041][T11757] __arm64_sys_ioctl+0x14c/0x1c8 [ 463.542209][T11757] invoke_syscall+0x98/0x2bc [ 463.543301][T11757] el0_svc_common+0x138/0x258 [ 463.544404][T11757] do_el0_svc+0x58/0x13c [ 463.545420][T11757] el0_svc+0x58/0x168 [ 463.546477][T11757] el0t_64_sync_handler+0x84/0xf0 [ 463.547856][T11757] el0t_64_sync+0x18c/0x190 [ 463.548934][T11757] [ 463.548934][T11757] -> #1 (&nr_node->node_lock){+...}-{2:2}: [ 463.550646][T11757] _raw_spin_lock_bh+0x54/0x6c [ 463.551818][T11757] nr_rt_ioctl+0x1a4/0xd24 [ 463.552812][T11757] nr_ioctl+0x14c/0x45c [ 463.553776][T11757] sock_do_ioctl+0x134/0x2dc [ 463.554820][T11757] sock_ioctl+0x4ec/0x858 [ 463.555839][T11757] __arm64_sys_ioctl+0x14c/0x1c8 [ 463.557063][T11757] invoke_syscall+0x98/0x2bc [ 463.558213][T11757] el0_svc_common+0x138/0x258 [ 463.559337][T11757] do_el0_svc+0x58/0x13c [ 463.560301][T11757] el0_svc+0x58/0x168 [ 463.561248][T11757] el0t_64_sync_handler+0x84/0xf0 [ 463.562425][T11757] el0t_64_sync+0x18c/0x190 [ 463.563491][T11757] [ 463.563491][T11757] -> #0 (nr_node_list_lock){+...}-{2:2}: [ 463.565063][T11757] __lock_acquire+0x3338/0x7680 [ 463.566137][T11757] lock_acquire+0x26c/0x7cc [ 463.567123][T11757] _raw_spin_lock_bh+0x54/0x6c [ 463.568226][T11757] nr_rt_device_down+0xb8/0x6f8 [ 463.569286][T11757] nr_device_event+0x134/0x160 [ 463.570400][T11757] raw_notifier_call_chain+0xd4/0x164 [ 463.571604][T11757] dev_close_many+0x2fc/0x468 [ 463.572659][T11757] dev_close+0x174/0x250 [ 463.573590][T11757] bpq_device_event+0x314/0x80c [ 463.574710][T11757] raw_notifier_call_chain+0xd4/0x164 [ 463.575873][T11757] dev_close_many+0x2fc/0x468 [ 463.576946][T11757] dev_close+0x174/0x250 [ 463.577924][T11757] bond_setup_by_slave+0x70/0x314 [ 463.579073][T11757] bond_enslave+0x630/0x30fc [ 463.580145][T11757] bond_do_ioctl+0x268/0xc64 [ 463.581151][T11757] dev_ifsioc+0xc98/0xfbc [ 463.582151][T11757] dev_ioctl+0x4d8/0xd34 [ 463.583143][T11757] sock_do_ioctl+0x1dc/0x2dc [ 463.584170][T11757] sock_ioctl+0x4ec/0x858 [ 463.585109][T11757] __arm64_sys_ioctl+0x14c/0x1c8 [ 463.586193][T11757] invoke_syscall+0x98/0x2bc [ 463.587251][T11757] el0_svc_common+0x138/0x258 [ 463.588289][T11757] do_el0_svc+0x58/0x13c [ 463.589246][T11757] el0_svc+0x58/0x168 [ 463.590190][T11757] el0t_64_sync_handler+0x84/0xf0 [ 463.591259][T11757] el0t_64_sync+0x18c/0x190 [ 463.592286][T11757] [ 463.592286][T11757] other info that might help us debug this: [ 463.592286][T11757] [ 463.594413][T11757] Chain exists of: [ 463.594413][T11757] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 463.594413][T11757] [ 463.597213][T11757] Possible unsafe locking scenario: [ 463.597213][T11757] [ 463.598758][T11757] CPU0 CPU1 [ 463.599850][T11757] ---- ---- [ 463.600914][T11757] lock(nr_neigh_list_lock); [ 463.601846][T11757] lock(&nr_node->node_lock); [ 463.603291][T11757] lock(nr_neigh_list_lock); [ 463.604686][T11757] lock(nr_node_list_lock); [ 463.605578][T11757] [ 463.605578][T11757] *** DEADLOCK *** [ 463.605578][T11757] [ 463.607146][T11757] 2 locks held by syz.1.2732/11757: [ 463.608179][T11757] #0: ffff8000180c4608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 463.609896][T11757] #1: ffff800018202b18 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x38/0x6f8 [ 463.611845][T11757] [ 463.611845][T11757] stack backtrace: [ 463.613019][T11757] CPU: 1 PID: 11757 Comm: syz.1.2732 Not tainted 6.1.123-syzkaller #0 [ 463.614672][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 463.616692][T11757] Call trace: [ 463.617333][T11757] dump_backtrace+0x1c8/0x1f4 [ 463.618278][T11757] show_stack+0x2c/0x3c [ 463.619104][T11757] dump_stack_lvl+0x108/0x170 [ 463.620053][T11757] dump_stack+0x1c/0x58 [ 463.620864][T11757] print_circular_bug+0x150/0x1b8 [ 463.621845][T11757] check_noncircular+0x2cc/0x378 [ 463.622930][T11757] __lock_acquire+0x3338/0x7680 [ 463.623894][T11757] lock_acquire+0x26c/0x7cc [ 463.624799][T11757] _raw_spin_lock_bh+0x54/0x6c [ 463.625717][T11757] nr_rt_device_down+0xb8/0x6f8 [ 463.626674][T11757] nr_device_event+0x134/0x160 [ 463.627646][T11757] raw_notifier_call_chain+0xd4/0x164 [ 463.628747][T11757] dev_close_many+0x2fc/0x468 [ 463.629673][T11757] dev_close+0x174/0x250 [ 463.630526][T11757] bpq_device_event+0x314/0x80c [ 463.631469][T11757] raw_notifier_call_chain+0xd4/0x164 [ 463.632511][T11757] dev_close_many+0x2fc/0x468 [ 463.633435][T11757] dev_close+0x174/0x250 [ 463.634297][T11757] bond_setup_by_slave+0x70/0x314 [ 463.635297][T11757] bond_enslave+0x630/0x30fc [ 463.636226][T11757] bond_do_ioctl+0x268/0xc64 [ 463.637123][T11757] dev_ifsioc+0xc98/0xfbc [ 463.638004][T11757] dev_ioctl+0x4d8/0xd34 [ 463.638836][T11757] sock_do_ioctl+0x1dc/0x2dc [ 463.639771][T11757] sock_ioctl+0x4ec/0x858 [ 463.640643][T11757] __arm64_sys_ioctl+0x14c/0x1c8 [ 463.641638][T11757] invoke_syscall+0x98/0x2bc [ 463.642518][T11757] el0_svc_common+0x138/0x258 [ 463.643496][T11757] do_el0_svc+0x58/0x13c [ 463.644329][T11757] el0_svc+0x58/0x168 [ 463.645165][T11757] el0t_64_sync_handler+0x84/0xf0 [ 463.646152][T11757] el0t_64_sync+0x18c/0x190 [ 463.688918][T11757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.693027][T11757] bond0: (slave rose0): Enslaving as an active interface with an up link [ 463.695074][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 464.257050][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.337069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.297209][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.377035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.938474][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.347221][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.417035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.387139][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.456985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.417021][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.467113][ T4345] net_ratelimit: 2 callbacks suppressed [ 469.467136][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.536942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.497040][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.576998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.537079][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.616935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.017069][ T4284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.177045][ T4453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.577047][ T4380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.657012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog