last executing test programs: 6.078565041s ago: executing program 2 (id=98): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x41, 0xd1, 0xe0, 0x70, 0x403, 0xb810, 0x5a2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc1, 0xc3, 0x0, 0x53, 0x7e, 0xbc, 0x10}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000a00)={{0x12, 0x1, 0x630, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0xf0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0x9454, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xca, 0x3, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x401, 0xe, 0xee, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0xe1, 0x40}}}}}}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 3.076269686s ago: executing program 4 (id=138): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x462}, 0xc) socket(0x15, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 2.896339164s ago: executing program 4 (id=139): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x66, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.612070262s ago: executing program 4 (id=143): preadv(0xffffffffffffffff, 0x0, 0x0, 0xc002a0, 0xcbea) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x64}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.056262847s ago: executing program 2 (id=155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd341871", 0x9}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000280)={0x3a, @empty, 0x4e24, 0x0, 'sed\x00', 0x0, 0x0, 0x11}, 0x2c) 2.053036767s ago: executing program 2 (id=156): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200), 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r0, 0x100000000) 2.051667687s ago: executing program 3 (id=157): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000b40)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 1.831850799s ago: executing program 2 (id=161): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) 1.748402958s ago: executing program 4 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a3100"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.62430992s ago: executing program 4 (id=165): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.577402854s ago: executing program 4 (id=167): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000380), 0x8) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 1.135957337s ago: executing program 3 (id=174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "68c4502393926b50", "09f700", "1ab6c0ff", "2759a97f8663091b"}, 0x28) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) close(0x4) 1.087291542s ago: executing program 3 (id=176): socket$inet(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r2, 0x50504}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x20008084) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 1.01216766s ago: executing program 3 (id=178): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 918.793909ms ago: executing program 0 (id=179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x50, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xe}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) 868.212464ms ago: executing program 2 (id=181): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000), 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000800) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x20040000) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) 867.971744ms ago: executing program 3 (id=182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, 0x0, 0x0, 0xc0000000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x5}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 811.26321ms ago: executing program 2 (id=183): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000100)=""/122, 0x7a}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f00000004c0)="44d0ae7ba6a475879f6db90fd869e0b03bcfd09e0cd9bce22a15242c98ff8969340f892b0f2978099c64b399f72c23519436", 0x32, 0x20000000, &(0x7f0000000540)={0xa, 0x4e20, 0x2, @loopback, 0x5}, 0x1c) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x12, 0x0, 0x7, {[@cipso={0x86, 0x14, 0xfffffffffffffffe, [{0x2, 0xe, "722be30cfb360b015d590dbe"}]}]}}}], 0x28}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8f}, 0x19) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4c044) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) 770.787154ms ago: executing program 3 (id=184): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r4, 0x50504}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 500.2649ms ago: executing program 0 (id=185): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4085, &(0x7f0000002b80)={0xa, 0x4e24, 0x3, @mcast2, 0x5}, 0x1c) 481.827102ms ago: executing program 0 (id=187): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x10000, 0x44, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 344.358036ms ago: executing program 0 (id=189): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x1c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20004040) 344.244915ms ago: executing program 1 (id=190): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000010c0)="4e946944c7e5b5c3", 0x8}], 0x1}}], 0x1, 0x488ec) 311.159809ms ago: executing program 1 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x143) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 310.033739ms ago: executing program 0 (id=192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x12, 0x400, 0x70bd2c, 0x25dfdbfb, {0x11, 0x6, 0x10, 0x0, {0x4e23, 0x4e23, [0x0, 0x5, 0x3, 0xd21], [0x0, 0xd, 0x7, 0xff], 0x0, [0x1ff, 0x1ff]}, 0x2}}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 247.824005ms ago: executing program 1 (id=193): r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0) open$dir(0x0, 0x200, 0x0) r1 = open$dir(&(0x7f0000000580)='./file0\x00', 0x0, 0x31d) mkdirat(r1, &(0x7f00000001c0)='./file1\x00', 0x153) 176.121212ms ago: executing program 1 (id=194): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x26, 0x2, 0x0) r1 = socket(0x26, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3}, 0xc) bind(r0, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3}, 0xc) 175.964042ms ago: executing program 1 (id=195): syz_emit_ethernet(0x46, &(0x7f0000001700)={@random="8f6f77edbb65", @broadcast, @val, {@ipv6}}, 0x0) 66.831413ms ago: executing program 1 (id=196): r0 = socket$inet6(0x1c, 0x3, 0x7) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@local={0xfe, 0x80, '\x00', 0x0}}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0xffff0000, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 0s ago: executing program 0 (id=197): munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffdfffffff, 0x5) kernel console output (not intermixed with test programs): 2707][ T4184] team0: Port device team_slave_1 added [ 54.658859][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.666430][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.692549][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.709338][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.716364][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.742569][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.768617][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.775784][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.801946][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.824397][ T4192] team0: Port device team_slave_0 added [ 54.837456][ T4182] device hsr_slave_0 entered promiscuous mode [ 54.844794][ T4182] device hsr_slave_1 entered promiscuous mode [ 54.863749][ T4192] team0: Port device team_slave_1 added [ 54.879166][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.886602][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.912864][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.925157][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.932111][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.958251][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.010857][ T4183] device hsr_slave_0 entered promiscuous mode [ 55.018024][ T4183] device hsr_slave_1 entered promiscuous mode [ 55.024708][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.032443][ T4183] Cannot create hsr debugfs directory [ 55.056706][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.063681][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.089902][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.124528][ T4184] device hsr_slave_0 entered promiscuous mode [ 55.131561][ T4184] device hsr_slave_1 entered promiscuous mode [ 55.138302][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.145914][ T4184] Cannot create hsr debugfs directory [ 55.151807][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.159088][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.185173][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.209165][ T4185] device hsr_slave_0 entered promiscuous mode [ 55.216537][ T4185] device hsr_slave_1 entered promiscuous mode [ 55.223036][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.230874][ T4185] Cannot create hsr debugfs directory [ 55.312760][ T4192] device hsr_slave_0 entered promiscuous mode [ 55.319617][ T4192] device hsr_slave_1 entered promiscuous mode [ 55.327182][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.334943][ T4192] Cannot create hsr debugfs directory [ 55.365249][ T4186] Bluetooth: hci3: command 0x0409 tx timeout [ 55.373668][ T4186] Bluetooth: hci4: command 0x0409 tx timeout [ 55.380821][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 55.387222][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 55.394431][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 55.591285][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.608333][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.619630][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.629384][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.671486][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.682411][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.692863][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.704127][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.761005][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.771137][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.782010][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.811765][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.853344][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.881107][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.890615][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.903868][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.912902][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.923539][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.951788][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.967888][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.976304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.986119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.996051][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.003218][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.015836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.025063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.033715][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.040802][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.048484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.058437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.069048][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.079307][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.098511][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.108569][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.137699][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.148764][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.157968][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.175179][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.185808][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.198530][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.208059][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.216325][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.225084][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.233318][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.261363][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.273484][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.285663][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.295252][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.304014][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.312742][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.319814][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.328250][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.336642][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.345240][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.353742][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.362298][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.369405][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.385458][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.395597][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.414392][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.423367][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.433092][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.443722][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.453965][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.490551][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.502269][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.518899][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.540979][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.549308][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.559073][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.569685][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.578474][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.587007][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.595717][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.608809][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.636118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.643616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.680181][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.693915][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.704047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.713926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.729096][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.736234][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.746080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.754769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.763049][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.770130][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.778419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.802431][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.819250][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.850444][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.877320][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.888171][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.897941][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.906725][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.915856][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.927975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.938702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.956052][ T4182] device veth0_vlan entered promiscuous mode [ 56.965535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.973379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.983486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.992232][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.999329][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.008986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.017467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.025764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.033661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.041488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.061978][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.074636][ T4182] device veth1_vlan entered promiscuous mode [ 57.087872][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.098664][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.107506][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.117681][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.126592][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.133646][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.141825][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.150684][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.159428][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.167272][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.175598][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.183022][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.191763][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.205239][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.222106][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.239621][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.276468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.285739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.297305][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.304419][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.312214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.320875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.329956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.338417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.347579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.356947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.366201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.374721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.383190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.391791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.400401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.409161][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.416235][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.424622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.433254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.441982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.449409][ T4244] Bluetooth: hci1: command 0x041b tx timeout [ 57.452892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.455672][ T4244] Bluetooth: hci0: command 0x041b tx timeout [ 57.468915][ T4244] Bluetooth: hci2: command 0x041b tx timeout [ 57.483269][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.494583][ T4244] Bluetooth: hci4: command 0x041b tx timeout [ 57.500909][ T4244] Bluetooth: hci3: command 0x041b tx timeout [ 57.508962][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.531598][ T4182] device veth0_macvtap entered promiscuous mode [ 57.562225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.572671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.582383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.591666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.600159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.609421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.618728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.627539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.636253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.645185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.653670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.671485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.680054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.688994][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.701402][ T4182] device veth1_macvtap entered promiscuous mode [ 57.729374][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.764684][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.795848][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.803482][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.813112][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.822957][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.831861][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.841501][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.851913][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.864272][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.877742][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.885600][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.902290][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.932575][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.944357][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.953185][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.998038][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.008374][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.017280][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.026445][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.044618][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.053310][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.071611][ T4183] device veth0_vlan entered promiscuous mode [ 58.098124][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.107065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.117180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.126141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.133632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.142275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.150411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.166528][ T4183] device veth1_vlan entered promiscuous mode [ 58.189239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.198147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.205784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.221372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.231567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.283691][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.296365][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.306863][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.315870][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.331232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.340166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.362379][ T4185] device veth0_vlan entered promiscuous mode [ 58.374764][ T4183] device veth0_macvtap entered promiscuous mode [ 58.387401][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.395925][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.406289][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.415094][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.422943][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.440883][ T4185] device veth1_vlan entered promiscuous mode [ 58.448005][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.462588][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.465271][ T4183] device veth1_macvtap entered promiscuous mode [ 58.493164][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.494364][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.502366][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.516371][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.527670][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.535698][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.549834][ T4192] device veth0_vlan entered promiscuous mode [ 58.575324][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.583479][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.596392][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.606148][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.615895][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.634882][ T4185] device veth0_macvtap entered promiscuous mode [ 58.648209][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.663790][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.675918][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.702182][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.712027][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.723233][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.734699][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.743349][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.752993][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.762087][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.770644][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.780855][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.789081][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.796893][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.806289][ T4185] device veth1_macvtap entered promiscuous mode [ 58.816052][ T4192] device veth1_vlan entered promiscuous mode [ 58.840271][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.855065][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.867512][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.883214][ T4184] device veth0_vlan entered promiscuous mode [ 58.907719][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.918046][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.927722][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.937088][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.952619][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.961599][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.971636][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.981590][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.995791][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.010293][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.020436][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.031213][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.042498][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.051289][ T4290] tipc: Started in network mode [ 59.056735][ T4290] tipc: Node identity ac14140f, cluster identity 4711 [ 59.063915][ T4290] tipc: New replicast peer: 255.255.255.255 [ 59.073105][ T4290] tipc: Enabled bearer , priority 10 [ 59.085724][ T4192] device veth0_macvtap entered promiscuous mode [ 59.095162][ T4184] device veth1_vlan entered promiscuous mode [ 59.109756][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.124536][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.133402][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.149970][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.161998][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.173981][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.192358][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.210489][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.220541][ T4192] device veth1_macvtap entered promiscuous mode [ 59.260977][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.270833][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.280737][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.308073][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.322370][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.331739][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.346386][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.371004][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.391758][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.407066][ T4184] device veth0_macvtap entered promiscuous mode [ 59.437814][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.451617][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.467401][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.475734][ T4292] loop0: detected capacity change from 0 to 32768 [ 59.480502][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.495484][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.506216][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.517758][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.525831][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 59.530280][ T4184] device veth1_macvtap entered promiscuous mode [ 59.532668][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 59.551734][ T4237] Bluetooth: hci2: command 0x040f tx timeout [ 59.558176][ T4237] Bluetooth: hci0: command 0x040f tx timeout [ 59.565714][ T1579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.573714][ T1579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.581475][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 59.588234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.607797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.612276][ T4292] (syz.0.6,4292,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.635110][ T4292] (syz.0.6,4292,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.639932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.657724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.668712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.685579][ T4292] (syz.0.6,4292,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 59.701310][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.712425][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.730771][ T4292] JBD2: Ignoring recovery information on journal [ 59.738911][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.757852][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.768772][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.779315][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.790958][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.802865][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.812853][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.821953][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.824575][ T4292] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 59.833889][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.867446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.881511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.973485][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.999841][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.020779][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.031420][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.041285][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.051947][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.062359][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.074632][ T1110] tipc: Node number set to 2886997007 [ 60.078050][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.092686][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.126238][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 60.146723][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.147238][ T1587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.158287][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.166326][ T1587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.181630][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.201767][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.202742][ T1579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.219546][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.225298][ T1579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.233080][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.249966][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.262288][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.272779][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.282617][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.293212][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.304615][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.339842][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.355268][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.373611][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.386242][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.396174][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.406727][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.416086][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.491325][ T1587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.518390][ T1587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.534957][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.552853][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.565329][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.586895][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.423863][ T1587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.465568][ T1579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.475412][ T1587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.493220][ T1579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.552325][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.567897][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.582806][ T4308] loop1: detected capacity change from 0 to 2048 [ 61.604731][ T4237] Bluetooth: hci1: command 0x0419 tx timeout [ 61.607474][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.612901][ T4237] Bluetooth: hci0: command 0x0419 tx timeout [ 61.629381][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.636940][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 61.651205][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.678611][ T4176] loop1: p1 < > p3 [ 61.696826][ T4176] loop1: p3 size 134217728 extends beyond EOD, truncated [ 61.707374][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 61.724325][ T4237] Bluetooth: hci3: command 0x0419 tx timeout [ 61.827051][ T4308] loop1: p1 < > p3 [ 61.850156][ T4308] loop1: p3 size 134217728 extends beyond EOD, truncated [ 61.913953][ T3561] loop1: p1 < > p3 [ 61.928225][ T4315] loop3: detected capacity change from 0 to 47 [ 61.936581][ T3561] loop1: p3 size 134217728 extends beyond EOD, truncated [ 62.015456][ T4315] ======================================================= [ 62.015456][ T4315] WARNING: The mand mount option has been deprecated and [ 62.015456][ T4315] and is ignored by this kernel. Remove the mand [ 62.015456][ T4315] option from the mount to silence this warning. [ 62.015456][ T4315] ======================================================= [ 62.104375][ T4306] loop4: detected capacity change from 0 to 32768 [ 62.180595][ T4308] loop1: detected capacity change from 0 to 256 [ 62.247822][ T4308] FAT-fs (loop1): Unrecognized mount option "u‡f8=1" or missing value [ 62.294564][ T4306] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 62.332249][ T4313] loop2: detected capacity change from 0 to 32768 [ 62.393499][ T4313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3 (4313) [ 62.423124][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 62.436662][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 62.555973][ T4313] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 62.571954][ T4310] loop0: detected capacity change from 0 to 32768 [ 62.602579][ T4313] BTRFS info (device loop2): metadata ratio 2 [ 62.613214][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 62.623886][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 62.655498][ T4313] BTRFS info (device loop2): allowing degraded mounts [ 62.662328][ T4313] BTRFS info (device loop2): force zlib compression, level 3 [ 62.735127][ T4313] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 62.766457][ T4325] udevd[4325]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 62.788155][ T4313] BTRFS info (device loop2): use zstd compression, level 3 [ 62.799505][ T4319] udevd[4319]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 62.831569][ T4313] BTRFS info (device loop2): force clearing of disk cache [ 62.872936][ T4310] XFS (loop0): Mounting V5 Filesystem [ 62.930520][ T4313] BTRFS info (device loop2): turning on flush-on-commit [ 62.999798][ T4313] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 63.063126][ T4321] loop3: detected capacity change from 0 to 40427 [ 63.096094][ T4321] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 63.101519][ T4310] XFS (loop0): Ending clean mount [ 63.114442][ T4313] BTRFS info (device loop2): trying to use backup root at mount time [ 63.120767][ T4321] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 63.122567][ T4313] BTRFS info (device loop2): using free space tree [ 63.198390][ T4313] BTRFS info (device loop2): has skinny extents [ 63.217024][ T4310] XFS (loop0): Quotacheck needed: Please wait. [ 63.222642][ T4321] F2FS-fs (loop3): invalid crc value [ 63.276312][ T4321] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.338500][ T4321] F2FS-fs (loop3): Start checkpoint disabled! [ 63.338737][ T4310] XFS (loop0): Quotacheck: Done. [ 63.396070][ T4321] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 63.433991][ T4321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 63.685061][ T4313] BTRFS info (device loop2): enabling ssd optimizations [ 63.732936][ T4313] BTRFS info (device loop2): clearing free space tree [ 63.762819][ T4182] XFS (loop0): Unmounting Filesystem [ 63.788940][ T4313] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.809180][ T4313] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.854995][ T470] attempt to access beyond end of device [ 63.854995][ T470] loop3: rw=2049, want=40976, limit=40427 [ 63.922568][ T4324] loop1: detected capacity change from 0 to 32768 [ 63.931811][ T4313] BTRFS info (device loop2): creating free space tree [ 63.961420][ T4313] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.981255][ T4313] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.133682][ T4324] XFS (loop1): Mounting V5 Filesystem [ 64.151277][ T4183] (syz-executor,4183,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 64.258306][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 64.291586][ T26] audit: type=1800 audit(1761380077.029:2): pid=4313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 64.437485][ T4324] XFS (loop1): Ending clean mount [ 64.452440][ T4324] XFS (loop1): Quotacheck needed: Please wait. [ 64.562253][ T4324] XFS (loop1): Quotacheck: Done. [ 64.699780][ T4370] loop4: detected capacity change from 0 to 512 [ 64.992870][ T4364] loop0: detected capacity change from 0 to 32768 [ 65.019211][ T4370] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 65.047384][ T4370] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.071516][ T4185] XFS (loop1): Unmounting Filesystem [ 65.157453][ T4368] loop3: detected capacity change from 0 to 32768 [ 65.172626][ T4364] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.12 (4364) [ 65.240248][ T4364] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 65.275092][ T4364] BTRFS info (device loop0): using free space tree [ 65.303442][ T4364] BTRFS info (device loop0): has skinny extents [ 65.360078][ T4368] XFS (loop3): Mounting V5 Filesystem [ 65.726384][ T4368] XFS (loop3): Ending clean mount [ 65.740212][ T4368] XFS (loop3): Quotacheck needed: Please wait. [ 65.782835][ T4299] XFS (loop3): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 65.854389][ T4299] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 [ 65.871235][ T4364] BTRFS info (device loop0): enabling ssd optimizations [ 65.884183][ T4299] XFS (loop3): Unmount and run xfs_repair [ 65.900935][ T4299] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 65.919867][ T4299] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 65.934153][ T4299] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f ................ [ 65.943945][ T4299] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91 ......N..b..1... [ 65.956378][ T4299] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 65.965904][ T4299] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 65.974842][ T4299] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 65.983871][ T4299] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 65.992824][ T4299] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 66.006688][ T154] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 4 error 74 [ 66.022249][ T4368] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 66.090472][ T4387] loop2: detected capacity change from 0 to 32768 [ 66.177875][ T4400] loop4: detected capacity change from 0 to 32768 [ 66.222877][ T26] audit: type=1800 audit(1761380078.959:3): pid=4387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 66.301023][ T4184] XFS (loop3): Unmounting Filesystem [ 66.353073][ T4400] XFS (loop4): Mounting V5 Filesystem [ 66.365730][ T4387] read_mapping_page failed! [ 66.371949][ T4387] ERROR: (device loop2): txCommit: [ 66.371949][ T4387] [ 66.510524][ T4412] loop1: detected capacity change from 0 to 32768 [ 66.541127][ T4400] XFS (loop4): Ending clean mount [ 66.576317][ T4387] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 66.576317][ T4387] [ 66.583910][ T4400] XFS (loop4): Quotacheck needed: Please wait. [ 66.798779][ T4436] loop3: detected capacity change from 0 to 4096 [ 66.859470][ T4436] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.922117][ T4412] XFS (loop1): Mounting V5 Filesystem [ 66.948080][ T4400] XFS (loop4): Quotacheck: Done. [ 67.043194][ T4412] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 67.105668][ T4412] XFS (loop1): Starting recovery (logdev: internal) [ 67.142699][ T4183] XFS (loop4): Unmounting Filesystem [ 67.180897][ T4412] XFS (loop1): Ending recovery (logdev: internal) [ 67.463409][ T4185] XFS (loop1): Unmounting Filesystem [ 67.672152][ T4448] loop2: detected capacity change from 0 to 2048 [ 67.810408][ T4448] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 67.854306][ T4448] UDF-fs: Scanning with blocksize 512 failed [ 67.897674][ T4448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.063734][ T4446] loop0: detected capacity change from 0 to 32768 [ 68.172347][ T4456] loop2: detected capacity change from 0 to 512 [ 68.191229][ T4446] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 68.198529][ T4452] loop1: detected capacity change from 0 to 4096 [ 68.256947][ T4456] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000040000,minixdf,,errors=continue. Quota mode: writeback. [ 68.306404][ T4436] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #15: comm syz.3.17: corrupted inode contents [ 68.327378][ T4450] loop4: detected capacity change from 0 to 32768 [ 68.331861][ T4456] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.372319][ T4450] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.20 (4450) [ 68.404162][ T4436] EXT4-fs error (device loop3): ext4_dirty_inode:6046: inode #15: comm syz.3.17: mark_inode_dirty error [ 68.415630][ T26] audit: type=1800 audit(1761380081.149:4): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.22" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 68.466421][ T4450] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 68.497137][ T4436] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #15: comm syz.3.17: corrupted inode contents [ 68.508322][ T4450] BTRFS info (device loop4): enabling auto defrag [ 68.542060][ T4436] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.17: mark_inode_dirty error [ 68.547187][ T4450] BTRFS info (device loop4): force clearing of disk cache [ 68.586389][ T4436] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #15: comm syz.3.17: corrupted inode contents [ 68.592358][ T4450] BTRFS info (device loop4): max_inline at 0 [ 68.613989][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 68.624264][ T4450] BTRFS info (device loop4): turning on sync discard [ 68.634738][ T4450] BTRFS info (device loop4): disabling free space tree [ 68.646407][ T4463] loop2: detected capacity change from 0 to 1024 [ 68.670010][ T4450] BTRFS info (device loop4): has skinny extents [ 68.696410][ T4463] EXT4-fs (loop2): Test dummy encryption mode enabled [ 68.713804][ T4463] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.754122][ T4463] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000004,dioread_lock,test_dummy_encryption=v1,dioread_nolock,delalloc,nobarrier,nogrpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 68.780186][ T4436] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.17: mark_inode_dirty error [ 68.877766][ T4436] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #15: comm syz.3.17: corrupted inode contents [ 68.924623][ T4450] BTRFS info (device loop4): enabling ssd optimizations [ 68.967558][ T4452] loop1: detected capacity change from 0 to 32768 [ 68.974860][ T4450] BTRFS info (device loop4): clearing free space tree [ 68.981689][ T4450] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 68.988332][ T4436] EXT4-fs error (device loop3): ext4_truncate:4279: inode #15: comm syz.3.17: mark_inode_dirty error [ 68.992622][ T4450] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.029752][ T4452] [ 69.029752][ T4452] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.029752][ T4452] [ 69.075216][ T26] audit: type=1800 audit(1761380081.819:5): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 69.156184][ T4452] ERROR: (device loop1): diWrite: ixpxd invalid [ 69.156184][ T4452] [ 69.159774][ T4486] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 69.174595][ T4436] EXT4-fs error (device loop3) in ext4_setattr:5614: Corrupt filesystem [ 69.244560][ T4452] ERROR: (device loop1): txCommit: [ 69.244560][ T4452] [ 69.263625][ T4176] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (4176) [ 69.345904][ T4489] jfs_create: dtSearch returned -17 [ 69.518608][ T4185] [ 69.518608][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.518608][ T4185] [ 69.561788][ T4185] [ 69.561788][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.561788][ T4185] [ 69.727352][ T4498] tipc: Started in network mode [ 69.760280][ T4498] tipc: Node identity ac14140f, cluster identity 4711 [ 69.804620][ T4498] tipc: New replicast peer: 255.255.255.255 [ 69.836580][ T4498] tipc: Enabled bearer , priority 10 [ 69.924439][ T4488] loop0: detected capacity change from 0 to 32768 [ 70.165276][ T4488] XFS (loop0): Mounting V5 Filesystem [ 70.206660][ T4500] loop2: detected capacity change from 0 to 32768 [ 70.250410][ T4488] XFS (loop0): Ending clean mount [ 70.266167][ T4488] XFS (loop0): Quotacheck needed: Please wait. [ 70.459069][ T4500] XFS (loop2): Mounting V5 Filesystem [ 70.472486][ T4488] XFS (loop0): Quotacheck: Done. [ 70.653645][ T4505] loop1: detected capacity change from 0 to 32768 [ 70.708343][ T4500] XFS (loop2): Ending clean mount [ 70.742626][ T4505] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.29 (4505) [ 70.761640][ T4500] XFS (loop2): Quotacheck needed: Please wait. [ 70.768940][ T4182] XFS (loop0): Unmounting Filesystem [ 70.791365][ T4505] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 70.814470][ T4505] BTRFS info (device loop1): using free space tree [ 70.851527][ T4505] BTRFS info (device loop1): has skinny extents [ 70.868301][ T4500] XFS (loop2): Quotacheck: Done. [ 70.964361][ T4496] tipc: Node number set to 2886997007 [ 71.029400][ T4512] loop4: detected capacity change from 0 to 32768 [ 71.100650][ T4192] XFS (loop2): Unmounting Filesystem [ 71.124881][ T4512] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.30 (4512) [ 71.202110][ T4512] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 71.242572][ T4541] loop0: detected capacity change from 0 to 8 [ 71.299875][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.306536][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.340427][ T4512] BTRFS info (device loop4): force zlib compression, level 3 [ 71.340622][ T4505] BTRFS info (device loop1): enabling ssd optimizations [ 71.398599][ T4512] BTRFS info (device loop4): force clearing of disk cache [ 71.400444][ T4548] loop3: detected capacity change from 0 to 64 [ 71.454234][ T4512] BTRFS info (device loop4): setting nodatasum [ 71.460453][ T4512] BTRFS info (device loop4): allowing degraded mounts [ 71.482889][ T4541] unable to read fragment index table [ 71.514161][ T4512] BTRFS info (device loop4): enabling disk space caching [ 71.521237][ T4512] BTRFS info (device loop4): disk space caching is enabled [ 71.562870][ T4512] BTRFS info (device loop4): has skinny extents [ 71.782825][ T4562] loop3: detected capacity change from 0 to 1024 [ 71.956115][ T4562] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.979477][ T4512] BTRFS info (device loop4): clearing free space tree [ 71.987504][ T4512] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.997612][ T4512] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 72.067863][ T4563] loop0: detected capacity change from 0 to 4096 [ 72.142384][ T4512] BTRFS info (device loop4): balance: start -susage=8589934594,vrange=18225..1,limit=3..129,stripes=0..32766 [ 72.189778][ T4512] BTRFS info (device loop4): balance: ended with status: 0 [ 72.206961][ T4563] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 72.602500][ T4565] loop2: detected capacity change from 0 to 32768 [ 72.827214][ T4594] loop3: detected capacity change from 0 to 2048 [ 72.834014][ T4565] XFS (loop2): Mounting V5 Filesystem [ 72.914733][ T4598] loop4: detected capacity change from 0 to 4096 [ 73.092942][ T4565] XFS (loop2): Ending clean mount [ 73.098499][ T4603] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.111279][ T4598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.126311][ T4605] loop0: detected capacity change from 0 to 1764 [ 73.245229][ T4192] XFS (loop2): Unmounting Filesystem [ 73.310647][ T4597] loop1: detected capacity change from 0 to 40427 [ 73.410219][ T4597] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x1ffff [ 73.817193][ T4611] loop1: detected capacity change from 0 to 4096 [ 73.883151][ T4611] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 74.977728][ T4609] loop3: detected capacity change from 0 to 40427 [ 75.047818][ T4609] F2FS-fs (loop3): invalid crc value [ 75.102612][ T4607] loop0: detected capacity change from 0 to 32768 [ 75.180012][ T4609] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.254452][ T4627] tipc: Started in network mode [ 75.283568][ T4627] tipc: Node identity 22d7f23dcce6, cluster identity 4711 [ 75.325022][ T4607] XFS (loop0): Mounting V5 Filesystem [ 75.355006][ T4627] tipc: Enabled bearer , priority 0 [ 75.394384][ T4609] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 75.439220][ T4633] device syzkaller0 entered promiscuous mode [ 75.499771][ T4607] XFS (loop0): Ending clean mount [ 75.507001][ T4607] XFS (loop0): Quotacheck needed: Please wait. [ 75.524524][ T26] audit: type=1800 audit(1761380088.269:6): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 75.592784][ T4184] attempt to access beyond end of device [ 75.592784][ T4184] loop3: rw=2049, want=45104, limit=40427 [ 75.614292][ T4607] XFS (loop0): Quotacheck: Done. [ 75.638361][ T4637] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #15: comm syz.4.38: corrupted inode contents [ 75.687909][ T4637] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #15: comm syz.4.38: mark_inode_dirty error [ 75.702186][ T4627] tipc: Resetting bearer [ 75.739635][ T4623] tipc: Resetting bearer [ 75.747678][ T4637] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #15: comm syz.4.38: corrupted inode contents [ 75.765095][ T4182] XFS (loop0): Unmounting Filesystem [ 75.789116][ T4637] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.38: mark_inode_dirty error [ 75.803443][ T4623] tipc: Disabling bearer [ 75.852039][ T4637] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #15: comm syz.4.38: corrupted inode contents [ 75.902102][ T4637] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.38: mark_inode_dirty error [ 75.909668][ T4622] loop1: detected capacity change from 0 to 32768 [ 75.950980][ T4637] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #15: comm syz.4.38: corrupted inode contents [ 75.983131][ T4637] EXT4-fs error (device loop4): ext4_truncate:4279: inode #15: comm syz.4.38: mark_inode_dirty error [ 76.010597][ T4622] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 76.064391][ T4637] EXT4-fs error (device loop4) in ext4_setattr:5614: Corrupt filesystem [ 76.073993][ T4622] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 76.122962][ T4638] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #15: comm syz.4.38: corrupted inode contents [ 76.202790][ T26] audit: type=1800 audit(1761380088.939:7): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.46" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 76.254818][ T26] audit: type=1800 audit(1761380088.939:8): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.46" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 76.307534][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 76.417437][ T7] cfg80211: failed to load regulatory.db [ 76.429090][ T4650] loop3: detected capacity change from 0 to 256 [ 76.495780][ T4299] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.561674][ T4650] FAT-fs (loop3): Directory bread(block 64) failed [ 76.587733][ T4650] FAT-fs (loop3): Directory bread(block 65) failed [ 76.602414][ T4650] FAT-fs (loop3): Directory bread(block 66) failed [ 76.626478][ T4650] FAT-fs (loop3): Directory bread(block 67) failed [ 76.659361][ T4650] FAT-fs (loop3): Directory bread(block 68) failed [ 76.666156][ T4650] FAT-fs (loop3): Directory bread(block 69) failed [ 76.672951][ T4650] FAT-fs (loop3): Directory bread(block 70) failed [ 76.680268][ T4650] FAT-fs (loop3): Directory bread(block 71) failed [ 76.687005][ T4650] FAT-fs (loop3): Directory bread(block 72) failed [ 76.694626][ T4650] FAT-fs (loop3): Directory bread(block 73) failed [ 76.764217][ T4299] usb 3-1: Using ep0 maxpacket: 32 [ 76.774316][ T4384] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.794243][ T1107] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.034203][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 77.044451][ T4299] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 77.053915][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.062206][ T4299] usb 3-1: Product: syz [ 77.066422][ T4299] usb 3-1: Manufacturer: syz [ 77.071012][ T4299] usb 3-1: SerialNumber: syz [ 77.080375][ T4299] usb 3-1: config 0 descriptor?? [ 77.127447][ T4299] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 77.135779][ T4299] dvb-usb: bulk message failed: -22 (4/0) [ 77.141697][ T4299] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.151996][ T4299] dvb-usb: bulk message failed: -22 (5/0) [ 77.157953][ T1107] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.167871][ T4581] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.174191][ T4244] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.175480][ T4299] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.192983][ T1107] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.202870][ T1107] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.219205][ T1107] usb 5-1: config 1 interface 0 has no altsetting 0 [ 77.221102][ T4299] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.255910][ T4299] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 77.264458][ T4299] usb 3-1: media controller created [ 77.276492][ T4299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.290367][ T4299] usb 3-1: selecting invalid altsetting 3 [ 77.296456][ T4299] ttusb2: set interface to alts=3 failed [ 77.321764][ T4299] DVB: Unable to find symbol tda10086_attach() [ 77.327997][ T4299] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 77.344366][ T4384] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 77.356108][ T4384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.364630][ T4384] usb 2-1: Product: syz [ 77.368796][ T4384] usb 2-1: Manufacturer: syz [ 77.373365][ T4384] usb 2-1: SerialNumber: syz [ 77.374710][ T4299] dvb-usb: bulk message failed: -22 (4/0) [ 77.384609][ T4299] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.389537][ T4384] usb 2-1: config 0 descriptor?? [ 77.395261][ T1107] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.408949][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.417394][ T4299] dvb-usb: bulk message failed: -22 (5/0) [ 77.423155][ T4299] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.433288][ T1107] usb 5-1: Product: syz [ 77.437560][ T4581] usb 1-1: Using ep0 maxpacket: 8 [ 77.442733][ T1107] usb 5-1: Manufacturer: syz [ 77.447076][ T4384] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 002 [ 77.447400][ T1107] usb 5-1: SerialNumber: syz [ 77.460141][ T4299] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 77.477038][ T4299] usb 3-1: USB disconnect, device number 2 [ 77.516745][ T4299] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 77.554334][ T4581] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 77.562524][ T4581] usb 1-1: config 0 has no interface number 0 [ 77.568736][ T4581] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.579826][ T4581] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.584362][ T4244] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 77.590363][ T4581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.604973][ T4244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.622831][ T4581] usb 1-1: config 0 descriptor?? [ 77.627260][ T4244] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.639900][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.651876][ T4244] usb 4-1: config 0 descriptor?? [ 77.672042][ T4581] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 77.684848][ T4656] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 77.707851][ T4244] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 77.727242][ T1107] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 77.877384][ T4654] udc-core: couldn't find an available UDC or it's busy [ 77.887431][ T4654] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.904436][ T4384] (null): failure reading functionality [ 77.924585][ T4384] i2c i2c-1: failure reading functionality [ 77.940393][ T4384] i2c i2c-1: connected i2c-tiny-usb device [ 77.949601][ T4384] usb 2-1: USB disconnect, device number 2 [ 78.164328][ T4244] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.406230][ T4244] usb 3-1: Using ep0 maxpacket: 16 [ 78.534402][ T4244] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.548728][ T4244] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.704234][ T4384] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 78.714224][ T4244] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.723859][ T4244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.736480][ T4244] usb 3-1: Product: syz [ 78.740652][ T4244] usb 3-1: Manufacturer: syz [ 78.746200][ T4244] usb 3-1: SerialNumber: syz [ 79.018146][ T7] usb 1-1: USB disconnect, device number 2 [ 79.074347][ T4384] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.088132][ T4384] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 79.097186][ T4384] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 79.108331][ T4384] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 79.117459][ T4384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.144374][ T4665] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 79.165089][ T4384] hub 2-1:1.0: bad descriptor, ignoring hub [ 79.171068][ T4384] hub: probe of 2-1:1.0 failed with error -5 [ 79.177644][ T4384] cdc_wdm 2-1:1.0: skipping garbage [ 79.182929][ T4384] cdc_wdm 2-1:1.0: skipping garbage [ 79.193657][ T4384] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 79.199672][ T4384] cdc_wdm 2-1:1.0: Unknown control protocol [ 79.264318][ T4244] usb 3-1: 0:2 : does not exist [ 79.269697][ T4244] usb 3-1: unit 9 not found! [ 79.380295][ T4665] udc-core: couldn't find an available UDC or it's busy [ 79.387414][ T4665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.396527][ T4665] udc-core: couldn't find an available UDC or it's busy [ 79.403555][ T4665] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.524593][ T4244] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4) [ 79.570182][ T4670] loop0: detected capacity change from 0 to 4096 [ 79.621175][ T4670] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 79.734480][ T4244] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4) [ 79.784518][ T4244] usb 3-1: USB disconnect, device number 3 [ 79.817133][ T4176] udevd[4176]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 79.833957][ T4176] udevd[4176]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 79.869842][ T7] usb 4-1: USB disconnect, device number 2 [ 80.005043][ T13] usb 5-1: USB disconnect, device number 2 [ 80.032699][ T4384] usb 2-1: USB disconnect, device number 3 [ 80.049613][ T13] usblp1: removed [ 80.074682][ T4679] tipc: Enabled bearer , priority 0 [ 80.081936][ T4679] device syzkaller0 entered promiscuous mode [ 80.097956][ T4678] tipc: Resetting bearer [ 80.116902][ T4678] tipc: Disabling bearer [ 80.194191][ T4244] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.204325][ T4237] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.294189][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.444288][ T4237] usb 1-1: Using ep0 maxpacket: 16 [ 80.554365][ T4244] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 80.566017][ T4237] usb 1-1: config 15 has an invalid interface number: 35 but max is 0 [ 80.574652][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.582269][ T4237] usb 1-1: config 15 has no interface number 0 [ 80.589470][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.600522][ T4237] usb 1-1: config 15 interface 35 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 80.611588][ T4244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.621728][ T4237] usb 1-1: config 15 interface 35 has no altsetting 0 [ 80.628623][ T4244] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 80.654298][ T7] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.662930][ T7] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 80.676372][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.686265][ T7] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 80.714496][ T4244] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 80.723545][ T4244] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 80.731978][ T4244] usb 3-1: Manufacturer: syz [ 80.738374][ T4244] usb 3-1: config 0 descriptor?? [ 80.794438][ T4237] usb 1-1: New USB device found, idVendor=03eb, idProduct=7614, bcdDevice=45.c2 [ 80.803488][ T4237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.811705][ T4384] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.819392][ T7] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.828563][ T7] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.836736][ T4237] usb 1-1: Product: syz [ 80.840898][ T4237] usb 1-1: Manufacturer: syz [ 80.845766][ T7] usb 4-1: Product: syz [ 80.849944][ T7] usb 4-1: Manufacturer: syz [ 80.854664][ T4237] usb 1-1: SerialNumber: syz [ 80.874519][ T4675] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 80.895044][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 80.900266][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 80.909689][ T7] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 80.944327][ T13] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 80.958102][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.969103][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.979001][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.064335][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 81.073477][ T13] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 81.081682][ T4384] usb 2-1: Using ep0 maxpacket: 32 [ 81.086953][ T13] usb 5-1: Manufacturer: syz [ 81.093059][ T13] usb 5-1: config 0 descriptor?? [ 81.109200][ T4675] udc-core: couldn't find an available UDC or it's busy [ 81.116663][ T4675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.131764][ T4675] udc-core: couldn't find an available UDC or it's busy [ 81.140531][ T4675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.150911][ T7] usb 4-1: USB disconnect, device number 3 [ 81.190820][ T4237] usb 1-1: USB disconnect, device number 3 [ 81.204401][ T4384] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 81.212431][ T4384] usb 2-1: config 0 has no interface number 0 [ 81.221407][ T4244] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 81.235756][ T4244] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 81.244827][ T4384] usb 2-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.263706][ T4384] usb 2-1: config 0 interface 2 has no altsetting 0 [ 81.265538][ T4244] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 81.434380][ T4384] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 81.443562][ T4384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.454890][ T4384] usb 2-1: Product: syz [ 81.459078][ T4384] usb 2-1: Manufacturer: syz [ 81.463651][ T4384] usb 2-1: SerialNumber: syz [ 81.472320][ T4384] usb 2-1: config 0 descriptor?? [ 81.575669][ T13] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 81.583187][ T13] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 81.596860][ T13] appleir 0003:05AC:8243.0002: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 81.734700][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.766959][ T4299] usb 3-1: USB disconnect, device number 4 [ 81.794374][ T4384] usb 2-1: invalid MIDI in EP 0 [ 81.830656][ T4384] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 81.840656][ T4384] usb 2-1: USB disconnect, device number 4 [ 81.944352][ T4581] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.974246][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 82.066657][ T4318] udevd[4318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.104299][ T7] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 82.112404][ T7] usb 4-1: config 0 has no interface number 0 [ 82.130640][ T4689] udc-core: couldn't find an available UDC or it's busy [ 82.137760][ T4689] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.316941][ T7] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 82.328482][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.339684][ T7] usb 4-1: Product: syz [ 82.343897][ T7] usb 4-1: Manufacturer: syz [ 82.348732][ T7] usb 4-1: SerialNumber: syz [ 82.356333][ T7] usb 4-1: config 0 descriptor?? [ 82.384641][ T4675] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 82.407035][ T7] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 82.464293][ T4581] usb 1-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 82.473341][ T4581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.484362][ T4581] usb 1-1: Product: syz [ 82.488528][ T4581] usb 1-1: Manufacturer: syz [ 82.493102][ T4581] usb 1-1: SerialNumber: syz [ 82.524202][ T4299] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.584280][ T4384] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.606504][ T4675] udc-core: couldn't find an available UDC or it's busy [ 82.613573][ T4675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.626566][ T7] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 82.645090][ T7] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 82.654478][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 82.754261][ T4581] usb 1-1: palm_os_4_probe - error -71 getting connection info [ 82.762382][ T4581] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 82.771020][ T4299] usb 2-1: Using ep0 maxpacket: 8 [ 82.777730][ T4581] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB2 [ 82.788860][ T4581] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB3 [ 82.799535][ T4581] usb 1-1: USB disconnect, device number 4 [ 82.846367][ T4493] usb 4-1: USB disconnect, device number 4 [ 82.859085][ T4581] visor ttyUSB2: Handspring Visor / Palm OS converter now disconnected from ttyUSB2 [ 82.859439][ T4384] usb 3-1: Using ep0 maxpacket: 32 [ 82.869047][ T4493] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 82.888660][ T4581] visor ttyUSB3: Handspring Visor / Palm OS converter now disconnected from ttyUSB3 [ 82.902122][ T4493] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 82.913475][ T4299] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.921962][ T4581] visor 1-1:1.0: device disconnected [ 82.927327][ T4299] usb 2-1: config 0 has no interface number 0 [ 82.933403][ T4299] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.946143][ T4493] quatech2 4-1:0.51: device disconnected [ 82.953041][ T4299] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.966083][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.986075][ T4384] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 82.987844][ T4299] usb 2-1: config 0 descriptor?? [ 82.999212][ T4384] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 83.016025][ T4384] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 83.028404][ T4384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.040040][ T4384] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 83.040725][ T4299] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 83.051493][ T4384] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.080078][ T4384] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 83.089231][ T4384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.099822][ T4384] usb 3-1: config 0 descriptor?? [ 83.190405][ T4493] usb 5-1: USB disconnect, device number 3 [ 83.374461][ T4384] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 83.389394][ T4384] usb 3-1: USB disconnect, device number 5 [ 83.397550][ T4384] usblp1: removed [ 83.554819][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 83.584225][ T4493] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.694251][ T4299] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.934319][ T4384] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.941976][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.944330][ T4493] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.953125][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.961794][ T4299] usb 4-1: Using ep0 maxpacket: 16 [ 83.972485][ T13] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 83.983797][ T4493] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 83.986618][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.996863][ T4493] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.013601][ T4493] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 84.017110][ T13] usb 1-1: config 0 descriptor?? [ 84.104389][ T4299] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 84.112595][ T4299] usb 4-1: config 0 has no interface number 0 [ 84.121856][ T4299] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.132868][ T4299] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 84.144547][ T4493] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.153592][ T4493] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.161701][ T4493] usb 5-1: Product: syz [ 84.165966][ T4493] usb 5-1: Manufacturer: syz [ 84.184389][ T4695] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.204895][ T4493] cdc_wdm 5-1:1.0: skipping garbage [ 84.210141][ T4493] cdc_wdm 5-1:1.0: skipping garbage [ 84.214153][ T4384] usb 3-1: Using ep0 maxpacket: 32 [ 84.220544][ T4493] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 84.275221][ T4299] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 84.284497][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 84.292578][ T4299] usb 4-1: Product: syz [ 84.295248][ T4244] usb 2-1: USB disconnect, device number 5 [ 84.298545][ T4299] usb 4-1: SerialNumber: syz [ 84.319505][ T4299] usb 4-1: config 0 descriptor?? [ 84.354365][ T4384] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 84.366892][ T4384] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 84.369462][ T4299] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 84.377157][ T4384] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 84.393310][ T4299] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 84.397121][ T4384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.432487][ T4695] udc-core: couldn't find an available UDC or it's busy [ 84.444699][ T4384] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.458452][ T4695] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.466768][ T4384] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.481597][ T4384] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 84.490994][ T4384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.501487][ T4384] usb 3-1: config 0 descriptor?? [ 84.526377][ T13] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 84.533622][ T13] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 84.541498][ T13] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 84.549694][ T13] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 84.557042][ T13] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 84.564779][ T13] cm6533_jd 0003:0D8C:0022.0003: No inputs registered, leaving [ 84.583830][ T13] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 84.743464][ T4299] usb 5-1: USB disconnect, device number 4 [ 84.758042][ T13] usb 1-1: USB disconnect, device number 5 [ 84.807067][ T4493] usb 4-1: USB disconnect, device number 5 [ 84.824542][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 84.831829][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 84.861045][ T4493] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 84.951355][ T4693] udc-core: couldn't find an available UDC or it's busy [ 84.959542][ T4693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.977161][ T4384] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.993317][ T4384] usb 3-1: USB disconnect, device number 6 [ 85.002813][ T4384] usblp0: removed [ 85.124303][ T4244] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.348356][ T4708] tipc: Started in network mode [ 85.353247][ T4708] tipc: Node identity 624a8d6c095c, cluster identity 4711 [ 85.361061][ T4708] tipc: Enabled bearer , priority 0 [ 85.374351][ T4708] device syzkaller0 entered promiscuous mode [ 85.386173][ T4707] tipc: Resetting bearer [ 85.403231][ T4707] tipc: Disabling bearer [ 85.524287][ T4244] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.533364][ T4244] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 85.544119][ T4244] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.544655][ T4232] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 85.553395][ T4244] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 85.575865][ T4244] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 85.724230][ T4244] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 85.733312][ T4244] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.754141][ T4244] usb 2-1: Product: syz [ 85.754296][ T4493] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.758338][ T4244] usb 2-1: Manufacturer: syz [ 85.777403][ T4713] loop2: detected capacity change from 0 to 40427 [ 85.804296][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 85.834979][ T4244] cdc_wdm 2-1:1.0: skipping garbage [ 85.840302][ T4244] cdc_wdm 2-1:1.0: skipping garbage [ 85.850063][ T4244] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 85.857006][ T4244] cdc_wdm 2-1:1.0: Unknown control protocol [ 85.879160][ T4713] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 85.934369][ T4232] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 86.015575][ T4713] loop2: detected capacity change from 0 to 4096 [ 86.042235][ T4581] usb 2-1: USB disconnect, device number 6 [ 86.104457][ T4232] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.124310][ T4493] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 86.144298][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.152373][ T4493] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.172445][ T4232] usb 1-1: Product: syz [ 86.190367][ T4232] usb 1-1: Manufacturer: syz [ 86.194356][ T13] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.199951][ T4493] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.219481][ T4232] usb 1-1: SerialNumber: syz [ 86.220212][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.226861][ T4493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.251509][ T4493] usb 5-1: config 0 descriptor?? [ 86.255119][ T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.271916][ T4232] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 86.275484][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.298336][ T4493] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 86.304349][ T4717] loop2: detected capacity change from 0 to 4096 [ 86.397811][ T4717] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 86.444450][ T4717] ntfs3: loop2: Failed to load $Extend. [ 86.448026][ T13] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.459910][ T13] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.468045][ T13] usb 4-1: Product: syz [ 86.472369][ T13] usb 4-1: Manufacturer: syz [ 86.493314][ T26] audit: type=1804 audit(1761380099.229:9): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.76" name="/newroot/14/file0/file0" dev="loop2" ino=0 res=1 errno=0 [ 86.537880][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 86.544654][ T13] cdc_wdm 4-1:1.0: skipping garbage [ 86.552676][ T13] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 86.559153][ T13] cdc_wdm 4-1:1.0: Unknown control protocol [ 86.618957][ T4719] loop2: detected capacity change from 0 to 256 [ 86.654691][ T4719] exfat: Deprecated parameter 'utf8' [ 86.664318][ T4719] exfat: Deprecated parameter 'namecase' [ 86.670033][ T4719] exfat: Deprecated parameter 'namecase' [ 86.676199][ T4719] exfat: Deprecated parameter 'utf8' [ 86.716394][ T4719] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 86.753945][ T4384] usb 4-1: USB disconnect, device number 6 [ 86.794166][ T4244] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 86.880946][ T4722] udc-core: couldn't find an available UDC or it's busy [ 86.888421][ T4722] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.897025][ T4722] udc-core: couldn't find an available UDC or it's busy [ 86.904976][ T4722] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.913298][ T4722] udc-core: couldn't find an available UDC or it's busy [ 86.921769][ T4722] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.929554][ T4232] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.949013][ T4721] loop2: detected capacity change from 0 to 4096 [ 87.040640][ T4721] ntfs3: loop2: ino=21, "file1" fallocate(0x40) is not supported [ 87.065128][ T4192] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 87.072131][ T4192] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 87.135749][ T4706] udc-core: couldn't find an available UDC or it's busy [ 87.143650][ T4706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.152138][ T4706] udc-core: couldn't find an available UDC or it's busy [ 87.174355][ T4706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.175445][ T4244] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.196075][ T4244] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.199591][ T4706] udc-core: couldn't find an available UDC or it's busy [ 87.207786][ T4244] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.220375][ T4706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.228740][ T4244] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 87.233652][ T4493] usb 1-1: USB disconnect, device number 6 [ 87.242689][ T4244] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 87.365976][ T4299] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 87.366058][ T4244] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.382832][ T4384] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 87.394337][ T4244] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.402413][ T4244] usb 2-1: Product: syz [ 87.406692][ T4244] usb 2-1: Manufacturer: syz [ 87.445757][ T4244] cdc_wdm 2-1:1.0: skipping garbage [ 87.451004][ T4244] cdc_wdm 2-1:1.0: skipping garbage [ 87.466615][ T4244] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 87.472548][ T4244] cdc_wdm 2-1:1.0: Unknown control protocol [ 87.664150][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.671330][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.684147][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.689836][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.704282][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.710000][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.724176][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.729864][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.754240][ T4299] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 87.754279][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.762789][ T4299] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.768030][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.768706][ T4384] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.779215][ T4299] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.784221][ T4384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.784244][ T4384] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.793325][ T4299] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.806049][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.821732][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.825471][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.841695][ T4299] usb 3-1: config 0 descriptor?? [ 87.848213][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.864301][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.870005][ T4384] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.879309][ T4724] raw-gadget.7 gadget: fail, usb_ep_enable returned -22 [ 87.884110][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.893433][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.904158][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.909844][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.924685][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.928368][ T4299] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 87.930379][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.944175][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.949873][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.964188][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.969899][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.984179][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 87.989883][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 87.997003][ T4384] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.006116][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.011767][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 88.014240][ T4232] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 88.017546][ T4384] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.032126][ T4232] ath9k_htc: Failed to initialize the device [ 88.032602][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.041100][ T4493] usb 1-1: ath9k_htc: USB layer deinitialized [ 88.044501][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.056882][ T4384] usb 4-1: Product: syz [ 88.061076][ T4384] usb 4-1: Manufacturer: syz [ 88.066520][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.072197][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 88.084145][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.089841][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 88.104167][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.109861][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 88.119251][ T4384] cdc_wdm 4-1:1.0: skipping garbage [ 88.124525][ T4384] cdc_wdm 4-1:1.0: skipping garbage [ 88.130315][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.135990][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 88.141917][ T4384] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 88.147878][ T4384] cdc_wdm 4-1:1.0: Unknown control protocol [ 88.152085][ T4704] udc-core: couldn't find an available UDC or it's busy [ 88.160406][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.165815][ T4704] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.166367][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 88.176025][ T4704] udc-core: couldn't find an available UDC or it's busy [ 88.179939][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.192043][ T4704] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.197441][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.205197][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 88.214124][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.222960][ T4704] udc-core: couldn't find an available UDC or it's busy [ 88.230606][ T4704] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.234156][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 88.247127][ C0] cdc_wdm 2-1:1.0: Stall on int endpoint [ 88.252806][ C0] cdc_wdm 2-1:1.0: Cannot schedule work [ 88.258373][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 88.268576][ T4299] usb 2-1: USB disconnect, device number 7 [ 88.435432][ T4493] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.509762][ T4384] usb 5-1: USB disconnect, device number 5 [ 88.844293][ T4493] usb 1-1: device descriptor read/64, error -71 [ 88.944225][ T4384] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.064210][ T4299] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 89.134586][ T4493] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 89.184155][ T4384] usb 5-1: Using ep0 maxpacket: 8 [ 89.324363][ T4384] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 89.335812][ T4384] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.347137][ T4384] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.358784][ T4384] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.370754][ T4384] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.385674][ T4384] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.394180][ T4493] usb 1-1: Using ep0 maxpacket: 32 [ 89.395611][ T4384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.444472][ T4299] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.452709][ T4299] usb 2-1: config 0 has no interface number 0 [ 89.459426][ T4299] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.471037][ T4299] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.481022][ T4299] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.495033][ T4299] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 89.504142][ T4299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.513513][ T4299] usb 2-1: config 0 descriptor?? [ 89.518765][ T4493] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.684298][ T4384] usb 5-1: GET_CAPABILITIES returned 0 [ 89.684346][ T4493] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.690109][ T4384] usbtmc 5-1:16.0: can't read capabilities [ 89.704360][ T4493] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.714397][ T4493] usb 1-1: Product: syz [ 89.718573][ T4493] usb 1-1: Manufacturer: syz [ 89.727812][ T4493] usb 1-1: SerialNumber: syz [ 89.741425][ T4493] usb 1-1: config 0 descriptor?? [ 89.764511][ T4727] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 89.784867][ T4493] hub 1-1:0.0: bad descriptor, ignoring hub [ 89.790859][ T4493] hub: probe of 1-1:0.0 failed with error -5 [ 90.009096][ T4730] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 90.016588][ T4727] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 90.027721][ T4232] usb 5-1: USB disconnect, device number 6 [ 90.093493][ T7] usb 4-1: USB disconnect, device number 7 [ 90.127525][ T4384] usb 3-1: USB disconnect, device number 7 [ 90.144385][ T4493] usb 1-1: USB disconnect, device number 8 [ 90.172554][ T4741] tipc: Enabled bearer , priority 0 [ 90.180278][ T4741] device syzkaller0 entered promiscuous mode [ 90.192451][ T4740] tipc: Resetting bearer [ 90.220822][ T4740] tipc: Disabling bearer [ 90.228716][ T4299] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0004/input/input6 [ 90.321922][ T4299] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 90.429751][ T13] usb 2-1: USB disconnect, device number 8 [ 90.514283][ T1107] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 90.574584][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 90.684226][ T4384] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.854239][ T4299] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.914244][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 90.924292][ T4384] usb 3-1: Using ep0 maxpacket: 16 [ 90.944330][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.962247][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.976342][ T7] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.985720][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.996269][ T7] usb 4-1: config 0 descriptor?? [ 91.084252][ T4384] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.094415][ T1107] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.103633][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.112041][ T1107] usb 1-1: Product: syz [ 91.116334][ T1107] usb 1-1: Manufacturer: syz [ 91.120928][ T1107] usb 1-1: SerialNumber: syz [ 91.128866][ T1107] usb 1-1: config 0 descriptor?? [ 91.164512][ T4384] usb 3-1: config 12 has an invalid interface number: 4 but max is 0 [ 91.172984][ T4727] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.180337][ T4384] usb 3-1: config 12 has no interface number 0 [ 91.186626][ T4384] usb 3-1: config 12 interface 4 has no altsetting 0 [ 91.195006][ T1107] hub 1-1:0.0: bad descriptor, ignoring hub [ 91.200924][ T1107] hub: probe of 1-1:0.0 failed with error -5 [ 91.242237][ T4493] usb 4-1: USB disconnect, device number 8 [ 91.251158][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 91.263979][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.276453][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 91.288643][ T4232] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.296217][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 91.344318][ T4384] usb 3-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=d4.d0 [ 91.353949][ T4384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.362278][ T4384] usb 3-1: Product: syz [ 91.366657][ T4384] usb 3-1: Manufacturer: syz [ 91.371249][ T4384] usb 3-1: SerialNumber: syz [ 91.484928][ T4299] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 91.494433][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.502496][ T4299] usb 5-1: Product: syz [ 91.507106][ T4299] usb 5-1: Manufacturer: syz [ 91.511720][ T4299] usb 5-1: SerialNumber: syz [ 91.514445][ T7] usb 1-1: USB disconnect, device number 9 [ 91.532886][ T4299] usb 5-1: config 0 descriptor?? [ 91.700381][ T4384] apple-mfi-fastcharge 3-1: USB disconnect, device number 8 [ 91.825921][ T4299] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 91.837736][ T4299] usb 5-1: USB disconnect, device number 7 [ 91.884412][ T4493] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 91.892061][ T4232] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 91.901857][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.910333][ T4232] usb 2-1: Product: syz [ 91.914764][ T4232] usb 2-1: Manufacturer: syz [ 91.919418][ T4232] usb 2-1: SerialNumber: syz [ 92.204341][ T4493] usb 4-1: not running at top speed; connect to a high speed hub [ 92.234167][ T4384] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 92.284361][ T4493] usb 4-1: config 1 has an invalid interface number: 78 but max is 0 [ 92.292459][ T4493] usb 4-1: config 1 has no interface number 0 [ 92.299208][ T4493] usb 4-1: config 1 interface 78 has no altsetting 0 [ 92.364239][ T4299] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.404812][ T4581] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 92.504165][ T4384] usb 1-1: Using ep0 maxpacket: 8 [ 92.544215][ T4493] usb 4-1: string descriptor 0 read error: -22 [ 92.550494][ T4493] usb 4-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 92.562536][ T4493] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.605891][ T4493] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 92.613744][ T4493] usb 4-1: selecting invalid altsetting 0 [ 92.622596][ T4232] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 92.634520][ T4384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 92.644330][ T4581] usb 3-1: Using ep0 maxpacket: 8 [ 92.656052][ T2422] pvrusb2: control-write URB failure, status=-71 [ 92.656918][ T4384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.662713][ T2422] pvrusb2: Device being rendered inoperable [ 92.663297][ T2422] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 92.686641][ T4384] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.689717][ T4232] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 92.706374][ T4384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 92.710492][ T4232] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 92.725194][ T4384] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 92.728834][ T2422] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 92.743959][ T4384] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 92.749440][ T4232] lan78xx: probe of 2-1:1.0 failed with error -32 [ 92.761588][ T4384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.764434][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 92.781636][ T4384] usb 1-1: config 0 descriptor?? [ 92.781940][ T4581] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 92.804675][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.808075][ T4739] udc-core: couldn't find an available UDC or it's busy [ 92.814446][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 92.814477][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 92.824720][ T4757] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.833125][ T4739] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.883291][ T4739] udc-core: couldn't find an available UDC or it's busy [ 92.890674][ T4739] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.964431][ T4581] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 92.973525][ T4581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.982167][ T4299] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 92.991375][ T4581] usb 3-1: Product: syz [ 92.995674][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.003663][ T4299] usb 5-1: Product: syz [ 93.007997][ T4581] usb 3-1: Manufacturer: syz [ 93.012590][ T4581] usb 3-1: SerialNumber: syz [ 93.017784][ T4299] usb 5-1: Manufacturer: syz [ 93.022407][ T4299] usb 5-1: SerialNumber: syz [ 93.032645][ T4581] usb 3-1: config 0 descriptor?? [ 93.040264][ T4299] usb 5-1: config 0 descriptor?? [ 93.075959][ T4581] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 93.086587][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.095382][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.102516][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.109934][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.117183][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.125630][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.132754][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.139989][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.147205][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.154407][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.161531][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.168721][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.176037][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.183701][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.190997][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.198195][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.205401][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.212526][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.219689][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.226846][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.234209][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.241337][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.249722][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.256976][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.264154][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.271299][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.278558][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.286260][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.293405][ T4190] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 93.297558][ T4581] usb 1-1: USB disconnect, device number 10 [ 93.544898][ T4748] udc-core: couldn't find an available UDC or it's busy [ 93.551986][ T4748] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.587361][ T4299] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 93.600712][ T4299] usb 5-1: USB disconnect, device number 8 [ 93.706064][ T4232] usb 3-1: USB disconnect, device number 9 [ 93.922752][ T4384] usb 4-1: USB disconnect, device number 9 [ 93.985171][ T13] usb 2-1: USB disconnect, device number 9 [ 94.354228][ T4299] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 94.364364][ T4384] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 94.444252][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 94.514186][ T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 94.614167][ T4384] usb 4-1: Using ep0 maxpacket: 8 [ 94.614193][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 94.684409][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 94.734842][ T4384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.748672][ T4384] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.758297][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 94.763396][ T4384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.764250][ T4299] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 94.780343][ T4299] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.786108][ T4384] usb 4-1: config 0 descriptor?? [ 94.790570][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.805411][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.814666][ T13] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 94.816157][ T4299] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.830265][ T13] usb 2-1: config 4 has no interface number 0 [ 94.837218][ T4299] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.846005][ T13] usb 2-1: config 4 interface 51 has no altsetting 0 [ 94.857378][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.014698][ T13] usb 2-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 95.025031][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.033037][ T13] usb 2-1: Product: syz [ 95.037764][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 95.048309][ T4384] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 95.059242][ T13] usb 2-1: Manufacturer: syz [ 95.063848][ T13] usb 2-1: SerialNumber: syz [ 95.068509][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.082110][ T7] usb 3-1: Product: syz [ 95.086427][ T7] usb 3-1: Manufacturer: syz [ 95.091135][ T7] usb 3-1: SerialNumber: syz [ 95.097614][ T7] usb 3-1: config 0 descriptor?? [ 95.115454][ T13] upd78f0730 2-1:4.51: upd78f0730 converter detected [ 95.123470][ T13] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 95.164276][ T4299] usb 5-1: usb_control_msg returned -32 [ 95.169961][ T4299] usbtmc 5-1:16.0: can't read capabilities [ 95.321959][ T4299] usb 2-1: USB disconnect, device number 10 [ 95.332121][ T4299] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 95.341746][ T4299] upd78f0730 2-1:4.51: device disconnected [ 95.344475][ T7] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 95.525840][ T4232] usb 4-1: USB disconnect, device number 10 [ 95.764378][ T7] usb write operation failed. (-71) [ 95.775896][ T7] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.786498][ T7] dvbdev: DVB: registering new adapter (Terratec H7) [ 95.793217][ T7] usb 3-1: media controller created [ 95.814218][ T7] usb read operation failed. (-71) [ 95.844360][ T7] usb write operation failed. (-71) [ 95.857119][ T7] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 95.881427][ T7] usb 3-1: USB disconnect, device number 10 [ 96.124177][ T4232] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 96.334313][ T4299] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 96.394230][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 96.514339][ T4232] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 96.522614][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.534235][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.534266][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.534288][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.567867][ T1107] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 96.576408][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.585529][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.724380][ T4299] usb 4-1: config 0 has an invalid interface number: 157 but max is 0 [ 96.732607][ T4299] usb 4-1: config 0 has no interface number 0 [ 96.814713][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 96.855219][ T4232] usb 2-1: GET_CAPABILITIES returned 0 [ 96.860727][ T4232] usbtmc 2-1:16.0: can't read capabilities [ 96.872104][ T4783] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.881378][ T4783] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.890164][ T4783] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.898943][ T4783] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.905223][ T4299] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da [ 96.932627][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.944316][ T1107] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.957242][ T4299] usb 4-1: Product: syz [ 96.968942][ T1107] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.978981][ T4299] usb 4-1: Manufacturer: syz [ 96.988713][ T4299] usb 4-1: SerialNumber: syz [ 96.993415][ T1107] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.010685][ T4299] usb 4-1: config 0 descriptor?? [ 97.016202][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.026590][ T1107] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.036759][ T1107] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.056789][ T1107] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.066419][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.068110][ T4237] usb 2-1: USB disconnect, device number 11 [ 97.098934][ T1107] usb 3-1: config 0 descriptor?? [ 97.115006][ T4493] usb 5-1: USB disconnect, device number 9 [ 97.165629][ T4793] tipc: Enabling of bearer rejected, failed to enable media [ 97.305897][ T4299] flexcop_usb: set interface failed. [ 97.327085][ T4299] b2c2_flexcop_usb: probe of 4-1:0.157 failed with error -22 [ 97.365514][ T4299] usb 4-1: USB disconnect, device number 11 [ 97.376472][ T1107] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.394040][ T1107] usb 3-1: USB disconnect, device number 11 [ 97.452751][ T1107] usblp0: removed [ 97.519334][ T4809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.111'. [ 97.914390][ T1107] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 98.164257][ T1107] usb 3-1: Using ep0 maxpacket: 32 [ 98.284275][ T1107] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.293197][ T1107] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.303395][ T1107] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 98.312832][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.323164][ T1107] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.333526][ T1107] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.347402][ T1107] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.356858][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.373636][ T1107] usb 3-1: config 0 descriptor?? [ 98.437137][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 98.594531][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880609ce000: rx timeout, send abort [ 98.615256][ T4781] udc-core: couldn't find an available UDC or it's busy [ 98.629889][ T4781] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.639269][ T1107] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.792212][ T4846] netlink: 'syz.4.125': attribute type 25 has an invalid length. [ 98.938750][ T4854] netlink: 104 bytes leftover after parsing attributes in process `syz.3.127'. [ 99.001989][ T4857] syz.4.128 uses obsolete (PF_INET,SOCK_PACKET) [ 99.012150][ T4856] device syzkaller1 entered promiscuous mode [ 99.104196][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880609ce000: abort rx timeout. Force session deactivation [ 99.391570][ T4875] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.427170][ T4877] Zero length message leads to an empty skb [ 99.578541][ T4890] netlink: 14 bytes leftover after parsing attributes in process `syz.3.141'. [ 99.652950][ T4890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.679677][ T4890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.698579][ T4890] bond0 (unregistering): Released all slaves [ 99.839403][ T4901] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.048355][ T4914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.147'. [ 100.079714][ T4917] netlink: 64 bytes leftover after parsing attributes in process `syz.0.149'. [ 100.194288][ T4923] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.270553][ T4384] usb 3-1: USB disconnect, device number 12 [ 100.288360][ T4384] usblp0: removed [ 100.467179][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 100.501422][ T4942] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.558755][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 100.574439][ T4945] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 100.712660][ T4953] device veth0_to_team entered promiscuous mode [ 100.717021][ T4954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 100.800128][ T4958] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 100.832261][ T4958] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.853043][ T4958] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 100.884539][ T4962] bond1: (slave gretap1): making interface the new active one [ 100.895222][ T4962] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 100.912456][ T4958] device macvlan2 entered promiscuous mode [ 100.919344][ T4958] device bond1 entered promiscuous mode [ 100.925082][ T4958] device gretap1 entered promiscuous mode [ 100.931805][ T4958] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.944977][ T4958] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 100.958498][ T4958] device bond1 left promiscuous mode [ 100.964036][ T4958] device gretap1 left promiscuous mode [ 101.030184][ T4962] syz.1.166 (4962) used greatest stack depth: 18368 bytes left [ 101.046560][ T4968] netlink: 'syz.0.169': attribute type 39 has an invalid length. [ 101.089794][ T4970] netlink: 64 bytes leftover after parsing attributes in process `syz.1.170'. [ 101.353070][ T4981] MD5 Hash mismatch for [fe80::bb]:0->[fe80::aa]:20002 L3 index 0 [ 101.385703][ T4983] device bond0 entered promiscuous mode [ 101.603430][ T4992] tipc: Started in network mode [ 101.621043][ T4992] tipc: Node identity 5a509c0fbac5, cluster identity 4711 [ 101.640009][ T4992] tipc: Enabled bearer , priority 0 [ 101.680823][ T5000] device syzkaller0 entered promiscuous mode [ 101.703658][ T5004] bond0: (slave macvlan2): Opening slave failed [ 101.735145][ T4992] tipc: Resetting bearer [ 101.743462][ T5006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.769581][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 101.777321][ T4990] tipc: Resetting bearer [ 101.790709][ T4990] tipc: Disabling bearer [ 101.801583][ T5007] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 101.812240][ T5007] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.820161][ T5007] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.148119][ T5008] infiniband syz1: set active [ 102.153151][ T5008] infiniband syz1: added syz_tun [ 102.262533][ T5008] RDS/IB: syz1: added [ 102.274018][ T5008] smc: adding ib device syz1 with port count 1 [ 102.280819][ T5008] smc: ib device syz1 port 1 has pnetid [ 102.471474][ T4998] ================================================================== [ 102.480023][ T4998] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 102.487071][ T4998] Read of size 8 at addr ffff88801f07f708 by task syz.2.183/4998 [ 102.494813][ T4998] [ 102.497151][ T4998] CPU: 1 PID: 4998 Comm: syz.2.183 Not tainted syzkaller #0 [ 102.504438][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.514516][ T4998] Call Trace: [ 102.517805][ T4998] [ 102.520740][ T4998] dump_stack_lvl+0x168/0x230 [ 102.525438][ T4998] ? show_regs_print_info+0x20/0x20 [ 102.530647][ T4998] ? _printk+0xcc/0x110 [ 102.534807][ T4998] ? ax25_release+0x5ca/0x870 [ 102.539498][ T4998] ? load_image+0x3b0/0x3b0 [ 102.544015][ T4998] print_address_description+0x60/0x2d0 [ 102.549569][ T4998] ? ax25_release+0x5ca/0x870 [ 102.554252][ T4998] kasan_report+0xdf/0x130 [ 102.558677][ T4998] ? ax25_release+0x5ca/0x870 [ 102.563366][ T4998] ax25_release+0x5ca/0x870 [ 102.567882][ T4998] sock_close+0xd5/0x240 [ 102.572143][ T4998] ? sock_mmap+0x90/0x90 [ 102.576400][ T4998] __fput+0x234/0x930 [ 102.580416][ T4998] task_work_run+0x125/0x1a0 [ 102.585018][ T4998] exit_to_user_mode_loop+0x10f/0x130 [ 102.590489][ T4998] exit_to_user_mode_prepare+0xee/0x180 [ 102.596046][ T4998] syscall_exit_to_user_mode+0x16/0x40 [ 102.601526][ T4998] do_syscall_64+0x58/0xa0 [ 102.605953][ T4998] ? clear_bhb_loop+0x30/0x80 [ 102.610638][ T4998] ? clear_bhb_loop+0x30/0x80 [ 102.615324][ T4998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.621243][ T4998] RIP: 0033:0x7f33b0a26fc9 [ 102.625665][ T4998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.645286][ T4998] RSP: 002b:00007ffeca0ab298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 102.653719][ T4998] RAX: 0000000000000000 RBX: 00007f33b0c7fda0 RCX: 00007f33b0a26fc9 [ 102.661699][ T4998] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 102.669692][ T4998] RBP: 00007f33b0c7fda0 R08: 0000000000000194 R09: 00000017ca0ab58f [ 102.677679][ T4998] R10: 00007f33b0c7fcb0 R11: 0000000000000246 R12: 0000000000019023 [ 102.685667][ T4998] R13: 00007f33b0c7e180 R14: ffffffffffffffff R15: 00007ffeca0ab3b0 [ 102.693674][ T4998] [ 102.696709][ T4998] [ 102.699027][ T4998] Allocated by task 4831: [ 102.703401][ T4998] __kasan_kmalloc+0xb5/0xf0 [ 102.708001][ T4998] ax25_dev_device_up+0x50/0x580 [ 102.712958][ T4998] ax25_device_event+0x483/0x4f0 [ 102.717904][ T4998] raw_notifier_call_chain+0xcb/0x160 [ 102.723283][ T4998] __dev_notify_flags+0x178/0x2d0 [ 102.728317][ T4998] dev_change_flags+0xe3/0x1a0 [ 102.733090][ T4998] dev_ifsioc+0x147/0xe70 [ 102.737425][ T4998] dev_ioctl+0x55f/0xe50 [ 102.741672][ T4998] sock_do_ioctl+0x222/0x2f0 [ 102.746272][ T4998] sock_ioctl+0x4ed/0x6e0 [ 102.750603][ T4998] __se_sys_ioctl+0xfa/0x170 [ 102.755198][ T4998] do_syscall_64+0x4c/0xa0 [ 102.759615][ T4998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.765525][ T4998] [ 102.767850][ T4998] Freed by task 5009: [ 102.771820][ T4998] kasan_set_track+0x4b/0x70 [ 102.776413][ T4998] kasan_set_free_info+0x1f/0x40 [ 102.781357][ T4998] ____kasan_slab_free+0xd5/0x110 [ 102.786391][ T4998] slab_free_freelist_hook+0xea/0x170 [ 102.791828][ T4998] kfree+0xef/0x2a0 [ 102.795641][ T4998] ax25_device_event+0x4b4/0x4f0 [ 102.800587][ T4998] raw_notifier_call_chain+0xcb/0x160 [ 102.805966][ T4998] __dev_notify_flags+0x178/0x2d0 [ 102.810998][ T4998] dev_change_flags+0xe3/0x1a0 [ 102.815765][ T4998] dev_ifsioc+0x147/0xe70 [ 102.820101][ T4998] dev_ioctl+0x55f/0xe50 [ 102.824344][ T4998] sock_do_ioctl+0x222/0x2f0 [ 102.828939][ T4998] sock_ioctl+0x4ed/0x6e0 [ 102.833274][ T4998] __se_sys_ioctl+0xfa/0x170 [ 102.837872][ T4998] do_syscall_64+0x4c/0xa0 [ 102.842292][ T4998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.848188][ T4998] [ 102.850507][ T4998] Last potentially related work creation: [ 102.856213][ T4998] kasan_save_stack+0x35/0x60 [ 102.860893][ T4998] kasan_record_aux_stack+0xb8/0x100 [ 102.866184][ T4998] insert_work+0x54/0x3d0 [ 102.870519][ T4998] __queue_work+0x9c5/0xd50 [ 102.875022][ T4998] queue_work_on+0x11d/0x1d0 [ 102.879618][ T4998] netdevice_event+0x803/0x900 [ 102.884389][ T4998] raw_notifier_call_chain+0xcb/0x160 [ 102.889770][ T4998] register_netdevice+0x1275/0x16b0 [ 102.894976][ T4998] veth_newlink+0x668/0xda0 [ 102.899483][ T4998] rtnl_newlink+0x114c/0x17d0 [ 102.904165][ T4998] rtnetlink_rcv_msg+0x9b9/0xe60 [ 102.909111][ T4998] netlink_rcv_skb+0x1e0/0x430 [ 102.913883][ T4998] netlink_unicast+0x774/0x920 [ 102.918656][ T4998] netlink_sendmsg+0x8ab/0xbc0 [ 102.923432][ T4998] __sys_sendto+0x423/0x580 [ 102.927951][ T4998] __x64_sys_sendto+0xda/0xf0 [ 102.932640][ T4998] do_syscall_64+0x4c/0xa0 [ 102.937065][ T4998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.942962][ T4998] [ 102.945284][ T4998] The buggy address belongs to the object at ffff88801f07f700 [ 102.945284][ T4998] which belongs to the cache kmalloc-192 of size 192 [ 102.959335][ T4998] The buggy address is located 8 bytes inside of [ 102.959335][ T4998] 192-byte region [ffff88801f07f700, ffff88801f07f7c0) [ 102.972447][ T4998] The buggy address belongs to the page: [ 102.978102][ T4998] page:ffffea00007c1fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f07f [ 102.988260][ T4998] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 102.995823][ T4998] raw: 00fff00000000200 0000000000000000 0000000100000001 ffff888016841a00 [ 103.004413][ T4998] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 103.012996][ T4998] page dumped because: kasan: bad access detected [ 103.019426][ T4998] page_owner tracks the page as allocated [ 103.025146][ T4998] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 470, ts 6661304937, free_ts 6660347831 [ 103.040782][ T4998] get_page_from_freelist+0x1b77/0x1c60 [ 103.046348][ T4998] __alloc_pages+0x1e1/0x470 [ 103.050946][ T4998] new_slab+0xb6/0x4b0 [ 103.055022][ T4998] ___slab_alloc+0x81e/0xdf0 [ 103.059612][ T4998] __kmalloc_node+0x200/0x3b0 [ 103.064290][ T4998] sbitmap_init_node+0x2bc/0x6c0 [ 103.069242][ T4998] blk_mq_realloc_hw_ctxs+0x7f7/0x1760 [ 103.074708][ T4998] blk_mq_init_allocated_queue+0x408/0x1790 [ 103.080610][ T4998] blk_mq_init_queue+0x68/0xd0 [ 103.085392][ T4998] scsi_alloc_sdev+0x6f2/0xab0 [ 103.090166][ T4998] scsi_probe_and_add_lun+0x1bf/0x3d00 [ 103.095642][ T4998] __scsi_scan_target+0x1d8/0x1010 [ 103.100814][ T4998] scsi_scan_host_selected+0x36e/0x690 [ 103.106289][ T4998] do_scan_async+0x11a/0x700 [ 103.110883][ T4998] async_run_entry_fn+0x9f/0x3e0 [ 103.115833][ T4998] process_one_work+0x863/0x1000 [ 103.120780][ T4998] page last free stack trace: [ 103.125443][ T4998] free_unref_page_prepare+0x637/0x6c0 [ 103.130907][ T4998] free_unref_page+0x94/0x280 [ 103.135590][ T4998] __mmdrop+0xaa/0x3e0 [ 103.139669][ T4998] free_bprm+0x141/0x300 [ 103.143911][ T4998] kernel_execve+0x380/0x900 [ 103.148498][ T4998] call_usermodehelper_exec_async+0x207/0x350 [ 103.154568][ T4998] ret_from_fork+0x1f/0x30 [ 103.158992][ T4998] [ 103.161312][ T4998] Memory state around the buggy address: [ 103.166942][ T4998] ffff88801f07f600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.175008][ T4998] ffff88801f07f680: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 103.183075][ T4998] >ffff88801f07f700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 103.191134][ T4998] ^ [ 103.195465][ T4998] ffff88801f07f780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 103.203529][ T4998] ffff88801f07f800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.211765][ T4998] ================================================================== [ 103.219826][ T4998] Disabling lock debugging due to kernel taint [ 103.243145][ T4998] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.250379][ T4998] CPU: 1 PID: 4998 Comm: syz.2.183 Tainted: G B syzkaller #0 [ 103.259145][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.269310][ T4998] Call Trace: [ 103.272594][ T4998] [ 103.275522][ T4998] dump_stack_lvl+0x168/0x230 [ 103.280291][ T4998] ? show_regs_print_info+0x20/0x20 [ 103.285500][ T4998] ? load_image+0x3b0/0x3b0 [ 103.290013][ T4998] panic+0x2c9/0x7f0 [ 103.293912][ T4998] ? bpf_jit_dump+0xd0/0xd0 [ 103.298423][ T4998] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 103.304318][ T4998] ? _raw_spin_unlock+0x40/0x40 [ 103.309168][ T4998] ? print_memory_metadata+0x314/0x400 [ 103.314630][ T4998] ? ax25_release+0x5ca/0x870 [ 103.319399][ T4998] check_panic_on_warn+0x80/0xa0 [ 103.324337][ T4998] ? ax25_release+0x5ca/0x870 [ 103.329016][ T4998] end_report+0x6d/0xf0 [ 103.333172][ T4998] kasan_report+0x102/0x130 [ 103.337677][ T4998] ? ax25_release+0x5ca/0x870 [ 103.342352][ T4998] ax25_release+0x5ca/0x870 [ 103.346866][ T4998] sock_close+0xd5/0x240 [ 103.351115][ T4998] ? sock_mmap+0x90/0x90 [ 103.355356][ T4998] __fput+0x234/0x930 [ 103.359339][ T4998] task_work_run+0x125/0x1a0 [ 103.363931][ T4998] exit_to_user_mode_loop+0x10f/0x130 [ 103.369483][ T4998] exit_to_user_mode_prepare+0xee/0x180 [ 103.375035][ T4998] syscall_exit_to_user_mode+0x16/0x40 [ 103.380496][ T4998] do_syscall_64+0x58/0xa0 [ 103.384968][ T4998] ? clear_bhb_loop+0x30/0x80 [ 103.389663][ T4998] ? clear_bhb_loop+0x30/0x80 [ 103.394339][ T4998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.400232][ T4998] RIP: 0033:0x7f33b0a26fc9 [ 103.404654][ T4998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.424266][ T4998] RSP: 002b:00007ffeca0ab298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 103.432695][ T4998] RAX: 0000000000000000 RBX: 00007f33b0c7fda0 RCX: 00007f33b0a26fc9 [ 103.440673][ T4998] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 103.448654][ T4998] RBP: 00007f33b0c7fda0 R08: 0000000000000194 R09: 00000017ca0ab58f [ 103.456635][ T4998] R10: 00007f33b0c7fcb0 R11: 0000000000000246 R12: 0000000000019023 [ 103.464605][ T4998] R13: 00007f33b0c7e180 R14: ffffffffffffffff R15: 00007ffeca0ab3b0 [ 103.472604][ T4998] [ 103.475874][ T4998] Kernel Offset: disabled [ 103.480207][ T4998] Rebooting in 86400 seconds..