last executing test programs: 8.77443773s ago: executing program 4 (id=788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c04"], 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioprio_get$pid(0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x7) 7.906025807s ago: executing program 4 (id=795): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x3) r1 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000800)="ad76ce7c11976b59315952ccedbd23e49ef8ffbb1f39fb00ae77600c1ec0e988944663f06c8890d6851933c633b9114eb2a191aeb95fb76967c9a8e0d99b13cadcae771ecca7c6304ebf05e36b20b01d828c02c22e80a2f18855d3e02107c6e0044f", &(0x7f00000011c0)=""/4096, &(0x7f0000000900)="45c2452d6f8ba31386dca30325f207b4013096e87a322284f6f24d5714589b4045a4e7f3eb55afb1091f723dd12aa2bd730f50fddb8bacb3776c501ac0ebd79aff35c18eb979d3af4ae3bd11d132a9065512ef0c53abf5458cd4f012fc468100f0e642c3493f8cc76d0fb28659b4642c04837f3648a142e3dd383864082ec45461e9b570e87e8d12816c833cd2a577cac8e8", &(0x7f0000000000)="e1c35e4b3f88d58fd69cfd0f0b2e0e256a423e17c48620ed899a4cb67888ea7479adcf0143f003d0ee6c532ea8400deaf733ffb50f", 0x40, 0xffffffffffffffff, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0x63, 0xb811, 0x0, 0x0}], 0x1}) 6.673165121s ago: executing program 4 (id=801): r0 = io_uring_setup(0x758a, &(0x7f0000000140)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0xfffffffffffffe09}, 0x8}], 0x4000173, 0x40012102, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.541742703s ago: executing program 4 (id=805): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x0, 0xe9, 0x17, 0xf3}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=&(0x7f00000003c0), &(0x7f0000000540)=0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 5.190727189s ago: executing program 1 (id=808): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905", @ANYBLOB="03e7"], 0x0) 4.906585954s ago: executing program 2 (id=810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20040845, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bic\x00', 0x4) shutdown(r0, 0x1) 4.553881511s ago: executing program 1 (id=811): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f0000000380)) 4.523622722s ago: executing program 2 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c04"], 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) ioprio_get$pid(0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, 0xffffffffffffffff, 0x0) 4.410436804s ago: executing program 1 (id=813): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, 0x0, 0x14) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) 3.934060373s ago: executing program 3 (id=815): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x3, 0x2, 0xa, 0xcc9, 0xf, 0x7, 0x5, 0x0, 0xefb, 0x1, 0x6, 0x1, 0x6, 0x101, 0x1000, 0x1a449, 0x800, 0x40000007, 0x9d, 0xcaa7, 0x4, 0x20001e58, 0x4, 0xe69, 0x3c, 0x8, 0x5, 0x0, 0xfffffff8]}) 3.878569944s ago: executing program 3 (id=816): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.216522597s ago: executing program 1 (id=818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.188408068s ago: executing program 2 (id=819): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r3, 0x5) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) 2.962665902s ago: executing program 4 (id=820): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 2.959800723s ago: executing program 3 (id=821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x1001d, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa00}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xfffffffffffffecc}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.943959663s ago: executing program 0 (id=822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20040845, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bic\x00', 0x4) shutdown(r0, 0x1) 2.861107684s ago: executing program 4 (id=823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)='\x00\x00', 0x2, r5) 2.802478045s ago: executing program 0 (id=824): r0 = memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3) fsetxattr$security_ima(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r6, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000240), 0x0, 0x8040, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000300)=0x1) write$binfmt_elf64(r6, 0x0, 0x78) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @mcast2, 0x3}, 0x1c) 2.203205327s ago: executing program 3 (id=825): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) r3 = dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) r4 = dup(r3) read$FUSE(r4, 0x0, 0x0) 1.827308854s ago: executing program 1 (id=826): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.825948914s ago: executing program 2 (id=827): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) r4 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r7, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) 1.778658815s ago: executing program 1 (id=828): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getattr(r3, &(0x7f0000000140)={0x38}, 0x38, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0xc0045103, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={0x0}}, 0x20045) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.358952983s ago: executing program 3 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c04"], 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) ioprio_get$pid(0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, 0xffffffffffffffff, 0x0) 1.299593694s ago: executing program 0 (id=830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000240)="a4") 1.240739446s ago: executing program 0 (id=831): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 941.925961ms ago: executing program 0 (id=832): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 920.243001ms ago: executing program 2 (id=833): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 830.315103ms ago: executing program 0 (id=834): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x3, 0x7, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x40, 0x10, 0xe13, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x2, &(0x7f00000001c0)='\x00\x00'}, {0x2, 0x201, 0x0, 0x0}], 0x2}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x248, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) socket$inet(0x2, 0x2, 0x6a113fc2) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000005200010000000000000000000a000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000500)={0x19, 0x7, {0x8, @usage, 0x0, 0x5636f2a4, 0x3, 0x4, 0x8, 0x40, 0x42a, @usage=0x5, 0x0, 0x3, [0xfffffffffffffff7, 0x5, 0xc034, 0x5, 0x7, 0xfffffffffffffff7]}, {0x0, @usage=0x4, 0x0, 0x8, 0xe55, 0x4, 0x100000001, 0x5, 0x70, @usage=0x7fffffff, 0x401, 0x8, [0xfffffffffffffffb, 0x1, 0x8, 0x1, 0x6]}, {0xa3, @usage=0x5, 0x0, 0x2, 0x1ff, 0x3, 0x3fe, 0x5b5800000000000, 0x40, @usage=0x7fffffff, 0x78a, 0x6, [0x0, 0x8, 0x4, 0x8, 0x5]}, {0x80, 0xb69, 0x800}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000900)={r11, "2c0826ec9c02d7cb84652e7fbb104278"}) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close_range(r8, 0xffffffffffffffff, 0x0) 829.967773ms ago: executing program 2 (id=835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0c04"], 0xf) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioprio_get$pid(0x1, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r7, 0x0) 0s ago: executing program 3 (id=836): r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(r0, 0x0, 0x0, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r9, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) shutdown(r1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x4, 0x6, 0x0, 0x8000, 0xfffffffd, 0xf, 0x10001, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r11}}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 30.343896][ T4311] cgroup: Unknown subsys name 'net' [ 30.563190][ T4311] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.856308][ T4311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.533391][ T4325] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.537372][ T4328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.540011][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.541680][ T4333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.542991][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.543156][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.544330][ T4333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.546246][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.546575][ T4333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.547606][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.548860][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.550172][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.551249][ T4337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.552643][ T4336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.553573][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.554771][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.555981][ T4337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.557334][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.557791][ T4337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.558632][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.559643][ T4337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.563053][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.563205][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.564941][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.574186][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.574305][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.579621][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.593396][ T4337] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.595199][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.597715][ T4337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.709282][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 31.721662][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 31.746129][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 31.750027][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 31.777815][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.779018][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.781041][ T4322] device bridge_slave_0 entered promiscuous mode [ 31.785295][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.786466][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.788008][ T4322] device bridge_slave_1 entered promiscuous mode [ 31.789677][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.791270][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.792712][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.803613][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.804753][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.806343][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.819715][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.822745][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.824282][ T4326] device bridge_slave_0 entered promiscuous mode [ 31.832104][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.833674][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.834929][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.836435][ T4326] device bridge_slave_1 entered promiscuous mode [ 31.841056][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.842118][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.843609][ T4321] device bridge_slave_0 entered promiscuous mode [ 31.845186][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 31.847139][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.848317][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.849725][ T4321] device bridge_slave_1 entered promiscuous mode [ 31.853937][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.861237][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.863503][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.875072][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.877593][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.883976][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.895388][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.899185][ T4322] team0: Port device team_slave_0 added [ 31.904315][ T4326] team0: Port device team_slave_0 added [ 31.906138][ T4326] team0: Port device team_slave_1 added [ 31.911757][ T4322] team0: Port device team_slave_1 added [ 31.913747][ T4329] team0: Port device team_slave_0 added [ 31.916086][ T4329] team0: Port device team_slave_1 added [ 31.929222][ T4321] team0: Port device team_slave_0 added [ 31.932819][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.933854][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.937535][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.946160][ T4321] team0: Port device team_slave_1 added [ 31.949819][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.951028][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.954836][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.956895][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.958058][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.962570][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.964578][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.965670][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.967136][ T4332] device bridge_slave_0 entered promiscuous mode [ 31.968900][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.969948][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.974292][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.979976][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.981551][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.985756][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.987865][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.988968][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.990372][ T4332] device bridge_slave_1 entered promiscuous mode [ 31.992361][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.993477][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.997417][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.002251][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.003311][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.007166][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.009358][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.010413][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.014463][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.032466][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.044616][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.081496][ T4326] device hsr_slave_0 entered promiscuous mode [ 32.120783][ T4326] device hsr_slave_1 entered promiscuous mode [ 32.231542][ T4329] device hsr_slave_0 entered promiscuous mode [ 32.270673][ T4329] device hsr_slave_1 entered promiscuous mode [ 32.320555][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.321890][ T4329] Cannot create hsr debugfs directory [ 32.381621][ T4322] device hsr_slave_0 entered promiscuous mode [ 32.420713][ T4322] device hsr_slave_1 entered promiscuous mode [ 32.470556][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.471800][ T4322] Cannot create hsr debugfs directory [ 32.501377][ T4321] device hsr_slave_0 entered promiscuous mode [ 32.550782][ T4321] device hsr_slave_1 entered promiscuous mode [ 32.590563][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.591870][ T4321] Cannot create hsr debugfs directory [ 32.594621][ T4332] team0: Port device team_slave_0 added [ 32.602468][ T4332] team0: Port device team_slave_1 added [ 32.627837][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.629001][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.634004][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.640141][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.641579][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.645745][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.711429][ T4332] device hsr_slave_0 entered promiscuous mode [ 32.750782][ T4332] device hsr_slave_1 entered promiscuous mode [ 32.790581][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.791781][ T4332] Cannot create hsr debugfs directory [ 32.869572][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.913079][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.952209][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.001725][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.054992][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.103394][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.151720][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.213374][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.257135][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.295750][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.336620][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.366431][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.426878][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.441896][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.494574][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.536663][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.585582][ T4332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.611143][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 33.611534][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 33.612177][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 33.613188][ T4335] Bluetooth: hci0: command 0x0409 tx timeout [ 33.614132][ T4337] Bluetooth: hci1: command 0x0409 tx timeout [ 33.623659][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.630022][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.632377][ T4332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.673515][ T4332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.714533][ T4332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.760784][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.763430][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.765153][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.776153][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.778019][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.779542][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.780695][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.782946][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.784640][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.788009][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.793306][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.797331][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.799026][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.802169][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.803350][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.806111][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.813571][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.815276][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.816836][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.818214][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.824632][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.826671][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.828277][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.829753][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.831781][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.832849][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.834449][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.835952][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.843578][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.847065][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.848655][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.850089][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.851250][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.856304][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.858260][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.862362][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.868593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.870095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.872499][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.873667][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.875045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.876969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.878552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.885127][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.886653][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.888111][ T1667] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.889249][ T1667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.891809][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.897374][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.898930][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.904369][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.915360][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.917116][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.919275][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.924007][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.925672][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.927232][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.928775][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.930185][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.932048][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.933504][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.945835][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.951928][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.959663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.961726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.963247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.967852][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.973002][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.974717][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.977355][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.984375][ T4322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.986001][ T4322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.989907][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.991614][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.993479][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.994987][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.997156][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.001930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.003734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.006515][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.008202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.009540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.017244][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.018728][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.025425][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.028346][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.029460][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.031058][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.032785][ T1667] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.033955][ T1667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.035634][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.049478][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.051598][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.053032][ T1667] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.054183][ T1667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.055548][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.057154][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.058635][ T1667] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.059774][ T1667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.062866][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.065238][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.067108][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.068638][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.069794][ T1574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.077677][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.086454][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.087735][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.088980][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.091301][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.092941][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.095155][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.096832][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.098727][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.100241][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.103795][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.105473][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.111160][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.112819][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.115126][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.116578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.119706][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.122680][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.128554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.130127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.133625][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.134689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.144131][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.146433][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.148513][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.154615][ T4321] device veth0_vlan entered promiscuous mode [ 34.157671][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.159114][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.162484][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.164445][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.166107][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.167957][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.169396][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.176327][ T4329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.177995][ T4329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.179964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.182043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.183602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.185000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.186537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.188008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.195648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.200022][ T4321] device veth1_vlan entered promiscuous mode [ 34.207274][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.208792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.210302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.213847][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.215291][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.218538][ T4326] device veth0_vlan entered promiscuous mode [ 34.230947][ T4326] device veth1_vlan entered promiscuous mode [ 34.232328][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.233906][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.235376][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.236848][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.245577][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.246906][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.253318][ T4321] device veth0_macvtap entered promiscuous mode [ 34.257993][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.259633][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.264050][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.268853][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.272126][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.273697][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.275140][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.276661][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.278003][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.281880][ T4322] device veth0_vlan entered promiscuous mode [ 34.287197][ T4321] device veth1_macvtap entered promiscuous mode [ 34.293674][ T4322] device veth1_vlan entered promiscuous mode [ 34.300456][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.302043][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.303539][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.305075][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.310345][ T4326] device veth0_macvtap entered promiscuous mode [ 34.318522][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.321572][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.323141][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.324681][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.326182][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.330023][ T4326] device veth1_macvtap entered promiscuous mode [ 34.338024][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.346096][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.348521][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.349934][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.352759][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.354409][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.355681][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.356917][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.358574][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.365894][ T4322] device veth0_macvtap entered promiscuous mode [ 34.369408][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.371608][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.372970][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.374413][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.377933][ T4322] device veth1_macvtap entered promiscuous mode [ 34.382022][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.383847][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.386381][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.391172][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.392753][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.394107][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.395592][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.398458][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.400116][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.404835][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.407162][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.408623][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.410070][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.412696][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.416719][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.418260][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.433743][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.435440][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.436883][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.438549][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.441352][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.444207][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.445924][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.447497][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.449054][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.460068][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.462633][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.467277][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.468969][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.470934][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.472507][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.475137][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.484462][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.486030][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.487645][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.489177][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.491679][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.493200][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.496127][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.497606][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.499042][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.500449][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.507363][ T4332] device veth0_vlan entered promiscuous mode [ 34.526817][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.528124][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.528866][ T4329] device veth0_vlan entered promiscuous mode [ 34.535368][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.536904][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.538430][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.549070][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.551135][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.553393][ T4332] device veth1_vlan entered promiscuous mode [ 34.557408][ T4329] device veth1_vlan entered promiscuous mode [ 34.562466][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.563801][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.565457][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.567037][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.568424][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.570095][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.605436][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.606465][ T275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.606762][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.608076][ T275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.609730][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.612545][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.613994][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.620097][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.624155][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.633986][ T4329] device veth0_macvtap entered promiscuous mode [ 34.636004][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.637630][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.639584][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.643410][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.647506][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.649391][ T275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.652222][ T4332] device veth0_macvtap entered promiscuous mode [ 34.655556][ T4332] device veth1_macvtap entered promiscuous mode [ 34.659597][ T4329] device veth1_macvtap entered promiscuous mode [ 34.662968][ T1660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.664254][ T1660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.665886][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.667460][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.669186][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.678546][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.682114][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.683803][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.685238][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.686888][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.688508][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.690227][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.693907][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.696557][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.698168][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.702068][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.703653][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.721017][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.722734][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.724970][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.726658][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.728936][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.733760][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.735452][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.736945][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.738502][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.741308][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.742959][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.744535][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.746297][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.748772][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.755200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.756873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.758454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.760014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.767962][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.769431][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.773678][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.775160][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.780290][ T4434] loop0: detected capacity change from 0 to 1024 [ 34.787289][ T4434] ======================================================= [ 34.787289][ T4434] WARNING: The mand mount option has been deprecated and [ 34.787289][ T4434] and is ignored by this kernel. Remove the mand [ 34.787289][ T4434] option from the mount to silence this warning. [ 34.787289][ T4434] ======================================================= [ 34.801075][ T4434] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1: Invalid block bitmap block 0 in block_group 0 [ 34.803452][ T4434] EXT4-fs (loop0): Remounting filesystem read-only [ 34.804476][ T4434] Quota error (device loop0): write_blk: dquota write failed [ 34.805600][ T4434] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 34.807109][ T4434] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.1: Failed to acquire dquot type 0 [ 34.809160][ T4434] EXT4-fs (loop0): Remounting filesystem read-only [ 34.814217][ T4434] EXT4-fs error (device loop0): ext4_free_blocks:6205: comm syz.0.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.816772][ T4434] EXT4-fs (loop0): Remounting filesystem read-only [ 34.818134][ T4434] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1: Invalid inode bitmap blk 0 in block_group 0 [ 34.820393][ T4434] EXT4-fs (loop0): Remounting filesystem read-only [ 34.822229][ T4434] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 34.823685][ T4434] EXT4-fs (loop0): Remounting filesystem read-only [ 34.824772][ T4434] EXT4-fs (loop0): 1 orphan inode deleted [ 34.825704][ T4434] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.838474][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.840252][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.842346][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.843852][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.845310][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.846938][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.848406][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.849853][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.852830][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.859033][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.860917][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.871825][ T1660] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 34.873268][ T1660] EXT4-fs error (device loop0): ext4_release_dquot:6852: comm kworker/u4:5: Failed to release dquot type 0 [ 34.875414][ T1660] EXT4-fs (loop0): Remounting filesystem read-only [ 34.885195][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.886534][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.887806][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.889219][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.903829][ T4439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.905319][ T4439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.922133][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 34.933358][ T1660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.934899][ T1660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.938391][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.939762][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.947713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.949249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.959363][ T1660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.963011][ T1660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.965025][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.966341][ T1667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.967587][ T1667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.978386][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.040204][ T4443] netlink: 'syz.2.3': attribute type 6 has an invalid length. [ 35.046414][ T4445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.047877][ T4445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.076532][ T4447] loop2: detected capacity change from 0 to 256 [ 35.078360][ T4447] FAT-fs (loop2): Unrecognized mount option "utf8=0”errors=continue" or missing value [ 35.250689][ T4369] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.319770][ T4459] loop2: detected capacity change from 0 to 32768 [ 35.333752][ T4459] (syz.2.12,4459,1):ocfs2_check_set_options:1219 ERROR: ACL support requested but extended attributes feature is not enabled [ 35.336886][ T4459] (syz.2.12,4459,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 35.386075][ T4464] loop2: detected capacity change from 0 to 64 [ 35.406350][ T4464] hfs: request for non-existent node 1280 in B*Tree [ 35.407594][ T4464] hfs: request for non-existent node 1280 in B*Tree [ 35.417642][ T1667] hfs: request for non-existent node 1280 in B*Tree [ 35.418797][ T1667] hfs: request for non-existent node 1280 in B*Tree [ 35.440696][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 35.450810][ T4369] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.454534][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 35.460341][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 35.462892][ T4369] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 35.464428][ T4369] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.477202][ T4369] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 35.478734][ T4369] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 35.480199][ T4369] usb 1-1: Manufacturer: syz [ 35.487153][ T4468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.488635][ T4468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.490429][ T4369] usb 1-1: config 0 descriptor?? [ 35.502961][ T4471] loop3: detected capacity change from 0 to 64 [ 35.506322][ T4471] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 35.508078][ T4471] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 35.590699][ T4473] loop4: detected capacity change from 0 to 2048 [ 35.596680][ T4473] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 35.616004][ T4473] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 35.617724][ T4473] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 35.620915][ T4473] UDF-fs: Scanning with blocksize 512 failed [ 35.627792][ T4473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 35.690681][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 35.700802][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 35.700833][ T4325] Bluetooth: hci2: command 0x041b tx timeout [ 35.701779][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 35.702771][ T4325] Bluetooth: hci4: command 0x041b tx timeout [ 35.714055][ T4369] Registered IR keymap rc-hauppauge [ 35.783121][ T4369] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 35.784800][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 35.821007][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 35.852279][ T4369] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 35.855346][ T4369] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input2 [ 35.859145][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 35.898185][ T4500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.953487][ T4499] loop4: detected capacity change from 0 to 32768 [ 35.956506][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 35.984437][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 36.021018][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 36.060711][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 36.100063][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 36.118031][ T4507] loop3: detected capacity change from 0 to 32768 [ 36.129979][ T4513] tipc: Started in network mode [ 36.131334][ T4513] tipc: Node identity 4ebc1ffef31e, cluster identity 4711 [ 36.133097][ T4513] tipc: Enabled bearer , priority 0 [ 36.134796][ T4513] device syzkaller0 entered promiscuous mode [ 36.140880][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 36.144880][ T4507] XFS (loop3): Mounting V5 Filesystem [ 36.164098][ T4513] tipc: Resetting bearer [ 36.165853][ T4507] XFS (loop3): Ending clean mount [ 36.173838][ T4512] tipc: Resetting bearer [ 36.184823][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 36.192223][ T4322] XFS (loop3): Unmounting Filesystem [ 36.210813][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 36.241337][ T4512] tipc: Disabling bearer [ 36.250770][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 36.281304][ T4369] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 36.282818][ T4369] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 36.286692][ T4369] usb 1-1: USB disconnect, device number 2 [ 36.464108][ T4525] binder: 4523:4525 got transaction to invalid handle, 1 [ 36.465728][ T4525] binder: 4525:4523 cannot find target node [ 36.466683][ T4525] binder: 4523:4525 transaction async to 0:0 failed 1/29201/-22, size 0-0 line 3054 [ 36.471223][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.492719][ T27] audit: type=1326 audit(36.480:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.35" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75c068 code=0x0 [ 36.542526][ T27] audit: type=1326 audit(36.530:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4526 comm="syz.3.35" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=436 compat=0 ip=0xffffae75c068 code=0x0 [ 36.881483][ T4531] loop1: detected capacity change from 0 to 32768 [ 37.043105][ T4537] loop0: detected capacity change from 0 to 40427 [ 37.046009][ T4537] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 37.131067][ T4545] sp0: Synchronizing with TNC [ 37.177126][ T4547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 37.367172][ T4560] loop3: detected capacity change from 0 to 32768 [ 37.384266][ T4560] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 37.406126][ T4322] ocfs2: Unmounting device (7,3) on (node local) [ 37.493472][ T4570] loop3: detected capacity change from 0 to 4096 [ 37.499347][ T4570] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 37.511735][ T4570] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 37.550708][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.577914][ T4572] loop3: detected capacity change from 0 to 256 [ 37.652394][ T4576] loop3: detected capacity change from 0 to 4096 [ 37.654344][ T4576] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 37.771015][ T4335] Bluetooth: hci3: command 0x040f tx timeout [ 37.772114][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 37.773078][ T4335] Bluetooth: hci0: command 0x040f tx timeout [ 37.774135][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 37.781362][ T4335] Bluetooth: hci4: command 0x040f tx timeout [ 37.798563][ T4578] loop3: detected capacity change from 0 to 40427 [ 37.805175][ T4578] F2FS-fs (loop3): invalid crc value [ 37.807709][ T4578] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.815982][ T4578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.830803][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 37.834959][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 37.837200][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 37.839958][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 37.843390][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 37.850147][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 37.854620][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 37.859275][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.866783][ T22] usb 1-1: config 0 descriptor?? [ 37.869718][ T4561] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 37.957115][ T4590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.958572][ T4590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.052549][ T4597] loop1: detected capacity change from 0 to 256 [ 38.078088][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.079369][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.080448][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.081726][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.082948][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.084128][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.085295][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.086374][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.087510][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.088618][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.089781][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.094245][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.095388][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.096522][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.097624][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.098716][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.099738][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.100915][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.102060][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.103222][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.104556][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.105654][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.106741][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.107805][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.108950][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.110021][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.113528][ T4335] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 38.139144][ T4601] loop1: detected capacity change from 0 to 4096 [ 38.144516][ T4601] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 38.309638][ T4337] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 38.310549][ T4403] usb 1-1: USB disconnect, device number 3 [ 38.525930][ T4612] loop3: detected capacity change from 0 to 64 [ 38.571674][ T4614] tipc: Started in network mode [ 38.572535][ T4614] tipc: Node identity eace7eceefbf, cluster identity 4711 [ 38.573814][ T4614] tipc: Enabled bearer , priority 0 [ 38.575450][ T4614] device syzkaller0 entered promiscuous mode [ 38.663094][ T4613] tipc: Resetting bearer [ 38.751750][ T4613] tipc: Disabling bearer [ 38.893961][ T4623] loop0: detected capacity change from 0 to 256 [ 38.944104][ T4625] loop0: detected capacity change from 0 to 4096 [ 38.945954][ T4625] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 38.961132][ T4625] overlayfs: failed to resolve './file1': -2 [ 39.081579][ T4630] loop0: detected capacity change from 0 to 4096 [ 39.087848][ T4630] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 39.094335][ T4632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.095870][ T4632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.105644][ T4630] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 39.167493][ T4636] 9pnet_fd: Insufficient options for proto=fd [ 39.351939][ T4644] loop0: detected capacity change from 0 to 256 [ 39.385113][ T4646] loop0: detected capacity change from 0 to 256 [ 39.387721][ T4648] netlink: 44 bytes leftover after parsing attributes in process `syz.2.89'. [ 39.556952][ T4652] loop0: detected capacity change from 0 to 40427 [ 39.563438][ T4652] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 39.764703][ T4671] loop0: detected capacity change from 0 to 2048 [ 39.772431][ T4671] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.794939][ T4671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.815103][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 39.839454][ T4678] loop1: detected capacity change from 0 to 4096 [ 39.851400][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 39.852456][ T4337] Bluetooth: hci1: command 0x0419 tx timeout [ 39.853454][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 39.854473][ T4337] Bluetooth: hci2: command 0x0419 tx timeout [ 39.856054][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 40.906056][ T4698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.907536][ T4698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.077440][ T4701] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 41.080409][ T4701] CUSE: unknown device info "l" [ 41.081329][ T4701] CUSE: unknown device info "" [ 41.082068][ T4701] CUSE: unknown device info "" [ 41.082916][ T4701] CUSE: unknown device info "" [ 41.083782][ T4701] CUSE: unknown device info "Øá@" [ 41.084588][ T4701] CUSE: unknown device info "" [ 41.085482][ T4701] CUSE: unknown device info "ûÿÿÿ" [ 41.086373][ T4701] CUSE: unknown device info "" [ 41.087202][ T4701] CUSE: unknown device info "" [ 41.088043][ T4701] CUSE: zero length info key specified [ 41.310171][ T4321] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 41.312833][ T4321] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 41.410007][ T4713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'. [ 41.501833][ T4722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.116'. [ 41.514536][ T4724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.517095][ T4724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.916523][ T27] audit: type=1326 audit(41.900:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 41.919967][ T27] audit: type=1326 audit(41.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 41.930629][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 41.942326][ T27] audit: type=1326 audit(41.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 41.948758][ T27] audit: type=1326 audit(41.900:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 41.967841][ T27] audit: type=1326 audit(41.900:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 41.974280][ T27] audit: type=1326 audit(41.900:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 41.975824][ T4732] 9pnet_fd: Insufficient options for proto=fd [ 41.985404][ T27] audit: type=1326 audit(41.900:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 41.992997][ T27] audit: type=1326 audit(41.900:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 42.001459][ T27] audit: type=1326 audit(41.900:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 42.011463][ T27] audit: type=1326 audit(41.900:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4728 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75c068 code=0x7ffc0000 [ 42.020390][ T4738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.027871][ T4738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.061031][ T4743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.062656][ T4743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.377944][ T4758] netlink: 44 bytes leftover after parsing attributes in process `syz.0.132'. [ 42.722390][ T4763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.724942][ T4763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.088938][ T4767] 9pnet_fd: Insufficient options for proto=fd [ 43.134369][ T4769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.136683][ T4769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.164698][ T4771] 9pnet_fd: Insufficient options for proto=fd [ 43.205931][ T4775] syz.3.139 uses obsolete (PF_INET,SOCK_PACKET) [ 43.462957][ T4787] loop4: detected capacity change from 0 to 4096 [ 43.465057][ T4787] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 43.473093][ T4787] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 43.510555][ T4404] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 43.516816][ T4791] 9pnet_fd: Insufficient options for proto=fd [ 43.559862][ T4795] 9pnet_fd: Insufficient options for proto=fd [ 43.670371][ T4805] loop2: detected capacity change from 0 to 64 [ 43.687218][ T4805] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 43.690702][ T4805] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2 [ 43.701959][ T4404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.703649][ T4404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.705257][ T4404] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 43.706697][ T4404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.710821][ T4808] MPTCP: kernel_bind error, err=-98 [ 43.715544][ T4404] usb 1-1: config 0 descriptor?? [ 44.186002][ T4819] loop2: detected capacity change from 0 to 4096 [ 44.293910][ T4404] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 44.445825][ T4819] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 44.447868][ T4404] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -38 [ 44.457994][ T4819] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 44.527877][ T4825] 9pnet_fd: Insufficient options for proto=fd [ 44.731547][ T4830] 9pnet_fd: Insufficient options for proto=fd [ 44.771393][ T1966] usb 1-1: USB disconnect, device number 4 [ 44.834549][ T4837] MPTCP: kernel_bind error, err=-98 [ 45.175358][ T4840] loop3: detected capacity change from 0 to 64 [ 45.178113][ T4840] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 45.182296][ T4840] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 46.127128][ T4861] 9pnet_fd: Insufficient options for proto=fd [ 46.155725][ T4863] netlink: 108 bytes leftover after parsing attributes in process `syz.4.172'. [ 46.159669][ T4865] 9pnet_fd: Insufficient options for proto=fd [ 46.237109][ T4404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.239721][ T4404] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.357667][ T4875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.367014][ T4875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.374548][ T4878] MPTCP: kernel_bind error, err=-98 [ 46.424823][ T4880] loop0: detected capacity change from 0 to 64 [ 46.430949][ T4880] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 46.433382][ T4880] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 46.542477][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.551188][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.759540][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.761122][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.771431][ T4883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.781784][ T4883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.812634][ T4894] 9pnet_fd: Insufficient options for proto=fd [ 46.905286][ T4898] 8021q: VLANs not supported on hsr0 [ 47.154114][ T4911] 9pnet_fd: Insufficient options for proto=fd [ 47.434746][ T4927] loop4: detected capacity change from 0 to 64 [ 47.454093][ T4927] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 47.468636][ T4927] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4 [ 47.637752][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.650418][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.679489][ T4940] 9pnet_fd: Insufficient options for proto=fd [ 48.554937][ T4992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.559896][ T4992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.699493][ T5003] loop0: detected capacity change from 0 to 64 [ 48.717103][ T5003] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 48.724884][ T5003] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 48.999259][ T5022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.206'. [ 49.102889][ T5025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.105380][ T5025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.359352][ T5034] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 49.360954][ T5034] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 49.362435][ T5034] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 49.788281][ T5044] loop0: detected capacity change from 0 to 64 [ 49.799978][ T5044] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 49.807577][ T5044] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 49.924863][ T5054] netlink: set zone limit has 8 unknown bytes [ 50.394364][ T5062] 9pnet_fd: Insufficient options for proto=fd [ 50.433355][ T5066] Zero length message leads to an empty skb [ 50.434376][ T5067] loop3: detected capacity change from 0 to 8 [ 50.486217][ T5073] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 50.510039][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.523152][ T5073] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 50.542711][ T5077] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 50.545135][ T5077] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 50.546706][ T5077] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 50.575875][ T4404] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 50.577507][ T4404] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.617401][ T5082] loop3: detected capacity change from 0 to 64 [ 50.628044][ T5082] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 50.634678][ T5082] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 50.754364][ T5090] 9pnet_fd: Insufficient options for proto=fd [ 50.807347][ T5097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.810748][ T5097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.812937][ T5098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.814401][ T5098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.853402][ T5103] loop4: detected capacity change from 0 to 8 [ 50.868313][ T5103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 50.943881][ T5109] netlink: 'syz.4.239': attribute type 10 has an invalid length. [ 50.954810][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.956731][ T5109] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 51.419558][ T5143] loop0: detected capacity change from 0 to 64 [ 51.429672][ T5143] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 51.436989][ T5143] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 51.529632][ T5149] sp0: Synchronizing with TNC [ 51.615641][ T5157] loop2: detected capacity change from 0 to 64 [ 51.683997][ T5160] netlink: 'syz.2.248': attribute type 5 has an invalid length. [ 51.854918][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.145501][ T22] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 52.148031][ T22] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.183507][ T5171] loop1: detected capacity change from 0 to 4096 [ 52.185159][ T5173] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 52.198145][ T5171] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 52.238818][ T5171] overlayfs: failed to resolve './file1': -2 [ 52.251997][ T7] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 52.253510][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.255211][ T7] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.256778][ T7] usb 1-1: config 1 has no interface number 1 [ 52.257769][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 52.269162][ T7] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.278868][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.285107][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.286532][ T7] usb 1-1: Product: syz [ 52.287238][ T7] usb 1-1: Manufacturer: syz [ 52.290216][ T7] usb 1-1: SerialNumber: syz [ 52.354932][ T5183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.356900][ T5183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.359334][ T5182] loop2: detected capacity change from 0 to 64 [ 52.365870][ T5182] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 52.371006][ T5182] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2 [ 52.817208][ T7] usb 1-1: MIDIStreaming interface descriptor not found [ 52.825671][ T7] usb 1-1: USB disconnect, device number 5 [ 52.929604][ T5196] loop4: detected capacity change from 0 to 64 [ 53.313267][ T5192] udevd[5192]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 53.385131][ T5207] netlink: 'syz.1.263': attribute type 10 has an invalid length. [ 53.388712][ T5212] loop0: detected capacity change from 0 to 4096 [ 53.392986][ T5212] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 53.491920][ T5213] binder: 5204:5213 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 53.494052][ T5213] binder: 5213 RLIMIT_NICE not set [ 53.597046][ T5214] binder: 5204:5214 tried to acquire reference to desc 0, got 1 instead [ 53.641052][ T5214] binder: release 5204:5214 transaction 6 out, still active [ 53.642478][ T5214] binder: undelivered TRANSACTION_COMPLETE [ 53.765277][ T5217] loop3: detected capacity change from 0 to 64 [ 53.775843][ T5217] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 53.784655][ T5217] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 53.809777][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.834339][ T22] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.926126][ T5226] 9pnet_fd: Insufficient options for proto=fd [ 54.187468][ T4404] binder: send failed reply for transaction 6, target dead [ 54.258346][ T5230] loop4: detected capacity change from 0 to 64 [ 54.355744][ T5241] netlink: 'syz.4.275': attribute type 10 has an invalid length. [ 54.386212][ T5250] loop4: detected capacity change from 0 to 64 [ 54.393947][ T5250] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 54.398808][ T5250] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4 [ 54.425098][ T5249] loop3: detected capacity change from 0 to 4096 [ 54.430318][ T5249] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 54.598763][ T5263] 9pnet_fd: Insufficient options for proto=fd [ 54.930858][ T5268] loop4: detected capacity change from 0 to 64 [ 55.007270][ T4856] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 55.010582][ T4856] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.383640][ T5278] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 55.421234][ T5278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.430329][ T5278] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 55.474754][ T5280] loop4: detected capacity change from 0 to 4096 [ 55.484357][ T5280] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 55.505287][ T5284] loop3: detected capacity change from 0 to 64 [ 55.512905][ T5284] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 55.523467][ T5284] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 55.651620][ T5289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.657516][ T5289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.442581][ T5288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 57.041682][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.044144][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.218413][ T4856] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.220936][ T4856] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.276384][ T5315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.278555][ T5315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.337308][ T5317] netlink: 'syz.1.303': attribute type 10 has an invalid length. [ 57.377439][ T5322] loop1: detected capacity change from 0 to 64 [ 57.382326][ T5322] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 57.386234][ T5322] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 57.456479][ T4313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 58.175545][ T5306] Set syz1 is full, maxelem 65536 reached [ 59.068813][ T4404] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 59.070434][ T4404] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.071661][ T5356] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 59.119865][ T5363] loop3: detected capacity change from 0 to 64 [ 59.129892][ T5363] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 59.138113][ T5363] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3 [ 59.163357][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.168526][ T5356] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 59.367915][ T5379] netlink: 'syz.1.320': attribute type 1 has an invalid length. [ 60.342019][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.345807][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.534026][ T5396] capability: warning: `syz.2.326' uses 32-bit capabilities (legacy support in use) [ 60.827994][ T5402] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 60.895079][ T5404] loop4: detected capacity change from 0 to 64 [ 60.910509][ T5404] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 60.911951][ T5404] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4 [ 61.912978][ T5434] netlink: 'syz.4.341': attribute type 10 has an invalid length. [ 61.931251][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 62.110576][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 62.413049][ T22] usb 1-1: config 0 has an invalid interface number: 232 but max is 0 [ 62.954053][ T22] usb 1-1: config 0 has no interface number 0 [ 62.956011][ T22] usb 1-1: config 0 interface 232 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 62.957828][ T22] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=a2.87 [ 62.959185][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.963594][ T22] usb 1-1: config 0 descriptor?? [ 63.077683][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.086887][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.092222][ T5468] 9pnet_fd: Insufficient options for proto=fd [ 63.169541][ T22] usb 1-1: USB disconnect, device number 6 [ 63.682802][ T5480] process 'syz.2.357' launched './file1' with NULL argv: empty string added [ 64.457191][ T5503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.358'. [ 64.481928][ T5505] netlink: 'syz.3.364': attribute type 2 has an invalid length. [ 64.483138][ T5505] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 64.484305][ T5505] netlink: 'syz.3.364': attribute type 2 has an invalid length. [ 64.493731][ T24] cfg80211: failed to load regulatory.db [ 64.496709][ T5500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.498769][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499925][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.523187][ T5507] loop1: detected capacity change from 0 to 64 [ 64.526785][ T5507] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 64.528883][ T5507] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 65.126631][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 65.641150][ T5532] lo speed is unknown, defaulting to 1000 [ 65.642358][ T5532] lo speed is unknown, defaulting to 1000 [ 65.646740][ T5532] lo speed is unknown, defaulting to 1000 [ 65.653058][ T5532] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 65.660560][ T5532] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 65.713219][ T5532] lo speed is unknown, defaulting to 1000 [ 65.716005][ T5532] lo speed is unknown, defaulting to 1000 [ 65.718217][ T5532] lo speed is unknown, defaulting to 1000 [ 65.720224][ T5532] lo speed is unknown, defaulting to 1000 [ 65.722272][ T5532] lo speed is unknown, defaulting to 1000 [ 65.966330][ T5537] 9pnet_fd: Insufficient options for proto=fd [ 66.007217][ T5541] loop0: detected capacity change from 0 to 64 [ 66.019479][ T5541] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 66.022514][ T5541] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop0 [ 67.134712][ T5572] 9pnet_fd: Insufficient options for proto=fd [ 67.286904][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 67.290089][ T27] audit: type=1326 audit(67.250:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 67.323609][ T27] audit: type=1326 audit(67.250:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 67.375437][ T5575] lo speed is unknown, defaulting to 1000 [ 67.550902][ T27] audit: type=1326 audit(67.260:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5562 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 67.584024][ T5578] tipc: Started in network mode [ 67.584990][ T5578] tipc: Node identity 7eeb2877ac9b, cluster identity 4711 [ 67.586142][ T5578] tipc: Enabled bearer , priority 0 [ 67.587705][ T5578] device syzkaller0 entered promiscuous mode [ 67.641627][ T5582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.645445][ T5582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.962212][ T5590] misc userio: No port type given on /dev/userio [ 68.167921][ T5577] tipc: Resetting bearer [ 68.274632][ T5577] tipc: Disabling bearer [ 68.751471][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.752949][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.784644][ T5610] 9pnet_fd: Insufficient options for proto=fd [ 70.150449][ T5644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.153046][ T5644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.694481][ T5652] loop4: detected capacity change from 0 to 8 [ 71.006894][ T5658] netlink: 'syz.4.412': attribute type 12 has an invalid length. [ 71.589364][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.591809][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.435315][ T5699] loop1: detected capacity change from 0 to 64 [ 72.442487][ T5699] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 72.445731][ T5699] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1 [ 73.719639][ T5718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.722594][ T5718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.778392][ T3900] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 74.780941][ T3900] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.810081][ T5747] fido_id[5747]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.006514][ T5756] netlink: 'syz.0.445': attribute type 2 has an invalid length. [ 75.217669][ T5759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.219423][ T5759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.489892][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.495383][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.502145][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.504563][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.710763][ T27] audit: type=1326 audit(75.700:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 75.766076][ T5765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.777161][ T27] audit: type=1326 audit(75.750:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9975a594 code=0x7ffc0000 [ 75.790964][ T27] audit: type=1326 audit(75.750:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9975bb90 code=0x7ffc0000 [ 75.794541][ T27] audit: type=1326 audit(75.750:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9975bb90 code=0x7ffc0000 [ 75.810754][ T5765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.813601][ T27] audit: type=1326 audit(75.800:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 75.820102][ T27] audit: type=1326 audit(75.800:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 75.826140][ T27] audit: type=1326 audit(75.800:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 75.829542][ T27] audit: type=1326 audit(75.810:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=439 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 75.834687][ T27] audit: type=1326 audit(75.810:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 75.845880][ T27] audit: type=1326 audit(75.810:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5762 comm="syz.2.449" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9975c068 code=0x7ffc0000 [ 75.918297][ T3900] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.922096][ T3900] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.965580][ T5779] fido_id[5779]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.396296][ T5788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.399096][ T5788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.586870][ T5790] tipc: Enabled bearer , priority 0 [ 76.588540][ T5790] device syzkaller0 entered promiscuous mode [ 76.626542][ T5790] tipc: Resetting bearer [ 76.629091][ T5789] tipc: Resetting bearer [ 76.731133][ T5789] tipc: Disabling bearer [ 79.119794][ T4376] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 79.123246][ T4376] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.168788][ T5818] netlink: 'syz.4.466': attribute type 10 has an invalid length. [ 79.244033][ T5828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 79.249313][ T5822] fido_id[5822]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.457287][ T5837] tipc: Enabled bearer , priority 10 [ 79.657759][ T5839] 9pnet_fd: Insufficient options for proto=fd [ 80.471644][ T4376] tipc: Node number set to 91324110 [ 80.569083][ T5813] Set syz1 is full, maxelem 65536 reached [ 80.763604][ T5870] 9pnet_fd: Insufficient options for proto=fd [ 80.787217][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 80.801700][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'. [ 80.805221][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 81.360643][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.364018][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.470556][ T1966] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 82.366205][ T1966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.368020][ T1966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.369503][ T1966] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 82.380221][ T1966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.383456][ T1966] usb 1-1: config 0 descriptor?? [ 82.406797][ T5898] loop4: detected capacity change from 0 to 4096 [ 82.412699][ T5898] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 82.425576][ T5898] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 82.463881][ T5900] 9pnet_fd: Insufficient options for proto=fd [ 82.689614][ T5916] device syzkaller1 entered promiscuous mode [ 82.819401][ T1966] bigben 0003:146B:0902.000C: unexpected rdesc, please submit for review [ 82.821265][ T1966] bigben 0003:146B:0902.000C: unbalanced collection at end of report description [ 82.822905][ T1966] bigben 0003:146B:0902.000C: parse failed [ 82.823762][ T1966] bigben: probe of 0003:146B:0902.000C failed with error -22 [ 82.829818][ T5923] overlayfs: failed to resolve '/ÚO'“a8': -2 [ 83.222797][ T1966] usb 1-1: USB disconnect, device number 7 [ 83.234298][ T5926] loop1: detected capacity change from 0 to 4096 [ 83.239696][ T5926] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 83.258933][ T5926] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 83.315922][ T5929] loop1: detected capacity change from 0 to 8 [ 84.029844][ T5943] capability: warning: `syz.2.513' uses deprecated v2 capabilities in a way that may be insecure [ 84.165821][ T5953] loop4: detected capacity change from 0 to 64 [ 84.167515][ T5953] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 84.170023][ T5953] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4 [ 84.202771][ T5955] 9pnet_fd: Insufficient options for proto=fd [ 84.254438][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.256048][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.318540][ T27] audit: type=1326 audit(84.300:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.322374][ T27] audit: type=1326 audit(84.300:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.328046][ T27] audit: type=1326 audit(84.300:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.328129][ T4368] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 84.336368][ T27] audit: type=1326 audit(84.300:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.337977][ T4368] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.343998][ T27] audit: type=1326 audit(84.300:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.350141][ T27] audit: type=1326 audit(84.300:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.370729][ T27] audit: type=1326 audit(84.300:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.381298][ T27] audit: type=1326 audit(84.310:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.395396][ T27] audit: type=1326 audit(84.310:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.407765][ T27] audit: type=1326 audit(84.310:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.1.522" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa4b5c068 code=0x7ffc0000 [ 84.825125][ T5976] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 84.826427][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 85.351195][ T5986] 9pnet_fd: Insufficient options for proto=fd [ 85.547402][ T5995] loop3: detected capacity change from 0 to 1 [ 85.550542][ T4469] Dev loop3: unable to read RDB block 1 [ 85.551686][ T4469] loop3: AHDI p1 [ 85.552314][ T4469] loop3: partition table partially beyond EOD, truncated [ 85.558667][ T5995] Dev loop3: unable to read RDB block 1 [ 85.559636][ T5995] loop3: AHDI p1 [ 85.560176][ T5995] loop3: partition table partially beyond EOD, truncated [ 86.818756][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.820306][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.828306][ T6021] 9pnet_fd: Insufficient options for proto=fd [ 87.647940][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.650254][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.849211][ T6052] 9pnet_fd: Insufficient options for proto=fd [ 87.935989][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.938161][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.510585][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 88.690610][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 88.693894][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.696085][ T24] usb 1-1: config 4 interface 0 has no altsetting 0 [ 88.699772][ T24] usb 1-1: string descriptor 0 read error: -22 [ 88.701189][ T24] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 88.703729][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.716271][ T24] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 88.724339][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.726371][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 88.727926][ T24] usb 1-1: media controller created [ 88.738391][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.938753][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 88.955195][ T24] usb 1-1: USB disconnect, device number 8 [ 89.344631][ T6085] 9pnet_fd: Insufficient options for proto=fd [ 89.355711][ T4369] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 89.357701][ T4369] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.846857][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.848689][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.939763][ T6119] netlink: 76 bytes leftover after parsing attributes in process `syz.3.573'. [ 90.978293][ T4368] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 90.979830][ T4368] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.994138][ T6126] 9pnet_fd: Insufficient options for proto=fd [ 91.101567][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.104175][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.649974][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 92.009266][ T6155] loop4: detected capacity change from 0 to 8 [ 92.058623][ T6158] 9pnet_fd: Insufficient options for proto=fd [ 92.088678][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 92.096924][ T24] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.269919][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.271494][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.856298][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.858061][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.941272][ T6198] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 95.506564][ T4368] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 95.521002][ T4368] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.244561][ T6239] device veth1_macvtap left promiscuous mode [ 96.245561][ T6239] device macsec0 entered promiscuous mode [ 96.253605][ T6240] device veth1_macvtap entered promiscuous mode [ 96.254786][ T6240] device macsec0 left promiscuous mode [ 96.419206][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.422805][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.426136][ T6250] tipc: Started in network mode [ 96.426946][ T6250] tipc: Node identity 7f000001, cluster identity 4711 [ 96.428258][ T6250] tipc: New replicast peer: 0.0.0.0 [ 96.429340][ T6250] tipc: Enabled bearer , priority 10 [ 96.877814][ T6266] loop1: detected capacity change from 0 to 4096 [ 96.888186][ T6266] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 96.897585][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.899071][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.922924][ T6266] overlayfs: missing 'workdir' [ 97.411198][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.412704][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.484733][ T4376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 97.488122][ T4376] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.540609][ T4376] tipc: Node number set to 2130706433 [ 99.008161][ T6298] device veth1_macvtap left promiscuous mode [ 99.009209][ T6298] device macsec0 entered promiscuous mode [ 99.066401][ T6298] device veth1_macvtap entered promiscuous mode [ 99.067996][ T6298] device macsec0 left promiscuous mode [ 99.329178][ T6302] loop4: detected capacity change from 0 to 4096 [ 99.337047][ T6302] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 99.375542][ T6302] overlayfs: missing 'workdir' [ 99.613975][ T6315] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 99.618150][ T6315] ubi31: attaching mtd0 [ 99.622664][ T6315] ubi31: scanning is finished [ 99.623632][ T6315] ubi31: empty MTD device detected [ 99.824519][ T6315] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 99.825872][ T6315] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 99.827078][ T6315] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 99.828209][ T6315] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 99.829409][ T6315] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 99.830668][ T6315] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 99.831979][ T6315] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1569609240 [ 99.833726][ T6315] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 99.837181][ T6316] ubi31: background thread "ubi_bgt31d" started, PID 6316 [ 100.416876][ T4690] tipc: Subscription rejected, illegal request [ 100.483734][ T6339] infiniband syz1: set active [ 100.550729][ T6339] infiniband syz1: added syz_tun [ 100.583334][ T6339] RDS/IB: syz1: added [ 100.588738][ T6339] smc: adding ib device syz1 with port count 1 [ 101.037566][ T4522] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 101.043497][ T4522] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.061507][ T6339] smc: ib device syz1 port 1 has pnetid [ 101.773525][ T6364] device veth1_macvtap left promiscuous mode [ 101.774598][ T6364] device macsec0 entered promiscuous mode [ 101.814648][ T6369] netlink: 'syz.4.651': attribute type 21 has an invalid length. [ 101.828614][ T6369] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.281858][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.292720][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.495987][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.497664][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.500173][ T6399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.502381][ T6399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.505338][ T6399] netlink: 'syz.2.662': attribute type 2 has an invalid length. [ 102.506856][ T6399] netlink: 244 bytes leftover after parsing attributes in process `syz.2.662'. [ 103.019474][ T6412] loop3: detected capacity change from 0 to 8 [ 103.042729][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.668'. [ 103.272649][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.276395][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.384870][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.676'. [ 103.682546][ T4368] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 104.042652][ T4368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.044397][ T4368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.046398][ T4368] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 104.047785][ T4368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.051418][ T4368] usb 1-1: config 0 descriptor?? [ 104.113600][ T6439] loop3: detected capacity change from 0 to 8 [ 104.152015][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 104.456485][ T4368] cp2112 0003:10C4:EA90.0014: item fetching failed at offset 5/7 [ 104.458434][ T4368] cp2112 0003:10C4:EA90.0014: parse failed [ 104.459621][ T4368] cp2112: probe of 0003:10C4:EA90.0014 failed with error -22 [ 104.722556][ T6457] device veth1_macvtap entered promiscuous mode [ 104.724050][ T6457] device macsec0 left promiscuous mode [ 104.725416][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.140280][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 105.162054][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.689'. [ 105.179461][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.181203][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.239656][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.689'. [ 105.257470][ T6466] device bridge_slave_1 left promiscuous mode [ 105.262131][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.303501][ T6466] device bridge_slave_0 left promiscuous mode [ 105.304878][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.701888][ T6473] loop4: detected capacity change from 0 to 8 [ 105.707959][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 106.480776][ T24] usb 1-1: USB disconnect, device number 9 [ 106.958443][ T6505] device veth1_macvtap left promiscuous mode [ 106.959633][ T6505] device macsec0 entered promiscuous mode [ 107.352512][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.354110][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.389211][ T6512] loop2: detected capacity change from 0 to 8 [ 107.658112][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'. [ 107.833607][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 108.955400][ T6558] loop3: detected capacity change from 0 to 8 [ 108.973034][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 109.078437][ T6573] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 109.079655][ T6573] netlink: 'syz.1.728': attribute type 2 has an invalid length. [ 109.148410][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.150203][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.261596][ T6585] tipc: Enabled bearer , priority 10 [ 109.462510][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.464196][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.595691][ T6593] loop3: detected capacity change from 0 to 8 [ 109.607372][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 109.646568][ T6595] loop3: detected capacity change from 0 to 4096 [ 109.649949][ T6595] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 110.196403][ T6604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.380546][ T4376] tipc: Node number set to 3530565751 [ 110.492510][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 110.494032][ T6613] chnl_net:caif_netlink_parms(): no params data found [ 110.792707][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 112.011272][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 112.104553][ T6629] loop3: detected capacity change from 0 to 4096 [ 112.141897][ T6629] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 112.612464][ T6640] device veth1_macvtap left promiscuous mode [ 112.613424][ T6640] device macsec0 entered promiscuous mode [ 112.615862][ T6642] device veth1_macvtap entered promiscuous mode [ 112.617045][ T6642] device macsec0 left promiscuous mode [ 112.625027][ T6638] tipc: Enabled bearer , priority 10 [ 114.050324][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.072440][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.152170][ T6693] loop4: detected capacity change from 0 to 8 [ 114.211625][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.213077][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.268260][ T6709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.269774][ T6709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.404576][ T6715] device veth1_macvtap left promiscuous mode [ 114.405608][ T6715] device macsec0 entered promiscuous mode [ 114.418529][ T6715] device veth1_macvtap entered promiscuous mode [ 114.419942][ T6715] device macsec0 left promiscuous mode [ 114.430553][ T4522] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 114.662344][ T4522] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 114.663746][ T4522] usb 1-1: config 0 has no interface number 0 [ 114.664714][ T4522] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 114.666485][ T4522] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 114.668168][ T4522] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 114.669980][ T4522] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.672397][ T4522] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 114.673931][ T4522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.676690][ T4522] usb 1-1: config 0 descriptor?? [ 114.678002][ T6689] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.679268][ T6689] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.681207][ T4522] ldusb 1-1:0.55: Interrupt in endpoint not found [ 115.718111][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 115.718119][ T27] audit: type=1326 audit(115.700:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 115.724186][ T27] audit: type=1326 audit(115.710:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 115.733145][ T27] audit: type=1326 audit(115.720:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=437 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 115.741975][ T27] audit: type=1326 audit(115.720:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 115.752119][ T27] audit: type=1326 audit(115.720:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 115.761052][ T27] audit: type=1326 audit(115.720:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 115.771563][ T27] audit: type=1326 audit(115.720:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 115.782065][ T27] audit: type=1326 audit(115.720:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 115.800235][ T27] audit: type=1326 audit(115.720:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 115.813381][ T27] audit: type=1326 audit(115.720:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6727 comm="syz.4.774" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9cd5c068 code=0x7ffc0000 [ 116.169277][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 116.606935][ T6750] loop1: detected capacity change from 0 to 8 [ 116.748083][ T6755] block device autoloading is deprecated and will be removed. [ 117.248164][ T7] usb 1-1: USB disconnect, device number 10 [ 117.373569][ T6771] 8021q: VLANs not supported on gre0 [ 118.064428][ T6785] loop1: detected capacity change from 0 to 8 [ 118.167216][ T6783] mmap: syz.2.790 (6783) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.172060][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.185450][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.207144][ T6794] lo speed is unknown, defaulting to 1000 [ 118.266984][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.796'. [ 118.750572][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 118.930639][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 118.932611][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.934521][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.936062][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.937536][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.943711][ T7] usb 1-1: config 0 descriptor?? [ 118.946659][ T7] hub 1-1:0.0: USB hub found [ 118.971113][ T6807] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 119.443439][ T7] hub 1-1:0.0: 1 port detected [ 119.502208][ T6816] loop1: detected capacity change from 0 to 8 [ 119.588148][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.590968][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.881603][ T4690] hub 1-1:0.0: activate --> -90 [ 120.941625][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.943245][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.540841][ T22] usb 1-1: USB disconnect, device number 11 [ 121.545757][ T7] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 121.548551][ T7] usb 1-1-port1: attempt power cycle [ 121.632383][ T6848] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 122.063220][ T7] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 122.065954][ T7] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.911555][ T6869] device veth1_macvtap left promiscuous mode [ 122.912596][ T6869] device macsec0 entered promiscuous mode [ 122.915257][ T6870] device veth1_macvtap entered promiscuous mode [ 122.916411][ T6870] device macsec0 left promiscuous mode [ 123.934965][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 123.973842][ T24] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.532019][ T6910] tipc: Enabled bearer , priority 10 [ 125.776145][ T4522] tipc: Node number set to 3181518846 [ 126.095929][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.097280][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.502925][ T7] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 127.505816][ T7] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.726174][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.728586][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.270565][ T2063] ================================================================== [ 141.271761][ T2063] BUG: KASAN: use-after-free in handle_tx+0x3ac/0x5f8 [ 141.272733][ T2063] Read of size 1 at addr ffff0000f5ef5490 by task aoe_tx0/2063 [ 141.273875][ T2063] [ 141.274256][ T2063] CPU: 1 PID: 2063 Comm: aoe_tx0 Not tainted syzkaller #0 [ 141.275417][ T2063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 141.277054][ T2063] Call trace: [ 141.277557][ T2063] dump_backtrace+0x1c8/0x1f4 [ 141.278284][ T2063] show_stack+0x2c/0x3c [ 141.278907][ T2063] __dump_stack+0x30/0x40 [ 141.279557][ T2063] dump_stack_lvl+0xf8/0x160 [ 141.280250][ T2063] print_address_description+0x88/0x218 [ 141.281106][ T2063] print_report+0x50/0x68 [ 141.281782][ T2063] kasan_report+0xa8/0x100 [ 141.282463][ T2063] __asan_report_load1_noabort+0x2c/0x38 [ 141.283341][ T2063] handle_tx+0x3ac/0x5f8 [ 141.283981][ T2063] caif_xmit+0x108/0x150 [ 141.284636][ T2063] dev_hard_start_xmit+0x244/0x8e0 [ 141.285460][ T2063] __dev_queue_xmit+0x155c/0x309c [ 141.286245][ T2063] tx+0x9c/0x1c8 [ 141.286815][ T2063] kthread+0x160/0x330 [ 141.287447][ T2063] kthread+0x250/0x2d8 [ 141.288094][ T2063] ret_from_fork+0x10/0x20 [ 141.288779][ T2063] [ 141.289145][ T2063] Allocated by task 6537: [ 141.289792][ T2063] kasan_set_track+0x4c/0x80 [ 141.290579][ T2063] kasan_save_alloc_info+0x28/0x34 [ 141.291412][ T2063] __kasan_kmalloc+0xa0/0xb8 [ 141.292154][ T2063] kmalloc_trace+0x7c/0x94 [ 141.292879][ T2063] alloc_tty_struct+0xb8/0x654 [ 141.293645][ T2063] tty_init_dev+0x60/0x3e8 [ 141.294354][ T2063] tty_open+0x6e0/0xb54 [ 141.295077][ T2063] chrdev_open+0x26c/0x4f0 [ 141.295813][ T2063] do_dentry_open+0x730/0xfa8 [ 141.296517][ T2063] vfs_open+0x7c/0x90 [ 141.297125][ T2063] path_openat+0x1f48/0x2680 [ 141.297828][ T2063] do_filp_open+0x174/0x344 [ 141.298519][ T2063] do_sys_openat2+0x128/0x3d8 [ 141.299239][ T2063] __arm64_sys_openat+0x120/0x154 [ 141.300023][ T2063] invoke_syscall+0x98/0x2bc [ 141.300753][ T2063] el0_svc_common+0x138/0x258 [ 141.301476][ T2063] do_el0_svc+0x58/0x13c [ 141.302145][ T2063] el0_svc+0x58/0x138 [ 141.302772][ T2063] el0t_64_sync_handler+0x84/0xf0 [ 141.303563][ T2063] el0t_64_sync+0x18c/0x190 [ 141.304265][ T2063] [ 141.304626][ T2063] Freed by task 4369: [ 141.305232][ T2063] kasan_set_track+0x4c/0x80 [ 141.305930][ T2063] kasan_save_free_info+0x3c/0x60 [ 141.306698][ T2063] ____kasan_slab_free+0x148/0x1b0 [ 141.307476][ T2063] __kasan_slab_free+0x18/0x28 [ 141.308200][ T2063] slab_free_freelist_hook+0x16c/0x1ec [ 141.309038][ T2063] __kmem_cache_free+0xc0/0x224 [ 141.309766][ T2063] kfree+0xd0/0x1ac [ 141.310341][ T2063] release_one_tty+0x21c/0x238 [ 141.311093][ T2063] process_one_work+0x7f4/0x13a8 [ 141.311905][ T2063] worker_thread+0x8c8/0xfbc [ 141.312704][ T2063] kthread+0x250/0x2d8 [ 141.313445][ T2063] ret_from_fork+0x10/0x20 [ 141.314259][ T2063] [ 141.314675][ T2063] Last potentially related work creation: [ 141.315597][ T2063] kasan_save_stack+0x40/0x70 [ 141.316336][ T2063] __kasan_record_aux_stack+0xc0/0xdc [ 141.317164][ T2063] kasan_record_aux_stack_noalloc+0x14/0x20 [ 141.318156][ T2063] insert_work+0x64/0x37c [ 141.318912][ T2063] __queue_work+0xcbc/0x123c [ 141.319727][ T2063] queue_work_on+0xc0/0x16c [ 141.320553][ T2063] tty_kref_put+0x144/0x1b8 [ 141.321303][ T2063] release_tty+0x3e8/0x4a4 [ 141.321988][ T2063] tty_release_struct+0xb4/0xd4 [ 141.322661][ T2063] tty_release+0xa0c/0x1208 [ 141.323390][ T2063] __fput+0x1bc/0x7c0 [ 141.324044][ T2063] ____fput+0x20/0x30 [ 141.324756][ T2063] task_work_run+0x1ec/0x270 [ 141.325471][ T2063] do_exit+0x54c/0x19a8 [ 141.326087][ T2063] do_group_exit+0x194/0x22c [ 141.326892][ T2063] get_signal+0x11d0/0x1310 [ 141.327649][ T2063] do_notify_resume+0x340/0x2b0c [ 141.328372][ T2063] el0_svc+0x98/0x138 [ 141.328937][ T2063] el0t_64_sync_handler+0x84/0xf0 [ 141.329667][ T2063] el0t_64_sync+0x18c/0x190 [ 141.330320][ T2063] [ 141.330701][ T2063] Second to last potentially related work creation: [ 141.331713][ T2063] kasan_save_stack+0x40/0x70 [ 141.332393][ T2063] __kasan_record_aux_stack+0xc0/0xdc [ 141.333152][ T2063] kasan_record_aux_stack_noalloc+0x14/0x20 [ 141.334039][ T2063] kvfree_call_rcu+0xb4/0x6f0 [ 141.334759][ T2063] drop_sysctl_table+0x274/0x39c [ 141.335511][ T2063] unregister_sysctl_table+0x90/0x130 [ 141.336297][ T2063] unregister_net_sysctl_table+0x20/0x30 [ 141.337127][ T2063] addrconf_exit_net+0x12c/0x28c [ 141.337859][ T2063] cleanup_net+0x5c4/0xa74 [ 141.338516][ T2063] process_one_work+0x7f4/0x13a8 [ 141.339233][ T2063] worker_thread+0x8c8/0xfbc [ 141.339903][ T2063] kthread+0x250/0x2d8 [ 141.340497][ T2063] ret_from_fork+0x10/0x20 [ 141.341182][ T2063] [ 141.341527][ T2063] The buggy address belongs to the object at ffff0000f5ef5000 [ 141.341527][ T2063] which belongs to the cache kmalloc-cg-2k of size 2048 [ 141.343620][ T2063] The buggy address is located 1168 bytes inside of [ 141.343620][ T2063] 2048-byte region [ffff0000f5ef5000, ffff0000f5ef5800) [ 141.345543][ T2063] [ 141.345908][ T2063] The buggy address belongs to the physical page: [ 141.346938][ T2063] page:00000000ea7aef48 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x135ef0 [ 141.348510][ T2063] head:00000000ea7aef48 order:3 compound_mapcount:0 compound_pincount:0 [ 141.349801][ T2063] memcg:ffff0000f4513001 [ 141.350510][ T2063] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 141.351822][ T2063] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0003380 [ 141.353112][ T2063] raw: 0000000000000000 0000000000080008 00000001ffffffff ffff0000f4513001 [ 141.354329][ T2063] page dumped because: kasan: bad access detected [ 141.355219][ T2063] [ 141.355552][ T2063] Memory state around the buggy address: [ 141.356456][ T2063] ffff0000f5ef5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.357723][ T2063] ffff0000f5ef5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.358905][ T2063] >ffff0000f5ef5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.360121][ T2063] ^ [ 141.360828][ T2063] ffff0000f5ef5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.362042][ T2063] ffff0000f5ef5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.363208][ T2063] ================================================================== [ 141.364389][ T2063] Disabling lock debugging due to kernel taint [ 141.399646][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.402228][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.403427][ T4337] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.404814][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.406083][ T4337] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 141.407264][ T4337] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.416470][ T4325] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.417721][ T4325] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.418931][ T4325] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.420368][ T4325] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.423201][ T4325] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 141.424421][ T4325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 143.450519][ T4325] Bluetooth: hci2: command 0x0409 tx timeout [ 145.530503][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 147.610494][ T4325] Bluetooth: hci2: command 0x040f tx timeout [ 148.120473][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [aoe_tx0:2063] [ 148.121764][ C1] Modules linked in: [ 148.122384][ C1] irq event stamp: 42526850 [ 148.123135][ C1] hardirqs last enabled at (42526850): [] exit_to_kernel_mode+0xcc/0xfc [ 148.124770][ C1] hardirqs last disabled at (42526849): [] el1_interrupt+0x24/0x54 [ 148.126329][ C1] softirqs last enabled at (1766): [] local_bh_enable+0x10/0x34 [ 148.127826][ C1] softirqs last disabled at (1770): [] local_bh_disable+0x10/0x34 [ 148.129319][ C1] CPU: 1 PID: 2063 Comm: aoe_tx0 Tainted: G B syzkaller #0 [ 148.130666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 148.132252][ C1] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 148.133433][ C1] pc : _raw_spin_unlock_irqrestore+0x58/0xac [ 148.134402][ C1] lr : _raw_spin_unlock_irqrestore+0x48/0xac [ 148.135320][ C1] sp : ffff800026a77820 [ 148.135946][ C1] x29: ffff800026a77820 x28: 1fffe0001ebdeac0 x27: dfff800000000000 [ 148.137168][ C1] x26: ffff0000f5ef5600 x25: ffff0000cdd90fd0 x24: 0000000000000020 [ 148.138376][ C1] x23: 0000000000000020 x22: 0000000000000002 x21: 0000000000000000 [ 148.139626][ C1] x20: ffff80001c662b30 x19: 0000000000000000 x18: ffff800011abbcc0 [ 148.140956][ C1] x17: 0000000000000000 x16: ffff800008042c8c x15: 0000000000000000 [ 148.142235][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 148.143507][ C1] x11: ff00800008047f18 x10: 0000000000000000 x9 : 0000000000000080 [ 148.144771][ C1] x8 : 00000000000000c0 x7 : 0000000000000001 x6 : ffff80000b35aab8 [ 148.146098][ C1] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 148.147342][ C1] x2 : ffff800026a77760 x1 : 0000000000000000 x0 : ffff800011a42fdc [ 148.148584][ C1] Call trace: [ 148.149074][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 148.149936][ C1] uart_write+0x3ac/0x7ec [ 148.150659][ C1] handle_tx+0x1ec/0x5f8 [ 148.151369][ C1] caif_xmit+0x108/0x150 [ 148.152041][ C1] dev_hard_start_xmit+0x244/0x8e0 [ 148.152877][ C1] __dev_queue_xmit+0x155c/0x309c [ 148.153623][ C1] tx+0x9c/0x1c8 [ 148.154138][ C1] kthread+0x160/0x330 [ 148.154734][ C1] kthread+0x250/0x2d8 [ 148.155348][ C1] ret_from_fork+0x10/0x20 [ 148.155999][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 148.157041][ C1] CPU: 1 PID: 2063 Comm: aoe_tx0 Tainted: G B L syzkaller #0 [ 148.158422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 148.159992][ C1] Call trace: [ 148.160503][ C1] dump_backtrace+0x1c8/0x1f4 [ 148.161248][ C1] show_stack+0x2c/0x3c [ 148.161896][ C1] __dump_stack+0x30/0x40 [ 148.162578][ C1] dump_stack_lvl+0xf8/0x160 [ 148.163319][ C1] dump_stack+0x1c/0x5c [ 148.163975][ C1] panic+0x2e0/0x79c [ 148.164585][ C1] softlockup_fn+0x0/0x120 [ 148.165273][ C1] __hrtimer_run_queues+0x420/0xc64 [ 148.166070][ C1] hrtimer_interrupt+0x2bc/0xb5c [ 148.166833][ C1] arch_timer_handler_virt+0x74/0x88 [ 148.167710][ C1] handle_percpu_devid_irq+0x174/0x34c [ 148.168579][ C1] generic_handle_domain_irq+0xe0/0x140 [ 148.169461][ C1] gic_handle_irq+0x70/0x1e4 [ 148.170191][ C1] call_on_irq_stack+0x30/0x48 [ 148.170921][ C1] do_interrupt_handler+0xd4/0x138 [ 148.171704][ C1] el1_interrupt+0x34/0x54 [ 148.172350][ C1] el1h_64_irq_handler+0x18/0x24 [ 148.173148][ C1] el1h_64_irq+0x64/0x68 [ 148.173844][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 148.174794][ C1] uart_write+0x3ac/0x7ec [ 148.175467][ C1] handle_tx+0x1ec/0x5f8 [ 148.176121][ C1] caif_xmit+0x108/0x150 [ 148.176774][ C1] dev_hard_start_xmit+0x244/0x8e0 [ 148.177524][ C1] __dev_queue_xmit+0x155c/0x309c [ 148.178351][ C1] tx+0x9c/0x1c8 [ 148.178924][ C1] kthread+0x160/0x330 [ 148.179545][ C1] kthread+0x250/0x2d8 [ 148.180167][ C1] ret_from_fork+0x10/0x20 [ 148.180824][ C1] SMP: stopping secondary CPUs [ 148.181530][ C1] Kernel Offset: disabled [ 148.182155][ C1] CPU features: 0x080000,000f0097,a65bfea7 [ 148.182990][ C1] Memory Limit: none [ 148.437763][ C1] Rebooting in 86400 seconds..