last executing test programs: 3.431346163s ago: executing program 0 (id=605): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2070) pread64(r0, 0x0, 0x0, 0x9a) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 3.401043323s ago: executing program 0 (id=607): r0 = syz_usb_connect(0x2, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601e20302000100060006092403050503060581092403060103040505"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000180)={0x40, 0x30, 0x6a, {0x6a, 0x2, "3561517e427c86c250faff7c4cf41d7d8713f0c7417d455bef566482ac2cb5cbc1f1182313c2559c5ce09a644370edf4153c9e70abee1eab9f39d00799a37a8948968b54485ed81f28f2032fbba82419eac68f6b54c78c3dd040ee7171bdca4e4ee6e4b5d3d5c92e"}}, &(0x7f0000000540)={0x0, 0x3, 0x8a, @string={0x8a, 0x3, "d468f03027a54e6bc2c1e4a8860c7e10c4e3a307a8c04b685b7d3ba5015f9c14c0dcd0e9d4d36302e069638bb94f1f78d6dca7ac7a2f7e1846852e798328ebd9c8a09eec7eade34ec26f7ef19abfb5a6713bf8fdbe9c5cd105086e4837f30194c8da83cd4f580c1885db9dc64205acade3163a6e86ce4768ba3fa67d93565a41217032495104cb2e"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0x81, "136bcc8c2666c069d6da44c6243ad7eb08413b7388886072ea29d2d673f75d96504f2a6bdccf1d6f54d23fbe5114259bee92090cd90e1e86e08837f0dda83a1840104dd82f63ce6246cb290bafc7312cba5bf1d870153d3ee025d018e495f894afd3c6083f84d2b79926d792089f1d3c930c9b070718ba4d27628213563b32846e"}, 0x0, 0x0, 0x0, 0x0}) 2.264335026s ago: executing program 2 (id=623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000}, 0xc) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x0, @private}, 'syz_tun\x00'}) 1.992501871s ago: executing program 0 (id=626): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x11}, @hci_ev_le_direct_adv_info={{}, {0x59, 0x1, @none, 0x7, @none, 0xf7}}}}, 0x14) 1.992382141s ago: executing program 2 (id=627): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x20000400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_sfeatures={0x33, 0x2, [{0xffffffff}, {0x0, 0x1}]}}) 1.965424251s ago: executing program 0 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.943349742s ago: executing program 0 (id=629): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x1843) timerfd_create(0x2, 0x80000) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0xf, "aede62497cf56c9ab5bfd7b842f6b7"}}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x34e, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000002680)={0x0, 0x2}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000002200)={0xc}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1e, 0x951, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28000000000000002900000005000000000202"], 0x28}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8000001ff, 0x1c1e, 0x80000000, 0x5, 0x5, 0x2f, 0xffffffffffffa543, 0xa5}, 0x0, &(0x7f0000000080)={0x10, 0x3, 0x3, 0x4, 0x3f, 0x7, 0x4, 0x8000}, &(0x7f0000000100)={r2, r3+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x101]}, 0x8}) 1.899880583s ago: executing program 0 (id=630): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x6, 0x212, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x2e, 0xce, 0xf8, 0xff, 0x5c6, 0x6000, 0x181a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x200, 0x1, 0xe, 0x51, 0xd5fee6fe153f02e8, 0x8, "", [{{0x9, 0x4, 0x68, 0x95, 0x6, 0x2e, 0x5d, 0xf4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x85, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x67, 0xf}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x7f, 0x9, 0x20, [@generic={0xf0, 0x30, "4698e56c012a7fef7e20fa17d6bc54c48e7da83c03032e62af42a39265910649d0e42e876e31840f283fe35d6a03aa632a14800b7a9cfbc61740d0ba7d479d379c166696e8cfe5d9865d8833e9c0e019259c90ed3777b613daf8cc25ddd36113832f75af7e1cab29778b1c20952b5c1da378cee7f8ca36f8ac8109dd960c44afd4a194fff046a4a36e8f974076e018c13971662b59f8216fc171fc9f71fb3d597dc8a0f485f9267771532cee7b71102aa80e95898f633a846a5a3e11c74d06f70361602c3b677d548c441a5a67ece3e6256088b4f2daf1986c9d4986d50782c6796b3177e0238ec408dd2a254cbb"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x1ef, 0x40, 0x0, 0x3, [@generic={0x84, 0x23, "06895164a675152de73da94e2c07da5f9a4238b044ace08b4a246a4a52d0be32c5ef2602a3acd050480f1a0cfcaef29a6aec30b92525176b1f8fa9a883b71cb5b19a94a4658678ef7f1e01bedec1d80fd9f9cc68a6d412106ce69a9b855f69b0f6c425584382b7046136571504e5d690b09b850e87dfcd9b10f6bd7d9fe383787637"}, @generic={0x3d, 0x8, "78e68b90355422e48e2d85a799db650d860aef3b8840ab1acc92612e653ac0e4928fad662aa861da6d4e0a3465921902389beeaa101eeff8e6c368"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0xc, 0xff, 0x90}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x5, 0x4, 0xa}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x9, 0x70, 0x7}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.323339514s ago: executing program 1 (id=638): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.087986679s ago: executing program 2 (id=640): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.070448109s ago: executing program 2 (id=642): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x2000000000000) socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x894c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r2, 0x0, 0x0) 956.002411ms ago: executing program 2 (id=644): r0 = syz_open_dev$video(&(0x7f0000000580), 0x200, 0x90a00) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)='workdir', 0x0, r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000000)=0x9, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e22}, 0x6e) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = gettid() ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 938.284702ms ago: executing program 1 (id=646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 934.771972ms ago: executing program 3 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000280)="6e31ad11c264", 0x6, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14) 799.960754ms ago: executing program 3 (id=648): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x7, 0x8) 799.780154ms ago: executing program 3 (id=649): socket$inet_udp(0x2, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) sync() sync() sync() sync() sync() socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e28, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0) 740.928306ms ago: executing program 1 (id=650): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 641.711237ms ago: executing program 4 (id=651): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990002000000210000000800c400010000000800c3007413000000"], 0x70}}, 0x880) 578.355829ms ago: executing program 4 (id=652): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, 0x0) 578.192479ms ago: executing program 1 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 577.687559ms ago: executing program 1 (id=654): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x2000000000000) socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x894c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r2, 0x0, 0x0) 577.396909ms ago: executing program 4 (id=655): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f00000000c0)="7927393059dab7272a842d1a8644", 0xe}, {&(0x7f0000000040)="7ee7e9a7", 0x4}], 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x12, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="937b010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="5f50db22d549068b8da2f4078f99bb1efceb221a3aa3a93322c790ce8853c891907e947d0d8fbae513d4f1cdf5b1c45346c25f8d221bd701b18d0a326a020f53e1df544bea3d2c1da334ca4d64229cd18b28c19aff3fcdffa10a90e4763cf0d586b9f359bcebf7831afe0b22a0e794"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x240000c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r4 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) unshare(0x2c020400) r5 = socket(0xa, 0x3, 0xc7) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x78, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x404840) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xeb}) r8 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a000100e83ac553", 0x1a, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r9, r8}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 527.1541ms ago: executing program 1 (id=656): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer], 0x0, 0x0, 0x0}) 526.63494ms ago: executing program 3 (id=657): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2070) pread64(r0, &(0x7f0000002100)=""/171, 0xab, 0x9a) read$FUSE(r0, 0x0, 0x0) 423.947832ms ago: executing program 3 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 380.754903ms ago: executing program 4 (id=659): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 352.908874ms ago: executing program 3 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff4, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e4}, 0x200040d0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, 0x0, 0x1, 0x7, 0x6, @multicast}, 0x14) 112.701688ms ago: executing program 2 (id=661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="6e31ad11c264", 0x6, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 63.606799ms ago: executing program 4 (id=662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000880)="08fe", 0x2}], 0x1}}], 0x1, 0x200400c0) 0s ago: executing program 4 (id=663): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000200)=r4, 0x4) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, 0x0, {0x1, 0xfff3}, {0xffff, 0xffff}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc00c055}, 0x0) kernel console output (not intermixed with test programs): lave_0 entered promiscuous mode [ 30.807613][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.808830][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.810369][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.817627][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 30.841207][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.843750][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.850582][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.851770][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.853675][ T4339] device bridge_slave_0 entered promiscuous mode [ 30.866864][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.868053][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.869455][ T4339] device bridge_slave_1 entered promiscuous mode [ 30.878736][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.879972][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.881422][ T4334] device bridge_slave_0 entered promiscuous mode [ 30.885944][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.887182][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.888674][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.896867][ T4330] team0: Port device team_slave_0 added [ 30.898680][ T4330] team0: Port device team_slave_1 added [ 30.904671][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.905941][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.907389][ T4334] device bridge_slave_1 entered promiscuous mode [ 30.908966][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.910120][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.911543][ T4327] device bridge_slave_1 entered promiscuous mode [ 30.914488][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.916180][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.917310][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.918847][ T4326] device bridge_slave_0 entered promiscuous mode [ 30.925738][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.926866][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.930951][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.938568][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.940200][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.941451][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.945398][ T4326] device bridge_slave_1 entered promiscuous mode [ 30.946967][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.948193][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.952534][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.965847][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.968591][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.973434][ T4339] team0: Port device team_slave_0 added [ 30.979508][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.981851][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.986645][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.988991][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.990957][ T4339] team0: Port device team_slave_1 added [ 31.073216][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.112264][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.171931][ T4327] team0: Port device team_slave_0 added [ 31.176159][ T4334] team0: Port device team_slave_0 added [ 31.178084][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.179299][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.183877][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.186777][ T4327] team0: Port device team_slave_1 added [ 31.190816][ T4326] team0: Port device team_slave_0 added [ 31.192894][ T4334] team0: Port device team_slave_1 added [ 31.196235][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.197317][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.201279][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.208207][ T4326] team0: Port device team_slave_1 added [ 31.220600][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.221840][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.229113][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.232245][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.233397][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.237509][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.240851][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.241969][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.246655][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.248996][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.250117][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.255077][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.259480][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.260778][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.265390][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.313179][ T4339] device hsr_slave_0 entered promiscuous mode [ 31.352210][ T4339] device hsr_slave_1 entered promiscuous mode [ 31.392121][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.393429][ T4339] Cannot create hsr debugfs directory [ 31.394662][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.395918][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.400095][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.483154][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.522363][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.562080][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.563485][ T4327] Cannot create hsr debugfs directory [ 31.603147][ T4334] device hsr_slave_0 entered promiscuous mode [ 31.642300][ T4334] device hsr_slave_1 entered promiscuous mode [ 31.682134][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.683440][ T4334] Cannot create hsr debugfs directory [ 31.743259][ T4326] device hsr_slave_0 entered promiscuous mode [ 31.782311][ T4326] device hsr_slave_1 entered promiscuous mode [ 31.822127][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.823492][ T4326] Cannot create hsr debugfs directory [ 31.903631][ T4339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.933375][ T4339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.974229][ T4339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.013316][ T4339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.076763][ T4330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.105596][ T4330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.145133][ T4330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.193305][ T4330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.254764][ T4327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.290291][ T4327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.343877][ T4327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.383275][ T4327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.440930][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.485738][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.535930][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.540074][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.573235][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.623918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.625967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.628780][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.631002][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.636396][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.652301][ T4337] Bluetooth: hci2: command 0x0409 tx timeout [ 32.652407][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 32.653391][ T4337] Bluetooth: hci0: command 0x0409 tx timeout [ 32.654379][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 32.662336][ T4342] Bluetooth: hci4: command 0x0409 tx timeout [ 32.665090][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.713244][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.755601][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.816759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.818645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.820349][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.821502][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.823285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.824810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.826621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.842843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.844473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.846004][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.847171][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.850021][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.863739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.869041][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.873104][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.883709][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.885500][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.887042][ T558] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.888090][ T558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.889535][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.891296][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.894183][ T558] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.895332][ T558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.896637][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.898414][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.900004][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.901825][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.905051][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.906446][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.916121][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.917625][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.920755][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.923854][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.928951][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.930752][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.936611][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.938377][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.946380][ T4339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.948105][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.950529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.953210][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.955221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.956785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.958234][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.959593][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.960972][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.964177][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.965823][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.967308][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.969999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.971537][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.975635][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.980984][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.986676][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.988154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.995852][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.997303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.998983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.000356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.001971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.005885][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.007154][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.008638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.015296][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.017605][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.026689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.028307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.029716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.031226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.035068][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.036250][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.037853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.040060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.041745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.046591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.048607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.050177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.051590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.057175][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.058798][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.066330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.068046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.069703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.081236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.086416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.087995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.089595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.091494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.094234][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.095346][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.096809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.100396][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.115196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.116761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.118492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.120186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.121913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.129428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.131119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.136340][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.138029][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.139747][ T558] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.140904][ T558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.142961][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.158419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.160189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.161746][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.163025][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.167768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.169939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.171572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.173922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.175451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.177709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.179350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.187894][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.190609][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.191840][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.193632][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.194931][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.196079][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.197814][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.202005][ T4334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.204515][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.210982][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.213800][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.215437][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.217442][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.219010][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.220546][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.222749][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.225574][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.234681][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.265771][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.267988][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.269775][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.271481][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.273564][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.277264][ T4327] device veth0_vlan entered promiscuous mode [ 33.280340][ T4327] device veth1_vlan entered promiscuous mode [ 33.285141][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.286829][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.288494][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.291876][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.294202][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.297592][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.299164][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.318052][ T4339] device veth0_vlan entered promiscuous mode [ 33.321500][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.324973][ T4339] device veth1_vlan entered promiscuous mode [ 33.327454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.329094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.330830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.333036][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.334406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.341643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.346417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.347971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.350081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.351523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.354876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.361613][ T4327] device veth0_macvtap entered promiscuous mode [ 33.368899][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.370583][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.373123][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.374746][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.378127][ T4339] device veth0_macvtap entered promiscuous mode [ 33.381512][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.384130][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.390095][ T4327] device veth1_macvtap entered promiscuous mode [ 33.394636][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.396240][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.397477][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.405677][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.408271][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.409494][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.411152][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.413048][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.414532][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.416112][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.417584][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.421553][ T4339] device veth1_macvtap entered promiscuous mode [ 33.429704][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.431741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.433666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.435175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.436701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.438132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.442612][ T4327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.444097][ T4327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.445422][ T4327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.446883][ T4327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.451237][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.454146][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.456414][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.457864][ T4330] device veth0_vlan entered promiscuous mode [ 33.461632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.463574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.474191][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.475857][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.477429][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.478825][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.480788][ T4326] device veth0_vlan entered promiscuous mode [ 33.485646][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.487407][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.492704][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.495314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.497053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.506981][ T4326] device veth1_vlan entered promiscuous mode [ 33.509233][ T4330] device veth1_vlan entered promiscuous mode [ 33.515627][ T4339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.517120][ T4339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.518510][ T4339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.519988][ T4339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.545065][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.546683][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.548087][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.552633][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.554245][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.555715][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.558655][ T4326] device veth0_macvtap entered promiscuous mode [ 33.574930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.576542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.578158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.587614][ T4326] device veth1_macvtap entered promiscuous mode [ 33.599159][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.600492][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.601464][ T4330] device veth0_macvtap entered promiscuous mode [ 33.610436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.612350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.614301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.615696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.617259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.619222][ T4330] device veth1_macvtap entered promiscuous mode [ 33.641507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.643240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.644651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.646197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.647644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.651370][ T4334] device veth0_vlan entered promiscuous mode [ 33.657605][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.658857][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.660483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.665067][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.666813][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.668350][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.669981][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.672275][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.673965][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.675595][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.677093][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.678670][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.680192][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.681760][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.687015][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.690709][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.690880][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.692499][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.695006][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.696642][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.699480][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.701166][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.705406][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.707059][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.708583][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.710163][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.713507][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.720526][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.726295][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.727876][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.729408][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.730928][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.732895][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.735193][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.738640][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.740385][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.743301][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.745439][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.749742][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.750709][ T4334] device veth1_vlan entered promiscuous mode [ 33.751170][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.759503][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.761081][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.763822][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.765209][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.766600][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.767991][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.789000][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.790510][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.791887][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.794059][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.823037][ T4334] device veth0_macvtap entered promiscuous mode [ 33.830203][ T4407] device syzkaller0 entered promiscuous mode [ 33.840057][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.841725][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.843945][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.845527][ T558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.849912][ T4334] device veth1_macvtap entered promiscuous mode [ 34.009029][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.010799][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.019292][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.021152][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.023119][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.024831][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.026350][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.027956][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.031020][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.043593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.045336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.054341][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.055879][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.057421][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.059002][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.060460][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.061988][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.062249][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.065295][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.074987][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.078884][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.081397][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.083745][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.085421][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.087729][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.114691][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.116061][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.117432][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.118786][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.120513][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.121675][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.126046][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.143659][ T1589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.144998][ T1589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.146351][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.188145][ T1589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.189583][ T1589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.191213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.209564][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.210859][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.221991][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.242925][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.244372][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.245672][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.667429][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.693556][ T4417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.732855][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 34.734375][ T4342] Bluetooth: hci3: command 0x041b tx timeout [ 34.734395][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 34.735474][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 34.736542][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 34.750446][ T4422] loop4: detected capacity change from 0 to 512 [ 34.774397][ T4422] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.7: corrupted xattr block 95 [ 34.778155][ T4422] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 34.781836][ T4422] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.7: bg 0: block 7: invalid block bitmap [ 34.794982][ T4422] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 34.796957][ T4422] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.7: corrupted xattr block 95 [ 34.799600][ T4422] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 34.801441][ T4422] EXT4-fs (loop4): 1 orphan inode deleted [ 34.802766][ T4422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.877604][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 35.088447][ T4438] loop3: detected capacity change from 0 to 4096 [ 35.089923][ T4438] EXT4-fs: inline encryption not supported [ 35.090962][ T4438] EXT4-fs: Ignoring removed i_version option [ 35.178092][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 35.184542][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.186339][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.431559][ T4443] device syzkaller1 entered promiscuous mode [ 35.434192][ T4438] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.436124][ T4438] EXT4-fs (loop3): Test dummy encryption mode enabled [ 35.450000][ T4438] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 35.451406][ T4438] System zones: 0-5 [ 35.478164][ T4438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.565401][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 35.717064][ T4449] loop0: detected capacity change from 0 to 4096 [ 35.718752][ T4449] EXT4-fs: inline encryption not supported [ 35.719896][ T4449] EXT4-fs: Ignoring removed i_version option [ 35.733137][ T4449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.734634][ T4449] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.736955][ T4449] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 35.738419][ T4449] System zones: 0-5 [ 35.740154][ T4449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.749372][ T4449] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 36.586161][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 36.812409][ T4342] Bluetooth: hci3: command 0x040f tx timeout [ 36.812549][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 36.813560][ T4342] Bluetooth: hci1: command 0x040f tx timeout [ 36.814567][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 36.822692][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 38.892358][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 38.893423][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 38.894478][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 38.895449][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 38.896381][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 46.616753][ T4457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 46.706364][ T4474] loop3: detected capacity change from 0 to 512 [ 46.769934][ T4474] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.3.20: corrupted xattr block 95 [ 46.773653][ T4474] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.20: bg 0: block 7: invalid block bitmap [ 46.782243][ T4474] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 46.787389][ T4474] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #11: comm syz.3.20: corrupted xattr block 95 [ 46.789708][ T4474] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 46.791364][ T4474] EXT4-fs (loop3): 1 orphan inode deleted [ 46.803472][ T4474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.847074][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 46.861709][ T4488] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 46.886055][ T4492] device syzkaller0 entered promiscuous mode [ 46.920058][ T4495] loop0: detected capacity change from 0 to 512 [ 46.950634][ T4495] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.022008][ T4500] binder: 4499:4500 tried to acquire reference to desc 0, got 1 instead [ 47.024645][ T4500] binder: 4499:4500 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.026598][ T4500] binder: 4500 RLIMIT_NICE not set [ 47.027733][ T4500] binder: release 4499:4500 transaction 12 out, still active [ 47.028918][ T4500] binder: undelivered TRANSACTION_COMPLETE [ 47.029869][ T4500] binder: 4499:4500 got reply transaction with bad transaction stack, transaction 5 has target 4499:0 [ 47.031938][ T4500] binder: 4499:4500 transaction reply to 0:0 failed 13/29201/-71, size 0-0 line 2961 [ 47.040790][ T7] binder: release 4499:4500 transaction 5 out, still active [ 47.042110][ T7] binder: undelivered TRANSACTION_COMPLETE [ 47.043033][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.044102][ T7] binder: send failed reply for transaction 12, target dead [ 47.047690][ T7] binder: send failed reply for transaction 5, target dead [ 47.099164][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 47.251423][ T4517] loop3: detected capacity change from 0 to 512 [ 47.256309][ T4517] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.3.37: corrupted xattr block 95 [ 47.263096][ T4517] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.37: bg 0: block 7: invalid block bitmap [ 47.267582][ T4517] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 47.270061][ T4517] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2918: inode #11: comm syz.3.37: corrupted xattr block 95 [ 47.275079][ T4517] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 47.277160][ T4517] EXT4-fs (loop3): 1 orphan inode deleted [ 47.278239][ T4517] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.296802][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 47.314699][ T4522] loop3: detected capacity change from 0 to 128 [ 47.318277][ T4522] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.328485][ T4522] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.330052][ T4530] tipc: Enabling of bearer rejected, failed to enable media [ 58.419033][ T4550] loop0: detected capacity change from 0 to 128 [ 58.421113][ T4550] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.439427][ T4550] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.453875][ T4557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'. [ 58.536230][ T4560] loop4: detected capacity change from 0 to 4096 [ 58.537764][ T4560] EXT4-fs: inline encryption not supported [ 58.538831][ T4560] EXT4-fs: Ignoring removed i_version option [ 58.578705][ T4563] loop1: detected capacity change from 0 to 8192 [ 58.582997][ T4563] ======================================================= [ 58.582997][ T4563] WARNING: The mand mount option has been deprecated and [ 58.582997][ T4563] and is ignored by this kernel. Remove the mand [ 58.582997][ T4563] option from the mount to silence this warning. [ 58.582997][ T4563] ======================================================= [ 58.587614][ T4560] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.597379][ T4560] EXT4-fs (loop4): Test dummy encryption mode enabled [ 58.625733][ T4568] device syzkaller1 entered promiscuous mode [ 58.627907][ T4560] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 58.643759][ T4560] System zones: 0-5 [ 58.666348][ T4560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.750508][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 59.356424][ T4592] loop3: detected capacity change from 0 to 128 [ 59.364069][ T4592] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.379192][ T4592] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.633055][ T4599] binder: 4598:4599 tried to acquire reference to desc 0, got 1 instead [ 59.635679][ T4599] binder: 4598:4599 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.637934][ T4599] binder: 4599 RLIMIT_NICE not set [ 59.639058][ T4599] binder: 4599 RLIMIT_NICE not set [ 59.640122][ T4599] binder: 4598:4599 ioctl c0306201 0 returned -14 [ 59.641236][ T4599] binder: release 4598:4599 transaction 18 in, still active [ 59.649212][ T4599] binder: send failed reply for transaction 18 to 4598:4599 [ 59.650747][ T4599] binder: 4598:4599 got reply transaction with no transaction stack [ 59.654428][ T4599] binder: 4598:4599 transaction reply to 0:0 failed 25/29201/-71, size 0-0 line 2946 [ 59.663381][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 59.666743][ T22] binder: undelivered TRANSACTION_COMPLETE [ 59.667911][ T22] binder: undelivered TRANSACTION_ERROR: 29189 [ 59.668859][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.761390][ T4610] loop1: detected capacity change from 0 to 4096 [ 59.775720][ T4610] EXT4-fs: inline encryption not supported [ 59.776781][ T4610] EXT4-fs: Ignoring removed i_version option [ 59.785287][ T4610] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.786824][ T4610] EXT4-fs (loop1): Test dummy encryption mode enabled [ 59.789125][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.790666][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.795175][ T4610] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 59.796582][ T4610] System zones: 0-5 [ 59.798245][ T4610] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.858615][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 64.493303][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494505][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.589520][ T4586] tipc: Enabling of bearer rejected, failed to enable media [ 69.612638][ T111] cfg80211: failed to load regulatory.db [ 69.613585][ T4626] loop3: detected capacity change from 0 to 128 [ 69.614997][ T4626] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.632415][ T4626] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.689079][ T39] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.731551][ T4640] binder: 4636:4640 tried to acquire reference to desc 0, got 1 instead [ 69.737032][ T4640] binder: 4636:4640 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 69.738985][ T4640] binder: 4640 RLIMIT_NICE not set [ 69.739773][ T4640] binder: 4640 RLIMIT_NICE not set [ 69.751187][ T4640] binder: release 4636:4640 transaction 30 in, still active [ 69.755991][ T4640] binder: send failed reply for transaction 30 to 4636:4640 [ 69.757855][ T4640] binder: 4636:4640 got reply transaction with no transaction stack [ 69.759312][ T4640] binder: 4636:4640 transaction reply to 0:0 failed 37/29201/-71, size 0-0 line 2946 [ 69.783837][ T111] binder: undelivered TRANSACTION_COMPLETE [ 69.784963][ T111] binder: undelivered TRANSACTION_ERROR: 29189 [ 69.785992][ T111] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.920585][ T4652] loop1: detected capacity change from 0 to 4096 [ 69.943634][ T4652] EXT4-fs: inline encryption not supported [ 69.944709][ T4652] EXT4-fs: Ignoring removed i_version option [ 69.997364][ T4652] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.998936][ T4652] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.039225][ T4652] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 70.040624][ T4652] System zones: 0-5 [ 70.045147][ T4652] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.102129][ T111] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.175224][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 70.233344][ T4661] loop1: detected capacity change from 0 to 1024 [ 70.234916][ T4661] EXT4-fs: Ignoring removed orlov option [ 70.273795][ T4661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.284229][ T111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 70.289066][ T111] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 70.290844][ T111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.292387][ T111] usb 1-1: Product: syz [ 70.293137][ T111] usb 1-1: Manufacturer: syz [ 70.293971][ T111] usb 1-1: SerialNumber: syz [ 70.350655][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 70.375273][ T4665] loop1: detected capacity change from 0 to 512 [ 70.398325][ T4665] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.1.86: corrupted xattr block 95 [ 70.400745][ T4665] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.86: bg 0: block 7: invalid block bitmap [ 70.407033][ T4665] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 70.413444][ T4665] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #11: comm syz.1.86: corrupted xattr block 95 [ 70.416088][ T4665] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 70.417783][ T4665] EXT4-fs (loop1): 1 orphan inode deleted [ 70.418675][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.490135][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 70.524851][ T4670] tipc: Enabling of bearer rejected, failed to enable media [ 70.527799][ T111] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 70.552014][ T111] usb 1-1: USB disconnect, device number 2 [ 70.579050][ T4675] loop1: detected capacity change from 0 to 128 [ 70.587250][ T4675] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.590700][ T4675] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.616235][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.638752][ T4677] binder: 4676:4677 tried to acquire reference to desc 0, got 1 instead [ 70.643009][ T4677] binder: 4676:4677 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 70.652822][ T4677] binder: 4677 RLIMIT_NICE not set [ 70.653723][ T4677] binder: 4677 RLIMIT_NICE not set [ 70.654823][ T4677] binder: release 4676:4677 transaction 42 in, still active [ 70.655970][ T4677] binder: send failed reply for transaction 42 to 4676:4677 [ 70.660920][ T4677] binder: 4676:4677 got reply transaction with no transaction stack [ 70.662916][ T4677] binder: 4676:4677 transaction reply to 0:0 failed 49/29201/-71, size 0-0 line 2946 [ 70.671541][ T22] binder: undelivered TRANSACTION_COMPLETE [ 70.711220][ T4681] loop2: detected capacity change from 0 to 8192 [ 70.725916][ T4681] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.780119][ T4632] udevd[4632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.932521][ T4698] loop1: detected capacity change from 0 to 4096 [ 70.933940][ T4698] EXT4-fs: inline encryption not supported [ 70.934937][ T4698] EXT4-fs: Ignoring removed i_version option [ 70.936566][ T4698] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.937968][ T4698] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.956850][ T4698] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 70.958310][ T4698] System zones: 0-5 [ 70.965444][ T4698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.973506][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000c220cf45: rx timeout, send abort [ 71.124572][ T4697] raw_sendmsg: syz.2.94 forgot to set AF_INET. Fix it! [ 71.218163][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 71.475288][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000c220cf45: abort rx timeout. Force session deactivation [ 71.879591][ T4721] loop0: detected capacity change from 0 to 512 [ 71.893627][ T4721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.950787][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 72.011097][ T4726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'. [ 72.023217][ T4728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.027632][ T4728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.055229][ T4730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.108'. [ 72.085639][ T4732] loop0: detected capacity change from 0 to 512 [ 72.107342][ T4732] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.0.109: corrupted xattr block 95 [ 72.109556][ T4732] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.109: bg 0: block 7: invalid block bitmap [ 72.111932][ T4732] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 72.122105][ T4732] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.109: corrupted xattr block 95 [ 72.124260][ T4732] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 72.125655][ T4732] EXT4-fs (loop0): 1 orphan inode deleted [ 72.126755][ T4732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.176140][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 72.544968][ T4752] syz.2.117 uses obsolete (PF_INET,SOCK_PACKET) [ 72.557741][ T4754] loop4: detected capacity change from 0 to 512 [ 72.561545][ T4754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.601650][ T4757] netlink: 'syz.3.119': attribute type 12 has an invalid length. [ 72.616202][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 72.671373][ T4765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 72.672477][ T4761] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.4.121: corrupted xattr block 95 [ 72.675724][ T4764] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.679985][ T4761] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.121: bg 0: block 7: invalid block bitmap [ 72.709572][ T4761] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 72.717540][ T4761] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2918: inode #11: comm syz.4.121: corrupted xattr block 95 [ 72.724968][ T4761] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 72.727589][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 72.741053][ T4761] EXT4-fs (loop4): 1 orphan inode deleted [ 72.749346][ T4761] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 72.781470][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 72.882849][ T4774] device syzkaller0 entered promiscuous mode [ 72.978430][ T4788] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.508659][ C0] vxcan1: j1939_tp_rxtimer: 0x000000003dcf9ca5: rx timeout, send abort [ 74.010140][ C0] vxcan1: j1939_tp_rxtimer: 0x000000003dcf9ca5: abort rx timeout. Force session deactivation [ 74.090006][ T4799] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.632617][ T4786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'. [ 83.638262][ T4792] netlink: 'syz.4.133': attribute type 12 has an invalid length. [ 83.640366][ T4790] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.641984][ T4790] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 83.671524][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 83.735142][ T4812] set_capacity_and_notify: 3 callbacks suppressed [ 83.735151][ T4812] loop1: detected capacity change from 0 to 512 [ 83.776408][ T4812] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.1.137: corrupted xattr block 95 [ 83.778789][ T4812] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.137: bg 0: block 7: invalid block bitmap [ 83.781380][ T4812] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 83.784567][ T4812] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2918: inode #11: comm syz.1.137: corrupted xattr block 95 [ 83.791270][ T4812] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 83.802677][ T4812] EXT4-fs (loop1): 1 orphan inode deleted [ 83.810265][ T4812] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 83.840339][ T4820] loop4: detected capacity change from 0 to 4096 [ 83.841868][ T4820] EXT4-fs: inline encryption not supported [ 83.844274][ T4820] EXT4-fs: Ignoring removed i_version option [ 83.854341][ T4820] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.856631][ T4820] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.868877][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 83.877094][ T4820] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 83.879275][ T4820] System zones: 0-5 [ 83.881122][ T4820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.945812][ T4833] device syzkaller0 entered promiscuous mode [ 84.374240][ T4842] netlink: 'syz.1.149': attribute type 12 has an invalid length. [ 84.404658][ T4844] loop1: detected capacity change from 0 to 512 [ 84.436903][ T4844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.469909][ T4847] device syzkaller0 entered promiscuous mode [ 84.473661][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 84.513816][ T4849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 84.568093][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 84.595484][ T4853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.597078][ T4853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.136164][ C0] vxcan1: j1939_tp_rxtimer: 0x0000000058871a73: rx timeout, send abort [ 85.637608][ C0] vxcan1: j1939_tp_rxtimer: 0x0000000058871a73: abort rx timeout. Force session deactivation [ 95.562291][ T4877] loop2: detected capacity change from 0 to 512 [ 95.570067][ T4877] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.2.158: corrupted xattr block 95 [ 95.573771][ T4877] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.158: bg 0: block 7: invalid block bitmap [ 95.575968][ T4877] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 95.577595][ T4877] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2918: inode #11: comm syz.2.158: corrupted xattr block 95 [ 95.579807][ T4877] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 95.581426][ T4877] EXT4-fs (loop2): 1 orphan inode deleted [ 95.601588][ T4877] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.659969][ T4886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.161'. [ 95.661639][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 95.673664][ T4890] netlink: 'syz.3.160': attribute type 12 has an invalid length. [ 95.687698][ T4889] loop0: detected capacity change from 0 to 512 [ 95.697983][ T4889] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.716149][ T4894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.164'. [ 95.721871][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 95.777792][ T4903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.779589][ T4903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.266601][ T4918] loop0: detected capacity change from 0 to 512 [ 96.270958][ T4918] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.0.173: corrupted xattr block 95 [ 96.275879][ T4918] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.173: bg 0: block 7: invalid block bitmap [ 96.278707][ T4918] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 96.280577][ T4918] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.173: corrupted xattr block 95 [ 96.283932][ T4918] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117) [ 96.285688][ T4918] EXT4-fs (loop0): 1 orphan inode deleted [ 96.286851][ T4918] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 96.308028][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 96.319710][ T4921] netlink: 'syz.1.175': attribute type 12 has an invalid length. [ 96.379663][ T4929] loop1: detected capacity change from 0 to 512 [ 96.394380][ T4929] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.415088][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 96.443762][ T4934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.450742][ T4934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.456905][ T4934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.459313][ T4934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.516583][ T4937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.519433][ T4937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.602122][ T111] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.608110][ T4332] Bluetooth: hci4: Malformed LE Event: 0x02 [ 96.782098][ T111] usb 1-1: Using ep0 maxpacket: 32 [ 96.785519][ T111] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.791658][ T111] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 96.793586][ T111] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 96.797626][ T111] usb 1-1: config 14 has no interface number 0 [ 96.798594][ T111] usb 1-1: config 14 has no interface number 1 [ 96.799620][ T111] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 96.805319][ T111] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 96.807297][ T111] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 96.809087][ T111] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.811177][ T111] usb 1-1: config 14 interface 57 has no altsetting 0 [ 96.822059][ T111] usb 1-1: config 14 interface 228 has no altsetting 0 [ 96.825093][ T111] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 96.826788][ T111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.828195][ T111] usb 1-1: Product: syz [ 96.828916][ T111] usb 1-1: Manufacturer: syz [ 96.829659][ T111] usb 1-1: SerialNumber: syz [ 96.851378][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.855695][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.013290][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000c83ad890: rx timeout, send abort [ 97.029978][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.036121][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.246773][ T111] legousbtower 1-1:14.57: interrupt endpoints not found [ 97.447811][ T111] legousbtower 1-1:14.228: interrupt endpoints not found [ 97.514745][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000c83ad890: abort rx timeout. Force session deactivation [ 97.549974][ T4955] netlink: 'syz.2.188': attribute type 12 has an invalid length. [ 97.600918][ T4959] loop2: detected capacity change from 0 to 512 [ 97.615748][ T4959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.641519][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 98.992816][ T4989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.998809][ T4989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.371812][ T24] usb 1-1: USB disconnect, device number 3 [ 99.434784][ T4994] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 99.447735][ T4994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.480545][ T4998] netlink: 'syz.4.201': attribute type 12 has an invalid length. [ 99.630053][ T5004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.632800][ T5004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.718236][ T5012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.719907][ T5012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.727599][ T5012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.729121][ T5012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.832110][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.085808][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.090083][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 100.091899][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.094349][ T24] usb 1-1: Product: syz [ 100.095182][ T24] usb 1-1: Manufacturer: syz [ 100.095895][ T24] usb 1-1: SerialNumber: syz [ 100.334791][ T24] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 100.347460][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000dfc15a12: rx timeout, send abort [ 100.353007][ T24] usb 1-1: USB disconnect, device number 4 [ 100.389963][ T5021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.397031][ T5022] device vlan2 entered promiscuous mode [ 100.399463][ T5021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.406335][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 100.417521][ T5021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.211'. [ 100.510453][ T5024] netlink: 'syz.2.213': attribute type 12 has an invalid length. [ 100.584074][ T4880] udevd[4880]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.595688][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.600441][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.663314][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 100.810990][ T5033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.812632][ T5033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.849006][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000dfc15a12: abort rx timeout. Force session deactivation [ 100.902881][ T5039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.904415][ T5039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.207811][ T5053] netlink: 'syz.0.226': attribute type 12 has an invalid length. [ 101.555695][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.566222][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.636461][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.641777][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.118557][ T5076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.120161][ T5076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.140357][ T5078] netlink: 'syz.1.237': attribute type 12 has an invalid length. [ 102.239855][ T5084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.247851][ T5084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.362102][ T4378] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.564235][ T4378] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.566446][ T4378] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.568176][ T4378] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.571425][ T4378] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 102.573329][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.574665][ T4378] usb 1-1: Product: syz [ 102.575373][ T4378] usb 1-1: Manufacturer: syz [ 102.576069][ T4378] usb 1-1: SerialNumber: syz [ 102.583323][ T4378] usb 1-1: selecting invalid altsetting 1 [ 102.584438][ T4378] usb 1-1: unit 6 not found! [ 102.655926][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000985a8e86: rx timeout, send abort [ 103.157548][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000985a8e86: abort rx timeout. Force session deactivation [ 103.204170][ T5107] netlink: 'syz.1.249': attribute type 12 has an invalid length. [ 103.205657][ T5108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.208783][ T5108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.605484][ T4378] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 103.610830][ T4378] usb 1-1: USB disconnect, device number 5 [ 103.611026][ T5124] device syzkaller0 entered promiscuous mode [ 103.822780][ T4875] udevd[4875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.935483][ T4332] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 104.067120][ T5141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.068733][ T5141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.084717][ T5141] binder: 5140:5141 ioctl 8933 200007c0 returned -22 [ 104.086004][ T5141] binder_user_error: 5 callbacks suppressed [ 104.086009][ T5141] binder: 5140:5141 tried to acquire reference to desc 0, got 1 instead [ 104.088599][ T5141] binder: 5140:5141 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 104.090646][ T5141] binder: 5141 RLIMIT_NICE not set [ 104.091461][ T5141] binder: 5141 RLIMIT_NICE not set [ 104.103383][ T4378] binder_debug: 8 callbacks suppressed [ 104.103390][ T4378] binder: release 5140:5141 transaction 66 out, still active [ 104.105464][ T4378] binder: undelivered TRANSACTION_COMPLETE [ 104.392076][ T111] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.561355][ T5145] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 104.562664][ T5145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.572129][ T111] usb 1-1: Using ep0 maxpacket: 32 [ 104.574448][ T111] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 104.575807][ T111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.579094][ T5145] vhci_hcd vhci_hcd.0: Device attached [ 104.580516][ T111] usb 1-1: config 0 descriptor?? [ 104.582878][ T5145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.586228][ T5145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.587845][ T5147] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 104.589882][ T1589] vhci_hcd: stop threads [ 104.590812][ T1589] vhci_hcd: release socket [ 104.591545][ T1589] vhci_hcd: disconnect device [ 104.616181][ T4372] binder: release 5140:5141 transaction 66 in, still active [ 104.617418][ T4372] binder: send failed reply for transaction 66, target dead [ 104.850813][ T111] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 104.854500][ T111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.860242][ T111] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 104.861414][ T111] usb 1-1: media controller created [ 104.866255][ T111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.090463][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000ef58e313: rx timeout, send abort [ 105.179297][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.180853][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.495052][ T5143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.496626][ T5143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.591870][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000ef58e313: abort rx timeout. Force session deactivation [ 105.718628][ T111] az6027: usb out operation failed. (-71) [ 105.719694][ T111] stb0899_attach: Driver disabled by Kconfig [ 105.720713][ T111] az6027: no front-end attached [ 105.720713][ T111] [ 105.726061][ T111] az6027: usb out operation failed. (-71) [ 105.727033][ T111] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 105.728727][ T111] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 105.738669][ T111] dvb-usb: schedule remote query interval to 400 msecs. [ 105.739949][ T111] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 105.751237][ T111] usb 1-1: USB disconnect, device number 6 [ 105.836774][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.838560][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.929587][ T111] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 106.562601][ T4376] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.565145][ T5193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.566902][ T5193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.762063][ T4376] usb 1-1: Using ep0 maxpacket: 32 [ 106.764439][ T4376] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 106.765642][ T4376] usb 1-1: config 0 has no interface number 0 [ 106.766725][ T4376] usb 1-1: config 0 interface 12 has no altsetting 0 [ 106.769624][ T4376] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 106.771087][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.772774][ T4376] usb 1-1: Product: syz [ 106.773488][ T4376] usb 1-1: Manufacturer: syz [ 106.774225][ T4376] usb 1-1: SerialNumber: syz [ 106.776447][ T4376] usb 1-1: config 0 descriptor?? [ 106.910660][ T5195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.913407][ T5195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.982273][ T4376] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 106.983775][ T4376] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 106.984739][ T4376] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 106.985721][ T4376] f81534: probe of 1-1:0.12 failed with error -71 [ 106.990403][ T4376] usb 1-1: USB disconnect, device number 7 [ 107.167037][ T5203] device syzkaller0 entered promiscuous mode [ 107.176511][ T5205] Zero length message leads to an empty skb [ 107.275327][ T5209] tipc: Enabling of bearer rejected, failed to enable media [ 107.486911][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000af69e33b: rx timeout, send abort [ 107.527674][ T5220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.529510][ T5220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.988430][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000af69e33b: abort rx timeout. Force session deactivation [ 108.037104][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 108.123178][ T5229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.127879][ T5229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.139541][ T5229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.147506][ T5229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.268650][ T5236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.277746][ T5236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.683179][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 108.874759][ T5258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.876694][ T5258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.044579][ T5264] loop1: detected capacity change from 0 to 512 [ 109.064647][ T5264] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.100039][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 109.243002][ T5285] netlink: 60 bytes leftover after parsing attributes in process `syz.0.317'. [ 109.426071][ T5296] loop2: detected capacity change from 0 to 512 [ 109.432910][ T5296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.452007][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 109.466456][ T5301] loop1: detected capacity change from 0 to 4096 [ 109.467948][ T5301] EXT4-fs: inline encryption not supported [ 109.468883][ T5301] EXT4-fs: Ignoring removed i_version option [ 109.470264][ T5301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.471888][ T5301] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.882007][ T5301] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 109.892166][ T5301] System zones: 0-5 [ 109.899599][ T5301] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.968311][ C0] vxcan1: j1939_tp_rxtimer: 0x0000000068016da1: rx timeout, send abort [ 110.247488][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 110.275228][ T5331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.276808][ T5332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.330'. [ 110.278274][ T5331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.468513][ T5339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.469910][ C0] vxcan1: j1939_tp_rxtimer: 0x0000000068016da1: abort rx timeout. Force session deactivation [ 110.482766][ T5339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.504017][ T5343] loop3: detected capacity change from 0 to 512 [ 110.508305][ T5341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.511772][ T5343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 110.522607][ T5341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.534995][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 111.086217][ T5357] device syzkaller1 entered promiscuous mode [ 111.154931][ T5359] loop2: detected capacity change from 0 to 128 [ 111.161526][ T5359] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 111.164029][ T5359] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.176687][ T9] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.259470][ T5366] loop2: detected capacity change from 0 to 4096 [ 111.267714][ T5366] EXT4-fs: inline encryption not supported [ 111.269667][ T5366] EXT4-fs: Ignoring removed i_version option [ 111.286706][ T5366] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 111.288976][ T5366] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.308072][ T5366] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 111.309957][ T5366] System zones: 0-5 [ 111.315046][ T5366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.336352][ T5366] fuse: Bad value for 'fd' [ 111.492455][ T4372] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 111.501752][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 111.683509][ T4372] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 111.685464][ T4372] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 111.687459][ T4372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.688580][ T4372] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 111.689986][ T4372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.693187][ T4372] usb 1-1: config 0 descriptor?? [ 111.877111][ T5384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.878765][ T5384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.050537][ T5388] loop3: detected capacity change from 0 to 128 [ 112.054116][ T5388] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.059109][ T5388] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.093241][ T9] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.103535][ T4372] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x2 [ 112.104760][ T4372] lenovo 0003:17EF:60EE.0001: unknown main item tag 0x6 [ 112.105930][ T4372] lenovo 0003:17EF:60EE.0001: ignoring exceeding usage max [ 112.117791][ T4372] lenovo 0003:17EF:60EE.0001: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 112.177237][ T5397] loop3: detected capacity change from 0 to 4096 [ 112.189873][ T5397] EXT4-fs: inline encryption not supported [ 112.191065][ T5397] EXT4-fs: Ignoring removed i_version option [ 112.218243][ T5397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.219991][ T5397] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.230282][ T5397] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 112.231689][ T5397] System zones: 0-5 [ 112.233068][ T5397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.259469][ T5397] fuse: Bad value for 'fd' [ 112.319640][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 112.529898][ T5410] binder: 5409:5410 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 112.532656][ T5410] binder: 5410 RLIMIT_NICE not set [ 112.580920][ T5411] binder: 5409:5411 BC_FREE_BUFFER u0000000020ffd000 no match [ 112.706685][ T5365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.708351][ T5365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.712881][ T4372] lenovo 0003:17EF:60EE.0001: Sensitivity setting failed: -71 [ 112.716613][ T4372] usb 1-1: USB disconnect, device number 8 [ 112.759040][ T5413] fido_id[5413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 112.897084][ C0] vxcan1: j1939_tp_rxtimer: 0x0000000093b0d126: rx timeout, send abort [ 112.944903][ T5415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.946610][ T5415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.398528][ C0] vxcan1: j1939_tp_rxtimer: 0x0000000093b0d126: abort rx timeout. Force session deactivation [ 114.301626][ T5436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.304159][ T5436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.306003][ T5434] loop3: detected capacity change from 0 to 1024 [ 114.307438][ T5434] EXT4-fs: Ignoring removed orlov option [ 114.325883][ T5434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.345150][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 114.845195][ T5455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.846973][ T5455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.319453][ T5459] binder: 5458:5459 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 115.321652][ T5459] binder: 5459 RLIMIT_NICE not set [ 115.374950][ T5461] binder: 5458:5461 BC_FREE_BUFFER u0000000020ffd000 no match [ 116.625016][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000369c6073: rx timeout, send abort [ 117.086778][ T5469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'. [ 117.126623][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000369c6073: abort rx timeout. Force session deactivation [ 117.166697][ T5469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'. [ 117.236789][ T5469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'. [ 118.089205][ T5480] netlink: 68 bytes leftover after parsing attributes in process `syz.2.378'. [ 119.641996][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 119.674831][ T5501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.677114][ T5501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.809214][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.811707][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.817985][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.819863][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.216985][ T5505] loop2: detected capacity change from 0 to 128 [ 120.218486][ T5505] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.220753][ T5505] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.253381][ T1589] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.917575][ T5537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.919067][ T5537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.935895][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 122.956713][ T5539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.397'. [ 122.989497][ T5545] loop3: detected capacity change from 0 to 128 [ 123.002575][ T5545] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.008656][ T5545] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.035334][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.479604][ T5569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.481239][ T5569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.505011][ T5571] device syzkaller0 entered promiscuous mode [ 124.293259][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.294771][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.296835][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.298304][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.933062][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934205][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.431880][ T5587] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 134.476354][ T5597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 134.659668][ T5611] loop3: detected capacity change from 0 to 4096 [ 134.886058][ T5611] EXT4-fs: inline encryption not supported [ 134.889523][ T5611] EXT4-fs: Ignoring removed i_version option [ 134.977469][ T5611] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.986693][ T5611] EXT4-fs (loop3): Test dummy encryption mode enabled [ 135.000201][ T5611] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c128, mo2=0003] [ 135.008145][ T5611] System zones: 0-5 [ 135.047869][ T5611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.169557][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 135.342545][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.418902][ T5642] device syzkaller0 entered promiscuous mode [ 135.523755][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.525442][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 135.530826][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.532835][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.537975][ T22] usb 1-1: Product: syz [ 135.538707][ T22] usb 1-1: Manufacturer: syz [ 135.539436][ T22] usb 1-1: SerialNumber: syz [ 135.758725][ T5626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.772797][ T5626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.799983][ T22] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 135.802846][ T22] usb 1-1: USB disconnect, device number 9 [ 135.889023][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 136.184726][ T5693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.186238][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.262409][ T5695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.265213][ T5695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.304274][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.482069][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 136.484850][ T22] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 136.486091][ T22] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 136.487619][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.489270][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.490799][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 136.492466][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.494169][ T22] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.496188][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.497800][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.714416][ T22] usb 1-1: GET_CAPABILITIES returned 0 [ 136.715486][ T22] usbtmc 1-1:16.0: can't read capabilities [ 136.842787][ T5705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.450'. [ 136.941792][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.943191][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.944439][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.945456][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.946447][ C1] usbtmc 1-1:16.0: invalid notification: 11 [ 136.947537][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.948873][ C1] usbtmc 1-1:16.0: invalid notification: 2 [ 136.950013][ C1] usbtmc 1-1:16.0: invalid notification: 5 [ 136.951110][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.952214][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.953345][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.954398][ C1] usbtmc 1-1:16.0: invalid notification: 40 [ 136.955820][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.956861][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.957903][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.958904][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.959939][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.960923][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.961949][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.963122][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.964167][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.965229][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.966247][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.967261][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.968307][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.969467][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.970706][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.971761][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.972973][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.974074][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.975216][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.976263][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.977364][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.978494][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.979607][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.980681][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.981757][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.983181][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.984293][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.985347][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.986368][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.987440][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.988526][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.989603][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.990693][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.991847][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.993018][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.994170][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.995238][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.996349][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.997478][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.998546][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 136.999711][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.000803][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.001917][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.004687][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.005773][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.006820][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.007873][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.008902][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.009967][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.010978][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.012100][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.013173][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.014350][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.015340][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.016274][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.017347][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.018847][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.019880][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.020919][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.022019][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.025439][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.026642][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.027814][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.029092][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.030115][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.031130][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.032233][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.033215][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.034271][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.035320][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.036385][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.037453][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.038588][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.039684][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.040904][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.041950][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.044315][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.045394][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.046443][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.047440][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.048468][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.049585][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.050646][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.051767][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.053027][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.054150][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.055283][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.056309][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.057356][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.058349][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.059368][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.060480][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.061578][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.063240][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.064307][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.065420][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.066527][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.067588][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.068615][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.069583][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.070631][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.071845][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.073435][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.074706][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.075851][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.076883][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.077937][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.078957][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.080050][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.081080][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.082115][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.083078][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.084100][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.085166][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.086114][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.087153][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.088201][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.089224][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.090201][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.091239][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.147020][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.148306][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.149342][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.150461][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.151467][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.152515][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.153607][ C1] usbtmc 1-1:16.0: invalid notification: 44 [ 137.154630][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.155652][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.156710][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.157767][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.158828][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.159775][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.160833][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.161849][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.163204][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.164289][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.165426][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.166608][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.167705][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.168768][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.169897][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.170940][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.172009][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.173328][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.174295][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.175434][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.176494][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.177545][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.178807][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.179940][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.181100][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.425377][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.426631][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.427805][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.428903][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.430024][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.431037][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.432286][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.433507][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.434720][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.435818][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.436976][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.438183][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.439309][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.440414][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.441496][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.442596][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.449955][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.450998][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.452193][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.453739][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.455534][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.456794][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.458036][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.459198][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.460238][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.461245][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.464944][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.466036][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.467119][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.468196][ C1] usbtmc 1-1:16.0: invalid notification: 0 [ 137.480017][ T5731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.482619][ T5731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.488784][ T5731] binder: 5730:5731 tried to acquire reference to desc 0, got 1 instead [ 137.491068][ T5731] binder: 5730:5731 BC_FREE_BUFFER u0000000020ffd000 matched unreturned or currently freeing buffer [ 137.493834][ T22] binder: release 5730:5731 transaction 73 out, still active [ 137.495842][ T22] binder: undelivered TRANSACTION_COMPLETE [ 137.667596][ T5739] capability: warning: `syz.3.461' uses 32-bit capabilities (legacy support in use) [ 137.674506][ T22] usb 1-1: USB disconnect, device number 10 [ 137.697818][ T5741] netlink: 16 bytes leftover after parsing attributes in process `syz.3.462'. [ 137.785097][ T5749] device syzkaller1 entered promiscuous mode [ 137.982695][ T5757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.984294][ T5757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.004784][ T22] binder: send failed reply for transaction 73, target dead [ 138.035230][ T5759] device syzkaller0 entered promiscuous mode [ 138.556130][ T5790] device syzkaller0 entered promiscuous mode [ 138.605884][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.611102][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.621686][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.626470][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.099737][ T5808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.106417][ T5808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.682106][ T4372] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 139.767565][ T5835] device syzkaller0 entered promiscuous mode [ 139.814287][ T5837] device syzkaller0 entered promiscuous mode [ 139.862087][ T4372] usb 1-1: Using ep0 maxpacket: 16 [ 139.864089][ T4372] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 139.867203][ T4372] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 139.868752][ T4372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.870008][ T4372] usb 1-1: Product: syz [ 139.870672][ T4372] usb 1-1: Manufacturer: syz [ 139.871453][ T4372] usb 1-1: SerialNumber: syz [ 139.875974][ T4372] usb 1-1: config 0 descriptor?? [ 140.070697][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.092278][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.234584][ T5862] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 140.256153][ T5862] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 140.325306][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.327211][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.336740][ T5868] device syzkaller0 entered promiscuous mode [ 140.500429][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.503995][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.743492][ T5880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.745879][ T5880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.391185][ T5901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.393969][ T5901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.526482][ T5907] device syzkaller0 entered promiscuous mode [ 141.655182][ T5911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.656922][ T5911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.781802][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'. [ 141.883380][ T5918] Cannot find add_set index 0 as target [ 141.884950][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.886424][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.924989][ T5920] netlink: 'syz.4.527': attribute type 4 has an invalid length. [ 142.234211][ T4376] usb 1-1: USB disconnect, device number 11 [ 142.307648][ T5941] device syzkaller0 entered promiscuous mode [ 142.363297][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.535'. [ 142.456310][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.458344][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.802274][ T4410] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 143.051341][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.053145][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.104954][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'. [ 143.114632][ T4410] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 143.116296][ T4410] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 143.117613][ T4410] usb 1-1: Product: syz [ 143.118304][ T4410] usb 1-1: SerialNumber: syz [ 143.120848][ T4410] usb 1-1: config 0 descriptor?? [ 143.259582][ T5987] device syzkaller0 entered promiscuous mode [ 143.460656][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 143.530074][ T4410] usb 1-1: USB disconnect, device number 12 [ 143.880251][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.559'. [ 143.902966][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.907299][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.065230][ T6018] loop0: detected capacity change from 0 to 512 [ 144.082394][ T6018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 144.096958][ T6022] device syzkaller0 entered promiscuous mode [ 144.100935][ T4326] EXT4-fs (loop0): unmounting filesystem. [ 144.437471][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000e7d958a1: rx timeout, send abort [ 144.648568][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.650299][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.938807][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000e7d958a1: abort rx timeout. Force session deactivation [ 145.194934][ T6056] loop1: detected capacity change from 0 to 512 [ 145.217172][ T6056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 153.612270][ T4328] Bluetooth: hci0: command 0x0406 tx timeout [ 153.613305][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 153.622104][ T4342] Bluetooth: hci3: command 0x0406 tx timeout [ 153.623165][ T4342] Bluetooth: hci1: command 0x0406 tx timeout [ 153.624160][ T4342] Bluetooth: hci2: command 0x0406 tx timeout [ 154.818480][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 154.909893][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.911522][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.959862][ T6081] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.961427][ T6081] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 154.964070][ T6081] device hsr0 entered promiscuous mode [ 154.965908][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 154.967513][ T6081] device hsr_slave_0 left promiscuous mode [ 155.002242][ T6081] device hsr_slave_1 left promiscuous mode [ 155.026182][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.028219][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.158567][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.586'. [ 155.193778][ T6081] device hsr0 left promiscuous mode [ 155.258641][ T6090] loop1: detected capacity change from 0 to 512 [ 155.267197][ T6090] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.283822][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 155.304376][ T6094] device syzkaller0 entered promiscuous mode [ 155.421278][ T6096] device syzkaller0 entered promiscuous mode [ 156.208575][ C0] vxcan1: j1939_tp_rxtimer: 0x000000000b5e637b: rx timeout, send abort [ 156.710082][ C0] vxcan1: j1939_tp_rxtimer: 0x000000000b5e637b: abort rx timeout. Force session deactivation [ 166.247527][ T6117] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 166.259944][ T6118] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 166.337220][ T6135] netlink: 68 bytes leftover after parsing attributes in process `syz.0.599'. [ 166.347655][ T6136] loop2: detected capacity change from 0 to 512 [ 166.364116][ T6139] device syzkaller0 entered promiscuous mode [ 166.372501][ T6136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.470957][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 166.552781][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.554356][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.560787][ T6158] device syzkaller0 entered promiscuous mode [ 166.594999][ T6161] binder: 6160:6161 Acquire 1 refcount change on invalid ref 0 ret -22 [ 166.596917][ T6161] binder: 6160:6161 got transaction to invalid handle, 1 [ 166.598353][ T6161] binder: 6161:6160 cannot find target node [ 166.599546][ T6161] binder: 6160:6161 transaction call to 0:0 failed 75/29201/-22, size 0-0 line 3045 [ 166.602907][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.606387][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.608086][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.787649][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.789677][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.802339][ T24] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 166.983829][ T24] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 166.985244][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.986734][ T24] usb 1-1: config 0 has no interface number 0 [ 166.989148][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 166.990861][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.992675][ T24] usb 1-1: Product: syz [ 166.993406][ T24] usb 1-1: Manufacturer: syz [ 166.994189][ T24] usb 1-1: SerialNumber: syz [ 166.995883][ T24] usb 1-1: config 0 descriptor?? [ 167.206348][ T24] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 167.207493][ T24] usb 1-1: No valid video chain found. [ 167.236903][ T6173] device syzkaller0 entered promiscuous mode [ 167.241829][ T6173] tipc: Started in network mode [ 167.245788][ T6173] tipc: Node identity 4aa62a1b56b, cluster identity 4711 [ 167.247889][ T6173] tipc: Enabled bearer , priority 0 [ 167.250517][ T6172] tipc: Resetting bearer [ 167.390560][ T4328] Bluetooth: hci1: Malformed LE Event: 0x0b [ 167.393495][ T6172] tipc: Disabling bearer [ 167.418148][ T24] usb 1-1: USB disconnect, device number 13 [ 167.434660][ T6184] bridge0: port 3(bond0) entered blocking state [ 167.436579][ T6184] bridge0: port 3(bond0) entered disabled state [ 167.438338][ T6184] device bond0 entered promiscuous mode [ 167.439260][ T6184] device bond_slave_0 entered promiscuous mode [ 167.440331][ T6184] device bond_slave_1 entered promiscuous mode [ 167.441583][ T6184] bridge0: port 3(bond0) entered blocking state [ 167.443426][ T6184] bridge0: port 3(bond0) entered forwarding state [ 167.476311][ T6186] loop3: detected capacity change from 0 to 512 [ 167.486745][ T6186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 167.515318][ T4339] EXT4-fs (loop3): unmounting filesystem. [ 167.534603][ T6190] device syzkaller0 entered promiscuous mode [ 167.639712][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.642442][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.664305][ T6202] binder: 6201:6202 Acquire 1 refcount change on invalid ref 0 ret -22 [ 167.667823][ T6202] binder: 6201:6202 got transaction to invalid handle, 1 [ 167.669146][ T6202] binder: 6202:6201 cannot find target node [ 167.670127][ T6202] binder: 6201:6202 transaction call to 0:0 failed 77/29201/-22, size 0-0 line 3045 [ 167.682817][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.946676][ T4328] Bluetooth: hci0: Malformed LE Event: 0x0b [ 167.951393][ T6220] netdevsim netdevsim2: Direct firmware load for ÿÿÿÿ failed with error -2 [ 167.953069][ T6220] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿÿÿÿ [ 167.971081][ T6222] tipc: Enabling of bearer rejected, failed to enable media [ 167.994449][ T6224] bridge0: port 3(bond0) entered blocking state [ 167.995960][ T6224] bridge0: port 3(bond0) entered disabled state [ 167.997757][ T6224] device bond0 entered promiscuous mode [ 167.998839][ T6224] device bond_slave_0 entered promiscuous mode [ 167.999781][ T6224] device bond_slave_1 entered promiscuous mode [ 168.003184][ T6224] bridge0: port 3(bond0) entered blocking state [ 168.004448][ T6224] bridge0: port 3(bond0) entered forwarding state [ 168.055470][ T6228] loop4: detected capacity change from 0 to 512 [ 168.065107][ T6228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 168.078826][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 168.129299][ T6233] device syzkaller0 entered promiscuous mode [ 168.250083][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.251711][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.312147][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 168.493491][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.495408][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.496760][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.499703][ T24] usb 1-1: config 0 descriptor?? [ 168.616824][ T6249] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 168.618146][ T6249] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 168.619882][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 168.621479][ T6249] device hsr_slave_0 left promiscuous mode [ 168.662163][ T6249] device hsr_slave_1 left promiscuous mode [ 168.706813][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 168.707973][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 168.709872][ T24] usb 1-1: USB disconnect, device number 14 [ 168.845132][ T6254] tipc: Enabling of bearer rejected, failed to enable media [ 168.888937][ T6259] loop2: detected capacity change from 0 to 512 [ 168.903011][ T6259] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 168.928740][ T4330] EXT4-fs (loop2): unmounting filesystem. [ 169.008683][ T6271] device syzkaller0 entered promiscuous mode [ 169.262089][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 169.293769][ T6287] netlink: 156 bytes leftover after parsing attributes in process `syz.4.651'. [ 169.297124][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 169.336589][ T6289] tipc: Enabling of bearer rejected, failed to enable media [ 169.360634][ T6293] loop1: detected capacity change from 0 to 512 [ 169.366450][ T6293] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.389788][ T4327] EXT4-fs (loop1): unmounting filesystem. [ 169.419869][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.422797][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.430575][ T6299] binder: 6297:6299 tried to acquire reference to desc 0, got 1 instead [ 169.441139][ T6299] binder_alloc: 6297: binder_alloc_buf, no vma [ 169.443880][ T6299] binder: cannot allocate buffer: vma cleared, target dead or dying [ 169.444024][ T6299] binder: 6297:6299 transaction call to 6297:0 failed 82/29189/-3, size 0-0 line 3230 [ 169.447421][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.449315][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 169.450730][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.453888][ T6299] binder: 6297:6299 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 169.455939][ T6299] binder: 6299 RLIMIT_NICE not set [ 169.457801][ T24] usb 1-1: config 0 descriptor?? [ 169.504839][ T6303] binder: 6297:6303 BC_FREE_BUFFER u0000000000000000 no match [ 169.557427][ T6306] device hsr0 entered promiscuous mode [ 169.558947][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'. [ 169.560571][ T6306] device hsr_slave_0 left promiscuous mode [ 169.592713][ T6306] device hsr_slave_1 left promiscuous mode [ 169.763689][ T6306] device hsr0 left promiscuous mode [ 169.776568][ T6308] device syzkaller0 entered promiscuous mode [ 169.894597][ T6319] TCP: TCP_TX_DELAY enabled [ 170.273419][ T24] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 170.275104][ T24] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input3 [ 170.297194][ C1] ================================================================================ [ 170.298699][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 170.300059][ C1] index 20872 is out of range for type 'const int[34]' [ 170.301137][ C1] CPU: 1 PID: 4657 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 170.302411][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 170.304155][ C1] Workqueue: bat_events batadv_nc_worker [ 170.305130][ C1] Call trace: [ 170.305689][ C1] dump_backtrace+0x1c4/0x1f0 [ 170.306437][ C1] show_stack+0x2c/0x3c [ 170.307097][ C1] __dump_stack+0x30/0x40 [ 170.307825][ C1] dump_stack_lvl+0xf4/0x15c [ 170.308608][ C1] dump_stack+0x1c/0x5c [ 170.309293][ C1] ubsan_epilogue+0x14/0x48 [ 170.310035][ C1] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 170.310997][ C1] aiptek_irq+0x19a0/0x2360 [ 170.311716][ C1] __usb_hcd_giveback_urb+0x2ec/0x50c [ 170.312535][ C1] usb_hcd_giveback_urb+0x100/0x3a4 [ 170.313415][ C1] dummy_timer+0x7c8/0x2840 [ 170.314240][ C1] __hrtimer_run_queues+0x444/0xc58 [ 170.315092][ C1] hrtimer_run_softirq+0x164/0x408 [ 170.315902][ C1] handle_softirqs+0x318/0xc90 [ 170.316659][ C1] __do_softirq+0x14/0x20 [ 170.317295][ C1] ____do_softirq+0x14/0x20 [ 170.318010][ C1] call_on_irq_stack+0x30/0x48 [ 170.318815][ C1] do_softirq_own_stack+0x20/0x2c [ 170.319679][ C1] __irq_exit_rcu+0x23c/0x430 [ 170.320456][ C1] irq_exit_rcu+0x14/0x84 [ 170.321137][ C1] el1_interrupt+0x38/0x54 [ 170.321853][ C1] el1h_64_irq_handler+0x18/0x24 [ 170.322628][ C1] el1h_64_irq+0x64/0x68 [ 170.323286][ C1] __rcu_read_unlock+0x4/0x110 [ 170.324033][ C1] batadv_nc_worker+0x398/0x538 [ 170.324791][ C1] process_one_work+0x7e4/0x13bc [ 170.325634][ C1] worker_thread+0x8cc/0xfe8 [ 170.326338][ C1] kthread+0x254/0x2e0 [ 170.327017][ C1] ret_from_fork+0x10/0x20 [ 170.327710][ C1] ================================================================================ [ 170.329196][ C1] ================================================================================ [ 170.330681][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 170.332090][ C1] index 20873 is out of range for type 'const int[34]' [ 170.333187][ C1] CPU: 1 PID: 4657 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 170.334394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 170.335995][ C1] Workqueue: bat_events batadv_nc_worker [ 170.336960][ C1] Call trace: [ 170.337484][ C1] dump_backtrace+0x1c4/0x1f0 [ 170.338246][ C1] show_stack+0x2c/0x3c [ 170.338927][ C1] __dump_stack+0x30/0x40 [ 170.339636][ C1] dump_stack_lvl+0xf4/0x15c [ 170.340428][ C1] dump_stack+0x1c/0x5c [ 170.341127][ C1] ubsan_epilogue+0x14/0x48 [ 170.341836][ C1] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 170.342711][ C1] aiptek_irq+0x186c/0x2360 [ 170.343479][ C1] __usb_hcd_giveback_urb+0x2ec/0x50c [ 170.344470][ C1] usb_hcd_giveback_urb+0x100/0x3a4 [ 170.345256][ C1] dummy_timer+0x7c8/0x2840 [ 170.345993][ C1] __hrtimer_run_queues+0x444/0xc58 [ 170.346837][ C1] hrtimer_run_softirq+0x164/0x408 [ 170.347696][ C1] handle_softirqs+0x318/0xc90 [ 170.348509][ C1] __do_softirq+0x14/0x20 [ 170.349264][ C1] ____do_softirq+0x14/0x20 [ 170.350043][ C1] call_on_irq_stack+0x30/0x48 [ 170.350844][ C1] do_softirq_own_stack+0x20/0x2c [ 170.351828][ C1] __irq_exit_rcu+0x23c/0x430 [ 170.352706][ C1] irq_exit_rcu+0x14/0x84 [ 170.353502][ C1] el1_interrupt+0x38/0x54 [ 170.354215][ C1] el1h_64_irq_handler+0x18/0x24 [ 170.355031][ C1] el1h_64_irq+0x64/0x68 [ 170.355723][ C1] __rcu_read_unlock+0x4/0x110 [ 170.356509][ C1] batadv_nc_worker+0x398/0x538 [ 170.357273][ C1] process_one_work+0x7e4/0x13bc [ 170.358132][ C1] worker_thread+0x8cc/0xfe8 [ 170.358946][ C1] kthread+0x254/0x2e0 [ 170.359617][ C1] ret_from_fork+0x10/0x20 [ 170.360319][ C1] ================================================================================ [ 170.624848][ T24] usb 1-1: USB disconnect, device number 15 [ 170.626023][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 172.426336][ T111] binder: undelivered TRANSACTION_ERROR: 29189