last executing test programs: 1m19.456895668s ago: executing program 3 (id=607): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 1m19.45610351s ago: executing program 3 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r0, &(0x7f0000000380), 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) userfaultfd(0x801) pipe2$watch_queue(&(0x7f0000000000), 0x80) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x7000, 0x29000, 0x3) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) 1m19.356159141s ago: executing program 3 (id=614): prlimit64(0x0, 0xe, &(0x7f0000001080)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x8002) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 1m19.350606681s ago: executing program 3 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 1m19.291423242s ago: executing program 3 (id=617): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0xe1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x0, 0x9, 0x2c, {0x2c, 0x4, "82631b612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c5512a4dc5c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m19.002454232s ago: executing program 3 (id=620): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r1, 0x665fe000) 1m18.967045744s ago: executing program 32 (id=620): r0 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r1, 0x665fe000) 28.24763993s ago: executing program 2 (id=1869): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@shortname_lower}, {@utf8no}, {@fat=@tz_utc}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@fat=@flush}, {@numtail}]}, 0x81, 0x2b7, &(0x7f0000000c80)="$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") truncate(0x0, 0x3000000) openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x1ff) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x5e}, 0x10028) 28.188566398s ago: executing program 2 (id=1871): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff80210000, 0x0, 0xfffc, 0x5, 0x7, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) write$binfmt_misc(r4, &(0x7f0000000440)=';', 0x1) 27.303824488s ago: executing program 2 (id=1912): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2804000, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@quota}, {@nomblk_io_submit}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x5b1, &(0x7f0000000880)="$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") fcntl$setpipe(r0, 0x407, 0xfec9562) 27.187213211s ago: executing program 2 (id=1918): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") open(&(0x7f0000000000)='./file1\x00', 0x181000, 0x0) 27.049216626s ago: executing program 2 (id=1922): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000", 0x15}], 0x1) 26.716967514s ago: executing program 2 (id=1935): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) 26.681384168s ago: executing program 33 (id=1935): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x7fff, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) 12.876963424s ago: executing program 1 (id=2538): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40880c0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x90, 0x200, 0x0, 0x5, 0xf34}) 12.796987437s ago: executing program 1 (id=2541): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 12.604135807s ago: executing program 1 (id=2550): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaaaa86dd6a008993000829ff"], 0x42) 12.424966655s ago: executing program 1 (id=2555): setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000140)=0x80000001, 0x4) sendto(r0, 0x0, 0x0, 0x13b1b5f7f8034f52, &(0x7f0000000040)=@phonet={0x23, 0x1, 0x5, 0x6}, 0x80) 12.41608792s ago: executing program 1 (id=2558): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 12.344019703s ago: executing program 1 (id=2561): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) write$FUSE_STATX(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 2.778639706s ago: executing program 4 (id=2896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000110000000000000000000a00000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e000024000280080001400000000f08000440fffffff8080002400000000308000340151900010900010073797a30000000000900020073797a3200"], 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.68473191s ago: executing program 4 (id=2902): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x3, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x2, 0x3}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x7}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1, 0x0, 0xfff, 0x59}) fcntl$lock(r0, 0x7, &(0x7f0000000240)={0x0, 0x2, 0x800, 0x6}) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x9}) 2.65613713s ago: executing program 4 (id=2905): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x141d, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.111860212s ago: executing program 5 (id=2962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.045869771s ago: executing program 5 (id=2967): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 980.340391ms ago: executing program 5 (id=2969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1180000, &(0x7f0000000300)) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004c00)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x44}}, 0x0) 951.063442ms ago: executing program 5 (id=2973): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000100)=0x40, 0x4) 750.871699ms ago: executing program 6 (id=2978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='nv', 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000200)=""/201, &(0x7f0000000340)=0xc9) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(0x0, r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000500)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x1, @f={0x5, 0x0, 0x6, 0x2, 0x3, 0x6, 0xb, {0x2}, 0x2f, 0x0, 0x80, 0xc0}}, 0x11) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) sendto$inet6(r0, &(0x7f00000000c0)="9eeb513169fb712cbe9395b400b3a4742b4055f872", 0x15, 0x8898, 0x0, 0x0) 652.288763ms ago: executing program 5 (id=2979): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 570.116019ms ago: executing program 6 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000) 569.585476ms ago: executing program 0 (id=2981): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r4}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) 569.274886ms ago: executing program 5 (id=2982): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="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", 0x2e7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 492.716709ms ago: executing program 6 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1180000, &(0x7f0000000300)) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004c00)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x44}}, 0x0) 492.491958ms ago: executing program 0 (id=2984): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 475.002557ms ago: executing program 6 (id=2985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="b8914b3f677210a5befd00000500", 0x0, 0x10012000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 451.940602ms ago: executing program 0 (id=2986): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff0200000000000000000000000000ff0f2088be000000030c000800050086dd88a888be000000000009660501000000000088a8080022eb00020000200cf008020000000000000200049403"], 0x7a) 292.978695ms ago: executing program 0 (id=2987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pread64(r5, 0x0, 0x0, 0xcd32) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x1000}]}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket(0x29, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x119, 0x2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 292.743775ms ago: executing program 6 (id=2988): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000100)=0x40, 0x4) 137.698335ms ago: executing program 4 (id=2908): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) 83.639428ms ago: executing program 0 (id=2989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 73.174389ms ago: executing program 4 (id=2990): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 72.553567ms ago: executing program 6 (id=2991): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(r0, &(0x7f0000000000)="01", 0x1) 840.046µs ago: executing program 4 (id=2992): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 0s ago: executing program 0 (id=2993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000) kernel console output (not intermixed with test programs): 9.512940][ T6654] loop0: [ 79.537891][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.538091][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.814040][ T6674] netlink: 14 bytes leftover after parsing attributes in process `syz.1.716'. [ 79.819615][ T6674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.829185][ T6674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.850005][ T4840] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 79.851366][ T6674] bond0 (unregistering): Released all slaves [ 79.881923][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.882114][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.009789][ T4840] usb 1-1: Using ep0 maxpacket: 32 [ 80.011339][ T4840] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 80.014011][ T4840] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 80.015920][ T4840] usb 1-1: config 0 has no interface number 0 [ 80.017237][ T4840] usb 1-1: config 0 interface 184 has no altsetting 0 [ 80.024489][ T4840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.024528][ T4840] usb 1-1: Product: syz [ 80.024541][ T4840] usb 1-1: Manufacturer: syz [ 80.024554][ T4840] usb 1-1: SerialNumber: syz [ 80.030445][ T4840] usb 1-1: config 0 descriptor?? [ 80.059912][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.062445][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.064674][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.065554][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.081929][ T6692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.082120][ T6692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.398271][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.398489][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.590402][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.592502][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.606037][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.606680][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.923113][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.924292][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.113006][ T6715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.115100][ T6715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.239891][ T4840] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 81.239926][ T4840] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 81.242322][ T4840] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 81.242341][ T4840] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 81.242350][ T4840] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 81.242358][ T4840] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 81.242455][ T4840] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 81.256713][ T4840] usb 1-1: USB disconnect, device number 21 [ 81.276200][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.277187][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.290152][ T4722] Bluetooth: hci3: command tx timeout [ 81.369838][ T4722] Bluetooth: hci0: command tx timeout [ 81.504050][ T6736] netlink: 64 bytes leftover after parsing attributes in process `syz.4.746'. [ 81.562074][ T4722] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 81.563625][ T4722] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 81.563650][ T4722] CPU: 1 UID: 0 PID: 4722 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT [ 81.563664][ T4722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.563671][ T4722] Workqueue: hci1 hci_rx_work [ 81.563690][ T4722] Call trace: [ 81.563693][ T4722] show_stack+0x2c/0x3c (C) [ 81.563709][ T4722] __dump_stack+0x30/0x40 [ 81.563722][ T4722] dump_stack_lvl+0xd8/0x12c [ 81.563734][ T4722] dump_stack+0x1c/0x28 [ 81.563745][ T4722] sysfs_warn_dup+0x9c/0xb8 [ 81.563757][ T4722] sysfs_create_dir_ns+0x190/0x1f4 [ 81.563769][ T4722] kobject_add_internal+0x290/0x6f0 [ 81.563782][ T4722] kobject_add_varg+0x9c/0xe8 [ 81.563793][ T4722] kobject_add+0x110/0x1c8 [ 81.563803][ T4722] device_add+0x394/0x9e0 [ 81.563812][ T4722] hci_conn_add_sysfs+0xbc/0x1e8 [ 81.563822][ T4722] hci_conn_complete_evt+0x6ec/0xe04 [ 81.563830][ T4722] hci_event_packet+0x4e0/0x9c8 [ 81.563838][ T4722] hci_rx_work+0x2f4/0xd78 [ 81.563849][ T4722] process_scheduled_works+0x788/0x10b8 [ 81.563860][ T4722] worker_thread+0x798/0xbd0 [ 81.563870][ T4722] kthread+0x304/0x3d4 [ 81.563878][ T4722] ret_from_fork+0x10/0x20 [ 81.563898][ T4722] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 81.563911][ T4722] Bluetooth: hci1: failed to register connection device [ 81.675721][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.678220][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.700588][ T6758] ima: policy update failed [ 81.701999][ T30] audit: type=1802 audit(81.690:7): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.4.757" res=0 errno=0 [ 81.757720][ T6766] netlink: 64 bytes leftover after parsing attributes in process `syz.0.761'. [ 82.019815][ T4314] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 82.161507][ T6782] binder: 6781:6782 tried to acquire reference to desc 0, got 1 instead [ 82.163442][ T6782] binder: 6781:6782 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 82.163470][ T6782] binder: 6782 RLIMIT_NICE not set [ 82.163919][ T4818] binder: undelivered TRANSACTION_COMPLETE [ 82.179782][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 82.182686][ T4314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.182841][ T4314] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 82.184844][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.184856][ T4314] usb 1-1: Product: syz [ 82.184864][ T4314] usb 1-1: Manufacturer: syz [ 82.184872][ T4314] usb 1-1: SerialNumber: syz [ 82.339067][ T6801] Bluetooth: hci0: unsupported parameter 5135 [ 82.339097][ T6801] Bluetooth: hci0: unsupported parameter 8192 [ 82.339121][ T6801] Bluetooth: hci0: unsupported parameter 5135 [ 82.339131][ T6801] Bluetooth: hci0: unsupported parameter 8192 [ 82.407063][ T4314] usb 1-1: USB disconnect, device number 22 [ 82.547446][ T6822] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 82.547466][ T6822] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 82.550677][ T6822] vhci_hcd vhci_hcd.0: Device attached [ 82.552472][ T6825] mmap: syz.5.782 (6825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.555486][ T6823] vhci_hcd: connection closed [ 82.556100][ T3618] vhci_hcd vhci_hcd.1: stop threads [ 82.558568][ T3618] vhci_hcd vhci_hcd.1: release socket [ 82.561203][ T3618] vhci_hcd vhci_hcd.1: disconnect device [ 82.600713][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.601953][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.829756][ T4314] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 82.969882][ T4722] Bluetooth: hci1: command 0x0401 tx timeout [ 82.979892][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 82.981389][ T4314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.981425][ T4314] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 82.985988][ T4314] usb 1-1: string descriptor 0 read error: -22 [ 82.987216][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.124853][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.125064][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.194827][ T4314] usb 1-1: USB disconnect, device number 23 [ 83.370055][ T4716] Bluetooth: hci3: command tx timeout [ 83.711501][ T4716] Bluetooth: hci3: Malformed LE Event: 0x1d [ 83.728028][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.730412][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.101320][ T6855] block nbd1: shutting down sockets [ 84.171814][ T6860] loop8: detected capacity change from 0 to 524288000 [ 84.256647][ T6866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.256853][ T6866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.262537][ T6864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.274775][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.274975][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.315555][ T6864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.386777][ T6864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.455273][ T6864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.795187][ T6771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.833668][ T6873] binder: 6872:6873 tried to acquire reference to desc 0, got 1 instead [ 84.833819][ T6873] binder: 6872:6873 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 84.833846][ T6873] binder: 6873 RLIMIT_NICE not set [ 84.834982][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.835179][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.847331][ T4716] Bluetooth: hci1: unexpected event for opcode 0x0c23 [ 84.865901][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.866108][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.885320][ T6873] binder: 6873 RLIMIT_NICE not set [ 84.886732][ T4818] binder: release 6872:6882 transaction 25 out, still active [ 84.886758][ T4818] binder: undelivered TRANSACTION_COMPLETE [ 84.893060][ T11] binder: release 6872:6873 transaction 25 in, still active [ 84.895367][ T11] binder: send failed reply for transaction 25, target dead [ 84.904719][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.904923][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.354449][ T6907] device-mapper: ioctl: device name cannot contain '/' [ 85.449810][ T4716] Bluetooth: hci3: command tx timeout [ 85.460123][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.462486][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.547987][ T6926] FAULT_INJECTION: forcing a failure. [ 85.547987][ T6926] name fail_futex, interval 1, probability 0, space 0, times 1 [ 85.548021][ T6926] CPU: 0 UID: 0 PID: 6926 Comm: syz.2.831 Not tainted syzkaller #0 PREEMPT [ 85.548033][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.548040][ T6926] Call trace: [ 85.548043][ T6926] show_stack+0x2c/0x3c (C) [ 85.548063][ T6926] __dump_stack+0x30/0x40 [ 85.548076][ T6926] dump_stack_lvl+0xd8/0x12c [ 85.548088][ T6926] dump_stack+0x1c/0x28 [ 85.548100][ T6926] should_fail_ex+0x41c/0x590 [ 85.548109][ T6926] should_fail+0x14/0x24 [ 85.548116][ T6926] get_futex_key+0x1ec/0x12b0 [ 85.548126][ T6926] futex_wait_setup+0x58/0x674 [ 85.548137][ T6926] __futex_wait+0x108/0x25c [ 85.548147][ T6926] futex_wait+0x108/0x2c0 [ 85.548157][ T6926] do_futex+0x320/0x378 [ 85.548167][ T6926] __arm64_sys_futex+0x2e4/0x418 [ 85.548177][ T6926] invoke_syscall+0x98/0x244 [ 85.548189][ T6926] el0_svc_common+0xec/0x23c [ 85.548201][ T6926] do_el0_svc+0x4c/0x5c [ 85.548213][ T6926] el0_svc+0x64/0x260 [ 85.548223][ T6926] el0t_64_sync_handler+0x44/0x104 [ 85.548233][ T6926] el0t_64_sync+0x198/0x19c [ 85.677422][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.679333][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.091396][ T6952] netlink: 'syz.1.843': attribute type 29 has an invalid length. [ 86.092396][ T6952] netlink: 'syz.1.843': attribute type 29 has an invalid length. [ 86.116304][ T6954] tipc: Enabled bearer , priority 0 [ 86.124482][ T6954] syzkaller0: entered promiscuous mode [ 86.124512][ T6954] syzkaller0: entered allmulticast mode [ 86.124881][ T6954] tipc: Resetting bearer [ 86.127604][ T6953] tipc: Resetting bearer [ 86.202582][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.205385][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.320818][ T4314] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 86.470377][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 86.471437][ T4314] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 86.472138][ T4314] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 86.472149][ T4314] usb 1-1: config 0 has no interface number 0 [ 86.472161][ T4314] usb 1-1: config 0 interface 12 has no altsetting 0 [ 86.473503][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.473514][ T4314] usb 1-1: Product: syz [ 86.473523][ T4314] usb 1-1: Manufacturer: syz [ 86.473531][ T4314] usb 1-1: SerialNumber: syz [ 86.476705][ T4314] usb 1-1: config 0 descriptor?? [ 86.537294][ T6953] tipc: Disabling bearer [ 86.575590][ T6965] netlink: 132 bytes leftover after parsing attributes in process `syz.5.847'. [ 86.607402][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.608715][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.625106][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.625337][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.723919][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.724133][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.237427][ T4716] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 87.239992][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT [ 87.240009][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 87.240015][ T4716] Workqueue: hci3 hci_rx_work [ 87.240035][ T4716] Call trace: [ 87.240038][ T4716] show_stack+0x2c/0x3c (C) [ 87.240054][ T4716] __dump_stack+0x30/0x40 [ 87.240066][ T4716] dump_stack_lvl+0xd8/0x12c [ 87.240078][ T4716] dump_stack+0x1c/0x28 [ 87.240089][ T4716] sysfs_warn_dup+0x9c/0xb8 [ 87.240102][ T4716] sysfs_create_dir_ns+0x190/0x1f4 [ 87.240114][ T4716] kobject_add_internal+0x290/0x6f0 [ 87.240127][ T4716] kobject_add_varg+0x9c/0xe8 [ 87.240137][ T4716] kobject_add+0x110/0x1c8 [ 87.240148][ T4716] device_add+0x394/0x9e0 [ 87.240157][ T4716] hci_conn_add_sysfs+0xbc/0x1e8 [ 87.240166][ T4716] le_conn_complete_evt+0xc68/0x10f8 [ 87.240179][ T4716] hci_le_conn_complete_evt+0x114/0x3d8 [ 87.240191][ T4716] hci_le_meta_evt+0x2b0/0x46c [ 87.240199][ T4716] hci_event_packet+0x4c0/0x9c8 [ 87.240208][ T4716] hci_rx_work+0x2f4/0xd78 [ 87.240218][ T4716] process_scheduled_works+0x788/0x10b8 [ 87.240230][ T4716] worker_thread+0x798/0xbd0 [ 87.240240][ T4716] kthread+0x304/0x3d4 [ 87.240249][ T4716] ret_from_fork+0x10/0x20 [ 87.240265][ T4716] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.240284][ T4716] Bluetooth: hci3: failed to register connection device [ 87.245937][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.246132][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.248776][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.249314][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.617345][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.618914][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.136248][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.136446][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.498312][ T4314] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 89.498347][ T4314] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 89.498547][ T4314] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 89.498587][ T4314] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 89.502851][ T4314] usb 1-1: USB disconnect, device number 24 [ 89.606212][ T6968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.713973][ T4716] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9 [ 89.714013][ T4716] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 89.760815][ T7016] syzkaller1: entered promiscuous mode [ 89.762010][ T7016] syzkaller1: entered allmulticast mode [ 89.904690][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.904898][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.012905][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.014667][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.285320][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.285513][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.369083][ T7053] netlink: 168 bytes leftover after parsing attributes in process `syz.2.886'. [ 90.380098][ T4314] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 90.454062][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.455979][ T7059] binder: 7058:7059 tried to acquire reference to desc 0, got 1 instead [ 90.458070][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.487299][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.488671][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.531621][ T4314] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.534437][ T4314] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.534462][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.534472][ T4314] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.534489][ T4314] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.534510][ T4314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.534818][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.545540][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.547019][ T4314] usb 1-1: Product: syz [ 90.547812][ T4314] usb 1-1: Manufacturer: syz [ 90.550959][ T4314] cdc_wdm 1-1:1.0: skipping garbage [ 90.551908][ T4314] cdc_wdm 1-1:1.0: skipping garbage [ 90.554812][ T4314] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 90.556115][ T4314] cdc_wdm 1-1:1.0: Unknown control protocol [ 90.611389][ T7059] binder: 7058:7059 ioctl c0306201 200009c0 returned -14 [ 90.613017][ T4840] binder: release 7058:7059 transaction 32 out, still active [ 90.613059][ T4840] binder: undelivered TRANSACTION_COMPLETE [ 90.618494][ T4840] binder: send failed reply for transaction 32, target dead [ 90.710494][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.711176][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.753849][ T4840] usb 1-1: USB disconnect, device number 25 [ 91.027085][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.027339][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.053960][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.054148][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.199774][ T4840] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 91.232671][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.232864][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.350360][ T4840] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.352132][ T4840] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.352145][ T4840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.352153][ T4840] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.352166][ T4840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.353287][ T4840] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.353298][ T4840] usb 1-1: Product: syz [ 91.353357][ T4840] usb 1-1: Manufacturer: syz [ 91.367887][ T4840] cdc_wdm 1-1:1.0: skipping garbage [ 91.367920][ T4840] cdc_wdm 1-1:1.0: skipping garbage [ 91.372053][ T4840] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 91.372078][ T4840] cdc_wdm 1-1:1.0: Unknown control protocol [ 91.425507][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.427370][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.994890][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.997587][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.997679][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.000989][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.152747][ T4840] usb 1-1: USB disconnect, device number 26 [ 93.481876][ T7151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.489947][ T4840] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 93.501612][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.503891][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.640437][ T4840] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 93.641171][ T4840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 93.641187][ T4840] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 93.641198][ T4840] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 93.641209][ T4840] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 93.641224][ T4840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.648371][ T7145] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.039132][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.041178][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.058470][ T4840] ims_pcu 1-1:1.0: GET_INFO command failed, error: -71 [ 94.058782][ T4840] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -71 [ 94.263215][ T4818] usb 1-1: USB disconnect, device number 27 [ 94.666427][ T7107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.760404][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.760602][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.862348][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.865063][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.884340][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.886686][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.323474][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.323671][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.455071][ T4716] Bluetooth: hci1: unexpected event for opcode 0x200c [ 95.468306][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.468507][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.540062][ T4897] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 95.601877][ T7300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.602087][ T7300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.655527][ T7303] syzkaller1: entered promiscuous mode [ 95.655624][ T7303] syzkaller1: entered allmulticast mode [ 95.691640][ T4897] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 95.692395][ T4897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 95.693418][ T4897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 95.693429][ T4897] usb 1-1: Product: syz [ 95.693436][ T4897] usb 1-1: Manufacturer: syz [ 95.705361][ T4897] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 95.877915][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.878119][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.992545][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.995802][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.216036][ T7331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.218028][ T7331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.341162][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.343559][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.522416][ T4897] usb 1-1: USB disconnect, device number 28 [ 96.763154][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.763364][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.788407][ T7373] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1010'. [ 96.824542][ T7381] tipc: Can't bind to reserved service type 2 [ 96.899528][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.904807][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.965921][ T7400] FAULT_INJECTION: forcing a failure. [ 96.965921][ T7400] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.965964][ T7400] CPU: 1 UID: 0 PID: 7400 Comm: syz.1.1020 Not tainted syzkaller #0 PREEMPT [ 96.965979][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 96.965986][ T7400] Call trace: [ 96.965989][ T7400] show_stack+0x2c/0x3c (C) [ 96.966010][ T7400] __dump_stack+0x30/0x40 [ 96.966023][ T7400] dump_stack_lvl+0xd8/0x12c [ 96.966035][ T7400] dump_stack+0x1c/0x28 [ 96.966046][ T7400] should_fail_ex+0x41c/0x590 [ 96.966055][ T7400] should_fail+0x14/0x24 [ 96.966062][ T7400] should_fail_usercopy+0x20/0x30 [ 96.966071][ T7400] strncpy_from_user+0x48/0x388 [ 96.966081][ T7400] __arm64_sys_add_key+0x150/0x43c [ 96.966090][ T7400] invoke_syscall+0x98/0x244 [ 96.966102][ T7400] el0_svc_common+0xec/0x23c [ 96.966114][ T7400] do_el0_svc+0x4c/0x5c [ 96.966125][ T7400] el0_svc+0x64/0x260 [ 96.966136][ T7400] el0t_64_sync_handler+0x44/0x104 [ 96.966146][ T7400] el0t_64_sync+0x198/0x19c [ 97.066507][ T7418] binder: 7417:7418 tried to acquire reference to desc 0, got 1 instead [ 97.068303][ T7418] binder: 7417:7418 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 97.079929][ T7418] binder: 7418 RLIMIT_NICE not set [ 97.081009][ T7418] binder: undelivered transaction 43, put_user failed [ 97.082326][ T7418] binder: 7417:7418 ioctl c0306201 20000680 returned -14 [ 97.083980][ T4897] binder: undelivered TRANSACTION_COMPLETE [ 97.085341][ T7421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.085521][ T7421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.287234][ T7447] netlink: 'syz.5.1033': attribute type 2 has an invalid length. [ 97.416640][ T7460] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1037'. [ 97.440097][ T4802] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 97.482716][ T7471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.482912][ T7471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.561571][ T4897] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 97.565119][ T4897] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.595313][ T4802] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 97.601205][ T4802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.601230][ T4802] usb 1-1: Product: syz [ 97.601251][ T4802] usb 1-1: Manufacturer: syz [ 97.601265][ T4802] usb 1-1: SerialNumber: syz [ 97.605667][ T7478] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1044'. [ 97.608156][ T4802] usb 1-1: config 0 descriptor?? [ 97.639383][ T7475] 9p: Bad value for 'wfdno' [ 97.816617][ T4802] usb 1-1: USB disconnect, device number 29 [ 97.877286][ T7509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.879102][ T7509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.931346][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.931540][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.003292][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.005072][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.041235][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.041884][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.506996][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.507190][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.511464][ T7538] usb usb7: usbfs: process 7538 (syz.2.1072) did not claim interface 0 before use [ 98.562153][ T7546] input: syz1 as /devices/virtual/input/input6 [ 98.573854][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.574046][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.714974][ T7554] syzkaller1: entered promiscuous mode [ 98.716142][ T7554] syzkaller1: entered allmulticast mode [ 98.815399][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.816846][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.935856][ T4818] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 98.936484][ T4818] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.134563][ T7594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.135126][ T7594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.140389][ T4314] IPVS: starting estimator thread 0... [ 99.229844][ T7596] IPVS: using max 60 ests per chain, 144000 per kthread [ 99.785087][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.785301][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.002345][ T7639] syzkaller1: entered promiscuous mode [ 100.002378][ T7639] syzkaller1: entered allmulticast mode [ 100.087927][ T7651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.088130][ T7651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.197276][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.200785][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.367097][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.369141][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.439766][ T4818] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 100.652510][ T4818] usb 1-1: Using ep0 maxpacket: 32 [ 100.670157][ T4818] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 100.681392][ T4818] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 100.681421][ T4818] usb 1-1: config 0 has no interface number 0 [ 100.681448][ T4818] usb 1-1: config 0 interface 184 has no altsetting 0 [ 100.683012][ T4818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.683024][ T4818] usb 1-1: Product: syz [ 100.683033][ T4818] usb 1-1: Manufacturer: syz [ 100.683042][ T4818] usb 1-1: SerialNumber: syz [ 100.685532][ T4818] usb 1-1: config 0 descriptor?? [ 101.016097][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.018226][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.051025][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.051544][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.054785][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.056063][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.100192][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.102508][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.660463][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.660670][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.905836][ T4818] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 101.905876][ T4818] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 101.906113][ T4818] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 101.906130][ T4818] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 101.906145][ T4818] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 101.906159][ T4818] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 101.906254][ T4818] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 101.929158][ T4818] usb 1-1: USB disconnect, device number 30 [ 101.962088][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.962295][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.052588][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.052806][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.180167][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.180835][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.679778][ T4816] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 102.684066][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.684262][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.767956][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.768152][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.843664][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.843922][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.846370][ T4816] usb 1-1: unable to get BOS descriptor or descriptor too short [ 102.846397][ T4816] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 102.846966][ T4816] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 102.846982][ T4816] usb 1-1: can't read configurations, error -71 [ 102.921664][ T7765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.922291][ T7765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.441343][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.443724][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.448569][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.450543][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.638004][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.638681][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.979746][ T4816] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 104.054231][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.054436][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.131099][ T4816] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 104.131814][ T4816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.133119][ T4816] usb 1-1: config 0 descriptor?? [ 104.134883][ T4816] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 104.575439][ T7810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.578129][ T7810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.592498][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.592713][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.942560][ T4816] gspca_stv06xx: I2C: Read error writing address: -71 [ 104.945310][ T4816] usb 1-1: USB disconnect, device number 33 [ 105.023445][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.023639][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.177357][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.178881][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.182443][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.184389][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.428949][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.429162][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.430876][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.431028][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.483704][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1207'. [ 105.790134][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.792107][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.003538][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.004110][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.013522][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.013716][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.017706][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.017894][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.208765][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.211026][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.312274][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.312987][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.351212][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.351415][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.489814][ T4840] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 106.537161][ T7876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1221'. [ 106.538107][ T7876] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1221'. [ 106.639771][ T4840] usb 1-1: Using ep0 maxpacket: 8 [ 106.642255][ T4840] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 106.644455][ T4840] usb 1-1: config 0 has an invalid descriptor of length 241, skipping remainder of the config [ 106.644478][ T4840] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 106.644489][ T4840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 45, changing to 9 [ 106.644500][ T4840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 33019, setting to 1024 [ 106.644511][ T4840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.645870][ T4840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 106.645882][ T4840] usb 1-1: Product: syz [ 106.645890][ T4840] usb 1-1: Manufacturer: syz [ 106.645897][ T4840] usb 1-1: SerialNumber: syz [ 106.652743][ T4840] usb 1-1: config 0 descriptor?? [ 106.718853][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.719454][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.722628][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.722817][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.767266][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.769696][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.856337][ T4840] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 106.856365][ T4840] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 106.875880][ T7891] netlink: 'syz.5.1229': attribute type 1 has an invalid length. [ 106.946343][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.946542][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.949369][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.949545][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.953159][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.953365][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.016916][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.018216][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.057097][ T4840] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 107.057127][ T4840] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 107.057271][ T4840] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 107.258692][ T4840] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 107.258895][ C0] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 107.258952][ T4840] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 107.259144][ T4840] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 107.265519][ T4840] usb 1-1: USB disconnect, device number 34 [ 107.347531][ T7914] syzkaller1: entered promiscuous mode [ 107.347980][ T7914] syzkaller1: entered allmulticast mode [ 107.448709][ T7931] ±ÿ: renamed from lo (while UP) [ 107.558699][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.558912][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.643667][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.643866][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.653397][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.654884][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.968392][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.968605][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.971181][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.971353][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.117698][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.120055][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.126503][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.126734][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.128111][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.128265][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.158642][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.160493][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.202816][ T4840] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.204449][ T4840] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.242137][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.242337][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.594775][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.596514][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.644810][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.646657][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.680282][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.682242][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.120240][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.120444][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.128566][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.128750][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.145648][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.145841][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.164070][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.165337][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.274092][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.275846][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.619758][ T4802] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 109.691913][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.695657][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.769974][ T4802] usb 1-1: Using ep0 maxpacket: 8 [ 109.773172][ T4802] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 109.773915][ T4802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.781350][ T4802] pvrusb2: Hardware description: Terratec Grabster AV400 [ 109.781384][ T4802] pvrusb2: ********** [ 109.781405][ T4802] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 109.781413][ T4802] pvrusb2: Important functionality might not be entirely working. [ 109.781418][ T4802] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 109.781423][ T4802] pvrusb2: ********** [ 109.784512][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.784718][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.810138][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.810395][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.815033][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.817038][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.859889][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.861714][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.980988][ T2329] pvrusb2: Invalid write control endpoint [ 109.994759][ T2329] pvrusb2: Invalid write control endpoint [ 109.994791][ T2329] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 109.994811][ T2329] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 109.994816][ T2329] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 109.994823][ T2329] pvrusb2: Device being rendered inoperable [ 109.995705][ T2329] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 109.995725][ T2329] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 109.996791][ T2329] pvrusb2: Attached sub-driver cx25840 [ 109.996798][ T2329] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 109.996804][ T2329] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 110.183149][ T4818] usb 1-1: USB disconnect, device number 35 [ 110.217916][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.221461][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.396648][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.396843][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.448734][ T3781] nci: nci_rsp_packet: unknown rsp opcode 0x400 [ 110.548966][ T8095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.596571][ T8115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.596783][ T8115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.722718][ T8119] Bluetooth: hci0: unsupported parameter 5135 [ 110.722752][ T8119] Bluetooth: hci0: unsupported parameter 8192 [ 110.722778][ T8119] Bluetooth: hci0: unsupported parameter 5135 [ 110.722788][ T8119] Bluetooth: hci0: unsupported parameter 8192 [ 110.753358][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.753559][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.989876][ T4802] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 111.016818][ T8129] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1319'. [ 111.032503][ T8131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.032693][ T8131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.139907][ T4802] usb 1-1: Using ep0 maxpacket: 32 [ 111.140869][ T4802] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 111.141567][ T4802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.141580][ T4802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.141590][ T4802] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 111.141606][ T4802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.144363][ T4802] usb 1-1: config 0 descriptor?? [ 111.276716][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.278718][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.356721][ T3781] nci: nci_rsp_packet: unknown rsp opcode 0x400 [ 111.386233][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.386447][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.444876][ T8137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.470225][ T8148] Bluetooth: hci0: unsupported parameter 5135 [ 111.470252][ T8148] Bluetooth: hci0: unsupported parameter 8192 [ 111.471231][ T8148] Bluetooth: hci0: unsupported parameter 5135 [ 111.471246][ T8148] Bluetooth: hci0: unsupported parameter 8192 [ 111.482258][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.484672][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.558004][ T4802] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0007/input/input7 [ 111.566954][ T4802] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0007/input/input8 [ 111.581361][ T4802] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 111.678443][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.678647][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.908483][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.908730][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.912798][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.915024][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.301257][ T39] nci: nci_rsp_packet: unknown rsp opcode 0x400 [ 112.393850][ T8173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.422546][ T8180] Bluetooth: hci0: unsupported parameter 5135 [ 112.423998][ T8180] Bluetooth: hci0: unsupported parameter 8192 [ 112.425533][ T8180] Bluetooth: hci0: unsupported parameter 5135 [ 112.426915][ T8180] Bluetooth: hci0: unsupported parameter 8192 [ 112.467988][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.468192][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.473232][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.475272][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.712452][ C0] kye 0003:0458:5011.0007: usb_submit_urb(ctrl) failed: -1 [ 112.872580][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.872779][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.963676][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.965381][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.126053][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.126251][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.356034][ T39] nci: nci_rsp_packet: unknown rsp opcode 0x400 [ 113.448272][ T8207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.542797][ T4818] usb 1-1: USB disconnect, device number 36 [ 113.565687][ T8222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.655574][ T8222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.726922][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.728792][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.757988][ T8222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.779932][ T4818] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 113.845628][ T8222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.940199][ T4818] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.953798][ T4818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.953828][ T4818] usb 1-1: Product: syz [ 113.953848][ T4818] usb 1-1: Manufacturer: syz [ 113.953856][ T4818] usb 1-1: SerialNumber: syz [ 113.955086][ T4818] usb 1-1: config 0 descriptor?? [ 113.959847][ T1962] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.959891][ T1962] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.959912][ T1962] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.969803][ T1962] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.162020][ T4818] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.308546][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.308809][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.317146][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.319252][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.337731][ T8249] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 114.339306][ T8249] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1365'. [ 114.376384][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.378733][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.932758][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.932978][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.993049][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.993266][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.028549][ T8281] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1381'. [ 115.338755][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.340781][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.492380][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.494814][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.521585][ T8293] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1384'. [ 115.525462][ T8293] A link change request failed with some changes committed already. Interface 04±ÿn_policy may have been left with an inconsistent configuration, please check. [ 115.544239][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.544456][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.587019][ T8299] netlink: 'syz.1.1387': attribute type 21 has an invalid length. [ 115.587051][ T8299] netlink: 'syz.1.1387': attribute type 30 has an invalid length. [ 115.608988][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.610826][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.697042][ T8313] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1395'. [ 115.773705][ T4818] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 115.776432][ T4818] usb 1-1: USB disconnect, device number 37 [ 115.934913][ T8333] netlink: 'syz.4.1404': attribute type 13 has an invalid length. [ 116.558219][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.558415][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.605779][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.606653][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.693973][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.696402][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.125360][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.127448][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.152948][ T8425] netlink: 'syz.4.1443': attribute type 3 has an invalid length. [ 117.533539][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.533742][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.573121][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.573345][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.641622][ T8464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1456'. [ 117.643299][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1456'. [ 117.644980][ T8464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1456'. [ 117.739379][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.741699][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.099085][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.099293][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.206531][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.208867][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.636765][ T8499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1474'. [ 118.638672][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1474'. [ 118.640475][ T8499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1474'. [ 118.745432][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.745632][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.949159][ T8533] netlink: 'syz.1.1493': attribute type 29 has an invalid length. [ 118.958974][ T8535] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1491'. [ 118.959009][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1491'. [ 118.959293][ T8535] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1491'. [ 119.035168][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.037831][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.038970][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.039139][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.802990][ T8555] vlan0: entered promiscuous mode [ 119.803108][ T8555] vlan0: entered allmulticast mode [ 119.803118][ T8555] veth0_vlan: entered allmulticast mode [ 119.804626][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.804791][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.839331][ T8561] netlink: 'syz.5.1506': attribute type 29 has an invalid length. [ 119.945715][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.948515][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.956598][ T8575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.956627][ T8575] IPv6: NLM_F_CREATE should be set when creating new route [ 119.956677][ T8575] IPv6: NLM_F_CREATE should be set when creating new route [ 119.956686][ T8575] IPv6: NLM_F_CREATE should be set when creating new route [ 119.984321][ T8579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.986131][ T8579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.222525][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.224563][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.428877][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.429078][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.471835][ T8584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.472049][ T8584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.568490][ T8594] netlink: 'syz.5.1520': attribute type 10 has an invalid length. [ 120.570409][ T8594] veth1_macvtap: left promiscuous mode [ 120.719681][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.721937][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.205129][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.205363][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.304392][ T8672] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.1559'. [ 121.912261][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.915786][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.073194][ T8778] netlink: 'syz.4.1612': attribute type 29 has an invalid length. [ 123.191623][ T8839] netlink: 'syz.0.1636': attribute type 9 has an invalid length. [ 123.771769][ T8862] __nla_validate_parse: 6 callbacks suppressed [ 123.771814][ T8862] netlink: 271 bytes leftover after parsing attributes in process `syz.5.1647'. [ 123.806019][ T8868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.806237][ T8868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.842724][ T8874] netlink: 'syz.5.1653': attribute type 9 has an invalid length. [ 124.087272][ T8912] netlink: 'syz.1.1669': attribute type 9 has an invalid length. [ 124.126301][ T8921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1673'. [ 124.144669][ T8923] netlink: 'syz.1.1674': attribute type 10 has an invalid length. [ 124.236730][ T8941] netlink: 'syz.5.1683': attribute type 9 has an invalid length. [ 124.372690][ T8960] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1691'. [ 124.398522][ T8968] netlink: 'syz.1.1694': attribute type 10 has an invalid length. [ 124.398559][ T8968] netlink: 'syz.1.1694': attribute type 9 has an invalid length. [ 124.399014][ T8968] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1694'. [ 124.495298][ T8989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.495508][ T8989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.364577][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.365591][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.930403][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.931760][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.079145][ T9133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.079182][ T9133] IPv6: NLM_F_CREATE should be set when creating new route [ 126.116732][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.116929][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.306664][ T9169] Bluetooth: hci0: unsupported parameter 5135 [ 126.306695][ T9169] Bluetooth: hci0: unsupported parameter 8192 [ 126.306963][ T9169] Bluetooth: hci0: unsupported parameter 5135 [ 126.306978][ T9169] Bluetooth: hci0: unsupported parameter 8192 [ 126.643446][ T9205] Bluetooth: hci0: unsupported parameter 5135 [ 126.643485][ T9205] Bluetooth: hci0: unsupported parameter 8192 [ 126.643512][ T9205] Bluetooth: hci0: unsupported parameter 5135 [ 126.643530][ T9205] Bluetooth: hci0: unsupported parameter 8192 [ 126.657212][ T9209] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1805'. [ 126.659145][ T9209] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1805'. [ 126.664878][ T9210] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1806'. [ 126.676024][ T9210] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1806'. [ 126.792795][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.794580][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.410086][ T9302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1849'. [ 127.465815][ T9309] validate_nla: 1 callbacks suppressed [ 127.466031][ T9309] netlink: 'syz.1.1852': attribute type 10 has an invalid length. [ 127.466220][ T9309] veth1_virt_wifi: entered promiscuous mode [ 127.571296][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.571511][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.672519][ T9329] loop2: detected capacity change from 0 to 128 [ 127.677281][ T9330] loop0: detected capacity change from 0 to 512 [ 127.679378][ T9330] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.687864][ T9330] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1862: inode has both inline data and extents flags [ 127.687952][ T9330] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.690853][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 127.690864][ C0] EXT4-fs (loop0): initial error at time 128: ext4_orphan_get:1399: inode 15 [ 127.690879][ C0] EXT4-fs (loop0): last error at time 128: ext4_orphan_get:1399: inode 15 [ 127.699494][ T9330] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1862: couldn't read orphan inode 15 (err -117) [ 127.702343][ T9330] loop0: lost filesystem error report for type 5 error -117 [ 127.704462][ T9330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.724035][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.765183][ T9336] loop0: detected capacity change from 0 to 8 [ 127.772979][ T9336] Filesystem uses "xz" compression. This is not supported [ 127.847561][ T9346] loop2: detected capacity change from 0 to 256 [ 127.865747][ T9348] loop4: detected capacity change from 0 to 512 [ 127.867877][ T9348] EXT4-fs (loop4): Test dummy encryption mode enabled [ 127.873083][ T9348] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1870: inode has both inline data and extents flags [ 127.873118][ T9348] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.873731][ T9348] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1870: couldn't read orphan inode 15 (err -117) [ 127.873761][ T9348] loop4: lost filesystem error report for type 5 error -117 [ 127.874645][ T9348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.901366][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.974785][ T9357] loop0: detected capacity change from 0 to 8192 [ 128.012149][ T9357] Dev loop0: RDB in block 1 has bad checksum [ 128.013205][ T9364] loop4: detected capacity change from 0 to 1024 [ 128.015357][ T9364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.022236][ T9364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.046586][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.085991][ T9372] loop4: detected capacity change from 0 to 256 [ 128.155390][ T9380] loop1: detected capacity change from 0 to 1024 [ 128.157064][ T9380] EXT4-fs: Ignoring removed bh option [ 128.196506][ T9380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.210389][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.213508][ T9386] loop0: detected capacity change from 0 to 512 [ 128.225849][ T9386] EXT4-fs (loop0): Test dummy encryption mode enabled [ 128.238552][ T9386] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1885: inode has both inline data and extents flags [ 128.238590][ T9386] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.238694][ T9386] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1885: couldn't read orphan inode 15 (err -117) [ 128.238708][ T9386] loop0: lost filesystem error report for type 5 error -117 [ 128.241479][ T9386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.257460][ T9386] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 128.293046][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.296593][ T9395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.296790][ T9395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.378396][ T9404] FAT-fs (loop0): bogus sectors per cluster 0 [ 128.378439][ T9404] FAT-fs (loop0): Can't find a valid FAT filesystem [ 128.663260][ T9430] EXT4-fs: Ignoring removed bh option [ 128.683905][ T9430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 128.695042][ T9430] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.1905: lblock 3 mapped to illegal pblock 3 (length 3) [ 128.710439][ T9430] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 128.710476][ T9430] EXT4-fs (loop5): This should not happen!! Data will be lost [ 128.710476][ T9430] [ 128.711713][ T9430] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm syz.5.1905: lblock 8 mapped to illegal pblock 8 (length 8) [ 128.723222][ T9430] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 128.723264][ T9430] EXT4-fs (loop5): This should not happen!! Data will be lost [ 128.723264][ T9430] [ 128.764601][ T6422] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 128.765425][ T6422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.788193][ T9446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.789430][ T9446] EXT4-fs: inline encryption not supported [ 128.791556][ T9446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.817380][ T9449] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 128.817488][ T9449] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1914: inode #15: comm syz.1.1914: iget: illegal inode # [ 128.817502][ T9449] loop1: lost filesystem error report for type 5 error -117 [ 128.817619][ T9449] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1914: couldn't read orphan inode 15 (err -117) [ 128.817631][ T9449] loop1: lost filesystem error report for type 5 error -117 [ 128.818184][ T9449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.849352][ T9446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.873847][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.892781][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.987314][ T9463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.029012][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.078405][ T9474] EXT4-fs: Ignoring removed nobh option [ 129.092215][ T9474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.101707][ T9474] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.102157][ T9474] EXT4-fs (loop4): 1 truncate cleaned up [ 129.102639][ T9474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.171728][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.171792][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.171969][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.256240][ T9491] EXT4-fs: Ignoring removed bh option [ 129.269330][ T9491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 129.278762][ T9491] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1929: bg 0: block 112: padding at end of block bitmap is not set [ 129.284849][ T9491] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.1929: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.288690][ T9491] EXT4-fs error (device loop4): ext4_ext_remove_space:2969: inode #15: comm syz.4.1929: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 129.312924][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.391771][ T1895] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.437643][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.439140][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.440602][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.442708][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.444805][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.464458][ T1895] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.478943][ T9514] EXT4-fs: Ignoring removed nobh option [ 129.481066][ T9514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.494419][ T9514] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #3: comm syz.4.1939: corrupted inode contents [ 129.494462][ T9514] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 129.495519][ T9514] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #3: comm syz.4.1939: mark_inode_dirty error [ 129.495535][ T9514] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 129.499739][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 129.499755][ C0] EXT4-fs (loop4): initial error at time 130: ext4_do_update_inode:5742: inode 3 [ 129.499774][ C0] EXT4-fs (loop4): last error at time 130: ext4_dirty_inode:6639: inode 3 [ 129.511860][ T9514] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #3: comm syz.4.1939: corrupted inode contents [ 129.511908][ T9514] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 129.514802][ T9514] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.1939: mark_inode_dirty error [ 129.514828][ T9514] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 129.515026][ T9514] Quota error (device loop4): write_blk: dquota write failed [ 129.515082][ T9514] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 129.515102][ T9514] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1939: Failed to acquire dquot type 0 [ 129.515114][ T9514] loop4: lost filesystem error report for type 5 error -117 [ 129.521431][ T9514] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.1939: corrupted inode contents [ 129.521455][ T9514] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 129.522509][ T9514] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.1939: mark_inode_dirty error [ 129.522529][ T9514] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 129.524005][ T9514] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.1939: corrupted inode contents [ 129.524030][ T9514] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 129.524164][ T9514] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.1939: mark_inode_dirty error [ 129.524311][ T9514] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.1939: corrupted inode contents [ 129.524445][ T9514] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 129.524454][ T9514] loop4: lost filesystem error report for type 5 error -117 [ 129.524565][ T9514] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.1939: corrupted inode contents [ 129.524730][ T9514] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.1939: mark_inode_dirty error [ 129.524891][ T9514] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 129.524901][ T9514] loop4: lost filesystem error report for type 5 error -117 [ 129.527164][ T9514] EXT4-fs (loop4): 1 truncate cleaned up [ 129.527649][ T9514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.533058][ T1895] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.579631][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.616128][ T1895] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.843106][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.843199][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.843282][ T9507] bridge_slave_0: entered allmulticast mode [ 129.846044][ T9507] bridge_slave_0: entered promiscuous mode [ 129.846922][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.846945][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.847001][ T9507] bridge_slave_1: entered allmulticast mode [ 129.849932][ T9507] bridge_slave_1: entered promiscuous mode [ 129.865287][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.866239][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.886399][ T1895] bridge_slave_1: left allmulticast mode [ 129.886440][ T1895] bridge_slave_1: left promiscuous mode [ 129.887064][ T1895] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.891581][ T1895] bridge_slave_0: left allmulticast mode [ 129.891606][ T1895] bridge_slave_0: left promiscuous mode [ 129.891685][ T1895] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.981511][ T1895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.011957][ T1895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.050801][ T1895] bond0 (unregistering): Released all slaves [ 130.055599][ T9507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.083901][ T9507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.100373][ T9507] team0: Port device team_slave_0 added [ 130.101473][ T9507] team0: Port device team_slave_1 added [ 130.115206][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.115240][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.115262][ T9507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.116234][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.116244][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.116264][ T9507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.148647][ T9507] hsr_slave_0: entered promiscuous mode [ 130.149115][ T9507] hsr_slave_1: entered promiscuous mode [ 130.149387][ T9507] debugfs: 'hsr0' already exists in 'hsr' [ 130.149406][ T9507] Cannot create hsr debugfs directory [ 130.180047][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.180274][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.304359][ T4405] 8021q: adding VLAN 0 to HW filter on device eth0 [ 130.334998][ T9507] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 130.340729][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.389109][ T9507] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 130.392784][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.395048][ T9507] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 130.401007][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.403137][ T9507] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 130.407840][ T9507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.431359][ T1895] hsr_slave_0: left promiscuous mode [ 130.432866][ T1895] hsr_slave_1: left promiscuous mode [ 130.433185][ T1895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.433210][ T1895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.437332][ T1895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.439740][ T1895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.448262][ T1895] veth1_macvtap: left promiscuous mode [ 130.448378][ T1895] veth0_macvtap: left promiscuous mode [ 130.448428][ T1895] veth1_vlan: left promiscuous mode [ 130.448473][ T1895] veth0_vlan: left promiscuous mode [ 130.559385][ T1895] team0 (unregistering): Port device team_slave_1 removed [ 130.573129][ T1895] team0 (unregistering): Port device team_slave_0 removed [ 130.630554][ T4405] 8021q: adding VLAN 0 to HW filter on device eth1 [ 130.672946][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.680726][ T9507] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.684813][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.684868][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.689483][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.689540][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.938410][ T4405] 8021q: adding VLAN 0 to HW filter on device eth2 [ 130.943442][ T9507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.043805][ T9665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.044047][ T9665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.124081][ T9507] veth0_vlan: entered promiscuous mode [ 131.130483][ T9507] veth1_vlan: entered promiscuous mode [ 131.143512][ T9507] veth0_macvtap: entered promiscuous mode [ 131.144818][ T9507] veth1_macvtap: entered promiscuous mode [ 131.154436][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.157762][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.165685][ T1895] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.165775][ T1895] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.165828][ T1895] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.201970][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.234955][ T1962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.234989][ T1962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.246419][ T3618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.246448][ T3618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.345461][ T9687] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 131.345598][ T9687] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.348585][ T9687] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 131.348745][ T9687] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.354686][ T9687] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 131.355831][ T9687] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1986: bg 0: block 15: invalid block bitmap [ 131.355858][ T9687] loop0: lost filesystem error report for type 5 error -117 [ 131.358612][ T9687] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 131.359065][ T9687] loop0: lost filesystem error report for type 5 error -117 [ 131.362090][ T9687] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.1986: data will be lost [ 131.362238][ T9687] EXT4-fs (loop0): 1 truncate cleaned up [ 131.362735][ T9687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.379422][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.439101][ T4405] 8021q: adding VLAN 0 to HW filter on device eth3 [ 131.531179][ T4722] Bluetooth: hci2: command tx timeout [ 131.636996][ T9719] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.644553][ T9719] EXT4-fs (loop4): Test dummy encryption mode enabled [ 131.655976][ T9719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.710835][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.823630][ T9739] EXT4-fs: Ignoring removed bh option [ 131.844614][ T9739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.868190][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.949458][ T9760] EXT4-fs: Ignoring removed i_version option [ 131.949493][ T9760] EXT4-fs: Ignoring removed nobh option [ 131.954791][ T9760] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.969122][ T9760] EXT4-fs (loop4): 1 truncate cleaned up [ 131.969605][ T9760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.003032][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.049824][ T9769] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.2010: corrupted xattr block 95: invalid header [ 132.050942][ T9769] EXT4-fs (loop0): Remounting filesystem read-only [ 132.050965][ T9769] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 132.051008][ T9769] EXT4-fs (loop0): 1 orphan inode deleted [ 132.051485][ T9769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.066066][ T9771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.067707][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.084937][ T9776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.096626][ T9776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 132.096737][ T9776] System zones: 1-12 [ 132.097179][ T9771] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 132.100134][ T9776] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2011: bad orphan inode 16 [ 132.100619][ T9776] ext4_test_bit(bit=15, block=4) = 0 [ 132.100637][ T9776] EXT4-fs (loop1): 1 orphan inode deleted [ 132.102199][ T9776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.124381][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.139068][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.205803][ T9791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.225456][ T9791] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 132.225491][ T9791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 132.225684][ T9791] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 132.225696][ T9791] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 132.226150][ T9791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.228938][ T9791] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.2014: dx entry: limit 65535 != root limit 120 [ 132.228957][ T9791] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2014: Corrupt directory, running e2fsck is recommended [ 132.244449][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.319371][ T9802] EXT4-fs: Ignoring removed nobh option [ 132.321723][ T9802] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.323391][ T9802] EXT4-fs (loop1): 1 truncate cleaned up [ 132.323849][ T9802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.362912][ T9809] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.372719][ T9809] EXT4-fs (loop0): shut down requested (2) [ 132.402031][ T4714] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.405722][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.523421][ T9830] EXT4-fs: Ignoring removed orlov option [ 132.546402][ T9830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.577411][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.587752][ T9835] EXT4-fs: Ignoring removed bh option [ 132.603144][ T9838] EXT4-fs: Ignoring removed bh option [ 132.605150][ T9838] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 132.616562][ T9835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.624506][ T9838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.653871][ T4725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.673264][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.757843][ T9857] set_capacity_and_notify: 30 callbacks suppressed [ 132.759216][ T9857] loop5: detected capacity change from 0 to 512 [ 132.773574][ T9860] loop4: detected capacity change from 0 to 1024 [ 132.776045][ T9857] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2045: casefold flag without casefold feature [ 132.776075][ T9857] fserror_report: 5 callbacks suppressed [ 132.776092][ T9857] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.776512][ T9857] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2045: couldn't read orphan inode 15 (err -117) [ 132.776532][ T9857] fserror_report: 1 callbacks suppressed [ 132.776539][ T9857] loop5: lost filesystem error report for type 5 error -117 [ 132.777129][ T9857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.798184][ T9857] EXT4-fs error (device loop5): __ext4_iget:5533: inode #13: block 262144: comm syz.5.2045: invalid block [ 132.811720][ T9863] loop1: detected capacity change from 0 to 256 [ 132.814920][ T6422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.817374][ T9860] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 132.821452][ T9860] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 132.821925][ T9860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.847539][ T9866] loop0: detected capacity change from 0 to 512 [ 132.859043][ T9866] EXT4-fs: Ignoring removed nobh option [ 132.870197][ T9866] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.885840][ T9866] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.887159][ T9866] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 132.889347][ T9866] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2050: attempt to clear invalid blocks 2 len 1 [ 132.893252][ T9874] loop6: detected capacity change from 0 to 512 [ 132.894533][ T9866] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 132.895228][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.899716][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 132.899756][ C0] EXT4-fs (loop0): initial error at time 133: ext4_clear_blocks:876: inode 13 [ 132.899794][ C0] EXT4-fs (loop0): last error at time 133: ext4_clear_blocks:876: inode 13 [ 132.900193][ T9866] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 132.900728][ T9866] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2050: invalid indirect mapped block 1819239214 (level 0) [ 132.900747][ T9866] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 132.907427][ T9866] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2050: invalid indirect mapped block 1819239214 (level 1) [ 132.907448][ T9866] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 132.911672][ T9866] EXT4-fs (loop0): 1 truncate cleaned up [ 132.912133][ T9866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.912954][ T9866] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.926891][ T9874] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.961988][ T9874] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.2054: Allocating blocks 41-42 which overlap fs metadata [ 132.962032][ T9874] loop6: lost filesystem error report for type 5 error -117 [ 132.965405][ T9874] EXT4-fs (loop6): Remounting filesystem read-only [ 132.965481][ T9874] Quota error (device loop6): write_blk: dquota write failed [ 132.965503][ T9874] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 132.965588][ T9874] Quota error (device loop6): write_blk: dquota write failed [ 132.965632][ T9874] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 132.965691][ T9874] EXT4-fs (loop6): 1 truncate cleaned up [ 133.046068][ T9895] loop5: detected capacity change from 0 to 128 [ 133.047884][ T9874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.062575][ T9895] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.083454][ T9507] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.125318][ T6422] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.151609][ T9905] loop5: detected capacity change from 0 to 512 [ 133.180079][ T9905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.192759][ T9905] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #2: comm syz.5.2067: corrupted inode contents [ 133.204895][ T9905] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #2: comm syz.5.2067: mark_inode_dirty error [ 133.212465][ T9905] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #2: comm syz.5.2067: corrupted inode contents [ 133.215701][ T9905] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2067: mark_inode_dirty error [ 133.224495][ T9902] loop0: detected capacity change from 0 to 8192 [ 133.227229][ T9911] loop1: detected capacity change from 0 to 128 [ 133.257300][ T6422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.265686][ T9902] Dev loop0: RDB in block 1 has bad checksum [ 133.304090][ T9918] loop5: detected capacity change from 0 to 512 [ 133.305950][ T9918] EXT4-fs: Ignoring removed nobh option [ 133.308746][ T9918] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.327222][ T9918] EXT4-fs (loop5): 1 truncate cleaned up [ 133.340541][ T9918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.402780][ T6422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.481838][ T9938] EXT4-fs: Ignoring removed nobh option [ 133.486339][ T9938] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.490196][ T9938] EXT4-fs (loop1): 1 truncate cleaned up [ 133.613156][ T4722] Bluetooth: hci2: command tx timeout [ 133.618879][ T9955] EXT4-fs: Ignoring removed oldalloc option [ 133.643038][ T9955] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.2090: Parent and EA inode have the same ino 15 [ 133.643080][ T9955] loop6: lost filesystem error report for type 5 error -117 [ 133.649725][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 133.649755][ C1] EXT4-fs (loop6): initial error at time 134: ext4_xattr_inode_iget:437 [ 133.649777][ C1] EXT4-fs (loop6): last error at time 134: ext4_xattr_inode_iget:437 [ 133.655867][ T9955] EXT4-fs (loop6): Remounting filesystem read-only [ 133.655966][ T9955] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -30) [ 133.656005][ T9955] EXT4-fs (loop6): 1 orphan inode deleted [ 133.706430][ T9964] EXT4-fs: Ignoring removed i_version option [ 133.706464][ T9964] EXT4-fs: Ignoring removed nobh option [ 133.706734][ T9964] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.711834][ T9964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 133.711904][ T9964] System zones: 1-12 [ 133.711999][ T9964] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.712195][ T9964] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.2092: corrupted in-inode xattr: overlapping e_value [ 133.712210][ T9964] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.712411][ T9964] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2092: couldn't read orphan inode 15 (err -117) [ 133.712424][ T9964] loop0: lost filesystem error report for type 5 error -117 [ 133.721643][ T9964] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #12: comm syz.0.2092: corrupted in-inode xattr: bad e_name length [ 133.739132][ T9969] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.791417][ T9981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.791455][ T9981] EXT4-fs: inline encryption not supported [ 133.791478][ T9981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.800472][ T9969] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #12: comm syz.1.2093: invalid size [ 133.849394][ T9987] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.918661][ T9989] FAT-fs (loop6): invalid media value (0x00) [ 133.918709][ T9989] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 133.918736][ T9989] FAT-fs (loop6): Can't find a valid FAT filesystem [ 133.989242][T10006] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.039686][T10012] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.048909][T10014] EXT4-fs: Ignoring removed nobh option [ 134.056580][T10016] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.2113: corrupted in-inode xattr: invalid ea_ino [ 134.056624][T10016] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.056917][T10016] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2113: couldn't read orphan inode 15 (err -117) [ 134.056935][T10016] loop0: lost filesystem error report for type 5 error -117 [ 134.079260][T10021] EXT4-fs: Ignoring removed bh option [ 134.099230][T10021] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 134.158703][T10028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.173541][T10028] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 134.188627][T10028] EXT4-fs (loop5): 1 truncate cleaned up [ 134.299115][T10044] EXT4-fs: Ignoring removed nobh option [ 134.322061][T10046] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2125: invalid indirect mapped block 256 (level 2) [ 134.322103][T10046] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.324080][T10048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.324106][T10048] EXT4-fs: inline encryption not supported [ 134.324132][T10048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.329981][T10046] EXT4-fs (loop1): 2 truncates cleaned up [ 134.336883][T10046] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2125: bg 0: block 5: invalid block bitmap [ 134.339063][T10046] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 59 with error 28 [ 134.339081][T10046] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.339081][T10046] [ 134.339089][T10046] EXT4-fs (loop1): Total free blocks count 0 [ 134.339096][T10046] EXT4-fs (loop1): Free/Dirty block details [ 134.339104][T10046] EXT4-fs (loop1): free_blocks=0 [ 134.339125][T10046] EXT4-fs (loop1): dirty_blocks=59 [ 134.339132][T10046] EXT4-fs (loop1): Block reservation details [ 134.339138][T10046] EXT4-fs (loop1): i_reserved_data_blocks=59 [ 134.342673][T10044] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.363916][T10044] EXT4-fs (loop4): 1 truncate cleaned up [ 134.370750][ T4725] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost [ 134.387738][T10048] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.2123: Freeing blocks not in datazone - block = 0, count = 16 [ 134.396821][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.397623][T10048] EXT4-fs (loop5): Remounting filesystem read-only [ 134.472762][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.525129][T10071] netlink: 'syz.6.2135': attribute type 2 has an invalid length. [ 134.525163][T10071] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.2135'. [ 135.621621][T10162] netlink: 'syz.1.2173': attribute type 10 has an invalid length. [ 135.633051][T10164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.633250][T10164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.691772][ T4722] Bluetooth: hci2: command tx timeout [ 136.206234][T10236] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2206'. [ 136.372830][T10247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2210'. [ 136.374131][T10247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2210'. [ 136.374382][T10247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2210'. [ 136.734773][T10280] netlink: 'syz.0.2225': attribute type 29 has an invalid length. [ 137.042423][T10310] C: renamed from veth1_to_team [ 137.049339][T10310] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2240'. [ 137.279902][T10333] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2250'. [ 137.298898][T10333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.330355][T10333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.344365][T10333] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 137.378147][T10348] netlink: 'syz.1.2256': attribute type 33 has an invalid length. [ 137.378180][T10348] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2256'. [ 137.381901][T10333] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.382056][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.385418][T10333] bond0 (unregistering): Released all slaves [ 137.524331][T10362] netlink: 'syz.1.2262': attribute type 19 has an invalid length. [ 137.528334][T10362] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2262'. [ 137.603487][T10375] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2268'. [ 137.769996][ T4722] Bluetooth: hci2: command tx timeout [ 138.212065][T10394] netlink: 'syz.6.2277': attribute type 21 has an invalid length. [ 138.214038][T10394] netlink: 'syz.6.2277': attribute type 6 has an invalid length. [ 138.720901][T10437] tap0: tun_chr_ioctl cmd 1074025698 [ 138.914728][T10462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.956998][T10468] netlink: 'syz.0.2312': attribute type 21 has an invalid length. [ 139.065214][T10480] C: renamed from veth1_to_team (while UP) [ 139.067102][T10480] netlink: 'syz.0.2318': attribute type 8 has an invalid length. [ 139.067356][T10480] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 139.221582][T10503] C: renamed from veth1_to_team (while UP) [ 139.226993][T10503] netlink: 'syz.6.2326': attribute type 4 has an invalid length. [ 139.228709][T10503] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 140.403987][T10608] __nla_validate_parse: 10 callbacks suppressed [ 140.404025][T10608] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2372'. [ 140.691928][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2393'. [ 141.788490][T10803] netlink: 'syz.1.2459': attribute type 13 has an invalid length. [ 141.788520][T10803] netlink: 'syz.1.2459': attribute type 4 has an invalid length. [ 141.788546][T10803] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2459'. [ 141.800539][T10803] : renamed from team0 (while UP) [ 141.975034][T10835] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2472'. [ 141.997161][T10841] netlink: 'syz.4.2476': attribute type 21 has an invalid length. [ 141.997196][T10841] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2476'. [ 142.040037][T10846] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.2478'. [ 142.063673][T10850] netlink: 'syz.4.2479': attribute type 29 has an invalid length. [ 142.072616][T10852] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2480'. [ 142.124934][T10862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'. [ 142.128192][T10862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'. [ 142.130830][T10862] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2483'. [ 142.598010][T10944] FAULT_INJECTION: forcing a failure. [ 142.598010][T10944] name failslab, interval 1, probability 10, space 0, times 0 [ 142.598047][T10944] CPU: 0 UID: 0 PID: 10944 Comm: syz.0.2514 Not tainted syzkaller #0 PREEMPT [ 142.598066][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 142.598075][T10944] Call trace: [ 142.598079][T10944] show_stack+0x2c/0x3c (C) [ 142.598099][T10944] __dump_stack+0x30/0x40 [ 142.598111][T10944] dump_stack_lvl+0xd8/0x12c [ 142.598124][T10944] dump_stack+0x1c/0x28 [ 142.598135][T10944] should_fail_ex+0x41c/0x590 [ 142.598144][T10944] should_failslab+0xc4/0x120 [ 142.598154][T10944] kmem_cache_alloc_noprof+0x94/0x5d8 [ 142.598164][T10944] vm_area_dup+0x34/0x508 [ 142.598176][T10944] __split_vma+0x1a8/0x884 [ 142.598184][T10944] vms_gather_munmap_vmas+0x3d0/0x101c [ 142.598197][T10944] mmap_region+0x710/0x1c38 [ 142.598205][T10944] do_mmap+0xa50/0xf0c [ 142.598215][T10944] vm_mmap_pgoff+0x298/0x46c [ 142.598226][T10944] ksys_mmap_pgoff+0xd0/0x5b4 [ 142.598236][T10944] __arm64_sys_mmap+0x110/0x12c [ 142.598248][T10944] invoke_syscall+0x98/0x244 [ 142.598260][T10944] el0_svc_common+0xec/0x23c [ 142.598277][T10944] do_el0_svc+0x4c/0x5c [ 142.598290][T10944] el0_svc+0x64/0x260 [ 142.598301][T10944] el0t_64_sync_handler+0x44/0x104 [ 142.598313][T10944] el0t_64_sync+0x198/0x19c [ 142.781752][T10969] bridge0: port 3(ipvlan2) entered blocking state [ 142.783470][T10969] bridge0: port 3(ipvlan2) entered disabled state [ 142.785232][T10969] ipvlan2: entered allmulticast mode [ 142.786459][T10969] bridge0: entered allmulticast mode [ 142.788617][T10969] ipvlan2: left allmulticast mode [ 142.789647][T10969] bridge0: left allmulticast mode [ 142.906643][T10984] ip_tables: iptables: counters copy to user failed while replacing table [ 143.088607][T10990] FAULT_INJECTION: forcing a failure. [ 143.088607][T10990] name fail_futex, interval 1, probability 0, space 0, times 0 [ 143.088644][T10990] CPU: 0 UID: 0 PID: 10990 Comm: syz.1.2525 Not tainted syzkaller #0 PREEMPT [ 143.088659][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 143.088666][T10990] Call trace: [ 143.088669][T10990] show_stack+0x2c/0x3c (C) [ 143.088691][T10990] __dump_stack+0x30/0x40 [ 143.088704][T10990] dump_stack_lvl+0xd8/0x12c [ 143.088717][T10990] dump_stack+0x1c/0x28 [ 143.088729][T10990] should_fail_ex+0x41c/0x590 [ 143.088738][T10990] should_fail+0x14/0x24 [ 143.088746][T10990] get_futex_key+0x1ec/0x12b0 [ 143.088756][T10990] futex_wait_setup+0x58/0x674 [ 143.088767][T10990] __futex_wait+0x108/0x25c [ 143.088777][T10990] futex_wait+0x108/0x2c0 [ 143.088788][T10990] do_futex+0x320/0x378 [ 143.088798][T10990] __arm64_sys_futex+0x2e4/0x418 [ 143.088808][T10990] invoke_syscall+0x98/0x244 [ 143.088820][T10990] el0_svc_common+0xec/0x23c [ 143.088832][T10990] do_el0_svc+0x4c/0x5c [ 143.088844][T10990] el0_svc+0x64/0x260 [ 143.088854][T10990] el0t_64_sync_handler+0x44/0x104 [ 143.088864][T10990] el0t_64_sync+0x198/0x19c [ 143.437604][T11037] netlink: 'syz.0.2547': attribute type 4 has an invalid length. [ 143.957310][T11072] set_capacity_and_notify: 17 callbacks suppressed [ 143.957528][T11072] loop5: detected capacity change from 0 to 128 [ 143.962847][T11072] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 143.962879][T11072] FAT-fs (loop5): data area starts beyond volume (36 > 6) [ 143.962904][T11072] FAT-fs (loop5): Can't find a valid FAT filesystem [ 144.009556][T11074] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 144.014499][T11074] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 144.017345][T11074] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 144.499050][T11102] syzkaller0: entered promiscuous mode [ 144.499091][T11102] syzkaller0: entered allmulticast mode [ 144.718470][T11129] evm: overlay not supported [ 145.365112][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.365174][T11182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.365306][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.365344][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.413835][T11182] netlink: 'syz.4.2603': attribute type 13 has an invalid length. [ 145.528159][T11188] 9p: Bad value for 'rfdno' [ 145.536199][T11188] overlayfs: conflicting options: userxattr,redirect_dir=on [ 145.555364][ T30] audit: type=1326 audit(146.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.4.2605" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc179228 code=0x7fc00000 [ 145.555799][ T30] audit: type=1326 audit(146.530:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.4.2605" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffbc179228 code=0x7fc00000 [ 145.557202][ T30] audit: type=1326 audit(146.530:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11185 comm="syz.4.2605" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc179228 code=0x7fc00000 [ 145.633241][T11201] Invalid ELF header magic: != ELF [ 145.962944][T11220] __nla_validate_parse: 4 callbacks suppressed [ 145.962982][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 146.077346][T11230] syzkaller0: entered promiscuous mode [ 146.077384][T11230] syzkaller0: entered allmulticast mode [ 147.436141][T11286] ±ÿn_policy: Caught tx_queue_len zero misconfig [ 147.531720][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2654'. [ 147.782466][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2663'. [ 148.027621][T11346] netlink: 'syz.6.2676': attribute type 46 has an invalid length. [ 148.159249][T11363] netlink: 'syz.6.2684': attribute type 32 has an invalid length. [ 148.159286][T11363] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2684'. [ 148.403668][T11398] syzkaller0: entered promiscuous mode [ 148.403711][T11398] syzkaller0: entered allmulticast mode [ 149.090278][T11408] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2706'. [ 149.396389][T11449] netlink: 'syz.0.2721': attribute type 46 has an invalid length. [ 149.396430][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 151.164144][T11656] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2796'. [ 151.200016][T11659] netlink: 'syz.4.2799': attribute type 46 has an invalid length. [ 151.200053][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 151.251175][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2801'. [ 151.970191][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2825'. [ 152.444595][T11755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2844'. [ 152.446348][T11755] tunl0: Caught tx_queue_len zero misconfig [ 152.547070][T11765] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 152.548557][T11765] syzkaller1: linktype set to 780 [ 152.668850][T11780] netlink: 'syz.4.2856': attribute type 5 has an invalid length. [ 152.861127][T11803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2866'. [ 153.511904][T11893] syzkaller1: entered promiscuous mode [ 153.511939][T11893] syzkaller1: entered allmulticast mode [ 153.515074][T11894] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2911'. [ 153.516762][T11894] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2911'. [ 153.595315][ T4726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.597286][ T4726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.599844][ T4726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.602008][ T4726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.603594][ T4726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.615673][ T4720] Bluetooth: hci4: command 0x2016 tx timeout [ 153.616990][ T4720] Bluetooth: hci0: command 0x0406 tx timeout [ 153.802788][T11923] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2919'. [ 154.120758][T11899] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.123497][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.123615][T11899] bridge_slave_0: entered allmulticast mode [ 154.137011][T11899] bridge_slave_0: entered promiscuous mode [ 154.137880][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.137903][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.137965][T11899] bridge_slave_1: entered allmulticast mode [ 154.138443][T11899] bridge_slave_1: entered promiscuous mode [ 154.160162][T11899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.162806][T11899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.237682][T11899] team0: Port device team_slave_0 added [ 154.241558][T11899] team0: Port device team_slave_1 added [ 154.251167][T11899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.252591][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.257661][T11899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.260667][T11899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.262024][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.266860][T11899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.317159][T11899] hsr_slave_0: entered promiscuous mode [ 154.317578][T11899] hsr_slave_1: entered promiscuous mode [ 154.317803][T11899] debugfs: 'hsr0' already exists in 'hsr' [ 154.317814][T11899] Cannot create hsr debugfs directory [ 154.348187][T11972] 8021q: VLANs not supported on ip6tnl0 [ 154.592054][T11899] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.610767][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2941'. [ 154.682782][T11999] netlink: 'syz.0.2951': attribute type 4 has an invalid length. [ 154.685212][T11899] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.840160][T11899] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.942350][T11899] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.136597][T12043] xt_ipcomp: unknown flags 1D [ 155.140651][T11899] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.143810][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.146698][T11899] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.150521][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.152300][T11899] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.158567][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.162795][T11899] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.165358][T11899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.241852][T11899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.248912][T11899] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.259389][T11899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.271760][T11899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.274900][ T1895] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.274951][ T1895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.275624][ T1895] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.275645][ T1895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.299122][T12058] veth0_to_bridge: entered promiscuous mode [ 155.445637][T12056] veth0_to_bridge: left promiscuous mode [ 155.520564][T12084] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 155.533762][T12084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.536984][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.543695][T12084] bond1: (slave dummy0): making interface the new active one [ 155.545352][T12084] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 155.550721][T12084] : renamed from dummy0 (while UP) [ 155.689809][ T4717] Bluetooth: hci5: command tx timeout [ 155.714747][T11899] veth0_vlan: entered promiscuous mode [ 155.719662][T11899] veth1_vlan: entered promiscuous mode [ 155.742475][T11899] veth0_macvtap: entered promiscuous mode [ 155.745626][T11899] veth1_macvtap: entered promiscuous mode [ 155.753871][T11899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.758535][T11899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.820642][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.820673][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.848568][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.848608][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.959943][ T1962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.961205][ T1962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.961222][ T1962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.961237][ T1962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.111882][T12115] ------------[ cut here ]------------ [ 156.111912][T12115] skb_assert_len [ 156.112119][T12115] WARNING: ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x18ec/0x2bc0, CPU#1: syz.6.2991/12115 [ 156.115387][T12115] Modules linked in: [ 156.116102][T12115] CPU: 1 UID: 0 PID: 12115 Comm: syz.6.2991 Not tainted syzkaller #0 PREEMPT [ 156.117638][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 156.119372][T12115] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 156.120710][T12115] pc : __dev_queue_xmit+0x18ec/0x2bc0 [ 156.121660][T12115] lr : __dev_queue_xmit+0x18ec/0x2bc0 [ 156.122583][T12115] sp : ffff800096667300 [ 156.123274][T12115] x29: ffff800096667550 x28: 1fffe0001ac07d9e x27: dfff800000000000 [ 156.124682][T12115] x26: ffff700012ccce78 x25: 1fffe0001ac07daa x24: ffff0000d603ecf0 [ 156.126046][T12115] x23: ffff0000fea0e000 x22: 1fffe0001ac07d92 x21: ffff80008a19d000 [ 156.127397][T12115] x20: ffff0000d603ec80 x19: ffff0000d603ec90 x18: 000000000002e30d [ 156.128684][T12115] x17: ffff80008a7d6000 x16: 0000000000000002 x15: ffff800080c9a684 [ 156.130025][T12115] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 156.131365][T12115] x11: 0000000000000000 x10: 0000000000080000 x9 : 5dd9bbf359450e00 [ 156.132736][T12115] x8 : 5dd9bbf359450e00 x7 : ffff80008048c5b8 x6 : 0000000000000000 [ 156.134132][T12115] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 156.135559][T12115] x2 : 0000000100000000 x1 : ffff0000c70557c0 x0 : 0000000000000001 [ 156.136912][T12115] Call trace: [ 156.137488][T12115] __dev_queue_xmit+0x18ec/0x2bc0 (P) [ 156.138416][T12115] packet_xmit+0x6c/0x314 [ 156.139171][T12115] packet_sendmsg+0x1858/0x3df0 [ 156.140009][T12115] __sock_sendmsg+0xc8/0x17c [ 156.140757][T12115] sock_write_iter+0x220/0x310 [ 156.141571][T12115] vfs_write+0x51c/0xa0c [ 156.142261][T12115] ksys_write+0x12c/0x228 [ 156.143030][T12115] __arm64_sys_write+0x84/0x98 [ 156.143893][T12115] invoke_syscall+0x98/0x244 [ 156.144714][T12115] el0_svc_common+0xec/0x23c [ 156.145507][T12115] do_el0_svc+0x4c/0x5c [ 156.146224][T12115] el0_svc+0x64/0x260 [ 156.146958][T12115] el0t_64_sync_handler+0x44/0x104 [ 156.147827][T12115] el0t_64_sync+0x198/0x19c [ 156.148631][T12115] irq event stamp: 288 [ 156.149310][T12115] hardirqs last enabled at (287): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 156.151140][T12115] hardirqs last disabled at (288): [] el1_brk64+0x20/0x54 [ 156.152563][T12115] softirqs last enabled at (274): [] __alloc_skb+0x1c0/0x610 [ 156.154138][T12115] softirqs last disabled at (272): [] __alloc_skb+0x1a8/0x610 [ 156.155798][T12115] ---[ end trace 0000000000000000 ]--- [ 156.184355][T12115] skb len=0 data_len=0 headroom=160 headlen=0 tailroom=224 [ 156.184355][T12115] end-tail=224 mac=(160,0) mac_len=0 net=(160,-1) trans=-1 [ 156.184355][T12115] shinfo(txflags=64 nr_frags=0 gso(size=0 type=0 segs=0)) [ 156.184355][T12115] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 156.184355][T12115] hash(0x0 sw=0 l4=0) proto=0x0003 pkttype=0 iif=0 [ 156.184355][T12115] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 156.184355][T12115] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 156.184422][T12115] dev name=tunl0 feat=0x0000000e401d4869 [ 156.185522][T12115] sk family=17 type=2 proto=0 [ 156.774175][ T3618] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.826163][ T3618] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.895192][ T3618] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.006251][ T3618] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.161165][ T3618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.225212][ T3618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.257394][ T4405] 8021q: adding VLAN 0 to HW filter on device eth4 [ 157.303519][ T3618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.397883][ T3618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.405753][ T4405] 8021q: adding VLAN 0 to HW filter on device eth5 [ 157.525868][ T3618] bridge_slave_1: left allmulticast mode [ 157.525909][ T3618] bridge_slave_1: left promiscuous mode [ 157.525992][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.532572][ T3618] bridge_slave_0: left allmulticast mode [ 157.532604][ T3618] bridge_slave_0: left promiscuous mode [ 157.532674][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.538930][ T3618] bridge_slave_1: left allmulticast mode [ 157.540077][ T3618] bridge_slave_1: left promiscuous mode [ 157.540200][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.543197][ T3618] bridge_slave_0: left allmulticast mode [ 157.543220][ T3618] bridge_slave_0: left promiscuous mode [ 157.543285][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.615289][ T3618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.642247][ T3618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.680688][ T3618] bond0 (unregistering): Released all slaves [ 157.721680][ T3618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.738284][ T3618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.741338][ T3618] bond0 (unregistering): Released all slaves [ 157.744144][ T3618] bond1 (unregistering): (slave ): Releasing active interface [ 157.781591][ T3618] bond1 (unregistering): Released all slaves [ 157.786222][ T4405] 8021q: adding VLAN 0 to HW filter on device eth6 [ 157.917923][ T4405] 8021q: adding VLAN 0 to HW filter on device eth7 [ 158.041147][ T4405] 8021q: adding VLAN 0 to HW filter on device eth8 [ 158.165169][ T4405] 8021q: adding VLAN 0 to HW filter on device eth11 [ 158.297694][ T3618] hsr_slave_0: left promiscuous mode [ 158.299032][ T3618] hsr_slave_1: left promiscuous mode [ 158.300700][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.302056][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.303751][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.305115][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.308451][ T3618] hsr_slave_0: left promiscuous mode [ 158.309763][ T3618] hsr_slave_1: left promiscuous mode [ 158.310989][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.312346][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.313978][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.313999][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.322254][ T3618] veth1_macvtap: left promiscuous mode [ 158.322301][ T3618] veth0_macvtap: left promiscuous mode [ 158.322346][ T3618] veth1_vlan: left promiscuous mode [ 158.322377][ T3618] veth0_vlan: left promiscuous mode [ 158.326095][ T3618] veth1_macvtap: left promiscuous mode [ 158.326128][ T3618] veth0_macvtap: left promiscuous mode [ 158.326177][ T3618] veth1_vlan: left promiscuous mode [ 158.326297][ T3618] veth0_vlan: left promiscuous mode [ 158.456926][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 158.466949][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 158.577484][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 158.581659][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 158.629340][ T4405] 8021q: adding VLAN 0 to HW filter on device eth9 [ 158.758561][ T4405] 8021q: adding VLAN 0 to HW filter on device eth10 [ 159.149356][ T3618] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.227206][ T3618] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.276106][ T3618] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.378228][ T3618] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.544080][ T3618] bridge_slave_1: left allmulticast mode [ 159.544117][ T3618] bridge_slave_1: left promiscuous mode [ 159.544209][ T3618] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.550336][ T3618] bridge_slave_0: left allmulticast mode [ 159.550363][ T3618] bridge_slave_0: left promiscuous mode [ 159.550436][ T3618] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.607927][ T3618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.641095][ T3618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.651860][ T3618] bond0 (unregistering): Released all slaves [ 159.784040][ T4405] 8021q: adding VLAN 0 to HW filter on device eth12 [ 159.839424][ T3618] hsr_slave_0: left promiscuous mode [ 159.840671][ T3618] hsr_slave_1: left promiscuous mode [ 159.841517][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.841531][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.842216][ T3618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.842227][ T3618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.850129][ T3618] veth1_macvtap: left promiscuous mode [ 159.851236][ T3618] veth0_macvtap: left promiscuous mode [ 159.852231][ T3618] veth1_vlan: left promiscuous mode [ 159.853179][ T3618] veth0_vlan: left promiscuous mode [ 159.951787][ T3618] team0 (unregistering): Port device team_slave_1 removed [ 159.956218][ T3618] team0 (unregistering): Port device team_slave_0 removed [ 160.008532][ T4405] 8021q: adding VLAN 0 to HW filter on device eth13 [ 160.137921][ T4405] 8021q: adding VLAN 0 to HW filter on device eth14 [ 160.267628][ T4405] 8021q: adding VLAN 0 to HW filter on device eth15