last executing test programs: 17.469566852s ago: executing program 3 (id=1790): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r4, 0x1000000, 0x0) 16.697802027s ago: executing program 0 (id=1794): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 16.517405207s ago: executing program 0 (id=1796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)='7', 0x1}, {&(0x7f0000000480)="aab900f6c010eddae22721ee26ba23", 0xf}], 0x2}, 0x0) 16.017172506s ago: executing program 3 (id=1801): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24082}, 0xa800) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000780), 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 4.883963115s ago: executing program 0 (id=1810): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.836713699s ago: executing program 0 (id=1811): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r4, 0x1000000, 0x0) 3.906524472s ago: executing program 3 (id=1820): socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0, 0x20}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) mremap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000000d000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0xef4, &(0x7f00000003c0)={0x0, 0x26c3, 0x20, 0x3, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioprio_get$uid(0x3, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) 3.375064324s ago: executing program 0 (id=1823): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000600)=0x3) sendfile(0xffffffffffffffff, r0, 0x0, 0x558410e9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x4) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) 3.348796105s ago: executing program 4 (id=1824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4c884) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.967350427s ago: executing program 2 (id=1830): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) 2.966389527s ago: executing program 2 (id=1831): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24082}, 0xa800) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000780), 0x12) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 2.946731288s ago: executing program 3 (id=1832): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r0, 0x7) 2.890716242s ago: executing program 3 (id=1833): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r4, 0x1000000, 0x0) 1.953703596s ago: executing program 4 (id=1834): r0 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/120) r1 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1000000, {0x28, 0x64, 0x2025, 0x5, 0x1, 0x0, 0x1, 0x4}}) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x50}}}}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.910021939s ago: executing program 0 (id=1835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)='7', 0x1}, {&(0x7f0000000480)="aab900f6c010eddae22721ee26ba23", 0xf}], 0x2}, 0x0) 1.812716565s ago: executing program 4 (id=1837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000700)=[@request_death], 0x0, 0x0, 0x0}) 1.778788487s ago: executing program 1 (id=1838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/145, 0x91}], 0x1, 0x0, 0x0, 0x1c) socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'lo\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000500010007000000050004000300000014000780060004404e2200000800124000000000050005000200000005e680000000000010000300686173683a69702c6d616300"], 0x92}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000cd40009800800014000000006c80002800c0001800800014000000003240001800800014000000007"], 0x140}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0xfff0) 1.71357326s ago: executing program 4 (id=1839): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) 1.601481027s ago: executing program 4 (id=1840): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r0, {0xe, 0x1}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) 1.324016403s ago: executing program 2 (id=1841): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) 1.315201463s ago: executing program 4 (id=1842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.259856697s ago: executing program 2 (id=1843): syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006e383a10d00701415cec01020301090224000100002200090423"], 0x0) 1.242841078s ago: executing program 3 (id=1844): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4c884) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 925.482147ms ago: executing program 1 (id=1845): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000600)=0x3) sendfile(0xffffffffffffffff, r0, 0x0, 0x558410e9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x4) memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) 669.610142ms ago: executing program 2 (id=1846): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000340)) 668.304402ms ago: executing program 2 (id=1847): openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdd7130870270c936a8d01020301"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r4, 0x8}, &(0x7f00000000c0)=0x8) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 73.198316ms ago: executing program 1 (id=1848): r0 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/120) r1 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1000000, {0x28, 0x64, 0x2025, 0x5, 0x1, 0x0, 0x1, 0x4}}) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x50}}}}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 47.335128ms ago: executing program 1 (id=1849): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"/2503], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.25015ms ago: executing program 1 (id=1850): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000700)=[@release], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1851): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24082}, 0xa800) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f00000017c0)=""/4096, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000780), 0x12) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'}) kernel console output (not intermixed with test programs): 34.537457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.544945][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.551055][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.552520][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.562530][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.565754][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.572971][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.575331][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.576849][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.582414][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.583924][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.585652][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.586775][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.589249][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.591004][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.592803][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.594101][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.596489][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.602368][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.606840][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.609045][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.610406][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.611990][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.613509][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.614658][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.615990][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.617548][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.619763][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.624226][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.625759][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.627247][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.628455][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.631049][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.632730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.634217][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.635340][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.643441][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.644975][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.646397][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.649762][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.651315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.652828][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.654136][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.655565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.657272][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.659482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.661040][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.662158][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.664257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.675309][ T4326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.676910][ T4326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.680818][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.682230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.683594][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.685122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.687528][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.689968][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.691490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.693002][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.694475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.695885][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.697228][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.699214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.700650][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.703760][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.711411][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.714317][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.715847][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.717392][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.722304][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.724071][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.725754][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.731925][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.737041][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.745767][ T4332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.747344][ T4332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.754844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.756489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.761715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.763458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.769118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.770678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.777527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.780751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.786265][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.790232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.791863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.793523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.795104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.799714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.805805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.807214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.810237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.822017][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.825467][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.827503][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.830725][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.831877][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.833329][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.848709][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.850737][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.853340][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.854503][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.855856][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.857559][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.864289][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.865673][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.874986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.876304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.881268][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.884966][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.887833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.891848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.893514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.901633][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.903174][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.904689][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.906094][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.907477][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.912250][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.923873][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.929752][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.931458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.944416][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.945647][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.951029][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.955014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.956686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.962034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.963453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.975115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.976386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.980407][ T4326] device veth0_vlan entered promiscuous mode [ 34.985332][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.989847][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.991499][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.995651][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.997345][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.013125][ T4326] device veth1_vlan entered promiscuous mode [ 35.023722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.025567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.027095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.030039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.032221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.037905][ T4320] device veth0_vlan entered promiscuous mode [ 35.045962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.047520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.050488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.052282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.053798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.055129][ T4321] device veth0_vlan entered promiscuous mode [ 35.065338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.067000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.075852][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.078941][ T4326] device veth0_macvtap entered promiscuous mode [ 35.081418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.083029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.084269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.086173][ T4320] device veth1_vlan entered promiscuous mode [ 35.094623][ T4326] device veth1_macvtap entered promiscuous mode [ 35.097437][ T4321] device veth1_vlan entered promiscuous mode [ 35.111893][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.113491][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.114766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.116126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.117576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.120199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.127739][ T4329] device veth0_vlan entered promiscuous mode [ 35.130892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.132498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.133879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.135390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.136815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.152267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.153950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.155991][ T4329] device veth1_vlan entered promiscuous mode [ 35.161103][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.164933][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.166363][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.167902][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.170337][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.171837][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.175576][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.181934][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.183500][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.185614][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.187175][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.190123][ T4321] device veth0_macvtap entered promiscuous mode [ 35.200059][ T4321] device veth1_macvtap entered promiscuous mode [ 35.201992][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.203435][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.204841][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.206253][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.209274][ T4320] device veth0_macvtap entered promiscuous mode [ 35.213766][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.215378][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.217008][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.221530][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.222953][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.224599][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.227661][ T4320] device veth1_macvtap entered promiscuous mode [ 35.234369][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.235967][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.237973][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.241565][ T4329] device veth0_macvtap entered promiscuous mode [ 35.242987][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.244454][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.245883][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.247426][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.249702][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.251225][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.252859][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.254292][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.258002][ T4332] device veth0_vlan entered promiscuous mode [ 35.261297][ T4332] device veth1_vlan entered promiscuous mode [ 35.267692][ T4332] device veth0_macvtap entered promiscuous mode [ 35.277869][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.279988][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.282084][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.283251][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.284773][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.286099][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.287648][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.292112][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.293748][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.295467][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.297831][ T4332] device veth1_macvtap entered promiscuous mode [ 35.307807][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.314205][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.315594][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.316876][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.321863][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.323495][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.325057][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.326750][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.330390][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.331958][ T4329] device veth1_macvtap entered promiscuous mode [ 35.337752][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.339503][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.340952][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.342540][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.361252][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.362592][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.376139][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.377614][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.380197][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.381826][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.383382][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.385006][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.387194][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.390208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.391725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.393271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.396595][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.400712][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.402169][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.403713][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.405865][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.409102][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.410801][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.412415][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.414162][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.415731][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.417456][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.420335][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.423256][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.424785][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.426324][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.427839][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.431894][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.433437][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.434858][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.436496][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.437954][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.440038][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.441483][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.443069][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.445302][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.447501][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.449976][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.451334][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.452754][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.462859][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.464611][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.467261][ T4332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.469169][ T4332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.470556][ T4332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.471983][ T4332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.474446][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.475734][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.478175][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.479065][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.479490][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.484038][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.493522][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.495059][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.496548][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.497981][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.503023][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.504770][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.506357][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.507934][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.511870][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.514512][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.515922][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.517306][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.521870][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.534040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.535797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.558832][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.560068][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.567887][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.590240][ T4429] 9pnet_fd: p9_fd_create_tcp (4429): problem connecting socket to 127.0.0.1 [ 35.629916][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.631097][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.636956][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.640689][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.641929][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.643835][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.653432][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.654724][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.656321][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.680994][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.682347][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.684691][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.686242][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.687547][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.692627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.712614][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.713882][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.715580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.780888][ T4440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.811483][ T4444] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 35.813797][ T4440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.890446][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.077320][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 36.080385][ T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 36.081611][ T7] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 36.083219][ T7] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 36.092008][ T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 36.095327][ T7] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 36.099574][ T7] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 36.112225][ T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 36.114515][ T7] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 36.116304][ T7] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 36.122653][ T7] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 36.124486][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.125890][ T7] usb 1-1: Product: syz [ 36.126622][ T7] usb 1-1: Manufacturer: syz [ 36.127430][ T7] usb 1-1: SerialNumber: syz [ 36.328913][ T47] Bluetooth: hci3: command 0x041b tx timeout [ 36.330026][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 36.331044][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 36.332116][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 36.333150][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 36.341524][ T7] adutux 1-1:168.0: interrupt endpoints not found [ 36.411377][ T4461] 9pnet_fd: p9_fd_create_tcp (4461): problem connecting socket to 127.0.0.1 [ 37.007314][ T7] usb 1-1: USB disconnect, device number 2 [ 37.103793][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 37.173994][ T4494] Bluetooth: MGMT ver 1.22 [ 37.184920][ T4493] loop2: detected capacity change from 0 to 1024 [ 38.408322][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 38.409382][ T4328] Bluetooth: hci4: command 0x040f tx timeout [ 38.410314][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 38.411235][ T4328] Bluetooth: hci2: command 0x040f tx timeout [ 38.412225][ T4328] Bluetooth: hci3: command 0x040f tx timeout [ 38.661423][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.665372][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.904348][ T4547] loop0: detected capacity change from 0 to 1024 [ 39.025094][ T4553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.027445][ T4553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.904719][ T4569] loop4: detected capacity change from 0 to 1024 [ 39.906137][ T4569] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.976686][ T4569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.983409][ T4569] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 39.987280][ T4569] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 40.001374][ T4569] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.001374][ T4569] [ 40.007021][ T4569] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.023515][ T4569] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.028406][ T4569] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.042249][ T4569] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.048912][ T4569] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.052428][ T4569] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.055018][ T4568] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.057297][ T4568] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.069014][ T4568] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #15: comm syz.4.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.110968][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.112725][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.122349][ T4332] EXT4-fs (loop4): unmounting filesystem. [ 40.488192][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 40.489233][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 40.490249][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 40.491216][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 40.492241][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 41.153121][ T4624] input: syz0 as /devices/virtual/input/input2 [ 41.575986][ T4646] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.093907][ T4726] ======================================================= [ 42.093907][ T4726] WARNING: The mand mount option has been deprecated and [ 42.093907][ T4726] and is ignored by this kernel. Remove the mand [ 42.093907][ T4726] option from the mount to silence this warning. [ 42.093907][ T4726] ======================================================= [ 42.399225][ T4729] loop0: detected capacity change from 0 to 1024 [ 43.136135][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.145938][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.285633][ T4753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 43.311816][ T4753] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.313286][ T4753] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.314536][ T4753] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.315742][ T4753] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.334973][ T4753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 43.341990][ T4753] Zero length message leads to an empty skb [ 44.371075][ T4770] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 44.373639][ T4770] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 44.526847][ T4781] loop3: detected capacity change from 0 to 1024 [ 45.905733][ T47] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 46.344915][ T4829] loop4: detected capacity change from 0 to 1024 [ 46.397883][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.487471][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.086341][ T4850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.087837][ T4850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.205805][ T4852] netlink: 148 bytes leftover after parsing attributes in process `syz.0.130'. [ 47.304562][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.306945][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.355133][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.851009][ T47] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 48.215426][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 48.235510][ T4869] device bridge_slave_1 left promiscuous mode [ 48.236592][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.259424][ T4869] device bridge_slave_0 left promiscuous mode [ 48.260423][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.494117][ T4876] tipc: Started in network mode [ 48.495035][ T4876] tipc: Node identity 84e, cluster identity 4711 [ 48.496045][ T4876] tipc: Node number set to 2126 [ 48.631668][ T4884] loop4: detected capacity change from 0 to 1024 [ 49.389647][ T4890] loop2: detected capacity change from 0 to 1024 [ 49.401752][ T4890] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.422659][ T4890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.428173][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 49.430770][ T4890] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 49.433057][ T4890] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.433057][ T4890] [ 49.613114][ T4889] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.208257][ T4889] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.212175][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.301168][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.311472][ T4889] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.319352][ T4889] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.325301][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.331671][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.340231][ T4889] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.143: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.556281][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 50.989219][ T47] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 51.415591][ T4922] mmap: syz.0.151 (4922) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.575519][ T4929] loop3: detected capacity change from 0 to 1024 [ 52.367016][ T4941] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 53.955477][ T4966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.166'. [ 54.312520][ T4982] syz.0.171 uses obsolete (PF_INET,SOCK_PACKET) [ 54.318241][ T4981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 54.372973][ T4978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.683588][ T5037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.685108][ T5037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.780068][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 57.908727][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 57.913215][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.916613][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.089028][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 58.091396][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.092973][ T14] usb 1-1: config 0 has no interfaces? [ 58.100059][ T14] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 58.102779][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.107038][ T14] usb 1-1: Product: syz [ 58.108375][ T14] usb 1-1: Manufacturer: syz [ 58.111283][ T14] usb 1-1: SerialNumber: syz [ 58.114093][ T14] usb 1-1: config 0 descriptor?? [ 58.570111][ T4381] usb 1-1: USB disconnect, device number 3 [ 59.871618][ T5085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.873277][ T5085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.982133][ T5090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'. [ 60.284284][ T5098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.291542][ T5098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.408113][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 60.530412][ T5076] 9pnet_fd: p9_fd_create_tcp (5076): problem connecting socket to 127.0.0.1 [ 60.598322][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 60.828092][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 60.831196][ T14] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 60.832672][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.834682][ T14] usb 1-1: Product: syz [ 60.835345][ T14] usb 1-1: Manufacturer: syz [ 60.836025][ T14] usb 1-1: SerialNumber: syz [ 60.841909][ T14] usb 1-1: config 0 descriptor?? [ 61.112469][ T5113] netlink: 'syz.1.216': attribute type 5 has an invalid length. [ 61.115619][ T5113] device ip6erspan0 entered promiscuous mode [ 62.764265][ T5134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 62.992520][ T14] usb 1-1: USB disconnect, device number 4 [ 64.578507][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.579708][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.870555][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.875376][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.970999][ T4370] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 65.151826][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.153634][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.156169][ T4370] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 65.157539][ T4370] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 65.160425][ T4370] usb 1-1: Manufacturer: syz [ 65.183492][ T4370] usb 1-1: config 0 descriptor?? [ 65.445888][ T5183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.238'. [ 65.918916][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.921285][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.925082][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 65.927956][ T5197] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.929522][ T5197] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.930914][ T5197] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.932309][ T5197] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.937739][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 66.244775][ T4370] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input3 [ 66.249638][ T4370] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input4 [ 66.252593][ T4370] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5 [ 66.255405][ T4370] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input6 [ 66.264469][ T4370] uclogic 0003:256C:006D.0001: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 67.262770][ T4371] usb 1-1: USB disconnect, device number 5 [ 67.772170][ T5221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.774895][ T5221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.197502][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.252'. [ 68.205783][ T5238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.209972][ T5238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.611132][ T5244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.613574][ T5244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.623435][ T5244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 68.626304][ T5244] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.627655][ T5244] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.629184][ T5244] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.630636][ T5244] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.633540][ T5244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 68.812656][ T5260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.815122][ T5260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.998084][ T14] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 69.174425][ T5265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.176058][ T5265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.182223][ T14] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 69.184003][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 69.185693][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 69.187891][ T14] usb 1-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 69.189505][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.194784][ T14] usb 1-1: config 0 descriptor?? [ 69.196524][ T5253] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.417676][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 69.418848][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 69.425038][ T14] usb 1-1: USB disconnect, device number 6 [ 69.619007][ T22] cfg80211: failed to load regulatory.db [ 69.642031][ T5276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 70.598055][ T4381] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 70.778070][ T4381] usb 1-1: Using ep0 maxpacket: 16 [ 70.781552][ T4381] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 70.782994][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.784250][ T4381] usb 1-1: Product: syz [ 70.784907][ T4381] usb 1-1: Manufacturer: syz [ 70.785634][ T4381] usb 1-1: SerialNumber: syz [ 70.788154][ T4381] usb 1-1: config 0 descriptor?? [ 70.799124][ T4381] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 71.026480][ T5294] IPv6: ADDRCONF(NETDEV_CHANGE): rose3: link becomes ready [ 71.129183][ T5312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.133910][ T5312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.177152][ T5310] netlink: 'syz.2.275': attribute type 5 has an invalid length. [ 71.216686][ T5310] device ip6erspan0 entered promiscuous mode [ 71.230929][ T5316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.280'. [ 71.426461][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.427954][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.624131][ T4381] ssu100: probe of 1-1:0.0 failed with error -71 [ 71.629963][ T4381] usb 1-1: USB disconnect, device number 7 [ 71.783656][ T5320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.789772][ T5320] device bond_slave_0 entered promiscuous mode [ 71.790795][ T5320] device bond_slave_1 entered promiscuous mode [ 71.792659][ T5320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.794889][ T5320] bond1: (slave macvlan2): making interface the new active one [ 71.796929][ T5320] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 71.809057][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 71.865692][ T5327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 72.185504][ T5345] 9pnet_virtio: no channels available for device 127.0.0.1 [ 72.556823][ T5352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.558989][ T5352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.563111][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.291'. [ 73.072846][ T5376] 9pnet_virtio: no channels available for device 127.0.0.1 [ 73.170382][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 73.177432][ T5381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 73.349350][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.351159][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.352572][ T14] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 73.353952][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.356656][ T14] usb 1-1: config 0 descriptor?? [ 73.431001][ T5391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.432695][ T5391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.440619][ T5391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 73.444263][ T5391] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.445782][ T5391] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.447293][ T5391] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.448962][ T5391] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.452379][ T5391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 73.765712][ T14] hid-led 0003:0FC5:B080.0002: unknown main item tag 0x0 [ 74.004293][ T14] hid-led: probe of 0003:0FC5:B080.0002 failed with error -71 [ 74.036141][ T14] usb 1-1: USB disconnect, device number 8 [ 74.171279][ T5399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.311'. [ 74.323772][ T5407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.325384][ T5407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.388270][ C0] vxcan0: j1939_tp_rxtimer: 0x00000000695a215b: rx timeout, send abort [ 74.533876][ T5409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'. [ 74.620832][ T5413] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 74.622189][ T5413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.623573][ T5413] IPv6: NLM_F_CREATE should be set when creating new route [ 74.624778][ T5413] IPv6: NLM_F_CREATE should be set when creating new route [ 74.685511][ T5419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.687600][ T5419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.890226][ C0] vxcan0: j1939_tp_rxtimer: 0x00000000695a215b: abort rx timeout. Force session deactivation [ 75.594119][ T5428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.595575][ T5428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.611685][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 75.613558][ T5428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 76.338541][ T5442] 9pnet_virtio: no channels available for device 127.0.0.1 [ 76.373401][ T5444] xt_hashlimit: size too large, truncated to 1048576 [ 76.595802][ T5459] __nla_validate_parse: 1 callbacks suppressed [ 76.595813][ T5459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.333'. [ 77.602839][ T5470] 9pnet_virtio: no channels available for device 127.0.0.1 [ 77.763059][ T5476] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 77.764245][ T5476] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 77.766553][ T5476] vhci_hcd vhci_hcd.0: Device attached [ 77.789536][ T5476] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 77.790616][ T5476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 77.792597][ T5476] vhci_hcd vhci_hcd.0: Device attached [ 77.797120][ T5479] vhci_hcd: connection closed [ 77.800475][ T4414] vhci_hcd: stop threads [ 77.802106][ T4414] vhci_hcd: release socket [ 77.802764][ T4414] vhci_hcd: disconnect device [ 77.803817][ T5477] vhci_hcd: connection closed [ 77.805645][ T4414] vhci_hcd: stop threads [ 77.807070][ T4414] vhci_hcd: release socket [ 77.807742][ T4414] vhci_hcd: disconnect device [ 77.869729][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 77.951665][ T5490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.953890][ T5490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.068058][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 78.070083][ T24] usb 1-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config [ 78.071636][ T24] usb 1-1: config 152 has 0 interfaces, different from the descriptor's value: 1 [ 78.074307][ T24] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 78.075610][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.076761][ T24] usb 1-1: Product: syz [ 78.077390][ T24] usb 1-1: Manufacturer: syz [ 78.078747][ T24] usb 1-1: SerialNumber: syz [ 78.755299][ T5497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 78.764840][ T5497] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.766196][ T5497] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.767519][ T5497] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.768988][ T5497] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.773306][ T5497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.338'. [ 78.777813][ T5499] 9pnet_virtio: no channels available for device 127.0.0.1 [ 80.160790][ T5518] netlink: 68 bytes leftover after parsing attributes in process `syz.3.354'. [ 80.347635][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.350174][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.582840][ T14] usb 1-1: USB disconnect, device number 9 [ 80.605470][ T5533] 9pnet_virtio: no channels available for device 127.0.0.1 [ 80.691623][ T5543] netlink: 68 bytes leftover after parsing attributes in process `syz.0.365'. [ 80.813556][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 80.972944][ T5555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.975378][ T5555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.979312][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 80.981227][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 80.983802][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 80.985658][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 81.380903][ T5562] 9pnet_virtio: no channels available for device 127.0.0.1 [ 81.427121][ T5564] nvme_fabrics: missing parameter 'transport=%s' [ 81.429172][ T5564] nvme_fabrics: missing parameter 'nqn=%s' [ 81.488669][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 81.647314][ T5581] IPv6: ADDRCONF(NETDEV_CHANGE): rose4: link becomes ready [ 81.678103][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 81.680835][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.682468][ T14] usb 1-1: config 0 has no interfaces? [ 81.684591][ T14] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 81.686111][ T14] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 81.687369][ T14] usb 1-1: Product: syz [ 81.687993][ T14] usb 1-1: SerialNumber: syz [ 81.871173][ T14] usb 1-1: config 0 descriptor?? [ 82.293308][ T5602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.295573][ T5602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.344177][ T4370] usb 1-1: USB disconnect, device number 10 [ 82.479849][ T5610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.482651][ T5610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.526978][ T5610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 82.528877][ T5610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 82.530675][ T5610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 82.532326][ T5610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 82.876337][ T5591] 9pnet_fd: p9_fd_create_tcp (5591): problem connecting socket to 127.0.0.1 [ 83.647205][ T5637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.662971][ T5637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.703487][ T5640] 9pnet_fd: p9_fd_create_tcp (5640): problem connecting socket to 127.0.0.1 [ 83.741039][ T5644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.742734][ T5644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.785098][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 83.787451][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 83.793026][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 83.794625][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'. [ 83.938076][ T4322] Bluetooth: hci1: command 0x0406 tx timeout [ 85.545079][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.546967][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.557119][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 85.560024][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 85.648562][ T5669] 9pnet_fd: p9_fd_create_tcp (5669): problem connecting socket to 127.0.0.1 [ 86.626937][ T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 86.671234][ T5720] 9pnet_fd: p9_fd_create_tcp (5720): problem connecting socket to 127.0.0.1 [ 86.848360][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 86.851223][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.852885][ T14] usb 1-1: config 0 has no interfaces? [ 86.855357][ T14] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 86.856844][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.858930][ T14] usb 1-1: Product: syz [ 86.859585][ T14] usb 1-1: Manufacturer: syz [ 86.860361][ T14] usb 1-1: SerialNumber: syz [ 86.862753][ T14] usb 1-1: config 0 descriptor?? [ 87.204738][ T5733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.206751][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.207275][ T5733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.212862][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.250297][ T7] usb 1-1: USB disconnect, device number 11 [ 87.448121][ T4322] Bluetooth: hci2: command 0x2016 tx timeout [ 88.086463][ T5771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'. [ 88.454529][ T5764] netlink: 'syz.3.444': attribute type 5 has an invalid length. [ 88.531735][ T5764] device ip6erspan0 entered promiscuous mode [ 88.657045][ T5752] 9pnet_fd: p9_fd_create_tcp (5752): problem connecting socket to 127.0.0.1 [ 88.717456][ T5782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.720722][ T5782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.026228][ T5804] 9pnet_fd: p9_fd_create_tcp (5804): problem connecting socket to 127.0.0.1 [ 89.337581][ T47] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 89.522324][ T5821] netlink: 'syz.2.466': attribute type 5 has an invalid length. [ 91.270671][ T5865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.272504][ T5865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.469524][ T5844] 9pnet_fd: p9_fd_create_tcp (5844): problem connecting socket to 127.0.0.1 [ 91.983543][ T5883] netlink: 'syz.0.489': attribute type 5 has an invalid length. [ 91.986789][ T5883] device ip6erspan0 entered promiscuous mode [ 92.034919][ T47] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 92.486334][ T5903] 9pnet_fd: p9_fd_create_tcp (5903): problem connecting socket to 127.0.0.1 [ 92.632194][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.634998][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.131109][ T5929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.132795][ T5929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.136845][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 93.142074][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 93.642836][ T47] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 93.953304][ T5951] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.554147][ T5979] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.925036][ T5982] device syzkaller1 entered promiscuous mode [ 95.264046][ T47] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 95.302091][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.304932][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.963547][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 96.297806][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 96.395976][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.403405][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.650141][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.652700][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.910700][ T47] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 97.216025][ T6048] 9pnet_fd: p9_fd_create_tcp (6048): problem connecting socket to 127.0.0.1 [ 98.211267][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.213783][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.263689][ T6107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.266046][ T6107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.907723][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 99.176987][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 99.241900][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.244057][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.357635][ T47] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 99.572903][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.576361][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.937109][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.940426][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.997407][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.002659][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.609350][ T6171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.612582][ T6171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.781841][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.602'. [ 101.330330][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 101.332837][ T47] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 101.508113][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 101.511596][ T14] usb 1-1: config 152 has an invalid descriptor of length 0, skipping remainder of the config [ 101.513342][ T14] usb 1-1: config 152 has 0 interfaces, different from the descriptor's value: 1 [ 101.516652][ T14] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 101.520837][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.522028][ T14] usb 1-1: Product: syz [ 101.522643][ T14] usb 1-1: Manufacturer: syz [ 101.523297][ T14] usb 1-1: SerialNumber: syz [ 101.902070][ T6177] 9pnet_fd: p9_fd_create_tcp (6177): problem connecting socket to 127.0.0.1 [ 101.942469][ T6200] loop3: detected capacity change from 0 to 1024 [ 102.360250][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.361755][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.369428][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 102.371404][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'. [ 103.883102][ T47] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 103.911876][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.915639][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.090784][ T4371] usb 1-1: USB disconnect, device number 12 [ 104.175299][ T6247] loop0: detected capacity change from 0 to 1024 [ 104.282763][ T6251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.284241][ T6251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.775318][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.776978][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.082212][ T6267] binder: 6265:6267 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 105.085711][ T6267] binder: 6267 RLIMIT_NICE not set [ 105.162698][ T6272] binder: 6265:6272 tried to acquire reference to desc 0, got 1 instead [ 105.168784][ T6267] binder: 6267 RLIMIT_NICE not set [ 105.171479][ T6267] binder: release 6265:6267 transaction 12 in, still active [ 105.173321][ T6267] binder: send failed reply for transaction 12 to 6265:6272 [ 105.190964][ T7] binder: release 6265:6272 transaction 5 out, still active [ 105.192891][ T7] binder: undelivered TRANSACTION_COMPLETE [ 105.194341][ T7] binder: undelivered TRANSACTION_COMPLETE [ 105.195423][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 105.196507][ T7] binder: send failed reply for transaction 5, target dead [ 105.390567][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.393436][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.963019][ T47] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 106.233963][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.240911][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.249929][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.269736][ T6303] loop4: detected capacity change from 0 to 1024 [ 106.288707][ T6299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.198123][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 107.398091][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 107.399398][ T14] usb 1-1: no configurations [ 107.400174][ T14] usb 1-1: can't read configurations, error -22 [ 107.558069][ T14] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 107.738085][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 107.739321][ T14] usb 1-1: no configurations [ 107.739986][ T14] usb 1-1: can't read configurations, error -22 [ 107.741097][ T14] usb usb1-port1: attempt power cycle [ 108.158188][ T14] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 108.409682][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 108.411967][ T14] usb 1-1: no configurations [ 108.412760][ T14] usb 1-1: can't read configurations, error -22 [ 108.558138][ T14] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 108.588581][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 108.590109][ T14] usb 1-1: no configurations [ 108.590934][ T14] usb 1-1: can't read configurations, error -22 [ 108.592067][ T14] usb usb1-port1: unable to enumerate USB device [ 109.175122][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.180185][ T6348] loop2: detected capacity change from 0 to 1024 [ 109.181503][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.712020][ T6357] binder: 6356:6357 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 109.714307][ T6357] binder: 6357 RLIMIT_NICE not set [ 109.770456][ T6358] binder: tried to use weak ref as strong ref [ 109.772779][ T6358] binder: 6356:6358 Acquire 1 refcount change on invalid ref 0 ret -22 [ 109.777319][ T6358] binder: 6356:6358 got transaction to invalid handle, 1 [ 109.778672][ T6358] binder: 6358:6356 cannot find target node [ 109.779605][ T6358] binder: 6356:6358 transaction call to 0:0 failed 15/29201/-22, size 72-24 line 3045 [ 109.786779][ T6358] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.941651][ T6362] device syzkaller1 entered promiscuous mode [ 110.111361][ T6368] device syzkaller0 entered promiscuous mode [ 110.311841][ T6382] tipc: Started in network mode [ 110.312745][ T6382] tipc: Node identity ac14140f, cluster identity 4711 [ 110.314720][ T6382] tipc: New replicast peer: 255.255.255.255 [ 110.316047][ T6382] tipc: Enabled bearer , priority 10 [ 110.351904][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.354314][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.370067][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.372646][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.520690][ T6389] loop1: detected capacity change from 0 to 1024 [ 110.594497][ T6391] device syzkaller1 entered promiscuous mode [ 111.208173][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 111.217066][ T6415] binder: 6414:6415 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 111.219501][ T6415] binder: 6415 RLIMIT_NICE not set [ 111.271338][ T6416] binder: tried to use weak ref as strong ref [ 111.272490][ T6416] binder: 6414:6416 Acquire 1 refcount change on invalid ref 0 ret -22 [ 111.274136][ T6416] binder: 6414:6416 got transaction to invalid handle, 1 [ 111.275398][ T6416] binder: 6416:6414 cannot find target node [ 111.276285][ T6416] binder: 6414:6416 transaction call to 0:0 failed 18/29201/-22, size 72-24 line 3045 [ 111.279519][ T6416] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.429010][ T4371] tipc: Node number set to 2886997007 [ 111.461303][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.463671][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.564267][ T6425] device syzkaller1 entered promiscuous mode [ 111.674927][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): rose1: link becomes ready [ 111.814401][ T6434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.817146][ T6434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.086310][ T6441] device syzkaller0 entered promiscuous mode [ 112.123525][ T6445] loop3: detected capacity change from 0 to 1024 [ 112.418123][ T4322] Bluetooth: hci2: command 0x0409 tx timeout [ 112.956574][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.960923][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.172860][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.174328][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.630717][ T6492] loop2: detected capacity change from 0 to 1024 [ 114.358079][ T7] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 114.516451][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.518859][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.541589][ T7] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 114.542918][ T7] usb 1-1: config 0 has no interface number 0 [ 114.543901][ T7] usb 1-1: config 0 interface 29 has no altsetting 0 [ 114.546584][ T7] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 114.548118][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.549373][ T7] usb 1-1: Product: syz [ 114.550037][ T7] usb 1-1: Manufacturer: syz [ 114.550726][ T7] usb 1-1: SerialNumber: syz [ 114.552355][ T7] usb 1-1: config 0 descriptor?? [ 114.756533][ T7] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v184 fw v210.0.0 (2 channels) [ 114.911553][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.916389][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.960994][ T7] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 114.962433][ T7] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 114.998910][ T7] peak_usb: probe of 1-1:0.29 failed with error -71 [ 115.008938][ T7] usb 1-1: USB disconnect, device number 17 [ 115.459865][ T6539] loop1: detected capacity change from 0 to 1024 [ 115.768192][ T4322] Bluetooth: hci1: command 0x0409 tx timeout [ 116.112071][ T6561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.114154][ T6561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.300085][ T6572] ptrace attach of "./syz-executor exec"[4329] was attempted by "  "[6572] [ 116.760408][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.757'. [ 117.006672][ T6606] netlink: 'syz.3.759': attribute type 2 has an invalid length. [ 117.093016][ T6609] loop4: detected capacity change from 0 to 1024 [ 117.128682][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 117.515621][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.517064][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.678232][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.680348][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.073086][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 118.266198][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.267761][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.281562][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.285261][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.493369][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.495346][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.859194][ T6660] loop0: detected capacity change from 0 to 1024 [ 119.272565][ T4322] Bluetooth: hci0: command 0x0409 tx timeout [ 119.360535][ T6672] netlink: 160 bytes leftover after parsing attributes in process `syz.3.786'. [ 119.451151][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.454364][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.722962][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 119.828237][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.830911][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.834862][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 119.837602][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 120.084197][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.086788][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.098097][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 120.654548][ T6720] loop3: detected capacity change from 0 to 1024 [ 120.681408][ T6724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.722750][ T6723] netlink: 'syz.2.806': attribute type 10 has an invalid length. [ 120.736348][ T6724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.741604][ T6723] team0: Port device dummy0 added [ 121.107825][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.120277][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.282560][ T6735] binder: 6734:6735 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 121.286748][ T6735] binder: 6735 RLIMIT_NICE not set [ 121.344228][ T6736] binder: 6734:6736 tried to acquire reference to desc 0, got 1 instead [ 121.350229][ T6736] binder_alloc: 6734: binder_alloc_buf, no vma [ 121.353540][ T6736] binder: cannot allocate buffer: vma cleared, target dead or dying [ 121.353585][ T6736] binder: 6734:6736 transaction call to 6734:0 failed 30/29189/-3, size 0-0 line 3230 [ 121.359649][ T6736] binder: release 6734:6736 transaction 23 out, still active [ 121.362838][ T6736] binder: undelivered TRANSACTION_COMPLETE [ 121.378147][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 121.537870][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.541402][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.558503][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 121.560555][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 121.638451][ T6742] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 121.768924][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.770999][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.095033][ T6747] netlink: 'syz.4.815': attribute type 10 has an invalid length. [ 122.096811][ T6747] netlink: 'syz.4.815': attribute type 10 has an invalid length. [ 122.113120][ T4370] binder: undelivered TRANSACTION_ERROR: 29189 [ 122.114078][ T4370] binder: send failed reply for transaction 23, target dead [ 122.162146][ T6753] device syzkaller0 entered promiscuous mode [ 122.247067][ T6755] xt_policy: output policy not valid in PREROUTING and INPUT [ 122.286958][ T6755] netlink: 76 bytes leftover after parsing attributes in process `syz.4.816'. [ 122.547122][ T6768] loop3: detected capacity change from 0 to 1024 [ 123.194123][ T6777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.197347][ T6777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.539037][ T6788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.541079][ T6788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.826965][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.828662][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.085698][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.088389][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.061375][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.062959][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.237121][ T6830] device syzkaller0 entered promiscuous mode [ 125.662831][ T6837] binder: 6836:6837 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 125.664869][ T6837] binder: 6837 RLIMIT_NICE not set [ 125.671063][ T6839] bridge0: port 3(erspan0) entered blocking state [ 125.672425][ T6839] bridge0: port 3(erspan0) entered disabled state [ 125.675138][ T6839] device erspan0 entered promiscuous mode [ 125.676378][ T6839] bridge0: port 3(erspan0) entered blocking state [ 125.677570][ T6839] bridge0: port 3(erspan0) entered forwarding state [ 125.686187][ T6839] device erspan0 left promiscuous mode [ 125.693083][ T6839] bridge0: port 3(erspan0) entered disabled state [ 125.714511][ T6844] binder: 6836:6844 tried to acquire reference to desc 0, got 1 instead [ 125.716644][ T6844] binder: 6836:6844 got transaction to invalid handle, 3 [ 125.727290][ T6844] binder: 6844:6836 cannot find target node [ 125.733400][ T6844] binder: 6836:6844 transaction call to 0:0 failed 35/29201/-22, size 0-0 line 3045 [ 125.931534][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932790][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.498972][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.561705][ T6864] device syzkaller0 entered promiscuous mode [ 126.911769][ T6891] xt_hashlimit: size too large, truncated to 1048576 [ 127.013545][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.015963][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.019638][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 127.021400][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 128.344968][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'. [ 128.469106][ T6933] device syzkaller0 entered promiscuous mode [ 128.515981][ T6939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.518928][ T6939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.720740][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.723576][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.147509][ T6996] device syzkaller0 entered promiscuous mode [ 131.601240][ T7051] device syzkaller0 entered promiscuous mode [ 132.232921][ T7069] netlink: 'syz.4.920': attribute type 4 has an invalid length. [ 132.253617][ T7069] netlink: 'syz.4.920': attribute type 4 has an invalid length. [ 132.304612][ T7076] fuse: Bad value for 'fd' [ 132.306053][ T7076] netlink: 'syz.4.922': attribute type 4 has an invalid length. [ 132.317287][ T7076] netlink: 'syz.4.922': attribute type 4 has an invalid length. [ 132.506411][ T7090] device syzkaller0 entered promiscuous mode [ 132.550043][ T7093] device syzkaller0 entered promiscuous mode [ 133.436685][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.438367][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.450690][ T7126] device syzkaller1 entered promiscuous mode [ 133.493497][ T7129] device syzkaller0 entered promiscuous mode [ 133.668703][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'. [ 133.737866][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.740495][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.829634][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.832529][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.989268][ T7156] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.367501][ T7169] device syzkaller0 entered promiscuous mode [ 134.534888][ T7175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.960'. [ 134.787822][ T7188] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 134.796233][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.799647][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.905405][ T7204] device syzkaller0 entered promiscuous mode [ 134.969001][ T7207] device syzkaller1 entered promiscuous mode [ 135.295283][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.975'. [ 135.733014][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 135.784029][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.789564][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.140951][ T7246] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 136.387861][ T7253] device syzkaller1 entered promiscuous mode [ 136.666982][ T7260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.987'. [ 136.722081][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.724883][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.630275][ T7289] device syzkaller1 entered promiscuous mode [ 137.754521][ T7292] loop1: detected capacity change from 0 to 1024 [ 137.852832][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.998'. [ 138.281421][ T7307] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 138.701954][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.703370][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.842019][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.843668][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.224156][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1009'. [ 139.243284][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.245950][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.491009][ T7345] loop3: detected capacity change from 0 to 1024 [ 139.955325][ T7351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.958277][ T7351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.712220][ T7365] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.167431][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.180085][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.569542][ T7397] loop3: detected capacity change from 0 to 1024 [ 143.036227][ T7424] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 143.108824][ T7428] device syzkaller0 entered promiscuous mode [ 143.584943][ T7445] loop3: detected capacity change from 0 to 1024 [ 144.080230][ T7452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.082875][ T7452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.088938][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 144.091770][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 144.470625][ T7465] device syzkaller0 entered promiscuous mode [ 145.111344][ T7479] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.112810][ T7480] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 145.510180][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 145.575303][ T7491] loop4: detected capacity change from 0 to 1024 [ 146.100419][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.102073][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.105699][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 146.107570][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 146.122294][ T7497] input: syz0 as /devices/virtual/input/input7 [ 146.326761][ T7507] netlink: 'syz.3.1066': attribute type 5 has an invalid length. [ 147.126177][ T7528] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 147.290354][ T4322] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 147.567670][ T7539] input: syz0 as /devices/virtual/input/input8 [ 147.798862][ T7545] loop0: detected capacity change from 0 to 1024 [ 148.283207][ T7553] process 'syz.3.1080' launched '/dev/fd/4' with NULL argv: empty string added [ 148.840803][ T7576] netlink: 'syz.1.1083': attribute type 5 has an invalid length. [ 149.017103][ T7583] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 149.684250][ T7598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.720565][ T7598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.737001][ T4322] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 150.003773][ T7618] device syzkaller0 entered promiscuous mode [ 150.282400][ T7627] netlink: 'syz.2.1104': attribute type 5 has an invalid length. [ 151.034606][ T7636] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 151.242601][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.247697][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.360160][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.371028][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.569648][ T7657] binder: 7656:7657 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 151.571578][ T7657] binder: 7657 RLIMIT_NICE not set [ 151.626701][ T7658] binder: tried to use weak ref as strong ref [ 151.627797][ T7658] binder: 7656:7658 Acquire 1 refcount change on invalid ref 0 ret -22 [ 151.629859][ T7658] binder: 7656:7658 got transaction to invalid handle, 1 [ 151.637413][ T7658] binder: 7658:7656 cannot find target node [ 151.638608][ T7658] binder: 7656:7658 transaction call to 0:0 failed 38/29201/-22, size 72-24 line 3045 [ 151.640861][ T7658] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.812411][ T7664] device syzkaller0 entered promiscuous mode [ 152.120072][ T7674] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1124'. [ 153.052821][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.055622][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.122001][ T7712] binder: 7711:7712 tried to acquire reference to desc 0, got 1 instead [ 153.124440][ T7712] binder: release 7711:7712 transaction 43 out, still active [ 153.125547][ T7712] binder: undelivered TRANSACTION_COMPLETE [ 153.136008][ T1964] binder: send failed reply for transaction 50 to 7711:7712 [ 153.137450][ T1964] binder: undelivered TRANSACTION_COMPLETE [ 153.138782][ T1964] binder: undelivered TRANSACTION_ERROR: 29189 [ 153.139752][ T1964] binder: send failed reply for transaction 43, target dead [ 153.349435][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.350945][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.354380][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 153.363079][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 153.557374][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.559708][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.607498][ T7737] binder: 7736:7737 tried to acquire reference to desc 0, got 1 instead [ 153.609346][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 153.613203][ T7737] binder: release 7736:7737 transaction 55 out, still active [ 154.376041][ T7765] binder: 7763:7765 tried to acquire reference to desc 0, got 1 instead [ 154.528669][ T7770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.530919][ T7770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.535081][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 154.536963][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 154.814559][ T7772] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1167'. [ 154.968861][ T27] audit: type=1326 audit(154.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f975928 code=0x7ffc0000 [ 154.972393][ T27] audit: type=1326 audit(154.960:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f975928 code=0x7ffc0000 [ 154.980842][ T27] audit: type=1326 audit(154.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=38 compat=0 ip=0xffff8f975928 code=0x7ffc0000 [ 154.984290][ T27] audit: type=1326 audit(154.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f975928 code=0x7ffc0000 [ 155.430470][ T4322] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 155.621788][ T7800] xt_CT: No such helper "pptp" [ 155.640968][ T7800] loop7: detected capacity change from 0 to 7 [ 155.645885][ T4314] Dev loop7: unable to read RDB block 7 [ 155.647163][ T4314] loop7: unable to read partition table [ 155.648196][ T4314] loop7: partition table beyond EOD, truncated [ 155.652180][ T7800] Dev loop7: unable to read RDB block 7 [ 155.653251][ T7800] loop7: unable to read partition table [ 155.654438][ T7800] loop7: partition table beyond EOD, truncated [ 155.655507][ T7800] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 155.666474][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.670638][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.002658][ T7806] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1178'. [ 156.502488][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.507291][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.518302][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 156.523311][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 157.234220][ T47] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 157.413761][ T7842] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1189'. [ 157.465498][ T7846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.489434][ T7846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.576156][ T7853] sctp: [Deprecated]: syz.0.1194 (pid 7853) Use of int in max_burst socket option deprecated. [ 157.576156][ T7853] Use struct sctp_assoc_value instead [ 158.682798][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.685259][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.691490][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 158.695361][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 158.703894][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1201'. [ 158.734027][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 158.735654][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 158.736569][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 158.737515][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 158.738569][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 159.356426][ T7902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.359322][ T7902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.627228][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 160.432544][ T7937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.435193][ T7937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.441895][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 160.443730][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 160.855506][ C0] vxcan0: j1939_tp_rxtimer: 0x000000004d3954c3: rx timeout, send abort [ 160.989030][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'. [ 160.995993][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.997908][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.356914][ C0] vxcan0: j1939_tp_rxtimer: 0x000000004d3954c3: abort rx timeout. Force session deactivation [ 162.033427][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.036079][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.272834][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'. [ 162.481643][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.485719][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.275675][ T8033] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 163.345484][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 163.673830][ C1] vxcan0: j1939_tp_rxtimer: 0x0000000035f85316: rx timeout, send abort [ 164.079619][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1264'. [ 164.175220][ C1] vxcan0: j1939_tp_rxtimer: 0x0000000035f85316: abort rx timeout. Force session deactivation [ 164.794568][ T8095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.216813][ T8098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1275'. [ 166.282037][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1286'. [ 166.427851][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.430669][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.433529][ T4322] Bluetooth: hci1: unexpected subevent 0x03 length: 244 > 9 [ 166.472673][ T8130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1289'. [ 166.474116][ T8130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1289'. [ 166.475440][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.482683][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.750303][ C0] vxcan0: j1939_tp_rxtimer: 0x0000000028de6d4d: rx timeout, send abort [ 167.251783][ C0] vxcan0: j1939_tp_rxtimer: 0x0000000028de6d4d: abort rx timeout. Force session deactivation [ 167.441674][ T27] audit: type=1326 audit(167.430:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb837581c code=0x7ffc0000 [ 167.445551][ T27] audit: type=1326 audit(167.430:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7575928 code=0x7ffc0000 [ 167.455977][ T27] audit: type=1326 audit(167.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb837581c code=0x7ffc0000 [ 167.462367][ T27] audit: type=1326 audit(167.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7575928 code=0x7ffc0000 [ 167.466094][ T27] audit: type=1326 audit(167.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb837581c code=0x7ffc0000 [ 167.469886][ T27] audit: type=1326 audit(167.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7575928 code=0x7ffc0000 [ 167.473576][ T27] audit: type=1326 audit(167.440:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb837581c code=0x7ffc0000 [ 167.477090][ T27] audit: type=1326 audit(167.440:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb837581c code=0x7ffc0000 [ 167.483286][ T27] audit: type=1326 audit(167.440:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb837581c code=0x7ffc0000 [ 167.486568][ T27] audit: type=1326 audit(167.440:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7575928 code=0x7ffc0000 [ 167.641797][ T8158] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1300'. [ 168.213539][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1309'. [ 169.822279][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.831184][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.895166][ T8229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1323'. [ 169.932612][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 171.253232][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1336'. [ 171.272469][ T8261] device syzkaller0 entered promiscuous mode [ 171.620304][ T8286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1346'. [ 172.808842][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.810336][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.813187][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.814577][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.817086][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.838781][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.852771][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.886050][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.094927][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1360'. [ 173.100973][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.103403][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.110883][ T8321] device bridge1 entered promiscuous mode [ 173.164522][ T8327] tipc: Can't bind to reserved service type 2 [ 173.182923][ T8329] TCP: MD5 Hash failed for (0.0.0.0, 0)->(0.0.0.0, 20002) L3 index 0 [ 173.373524][ T8344] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.403182][ T8344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.550333][ T8359] binder: 8358:8359 ioctl 4018620d 0 returned -22 [ 173.551992][ T8359] binder: 8358:8359 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 173.556427][ T8359] binder: 8359 RLIMIT_NICE not set [ 174.317374][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.337811][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.393355][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.402893][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.414687][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.420151][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.146256][ T8387] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 176.981145][ T8399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1387'. [ 176.986213][ T8399] device geneve2 entered promiscuous mode [ 176.993840][ T8401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.996397][ T8401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.002307][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 177.004115][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1388'. [ 177.421069][ T8411] binder: 8410:8411 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 177.422414][ T8411] binder: 8410:8411 Release 1 refcount change on invalid ref 0 ret -22 [ 178.839001][ T8445] binder: 8443:8445 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 178.840251][ T8445] binder: 8443:8445 Release 1 refcount change on invalid ref 0 ret -22 [ 178.955289][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 178.973413][ T8449] device vlan2 entered promiscuous mode [ 178.974341][ T8449] device gretap0 entered promiscuous mode [ 179.040935][ T8452] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1407'. [ 179.123460][ T8453] device syzkaller0 entered promiscuous mode [ 179.160450][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1409'. [ 179.422067][ T8470] input: syz0 as /devices/virtual/input/input14 [ 180.302778][ T8484] binder: 8483:8484 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 180.304149][ T8484] binder: 8483:8484 Release 1 refcount change on invalid ref 0 ret -22 [ 187.369142][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.370243][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.882165][ T8488] netlink: 'syz.1.1415': attribute type 4 has an invalid length. [ 190.899943][ T8504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1422'. [ 191.146320][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.175136][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.435499][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1438'. [ 192.638049][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.652804][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.972838][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.974164][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.977273][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.978565][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.979813][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.981033][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.260128][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1449'. [ 197.448937][ T8653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.453686][ T8653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.704287][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 197.705829][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1469'. [ 198.036920][ T8674] "syz.2.1473" (8674) uses obsolete ecb(arc4) skcipher [ 198.127817][ T8680] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 199.234115][ T4322] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 199.234153][ T4322] Bluetooth: hci2: Malformed Event: 0x2f [ 199.822586][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.832078][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.232683][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.237612][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.487386][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 200.489088][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1493'. [ 201.320848][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1498'. [ 201.342455][ T8744] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 201.776699][ T4322] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 201.776723][ T4322] Bluetooth: hci0: Malformed Event: 0x2f [ 202.202707][ T8788] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1508'. [ 203.332770][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 203.334277][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1510'. [ 203.657294][ T8812] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 203.700505][ T8815] loop8: detected capacity change from 0 to 8 [ 203.703536][ T8815] Dev loop8: unable to read RDB block 8 [ 203.707895][ T8815] loop8: unable to read partition table [ 203.711323][ T8815] loop8: partition table beyond EOD, truncated [ 203.716998][ T8815] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 203.766881][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1518'. [ 205.142397][ T8843] capability: warning: `syz.1.1521' uses deprecated v2 capabilities in a way that may be insecure [ 205.648097][ T4322] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 205.648122][ T4322] Bluetooth: hci1: Malformed Event: 0x2f [ 206.685570][ T8914] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 208.018680][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 208.020188][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1542'. [ 208.282033][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1546'. [ 208.811525][ T8956] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 208.817501][ T4322] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 208.817522][ T4322] Bluetooth: hci3: Malformed Event: 0x2f [ 208.921756][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 208.954349][ T8967] bridge2: port 1(veth0_to_bond) entered blocking state [ 208.955516][ T8967] bridge2: port 1(veth0_to_bond) entered disabled state [ 208.956956][ T8967] device veth0_to_bond entered promiscuous mode [ 210.096261][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 210.097785][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1559'. [ 210.424317][ T8992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1562'. [ 210.430102][ T8990] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 212.753547][ T9038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1576'. [ 212.998660][ T4322] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 212.998682][ T4322] Bluetooth: hci1: Malformed Event: 0x2f [ 213.177584][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 213.179169][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1582'. [ 214.996402][ T9092] sched: RT throttling activated [ 215.808788][ T9102] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1596'. [ 215.985757][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.044303][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 216.045816][ T9117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1598'. [ 216.285787][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.817627][ T4322] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 216.817652][ T4322] Bluetooth: hci3: Malformed Event: 0x2f [ 217.874906][ T9136] input: syz1 as /devices/virtual/input/input15 [ 218.246664][ T9147] random: crng reseeded on system resumption [ 218.801848][ T9153] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 219.254226][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 219.255742][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1613'. [ 219.894506][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.897048][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.000719][ T9175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.003069][ T9175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.086021][ T9194] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.087571][ T9194] hpfs: hpfs_map_sector(): read error [ 221.309918][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 221.311422][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1626'. [ 221.679347][ T9193] netlink: 'syz.2.1625': attribute type 7 has an invalid length. [ 221.680704][ T9193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1625'. [ 221.775541][ T9213] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 221.873343][ T9215] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1629'. [ 222.190641][ T9220] binder: 9219:9220 ioctl c0306201 0 returned -14 [ 222.192277][ T9220] binder: 9219:9220 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 222.193473][ T9220] binder: 9219:9220 Release 1 refcount change on invalid ref 0 ret -22 [ 222.437775][ T9235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.443877][ T9235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.719192][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 223.720645][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1641'. [ 223.992537][ T9255] binder: 9254:9255 ioctl c0306201 0 returned -14 [ 223.994209][ T9255] binder: 9254:9255 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 223.995411][ T9255] binder: 9254:9255 Release 1 refcount change on invalid ref 0 ret -22 [ 224.064723][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 224.088122][ T9264] device gretap0 entered promiscuous mode [ 224.089794][ T9264] device macvtap1 entered promiscuous mode [ 224.125175][ T9268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.126765][ T9268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.140696][ T4696] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 224.217177][ T9272] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 224.228538][ T4696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.229804][ T4696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.969178][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 224.970521][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 224.971732][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.972950][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.974123][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.975341][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.976515][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.977649][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.982670][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.984747][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.985868][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.987024][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.988487][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.989655][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.990871][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.992083][ T14] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 224.995863][ T14] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 225.031592][ T9287] fido_id[9287]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 225.060557][ T9291] binder: 9290:9291 ioctl c0306201 0 returned -14 [ 225.064673][ T9291] binder: 9290:9291 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 225.065878][ T9291] binder: 9290:9291 Release 1 refcount change on invalid ref 0 ret -22 [ 225.467460][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1659'. [ 225.469170][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1659'. [ 225.996167][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.001657][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.087893][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.095176][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.173093][ T9319] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 226.660969][ T9329] binder: 9328:9329 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 226.662166][ T9329] binder: 9328:9329 Release 1 refcount change on invalid ref 0 ret -22 [ 226.771794][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.774381][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.038065][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 227.039575][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1673'. [ 228.247663][ T9359] binder: 9355:9359 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 228.253644][ T9359] binder: 9355:9359 Release 1 refcount change on invalid ref 0 ret -22 [ 228.390073][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.392497][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.412820][ T9371] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 228.436131][ T9373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.441593][ T9373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.445953][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 228.449318][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 229.152720][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 229.154185][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1690'. [ 229.464082][ T9394] binder: 9393:9394 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 229.465627][ T9394] binder: 9393:9394 Release 1 refcount change on invalid ref 0 ret -22 [ 229.471012][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1693'. [ 229.594946][ T9396] team0 (unregistering): Port device team_slave_0 removed [ 229.602475][ T9396] team0 (unregistering): Port device team_slave_1 removed [ 230.721744][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.724349][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.304390][ T9426] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.411432][ T9430] binder: 9429:9430 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 231.412685][ T9430] binder: 9429:9430 Release 1 refcount change on invalid ref 0 ret -22 [ 231.470341][ T9433] device syzkaller0 entered promiscuous mode [ 231.710741][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'. [ 231.712246][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1708'. [ 232.125740][ T9444] capability: warning: `syz.4.1710' uses 32-bit capabilities (legacy support in use) [ 233.172697][ T9460] binder: 9458:9460 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 233.174386][ T9460] binder: 9458:9460 Release 1 refcount change on invalid ref 0 ret -22 [ 233.208090][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 243.806324][ T9468] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 243.997347][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'. [ 243.998939][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1722'. [ 244.293776][ T9510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1729'. [ 244.305642][ T9511] binder: 9506:9511 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 244.307000][ T9511] binder: 9506:9511 Release 1 refcount change on invalid ref 0 ret -22 [ 245.553112][ T9529] binder: 9521:9529 BC_INCREFS_DONE u0000000000000002 no match [ 245.554389][ T9529] binder: 9521:9529 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 245.555603][ T9529] binder: 9521:9529 Release 1 refcount change on invalid ref 2 ret -22 [ 245.556749][ T9529] binder: 9521:9529 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 245.557820][ T9529] binder: 9521:9529 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 245.559092][ T9529] binder: 9521:9529 got transaction to context manager from process owning it [ 245.560410][ T9529] binder_debug: 11 callbacks suppressed [ 245.560423][ T9529] binder: 9521:9529 transaction async to 9521:0 failed 95/29201/-22, size 88-0 line 3034 [ 245.753106][ T9536] device syzkaller0 entered promiscuous mode [ 245.882414][ T9542] device syzkaller0 entered promiscuous mode [ 246.137357][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 246.189289][ T9550] binder: 9549:9550 ioctl c0306201 0 returned -14 [ 248.525059][ T9595] binder: 9594:9595 ioctl c0306201 0 returned -14 [ 248.808879][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.809951][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.279532][ T9565] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 258.292007][ T9603] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 258.321662][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.323102][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.201573][ T9627] binder: 9626:9627 ioctl c0306201 0 returned -14 [ 260.328776][ T9638] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 260.345890][ T9640] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 261.007363][ T9642] device syzkaller0 entered promiscuous mode [ 273.453262][ T9695] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 273.542319][ T9706] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 274.431792][ T9730] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 274.593423][ T9735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.601643][ T9735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.627301][ T9736] device syzkaller0 entered promiscuous mode [ 274.651617][ T9742] device syzkaller0 entered promiscuous mode [ 274.679497][ T9743] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 286.192381][ T9755] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 286.336461][ T9792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1818'. [ 286.337867][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1818'. [ 286.360686][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.827172][ T9815] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 287.884969][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.886589][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.890534][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 287.892506][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 289.204844][ T9841] device syzkaller0 entered promiscuous mode [ 289.824229][ T9860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.826781][ T9860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.395714][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.397225][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.018762][ C0] ------------[ cut here ]------------ [ 300.019913][ C0] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 300.021665][ C0] WARNING: CPU: 0 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x38c/0x46c [ 300.023099][ C0] Modules linked in: [ 300.023741][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 300.024822][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 300.026304][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 300.027483][ C0] pc : debug_check_no_obj_freed+0x38c/0x46c [ 300.028406][ C0] lr : debug_check_no_obj_freed+0x38c/0x46c [ 300.029311][ C0] sp : ffff800008007a10 [ 300.029957][ C0] x29: ffff800008007a50 x28: ffff0000dab8e600 x27: 0000000000000000 [ 300.031183][ C0] x26: ffff800011b9afe0 x25: ffff0000dab8e490 x24: ffff800010b7b674 [ 300.032368][ C0] x23: ffff0000f6a51af0 x22: ffff0000dab8e000 x21: dfff800000000000 [ 300.033671][ C0] x20: 0000000000000000 x19: ffff0000dab8e400 x18: ffff800011b7bf60 [ 300.034928][ C0] x17: 6e6968207473696c x16: ffff8000082d9364 x15: 0000000000000000 [ 300.036203][ C0] x14: 0000000000000001 x13: 1fffe00033eaaba3 x12: 0000000000ff0100 [ 300.037432][ C0] x11: ff00800008194238 x10: 0000000000000000 x9 : 345e618a2e0ae400 [ 300.038720][ C0] x8 : 345e618a2e0ae400 x7 : 0000000000000001 x6 : 0000000000000001 [ 300.040007][ C0] x5 : ffff800008007498 x4 : ffff8000152e4cc0 x3 : ffff800008538160 [ 300.041268][ C0] x2 : 0000000000000001 x1 : 0000000000000102 x0 : 0000000000000000 [ 300.042506][ C0] Call trace: [ 300.043008][ C0] debug_check_no_obj_freed+0x38c/0x46c [ 300.043877][ C0] slab_free_freelist_hook+0x104/0x1e8 [ 300.044752][ C0] __kmem_cache_free+0xbc/0x218 [ 300.045505][ C0] kfree+0xd0/0x1a8 [ 300.046096][ C0] rose_timer_expiry+0x43c/0x5a0 [ 300.046865][ C0] call_timer_fn+0x1b8/0x95c [ 300.047593][ C0] __run_timers+0x478/0x6f0 [ 300.048287][ C0] run_timer_softirq+0x7c/0x114 [ 300.048996][ C0] handle_softirqs+0x318/0xc60 [ 300.049746][ C0] __do_softirq+0x14/0x20 [ 300.050402][ C0] ____do_softirq+0x14/0x20 [ 300.051075][ C0] call_on_irq_stack+0x30/0x48 [ 300.051840][ C0] do_softirq_own_stack+0x20/0x2c [ 300.052588][ C0] __irq_exit_rcu+0x23c/0x438 [ 300.053280][ C0] irq_exit_rcu+0x14/0x84 [ 300.053924][ C0] el1_interrupt+0x38/0x54 [ 300.054593][ C0] el1h_64_irq_handler+0x18/0x24 [ 300.055302][ C0] el1h_64_irq+0x64/0x68 [ 300.055995][ C0] arch_local_irq_enable+0xc/0x18 [ 300.056785][ C0] default_idle_call+0x68/0xd8 [ 300.057482][ C0] do_idle+0x1d8/0x4c8 [ 300.058082][ C0] cpu_startup_entry+0x5c/0x74 [ 300.058810][ C0] rest_init+0x2d4/0x2f0 [ 300.059406][ C0] start_kernel+0x0/0x538 [ 300.060082][ C0] start_kernel+0x48c/0x538 [ 300.060783][ C0] __primary_switched+0xb8/0xc0 [ 300.061544][ C0] irq event stamp: 2632285 [ 300.062191][ C0] hardirqs last enabled at (2632284): [] __up_console_sem+0xb4/0xfc [ 300.063587][ C0] hardirqs last disabled at (2632285): [] el1_dbg+0x24/0x80 [ 300.064869][ C0] softirqs last enabled at (2631520): [] handle_softirqs+0xaec/0xc60 [ 300.066223][ C0] softirqs last disabled at (2631579): [] __do_softirq+0x14/0x20 [ 300.067633][ C0] ---[ end trace 0000000000000000 ]--- [ 300.861486][ T9863] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 305.138851][ C1] ------------[ cut here ]------------ [ 305.139847][ C1] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 305.141531][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x38c/0x46c [ 305.142877][ C1] Modules linked in: [ 305.143429][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 305.144638][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 305.146035][ C1] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 305.147040][ C1] pc : debug_check_no_obj_freed+0x38c/0x46c [ 305.147858][ C1] lr : debug_check_no_obj_freed+0x38c/0x46c [ 305.148721][ C1] sp : ffff800008017a10 [ 305.149334][ C1] x29: ffff800008017a50 x28: ffff0000f6d27600 x27: 0000000000000000 [ 305.150568][ C1] x26: ffff800011b9afe0 x25: ffff0000f6d27490 x24: ffff800010b7b674 [ 305.151774][ C1] x23: ffff0000dd2ca8f8 x22: ffff0000f6d27000 x21: dfff800000000000 [ 305.153001][ C1] x20: 0000000000000000 x19: ffff0000f6d27400 x18: 000000008cff3189 [ 305.154275][ C1] x17: 6e6968207473696c x16: ffff8000082d9364 x15: 0000000000000000 [ 305.155492][ C1] x14: 0000000000000001 x13: 1fffe00033eaeda3 x12: 0000000000ff0100 [ 305.156738][ C1] x11: ff00800008194238 x10: 0000000000000000 x9 : f8cdf9971ed25500 [ 305.158005][ C1] x8 : f8cdf9971ed25500 x7 : 0000000000000001 x6 : 0000000000000001 [ 305.159181][ C1] x5 : ffff800008017498 x4 : ffff8000152e4cc0 x3 : ffff800008538160 [ 305.160352][ C1] x2 : 0000000000000001 x1 : 0000000000000102 x0 : 0000000000000000 [ 305.161544][ C1] Call trace: [ 305.162060][ C1] debug_check_no_obj_freed+0x38c/0x46c [ 305.162894][ C1] slab_free_freelist_hook+0x104/0x1e8 [ 305.163707][ C1] __kmem_cache_free+0xbc/0x218 [ 305.164476][ C1] kfree+0xd0/0x1a8 [ 305.165021][ C1] rose_timer_expiry+0x43c/0x5a0 [ 305.165753][ C1] call_timer_fn+0x1b8/0x95c [ 305.166436][ C1] __run_timers+0x478/0x6f0 [ 305.167137][ C1] run_timer_softirq+0x7c/0x114 [ 305.167842][ C1] handle_softirqs+0x318/0xc60 [ 305.168559][ C1] __do_softirq+0x14/0x20 [ 305.169248][ C1] ____do_softirq+0x14/0x20 [ 305.169946][ C1] call_on_irq_stack+0x30/0x48 [ 305.170635][ C1] do_softirq_own_stack+0x20/0x2c [ 305.171341][ C1] __irq_exit_rcu+0x23c/0x438 [ 305.172022][ C1] irq_exit_rcu+0x14/0x84 [ 305.172638][ C1] el1_interrupt+0x38/0x54 [ 305.173289][ C1] el1h_64_irq_handler+0x18/0x24 [ 305.174012][ C1] el1h_64_irq+0x64/0x68 [ 305.174599][ C1] arch_local_irq_enable+0xc/0x18 [ 305.175355][ C1] default_idle_call+0x68/0xd8 [ 305.176039][ C1] do_idle+0x1d8/0x4c8 [ 305.176635][ C1] cpu_startup_entry+0x5c/0x74 [ 305.177291][ C1] secondary_start_kernel+0x198/0x1bc [ 305.177990][ C1] __secondary_switched+0xb0/0xb4 [ 305.178674][ C1] irq event stamp: 3251623 [ 305.179284][ C1] hardirqs last enabled at (3251622): [] __up_console_sem+0xb4/0xfc [ 305.180651][ C1] hardirqs last disabled at (3251623): [] el1_dbg+0x24/0x80 [ 305.181918][ C1] softirqs last enabled at (3250660): [] handle_softirqs+0xaec/0xc60 [ 305.183280][ C1] softirqs last disabled at (3250859): [] __do_softirq+0x14/0x20 [ 305.184583][ C1] ---[ end trace 0000000000000000 ]---