last executing test programs: 3.53862335s ago: executing program 3 (id=1644): syz_read_part_table(0x105d, &(0x7f0000001080)="$eJzsz7FNA0EQBdC/wN3tBUQkZLRCSAOUAxItUAQStIbkAi4Za+3AkguwHbwX/d2ZH0y4rrts1ata/p+Tn/HzlmQ9zGpXlamN2J8ev9bM7bxey+9yTB/1Oacn41mV9Ne8JA/Jd7LVqTGNpeQ+aXn/u9CVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDT9gEAAP//1jwUcA==") sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000740)={0x1, 0x0, 0x8, 0x18, 0x18c, &(0x7f0000000980)}) 3.282676621s ago: executing program 3 (id=1647): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.282477871s ago: executing program 3 (id=1648): syz_open_dev$loop(0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03affff) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204100}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x84, 0x1, 0x9, 0x0, 0x0, 0x0, {0x2}, [@NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 3.257730191s ago: executing program 3 (id=1649): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='+'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.171010945s ago: executing program 4 (id=1650): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 2.958295073s ago: executing program 4 (id=1652): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e0a03"], 0xd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8000000000010104000f"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1f82fc1b1000"], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'osf\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0xffffffffffffffff}], 0x1, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRES16, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES64=0x0, @ANYRES16=r0, @ANYRES16=r7], 0x2c}}, 0x0) r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00') ioctl$SIOCGETSGCNT(r9, 0x89e1, &(0x7f00000002c0)={@local, @multicast2}) keyctl$restrict_keyring(0x1d, r8, &(0x7f00000000c0)='.request_key_auth\x00', &(0x7f00000001c0)='syz') 2.641376606s ago: executing program 0 (id=1657): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) 2.618847867s ago: executing program 3 (id=1658): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e1960227826acb24311ed0e67f84565dd8858ca3be23409569e15ba75120c35dffdc8a4b7688d5d02fedf88434274b828fec979ea029405cd1e7cadc867ebdc98c4a523178715828c1a6361e60ff1f2968efc20d6888ac2a6f81e37cbc7f1e89f3421825cc278df26c8722e1672fc9672a8d0a60dded6f0765ac61f8a91", 0x450}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) 2.483090142s ago: executing program 0 (id=1659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000ffffffff8400000000000000460000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 2.482826152s ago: executing program 3 (id=1660): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) timer_create(0x0, 0x0, 0x0) timer_delete(0x0) 2.346867168s ago: executing program 0 (id=1662): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='+'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}, [@mbim={0xc}]}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.088017328s ago: executing program 1 (id=1665): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}, {&(0x7f0000002240)="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", 0xfd1}], 0x2}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.986149172s ago: executing program 2 (id=1667): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x162, &(0x7f0000000880)="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"}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x15, 0x0, 0x0) setresgid(0xee00, 0x0, 0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x8, {0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000001340)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@umask={'umask', 0x3d, 0xf3}}, {}, {@errors_remount}]}, 0x5, 0x1531, &(0x7f0000002f80)="$eJzs3AuYjlX3MPC19t43Y5r0NMlh2Huvm4cG2yRJDklySJIkSc4JSZMkCYkhp6QhCTlOksMQksPEpHE+H3JOkleSJCEhyf6uKX3+b/3fq/7f2/t5/++s33Xd1+w1z7PWs+5nzTX34blmvu42vFaT2tUbERH8U/CXLykAEAMAgwHgGgAIAKB8fPn47MfzSEz5516E/bUeTL/SHbArieefs/H8czaef87G88/ZeP45G88/Z+P552w8f8Zysq0zC13LW87dLt3/jwG+/58D8fE/Z+P5/8fw3vf5Hyfx/HM2nn/OxvPP2Xj+ORvPP2fj+ecs9jcxz5+xnOwvuY+c+1Kxf/gc8b/5c4Zf36p/sk7x4Jcy/6o+g/+nvCv0Y8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLIc55y9TAPDr+kr3xRhjjDHGGGOMsb+Oz32lO2CMMcYYY4wxxti/HgIoCQoCyAW5IQbyQCxcBXFwNeSFayAC10I8XAf54HrIDwWgIBSCBCgMRUCDAQsEIRSFYhCF4lACboBEKAmloDQ4KANJcCOUhZugHNwM5eEWqAC3QkWoBJWhCtwGVeF2qAZ3QHW4E2pATagFteEuqIN3Q124B+rBvVAf7oMGcD80hAegETwIjeEhaAIPQ1NoBs2hBbSEVtD6t/nwZ/Kfh17wAvSGPpACfaEfvAj9YQAMhEEwGF6CIfAyDIVXIBWGwXB4FUbAazASXodRMBrGwBswFsbBeJgAE2ESpMGbMBneginwNkyFaTAdZkA6zIRZ8A7MhjkwF96FefAezIcFsBAWQQa8D4thCWTCB7AUPoQsWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFb4CLbBdtgBO2EX7IY98DHshU9gH3wK++Gz/2H+2d/kd0dAQIECFSrMhbkwBmMwFmMxDuMwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBBQsKiWBSjGMUSWAITMRFLYSl06DAJk7As3oTlsByWx/JYAStgRayElbAKVsGqWBWrYTWsfusCAKyBtbAW3oV34d1YF+tiPayH9bE+NsAG2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2xtbYBttgW2yL7bE9dsAO2BE7YjImYyfshJ2xM3bBLtgVu2I37IbdsQf2wOfxeXwBX8A+WEP0xX7YD/tjfxyIg3AQvoRD8GV8GV/BVByGw/FVfBVfw5F4BkfhaByDY7CqGIfjcQKSmIRpmIaTcTJOwSk4FafhNJyB6TgTZ+EsnI1zcA6+i/PwPXwPF+ACXIQZmIGLcQlmYiYuxbOYhctwOa7AlQC4EtfgWlyD63EDrsdNuAm34Bb8CD/C7bgdd+JO3I278WP8GD/BTzAVmwHAATyAB/EgHsJDeBgP4xE8gkfxKB7DY3gcj+MJPImn8CSextN4Bs/iOTyH5/E8XsBnE75svLvkulQQ2ZRQIpfIJWJEjIgVsSJOxIm8Iq+IiIiIF/Ein8gn8ov8oqAoKBJEgigiiggjjCARiqKiqIiKqCghSohEkShKiVKir3AiSSSJsqKsKCfKifLiFlFB3Coqikqinasiqoiqor2rJu4Q1UV1UUPUFLVEbVFb1BF1RF1RV9QT9UR9UV8oAGgo+uJAfFBkT6aJGIZNxXBsLlqIlqKVeA0fEW3ESGwr2on24jExGkdhR9HGJYsnRScxHjuLp8UEfEZ0FZOwm3hOdBc9RE/xvOgl2rreoo+Yin1FPzED+4sBYqAYJGZjTZE9sVriFZEqhonh4lWxCF8TI8XrYpQYLcaIN8RYMU6MFxPERDFJpIk3xWTxlpgi3hZTxTQxXcwQ6WKmmCXeEbPFHDFXvCvmiffEfLFALBSLRIZ4XywWS0Sm+EAsFR+KLLFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFbxkdgmtosdYqfYJXaLPeJjsVd8IvaJT8V+8Zk4IP4mDorPxSHxhTgsvhRHxFfiqPhaHBPfiOOijzghTopT4jtxWnwvzoiz4pz4QZwXP4oL4idxUXgBEqWQUioZyFwyt4yReWSsvErGyatlXnmNjMhrZby8TuaT18v8soAsKAvJBFlYFpFaGmklyVAWlcVkVBaXJeQNMlGWlKVkaelkGZkkb5Rl5U2ynLxZlpe3yAryVllRVpKVZRV5m6wqb5fV5B2yurxT1pA1ZS1ZW94l68i7ZV15j6wn75X15X2ygbxfNpQPyEbyQdlYPiSbyIdlU9lMNpctZEvZSraWj8g28lHZVraT7eVjsoN8XHaUT8hk+aTsJJ+SneXTsot8RnaVz8pu8jnZXfaQPeVP8qL0srfsI1NkX9lPvij7y+xj4SA5WL4kh8iX5VD5ikyVw+Rw+aocIV+TI+XrcpQcLcfIN+RYOU6OlxPkRDlJpsk35WT5lpwi35ZT5TQ5Xc6Q6XKmHHip0tw/kf/Wr/kefzkky5lyaEqqHJayRW6VH8ltcrvcIXfKXXK33CP3yL1yr9wn98n9cr88IA/Ig/KgPCQPycPysDwij8ij8qg8Jo/J4/K4PCFPyh/kd/K0/F6ekWflWfmDPC/PywuX3gNQqISSSqlA5VK5VYzKo2LVVSpOXa3yCgBQ16p4dZ3Kp65X+VUBVVAVUgmqsCqitDLKKlKhKqqKqagqrkqoG1SiKqlKqdLKqTIqSd2oIv9k/t/3J3/tb8X0X94p1Vq1Vm1UG9VWtVXtVXvVQXVQHVVHlaySVSfVSXVWnVUX1UV1VV1VN9VNdVfdVU/VU/VSvVRvBJWiUlQ/9aLqrwaogWqQGqxeUkPUEDVUDVWpKlUNV8PVCDVCjVQj1Sg1So1RY9RYNVaNV+PVRDVRpak0NVlNVlPUFDVVTVXT1XSVrtLVLDVLzVaz1Vw1V81T89R8NV8tVAtVhspQi9Vilaky1VK1VGWpZWqZWqFWqFVqlVqj1qh1ap3aoDaoTWqTylJb1Va1TW1TO9QOtUvtUnvUHrVX7VX71D61X+1XB9QBdVAdVIfUIXVYHVZH1BF1VB1Vx9QxdVwdVyfUCXVKnVKn1Wl1Rp1R59Q5dV6dVxfUBXVRXcw+7QtEIAIVqCBXkCuICWKC2CA2iAvigrxB3iASRIL4ID7IF1wf5A8KBAWDQkFCUDgoEujABDagIAyKBsWCaFA8KBHcECQGJYNSQenABWWCpODGoGxwU1AuuDkoH9wSVAhuDSoGlYLKQZXgtqBqcHtQLbgjqB7cGdQIaga1gtrBXUGd4O6gbnBPUC+4N6gf3Bc0CO4PGgYPBI2CB4PGwUNBk+DhoGnQLGgetAhaBq2C1n9Vfcyu7/2ZAo+63rqPzg19dT/9ou6vB+iBepAerF/SQ/TLeqh+RafqYXp4zKt6hH5Nj9Sv61F6tB6j39Bj9Tg9Xk/QE/Uknabf1JP1W3qKfltP1dP0dD1Dp+uZepZ+R8/Wc/Rc/a6ep9/T8/UCvVAv0hn6fb1YL9GZ+gO9VH+os/QyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1R3qb3q536J16l96t9+iP9V79id6nP9X79Wf6gP6bPqg/14f0F/qw/lIf0V/po/prfUx/o4/rb/UJfVKf0t/p0/p7fUaf1ef0D/q8/lFf0D/pi9pnn9xnH96NMsrkMrlMjIkxsSbWxJk4k9fkNRETMfEm3uQz+Ux+k98UNAVNgkkwRUwRk40MmaKmqImaqClhSphEk2hKmVLGGWeSTJIpa8qacqacKW/KmwqmgqloKprKprK5zdxmbje3mzvMHeZOc6epaWqa2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpbpqblqalaW1amzamjWlr2pr2pr3pYDqYjqajSTbJppPpZDqbzqaL6WK6mq6mm+lmupvupqfpaXqZXqa36W1STIrpZ/qZ/qa/GWgGmsFmsBlihpihZqhJNalmuBluRpgRZqQZaUaZ0WaMecOMNePMeDPBTDSTTJpJM5PNZDPFTDFTzVQz3Uw36SbdzDKzzGwz28w1c808M8/MN/PNQrPQZJgMs9gsNpkm0yw1S02WyTLLzXKz0qw0q81qs9asNevNerPRbDSbzWaz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQRMDh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8wpc8qcNqfNGXPGnDPnzHnzo7lgfjIXjTcxNo+NtVfZOHu1zWuvsb+NC9pCNsEWtkWstvltgb+LjbU20Za0pWxp62wZm2Rv/F1c0VaylW0Ve5utam+31X4X17F327r2HlvP3mtr27v+Lq5v77MN7MO2oW1mG9kWtrFtZZvYh21T28w2ty1sS9vKdrCP2472CZtsn7Sd7FO/ixfbJXatXWfX2w12r/3EnrM/2KP2a3ve/mh72z52sH3JDrEv26H2FZtqh/0uHmPfsGPtODveTrAT7aTfxdPtDJtuZ9pZ9h072875XZxh37fzbKadbxfYhXbRz3F2T5n2A7vUfmiz7DK73K6wK+0qu9qu+b+9rrCb7Ga7xe6xH9ttdrvdYXfaXXb3z3H2fuyzn9r99jN7xH5lD9rP7SF7zB62X/4cZ+/fMfuNPW6/tSfsSXvKfmdP2+/tGXv25/3P3vfv7E/2ovUWCEmQJEUB5aLcFEN5KJauoji6mvLSNRShaymerqN8dD3lpwJUkApRAhWmIqTJkCWikIpSMYpScSpBN1AilaRSVJoclaEkupHK0k1Ujm6m8nQLVaBbqSJVospUhW6jqnQ7VaM7qDrdSTWoJtWi2nQX1aG7qS7dQ/XoXqpP91EDup8a0gPUiB6kxvQQNaGHqSk1o+bUglpSK2pNj1AbepTaUjtqT49RB3qcOtITlExPUid6ijrT09SFnqGu9Cx1o+eoO/WgnvQ89aIXqDf1oRTqS/3oRepPA2ggDaLB9FINAKCh9Aql0jAaTq/SCHqNRtLrNIpG0xh6g8bSOBpPE2giTaI0epMm01s0hd6mqTSNptMMSqeZNIveodk0h+bSuzSP3qP5tIAW0iLKoPdpMS2hTPqAltKHlEXLaDmtoJW0ilbTGp8bgNbTBtpIm2gzbaGt9BFto+2EtJN20W7aQx/TXvqE9tGntJ8+owOEeJA+p0P0BR2mL+kIfUVH6Ws6Rt/QcfqWTtBJOkXf0Wn6ns7QWTpHP9B5+pEu0E90kTxBiKEIZajCIMwV5g5jwjxhbHhVGBdeHeYNrwkj4bVhfHhdmC+8PswfFggLhoXChLBwWCTUoQltSGEYFg2LhdGweFgivCFMDEuGpcLSoQvLhEnhjWHZ8KawXHhzWD68JawQ3hpWDCuFD99bJbwtrBreHlYL7wirh3eGNcKaYa2wdnhXWCe8O6wb3hPWC+8Ny4X3hQ3C+8OG4QNho/DBsHH4UNgkfDhsGjYLm4ctwpZhq7B1+EjYJnw0bBu2C9uHj4UdwsfDjuETYXL4ZNgpfOoPH08J+4b9whfDF0Pv75ELo4uiGdH3o4ujS6KZ0Q+iS6MfRrOiy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo1ui3tfODQ6dcNIpF7hcLreLcXlcrLvKxbmrXV53jYu4a128u87lc9e7/K6AK+gKuQRX2BVx2hlnHbnQFXXFXNQVdyXcDS7RlXSlXGnnXBmX5Fq51q61a+MedW1dO9fePeYec4+7x90T7gn3pOvknnKd3dOui3vGdXXPumfdc6676+F6uuddL/eC6+36uBSX4vq5fq6/6+8GuoFusBvshrghbqgb6lJdqhvuhrsRboQb6Ua6UW6UG+PGuLFurBvvxruJfqJLc2luspvsprgpbqqb6qa76S7dpbtZbpab7Wa7uW6um5c4z813891Ct9BluAy32C12mS7TLXVLXZbLcsvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XP73X53wB04591Bd8h94Q67L90R95U76r52x9w37rj71p1wJ90p95077b53Z9xZd8794M67H90F95O76LxLi7wZmRx5KzIl8nZkamRaZHpkRiQ9MjMyK/JOZHZkTmRuBGFe5L3I/MiCyMLIokhG5P3I4siSSGbkg8jSyIeRrMiyyPLIisjKyKqI94W3hb6oL+ajvrgv4W/wib6kL+VLe+fL+CR/oy/rb/Ll/M2+vL/FV/C3+oq+kq/sm/nmvoVv6Vv51v4R38Y/6tv6dr69f8x38I/7jv4Jn+yf9J38U76zf9p38c/4rv5Z380/57v7Hr6nf9738i/43r6PT/F9fT//ou/vB/iBfpAf7F/yQ/zLfqh/xaf6YX64f9WP8K/5kf51P8qP9mP8G36sH+fH+wl+op/k0/ybfrJ/y0/xb/upfpqf7mf4dD/Tz/Lv+Nl+jp/r3/Xz/Ht+vl/gF/pFPsO/7xf7JT7Tf+CX+g99ll/ml/sVHmJW+dV+jV/r1/n1foPf6Df5zX6L3+o/8tv8dr/D7/S7/G6/x3/s9/pP/D7/qd/vP/MH/N/8Qf+5P+S/8If9l/6I/8of9V/7Y/4bf9x/60/4k/6U/86f9t/7M/6sP+d/8Of9j/6C/8lf5L9ZY4wxxhj7U+QfPN73v/meuLRl6wcAV28vdPi3NTfm/2U9QCR0iADAk326PXjp042UGjVSUlIuPTdLQlBsAQBELufngsvxMmgPj0MytIOy/21/A0SP83Sp/q/bb+tHbwGI/S85MXA5vlz/pn9Qf9y8P6y/ACCx2OWcPHA5vly/3D+oX6DNH9TP83kaQNv/khMHl+PL9ZPgUXgKkv9ooL848KeexRhjjDHGGGPsP8YAUbnLH13fZl+fJ6jLObnhcvxH1+c/+3PXpIwxxhhjjDHGGPsXeaZHzyceSU5u1+VKLQCu5Kvz4s8scv17tPEftpD/Hm38o8WV/s3EGGOMMcYY+6tdPum/0p0wxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGM51/+Pfyd2pfeRMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//tVgiNQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) 1.985263802s ago: executing program 1 (id=1668): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='+'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.732986222s ago: executing program 2 (id=1669): timer_create(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.295849319s ago: executing program 2 (id=1672): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x104, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xbc, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xa8, 0x6, [@m_ife={0xa4, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_PARMS={0x1c}]}, {0x51, 0x6, "21b2caeba32a6f7c5900697624a17b85a9db3a31b129a4976a84cfb4f5d651fd8aa24a645c8f63c025fcca463a6b79a3d7e6c9a8b89a140805ef63939ac2e37b49004b0dc3b8446aa7038eceef"}, {0xc}, {0xc}}}]}]}}]}, 0x104}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.235174301s ago: executing program 4 (id=1673): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c"], 0x38}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000359, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 1.167966974s ago: executing program 2 (id=1674): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@multicast2}}, 0xe8) 1.167782994s ago: executing program 4 (id=1675): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x6248, &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r5) 453.865653ms ago: executing program 0 (id=1676): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x57}], 0x1}, 0x4000000) 446.455642ms ago: executing program 1 (id=1677): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 359.053316ms ago: executing program 4 (id=1678): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001d0000090000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x8fd, &(0x7f0000000380)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x10000000000000f2) 329.308698ms ago: executing program 0 (id=1679): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x162, &(0x7f0000000880)="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"}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x15, 0x0, 0x0) setresgid(0xee00, 0x0, 0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x8, {0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0e1ac6e7049b3341959b729a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07470936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000001340)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@umask={'umask', 0x3d, 0xf3}}, {}, {@errors_remount}]}, 0x5, 0x1531, &(0x7f0000002f80)="$eJzs3AuYjlX3MPC19t43Y5r0NMlh2Huvm4cG2yRJDklySJIkSc4JSZMkCYkhp6QhCTlOksMQksPEpHE+H3JOkleSJCEhyf6uKX3+b/3fq/7f2/t5/++s33Xd1+w1z7PWs+5nzTX34blmvu42vFaT2tUbERH8U/CXLykAEAMAgwHgGgAIAKB8fPn47MfzSEz5516E/bUeTL/SHbArieefs/H8czaef87G88/ZeP45G88/Z+P552w8f8Zysq0zC13LW87dLt3/jwG+/58D8fE/Z+P5/8fw3vf5Hyfx/HM2nn/OxvPP2Xj+ORvPP2fj+ecs9jcxz5+xnOwvuY+c+1Kxf/gc8b/5c4Zf36p/sk7x4Jcy/6o+g/+nvCv0Y8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLIc55y9TAPDr+kr3xRhjjDHGGGOMsb+Oz32lO2CMMcYYY4wxxti/HgIoCQoCyAW5IQbyQCxcBXFwNeSFayAC10I8XAf54HrIDwWgIBSCBCgMRUCDAQsEIRSFYhCF4lACboBEKAmloDQ4KANJcCOUhZugHNwM5eEWqAC3QkWoBJWhCtwGVeF2qAZ3QHW4E2pATagFteEuqIN3Q124B+rBvVAf7oMGcD80hAegETwIjeEhaAIPQ1NoBs2hBbSEVtD6t/nwZ/Kfh17wAvSGPpACfaEfvAj9YQAMhEEwGF6CIfAyDIVXIBWGwXB4FUbAazASXodRMBrGwBswFsbBeJgAE2ESpMGbMBneginwNkyFaTAdZkA6zIRZ8A7MhjkwF96FefAezIcFsBAWQQa8D4thCWTCB7AUPoQsWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFb4CLbBdtgBO2EX7IY98DHshU9gH3wK++Gz/2H+2d/kd0dAQIECFSrMhbkwBmMwFmMxDuMwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBBQsKiWBSjGMUSWAITMRFLYSl06DAJk7As3oTlsByWx/JYAStgRayElbAKVsGqWBWrYTWsfusCAKyBtbAW3oV34d1YF+tiPayH9bE+NsAG2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2xtbYBttgW2yL7bE9dsAO2BE7YjImYyfshJ2xM3bBLtgVu2I37IbdsQf2wOfxeXwBX8A+WEP0xX7YD/tjfxyIg3AQvoRD8GV8GV/BVByGw/FVfBVfw5F4BkfhaByDY7CqGIfjcQKSmIRpmIaTcTJOwSk4FafhNJyB6TgTZ+EsnI1zcA6+i/PwPXwPF+ACXIQZmIGLcQlmYiYuxbOYhctwOa7AlQC4EtfgWlyD63EDrsdNuAm34Bb8CD/C7bgdd+JO3I278WP8GD/BTzAVmwHAATyAB/EgHsJDeBgP4xE8gkfxKB7DY3gcj+MJPImn8CSextN4Bs/iOTyH5/E8XsBnE75svLvkulQQ2ZRQIpfIJWJEjIgVsSJOxIm8Iq+IiIiIF/Ein8gn8ov8oqAoKBJEgigiiggjjCARiqKiqIiKqCghSohEkShKiVKir3AiSSSJsqKsKCfKifLiFlFB3Coqikqinasiqoiqor2rJu4Q1UV1UUPUFLVEbVFb1BF1RF1RV9QT9UR9UV8oAGgo+uJAfFBkT6aJGIZNxXBsLlqIlqKVeA0fEW3ESGwr2on24jExGkdhR9HGJYsnRScxHjuLp8UEfEZ0FZOwm3hOdBc9RE/xvOgl2rreoo+Yin1FPzED+4sBYqAYJGZjTZE9sVriFZEqhonh4lWxCF8TI8XrYpQYLcaIN8RYMU6MFxPERDFJpIk3xWTxlpgi3hZTxTQxXcwQ6WKmmCXeEbPFHDFXvCvmiffEfLFALBSLRIZ4XywWS0Sm+EAsFR+KLLFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFbxkdgmtosdYqfYJXaLPeJjsVd8IvaJT8V+8Zk4IP4mDorPxSHxhTgsvhRHxFfiqPhaHBPfiOOijzghTopT4jtxWnwvzoiz4pz4QZwXP4oL4idxUXgBEqWQUioZyFwyt4yReWSsvErGyatlXnmNjMhrZby8TuaT18v8soAsKAvJBFlYFpFaGmklyVAWlcVkVBaXJeQNMlGWlKVkaelkGZkkb5Rl5U2ynLxZlpe3yAryVllRVpKVZRV5m6wqb5fV5B2yurxT1pA1ZS1ZW94l68i7ZV15j6wn75X15X2ygbxfNpQPyEbyQdlYPiSbyIdlU9lMNpctZEvZSraWj8g28lHZVraT7eVjsoN8XHaUT8hk+aTsJJ+SneXTsot8RnaVz8pu8jnZXfaQPeVP8qL0srfsI1NkX9lPvij7y+xj4SA5WL4kh8iX5VD5ikyVw+Rw+aocIV+TI+XrcpQcLcfIN+RYOU6OlxPkRDlJpsk35WT5lpwi35ZT5TQ5Xc6Q6XKmHHip0tw/kf/Wr/kefzkky5lyaEqqHJayRW6VH8ltcrvcIXfKXXK33CP3yL1yr9wn98n9cr88IA/Ig/KgPCQPycPysDwij8ij8qg8Jo/J4/K4PCFPyh/kd/K0/F6ekWflWfmDPC/PywuX3gNQqISSSqlA5VK5VYzKo2LVVSpOXa3yCgBQ16p4dZ3Kp65X+VUBVVAVUgmqsCqitDLKKlKhKqqKqagqrkqoG1SiKqlKqdLKqTIqSd2oIv9k/t/3J3/tb8X0X94p1Vq1Vm1UG9VWtVXtVXvVQXVQHVVHlaySVSfVSXVWnVUX1UV1VV1VN9VNdVfdVU/VU/VSvVRvBJWiUlQ/9aLqrwaogWqQGqxeUkPUEDVUDVWpKlUNV8PVCDVCjVQj1Sg1So1RY9RYNVaNV+PVRDVRpak0NVlNVlPUFDVVTVXT1XSVrtLVLDVLzVaz1Vw1V81T89R8NV8tVAtVhspQi9Vilaky1VK1VGWpZWqZWqFWqFVqlVqj1qh1ap3aoDaoTWqTylJb1Va1TW1TO9QOtUvtUnvUHrVX7VX71D61X+1XB9QBdVAdVIfUIXVYHVZH1BF1VB1Vx9QxdVwdVyfUCXVKnVKn1Wl1Rp1R59Q5dV6dVxfUBXVRXcw+7QtEIAIVqCBXkCuICWKC2CA2iAvigrxB3iASRIL4ID7IF1wf5A8KBAWDQkFCUDgoEujABDagIAyKBsWCaFA8KBHcECQGJYNSQenABWWCpODGoGxwU1AuuDkoH9wSVAhuDSoGlYLKQZXgtqBqcHtQLbgjqB7cGdQIaga1gtrBXUGd4O6gbnBPUC+4N6gf3Bc0CO4PGgYPBI2CB4PGwUNBk+DhoGnQLGgetAhaBq2C1n9Vfcyu7/2ZAo+63rqPzg19dT/9ou6vB+iBepAerF/SQ/TLeqh+RafqYXp4zKt6hH5Nj9Sv61F6tB6j39Bj9Tg9Xk/QE/Uknabf1JP1W3qKfltP1dP0dD1Dp+uZepZ+R8/Wc/Rc/a6ep9/T8/UCvVAv0hn6fb1YL9GZ+gO9VH+os/QyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1R3qb3q536J16l96t9+iP9V79id6nP9X79Wf6gP6bPqg/14f0F/qw/lIf0V/po/prfUx/o4/rb/UJfVKf0t/p0/p7fUaf1ef0D/q8/lFf0D/pi9pnn9xnH96NMsrkMrlMjIkxsSbWxJk4k9fkNRETMfEm3uQz+Ux+k98UNAVNgkkwRUwRk40MmaKmqImaqClhSphEk2hKmVLGGWeSTJIpa8qacqacKW/KmwqmgqloKprKprK5zdxmbje3mzvMHeZOc6epaWqa2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpbpqblqalaW1amzamjWlr2pr2pr3pYDqYjqajSTbJppPpZDqbzqaL6WK6mq6mm+lmupvupqfpaXqZXqa36W1STIrpZ/qZ/qa/GWgGmsFmsBlihpihZqhJNalmuBluRpgRZqQZaUaZ0WaMecOMNePMeDPBTDSTTJpJM5PNZDPFTDFTzVQz3Uw36SbdzDKzzGwz28w1c808M8/MN/PNQrPQZJgMs9gsNpkm0yw1S02WyTLLzXKz0qw0q81qs9asNevNerPRbDSbzWaz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQRMDh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8wpc8qcNqfNGXPGnDPnzHnzo7lgfjIXjTcxNo+NtVfZOHu1zWuvsb+NC9pCNsEWtkWstvltgb+LjbU20Za0pWxp62wZm2Rv/F1c0VaylW0Ve5utam+31X4X17F327r2HlvP3mtr27v+Lq5v77MN7MO2oW1mG9kWtrFtZZvYh21T28w2ty1sS9vKdrCP2472CZtsn7Sd7FO/ixfbJXatXWfX2w12r/3EnrM/2KP2a3ve/mh72z52sH3JDrEv26H2FZtqh/0uHmPfsGPtODveTrAT7aTfxdPtDJtuZ9pZ9h072875XZxh37fzbKadbxfYhXbRz3F2T5n2A7vUfmiz7DK73K6wK+0qu9qu+b+9rrCb7Ga7xe6xH9ttdrvdYXfaXXb3z3H2fuyzn9r99jN7xH5lD9rP7SF7zB62X/4cZ+/fMfuNPW6/tSfsSXvKfmdP2+/tGXv25/3P3vfv7E/2ovUWCEmQJEUB5aLcFEN5KJauoji6mvLSNRShaymerqN8dD3lpwJUkApRAhWmIqTJkCWikIpSMYpScSpBN1AilaRSVJoclaEkupHK0k1Ujm6m8nQLVaBbqSJVospUhW6jqnQ7VaM7qDrdSTWoJtWi2nQX1aG7qS7dQ/XoXqpP91EDup8a0gPUiB6kxvQQNaGHqSk1o+bUglpSK2pNj1AbepTaUjtqT49RB3qcOtITlExPUid6ijrT09SFnqGu9Cx1o+eoO/WgnvQ89aIXqDf1oRTqS/3oRepPA2ggDaLB9FINAKCh9Aql0jAaTq/SCHqNRtLrNIpG0xh6g8bSOBpPE2giTaI0epMm01s0hd6mqTSNptMMSqeZNIveodk0h+bSuzSP3qP5tIAW0iLKoPdpMS2hTPqAltKHlEXLaDmtoJW0ilbTGp8bgNbTBtpIm2gzbaGt9BFto+2EtJN20W7aQx/TXvqE9tGntJ8+owOEeJA+p0P0BR2mL+kIfUVH6Ws6Rt/QcfqWTtBJOkXf0Wn6ns7QWTpHP9B5+pEu0E90kTxBiKEIZajCIMwV5g5jwjxhbHhVGBdeHeYNrwkj4bVhfHhdmC+8PswfFggLhoXChLBwWCTUoQltSGEYFg2LhdGweFgivCFMDEuGpcLSoQvLhEnhjWHZ8KawXHhzWD68JawQ3hpWDCuFD99bJbwtrBreHlYL7wirh3eGNcKaYa2wdnhXWCe8O6wb3hPWC+8Ny4X3hQ3C+8OG4QNho/DBsHH4UNgkfDhsGjYLm4ctwpZhq7B1+EjYJnw0bBu2C9uHj4UdwsfDjuETYXL4ZNgpfOoPH08J+4b9whfDF0Pv75ELo4uiGdH3o4ujS6KZ0Q+iS6MfRrOiy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo1ui3tfODQ6dcNIpF7hcLreLcXlcrLvKxbmrXV53jYu4a128u87lc9e7/K6AK+gKuQRX2BVx2hlnHbnQFXXFXNQVdyXcDS7RlXSlXGnnXBmX5Fq51q61a+MedW1dO9fePeYec4+7x90T7gn3pOvknnKd3dOui3vGdXXPumfdc6676+F6uuddL/eC6+36uBSX4vq5fq6/6+8GuoFusBvshrghbqgb6lJdqhvuhrsRboQb6Ua6UW6UG+PGuLFurBvvxruJfqJLc2luspvsprgpbqqb6qa76S7dpbtZbpab7Wa7uW6um5c4z813891Ct9BluAy32C12mS7TLXVLXZbLcsvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XP73X53wB04591Bd8h94Q67L90R95U76r52x9w37rj71p1wJ90p95077b53Z9xZd8794M67H90F95O76LxLi7wZmRx5KzIl8nZkamRaZHpkRiQ9MjMyK/JOZHZkTmRuBGFe5L3I/MiCyMLIokhG5P3I4siSSGbkg8jSyIeRrMiyyPLIisjKyKqI94W3hb6oL+ajvrgv4W/wib6kL+VLe+fL+CR/oy/rb/Ll/M2+vL/FV/C3+oq+kq/sm/nmvoVv6Vv51v4R38Y/6tv6dr69f8x38I/7jv4Jn+yf9J38U76zf9p38c/4rv5Z380/57v7Hr6nf9738i/43r6PT/F9fT//ou/vB/iBfpAf7F/yQ/zLfqh/xaf6YX64f9WP8K/5kf51P8qP9mP8G36sH+fH+wl+op/k0/ybfrJ/y0/xb/upfpqf7mf4dD/Tz/Lv+Nl+jp/r3/Xz/Ht+vl/gF/pFPsO/7xf7JT7Tf+CX+g99ll/ml/sVHmJW+dV+jV/r1/n1foPf6Df5zX6L3+o/8tv8dr/D7/S7/G6/x3/s9/pP/D7/qd/vP/MH/N/8Qf+5P+S/8If9l/6I/8of9V/7Y/4bf9x/60/4k/6U/86f9t/7M/6sP+d/8Of9j/6C/8lf5L9ZY4wxxhj7U+QfPN73v/meuLRl6wcAV28vdPi3NTfm/2U9QCR0iADAk326PXjp042UGjVSUlIuPTdLQlBsAQBELufngsvxMmgPj0MytIOy/21/A0SP83Sp/q/bb+tHbwGI/S85MXA5vlz/pn9Qf9y8P6y/ACCx2OWcPHA5vly/3D+oX6DNH9TP83kaQNv/khMHl+PL9ZPgUXgKkv9ooL848KeexRhjjDHGGGPsP8YAUbnLH13fZl+fJ6jLObnhcvxH1+c/+3PXpIwxxhhjjDHGGPsXeaZHzyceSU5u1+VKLQCu5Kvz4s8scv17tPEftpD/Hm38o8WV/s3EGGOMMcYY+6tdPum/0p0wxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGM51/+Pfyd2pfeRMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//tVgiNQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80000) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) 326.128467ms ago: executing program 1 (id=1680): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x8}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 255.04522ms ago: executing program 2 (id=1681): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)='+'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6f, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 234.745741ms ago: executing program 4 (id=1682): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = memfd_create(&(0x7f0000000200)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r1, 0x0, 0x2, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040820}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fchmod(r4, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_delete(0x0) 119.841516ms ago: executing program 1 (id=1683): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file1'}, 0xb) write$binfmt_elf64(r0, &(0x7f0000000fc0)=ANY=[], 0x78) 0s ago: executing program 0 (id=1684): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="03011400012989290e358000ad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 'syz.2.497': attribute type 29 has an invalid length. [ 87.537244][ T5585] netlink: 'syz.2.497': attribute type 29 has an invalid length. [ 87.633951][ T5593] ubi: mtd0 is already attached to ubi0 [ 87.995259][ T5572] chnl_net:caif_netlink_parms(): no params data found [ 88.747739][ T4232] Bluetooth: hci3: command tx timeout [ 89.099782][ T5628] netlink: 68 bytes leftover after parsing attributes in process `syz.2.509'. [ 89.134886][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.146904][ T5572] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.167324][ T5572] device bridge_slave_0 entered promiscuous mode [ 89.376736][ T47] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 89.423556][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 89.432607][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.434683][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.437335][ T5572] device bridge_slave_1 entered promiscuous mode [ 89.439533][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 89.444376][ T5635] bond2 (unregistering): Released all slaves [ 89.567808][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.957287][ T5572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.379314][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.436680][ T5572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.544976][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.559388][ T5572] team0: Port device team_slave_0 added [ 90.561283][ T5663] netlink: 68 bytes leftover after parsing attributes in process `syz.2.523'. [ 90.574783][ T5572] team0: Port device team_slave_1 added [ 90.747755][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.755016][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.761281][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.785859][ T5572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.790013][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'. [ 90.815995][ T47] Bluetooth: hci3: command tx timeout [ 90.823676][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 90.826453][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.828895][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.837637][ T5681] bond1 (unregistering): Released all slaves [ 91.552462][ T5572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.554280][ T5572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.564573][ T5572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.667365][ T5572] device hsr_slave_0 entered promiscuous mode [ 91.706621][ T5572] device hsr_slave_1 entered promiscuous mode [ 91.726048][ T5572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.728075][ T5572] Cannot create hsr debugfs directory [ 91.776960][ T5705] netlink: 68 bytes leftover after parsing attributes in process `syz.0.538'. [ 91.991227][ T5717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 92.058984][ T5722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.092031][ T5722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.226288][ T5725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 92.247742][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 92.254258][ T5728] bond1 (unregistering): Released all slaves [ 92.572196][ T5759] ubi: mtd0 is already attached to ubi0 [ 92.738734][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 92.868519][ T5780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 92.925054][ T47] Bluetooth: hci3: command tx timeout [ 92.932137][ T55] bridge0: port 2(erspan0) entered disabled state [ 93.007193][ T55] device erspan0 left promiscuous mode [ 93.009499][ T55] bridge0: port 2(erspan0) entered disabled state [ 93.013066][ T5793] ubi: mtd0 is already attached to ubi0 [ 93.054948][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 93.068384][ T5780] bond2 (unregistering): Released all slaves [ 93.198550][ T5572] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.246683][ T5572] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.516828][ T5572] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.542434][ T5822] ubi: mtd0 is already attached to ubi0 [ 93.567453][ T5572] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.751457][ T5832] bond1 (unregistering): Released all slaves [ 94.190520][ T5847] netlink: 'syz.1.586': attribute type 3 has an invalid length. [ 94.245870][ T5854] bond1 (unregistering): Released all slaves [ 94.271697][ T5863] ubi: mtd0 is already attached to ubi0 [ 94.816847][ T5889] ubi: mtd0 is already attached to ubi0 [ 94.901358][ T5572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.937968][ T55] device bridge_slave_1 left promiscuous mode [ 94.939769][ T55] bridge1: port 1(bridge_slave_1) entered disabled state [ 94.943551][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.946234][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.974052][ T4228] Bluetooth: hci3: command tx timeout [ 94.989903][ T55] device hsr_slave_0 left promiscuous mode [ 95.015360][ T55] device hsr_slave_1 left promiscuous mode [ 95.094686][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.096850][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.099698][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.104452][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.111715][ T55] device bridge_slave_0 left promiscuous mode [ 95.113620][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.254221][ T55] device veth1_macvtap left promiscuous mode [ 95.256681][ T55] device veth0_macvtap left promiscuous mode [ 95.258481][ T55] device veth1_vlan left promiscuous mode [ 95.261053][ T55] device veth0_vlan left promiscuous mode [ 97.155557][ T55] team0 (unregistering): Port device team_slave_1 removed [ 97.384548][ T55] team0 (unregistering): Port device team_slave_0 removed [ 97.544111][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.743216][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.236318][ T55] bond0 (unregistering): Released all slaves [ 100.481020][ T5572] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.486955][ T5895] __nla_validate_parse: 8 callbacks suppressed [ 100.486968][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 100.503629][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 100.522173][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 100.530150][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.532685][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.572756][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.575388][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.578737][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.581698][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.591461][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.591839][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.592855][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.600933][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.629465][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.644808][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.656069][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.658945][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.664443][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.696868][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 100.704760][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.707315][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.728825][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.731553][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.734071][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.739707][ T5572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.750702][ T5572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.760074][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.760793][ T5923] ubi: mtd0 is already attached to ubi0 [ 100.779000][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.788385][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.795921][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.817991][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 100.979910][ T5572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.986850][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.989686][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.231952][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 101.255763][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.258451][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.288681][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.291322][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.293951][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.296674][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.307795][ T5572] device veth0_vlan entered promiscuous mode [ 101.337877][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.626'. [ 101.378512][ T4228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.389320][ T4228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.396666][ T4228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.403339][ T4228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.406518][ T4228] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 101.408697][ T4228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.414848][ T4227] bridge0: port 4(syz_tun) entered disabled state [ 101.482683][ T4227] device syz_tun left promiscuous mode [ 101.484221][ T4227] bridge0: port 4(syz_tun) entered disabled state [ 101.514677][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 101.518793][ T5572] device veth1_vlan entered promiscuous mode [ 101.530038][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 101.657090][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.659625][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.675484][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.678189][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.700972][ T5572] device veth0_macvtap entered promiscuous mode [ 101.714554][ T5572] device veth1_macvtap entered promiscuous mode [ 101.719873][ T5971] ubi: mtd0 is already attached to ubi0 [ 101.757162][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.782107][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.784772][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.787526][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.790092][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.793102][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.795703][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.798447][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.821753][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.861111][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.863694][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.866065][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.868675][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.872230][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 101.875913][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.878712][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.891457][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.894389][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.897038][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.899670][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.914321][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.936569][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.948728][ T5572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.955679][ T5572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.969026][ T5572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.978816][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.986728][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.067185][ T5572] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.069620][ T5572] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.072842][ T5572] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.075246][ T5572] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.080631][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 102.088079][ T5986] netlink: 'syz.0.637': attribute type 3 has an invalid length. [ 102.296396][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.298519][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.303356][ T5959] device bridge_slave_0 entered promiscuous mode [ 102.329695][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.332148][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.334351][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.346836][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.357700][ T5959] device bridge_slave_1 entered promiscuous mode [ 102.368630][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.411110][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.440042][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.446902][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.447746][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.482645][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.499252][ T5959] team0: Port device team_slave_0 added [ 102.502986][ T5959] team0: Port device team_slave_1 added [ 102.607114][ T6006] ubi: mtd0 is already attached to ubi0 [ 102.671280][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.678078][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.728321][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.802077][ T6010] Bluetooth: MGMT ver 1.22 [ 102.803504][ T6010] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 103.459740][ T4228] Bluetooth: hci5: command tx timeout [ 103.478463][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.480860][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.487686][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.633617][ T5959] device hsr_slave_0 entered promiscuous mode [ 103.679878][ T5959] device hsr_slave_1 entered promiscuous mode [ 103.719726][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.721777][ T5959] Cannot create hsr debugfs directory [ 103.793362][ T6021] netlink: 'syz.4.649': attribute type 3 has an invalid length. [ 103.940189][ T1511] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.023037][ T5959] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.135009][ T6040] ubi: mtd0 is already attached to ubi0 [ 104.265025][ T5959] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.299295][ T1511] usb 1-1: Using ep0 maxpacket: 32 [ 104.366906][ T6046] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 105.040865][ T5959] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.083487][ T6050] netlink: 'syz.3.660': attribute type 3 has an invalid length. [ 105.117214][ T1511] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.134208][ T1511] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.136864][ T1511] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 105.141394][ T1511] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 105.143967][ T1511] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 105.146465][ T1511] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 105.180512][ T5959] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.328853][ T1511] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.331527][ T1511] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.333644][ T1511] usb 1-1: Product: syz [ 105.334713][ T1511] usb 1-1: Manufacturer: syz [ 105.335916][ T1511] usb 1-1: SerialNumber: syz [ 105.491829][ T6059] __nla_validate_parse: 4 callbacks suppressed [ 105.491843][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.663'. [ 105.528774][ T4228] Bluetooth: hci5: command tx timeout [ 105.620127][ T6069] ubi: mtd0 is already attached to ubi0 [ 105.620583][ T1511] cdc_ncm 1-1:1.0: bind() failure [ 105.630547][ T1511] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 105.632396][ T1511] cdc_ncm 1-1:1.1: bind() failure [ 105.652714][ T1511] usb 1-1: USB disconnect, device number 5 [ 105.677174][ T5959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.771288][ T5959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.862891][ T6080] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 106.514906][ T5959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.549979][ T5959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.640696][ T6085] netlink: 'syz.1.673': attribute type 3 has an invalid length. [ 106.783482][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'. [ 106.859247][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 106.922659][ T6102] ubi: mtd0 is already attached to ubi0 [ 106.955970][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.973255][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.975748][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.988942][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.008706][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.011303][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.013822][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.015705][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.141701][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.159564][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.173079][ T6114] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 107.222523][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.271799][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.273875][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.351391][ T6111] netlink: 'syz.3.686': attribute type 3 has an invalid length. [ 107.402378][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.618276][ T47] Bluetooth: hci5: command tx timeout [ 107.679986][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.768484][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.771565][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.774227][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.781387][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.792051][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.806026][ T5959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.815742][ T5959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.825462][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.828809][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.831950][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.835183][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.894852][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.918783][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.930548][ T1511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.970359][ T55] bridge0: port 3(erspan0) entered disabled state [ 107.993836][ T6130] ubi: mtd0 is already attached to ubi0 [ 108.030348][ T55] device erspan0 left promiscuous mode [ 108.031997][ T55] bridge0: port 3(erspan0) entered disabled state [ 108.086822][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 108.127427][ T6143] netlink: 'syz.0.696': attribute type 3 has an invalid length. [ 108.129651][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 108.418507][ T6153] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 109.055750][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.151521][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.153641][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.192248][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.195048][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.235019][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 109.255940][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.259667][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.260799][ T6168] ubi: mtd0 is already attached to ubi0 [ 109.266514][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.282113][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.286169][ T5959] device veth0_vlan entered promiscuous mode [ 109.330820][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.333500][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.572025][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 109.582011][ T6173] netlink: 'syz.4.708': attribute type 3 has an invalid length. [ 109.593632][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 109.601439][ T5959] device veth1_vlan entered promiscuous mode [ 109.694606][ T47] Bluetooth: hci5: command tx timeout [ 109.809349][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.812153][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.814968][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.817998][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.821912][ T5959] device veth0_macvtap entered promiscuous mode [ 109.885713][ T6191] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 110.640258][ T5959] device veth1_macvtap entered promiscuous mode [ 110.652648][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.655294][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.670984][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.676825][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.679566][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.682465][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.685887][ T6203] ubi: mtd0 is already attached to ubi0 [ 110.692832][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.710273][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.713421][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.721173][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.727266][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.730154][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.734114][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.744511][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 110.748586][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.751261][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.753930][ T6206] netlink: 'syz.0.720': attribute type 3 has an invalid length. [ 110.846642][ T55] device bridge_slave_1 left promiscuous mode [ 110.848399][ T55] bridge2: port 1(bridge_slave_1) entered disabled state [ 110.871063][ T55] device hsr_slave_0 left promiscuous mode [ 110.986193][ T55] device hsr_slave_1 left promiscuous mode [ 111.068235][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.073444][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.107023][ T6222] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 111.138578][ T4216] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.145836][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.181292][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.374169][ T55] device bridge_slave_0 left promiscuous mode [ 111.405822][ T4216] usb 1-1: Using ep0 maxpacket: 32 [ 111.463341][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.547272][ T4216] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.551179][ T4216] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.554335][ T4216] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 111.621866][ T4216] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 111.672321][ T4216] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.674977][ T4216] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 111.825762][ T55] device veth1_macvtap left promiscuous mode [ 111.827484][ T55] device veth0_macvtap left promiscuous mode [ 111.829227][ T55] device veth1_vlan left promiscuous mode [ 111.830869][ T55] device veth0_vlan left promiscuous mode [ 111.885728][ T4216] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.889709][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.892014][ T4216] usb 1-1: Product: syz [ 111.893186][ T4216] usb 1-1: Manufacturer: syz [ 111.897462][ T4216] usb 1-1: SerialNumber: syz [ 113.857638][ T55] team0 (unregistering): Port device team_slave_1 removed [ 114.077052][ T55] team0 (unregistering): Port device team_slave_0 removed [ 114.255836][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.465248][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.895122][ T55] bond0 (unregistering): Released all slaves [ 117.012928][ T4216] cdc_ncm 1-1:1.0: bind() failure [ 117.016610][ T4216] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 117.018447][ T4216] cdc_ncm 1-1:1.1: bind() failure [ 117.117270][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.120043][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.122592][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.125767][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.128329][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.131080][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.133719][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.136409][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.139975][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.142661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.145354][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.147962][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.726'. [ 117.151874][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 117.164129][ T5959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.173640][ T5959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.176124][ T5959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.178493][ T5959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.189280][ T4275] usb 1-1: USB disconnect, device number 6 [ 117.357578][ T6242] ubi: mtd0 is already attached to ubi0 [ 117.362866][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 117.363700][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.380832][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.389576][ T6240] netlink: 'syz.1.732': attribute type 3 has an invalid length. [ 117.393375][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.423568][ T4968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.425810][ T4968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.429820][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.596144][ T6253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.603197][ T6252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.701713][ T6257] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 118.912525][ T6288] ubi: mtd0 is already attached to ubi0 [ 118.931093][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.749'. [ 119.033023][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.043986][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 119.047241][ T6291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.705573][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.712130][ T6293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.787160][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 120.715403][ T6315] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 121.623760][ T6326] ubi: mtd0 is already attached to ubi0 [ 121.659926][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.763'. [ 121.760078][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.771026][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.774105][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.538720][ T6340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.571098][ T6337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.627402][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 123.147261][ T6364] ubi: mtd0 is already attached to ubi0 [ 123.245964][ T6366] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 124.000505][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.003391][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.004062][ T6374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.778'. [ 124.254951][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 124.457584][ T6393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.478595][ T6392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.586762][ T6396] ubi: mtd0 is already attached to ubi0 [ 125.064273][ T6406] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 125.773355][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.796'. [ 125.848510][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.851108][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.873840][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 125.919388][ T2050] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.137072][ T6430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.152617][ T6429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.224085][ T6434] ubi: mtd0 is already attached to ubi0 [ 126.383473][ T6446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 126.444633][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 126.766123][ T6458] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 127.743315][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.794991][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 127.948489][ T22] usb 1-1: device descriptor read/64, error -71 [ 127.954437][ T6486] bridge0: port 3(erspan0) entered blocking state [ 127.956154][ T6486] bridge0: port 3(erspan0) entered disabled state [ 127.958726][ T6486] device erspan0 entered promiscuous mode [ 127.960504][ T6486] bridge0: port 3(erspan0) entered blocking state [ 127.962247][ T6486] bridge0: port 3(erspan0) entered forwarding state [ 127.972846][ T6486] bridge0: port 4(syz_tun) entered blocking state [ 127.974708][ T6486] bridge0: port 4(syz_tun) entered disabled state [ 127.977173][ T6486] device syz_tun entered promiscuous mode [ 127.979158][ T6486] bridge0: port 4(syz_tun) entered blocking state [ 127.980869][ T6486] bridge0: port 4(syz_tun) entered forwarding state [ 128.100484][ T6489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.130620][ T6488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.164898][ T6491] ubi: mtd0 is already attached to ubi0 [ 128.227327][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.437311][ T22] usb 1-1: device descriptor read/64, error -71 [ 128.563473][ T22] usb usb1-port1: attempt power cycle [ 128.696671][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 128.777315][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.835'. [ 128.847807][ T6520] ubi: mtd0 is already attached to ubi0 [ 128.967535][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 129.057125][ T22] usb 1-1: device descriptor read/8, error -71 [ 129.336893][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 129.436537][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 129.447169][ T22] usb 1-1: device descriptor read/8, error -71 [ 129.524790][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.850'. [ 129.576742][ T22] usb usb1-port1: unable to enumerate USB device [ 129.657372][ T6558] bridge0: port 3(erspan0) entered blocking state [ 129.659165][ T6558] bridge0: port 3(erspan0) entered disabled state [ 129.662129][ T6558] device erspan0 entered promiscuous mode [ 129.663992][ T6558] bridge0: port 3(erspan0) entered blocking state [ 129.665810][ T6558] bridge0: port 3(erspan0) entered forwarding state [ 129.672658][ T6558] bridge0: port 4(syz_tun) entered blocking state [ 129.674406][ T6558] bridge0: port 4(syz_tun) entered disabled state [ 129.676859][ T6558] device syz_tun entered promiscuous mode [ 129.678687][ T6558] bridge0: port 4(syz_tun) entered blocking state [ 129.680456][ T6558] bridge0: port 4(syz_tun) entered forwarding state [ 129.924227][ T6569] ubi: mtd0 is already attached to ubi0 [ 130.513395][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.861'. [ 130.792694][ T6599] ubi: mtd0 is already attached to ubi0 [ 130.829500][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 130.894763][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.917356][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.954320][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 131.946001][ T6643] ubi: mtd0 is already attached to ubi0 [ 131.995614][ T4228] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 131.998807][ T4228] Bluetooth: hci2: Injecting HCI hardware error event [ 132.002342][ T47] Bluetooth: hci2: hardware error 0x00 [ 132.033336][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 132.153806][ T6654] bridge0: port 3(erspan0) entered blocking state [ 132.156251][ T6654] bridge0: port 3(erspan0) entered disabled state [ 132.159572][ T6654] device erspan0 entered promiscuous mode [ 132.161360][ T6654] bridge0: port 3(erspan0) entered blocking state [ 132.163160][ T6654] bridge0: port 3(erspan0) entered forwarding state [ 132.175497][ T6654] bridge0: port 4(syz_tun) entered blocking state [ 132.177362][ T6654] bridge0: port 4(syz_tun) entered disabled state [ 132.179709][ T6654] device syz_tun entered promiscuous mode [ 132.181640][ T6654] bridge0: port 4(syz_tun) entered blocking state [ 132.183283][ T6654] bridge0: port 4(syz_tun) entered forwarding state [ 132.424299][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 132.435327][ T1511] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 132.625491][ T1511] usb 1-1: device descriptor read/64, error -71 [ 132.900613][ T1511] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.090795][ T1511] usb 1-1: device descriptor read/64, error -71 [ 133.093200][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 133.211207][ T1511] usb usb1-port1: attempt power cycle [ 133.247594][ T6695] ubi: mtd0 is already attached to ubi0 [ 133.514673][ T4228] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 133.517260][ T4228] Bluetooth: hci5: Injecting HCI hardware error event [ 133.520820][ T4232] Bluetooth: hci5: hardware error 0x00 [ 133.614767][ T1511] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.704722][ T1511] usb 1-1: device descriptor read/8, error -71 [ 133.974597][ T1511] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 134.064564][ T1511] usb 1-1: device descriptor read/8, error -71 [ 134.122977][ T6731] ubi: mtd0 is already attached to ubi0 [ 134.184576][ T1511] usb usb1-port1: unable to enumerate USB device [ 134.398428][ T47] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 134.525385][ T6749] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 135.244642][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.923'. [ 135.593750][ T4228] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 135.596318][ T4228] Bluetooth: hci3: Injecting HCI hardware error event [ 135.602443][ T4244] Bluetooth: hci3: hardware error 0x00 [ 135.673848][ T4232] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 135.754051][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.758657][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.920458][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.922859][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.995599][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.935'. [ 136.028516][ T6789] bridge0: port 3(erspan0) entered blocking state [ 136.030224][ T6789] bridge0: port 3(erspan0) entered disabled state [ 136.032542][ T6789] device erspan0 entered promiscuous mode [ 136.034397][ T6789] bridge0: port 3(erspan0) entered blocking state [ 136.036130][ T6789] bridge0: port 3(erspan0) entered forwarding state [ 136.043737][ T6789] bridge0: port 4(syz_tun) entered blocking state [ 136.045480][ T6789] bridge0: port 4(syz_tun) entered disabled state [ 136.047830][ T6789] device syz_tun entered promiscuous mode [ 136.049663][ T6789] bridge0: port 4(syz_tun) entered blocking state [ 136.051389][ T6789] bridge0: port 4(syz_tun) entered forwarding state [ 136.069409][ T6791] netlink: 48 bytes leftover after parsing attributes in process `syz.0.937'. [ 136.456527][ T6808] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 136.513382][ T47] Bluetooth: hci2: Opcode 0x206c failed: -110 [ 136.953919][ T4232] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 136.956711][ T4232] Bluetooth: hci4: Injecting HCI hardware error event [ 136.962255][ T4232] Bluetooth: hci4: hardware error 0x00 [ 137.303218][ T6820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.947'. [ 137.310743][ T6825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.948'. [ 137.822455][ T4276] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 137.832662][ T4244] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 137.967467][ T6850] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 138.552200][ T47] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 138.665339][ T6855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.960'. [ 138.680973][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.959'. [ 138.712845][ T4276] usb 1-1: device descriptor read/64, error -71 [ 138.731534][ T6858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.745422][ T6858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.987716][ T4276] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 139.171809][ T4276] usb 1-1: device descriptor read/64, error -71 [ 139.292245][ T4276] usb usb1-port1: attempt power cycle [ 139.352513][ T4232] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 139.515772][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.972'. [ 139.529897][ T6887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.971'. [ 139.796274][ T4276] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 139.882054][ T4276] usb 1-1: device descriptor read/8, error -71 [ 139.888725][ T6904] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 139.911587][ T4244] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 140.171461][ T4276] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 140.262817][ T4276] usb 1-1: device descriptor read/8, error -71 [ 140.383092][ T4276] usb usb1-port1: unable to enumerate USB device [ 140.619540][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.626275][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.865501][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.984'. [ 140.883175][ T6928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.985'. [ 141.205222][ T6937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.207718][ T6937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.430815][ T4232] Bluetooth: hci4: Opcode 0x206c failed: -110 [ 141.549172][ T6944] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 141.990627][ T4244] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 142.461518][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 142.465650][ T6957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.997'. [ 142.515179][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.527892][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.659356][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.673566][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.938026][ T6980] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 143.509745][ T4232] Bluetooth: hci4: Opcode 0x2046 failed: -110 [ 143.765991][ T6984] ubi: mtd0 is already attached to ubi0 [ 143.768670][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 143.768948][ T6991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1009'. [ 144.138883][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.147177][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.284639][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.293698][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.387676][ T7021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1022'. [ 144.431498][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 144.541929][ T7027] ubi: mtd0 is already attached to ubi0 [ 145.286096][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1033'. [ 145.384930][ T7050] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 146.030020][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 146.069125][ T7055] ubi: mtd0 is already attached to ubi0 [ 146.136040][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.146594][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.498175][ T4289] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 146.601788][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 146.738266][ T4289] usb 1-1: Using ep0 maxpacket: 32 [ 146.777286][ T7094] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 146.910832][ T4289] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.936190][ T4289] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.088257][ T4289] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.183136][ T4289] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.278132][ T4289] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.347236][ T4289] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 147.527784][ T4289] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.530252][ T4289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.532380][ T4289] usb 1-1: Product: syz [ 147.533474][ T4289] usb 1-1: Manufacturer: syz [ 147.534692][ T4289] usb 1-1: SerialNumber: syz [ 147.544161][ T7103] ubi: mtd0 is already attached to ubi0 [ 147.837775][ T4289] cdc_ncm 1-1:1.0: bind() failure [ 147.843825][ T4289] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 147.845736][ T4289] cdc_ncm 1-1:1.1: bind() failure [ 147.857785][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 147.868857][ T4289] usb 1-1: USB disconnect, device number 19 [ 147.910526][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1063'. [ 147.964657][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.970044][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.973496][ T7123] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1062'. [ 148.315600][ T7134] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 149.041683][ T7138] ubi: mtd0 is already attached to ubi0 [ 149.437983][ T7161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1078'. [ 149.458871][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.461222][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.642697][ T7170] ubi: mtd0 is already attached to ubi0 [ 149.706608][ T4235] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 149.901294][ T4235] usb 1-1: device descriptor read/64, error -71 [ 150.037666][ T7183] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 150.176407][ T4235] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 150.386208][ T4235] usb 1-1: device descriptor read/64, error -71 [ 150.506909][ T4235] usb usb1-port1: attempt power cycle [ 150.851034][ T7199] ubi: mtd0 is already attached to ubi0 [ 150.916093][ T4235] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 151.006091][ T4235] usb 1-1: device descriptor read/8, error -71 [ 151.034900][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1097'. [ 151.349809][ T4235] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 151.460217][ T7221] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 152.105850][ T4235] usb 1-1: device descriptor read/8, error -71 [ 152.123944][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.126412][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.226323][ T4235] usb usb1-port1: unable to enumerate USB device [ 152.286456][ T7234] ubi: mtd0 is already attached to ubi0 [ 152.858039][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 153.182055][ T7266] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 153.878056][ T7270] ubi: mtd0 is already attached to ubi0 [ 153.890035][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.892431][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.896043][ T7271] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1121'. [ 154.493264][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'. [ 154.606838][ T4276] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 154.762387][ T7306] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 154.884310][ T4276] usb 1-1: Using ep0 maxpacket: 32 [ 155.035355][ T4276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.039770][ T4276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.043099][ T4276] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.141556][ T4276] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 155.221081][ T4276] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 155.299209][ T4276] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 155.456058][ T7312] ubi: mtd0 is already attached to ubi0 [ 155.544293][ T4276] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.547168][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.549463][ T4276] usb 1-1: Product: syz [ 155.550582][ T4276] usb 1-1: Manufacturer: syz [ 155.551768][ T4276] usb 1-1: SerialNumber: syz [ 155.634393][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.638732][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.714989][ T7325] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1141'. [ 155.854067][ T4276] cdc_ncm 1-1:1.0: bind() failure [ 155.865465][ T4276] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 155.868757][ T4276] cdc_ncm 1-1:1.1: bind() failure [ 155.888109][ T4276] usb 1-1: USB disconnect, device number 24 [ 156.113210][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1146'. [ 156.386921][ T7344] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 157.035009][ T7346] ubi: mtd0 is already attached to ubi0 [ 157.084843][ T7351] netlink: 'syz.0.1152': attribute type 3 has an invalid length. [ 157.233500][ T7361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.237182][ T7361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.243307][ T7361] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1158'. [ 157.383267][ T4231] bridge0: port 4(syz_tun) entered disabled state [ 157.449878][ T4244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.453936][ T4244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.456948][ T4244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.459583][ T4244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.461921][ T4244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.464650][ T4244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.474822][ T4231] device syz_tun left promiscuous mode [ 157.476296][ T4231] bridge0: port 4(syz_tun) entered disabled state [ 157.519631][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 157.787183][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.806210][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.898765][ T7384] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 158.587160][ T4294] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.756936][ T7397] ubi: mtd0 is already attached to ubi0 [ 158.784551][ T4294] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.897743][ T4294] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.929410][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 158.942350][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.944948][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.947964][ T7409] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1176'. [ 158.970800][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.980191][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.053913][ T4294] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.062564][ T7370] chnl_net:caif_netlink_parms(): no params data found [ 159.129591][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.131640][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.134997][ T7370] device bridge_slave_0 entered promiscuous mode [ 159.138332][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.140263][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.143920][ T7370] device bridge_slave_1 entered promiscuous mode [ 159.158362][ T7370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.163269][ T7370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.178803][ T7370] team0: Port device team_slave_0 added [ 159.183739][ T7370] team0: Port device team_slave_1 added [ 159.196125][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.198163][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.205721][ T7370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.221272][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.225940][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.239450][ T7370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.394493][ T7370] device hsr_slave_0 entered promiscuous mode [ 159.442035][ T7370] device hsr_slave_1 entered promiscuous mode [ 159.511650][ T4232] Bluetooth: hci1: command tx timeout [ 160.367672][ T7450] ubi: mtd0 is already attached to ubi0 [ 160.559214][ T7459] netlink: 'syz.0.1188': attribute type 3 has an invalid length. [ 160.941025][ T14] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 160.988303][ T4294] bridge0: port 3(erspan0) entered disabled state [ 161.035179][ T4294] device erspan0 left promiscuous mode [ 161.036773][ T4294] bridge0: port 3(erspan0) entered disabled state [ 161.057438][ T7495] ubi: mtd0 is already attached to ubi0 [ 161.085373][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 161.143596][ T14] usb 1-1: device descriptor read/64, error -71 [ 161.611007][ T4232] Bluetooth: hci1: command tx timeout [ 162.110439][ T14] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 162.123569][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.125963][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.300783][ T14] usb 1-1: device descriptor read/64, error -71 [ 162.423939][ T14] usb usb1-port1: attempt power cycle [ 162.823868][ T7370] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.850061][ T14] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 162.950527][ T14] usb 1-1: device descriptor read/8, error -71 [ 163.171530][ T7543] ubi: mtd0 is already attached to ubi0 [ 163.179936][ T7370] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.214278][ T7370] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.229851][ T14] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 163.329950][ T14] usb 1-1: device descriptor read/8, error -71 [ 163.372930][ T7548] netlink: 'syz.4.1209': attribute type 3 has an invalid length. [ 163.375244][ T7370] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.423328][ T4294] device hsr_slave_0 left promiscuous mode [ 163.454939][ T14] usb usb1-port1: unable to enumerate USB device [ 163.459630][ T4294] device hsr_slave_1 left promiscuous mode [ 163.555554][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.557702][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.567412][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.569426][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.577542][ T4294] device bridge_slave_1 left promiscuous mode [ 163.579192][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.640530][ T4294] device bridge_slave_0 left promiscuous mode [ 163.642461][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.660192][ T4244] Bluetooth: hci1: command tx timeout [ 163.779683][ T4294] device veth1_macvtap left promiscuous mode [ 163.781536][ T4294] device veth0_macvtap left promiscuous mode [ 163.783191][ T4294] device veth1_vlan left promiscuous mode [ 163.784879][ T4294] device veth0_vlan left promiscuous mode [ 163.882356][ T4294] bond1 (unregistering): Released all slaves [ 165.592642][ T4294] team0 (unregistering): Port device team_slave_1 removed [ 165.738591][ T4244] Bluetooth: hci1: command tx timeout [ 165.780926][ T4294] team0 (unregistering): Port device team_slave_0 removed [ 165.970023][ T4294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.169058][ T4294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.654162][ T4294] bond0 (unregistering): Released all slaves [ 168.958070][ T7574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1214'. [ 169.088626][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.135365][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.137962][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.142730][ T7370] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.157435][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.160034][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.162342][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.164254][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.166616][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.203914][ T7584] ubi: mtd0 is already attached to ubi0 [ 169.228593][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.231149][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.234936][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.236900][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.240007][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.252973][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.958716][ T4226] bridge0: port 4(syz_tun) entered disabled state [ 170.027128][ T4244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.030936][ T4244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.033627][ T4244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.037499][ T4244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.040229][ T4244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.042973][ T4244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.059213][ T4226] device syz_tun left promiscuous mode [ 170.060646][ T4226] bridge0: port 4(syz_tun) entered disabled state [ 170.101658][ T7370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.104596][ T7370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.112367][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.115345][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.118234][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.120852][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.123471][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.126068][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.129008][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.131525][ T4216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.162799][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.165326][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.209949][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.213691][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.335453][ T7370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.349319][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.351350][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.353477][ T7590] chnl_net:caif_netlink_parms(): no params data found [ 170.392365][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.394480][ T7590] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.403909][ T7590] device bridge_slave_0 entered promiscuous mode [ 170.408137][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.410255][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.412898][ T7590] device bridge_slave_1 entered promiscuous mode [ 170.426983][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.429601][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.446527][ T7590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.450755][ T7590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.477881][ T7590] team0: Port device team_slave_0 added [ 170.481400][ T7590] team0: Port device team_slave_1 added [ 170.503197][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.505902][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.510916][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.513959][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.526266][ T7590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.530519][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.532443][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.540015][ T7590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.544376][ T7370] device veth0_vlan entered promiscuous mode [ 170.546898][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.549262][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.602933][ T7370] device veth1_vlan entered promiscuous mode [ 170.687694][ T7590] device hsr_slave_0 entered promiscuous mode [ 170.716714][ T7590] device hsr_slave_1 entered promiscuous mode [ 170.746003][ T7590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.748098][ T7590] Cannot create hsr debugfs directory [ 170.752873][ T7370] device veth0_macvtap entered promiscuous mode [ 170.761516][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.764077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.767852][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.773918][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.800219][ T7370] device veth1_macvtap entered promiscuous mode [ 170.836847][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.839964][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.849921][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.853482][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.858727][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.864760][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.870912][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.877128][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.882037][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.888336][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.901558][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.919696][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1227'. [ 170.924297][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.927549][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.931640][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.934841][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.940839][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.948359][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.953199][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.960591][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.965366][ T7370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.971956][ T7370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.980275][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.024196][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.027755][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.040470][ T7370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.042782][ T7370] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.045039][ T7370] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.066349][ T7370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.113727][ T7624] ubi: mtd0 is already attached to ubi0 [ 171.199556][ T7590] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.241075][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.243737][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.248655][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.465305][ T7590] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.485982][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.488275][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.492704][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.569537][ T7638] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 172.056103][ T4244] Bluetooth: hci0: command tx timeout [ 172.288986][ T7590] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.298473][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.300922][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.649400][ T7590] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.667925][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1236'. [ 172.762259][ T7659] ubi: mtd0 is already attached to ubi0 [ 173.064245][ T7590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.143814][ T7670] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 173.318806][ T7590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.725250][ T7590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.827259][ T7590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.010704][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 174.134399][ T4232] Bluetooth: hci0: command tx timeout [ 174.138620][ T7687] ubi: mtd0 is already attached to ubi0 [ 174.157971][ T7590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.181480][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.183600][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.185878][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.186945][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.193645][ T7590] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.206998][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.209621][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.211993][ T4235] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.213885][ T4235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.230861][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.233293][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.243220][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.245961][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.247857][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.250006][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.270846][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.273655][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.284632][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.287257][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.290044][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.298786][ T7590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.301505][ T7590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.307818][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.310336][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.312922][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.315755][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.318532][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.321379][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.412603][ T7702] netlink: 'syz.4.1255': attribute type 3 has an invalid length. [ 174.480959][ T7590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.495908][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.498609][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.517475][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.520154][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.540535][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.543026][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.546231][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.549052][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.552656][ T7590] device veth0_vlan entered promiscuous mode [ 174.559026][ T7590] device veth1_vlan entered promiscuous mode [ 174.573538][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.577231][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.580065][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.582652][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.587383][ T7590] device veth0_macvtap entered promiscuous mode [ 174.592210][ T7590] device veth1_macvtap entered promiscuous mode [ 174.602204][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.605124][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.607585][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.610195][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.612676][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.617451][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.620070][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.622810][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.625445][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.628118][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.631879][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.635633][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.638073][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.640486][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.642944][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.648532][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.651194][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.653599][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.664200][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.666923][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.669986][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.680965][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.685447][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.688125][ T7590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.691040][ T7590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.692279][ T7590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.697385][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.700041][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.709777][ T7590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.712111][ T7590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.719194][ T7590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.721536][ T7590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.824796][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.827001][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.831040][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.878541][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.880869][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.894620][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.967082][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 175.036867][ T7722] ubi: mtd0 is already attached to ubi0 [ 175.282668][ T7732] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 176.145171][ T7740] netlink: 'syz.3.1268': attribute type 3 has an invalid length. [ 176.213284][ T4244] Bluetooth: hci0: command tx timeout [ 176.277431][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.280772][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.410492][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.413049][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.576552][ T7757] ubi: mtd0 is already attached to ubi0 [ 176.592739][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 176.980765][ T7775] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 177.711550][ T7783] netlink: 'syz.4.1285': attribute type 3 has an invalid length. [ 177.862214][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 177.889224][ T7792] ubi: mtd0 is already attached to ubi0 [ 177.936053][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.941290][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.191516][ T7808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.197233][ T7808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.289668][ T7809] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 178.316965][ T4244] Bluetooth: hci0: command tx timeout [ 179.009379][ T7816] bridge0: port 3(erspan0) entered blocking state [ 179.011187][ T7816] bridge0: port 3(erspan0) entered disabled state [ 179.013719][ T7816] device erspan0 entered promiscuous mode [ 179.015505][ T7816] bridge0: port 3(erspan0) entered blocking state [ 179.017240][ T7816] bridge0: port 3(erspan0) entered forwarding state [ 179.199478][ T7817] netlink: 'syz.2.1298': attribute type 3 has an invalid length. [ 179.230469][ T7816] bridge0: port 4(syz_tun) entered blocking state [ 179.232692][ T7816] bridge0: port 4(syz_tun) entered disabled state [ 179.235166][ T7816] device syz_tun entered promiscuous mode [ 179.236968][ T7816] bridge0: port 4(syz_tun) entered blocking state [ 179.238596][ T7816] bridge0: port 4(syz_tun) entered forwarding state [ 179.327251][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 179.401884][ T7827] ubi: mtd0 is already attached to ubi0 [ 179.609810][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.616604][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.622990][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.626980][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.088302][ T7846] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 180.778908][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1313'. [ 180.797386][ T7850] netlink: 'syz.2.1311': attribute type 3 has an invalid length. [ 180.862640][ T7857] ubi: mtd0 is already attached to ubi0 [ 181.660249][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.671309][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.012379][ T7885] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 182.611039][ T4244] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 182.613488][ T4244] Bluetooth: hci1: Injecting HCI hardware error event [ 182.616649][ T4232] Bluetooth: hci1: hardware error 0x00 [ 182.716931][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.734479][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.751935][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1325'. [ 182.799489][ T7893] netlink: 'syz.4.1327': attribute type 3 has an invalid length. [ 182.816041][ T7895] ubi: mtd0 is already attached to ubi0 [ 183.675232][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.679300][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.775620][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'. [ 183.844343][ T7928] netlink: 'syz.0.1340': attribute type 3 has an invalid length. [ 183.967293][ T7932] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 184.737381][ T7943] ubi: mtd0 is already attached to ubi0 [ 185.039502][ T4232] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 185.105372][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'. [ 185.129130][ T4277] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 185.270273][ T7959] netlink: 'syz.1.1352': attribute type 3 has an invalid length. [ 185.370625][ T4277] usb 1-1: Using ep0 maxpacket: 32 [ 185.385984][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.400245][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.590838][ T4277] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.594257][ T4277] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.596953][ T4277] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.600079][ T4277] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.602631][ T4277] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.605201][ T4277] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 185.700504][ T7974] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 186.375707][ T7978] ubi: mtd0 is already attached to ubi0 [ 186.438291][ T4277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.440706][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.442859][ T4277] usb 1-1: Product: syz [ 186.448057][ T4277] usb 1-1: Manufacturer: syz [ 186.454218][ T4277] usb 1-1: SerialNumber: syz [ 186.593863][ T7991] netlink: 'syz.1.1365': attribute type 3 has an invalid length. [ 186.596205][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 186.851503][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.865550][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.087877][ T4232] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 187.089864][ T4277] cdc_ncm 1-1:1.0: bind() failure [ 187.094845][ T4277] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 187.097865][ T4277] cdc_ncm 1-1:1.1: bind() failure [ 187.104650][ T4277] usb 1-1: USB disconnect, device number 29 [ 187.328961][ T2050] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.345406][ T8011] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 187.387716][ T8013] ubi: mtd0 is already attached to ubi0 [ 187.490998][ T8016] bridge0: port 3(erspan0) entered blocking state [ 187.495644][ T8016] bridge0: port 3(erspan0) entered disabled state [ 187.504274][ T8016] device erspan0 entered promiscuous mode [ 187.506330][ T8016] bridge0: port 3(erspan0) entered blocking state [ 187.508192][ T8016] bridge0: port 3(erspan0) entered forwarding state [ 187.514338][ T8016] bridge0: port 4(syz_tun) entered blocking state [ 187.516309][ T8016] bridge0: port 4(syz_tun) entered disabled state [ 187.525251][ T8016] device syz_tun entered promiscuous mode [ 187.527216][ T8016] bridge0: port 4(syz_tun) entered blocking state [ 187.529061][ T8016] bridge0: port 4(syz_tun) entered forwarding state [ 187.589046][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 187.651578][ T8026] netlink: 'syz.0.1379': attribute type 3 has an invalid length. [ 187.727615][ T4244] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 187.731897][ T4244] Bluetooth: hci0: Injecting HCI hardware error event [ 187.734881][ T47] Bluetooth: hci0: hardware error 0x00 [ 187.904576][ T8039] ubi: mtd0 is already attached to ubi0 [ 188.159237][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.169086][ T8048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.173701][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.180102][ T8048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.304912][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 188.492253][ T8055] netlink: 'syz.3.1390': attribute type 3 has an invalid length. [ 188.759251][ T8075] ubi: mtd0 is already attached to ubi0 [ 188.776020][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1399'. [ 189.166869][ T4232] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 189.195639][ T8089] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 189.439956][ T8097] netlink: 'syz.2.1405': attribute type 3 has an invalid length. [ 189.553699][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.559903][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.573368][ T8104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.577973][ T8104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.581300][ T8104] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1408'. [ 189.680499][ T8108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1410'. [ 189.782257][ T8114] ubi: mtd0 is already attached to ubi0 [ 189.896746][ T47] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 189.910543][ T8120] netlink: 'syz.0.1416': attribute type 3 has an invalid length. [ 190.165571][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1421'. [ 190.349304][ T7370] bridge0: port 4(syz_tun) entered disabled state [ 190.388247][ T7370] device syz_tun left promiscuous mode [ 190.389924][ T7370] bridge0: port 4(syz_tun) entered disabled state [ 190.397211][ T4232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.407609][ T4232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.407772][ T8143] ubi: mtd0 is already attached to ubi0 [ 190.412399][ T4232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.415639][ T4232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.419146][ T4232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 190.421302][ T4232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.592853][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 190.711141][ T8149] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 190.890981][ T8155] netlink: 'syz.2.1429': attribute type 3 has an invalid length. [ 190.969453][ T4385] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.020784][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.022932][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.025538][ T8140] device bridge_slave_0 entered promiscuous mode [ 191.053979][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.058689][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.077725][ T4385] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.081783][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.083651][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.091773][ T8140] device bridge_slave_1 entered promiscuous mode [ 191.110863][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.115256][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.164368][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.170617][ T4385] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.179852][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.185380][ T8166] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1432'. [ 191.197110][ T8140] team0: Port device team_slave_0 added [ 191.200414][ T8140] team0: Port device team_slave_1 added [ 191.218165][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 191.277806][ T4385] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.282975][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.285019][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.291990][ T8140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.301568][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.303446][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.310690][ T8140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.428191][ T8140] device hsr_slave_0 entered promiscuous mode [ 191.437924][ T8172] ubi: mtd0 is already attached to ubi0 [ 191.472456][ T8140] device hsr_slave_1 entered promiscuous mode [ 191.515682][ T8140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.517749][ T8140] Cannot create hsr debugfs directory [ 191.899816][ T8189] netlink: 'syz.2.1439': attribute type 3 has an invalid length. [ 192.329867][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 192.445229][ T47] Bluetooth: hci1: command tx timeout [ 192.501601][ T4385] bridge0: port 3(erspan0) entered disabled state [ 192.534913][ T8221] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 192.557326][ T4385] device erspan0 left promiscuous mode [ 192.559114][ T4385] bridge0: port 3(erspan0) entered disabled state [ 192.634253][ T8228] ubi: mtd0 is already attached to ubi0 [ 192.752240][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.761585][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.781275][ T8235] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1448'. [ 192.986815][ T8140] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.006481][ T8140] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.036873][ T8140] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.075192][ T4216] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 193.364700][ T4216] usb 1-1: Using ep0 maxpacket: 32 [ 193.399934][ T8140] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.488519][ T4216] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.491541][ T4216] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.494224][ T4216] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.504679][ T4216] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 193.507951][ T4216] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 193.511744][ T4216] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 193.518393][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 193.764705][ T4216] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.767285][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.769465][ T4216] usb 1-1: Product: syz [ 193.770769][ T4216] usb 1-1: Manufacturer: syz [ 193.772533][ T4216] usb 1-1: SerialNumber: syz [ 193.899039][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.959685][ T4385] device hsr_slave_0 left promiscuous mode [ 193.994707][ T4385] device hsr_slave_1 left promiscuous mode [ 194.084710][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.086843][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.089349][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.092481][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.097403][ T4385] device bridge_slave_1 left promiscuous mode [ 194.101477][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.128052][ T8263] ubi: mtd0 is already attached to ubi0 [ 194.155740][ T4385] device bridge_slave_0 left promiscuous mode [ 194.157500][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.294459][ T4385] device veth1_macvtap left promiscuous mode [ 194.296325][ T4385] device veth0_macvtap left promiscuous mode [ 194.299303][ T4385] device veth1_vlan left promiscuous mode [ 194.301068][ T4385] device veth0_vlan left promiscuous mode [ 194.524170][ T4232] Bluetooth: hci1: command tx timeout [ 194.696817][ T8275] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 195.455175][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.459374][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.179013][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 196.376169][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 196.555706][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.603120][ T47] Bluetooth: hci1: command tx timeout [ 196.775086][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.692177][ T4232] Bluetooth: hci1: command tx timeout [ 198.873524][ T4216] cdc_ncm 1-1:1.0: bind() failure [ 198.880496][ T4216] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 198.882923][ T4216] cdc_ncm 1-1:1.1: bind() failure [ 199.195068][ T4385] bond0 (unregistering): Released all slaves [ 199.470490][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.472946][ T8259] netlink: 'syz.4.1456': attribute type 3 has an invalid length. [ 199.482089][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.484546][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.498833][ T7] usb 1-1: USB disconnect, device number 30 [ 199.548665][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.553705][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.556214][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.558155][ T6750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.560396][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.583880][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.586387][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.588209][ T6750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.590434][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.602301][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.606658][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.609438][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.622380][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.625362][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.636726][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 199.654891][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.657564][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.660364][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.671833][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.676490][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.679162][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.688693][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.745257][ T8292] ubi: mtd0 is already attached to ubi0 [ 200.025810][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.028183][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.042010][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.055544][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.058213][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.072977][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.075720][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.080801][ T8140] device veth0_vlan entered promiscuous mode [ 200.090411][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.268665][ T8307] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 200.661363][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.709563][ T8140] device veth1_vlan entered promiscuous mode [ 200.749738][ T8140] device veth0_macvtap entered promiscuous mode [ 200.769322][ T8309] netlink: 'syz.2.1472': attribute type 3 has an invalid length. [ 200.776171][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.794451][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.800761][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.803860][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.806938][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.813690][ T8140] device veth1_macvtap entered promiscuous mode [ 200.839180][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.844473][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.847080][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.850118][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.859696][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.863122][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.865893][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.868692][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.871543][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.874431][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.882104][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.885950][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.888882][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.893618][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.896649][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.899315][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.902564][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.924008][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.926778][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.929503][ T8140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.939619][ T8140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.947274][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.955139][ T8140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.957575][ T8140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.960761][ T8140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.977789][ T8140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.984870][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.987319][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.990036][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.994877][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.997447][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.050710][ T4968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.056121][ T4968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.130882][ T4217] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 201.144494][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.185382][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 201.196153][ T5031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.198913][ T5031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.211361][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.275031][ T8326] ubi: mtd0 is already attached to ubi0 [ 201.314380][ T8330] bridge0: port 3(erspan0) entered blocking state [ 201.321149][ T8330] bridge0: port 3(erspan0) entered disabled state [ 201.326536][ T8330] device erspan0 entered promiscuous mode [ 201.328325][ T8330] bridge0: port 3(erspan0) entered blocking state [ 201.330112][ T8330] bridge0: port 3(erspan0) entered forwarding state [ 201.341660][ T8330] bridge0: port 4(syz_tun) entered blocking state [ 201.346765][ T8330] bridge0: port 4(syz_tun) entered disabled state [ 201.355247][ T8330] device syz_tun entered promiscuous mode [ 201.357158][ T8330] bridge0: port 4(syz_tun) entered blocking state [ 201.358950][ T8330] bridge0: port 4(syz_tun) entered forwarding state [ 201.360919][ T4217] usb 1-1: device descriptor read/64, error -71 [ 201.631005][ T4217] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 202.219881][ T8348] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 202.293664][ T4217] usb 1-1: device descriptor read/64, error -71 [ 202.340091][ T8350] netlink: 'syz.4.1486': attribute type 3 has an invalid length. [ 202.423568][ T4217] usb usb1-port1: attempt power cycle [ 202.595190][ T8360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.597714][ T8360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.616250][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 202.625958][ T8362] ubi: mtd0 is already attached to ubi0 [ 202.861225][ T4217] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 202.970638][ T4217] usb 1-1: device descriptor read/8, error -71 [ 203.187044][ T8378] netlink: 'syz.2.1498': attribute type 3 has an invalid length. [ 203.249842][ T4217] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 203.360248][ T4217] usb 1-1: device descriptor read/8, error -71 [ 203.406904][ T8387] ubi: mtd0 is already attached to ubi0 [ 203.444379][ T8390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1504'. [ 203.490139][ T4217] usb usb1-port1: unable to enumerate USB device [ 204.462812][ T8406] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 204.796913][ T8405] netlink: 'syz.1.1510': attribute type 3 has an invalid length. [ 204.897053][ T8414] ubi: mtd0 is already attached to ubi0 [ 204.963037][ T8419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1515'. [ 205.140711][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.145667][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.198830][ T7] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 205.458938][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 205.609305][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.642864][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.661063][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 205.801655][ T7] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 205.984802][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.112548][ T7] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 206.225872][ T8440] netlink: 'syz.3.1523': attribute type 3 has an invalid length. [ 206.318471][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.321164][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.323608][ T7] usb 1-1: Product: syz [ 206.324791][ T7] usb 1-1: Manufacturer: syz [ 206.326056][ T7] usb 1-1: SerialNumber: syz [ 206.334190][ T8451] ubi: mtd0 is already attached to ubi0 [ 206.439619][ T8455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1529'. [ 206.624571][ T8463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.627198][ T8463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.748706][ T8464] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 206.755178][ T7] cdc_ncm 1-1:1.0: bind() failure [ 206.760676][ T7] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 206.762611][ T7] cdc_ncm 1-1:1.1: bind() failure [ 206.769819][ T7] usb 1-1: USB disconnect, device number 35 [ 207.884265][ T8478] netlink: 'syz.4.1537': attribute type 3 has an invalid length. [ 207.896708][ T8482] ubi: mtd0 is already attached to ubi0 [ 208.060348][ T8491] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1543'. [ 208.114918][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 208.157066][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 208.397563][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.401754][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.459519][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1555'. [ 208.547270][ T4329] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 208.575870][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 208.847107][ T4329] usb 1-1: device descriptor read/64, error -71 [ 208.922224][ T8539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.994903][ T8545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1567'. [ 209.106070][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1571'. [ 209.117064][ T4329] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 209.299323][ T8564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1576'. [ 209.441989][ T4329] usb 1-1: device descriptor read/64, error -71 [ 209.494475][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.504878][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.557857][ T4329] usb usb1-port1: attempt power cycle [ 209.976474][ T4329] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 210.086473][ T4329] usb 1-1: device descriptor read/8, error -71 [ 210.176401][ T8570] __nla_validate_parse: 1 callbacks suppressed [ 210.176417][ T8570] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1579'. [ 210.288917][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'. [ 210.357170][ T4329] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 210.446281][ T4329] usb 1-1: device descriptor read/8, error -71 [ 210.567005][ T4329] usb usb1-port1: unable to enumerate USB device [ 211.538079][ T8606] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1593'. [ 211.832296][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.834689][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.895144][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 213.006217][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.008853][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.112082][ T8635] loop2: detected capacity change from 0 to 256 [ 213.114480][ T8635] exfat: Deprecated parameter 'utf8' [ 213.137940][ T8635] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 213.154837][ T47] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 213.159153][ T47] Bluetooth: hci1: Injecting HCI hardware error event [ 213.171929][ T47] Bluetooth: hci1: hardware error 0x00 [ 214.054101][ T8649] Bluetooth: hci3: unsupported parameter 1025 [ 214.055932][ T8649] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 214.277155][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'. [ 214.338968][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.349977][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.373904][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.379743][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.051882][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.052062][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.836524][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.838842][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.985049][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 216.123435][ T47] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 216.349878][ T8697] overlayfs: overlapping lowerdir path [ 216.526755][ T8691] loop1: detected capacity change from 0 to 40427 [ 216.542558][ T8691] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 216.547686][ T8691] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 216.584013][ T8691] F2FS-fs (loop1): invalid crc value [ 216.604001][ T8709] Bluetooth: hci3: unsupported parameter 1025 [ 216.605692][ T8709] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 216.628234][ T8691] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.658874][ T8712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.665658][ T8691] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 216.667872][ T8712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.671031][ T8691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 216.792514][ T4403] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 216.800175][ T4403] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 217.016298][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 217.241544][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1638'. [ 217.491758][ T8736] loop2: detected capacity change from 0 to 256 [ 217.518414][ T8736] exfat: Deprecated parameter 'utf8' [ 217.543112][ T8736] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 217.856270][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.860885][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.084947][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1650'. [ 218.398232][ T8768] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 219.022504][ T7] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 219.136262][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.151228][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.200207][ T8796] loop2: detected capacity change from 0 to 256 [ 219.217491][ T8796] exfat: Deprecated parameter 'utf8' [ 219.237599][ T8796] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 219.261838][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 219.381908][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.384956][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.388552][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.397702][ T7] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 219.400683][ T7] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 219.404238][ T8798] loop7: detected capacity change from 0 to 16384 [ 219.411136][ T7] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 219.459446][ T51] I/O error, dev loop7, sector 896 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.462530][ T51] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 219.464922][ T51] I/O error, dev loop7, sector 904 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.467427][ T51] Buffer I/O error on dev loop7, logical block 113, lost async page write [ 219.469788][ T51] I/O error, dev loop7, sector 912 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.472802][ T51] Buffer I/O error on dev loop7, logical block 114, lost async page write [ 219.475110][ T51] I/O error, dev loop7, sector 920 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.477744][ T51] Buffer I/O error on dev loop7, logical block 115, lost async page write [ 219.480016][ T51] I/O error, dev loop7, sector 928 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.482612][ T51] Buffer I/O error on dev loop7, logical block 116, lost async page write [ 219.484947][ T51] I/O error, dev loop7, sector 936 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.487427][ T51] Buffer I/O error on dev loop7, logical block 117, lost async page write [ 219.489660][ T51] I/O error, dev loop7, sector 944 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.492267][ T51] Buffer I/O error on dev loop7, logical block 118, lost async page write [ 219.494600][ T51] I/O error, dev loop7, sector 952 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.497105][ T51] Buffer I/O error on dev loop7, logical block 119, lost async page write [ 219.499318][ T51] I/O error, dev loop7, sector 960 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.502088][ T51] Buffer I/O error on dev loop7, logical block 120, lost async page write [ 219.504346][ T51] I/O error, dev loop7, sector 968 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 219.506803][ T51] Buffer I/O error on dev loop7, logical block 121, lost async page write [ 219.611617][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.614023][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.616141][ T7] usb 1-1: Product: syz [ 219.617211][ T7] usb 1-1: Manufacturer: syz [ 219.618377][ T7] usb 1-1: SerialNumber: syz [ 220.589947][ T8812] loop2: detected capacity change from 0 to 512 [ 220.597360][ T8812] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 220.621188][ T7] cdc_ncm 1-1:1.0: bind() failure [ 220.627954][ T8812] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 220.635199][ T7] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 220.637030][ T7] cdc_ncm 1-1:1.1: bind() failure [ 220.662858][ T7] usb 1-1: USB disconnect, device number 40 [ 220.717236][ T8812] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 220.721575][ T8812] EXT4-fs (loop2): 1 truncate cleaned up [ 220.723417][ T8812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.785748][ T5959] EXT4-fs (loop2): unmounting filesystem. [ 220.874159][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.875494][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.008828][ T8838] loop1: detected capacity change from 0 to 512 [ 221.031477][ T8838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.056653][ T8838] EXT4-fs (loop1): 1 truncate cleaned up [ 221.058585][ T8838] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 221.111371][ T8841] skb len=10633 headroom=168 headlen=10633 tailroom=5263 [ 221.111371][ T8841] mac=(168,0) net=(168,20) trans=188 [ 221.111371][ T8841] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 221.111371][ T8841] csum(0x350e2a31 ip_summed=3 complete_sw=0 valid=0 level=0) [ 221.111371][ T8841] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 221.120331][ T8841] dev name=veth0 feat=0x000061164fdd19e9 [ 221.121826][ T8841] skb linear: 00000000: 45 02 29 89 05 56 00 00 0f 2f dc be ac 14 14 18 [ 221.124118][ T8841] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 221.126336][ T8841] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 221.128555][ T8841] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 221.130781][ T8841] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 221.132986][ T8841] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 221.135222][ T8841] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.137454][ T8841] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.139792][ T8841] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.142121][ T8841] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.144376][ T8841] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.146572][ T8841] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.148817][ T8841] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.151090][ T8841] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.153346][ T8841] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.155534][ T8841] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.157723][ T8841] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.159991][ T8841] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.162288][ T8841] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 221.164493][ T8841] ------------[ cut here ]------------ [ 221.165868][ T8841] offset (10633) >= skb_headlen() (10633) [ 221.167835][ T8841] WARNING: CPU: 0 PID: 8841 at net/core/dev.c:3305 skb_checksum_help+0x55c/0x64c [ 221.170234][ T8841] Modules linked in: [ 221.171235][ T8841] CPU: 0 PID: 8841 Comm: syz.0.1684 Not tainted 6.1.96-syzkaller #0 [ 221.173415][ T8841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 221.176121][ T8841] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 221.178184][ T8841] pc : skb_checksum_help+0x55c/0x64c [ 221.179644][ T8841] lr : skb_checksum_help+0x558/0x64c [ 221.181048][ T8841] sp : ffff80001e716aa0 [ 221.182162][ T8841] x29: ffff80001e716ac0 x28: 1fffe0001927e150 x27: dfff800000000000 [ 221.184360][ T8841] x26: 0000000000002989 x25: 0000000000002989 x24: 0000000000002989 [ 221.186522][ T8841] x23: ffff0000c93f0ad8 x22: ffff0000c93f0a70 x21: ffff0000c93f0a00 [ 221.188684][ T8841] x20: 00000000ffffffea x19: 0000000000002989 x18: ffff80001e715e20 [ 221.190795][ T8841] x17: 0000000000000000 x16: ffff8000120b4540 x15: 0000000000000002 [ 221.192942][ T8841] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000040000 [ 221.195100][ T8841] x11: 0000000000017063 x10: ffff8000291e5000 x9 : 350eea2401604a00 [ 221.197290][ T8841] x8 : 350eea2401604a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 221.199466][ T8841] x5 : ffff80001e716398 x4 : ffff800015932ae0 x3 : ffff80000834dd94 [ 221.201608][ T8841] x2 : 0000000000000001 x1 : 0000000000000200 x0 : 0000000000000000 [ 221.203811][ T8841] Call trace: [ 221.204690][ T8841] skb_checksum_help+0x55c/0x64c [ 221.206035][ T8841] ip_do_fragment+0x1bc/0x1b14 [ 221.207289][ T8841] ip_fragment+0x11c/0x308 [ 221.208541][ T8841] __ip_finish_output+0x280/0x458 [ 221.209960][ T8841] ip_finish_output+0x40/0x268 [ 221.211231][ T8841] ip_output+0x330/0x49c [ 221.212387][ T8841] ip_local_out+0x120/0x160 [ 221.213646][ T8841] iptunnel_xmit+0x40c/0x8ec [ 221.214846][ T8841] ip_tunnel_xmit+0x19a0/0x28bc [ 221.216164][ T8841] ipgre_xmit+0x70c/0xab0 [ 221.217329][ T8841] dev_hard_start_xmit+0x25c/0x9a4 [ 221.218663][ T8841] __dev_queue_xmit+0x186c/0x38d8 [ 221.220049][ T8841] dev_queue_xmit+0x24/0x34 [ 221.221240][ T8841] packet_sendmsg+0x36f0/0x4cd8 [ 221.222497][ T8841] ____sys_sendmsg+0x55c/0x848 [ 221.223777][ T8841] __sys_sendmsg+0x26c/0x33c [ 221.225017][ T8841] __arm64_sys_sendmsg+0x80/0x94 [ 221.226360][ T8841] invoke_syscall+0x98/0x2c0 [ 221.227619][ T8841] el0_svc_common+0x138/0x258 [ 221.228879][ T8841] do_el0_svc+0x64/0x218 [ 221.230016][ T8841] el0_svc+0x58/0x168 [ 221.231102][ T8841] el0t_64_sync_handler+0x84/0xf0 [ 221.232445][ T8841] el0t_64_sync+0x18c/0x190 [ 221.233688][ T8841] irq event stamp: 1045 [ 221.234754][ T8841] hardirqs last enabled at (1044): [] __up_console_sem+0xb4/0x100 [ 221.237245][ T8841] hardirqs last disabled at (1045): [] el1_dbg+0x24/0x80 [ 221.239648][ T8841] softirqs last enabled at (664): [] handle_softirqs+0xb84/0xd58 [ 221.242176][ T8841] softirqs last disabled at (692): [] local_bh_disable+0x10/0x34 [ 221.244628][ T8841] ---[ end trace 0000000000000000 ]--- [ 221.282501][ T8140] EXT4-fs (loop1): unmounting filesystem. [ 222.134488][ T5572] bridge0: port 4(syz_tun) entered disabled state [ 222.192612][ T5572] device syz_tun left promiscuous mode [ 222.194172][ T5572] bridge0: port 4(syz_tun) entered disabled state