last executing test programs: 1m37.09459461s ago: executing program 1 (id=520): socket(0x2a, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xe4}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff41bfb0d8298a86dd6012000800403a0000000000000000000000ffffac1e0001fe8000000000000000000000000000aa03029078000000006002081000001102fc0100000000000000000000000000000000000000000000000000000000010000000000000000000106000000000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="183a", 0x2, 0xfffffffffffffffd) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) add_key(&(0x7f0000000640)='user\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="8944", 0x2, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) 1m35.701900309s ago: executing program 1 (id=525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m35.61626608s ago: executing program 1 (id=527): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) 1m35.469862163s ago: executing program 1 (id=528): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xff, 0x800) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x100, 0x1e1082) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000580)={r1, 0x3, {0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x1, 0xf, 0x12, "5cbc19b79b9adf2b2eac6d59d986f8f97fc36e77eacdaa6265ade392240a7403bd418431b63aa6c15a3d12dac7284d7400", "3394a9b378d41703a42ce7dd5198310d83a43d18f45a46561dfbb1c1f33b146d48a33bb419831b1e044ea9b83999912d56f31bb5f518cb17774c716213d7ef74", "177483eb3c100319defae007fcb28cf4f50f57d443c1db312ccbe25bde5addc7", [0x8122]}}) 1m35.430576713s ago: executing program 1 (id=529): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x600, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000040)=0xd) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 1m33.990053843s ago: executing program 1 (id=534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 1m18.771043977s ago: executing program 32 (id=534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 9.226359941s ago: executing program 4 (id=1189): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 7.537266544s ago: executing program 4 (id=1196): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x645}, 0x8) 7.498152145s ago: executing program 3 (id=1209): capset(0x0, &(0x7f0000000140)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 7.310737048s ago: executing program 5 (id=1200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5b8, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x1400}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) 7.310421828s ago: executing program 3 (id=1201): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x600, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$tipc(r5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 6.140758044s ago: executing program 4 (id=1203): openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x5}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) 5.953928287s ago: executing program 2 (id=1207): socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 5.847011759s ago: executing program 5 (id=1208): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r3, &(0x7f0000003900)={0x2020}, 0x2020) 5.822523499s ago: executing program 2 (id=1210): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.772132903s ago: executing program 5 (id=1212): write(0xffffffffffffffff, &(0x7f0000000800)="240000001e005f0314f90408faac470002ea0000010000000000080008000dc013000000", 0x24) 4.122387543s ago: executing program 3 (id=1213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xffe2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x5, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 4.121699993s ago: executing program 0 (id=1224): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 4.121362702s ago: executing program 5 (id=1215): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setuid(0xee01) 4.121276912s ago: executing program 2 (id=1216): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d80)=ANY=[@ANYBLOB="240000001200010100000000fedbdf250700000008000000", @ANYRES32=0x0, @ANYBLOB="0800e880040039"], 0x24}}, 0x0) 4.067297083s ago: executing program 2 (id=1217): capset(&(0x7f0000000100)={0x20071026}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 1.092392835s ago: executing program 5 (id=1218): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100000) r1 = socket(0x2, 0x6, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x800000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8d84) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 1.092254005s ago: executing program 2 (id=1219): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x645}, 0x8) 1.092147865s ago: executing program 3 (id=1220): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x13, 0x2, "b6a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1.081797095s ago: executing program 4 (id=1221): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)={0xa90, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x750, 0x5, 0x0, 0x1, [{0x1cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x16c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffdfa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2c0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2bc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8e8b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x35c0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x324, 0x5, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x254, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5d6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe04}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]}]}, {0x4}]}]}, 0xa90}, 0x1, 0x0, 0x0, 0x24000004}, 0x4004001) 1.069808785s ago: executing program 0 (id=1229): capset(&(0x7f0000000100)={0x20071026}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 219.065947ms ago: executing program 2 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5b8, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x1400}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x7, 0x801, 0x2, 0x10, 'syz0\x00'}) 218.923317ms ago: executing program 4 (id=1223): socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 211.590017ms ago: executing program 0 (id=1234): capset(&(0x7f0000000100)={0x20071026}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 208.250037ms ago: executing program 5 (id=1225): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x600, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$tipc(r5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 201.818968ms ago: executing program 3 (id=1226): write(0xffffffffffffffff, &(0x7f0000000800)="240000001e005f0314f90408faac470002ea0000010000000000080008000dc013000000", 0x24) 169.115938ms ago: executing program 0 (id=1227): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f0000003900)={0x2020}, 0x2020) 146.119279ms ago: executing program 0 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf2542ffeb0008000300", @ANYRES32=r2], 0x28}}, 0x810) 77.741289ms ago: executing program 0 (id=1230): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) 72.376369ms ago: executing program 3 (id=1231): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setuid(0xee01) 0s ago: executing program 4 (id=1232): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./bus\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2c8, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f00000001c0)="74f977709a38332972ffe63143f9bb1fce42e5ff4412a9bdd0fc76d934e9167bf0c8dfc1e7a0a1eafa55379ad542164479d4090f15a4c312df4c398198e2a2df1c59633820c0f779ac604f37062561e2df53e169a198d10d6db622dd84acf4dfbe51af21927e61b222f81c2c25c490db0d4819d4490baa0fa5e179b9a5e2e1eb3be82294cef28493a9b1c2a0b34ea94b2121d13daad13b3ff25198b7cf926e11c25e065a1176652bd6eedd91d47ac3e86e171f349e8f914316828af398ff133468a8bebc4cb8423d8081777f2c79e5f582", 0xd1) sendfile(r1, r0, 0x0, 0x3ffff) kernel console output (not intermixed with test programs): 570957][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.573724][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.576312][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.587091][ T4039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.608415][ T4029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.610774][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.612925][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.642194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.644927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.664534][ T4030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.676513][ T4039] device veth0_vlan entered promiscuous mode [ 49.690554][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.693295][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.696468][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.705734][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.716247][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.718876][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.724155][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.726945][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.732961][ T4030] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.736211][ T4039] device veth1_vlan entered promiscuous mode [ 49.746646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.750151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.752233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.755904][ T4029] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.779421][ T4031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.785448][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.788049][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.793021][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.795547][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.797483][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.800006][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.802741][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.805227][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.807102][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.809842][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.812517][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.815166][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.817078][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.820482][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.826851][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.830647][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.833223][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.835812][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.838345][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.840281][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.853604][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.857093][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.873830][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.877701][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.885178][ T4038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.895293][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.898114][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.902132][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.904813][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.924655][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.927848][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.931252][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.947411][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.951562][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.954193][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.957030][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.961107][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.963873][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.966397][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.968999][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.972804][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.975574][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.978165][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.981943][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.986541][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.990942][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.996006][ T4029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.002158][ T4038] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.006126][ T4039] device veth0_macvtap entered promiscuous mode [ 50.011746][ T4039] device veth1_macvtap entered promiscuous mode [ 50.027849][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.030729][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.033328][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.036155][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.042633][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.044679][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.047157][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.052714][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.066536][ T4030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.078376][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.080875][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.083433][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.085845][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.087657][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.097134][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.122682][ T4031] device veth0_vlan entered promiscuous mode [ 50.136383][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.143434][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.146387][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.157432][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.160852][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.163915][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.166752][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.169839][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.173338][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.176097][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.178906][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.182612][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.190678][ T4031] device veth1_vlan entered promiscuous mode [ 50.195447][ T4038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.200498][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.203347][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.205841][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.208242][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.212058][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.214632][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.217154][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.246814][ T4031] device veth0_macvtap entered promiscuous mode [ 50.257129][ T4029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.266090][ T4039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.269244][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.270557][ T1535] Bluetooth: hci0: command 0x041b tx timeout [ 50.271858][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.276357][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.279888][ T1535] Bluetooth: hci4: command 0x041b tx timeout [ 50.281573][ T1535] Bluetooth: hci3: command 0x041b tx timeout [ 50.283314][ T1535] Bluetooth: hci1: command 0x041b tx timeout [ 50.284928][ T1535] Bluetooth: hci2: command 0x041b tx timeout [ 50.287694][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.296861][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.298990][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.302354][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.305097][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.317564][ T4031] device veth1_macvtap entered promiscuous mode [ 50.332045][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.334765][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.336865][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.348959][ T4039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.353256][ T4039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.355520][ T4039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.357815][ T4039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.378645][ T4030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.435842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.438690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.450600][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.452599][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.464072][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.466927][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.472014][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.478114][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.481981][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.493473][ T4038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.498341][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.503463][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.507221][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.520242][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.523002][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.553890][ T4031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.556234][ T4031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.558908][ T4031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.562148][ T4031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.565761][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.568597][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.572023][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.574440][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.583649][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.586459][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.591121][ T4029] device veth0_vlan entered promiscuous mode [ 50.606228][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.608518][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.626908][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.629745][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.632507][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.673806][ T4029] device veth1_vlan entered promiscuous mode [ 50.677709][ T336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.687885][ T336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.689567][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.692696][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.696071][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.699888][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.713563][ T4038] device veth0_vlan entered promiscuous mode [ 50.722381][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.724924][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.735770][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.738619][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.742783][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.752163][ T4030] device veth0_vlan entered promiscuous mode [ 50.760598][ T4030] device veth1_vlan entered promiscuous mode [ 50.797962][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.802036][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.804648][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.808035][ T4029] device veth0_macvtap entered promiscuous mode [ 50.825854][ T586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.827978][ T586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.876162][ T4038] device veth1_vlan entered promiscuous mode [ 50.892734][ T4038] device veth0_macvtap entered promiscuous mode [ 50.897210][ T4038] device veth1_macvtap entered promiscuous mode [ 50.918322][ T4029] device veth1_macvtap entered promiscuous mode [ 50.938654][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.947858][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.952075][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.954994][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.965848][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.972708][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.975457][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.978169][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.987527][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.006179][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.008665][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.012676][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.015238][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.019847][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.022462][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.024962][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.027465][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.030236][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.032867][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.035341][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.038608][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.041759][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.044538][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.067234][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.244119][ T4111] 9pnet_virtio: no channels available for device syz [ 51.894729][ T4029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.897067][ T4029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.902833][ T4029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.905183][ T4029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.916816][ T4030] device veth0_macvtap entered promiscuous mode [ 51.925236][ T586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.927357][ T586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.937904][ T4030] device veth1_macvtap entered promiscuous mode [ 51.967110][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.973089][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.975715][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.978573][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.985709][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.988420][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.995125][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.003502][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.006256][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.008843][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.015007][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.017625][ T4030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.024722][ T4030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.028624][ T4030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.043728][ T4030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.046047][ T4030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.048509][ T4030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.054665][ T4030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.061415][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.062049][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.062639][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.063141][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.063651][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.064151][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.064730][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.065233][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.101992][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.104998][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.111111][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.113886][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.116547][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.119361][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.122002][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.124735][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.128838][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.141113][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.143707][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.146399][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.201321][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.204335][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.207108][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.213304][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.216058][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.218911][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.221969][ T4038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.224698][ T4038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.230182][ T4038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.329677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.332993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.349993][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.351058][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.352141][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.354352][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.358913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.361071][ T4075] Bluetooth: hci2: command 0x040f tx timeout [ 52.361177][ T4075] Bluetooth: hci1: command 0x040f tx timeout [ 52.361292][ T4075] Bluetooth: hci3: command 0x040f tx timeout [ 52.366127][ T4075] Bluetooth: hci4: command 0x040f tx timeout [ 52.368767][ T4075] Bluetooth: hci0: command 0x040f tx timeout [ 52.387787][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.394106][ T4119] udc-core: couldn't find an available UDC or it's busy [ 52.395920][ T4119] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 52.408098][ T4038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.412719][ T4114] loop0: detected capacity change from 0 to 2048 [ 52.415947][ T4038] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.418265][ T4038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.425208][ T4038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.479661][ T4114] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 52.482490][ T4114] NILFS (loop0): mounting unchecked fs [ 52.485416][ T4114] NILFS (loop0): invalid segment: Checksum error in segment payload [ 52.487643][ T4114] NILFS (loop0): unable to fall back to spare super block [ 52.500942][ T4114] NILFS (loop0): error -22 while searching super root [ 52.517202][ T4115] udevd[4115]: incorrect nilfs2 checksum on /dev/loop0 [ 52.621253][ T336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.623502][ T336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.693962][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.726032][ T4125] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 52.741526][ T4125] bond0: (slave rose0): Error: Device can not be enslaved while up [ 52.745347][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.752717][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.765021][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.787514][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.797259][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.870649][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.986997][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.006206][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.028282][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.954563][ T4135] input: syz0 as /devices/virtual/input/input2 [ 53.990121][ T4139] loop2: detected capacity change from 0 to 7 [ 53.992261][ T4139] Dev loop2: unable to read RDB block 7 [ 53.992323][ T4139] loop2: AHDI p1 p2 p3 [ 53.992340][ T4139] loop2: partition table partially beyond EOD, truncated [ 54.015046][ T4139] loop2: p1 start 1601398130 is beyond EOD, truncated [ 54.015078][ T4139] loop2: p2 start 1702059890 is beyond EOD, truncated [ 54.136152][ T4146] udc-core: couldn't find an available UDC or it's busy [ 54.138171][ T4146] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.236151][ T4123] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 54.371772][ T4123] udc-core: couldn't find an available UDC or it's busy [ 54.373756][ T4123] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.408246][ T4151] udc-core: couldn't find an available UDC or it's busy [ 54.450136][ T4151] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.613784][ T4117] Bluetooth: hci0: command 0x0419 tx timeout [ 54.615542][ T4117] Bluetooth: hci4: command 0x0419 tx timeout [ 54.617211][ T4117] Bluetooth: hci3: command 0x0419 tx timeout [ 54.619682][ T4117] Bluetooth: hci1: command 0x0419 tx timeout [ 54.621358][ T4117] Bluetooth: hci2: command 0x0419 tx timeout [ 54.682839][ T227] block nbd0: Attempted send on invalid socket [ 54.684952][ T227] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.688381][ T149] block nbd0: Attempted send on invalid socket [ 54.690262][ T149] blk_update_request: I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.693356][ T4142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 54.696235][ T227] block nbd0: Attempted send on invalid socket [ 54.697900][ T227] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.701505][ T4142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 54.704976][ T149] block nbd0: Attempted send on invalid socket [ 54.706682][ T149] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.710184][ T227] block nbd0: Attempted send on invalid socket [ 54.711884][ T227] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.715446][ T4142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 54.718407][ T227] block nbd0: Attempted send on invalid socket [ 54.720237][ T227] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.723545][ T4142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 54.730175][ T227] block nbd0: Attempted send on invalid socket [ 54.731897][ T227] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.734913][ T227] block nbd0: Attempted send on invalid socket [ 54.736546][ T227] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.749374][ T4142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 54.752947][ T227] block nbd0: Attempted send on invalid socket [ 54.754584][ T227] blk_update_request: I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.759027][ T4142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 54.763352][ T227] block nbd0: Attempted send on invalid socket [ 54.765029][ T227] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.769496][ T4142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 54.781443][ T4142] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 54.784042][ T4142] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 54.789545][ T4158] 9pnet_virtio: no channels available for device syz [ 56.220272][ T4170] syz.3.21 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.624358][ T4181] device syzkaller0 entered promiscuous mode [ 57.645367][ T4080] syzkaller0: tun_net_xmit 48 [ 57.755787][ T4181] syzkaller0: create flow: hash 2013985442 index 1 [ 57.766032][ T4181] syzkaller0: delete flow: hash 2013985442 index 1 [ 58.745856][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.798725][ T4193] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure [ 59.895351][ T26] audit: type=1326 audit(59.220:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 59.924378][ T26] audit: type=1326 audit(59.220:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 59.967355][ T26] audit: type=1326 audit(59.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 59.997491][ T26] audit: type=1326 audit(59.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 60.020540][ T26] audit: type=1326 audit(59.720:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 60.042528][ T26] audit: type=1326 audit(59.770:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 60.057148][ T26] audit: type=1326 audit(59.780:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 60.069938][ T26] audit: type=1326 audit(59.780:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 60.128100][ T26] audit: type=1326 audit(59.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 60.157739][ T26] audit: type=1326 audit(59.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4196 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbaae7d28 code=0x7ffc0000 [ 60.162997][ T4205] syz.3.32 uses obsolete (PF_INET,SOCK_PACKET) [ 61.051572][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 61.088350][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.094642][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.141392][ T4217] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 61.705103][ T4216] tipc: Started in network mode [ 61.706732][ T4216] tipc: Node identity ac14140f, cluster identity 4711 [ 61.709110][ T4216] tipc: New replicast peer: 255.255.255.255 [ 61.711219][ T4216] tipc: Enabled bearer , priority 10 [ 61.725185][ T4216] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 61.851610][ T4209] sched: RT throttling activated [ 62.518737][ T4229] udc-core: couldn't find an available UDC or it's busy [ 62.539307][ T4229] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 62.541815][ T4230] netlink: 'syz.4.39': attribute type 10 has an invalid length. [ 62.575041][ T4230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.582469][ T4230] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 62.593400][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 62.595944][ T4223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.663397][ T4223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.683215][ T4230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 62.685717][ T4230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.687828][ T4230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.698694][ T4230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.704681][ T4230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.740308][ T4230] bond0: (slave batadv0): Releasing backup interface [ 62.789846][ T4032] tipc: Node number set to 2886997007 [ 64.020105][ T4226] dccp_close: ABORT with 20 bytes unread [ 64.030065][ T4239] loop3: detected capacity change from 0 to 4096 [ 65.035544][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.065698][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.067967][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.072503][ T4258] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 65.328128][ T4264] netlink: 96 bytes leftover after parsing attributes in process `syz.3.43'. [ 65.330715][ T4264] 8021q: VLANs not supported on ip6_vti0 [ 65.686079][ T4266] tipc: Started in network mode [ 65.687813][ T4266] tipc: Node identity ac14140f, cluster identity 4711 [ 65.693179][ T4266] tipc: New replicast peer: 255.255.255.255 [ 65.696170][ T4266] tipc: Enabled bearer , priority 10 [ 66.140711][ T4266] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 66.242502][ T4270] udc-core: couldn't find an available UDC or it's busy [ 66.244436][ T4270] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 66.542535][ T4272] 9pnet_virtio: no channels available for device syz [ 66.662840][ T4277] netlink: 'syz.3.54': attribute type 10 has an invalid length. [ 66.707497][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.729414][ T4277] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 66.850962][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 66.853553][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.855490][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.876060][ T4286] input: syz0 as /devices/virtual/input/input3 [ 66.885901][ T4032] tipc: Node number set to 2886997007 [ 66.901282][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.903467][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.920852][ T4284] bond0: (slave batadv0): Releasing backup interface [ 68.082172][ T4295] udc-core: couldn't find an available UDC or it's busy [ 68.084097][ T4295] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 68.100011][ T149] nbd_handle_cmd: 2 callbacks suppressed [ 68.100025][ T149] block nbd1: Attempted send on invalid socket [ 68.103096][ T149] print_req_error: 2 callbacks suppressed [ 68.103106][ T149] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.108026][ T149] block nbd1: Attempted send on invalid socket [ 68.109735][ T149] blk_update_request: I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.113358][ T4281] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 68.116140][ T149] block nbd1: Attempted send on invalid socket [ 68.117891][ T149] blk_update_request: I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.128342][ T4281] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 68.147028][ T149] block nbd1: Attempted send on invalid socket [ 68.148784][ T149] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.152651][ T149] block nbd1: Attempted send on invalid socket [ 68.154244][ T149] blk_update_request: I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.158089][ T4281] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 68.166143][ T149] block nbd1: Attempted send on invalid socket [ 68.167870][ T149] blk_update_request: I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.171898][ T4281] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 68.175450][ T149] block nbd1: Attempted send on invalid socket [ 68.177114][ T149] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.181723][ T149] block nbd1: Attempted send on invalid socket [ 68.183413][ T149] blk_update_request: I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.186499][ T4281] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 68.193473][ T149] block nbd1: Attempted send on invalid socket [ 68.195156][ T149] blk_update_request: I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.198370][ T4281] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 68.204312][ T149] block nbd1: Attempted send on invalid socket [ 68.206076][ T149] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.368198][ T4281] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 68.371218][ T4281] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 68.373944][ T4281] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 68.547767][ T4303] 9pnet_virtio: no channels available for device syz [ 69.269773][ T4293] dccp_close: ABORT with 20 bytes unread [ 69.779789][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.781700][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.791527][ T21] cfg80211: failed to load regulatory.db [ 70.358429][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.400704][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.405961][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.447998][ T4317] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 70.760973][ T4187] Bluetooth: hci5: Frame reassembly failed (-84) [ 70.818953][ T4319] Bluetooth: hci5: Frame reassembly failed (-84) [ 70.890121][ T4324] udc-core: couldn't find an available UDC or it's busy [ 70.891899][ T4324] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.270414][ T4074] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.337439][ T4314] tipc: Started in network mode [ 71.338831][ T4314] tipc: Node identity ac14140f, cluster identity 4711 [ 71.340881][ T4314] tipc: New replicast peer: 255.255.255.255 [ 71.343036][ T4314] tipc: Enabled bearer , priority 10 [ 71.353405][ T4314] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 71.811749][ T4074] usb 1-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 71.814549][ T4074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.816683][ T4074] usb 1-1: Product: syz [ 71.817885][ T4074] usb 1-1: Manufacturer: syz [ 72.540971][ T4074] usb 1-1: SerialNumber: syz [ 72.557873][ T4074] usb 1-1: config 0 descriptor?? [ 72.558044][ T4032] tipc: Node number set to 2886997007 [ 72.858298][ T4074] Bluetooth: hci5: command 0x1003 tx timeout [ 72.866113][ T4041] Bluetooth: hci5: sending frame failed (-49) [ 72.888254][ T4336] input: syz0 as /devices/virtual/input/input4 [ 72.982106][ T4338] netlink: 'syz.1.71': attribute type 10 has an invalid length. [ 73.058722][ T4338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.076325][ T4077] usb 1-1: USB disconnect, device number 2 [ 73.123218][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 73.125600][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.127625][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.204074][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 74.204090][ T26] audit: type=1326 audit(73.450:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 74.234626][ T26] audit: type=1326 audit(73.450:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 74.251785][ T26] audit: type=1326 audit(73.750:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 74.257502][ T26] audit: type=1326 audit(73.750:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 74.290782][ T26] audit: type=1326 audit(73.760:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 74.313629][ T26] audit: type=1326 audit(73.820:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 74.338225][ T26] audit: type=1326 audit(73.820:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 74.359354][ T26] audit: type=1326 audit(73.820:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 74.365235][ T26] audit: type=1326 audit(73.900:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 74.376309][ T26] audit: type=1326 audit(73.910:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4340 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 75.380895][ T4077] Bluetooth: hci5: command 0x1001 tx timeout [ 75.382692][ T4041] Bluetooth: hci5: sending frame failed (-49) [ 75.890106][ T227] nbd_handle_cmd: 2 callbacks suppressed [ 75.890123][ T227] block nbd3: Attempted send on invalid socket [ 75.893265][ T227] print_req_error: 2 callbacks suppressed [ 75.893275][ T227] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.906564][ T227] block nbd3: Attempted send on invalid socket [ 75.909031][ T227] blk_update_request: I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.913100][ T4350] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 75.915916][ T227] block nbd3: Attempted send on invalid socket [ 75.918419][ T227] blk_update_request: I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.921567][ T4350] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 75.927739][ T227] block nbd3: Attempted send on invalid socket [ 75.929548][ T227] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.932667][ T227] block nbd3: Attempted send on invalid socket [ 75.934348][ T227] blk_update_request: I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.947633][ T4350] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 75.950840][ T227] block nbd3: Attempted send on invalid socket [ 75.952610][ T227] blk_update_request: I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.955718][ T4350] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 75.959691][ T227] block nbd3: Attempted send on invalid socket [ 75.961863][ T227] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.985635][ T227] block nbd3: Attempted send on invalid socket [ 75.987559][ T227] blk_update_request: I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.991872][ T4350] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 76.003874][ T227] block nbd3: Attempted send on invalid socket [ 76.005666][ T227] blk_update_request: I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.034303][ T4360] 9pnet_virtio: no channels available for device syz [ 76.687433][ T4350] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 76.739680][ T227] block nbd3: Attempted send on invalid socket [ 76.741476][ T227] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.749839][ T4350] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 76.754686][ T4350] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 76.801088][ T4350] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 78.831152][ T4077] Bluetooth: hci5: command 0x1009 tx timeout [ 78.867443][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.871449][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.873508][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.878020][ T4369] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.369163][ T4032] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.476489][ T4380] 9pnet_virtio: no channels available for device syz [ 79.609133][ T4032] usb 1-1: Using ep0 maxpacket: 8 [ 79.740924][ T4032] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.743148][ T4032] usb 1-1: config 0 has no interface number 0 [ 79.744778][ T4032] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.747632][ T4032] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 79.755952][ T4032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.768012][ T4032] usb 1-1: config 0 descriptor?? [ 79.818805][ T4032] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 80.395011][ T4032] usb 1-1: USB disconnect, device number 3 [ 80.658081][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 80.658096][ T26] audit: type=1326 audit(80.610:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 80.665356][ T26] audit: type=1326 audit(80.620:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 80.699206][ T26] audit: type=1326 audit(80.620:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 80.704887][ T26] audit: type=1326 audit(80.620:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff87513254 code=0x7ffc0000 [ 80.720955][ T26] audit: type=1326 audit(80.630:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 80.735128][ T26] audit: type=1326 audit(80.630:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 80.746691][ T26] audit: type=1326 audit(80.630:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 80.760102][ T26] audit: type=1326 audit(80.630:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.4.85" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 80.998745][ T4399] netlink: 'syz.0.86': attribute type 10 has an invalid length. [ 81.040816][ T4399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.073132][ T4402] udc-core: couldn't find an available UDC or it's busy [ 81.075739][ T4402] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.081131][ T4404] udc-core: couldn't find an available UDC or it's busy [ 81.083201][ T4404] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 81.105263][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 81.107698][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.111597][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.114276][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.116321][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.179835][ T4448] udc-core: couldn't find an available UDC or it's busy [ 84.192457][ T4448] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.130108][ T4475] netlink: 'syz.4.115': attribute type 4 has an invalid length. [ 86.240838][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.115'. [ 87.114930][ T1674] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.121410][ T4511] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.800753][ T4535] udc-core: couldn't find an available UDC or it's busy [ 87.802658][ T4535] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.492097][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 88.517188][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.637165][ T4549] device bridge_slave_1 left promiscuous mode [ 88.642640][ T4549] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.631625][ T4560] could not allocate digest TFM handle sha1-ssse3 [ 89.643175][ T4078] Bluetooth: hci5: command 0x1003 tx timeout [ 89.644928][ T4041] Bluetooth: hci5: sending frame failed (-49) [ 90.496462][ T4573] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 90.534748][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 90.744422][ T4041] block nbd3: Receive control failed (result -107) [ 90.755130][ T4583] nbd3: detected capacity change from 0 to 72456 [ 90.765926][ T227] block nbd3: Dead connection, failed to find a fallback [ 90.767998][ T227] block nbd3: shutting down sockets [ 90.770012][ T227] print_req_error: 2 callbacks suppressed [ 90.770022][ T227] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.774382][ T227] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.780951][ T227] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.783806][ T227] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.786282][ T227] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.790516][ T227] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.793158][ T227] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.796137][ T227] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.798637][ T227] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.802901][ T227] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.806090][ T227] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.809136][ T227] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.811450][ T227] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.814296][ T227] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.816499][ T227] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.819461][ T227] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.822137][ T4115] ldm_validate_partition_table(): Disk read failed. [ 90.826874][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.829990][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.832901][ T149] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.835852][ T149] Buffer I/O error on dev nbd3, logical block 0, async page read [ 90.840817][ T4115] Dev nbd3: unable to read RDB block 0 [ 90.843907][ T4115] nbd3: unable to read partition table [ 90.844375][ T4587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 90.850443][ T4583] ldm_validate_partition_table(): Disk read failed. [ 90.852961][ T4583] Dev nbd3: unable to read RDB block 0 [ 90.855071][ T4583] nbd3: unable to read partition table [ 90.867090][ T4115] ldm_validate_partition_table(): Disk read failed. [ 90.872196][ T4115] Dev nbd3: unable to read RDB block 0 [ 90.877477][ T4115] nbd3: unable to read partition table [ 90.880698][ T4074] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.120599][ T4074] usb 1-1: Using ep0 maxpacket: 8 [ 91.138925][ T4596] ubi31: attaching mtd0 [ 91.149567][ T4596] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 91.240703][ T4074] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.243772][ T4074] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 91.246176][ T4074] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.266078][ T4074] usb 1-1: config 0 descriptor?? [ 91.522703][ T4074] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 91.709312][ T4074] Bluetooth: hci5: command 0x1001 tx timeout [ 91.711096][ T4041] Bluetooth: hci5: sending frame failed (-49) [ 91.740683][ T4074] usb 1-1: USB disconnect, device number 4 [ 91.991154][ T4041] Bluetooth: hci3: legacy adv larger than 31 bytes [ 93.172194][ T4624] 9pnet_virtio: no channels available for device syz [ 93.208254][ T4628] Zero length message leads to an empty skb [ 93.512780][ T4641] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 93.789239][ T4080] Bluetooth: hci5: command 0x1009 tx timeout [ 95.130899][ T4675] mmap: syz.0.185 (4675) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 95.154453][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 96.918240][ T4722] tmpfs: Unknown parameter 'usrquota' [ 97.007860][ T4727] tipc: Enabled bearer , priority 0 [ 97.054530][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 98.281874][ T4040] Bluetooth: hci1: unexpected event for opcode 0x200c [ 98.510869][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 104.342680][ T4870] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.551472][ T4882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.267'. [ 106.662034][ T4908] udc-core: couldn't find an available UDC or it's busy [ 106.665421][ T4908] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 107.694048][ T4922] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 107.696034][ T4922] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.751406][ T4918] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 107.753231][ T4918] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.754385][ T4922] vhci_hcd vhci_hcd.0: Device attached [ 107.828181][ T4918] vhci_hcd vhci_hcd.0: Device attached [ 107.830756][ T4925] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 107.832503][ T4925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.853142][ T4925] vhci_hcd vhci_hcd.0: Device attached [ 107.870592][ T4918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.877674][ T4922] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 107.879488][ T4922] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.889858][ T4918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.911833][ T4922] vhci_hcd vhci_hcd.0: Device attached [ 107.925440][ T4918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.960687][ T4918] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.988142][ T4918] vhci_hcd vhci_hcd.0: port 0 already used [ 107.989147][ T4077] usb 6-2: new low-speed USB device number 2 using vhci_hcd [ 107.992270][ T4932] vhci_hcd: connection closed [ 107.993510][ T4930] vhci_hcd: connection closed [ 107.996129][ T4923] vhci_hcd: connection reset by peer [ 107.996283][ T4919] vhci_hcd: connection closed [ 107.997854][ T586] vhci_hcd: stop threads [ 108.005216][ T586] vhci_hcd: release socket [ 108.007756][ T586] vhci_hcd: disconnect device [ 108.017032][ T586] vhci_hcd: stop threads [ 108.018315][ T586] vhci_hcd: release socket [ 108.022770][ T586] vhci_hcd: disconnect device [ 108.032075][ T586] vhci_hcd: stop threads [ 108.033297][ T586] vhci_hcd: release socket [ 108.034491][ T586] vhci_hcd: disconnect device [ 108.042912][ T586] vhci_hcd: stop threads [ 108.044069][ T586] vhci_hcd: release socket [ 108.045264][ T586] vhci_hcd: disconnect device [ 108.202901][ T4951] netlink: set zone limit has 8 unknown bytes [ 108.454796][ T4963] device syzkaller1 entered promiscuous mode [ 109.686762][ T4984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 109.760990][ T4985] nvme_fabrics: missing parameter 'transport=%s' [ 109.762884][ T4985] nvme_fabrics: missing parameter 'nqn=%s' [ 109.899180][ T26] audit: type=1326 audit(109.850:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4991 comm="syz.1.307" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa984bd28 code=0x0 [ 111.655982][ T5024] 9pnet: Insufficient options for proto=fd [ 113.529195][ T4077] vhci_hcd: vhci_device speed not set [ 114.420807][ T4091] Bluetooth: hci4: command 0x0405 tx timeout [ 114.905940][ T5063] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0002 with DS=0xee [ 115.001673][ T5067] udc-core: couldn't find an available UDC or it's busy [ 115.003685][ T5067] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 115.159667][ T5072] netlink: 80 bytes leftover after parsing attributes in process `syz.2.338'. [ 115.450079][ T5075] udc-core: couldn't find an available UDC or it's busy [ 115.452081][ T5075] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.344836][ T5150] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 123.069624][ T4040] Bluetooth: hci0: ACL packet too small [ 123.347147][ T5232] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 123.349394][ T5232] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 124.659481][ T5258] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 125.489791][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 125.624325][ T5258] bond1 (unregistering): Released all slaves [ 127.671201][ T21] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 127.710256][ T21] Bluetooth: hci2: Injecting HCI hardware error event [ 127.714503][ T4041] Bluetooth: hci2: hardware error 0x00 [ 127.803620][ C1] vxcan0: j1939_tp_rxtimer: 0x0000000028285e3f: rx timeout, send abort [ 127.903841][ T336] Bluetooth: hci5: Frame reassembly failed (-84) [ 128.274795][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.283136][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.288806][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.297710][ T5333] device bridge_slave_0 left promiscuous mode [ 128.304557][ T5333] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.306733][ C1] vxcan0: j1939_tp_rxtimer: 0x0000000028285e3f: abort rx timeout. Force session deactivation [ 128.351745][ T5333] device bridge_slave_1 left promiscuous mode [ 128.353861][ T5333] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.406969][ T5333] bond0: (slave bond_slave_0): Releasing backup interface [ 128.487977][ T5333] bond0: (slave bond_slave_1): Releasing backup interface [ 128.564411][ T5333] team0: Port device team_slave_0 removed [ 128.605491][ T5333] team0: Port device team_slave_1 removed [ 129.949139][ T3323] Bluetooth: hci5: command 0x1003 tx timeout [ 129.950942][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 130.429787][ T3323] Bluetooth: hci1: command 0x6b09 tx timeout [ 131.128131][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.131841][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.887581][ T4037] block nbd1: Receive control failed (result -32) [ 131.891602][ T5403] block nbd1: shutting down sockets [ 132.029133][ T3323] Bluetooth: hci5: command 0x1001 tx timeout [ 132.030789][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 132.541690][ T227] nbd_handle_cmd: 2 callbacks suppressed [ 132.541707][ T227] block nbd0: Attempted send on invalid socket [ 132.545194][ T227] print_req_error: 40 callbacks suppressed [ 132.545206][ T227] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.550442][ T227] block nbd0: Attempted send on invalid socket [ 132.552095][ T227] blk_update_request: I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.554983][ T5419] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.557758][ T227] block nbd0: Attempted send on invalid socket [ 132.559457][ T227] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.563961][ T5419] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.567082][ T227] block nbd0: Attempted send on invalid socket [ 132.568938][ T227] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.572608][ T227] block nbd0: Attempted send on invalid socket [ 132.574334][ T227] blk_update_request: I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.577278][ T5419] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.580562][ T227] block nbd0: Attempted send on invalid socket [ 132.582405][ T227] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.737229][ T5419] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.740952][ T227] block nbd0: Attempted send on invalid socket [ 132.742665][ T227] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.745823][ T227] block nbd0: Attempted send on invalid socket [ 132.747451][ T227] blk_update_request: I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.750680][ T5419] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.753279][ T227] block nbd0: Attempted send on invalid socket [ 132.754876][ T227] blk_update_request: I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.758314][ T5419] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.761340][ T227] block nbd0: Attempted send on invalid socket [ 132.763061][ T227] blk_update_request: I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 132.766114][ T5419] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 132.768923][ T5419] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 132.771714][ T5419] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 134.109212][ T4080] Bluetooth: hci5: command 0x1009 tx timeout [ 134.296326][ T5458] 9pnet_virtio: no channels available for device syz [ 135.351547][ T5465] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 139.187471][ T5540] netlink: 116 bytes leftover after parsing attributes in process `syz.2.491'. [ 140.346938][ T26] audit: type=1326 audit(140.300:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b62d28 code=0x7ffc0000 [ 140.371654][ T26] audit: type=1326 audit(140.330:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff91b62d28 code=0x7ffc0000 [ 140.391437][ T26] audit: type=1326 audit(140.330:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b62d28 code=0x7ffc0000 [ 140.429484][ T26] audit: type=1326 audit(140.330:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff91b61254 code=0x7ffc0000 [ 140.446076][ T26] audit: type=1326 audit(140.330:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff91b6488c code=0x7ffc0000 [ 140.530919][ T26] audit: type=1326 audit(140.330:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff91b62d28 code=0x7ffc0000 [ 140.549196][ T26] audit: type=1326 audit(140.330:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff91b6488c code=0x7ffc0000 [ 140.554944][ T26] audit: type=1326 audit(140.330:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff91b6162c code=0x7ffc0000 [ 140.619237][ T26] audit: type=1326 audit(140.330:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91b62d28 code=0x7ffc0000 [ 140.624987][ T26] audit: type=1326 audit(140.330:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5558 comm="syz.0.498" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff91b62d28 code=0x7ffc0000 [ 142.681119][ T5596] 9pnet_virtio: no channels available for device syz [ 148.483503][ T4041] block nbd0: Receive control failed (result -32) [ 148.487494][ T5758] block nbd0: shutting down sockets [ 148.591510][ T5765] netlink: set zone limit has 8 unknown bytes [ 149.264086][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 149.520314][ T5781] udc-core: couldn't find an available UDC or it's busy [ 149.522400][ T5781] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.517097][ T5888] 9pnet_virtio: no channels available for device syz [ 154.250569][ T5891] block nbd4: Unsupported socket: shutdown callout must be supported. [ 156.035472][ T5926] udc-core: couldn't find an available UDC or it's busy [ 156.042624][ T5926] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 156.157948][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 159.180653][ T5972] input: syz1 as /devices/virtual/input/input6 [ 160.314759][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 160.314775][ T26] audit: type=1326 audit(159.940:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 160.341384][ T26] audit: type=1326 audit(159.940:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 160.380913][ T26] audit: type=1326 audit(159.960:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 160.416491][ T26] audit: type=1326 audit(159.960:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 160.452561][ T26] audit: type=1326 audit(159.960:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 160.530549][ T26] audit: type=1326 audit(159.980:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 160.536507][ T26] audit: type=1326 audit(159.980:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 160.595132][ T26] audit: type=1326 audit(159.980:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 160.601819][ T26] audit: type=1326 audit(160.010:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 160.608422][ T26] audit: type=1326 audit(160.010:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5976 comm="syz.4.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87514d28 code=0x7ffc0000 [ 162.263804][ T6015] device vti0 entered promiscuous mode [ 162.350805][ C1] Unknown status report in ack skb [ 162.355577][ T6021] 9pnet_virtio: no channels available for device syz [ 164.345865][ T6058] chnl_net:caif_netlink_parms(): no params data found [ 164.502977][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.513394][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.523464][ T6058] device bridge_slave_0 entered promiscuous mode [ 164.556140][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.567247][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.602733][ T6058] device bridge_slave_1 entered promiscuous mode [ 164.715262][ T6058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.748857][ T6058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.615343][ T6058] team0: Port device team_slave_0 added [ 165.618906][ T6058] team0: Port device team_slave_1 added [ 165.700431][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.702429][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.749782][ T6058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.754142][ T6058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.756020][ T6058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.783693][ T6058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.085018][ T4076] Bluetooth: hci5: command 0x0409 tx timeout [ 166.771928][ T6058] device hsr_slave_0 entered promiscuous mode [ 166.900380][ T6058] device hsr_slave_1 entered promiscuous mode [ 166.939928][ T6058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.941899][ T6058] Cannot create hsr debugfs directory [ 166.950557][ T6128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.461513][ T6058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.501180][ T6058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.544338][ T6058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.820671][ T6058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.887234][ T148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.974087][ T148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.118448][ T148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.127330][ T21] Bluetooth: hci5: command 0x041b tx timeout [ 168.366776][ T148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.535316][ T6058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.631723][ T6058] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.644671][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.650709][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.656520][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.670885][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.676503][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.678737][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.713417][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.718961][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.726538][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.733467][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.735321][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.743068][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.781277][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.636019][ T4078] Bluetooth: hci1: command 0x0406 tx timeout [ 169.637822][ T4078] Bluetooth: hci0: command 0x0406 tx timeout [ 169.644435][ T4078] Bluetooth: hci3: command 0x0406 tx timeout [ 169.657012][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.688783][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.721178][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.752064][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.781609][ T6058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.794746][ T6058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.798890][ T6217] udc-core: couldn't find an available UDC or it's busy [ 169.826969][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.832525][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.836436][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.842877][ T6217] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 169.858952][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.868194][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.871110][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.035841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.038089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.050812][ T6058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.189445][ T4078] Bluetooth: hci5: command 0x040f tx timeout [ 170.285069][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.288428][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.330188][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.333886][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.337021][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.343776][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.355878][ T6058] device veth0_vlan entered promiscuous mode [ 170.415630][ T6058] device veth1_vlan entered promiscuous mode [ 170.458325][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.462703][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.465468][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.476322][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.488344][ T6058] device veth0_macvtap entered promiscuous mode [ 170.519865][ T6058] device veth1_macvtap entered promiscuous mode [ 170.542479][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.545391][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.571853][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.574164][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.576931][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.581306][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.597389][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.613816][ T6058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.616694][ T6058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.633606][ T6058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.635888][ T148] tipc: Disabling bearer [ 170.644853][ T148] tipc: Disabling bearer [ 170.650798][ T148] tipc: Left network mode [ 170.652296][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.661777][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.678322][ T6058] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.681327][ T6058] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.691207][ T6058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.693677][ T6058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.119363][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.128972][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.133563][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.136514][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.147925][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.158005][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.874220][ T6308] 9pnet_virtio: no channels available for device syz [ 172.078846][ T4041] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 172.269690][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 172.622701][ T148] device hsr_slave_0 left promiscuous mode [ 172.699582][ T148] device hsr_slave_1 left promiscuous mode [ 172.830043][ T148] device bridge_slave_0 left promiscuous mode [ 172.832517][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.220896][ T148] device veth1_macvtap left promiscuous mode [ 173.222944][ T148] device veth0_macvtap left promiscuous mode [ 173.225751][ T148] device veth1_vlan left promiscuous mode [ 173.227961][ T148] device veth0_vlan left promiscuous mode [ 173.325797][ T6366] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 173.327556][ T6366] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 173.331660][ T6366] vhci_hcd vhci_hcd.0: Device attached [ 173.335347][ T6366] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 173.337034][ T6366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 173.339560][ T6366] vhci_hcd vhci_hcd.0: Device attached [ 173.342634][ T6366] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 173.344418][ T6366] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.346493][ T6366] vhci_hcd vhci_hcd.0: Device attached [ 173.348740][ T6366] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 173.353128][ T6366] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 173.356086][ T6366] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 173.370953][ T6371] vhci_hcd: connection closed [ 173.371635][ T136] vhci_hcd: stop threads [ 173.371652][ T6369] vhci_hcd: connection closed [ 173.372548][ T6367] vhci_hcd: connection closed [ 173.372995][ T136] vhci_hcd: release socket [ 173.388975][ T136] vhci_hcd: disconnect device [ 173.442034][ T136] vhci_hcd: stop threads [ 173.443249][ T136] vhci_hcd: release socket [ 173.445339][ T136] vhci_hcd: disconnect device [ 173.530323][ T136] vhci_hcd: stop threads [ 173.531561][ T136] vhci_hcd: release socket [ 173.532815][ T136] vhci_hcd: disconnect device [ 175.163637][ T148] team0 (unregistering): Port device team_slave_1 removed [ 175.192691][ T148] team0 (unregistering): Port device team_slave_0 removed [ 175.230290][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.354681][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.677663][ T148] bond0 (unregistering): Released all slaves [ 176.596642][ T6393] nicvf0: tun_chr_ioctl cmd 1074025676 [ 176.603280][ T6393] nicvf0: owner set to 0 [ 176.604480][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.705'. [ 176.852513][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 177.318815][ T6427] udc-core: couldn't find an available UDC or it's busy [ 177.344977][ T6427] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 177.915981][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 177.940381][ T6466] bond0: (slave rose0): Error: Device can not be enslaved while up [ 177.995939][ T6470] loop2: detected capacity change from 0 to 7 [ 178.018853][ T6470] Dev loop2: unable to read RDB block 7 [ 178.023981][ T6470] loop2: AHDI p1 p2 p3 [ 178.025072][ T6470] loop2: partition table partially beyond EOD, truncated [ 178.027402][ T6470] loop2: p1 start 1601398130 is beyond EOD, truncated [ 178.037468][ T6470] loop2: p2 start 1702059890 is beyond EOD, truncated [ 178.200075][ T3643] Dev loop2: unable to read RDB block 7 [ 178.201756][ T3643] loop2: AHDI p1 p2 p3 [ 178.203074][ T3643] loop2: partition table partially beyond EOD, truncated [ 178.205225][ T3643] loop2: p1 start 1601398130 is beyond EOD, truncated [ 178.218907][ T3643] loop2: p2 start 1702059890 is beyond EOD, truncated [ 178.733000][ T3643] Dev loop2: unable to read RDB block 7 [ 178.734677][ T3643] loop2: AHDI p1 p2 p3 [ 178.736048][ T3643] loop2: partition table partially beyond EOD, truncated [ 178.739890][ T3643] loop2: p1 start 1601398130 is beyond EOD, truncated [ 178.744071][ T3643] loop2: p2 start 1702059890 is beyond EOD, truncated [ 178.793270][ T6486] ALSA: mixer_oss: invalid OSS volume '' [ 179.141349][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 179.188635][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 179.307939][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b5ee0e94: rx timeout, send abort [ 179.575332][ T6499] udc-core: couldn't find an available UDC or it's busy [ 179.586017][ T6499] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 179.810321][ C0] vcan0: j1939_tp_rxtimer: 0x00000000b5ee0e94: abort rx timeout. Force session deactivation [ 180.505006][ T6550] loop2: detected capacity change from 0 to 7 [ 180.508783][ T6550] Dev loop2: unable to read RDB block 7 [ 180.526673][ T6550] loop2: AHDI p1 p2 p3 [ 180.527810][ T6550] loop2: partition table partially beyond EOD, truncated [ 180.544899][ T6550] loop2: p1 start 1601398130 is beyond EOD, truncated [ 180.546785][ T6550] loop2: p2 start 1702059890 is beyond EOD, truncated [ 180.958056][ T6563] ceph: No mds server is up or the cluster is laggy [ 180.959504][ T4091] libceph: connect (1)[c::]:6789 error -101 [ 180.962153][ T4091] libceph: mon0 (1)[c::]:6789 connect error [ 181.062007][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 181.330113][ T6553] udc-core: couldn't find an available UDC or it's busy [ 181.335557][ T6553] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.558311][ T6592] 9pnet_virtio: no channels available for device syz [ 182.222723][ T6610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.754'. [ 184.289845][ T6686] netlink: 40 bytes leftover after parsing attributes in process `syz.4.771'. [ 184.572622][ T6701] netlink: 48 bytes leftover after parsing attributes in process `syz.5.777'. [ 184.694034][ T6712] loop2: detected capacity change from 0 to 1024 [ 184.943542][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 185.707790][ T6755] loop4: detected capacity change from 0 to 1024 [ 185.758052][ T6759] loop3: detected capacity change from 0 to 512 [ 185.765322][ T6761] loop5: detected capacity change from 0 to 256 [ 185.790350][ T6761] ======================================================= [ 185.790350][ T6761] WARNING: The mand mount option has been deprecated and [ 185.790350][ T6761] and is ignored by this kernel. Remove the mand [ 185.790350][ T6761] option from the mount to silence this warning. [ 185.790350][ T6761] ======================================================= [ 185.805813][ T6755] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.867128][ T6761] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 185.876599][ T6759] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,journal_dev=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 186.000203][ T6759] __quota_error: 2 callbacks suppressed [ 186.000217][ T6759] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 186.011997][ T6759] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 186.017229][ T6759] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.795: Failed to acquire dquot type 0 [ 186.044228][ T6761] udc-core: couldn't find an available UDC or it's busy [ 186.054716][ T6761] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 186.868227][ T6791] loop2: detected capacity change from 0 to 2048 [ 186.985723][ T6805] loop5: detected capacity change from 0 to 1024 [ 187.008881][ T6791] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue. Quota mode: none. [ 187.024144][ T6805] EXT4-fs (loop5): Test dummy encryption mode enabled [ 187.026150][ T6805] EXT4-fs (loop5): Ignoring removed orlov option [ 187.051150][ T6791] process 'syz.2.804' launched '/dev/fd/4/./file1' with NULL argv: empty string added [ 187.082000][ T6805] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000006,commit=0x0000000000000005,orlov,barrier=0x0000000000000003,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 187.131953][ T6810] loop4: detected capacity change from 0 to 8192 [ 187.164432][ T6816] udc-core: couldn't find an available UDC or it's busy [ 187.166387][ T6816] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 187.274537][ T6805] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 187.296530][ T6810] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 187.305734][ T6810] FAT-fs (loop4): Filesystem has been set read-only [ 187.334427][ T6810] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 187.343784][ T6810] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 187.360163][ T6810] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 187.367948][ T6810] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 187.916557][ T6845] loop4: detected capacity change from 0 to 256 [ 187.923884][ T6845] exfat: Deprecated parameter 'namecase' [ 187.927770][ T6845] exfat: Deprecated parameter 'namecase' [ 187.950835][ T6845] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 188.036335][ T4076] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.299354][ T4076] usb 1-1: Using ep0 maxpacket: 8 [ 188.382609][ T6859] loop2: detected capacity change from 0 to 1024 [ 188.428482][ T6859] EXT4-fs (loop2): Test dummy encryption mode enabled [ 188.439530][ T4076] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 188.442481][ T4076] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.445640][ T4076] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.451730][ T6859] EXT4-fs (loop2): Ignoring removed orlov option [ 188.463128][ T4076] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 188.466038][ T6859] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 188.517379][ T4076] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 188.534461][ T4076] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 188.549333][ T4076] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.582403][ T4076] usb 1-1: config 0 descriptor?? [ 188.610169][ T6839] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.855327][ T6873] netlink: 'syz.2.833': attribute type 9 has an invalid length. [ 188.857532][ T6873] netlink: 'syz.2.833': attribute type 6 has an invalid length. [ 189.071663][ T4076] usb 1-1: USB disconnect, device number 5 [ 189.123148][ T6887] udc-core: couldn't find an available UDC or it's busy [ 189.124982][ T6887] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 189.686550][ T6899] loop0: detected capacity change from 0 to 1024 [ 189.726349][ T6900] loop2: detected capacity change from 0 to 2048 [ 189.811052][ T6900] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.977989][ T6910] loop4: detected capacity change from 0 to 128 [ 190.003714][ T6909] loop2: detected capacity change from 0 to 512 [ 190.010235][ T26] audit: type=1326 audit(189.970:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.5.841" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff905c0d28 code=0x7fc00000 [ 190.039875][ T6909] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 190.043576][ T6909] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.084086][ T6909] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 190.117066][ T6909] EXT4-fs (loop2): 1 truncate cleaned up [ 190.118537][ T6909] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,noinit_itable,errors=remount-ro,quota,. Quota mode: writeback. [ 190.138577][ T6916] loop5: detected capacity change from 0 to 1024 [ 190.142277][ T6904] attempt to access beyond end of device [ 190.142277][ T6904] loop4: rw=3, want=952, limit=128 [ 190.145393][ T6904] attempt to access beyond end of device [ 190.145393][ T6904] loop4: rw=2051, want=1041, limit=128 [ 190.211749][ T148] attempt to access beyond end of device [ 190.211749][ T148] loop4: rw=1, want=1041, limit=128 [ 190.213315][ T6916] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.270154][ T9] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 191.320077][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 22 with error 28 [ 191.343340][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 191.343340][ T9] [ 191.345981][ T9] EXT4-fs (loop5): Total free blocks count 0 [ 191.347632][ T9] EXT4-fs (loop5): Free/Dirty block details [ 191.383081][ T9] EXT4-fs (loop5): free_blocks=68451041280 [ 191.384702][ T9] EXT4-fs (loop5): dirty_blocks=32 [ 191.386102][ T9] EXT4-fs (loop5): Block reservation details [ 191.397456][ T9] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 191.406060][ T6945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.860'. [ 191.408708][ T6945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.860'. [ 191.463986][ T6952] loop0: detected capacity change from 0 to 512 [ 191.505012][ T6952] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.536619][ T6952] EXT4-fs (loop0): 1 truncate cleaned up [ 191.538237][ T6952] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.517581][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.027365][ T7002] loop4: detected capacity change from 0 to 128 [ 193.039220][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 193.058077][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 193.154714][ T7010] attempt to access beyond end of device [ 193.154714][ T7010] loop4: rw=2049, want=905, limit=128 [ 193.248529][ T4441] attempt to access beyond end of device [ 193.248529][ T4441] loop4: rw=1, want=1041, limit=128 [ 193.831432][ T7049] netlink: 96 bytes leftover after parsing attributes in process `syz.0.896'. [ 193.837090][ T7048] Illegal XDP return value 4294967274, expect packet loss! [ 193.888229][ T7051] loop0: detected capacity change from 0 to 128 [ 194.238092][ T7064] loop0: detected capacity change from 0 to 512 [ 194.344729][ T7064] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 194.370565][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.903'. [ 194.468479][ T7076] loop4: detected capacity change from 0 to 512 [ 194.504029][ T7076] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 194.538075][ T7076] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,nogrpid,nogrpid,,errors=continue. Quota mode: none. [ 194.611327][ T7081] loop5: detected capacity change from 0 to 512 [ 194.769875][ T7081] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 195.023055][ T7088] loop0: detected capacity change from 0 to 1024 [ 195.577293][ T7081] EXT4-fs (loop5): 1 truncate cleaned up [ 195.578975][ T7081] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 195.698154][ T7098] udc-core: couldn't find an available UDC or it's busy [ 195.704744][ T7098] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 195.791159][ T7099] loop5: detected capacity change from 0 to 512 [ 195.835949][ T7099] EXT4-fs (loop5): Ignoring removed oldalloc option [ 195.884072][ T7099] EXT4-fs (loop5): orphan cleanup on readonly fs [ 195.890163][ T7099] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6) [ 195.896458][ T7099] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 195.905504][ T7099] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.913: Failed to acquire dquot type 1 [ 195.919031][ T7099] EXT4-fs (loop5): 1 truncate cleaned up [ 195.927167][ T7099] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback. [ 196.050904][ T7104] netlink: 156 bytes leftover after parsing attributes in process `syz.5.917'. [ 196.303857][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.919'. [ 196.347022][ T7113] loop3: detected capacity change from 0 to 128 [ 196.440483][ T7113] UDF-fs: bad mount option "partitkon=00000000000000000005" or missing value [ 197.364710][ T7120] binder: 7115:7120 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 197.485054][ T7132] loop5: detected capacity change from 0 to 1024 [ 197.533559][ T7132] EXT4-fs (loop5): Ignoring removed nobh option [ 197.535278][ T7132] EXT4-fs (loop5): Ignoring removed bh option [ 197.536884][ T7132] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.602617][ T7132] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,barrier,nouid32,max_dir_size_kb=0x00000000004007b1,noblock_validity,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 197.975403][ T7157] loop4: detected capacity change from 0 to 512 [ 198.843981][ T7157] EXT4-fs (loop4): Test dummy encryption mode enabled [ 198.845930][ T7157] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.869276][ T7164] loop5: detected capacity change from 0 to 128 [ 198.872904][ T7157] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.932: bad orphan inode 131083 [ 198.876579][ T7157] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,abort,noload,,errors=continue. Quota mode: none. [ 198.902697][ T7164] FAT-fs (loop5): bogus number of reserved sectors [ 198.904729][ T7164] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 198.921766][ T7164] FAT-fs (loop5): Can't find a valid FAT filesystem [ 198.990422][ T7164] udc-core: couldn't find an available UDC or it's busy [ 199.003962][ T7164] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 199.886146][ T7178] loop3: detected capacity change from 0 to 8192 [ 199.922050][ T7178] loop3: p1 p2 < > p3 p4 < p5 > [ 199.923330][ T7178] loop3: partition table partially beyond EOD, truncated [ 199.925514][ T7178] loop3: p1 size 50331648 extends beyond EOD, truncated [ 199.928506][ T7178] loop3: p2 start 327680 is beyond EOD, truncated [ 199.930357][ T7178] loop3: p3 size 132352 extends beyond EOD, truncated [ 199.937702][ T7178] loop3: p5 size 50331648 extends beyond EOD, truncated [ 200.028849][ T3643] loop3: p1 p2 < > p3 p4 < p5 > [ 200.040362][ T3643] loop3: partition table partially beyond EOD, truncated [ 200.067543][ T3643] loop3: p1 size 50331648 extends beyond EOD, truncated [ 200.087079][ T3643] loop3: p2 start 327680 is beyond EOD, truncated [ 200.088802][ T3643] loop3: p3 size 132352 extends beyond EOD, truncated [ 200.117047][ T3643] loop3: p5 size 50331648 extends beyond EOD, truncated [ 200.239689][ T4076] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 200.246573][ T7202] loop5: detected capacity change from 0 to 512 [ 200.306837][ T7202] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 200.334668][ T7202] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 200.525999][ T7212] binder: 7211 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 200.526023][ T7212] binder: 7211:7212 ioctl c018620c 200000000180 returned -22 [ 200.563171][ T4023] udevd[4023]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 200.602687][ T6843] udevd[6843]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 200.662841][ T4154] udevd[4154]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 200.732129][ T3323] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 200.769306][ T4076] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.771539][ T3323] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.772082][ T4076] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 201.669567][ T4076] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.672467][ T4076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.674674][ T4076] usb 1-1: Product: syz [ 201.675756][ T4076] usb 1-1: Manufacturer: syz [ 201.677013][ T4076] usb 1-1: SerialNumber: syz [ 201.770404][ T7218] udevd[7218]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 201.925253][ T4023] udevd[4023]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 201.945112][ T7218] udevd[7218]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 201.994948][ T4115] udevd[4115]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 202.025680][ T7240] loop4: detected capacity change from 0 to 512 [ 202.040710][ T4021] udevd[4021]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 202.159345][ T7240] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.188349][ T7240] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.951: invalid indirect mapped block 4294967295 (level 1) [ 202.239192][ T7240] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.951: invalid indirect mapped block 4294967295 (level 1) [ 202.265474][ T7240] EXT4-fs (loop4): 2 truncates cleaned up [ 202.277351][ T7240] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 202.703012][ T7270] loop4: detected capacity change from 0 to 256 [ 202.859252][ T4076] cdc_ncm 1-1:1.0: bind() failure [ 202.864389][ T7270] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 202.889524][ T7270] FAT-fs (loop4): Filesystem has been set read-only [ 202.899952][ T4076] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 202.919655][ T4076] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 203.420559][ T4076] usbtest: probe of 1-1:1.1 failed with error -71 [ 203.686899][ T7270] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 203.691034][ T4076] usb 1-1: USB disconnect, device number 6 [ 203.719120][ T7270] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 204.822365][ T7297] loop0: detected capacity change from 0 to 1024 [ 204.944513][ T7297] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.016360][ T7307] loop4: detected capacity change from 0 to 128 [ 205.041792][ T7307] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 205.050676][ T7307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.243935][ T7318] loop0: detected capacity change from 0 to 1024 [ 205.305135][ T7318] EXT4-fs (loop0): Ignoring removed orlov option [ 205.308249][ T7318] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 205.349471][ T7318] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 205.424058][ T7318] EXT4-fs (loop0): shut down requested (0) [ 205.707335][ T7350] loop3: detected capacity change from 0 to 1024 [ 206.328563][ T7392] loop5: detected capacity change from 0 to 2048 [ 206.365502][ T7387] netlink: 44 bytes leftover after parsing attributes in process `syz.0.989'. [ 206.367933][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 206.394133][ T7392] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.745029][ T7414] loop5: detected capacity change from 0 to 512 [ 206.810378][ T7414] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 206.814714][ T7414] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 206.845701][ T7414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 206.860642][ T7414] System zones: 1-12 [ 207.646448][ T7414] EXT4-fs (loop5): 1 truncate cleaned up [ 207.648051][ T7414] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 207.795941][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 208.096710][ T7462] udc-core: couldn't find an available UDC or it's busy [ 208.103394][ T7462] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 208.724817][ T7491] loop4: detected capacity change from 0 to 2048 [ 208.780800][ T7491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.831715][ T7499] input: syz1 as /devices/virtual/input/input8 [ 208.938560][ T7504] loop4: detected capacity change from 0 to 512 [ 209.085011][ T7504] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 209.256514][ T7517] udc-core: couldn't find an available UDC or it's busy [ 209.261974][ T7517] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 209.718161][ T7523] loop4: detected capacity change from 0 to 1024 [ 209.780899][ T7523] hfsplus: keylen 65060 too large [ 209.782790][ T7523] hfsplus: xattr searching failed [ 209.802301][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 210.226898][ T7549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1047'. [ 210.246155][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1048'. [ 210.253554][ T7553] loop3: detected capacity change from 0 to 1024 [ 210.295580][ T7555] udc-core: couldn't find an available UDC or it's busy [ 210.297581][ T7555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 210.428028][ T7559] loop4: detected capacity change from 0 to 1024 [ 210.845097][ T7564] udc-core: couldn't find an available UDC or it's busy [ 210.846998][ T7564] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 210.853117][ T7564] loop4: detected capacity change from 0 to 256 [ 210.893548][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1060'. [ 210.934066][ T7564] exFAT-fs (loop4): Invalid exboot-signature(sector = 2): 0x1119abd0 [ 210.936991][ T7564] exFAT-fs (loop4): Invalid exboot-signature(sector = 5): 0x1119abd0 [ 210.942560][ T7564] exFAT-fs (loop4): Invalid exboot-signature(sector = 6): 0x00000000 [ 210.967134][ T7564] exFAT-fs (loop4): Invalid exboot-signature(sector = 7): 0x00000000 [ 210.974627][ T7564] exFAT-fs (loop4): Invalid exboot-signature(sector = 8): 0x00000000 [ 210.985100][ T7564] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e) [ 211.001413][ T7564] exFAT-fs (loop4): invalid boot region [ 211.008675][ T7564] exFAT-fs (loop4): failed to recognize exfat type [ 211.035230][ T7584] loop5: detected capacity change from 0 to 1024 [ 211.073696][ T7584] EXT4-fs (loop5): Ignoring removed nobh option [ 211.075548][ T7584] EXT4-fs (loop5): Ignoring removed bh option [ 211.077131][ T7584] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.106343][ T7584] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,barrier,nouid32,max_dir_size_kb=0x00000000004007b1,noblock_validity,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 211.364917][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1068'. [ 211.367302][ T7597] netlink: 'syz.5.1068': attribute type 27 has an invalid length. [ 211.432725][ T7603] udc-core: couldn't find an available UDC or it's busy [ 211.434989][ T7603] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 211.528637][ T7606] loop5: detected capacity change from 0 to 2048 [ 211.565439][ T7606] EXT4-fs error (device loop5): ext4_fill_super:4841: inode #2: comm syz.5.1072: iget: bad extended attribute block 281474976710655 [ 211.571171][ T7606] EXT4-fs (loop5): get root inode failed [ 211.572937][ T7606] EXT4-fs (loop5): mount failed [ 211.765442][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 211.767979][ T7616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1076'. [ 212.056049][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 212.061547][ T7630] loop5: detected capacity change from 0 to 16 [ 212.064851][ T7626] netlink: 'syz.3.1080': attribute type 27 has an invalid length. [ 212.144776][ T7630] erofs: (device loop5): mounted with root inode @ nid 36. [ 212.167893][ T7635] loop3: detected capacity change from 0 to 2048 [ 212.203331][ T7635] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=4096, location=4096 [ 212.205845][ T7635] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 212.208512][ T7635] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 212.219995][ T7635] UDF-fs: Scanning with blocksize 512 failed [ 212.263130][ T7635] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 212.265562][ T7635] UDF-fs: Scanning with blocksize 1024 failed [ 212.282906][ T7635] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 212.301978][ T7635] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 212.304144][ T7635] UDF-fs: Scanning with blocksize 2048 failed [ 212.317263][ T7635] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 212.332634][ T7635] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 212.345664][ T7635] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 212.352081][ T7635] UDF-fs: Scanning with blocksize 4096 failed [ 212.358039][ T7635] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 212.360727][ T7643] device sit1 entered promiscuous mode [ 213.531351][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1096'. [ 213.537341][ T7664] netlink: 'syz.0.1096': attribute type 27 has an invalid length. [ 214.718031][ T7692] loop4: detected capacity change from 0 to 128 [ 214.745701][ T7692] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 214.936609][ T7704] udc-core: couldn't find an available UDC or it's busy [ 214.938557][ T7704] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 215.023827][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 215.029961][ T7708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.032368][ T7708] IPv6: NLM_F_CREATE should be set when creating new route [ 215.034329][ T7708] IPv6: NLM_F_CREATE should be set when creating new route [ 216.017970][ T7715] loop4: detected capacity change from 0 to 1024 [ 217.822658][ T7746] udc-core: couldn't find an available UDC or it's busy [ 217.824579][ T7746] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 217.922879][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 218.812707][ T7761] device sit1 entered promiscuous mode [ 221.216375][ T7768] loop5: detected capacity change from 0 to 1024 [ 221.620342][ T7768] hfsplus: xattr searching failed [ 221.636553][ T7768] hfsplus: b-tree write err: -5, ino 3 [ 221.868121][ T5682] hfsplus: b-tree write err: -5, ino 3 [ 222.896420][ T7788] loop5: detected capacity change from 0 to 1024 [ 222.934417][ T7788] EXT4-fs (loop5): Ignoring removed oldalloc option [ 223.058284][ T7792] loop3: detected capacity change from 0 to 2048 [ 223.092890][ T7792] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 223.118027][ T7792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.239297][ T7788] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.574765][ T7788] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,oldalloc,usrquota,dioread_nolock,noinit_itable,usrquota,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 225.019686][ T1535] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 226.004348][ T7820] loop5: detected capacity change from 0 to 1024 [ 226.149707][ T1535] usb 1-1: Using ep0 maxpacket: 32 [ 226.205932][ T7824] device sit1 entered promiscuous mode [ 226.289259][ T1535] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.291648][ T1535] usb 1-1: config 0 has no interface number 0 [ 226.466923][ T7827] 9pnet: Insufficient options for proto=fd [ 226.469269][ T1535] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 226.471805][ T1535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.473974][ T1535] usb 1-1: Product: syz [ 226.475132][ T1535] usb 1-1: Manufacturer: syz [ 226.477492][ T1535] usb 1-1: SerialNumber: syz [ 226.484794][ T1535] usb 1-1: config 0 descriptor?? [ 226.530109][ T1535] smsc95xx v2.0.0 [ 226.531285][ T1535] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 226.534430][ T1535] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 226.703381][ T7833] loop3: detected capacity change from 0 to 8192 [ 227.871071][ T1535] usb 1-1: USB disconnect, device number 7 [ 229.023034][ T7857] nbd4: detected capacity change from 0 to 72456 [ 229.029861][ T4041] block nbd4: Receive control failed (result -107) [ 229.849918][ T227] block nbd4: Dead connection, failed to find a fallback [ 229.868020][ T227] block nbd4: shutting down sockets [ 229.870105][ T227] print_req_error: 2 callbacks suppressed [ 229.870115][ T227] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.874656][ T227] buffer_io_error: 39 callbacks suppressed [ 229.874679][ T227] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.878476][ T227] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.881854][ T227] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.885171][ T149] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.888027][ T149] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.890435][ T149] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.893402][ T149] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.895707][ T149] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.898538][ T149] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.901346][ T149] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.904262][ T149] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.906624][ T149] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.909600][ T149] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.912439][ T149] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.915395][ T149] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.917646][ T7848] ldm_validate_partition_table(): Disk read failed. [ 229.926496][ T149] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.930205][ T149] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.932867][ T149] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.935767][ T149] Buffer I/O error on dev nbd4, logical block 0, async page read [ 229.939906][ T7848] Dev nbd4: unable to read RDB block 0 [ 229.953044][ T7848] nbd4: unable to read partition table [ 230.170037][ T4021] ldm_validate_partition_table(): Disk read failed. [ 230.172819][ T4021] Dev nbd4: unable to read RDB block 0 [ 230.190333][ T4021] nbd4: unable to read partition table [ 230.213839][ T4021] ldm_validate_partition_table(): Disk read failed. [ 230.240956][ T4021] Dev nbd4: unable to read RDB block 0 [ 230.247508][ T4021] nbd4: unable to read partition table [ 230.260473][ T7879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1175'. [ 230.262964][ T7879] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 230.338448][ T7881] udc-core: couldn't find an available UDC or it's busy [ 230.342003][ T7881] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 231.102561][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 231.105017][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1179'. [ 231.107322][ T7889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1179'. [ 231.947129][ T7894] binder: 7891:7894 ioctl 4018620d 0 returned -22 [ 233.203752][ T4041] block nbd0: Receive control failed (result -107) [ 233.208104][ T7911] nbd0: detected capacity change from 0 to 72456 [ 233.220723][ T227] block nbd0: Dead connection, failed to find a fallback [ 233.222667][ T227] block nbd0: shutting down sockets [ 233.230860][ T7911] ldm_validate_partition_table(): Disk read failed. [ 233.233232][ T7911] Dev nbd0: unable to read RDB block 0 [ 233.242497][ T7911] nbd0: unable to read partition table [ 233.248391][ T4115] ldm_validate_partition_table(): Disk read failed. [ 233.250782][ T4115] Dev nbd0: unable to read RDB block 0 [ 233.252784][ T4115] nbd0: unable to read partition table [ 233.260298][ T4115] ldm_validate_partition_table(): Disk read failed. [ 233.262601][ T4115] Dev nbd0: unable to read RDB block 0 [ 233.268801][ T4115] nbd0: unable to read partition table [ 233.708714][ T7919] udc-core: couldn't find an available UDC or it's busy [ 233.710823][ T7919] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 233.754009][ T7921] loop5: detected capacity change from 0 to 1764 [ 234.949557][ T7939] binder: 7937:7939 tried to acquire reference to desc 0, got 1 instead [ 234.964930][ T4076] binder: undelivered TRANSACTION_COMPLETE [ 234.993195][ T4076] binder: undelivered transaction 7, process died. [ 241.308960][ T7990] udc-core: couldn't find an available UDC or it's busy [ 241.311134][ T7990] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 241.395877][ T4041] block nbd5: Receive control failed (result -107) [ 241.403474][ T7996] nbd5: detected capacity change from 0 to 72456 [ 241.406245][ T149] block nbd5: Dead connection, failed to find a fallback [ 241.408213][ T149] block nbd5: shutting down sockets [ 241.409707][ T149] print_req_error: 90 callbacks suppressed [ 241.409718][ T149] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.414079][ T149] buffer_io_error: 88 callbacks suppressed [ 241.414088][ T149] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.417890][ T227] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.421079][ T227] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.423628][ T227] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.426739][ T227] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.429714][ T227] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.432492][ T227] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.434706][ T149] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.437826][ T149] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.440483][ T149] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.443386][ T149] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.445700][ T227] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.448571][ T227] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.450938][ T227] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.453737][ T227] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.455858][ T4115] ldm_validate_partition_table(): Disk read failed. [ 241.457747][ T149] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.460804][ T149] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.463311][ T149] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.466132][ T149] Buffer I/O error on dev nbd5, logical block 0, async page read [ 241.468549][ T4115] Dev nbd5: unable to read RDB block 0 [ 241.470997][ T4115] nbd5: unable to read partition table [ 241.474327][ T7996] ldm_validate_partition_table(): Disk read failed. [ 241.476874][ T7996] Dev nbd5: unable to read RDB block 0 [ 241.479777][ T7996] nbd5: unable to read partition table [ 241.485022][ T4115] ldm_validate_partition_table(): Disk read failed. [ 241.487358][ T4115] Dev nbd5: unable to read RDB block 0 [ 241.489519][ T4115] nbd5: unable to read partition table [ 243.149114][ C0] ------------[ cut here ]------------ [ 243.150889][ C0] NETDEV WATCHDOG: bnep0 (): transmit queue 0 timed out [ 243.153169][ C0] WARNING: CPU: 0 PID: 8017 at net/sched/sch_generic.c:478 dev_watchdog+0x89c/0xb4c [ 243.155570][ C0] Modules linked in: [ 243.156623][ C0] CPU: 0 PID: 8017 Comm: syz.2.1222 Not tainted 5.15.179-syzkaller #0 [ 243.158835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.161583][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 243.163669][ C0] pc : dev_watchdog+0x89c/0xb4c [ 243.164928][ C0] lr : dev_watchdog+0x89c/0xb4c [ 243.166234][ C0] sp : ffff800008007ab0 [ 243.167328][ C0] x29: ffff800008007b00 x28: ffffffffffffff8c x27: ffff0000eb894000 [ 243.169479][ C0] x26: 0000000000000001 x25: 0000000000000000 x24: 0000000000000000 [ 243.171638][ C0] x23: ffff0000eb894440 x22: ffff0000eb894540 x21: dfff800000000000 [ 243.173734][ C0] x20: 00000000ffffe88c x19: ffff800016fd2000 x18: 0000000000000103 [ 243.175844][ C0] x17: 0000000000000000 x16: ffff800011b5ac80 x15: 00000000ffffffff [ 243.178106][ C0] x14: ffff0000ce1e0000 x13: 0000000000000001 x12: 0000000000000001 [ 243.180319][ C0] x11: 0000000000000102 x10: 0000000000000000 x9 : 8aea4de5185e8900 [ 243.182501][ C0] x8 : 8aea4de5185e8900 x7 : 0000000000000001 x6 : 0000000000000001 [ 243.184085][ T8021] loop4: detected capacity change from 0 to 128 [ 243.184676][ C0] x5 : ffff800008007218 x4 : ffff800014c4fe40 x3 : ffff800008557710 [ 243.188473][ C0] x2 : 0000000000000001 x1 : 0000000100000102 x0 : 0000000000000035 [ 243.190614][ C0] Call trace: [ 243.191508][ C0] dev_watchdog+0x89c/0xb4c [ 243.192734][ C0] call_timer_fn+0x19c/0x8f0 [ 243.193963][ C0] __run_timers+0x554/0x718 [ 243.195193][ C0] run_timer_softirq+0x7c/0x114 [ 243.196571][ C0] handle_softirqs+0x384/0xdbc [ 243.197942][ C0] __irq_exit_rcu+0x268/0x4d8 [ 243.199194][ C0] irq_exit+0x14/0x88 [ 243.200237][ C0] handle_domain_irq+0x14c/0x1fc [ 243.201603][ C0] gic_handle_irq+0x78/0x1c8 [ 243.202851][ C0] call_on_irq_stack+0x24/0x4c [ 243.204117][ C0] do_interrupt_handler+0x74/0x94 [ 243.205480][ C0] el1_interrupt+0x30/0x58 [ 243.206685][ C0] el1h_64_irq_handler+0x18/0x24 [ 243.208012][ C0] el1h_64_irq+0x78/0x7c [ 243.209135][ C0] _raw_spin_unlock_irqrestore+0xbc/0x158 [ 243.210704][ C0] __skb_try_recv_datagram+0x198/0x584 [ 243.212190][ C0] __unix_dgram_recvmsg+0x2f8/0xe64 [ 243.213553][ C0] unix_dgram_recvmsg+0xd4/0xec [ 243.214842][ C0] ____sys_recvmsg+0x234/0x720 [ 243.216154][ C0] ___sys_recvmsg+0x240/0x2cc [ 243.217448][ C0] do_recvmmsg+0x310/0x9a4 [ 243.218619][ C0] __arm64_sys_recvmmsg+0x180/0x23c [ 243.220039][ C0] invoke_syscall+0x98/0x2b8 [ 243.221334][ C0] el0_svc_common+0x138/0x258 [ 243.222586][ C0] do_el0_svc+0x58/0x14c [ 243.223731][ C0] el0_svc+0x7c/0x1f0 [ 243.224822][ C0] el0t_64_sync_handler+0x84/0xe4 [ 243.226187][ C0] el0t_64_sync+0x1a0/0x1a4 [ 243.227472][ C0] irq event stamp: 183185 [ 243.228651][ C0] hardirqs last enabled at (183184): [] __up_console_sem+0xb4/0x100 [ 243.231304][ C0] hardirqs last disabled at (183185): [] el1_dbg+0x24/0x80 [ 243.233758][ C0] softirqs last enabled at (180594): [] handle_softirqs+0xb88/0xdbc [ 243.236443][ C0] softirqs last disabled at (183153): [] __irq_exit_rcu+0x268/0x4d8 [ 243.239060][ C0] ---[ end trace b93f9dcd85dcc54a ]--- [ 243.557446][ T8021] attempt to access beyond end of device [ 243.557446][ T8021] loop4: rw=2049, want=129, limit=128