last executing test programs: 9m21.167383674s ago: executing program 3 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 9m20.974544317s ago: executing program 3 (id=166): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect(0x0, 0x32e, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000054b2000093"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000080)={0x2, 0x100, 0x20a6}) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m18.591094529s ago: executing program 3 (id=179): r0 = syz_io_uring_setup(0x6de4, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) 9m18.340041622s ago: executing program 3 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 9m16.350731129s ago: executing program 3 (id=194): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) r2 = accept$netrom(r1, 0x0, 0x0) socket(0x2d, 0x2, 0x0) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000080)="c93c", 0x2}], 0x1) 9m15.290085743s ago: executing program 3 (id=201): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) 8m59.538789466s ago: executing program 32 (id=201): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) 18.466518692s ago: executing program 4 (id=2936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read$FUSE(r3, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) 16.326041741s ago: executing program 4 (id=2939): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0x174, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffb294}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x100a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe01}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) socket$inet6(0xa, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 15.212547786s ago: executing program 4 (id=2942): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) 14.864895121s ago: executing program 4 (id=2944): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x562}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x3, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) listen(r0, 0x7) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000002140)={{0x3, 0x2, 0x1, 0x1, 0x7}, 0x8, 0x1}) 14.614149164s ago: executing program 4 (id=2946): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r3, @ANYRESHEX=0x0], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 13.651189187s ago: executing program 5 (id=2948): syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0xfd}, 0x8000000, 0x0, 0x3, 0x1, 0xfffc}, 0x20) socket$kcm(0x10, 0x400000002, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x100, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x5f69639d2e2f7b17}, 0x14}}, 0x40000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002400048005000300010000000500030002000000050003000000000005000300010000000800020002000000"], 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="90000000", @ANYBLOB="200027bd7000fcdbdf25020000003400048005000300010000000500030000000000050003000700000005000300000000000500030005000000050003000500000008000100030000002400048005000300000000000500030000000000050003007fc4a05f2abad0326fc7fae815f5f50000000005000300010000000800010002020003", @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="752775e599edf9edb1cf79fc093286874c692b56e9287c3a74757181be65e965d530d3fd87e7f40882568d4d8ff64aa544f87eb59318e0ff7f258cde995892b56576a7d14c4d002c7989b8f33aacf0d647db6de1f10e0eca1d500e64e7bc3d738c42fba4184b9d43a5502de39fc339d2b0be36761c9700e1ef9e3c6b576d14757ce1e55df165b181edda8ebf2b10a944f652eceb3c24aaff99ddc3c61ecd1a90fc0a33b1afc08153c0dd6de4ad6c1ccdfb50a2448a4baceb6dd03661"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x880) io_setup(0x30, &(0x7f0000000600)=0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x2b4080) io_submit(r8, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000000c0)="01", 0x24}]) socket$nl_generic(0x10, 0x3, 0x10) 13.616987317s ago: executing program 4 (id=2949): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0x174, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffb294}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x100a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe01}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) socket$inet6(0xa, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 6.807710119s ago: executing program 2 (id=2867): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000001c0)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.798131919s ago: executing program 1 (id=2960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read$FUSE(r3, &(0x7f0000005000)={0x2020}, 0x2020) mount(0x0, 0x0, 0x0, 0x40078, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) 6.789672959s ago: executing program 5 (id=2961): unshare(0x66000080) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010300000009fddbdf2502"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x44) 5.814407352s ago: executing program 2 (id=2950): socket$packet(0x11, 0x1, 0x300) mq_open(&(0x7f00000003c0)='filter\x00\xd9\x83\xda\x88v|\bu\x90\xdf\x88\'\xcf\xa4\x06\xd0\x87\b\xff\xa0\xc6jB\x1fE\x9c\xea', 0x40, 0x15, &(0x7f0000000100)={0xc5d, 0x8000000000003, 0x9, 0x7}) clock_gettime(0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) close(0x3) r4 = syz_io_uring_setup(0x22f, &(0x7f00000001c0)={0x0, 0x5325, 0x10000, 0x0, 0x259}, &(0x7f0000000000), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000040)) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r6, 0x5414, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) 5.783946352s ago: executing program 1 (id=2952): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, 0x0) 5.775523792s ago: executing program 5 (id=2964): unshare(0x8000400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x29) 4.641599948s ago: executing program 2 (id=2953): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 4.641346388s ago: executing program 5 (id=2954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r10, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x12}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x4584, 0x0, @default, @val, @void}, 0x20) 4.639312688s ago: executing program 1 (id=2967): unshare(0x66000080) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010300000009fddbdf2502"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x44) 3.462657504s ago: executing program 0 (id=2956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x509df34b049dab42) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x30}) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82881, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETSW2(r5, 0x5433, 0x0) 3.460938154s ago: executing program 2 (id=2957): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) 3.441020434s ago: executing program 1 (id=2958): ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x4, 0xfdfdffff, 0xffffffff}) 3.267423387s ago: executing program 5 (id=2962): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r3, @ANYRESHEX=0x0], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.530719256s ago: executing program 0 (id=2965): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) close(r0) 2.473464637s ago: executing program 1 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x2, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') read$FUSE(r3, &(0x7f0000005000)={0x2020}, 0x2020) mount(0x0, 0x0, 0x0, 0x40078, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) 2.410656878s ago: executing program 0 (id=2968): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d00, 0x0) 2.379319458s ago: executing program 0 (id=2969): socket$packet(0x11, 0x1, 0x300) mq_open(&(0x7f00000003c0)='filter\x00\xd9\x83\xda\x88v|\bu\x90\xdf\x88\'\xcf\xa4\x06\xd0\x87\b\xff\xa0\xc6jB\x1fE\x9c\xea', 0x40, 0x15, &(0x7f0000000100)={0xc5d, 0x8000000000003, 0x9, 0x7}) clock_gettime(0x0, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) close(0x3) r4 = syz_io_uring_setup(0x22f, &(0x7f00000001c0)={0x0, 0x5325, 0x10000, 0x0, 0x259}, &(0x7f0000000000), 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000040)) 2.25502599s ago: executing program 5 (id=2970): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0x174, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffb294}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1011, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x100a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3d7}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe01}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) socket$inet6(0xa, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 2.24134101s ago: executing program 2 (id=2971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x9, 0x70bd25, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc14}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x20000000, 0xfffffff0, 0x4}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000002}, 0x4) 290.640727ms ago: executing program 0 (id=2972): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x562}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x3, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) listen(r0, 0x7) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000002140)={{0x3, 0x2, 0x1, 0x1, 0x7}, 0x8, 0x1}) 287.581006ms ago: executing program 1 (id=2973): unshare(0x66000080) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010300000009fddbdf2502"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x44) 102.528129ms ago: executing program 2 (id=2974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='statm\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r10, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x12}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(0x0, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x4584, 0x0, @default, @val, @void}, 0x20) 0s ago: executing program 0 (id=2975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x509df34b049dab42) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x30}) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82881, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCSETSW2(r4, 0x5433, 0x0) kernel console output (not intermixed with test programs): et: couldn't find an available UDC or it's busy [ 84.624347][ T5035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.675168][ T5040] device ip6tnl1 entered promiscuous mode [ 85.646346][ T5052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.221'. [ 87.288421][ T5081] serio: Serial port ptm0 [ 88.951101][ T5100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.236'. [ 88.953843][ T5100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.236'. [ 89.047666][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.061609][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.068271][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.368736][ T5124] netlink: 87 bytes leftover after parsing attributes in process `syz.0.245'. [ 89.502007][ T5128] serio: Serial port ptm0 [ 90.176506][ T5133] loop6: detected capacity change from 0 to 128 [ 90.240219][ T4743] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.230547][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.268294][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.270388][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.609620][ T4314] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.613561][ T4314] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.617139][ T4314] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.619812][ T4314] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.622111][ T4314] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.624777][ T4314] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.770020][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 98.816066][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.818478][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.877491][ T5214] device ip6tnl1 left promiscuous mode [ 98.881764][ T5186] chnl_net:caif_netlink_parms(): no params data found [ 99.023265][ T5231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.026365][ T5231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.048261][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.050289][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.053071][ T5186] device bridge_slave_0 entered promiscuous mode [ 99.065814][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.071371][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.105161][ T5186] device bridge_slave_1 entered promiscuous mode [ 99.257538][ T5186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.265747][ T5186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.301832][ T5186] team0: Port device team_slave_0 added [ 99.315067][ T5186] team0: Port device team_slave_1 added [ 99.334197][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.338416][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.346844][ T5186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.356479][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.358589][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.366073][ T5186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.435849][ T5186] device hsr_slave_0 entered promiscuous mode [ 99.484839][ T5186] device hsr_slave_1 entered promiscuous mode [ 99.534207][ T5186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.536164][ T5186] Cannot create hsr debugfs directory [ 99.714898][ T4306] Bluetooth: hci5: command 0x0409 tx timeout [ 99.760504][ T5186] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.802125][ T5186] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.826642][ T5186] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.867415][ T5186] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.140217][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.145133][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.147515][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.939958][ T5262] loop2: detected capacity change from 0 to 7 [ 100.964291][ T5262] Dev loop2: unable to read RDB block 7 [ 100.966069][ T5262] loop2: AHDI p1 p2 [ 100.967175][ T5262] loop2: partition table partially beyond EOD, truncated [ 100.969510][ T5262] loop2: p1 start 1818582900 is beyond EOD, truncated [ 100.976349][ T5186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.987459][ T3913] Dev loop2: unable to read RDB block 7 [ 100.989124][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.992463][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.005472][ T3913] loop2: AHDI p1 p2 [ 101.006784][ T5186] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.007812][ T3913] loop2: partition table partially beyond EOD, truncated [ 101.015106][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.017520][ T3913] loop2: p1 start 1818582900 is beyond EOD, truncated [ 101.021841][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.024692][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.026614][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.029108][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.038605][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.049976][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.061205][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.063205][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.082744][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.097724][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.108419][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.112579][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.136019][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.160236][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.164742][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.175421][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.189534][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.208092][ T5186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.211510][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.214541][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.220431][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.430426][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.432596][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.463894][ T5186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.513788][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.527618][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.531596][ T5292] device wg1 left promiscuous mode [ 101.801240][ T4314] Bluetooth: hci5: command 0x041b tx timeout [ 102.620392][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.623275][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.650539][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.653224][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.656551][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.659656][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.671295][ T5186] device veth0_vlan entered promiscuous mode [ 102.719049][ T5186] device veth1_vlan entered promiscuous mode [ 102.751685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.755538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.526583][ T5320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.529096][ T5320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.532267][ T5186] device veth0_macvtap entered promiscuous mode [ 103.543791][ T5186] device veth1_macvtap entered promiscuous mode [ 103.581680][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.591354][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.601824][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.617044][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.619702][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.635073][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.637950][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.663214][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.671510][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.678804][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.685305][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.695619][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.698306][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.700858][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.708464][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.725060][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.735726][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.740234][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.789699][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.792631][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.798708][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.812998][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.824142][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.833101][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.842763][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.851359][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.862454][ T5186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.874197][ T4314] Bluetooth: hci5: command 0x040f tx timeout [ 103.880779][ T5186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.892919][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.901382][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.904718][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.913599][ T5186] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.928398][ T5186] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.930876][ T5186] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.939453][ T5186] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.100440][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.102625][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.112921][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.173657][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.182319][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.192153][ T1598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.265299][ T5344] serio: Serial port ptm0 [ 105.954171][ T4306] Bluetooth: hci5: command 0x0419 tx timeout [ 106.200601][ T5362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.435573][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 108.207817][ T5395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.268642][ T5399] Bluetooth: MGMT ver 1.22 [ 109.610463][ T5432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.651450][ T5475] netlink: 332 bytes leftover after parsing attributes in process `syz.2.363'. [ 111.665227][ T5477] fuse: Bad value for 'fd' [ 115.144373][ T5505] fuse: Bad value for 'fd' [ 116.423921][ T5518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.446365][ T5518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.448107][ T5519] fuse: Bad value for 'fd' [ 118.706850][ T5550] netlink: 'syz.5.388': attribute type 1 has an invalid length. [ 118.709060][ T5550] netlink: 'syz.5.388': attribute type 2 has an invalid length. [ 118.794535][ T5555] fuse: Bad value for 'fd' [ 120.783998][ C0] sched: RT throttling activated [ 122.973124][ T5593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.039906][ T5632] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 124.041795][ T5632] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.047092][ T5632] vhci_hcd vhci_hcd.0: Device attached [ 124.544472][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.764027][ T14] usb 1-1: config 0 has no interfaces? [ 124.767025][ T14] usb 1-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 124.770092][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.817178][ T14] usb 1-1: config 0 descriptor?? [ 124.954088][ T1516] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 125.074444][ T5633] usb 2-1: recv xbuf, 0 [ 125.084564][ T14] usb 1-1: USB disconnect, device number 4 [ 125.120342][ T5653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.123057][ T5653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.278034][ T4394] vhci_hcd: stop threads [ 125.282470][ T4394] vhci_hcd: release socket [ 125.292078][ T4394] vhci_hcd: disconnect device [ 126.057036][ T4306] Bluetooth: hci5: command 0x0409 tx timeout [ 126.064519][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.068812][ T1516] usb 2-1: device descriptor read/64, error -71 [ 126.074506][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.324099][ T1516] vhci_hcd: vhci_device speed not set [ 127.020287][ T5670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.040788][ T5702] binder: 5701:5702 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 128.344257][ T5717] capability: warning: `syz.1.443' uses 32-bit capabilities (legacy support in use) [ 130.460047][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.462162][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.476960][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.520905][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.524346][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.526437][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.528391][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.631343][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.633386][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.653308][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.660924][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.662944][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.699651][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.701824][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.703744][ T4400] hid-generic 009C:0008:0003.0003: unknown main item tag 0x0 [ 130.745939][ T4400] hid-generic 009C:0008:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 130.789671][ T5731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.454504][ T5786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.464'. [ 134.765127][ T5811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.326152][ T5848] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 138.418429][ T5867] netlink: 'syz.5.492': attribute type 5 has an invalid length. [ 138.784844][ T5882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.500'. [ 138.900519][ T5876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.080399][ T5905] loop9: detected capacity change from 0 to 7 [ 139.087334][ T5905] loop9: [POWERTEC] p1 p2 p3 [ 139.088905][ T5905] loop9: p1 start 1717986918 is beyond EOD, truncated [ 139.090958][ T5905] loop9: p2 start 796157294 is beyond EOD, truncated [ 139.859666][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.862892][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.158548][ T4400] atkbd serio5: keyboard reset failed on [ 141.107932][ T4743] udevd[4743]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 141.962946][ T5948] device team_slave_0 entered promiscuous mode [ 141.964856][ T5948] device team_slave_1 entered promiscuous mode [ 141.982873][ T5948] device vlan2 entered promiscuous mode [ 141.989843][ T5948] device team0 entered promiscuous mode [ 142.352871][ T5961] nbd0: detected capacity change from 0 to 4294967296 [ 142.405101][ T5966] block nbd0: shutting down sockets [ 142.416207][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.418861][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.421214][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.423783][ T78] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.426862][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.429352][ T78] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.431540][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.433849][ T78] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.436258][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.438719][ T78] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.440902][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.443210][ T78] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.445630][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.448268][ T78] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.450744][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.453280][ T78] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.455701][ T4745] ldm_validate_partition_table(): Disk read failed. [ 142.457536][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.459827][ T78] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.463691][ T78] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.466301][ T78] Buffer I/O error on dev nbd0, logical block 0, async page read [ 142.468486][ T4745] Dev nbd0: unable to read RDB block 0 [ 142.470030][ T4745] nbd0: unable to read partition table [ 142.472827][ T4745] nbd0: partition table beyond EOD, truncated [ 144.025003][ T5659] atkbd serio6: keyboard reset failed on [ 147.755219][ T6026] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.758542][ T6026] x_tables: ip_tables: ah match: only valid for protocol 51 [ 148.091092][ T6044] fuse: Bad value for 'fd' [ 150.352836][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.366597][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.286191][ T6075] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 151.360950][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.561'. [ 152.554308][ T4288] atkbd serio7: keyboard reset failed on [ 152.816956][ T6108] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 152.820035][ T6108] FAT-fs (loop5): unable to read boot sector [ 154.611316][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.613882][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.614769][ T4314] Bluetooth: hci1: command 0x0406 tx timeout [ 157.048192][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.050561][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.223341][ T6189] xt_HMARK: proto mask must be zero with L3 mode [ 157.422822][ T6194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.490312][ T1516] atkbd serio8: keyboard reset failed on [ 158.575104][ T6209] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 158.858388][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.773390][ T6252] input: syz1 as /devices/virtual/input/input8 [ 160.947082][ T6265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.672394][ T6308] netlink: 5 bytes leftover after parsing attributes in process `syz.0.649'. [ 162.767048][ T6314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.805111][ T6310] block nbd2: NBD_DISCONNECT [ 162.807378][ T6310] block nbd2: Send disconnect failed -107 [ 162.810303][ T6310] block nbd2: Send disconnect failed -22 [ 162.812904][ T6307] block nbd2: Disconnected due to user request. [ 162.825892][ T6307] block nbd2: shutting down sockets [ 162.848760][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.655'. [ 163.865900][ T4306] Bluetooth: hci2: command 0x0406 tx timeout [ 163.867527][ T4306] Bluetooth: hci1: command 0x0406 tx timeout [ 163.869143][ T4306] Bluetooth: hci0: command 0x0406 tx timeout [ 163.870650][ T4306] Bluetooth: hci4: command 0x0406 tx timeout [ 163.872173][ T4306] Bluetooth: hci3: command 0x0406 tx timeout [ 163.953301][ T24] hid-generic 03FF:0007:07FF.0004: item fetching failed at offset 0/2 [ 163.955894][ T24] hid-generic: probe of 03FF:0007:07FF.0004 failed with error -22 [ 164.311718][ T6361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.691310][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.700013][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.964072][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.060441][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.688'. [ 166.149876][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 166.152807][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 166.153456][ T6400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.158690][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.161323][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.163630][ T24] usb 1-1: Product: syz [ 166.170430][ T24] usb 1-1: Manufacturer: syz [ 166.172817][ T24] usb 1-1: SerialNumber: syz [ 166.177473][ T24] usb 1-1: config 0 descriptor?? [ 167.946997][ T4314] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 167.950917][ T4314] Bluetooth: hci0: Injecting HCI hardware error event [ 167.962673][ T4306] Bluetooth: hci0: hardware error 0x00 [ 169.074916][ T4288] usb 1-1: USB disconnect, device number 5 [ 169.158526][ T6431] fuse: Bad value for 'fd' [ 170.234672][ T6443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.242136][ T6442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.344197][ T4306] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 171.353378][ T6461] fuse: Bad value for 'fd' [ 173.348541][ T6480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.352896][ T6477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.222214][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 175.244261][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 175.296953][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.300472][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.302550][ T6497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.315814][ T6505] fuse: Bad value for 'fd' [ 175.355900][ T6497] device bridge_slave_0 left promiscuous mode [ 175.358585][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.444393][ T6497] device bridge_slave_1 left promiscuous mode [ 175.471207][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.310353][ T6497] bond0: (slave bond_slave_0): Releasing backup interface [ 176.361286][ T6497] bond0: (slave bond_slave_1): Releasing backup interface [ 176.408161][ T6497] device team_slave_0 left promiscuous mode [ 176.451441][ T6497] team0: Port device team_slave_0 removed [ 176.460079][ T6497] device team_slave_1 left promiscuous mode [ 176.488853][ T6497] team0: Port device team_slave_1 removed [ 176.491330][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.493563][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.502889][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.507973][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.409635][ T6530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.414349][ T6529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.376038][ T6547] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 179.226532][ T6562] input: syz1 as /devices/virtual/input/input9 [ 180.360802][ T6572] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 180.391652][ T6572] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 180.393397][ T6572] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.401527][ T6572] vhci_hcd vhci_hcd.0: Device attached [ 180.542999][ T6572] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 180.544792][ T6572] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 180.586962][ T6586] usb usb1: usbfs: process 6586 (syz.0.758) did not claim interface 0 before use [ 180.590666][ T6572] vhci_hcd vhci_hcd.0: Device attached [ 180.596140][ T6572] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 180.605757][ T6582] vhci_hcd: connection closed [ 180.605860][ T6575] vhci_hcd: connection closed [ 180.615331][ T6174] vhci_hcd: stop threads [ 180.617660][ T6174] vhci_hcd: release socket [ 180.622036][ T6174] vhci_hcd: disconnect device [ 180.721038][ T4288] usb 2-2: new high-speed USB device number 4 using vhci_hcd [ 180.983504][ T6174] vhci_hcd: stop threads [ 181.021131][ T6174] vhci_hcd: release socket [ 181.075032][ T6174] vhci_hcd: disconnect device [ 181.553533][ T6592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 182.457149][ T6597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.579884][ T6677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.848108][ T6686] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.859183][ T6686] mmap: syz.5.773 (6686) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.564512][ T4288] vhci_hcd: vhci_device speed not set [ 186.859295][ T6707] syz.5.787 uses obsolete (PF_INET,SOCK_PACKET) [ 187.790601][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.792267][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.048457][ T4769] libceph: connect (1)[c::]:6789 error -101 [ 188.051337][ T4769] libceph: mon0 (1)[c::]:6789 connect error [ 188.104348][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.514672][ T6722] ceph: No mds server is up or the cluster is laggy [ 189.539305][ T4769] libceph: connect (1)[c::]:6789 error -101 [ 189.540992][ T4769] libceph: mon0 (1)[c::]:6789 connect error [ 190.990216][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.992593][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.981749][ T6937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.510021][ T7089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.678509][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.703767][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.157856][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.160481][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.283639][ T7214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.164397][ T7353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.373651][ T7369] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 208.376182][ T7369] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 208.378414][ T7369] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 211.644810][ T7434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.386488][ T7498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.844170][ T4288] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 215.910859][ T7529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.034209][ T4288] usb 1-1: Using ep0 maxpacket: 32 [ 216.036086][ T4288] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 216.036125][ T4288] usb 1-1: config 0 has no interface number 0 [ 216.037980][ T4288] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 216.038002][ T4288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.038017][ T4288] usb 1-1: Product: syz [ 216.038028][ T4288] usb 1-1: Manufacturer: syz [ 216.038040][ T4288] usb 1-1: SerialNumber: syz [ 216.039829][ T4288] usb 1-1: config 0 descriptor?? [ 216.041444][ T4288] smsc95xx v2.0.0 [ 216.403947][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.406400][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.408535][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.413116][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.432006][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.443556][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.457119][ T4288] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 216.458486][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.459943][ T4288] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 216.491818][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.503483][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.516381][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.529166][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.540405][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.550388][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.560170][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.570548][ T4421] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 216.585024][ T4421] hid-generic 009C:0008:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 217.939287][ T4288] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 218.116839][ T4288] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 218.153655][ T4288] usb 1-1: USB disconnect, device number 6 [ 218.312662][ T7565] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 218.453438][ T7565] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 218.609494][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.622501][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.810318][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.053722][ T7609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.065454][ T7609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.255265][ T7617] netlink: 'syz.0.949': attribute type 10 has an invalid length. [ 220.330227][ T7617] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 220.520641][ T7623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.137948][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 222.880756][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.885064][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.065124][ T7673] netlink: 'syz.4.965': attribute type 10 has an invalid length. [ 223.122354][ T7673] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 223.219040][ T7676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.632212][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 226.407207][ T7717] netlink: 'syz.5.980': attribute type 10 has an invalid length. [ 226.457041][ T7721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.463033][ T7721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.493927][ T7717] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 226.512964][ T7722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.430862][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 228.095887][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.106241][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.232999][ T7768] netlink: 'syz.5.995': attribute type 10 has an invalid length. [ 229.264983][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.268940][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.064207][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.755757][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1004'. [ 231.909334][ T7791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.017219][ T7820] netlink: 'syz.5.1010': attribute type 10 has an invalid length. [ 234.224080][ T4345] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 234.281382][ T7848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.451675][ T4345] usb 1-1: Using ep0 maxpacket: 32 [ 234.490701][ T4345] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 234.493477][ T4345] usb 1-1: config 0 has no interface number 0 [ 234.542740][ T4345] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 234.584643][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.628277][ T4345] usb 1-1: Product: syz [ 234.648194][ T4345] usb 1-1: Manufacturer: syz [ 234.667734][ T4345] usb 1-1: SerialNumber: syz [ 234.788657][ T4345] usb 1-1: config 0 descriptor?? [ 234.986832][ T4345] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 235.098973][ T4345] usb 1-1: qt2_attach - failed to power on unit: -71 [ 235.100934][ T4345] quatech2: probe of 1-1:0.51 failed with error -71 [ 235.119662][ T4345] usb 1-1: USB disconnect, device number 7 [ 236.494176][ T4304] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 236.583833][ T7890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.809595][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.818977][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.119301][ T7921] sp0: Synchronizing with TNC [ 238.377543][ T7932] netlink: 'syz.4.1048': attribute type 3 has an invalid length. [ 239.056481][ T7956] netlink: 'syz.5.1059': attribute type 1 has an invalid length. [ 239.064550][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.097000][ T7956] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 239.108716][ T7956] device veth3 entered promiscuous mode [ 239.112770][ T7956] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 239.292823][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.311009][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.819220][ T7997] input: syz1 as /devices/virtual/input/input12 [ 240.910105][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 241.711465][ T8014] netlink: 'syz.0.1077': attribute type 10 has an invalid length. [ 241.864171][ T8019] tipc: Started in network mode [ 241.873793][ T8019] tipc: Node identity 4, cluster identity 4711 [ 241.884403][ T8019] tipc: Node number set to 4 [ 242.159980][ T8021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.259973][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.260097][ T6824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.267738][ T6824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.357038][ T8042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.364290][ T8042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.925771][ T8049] input: syz1 as /devices/virtual/input/input13 [ 244.144939][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 244.754146][ T8062] netlink: 'syz.0.1091': attribute type 10 has an invalid length. [ 244.861039][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.876871][ T8063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.883880][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.567875][ T8078] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 245.573460][ T8078] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 245.752480][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 246.006691][ T8101] ======================================================= [ 246.006691][ T8101] WARNING: The mand mount option has been deprecated and [ 246.006691][ T8101] and is ignored by this kernel. Remove the mand [ 246.006691][ T8101] option from the mount to silence this warning. [ 246.006691][ T8101] ======================================================= [ 246.017733][ T8101] 9pnet_fd: Insufficient options for proto=fd [ 246.838404][ T8114] input: syz1 as /devices/virtual/input/input14 [ 246.995400][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 247.609608][ T8116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.772944][ T8124] process 'syz.0.1108' launched './file1' with NULL argv: empty string added [ 247.795409][ T8128] netlink: 'syz.4.1107': attribute type 10 has an invalid length. [ 248.779210][ T8143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1108'. [ 248.825550][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.827237][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.831611][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.014905][ T8178] input: syz1 as /devices/virtual/input/input15 [ 251.271608][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 251.896899][ T8169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.040566][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.042634][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.050969][ T8190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.085286][ T8193] netlink: 'syz.5.1127': attribute type 10 has an invalid length. [ 252.380294][ T8211] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1131'. [ 254.380415][ T8240] netlink: 'syz.4.1143': attribute type 10 has an invalid length. [ 254.638090][ T8242] input: syz1 as /devices/virtual/input/input16 [ 254.839127][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'. [ 255.418084][ T8246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.840196][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.246458][ T8271] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1150'. [ 257.291195][ T8282] netlink: 'syz.2.1156': attribute type 10 has an invalid length. [ 259.077312][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.079762][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.133492][ T8302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.905032][ T8338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1168'. [ 259.928412][ T8339] netlink: 'syz.4.1171': attribute type 10 has an invalid length. [ 260.303500][ T8346] sp0: Synchronizing with TNC [ 260.702720][ T7] libceph: connect (1)[c::]:6789 error -101 [ 260.705475][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 260.746715][ T8350] netlink: 'syz.1.1175': attribute type 12 has an invalid length. [ 260.748760][ T8350] netlink: 'syz.1.1175': attribute type 29 has an invalid length. [ 260.755856][ T8343] ceph: No mds server is up or the cluster is laggy [ 260.803427][ T8350] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1175'. [ 260.808627][ T8350] netlink: 'syz.1.1175': attribute type 1 has an invalid length. [ 260.844217][ T8350] netlink: 'syz.1.1175': attribute type 2 has an invalid length. [ 260.846447][ T8350] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1175'. [ 261.973005][ T8362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.077765][ T8386] netlink: 'syz.1.1187': attribute type 10 has an invalid length. [ 262.136162][ T8386] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 263.606191][ T8395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.758387][ T8416] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1190'. [ 263.792963][ T8415] device syzkaller0 entered promiscuous mode [ 266.181927][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.184680][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.860380][ T8454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.422834][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1198'. [ 275.444167][ T8438] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 276.885715][ T8484] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 276.888469][ T8484] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 277.488846][ T8509] netlink: 'syz.2.1221': attribute type 10 has an invalid length. [ 277.768153][ T8523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.335956][ T8533] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 279.558129][ T8573] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 279.810444][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1242'. [ 279.813791][ T8591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.971827][ T8591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.047285][ T8593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.200685][ T8633] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 281.584118][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 281.710041][ T8661] netlink: set zone limit has 8 unknown bytes [ 281.764275][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 281.768981][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.771648][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.788883][ T7] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.791445][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.793670][ T7] usb 1-1: Product: syz [ 281.818684][ T7] usb 1-1: Manufacturer: syz [ 281.819947][ T7] usb 1-1: SerialNumber: syz [ 282.055287][ T7] usb 1-1: 0:2 : does not exist [ 282.067288][ T7] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 282.843130][ T7] usb 1-1: USB disconnect, device number 8 [ 283.166442][ T8692] netlink: 'syz.0.1263': attribute type 10 has an invalid length. [ 283.190092][ T8672] udevd[8672]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.648478][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.826646][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 283.932392][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.941855][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.093300][ T8746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1281'. [ 285.141343][ T8757] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 285.278110][ T8765] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1284'. [ 285.287363][ T8765] ksmbd: Daemon and kernel module version mismatch. ksmbd: 3, kernel module: 1. User-space ksmbd should terminate. [ 285.766200][ T8775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.580332][ T8791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.588314][ T8791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.697681][ T8812] netlink: 'syz.0.1299': attribute type 10 has an invalid length. [ 287.841224][ T8816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.480078][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1323'. [ 289.493771][ T8854] netlink: 'syz.2.1323': attribute type 7 has an invalid length. [ 289.496143][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 289.510887][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.513319][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.519189][ T8854] device ip6gretap0 entered promiscuous mode [ 290.228848][ T8854] device syz_tun entered promiscuous mode [ 290.330974][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 290.377173][ T8866] netlink: 'syz.1.1316': attribute type 10 has an invalid length. [ 290.463570][ T8867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.720839][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.737602][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.645846][ T8908] netlink: 'syz.1.1329': attribute type 10 has an invalid length. [ 292.707831][ T8910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1332'. [ 292.710660][ T8910] netlink: 'syz.0.1332': attribute type 7 has an invalid length. [ 292.712836][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 292.809740][ T8910] device ip6gretap0 entered promiscuous mode [ 292.864934][ T8910] device syz_tun entered promiscuous mode [ 294.098612][ T8910] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 294.102161][ T8910] Cannot create hsr debugfs directory [ 294.112258][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 294.117459][ T8912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.029224][ T8960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.031729][ T8960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.035846][ T8960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.038282][ T8960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.050116][ T8958] netlink: 'syz.4.1346': attribute type 10 has an invalid length. [ 296.771549][ T27] audit: type=1326 audit(296.730:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f5b728 code=0x7ffc0000 [ 296.861850][ T27] audit: type=1326 audit(296.830:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff87f59c54 code=0x7ffc0000 [ 296.892027][ T27] audit: type=1326 audit(296.840:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f5b728 code=0x7ffc0000 [ 296.926373][ T27] audit: type=1326 audit(296.840:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff87f5b728 code=0x7ffc0000 [ 297.145091][ T27] audit: type=1326 audit(296.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff87f5b75c code=0x7ffc0000 [ 297.151358][ T27] audit: type=1326 audit(296.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff87f5b75c code=0x7ffc0000 [ 297.180240][ T8986] binder: 8985:8986 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 297.184657][ T27] audit: type=1326 audit(296.860:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f5b728 code=0x7ffc0000 [ 297.217148][ T27] audit: type=1326 audit(296.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff87f5b728 code=0x7ffc0000 [ 297.245433][ T27] audit: type=1326 audit(296.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f5b728 code=0x7ffc0000 [ 297.273610][ T27] audit: type=1326 audit(296.880:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff87f5b728 code=0x7ffc0000 [ 297.286412][ T8987] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1350'. [ 297.679040][ T9001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1355'. [ 297.688292][ T9001] netlink: 'syz.4.1355': attribute type 7 has an invalid length. [ 297.695357][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 297.746885][ T9001] device ip6gretap0 entered promiscuous mode [ 297.794728][ T9001] device syz_tun entered promiscuous mode [ 297.816815][ T9001] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 297.819996][ T9001] Cannot create hsr debugfs directory [ 297.822355][ T6824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 297.829016][ T9005] netlink: 'syz.1.1357': attribute type 10 has an invalid length. [ 297.842625][ T9008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.924137][ T4348] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 298.894511][ T4348] usb 1-1: Using ep0 maxpacket: 32 [ 298.898091][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.901095][ T4348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.903774][ T4348] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 298.913461][ T4348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.923153][ T4348] usb 1-1: config 0 descriptor?? [ 298.941061][ T9028] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 298.942945][ T9028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 298.976774][ T9028] vhci_hcd vhci_hcd.0: Device attached [ 299.108974][ T9028] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 299.119725][ T9028] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(15) [ 299.121635][ T9028] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 299.124399][ T9028] vhci_hcd vhci_hcd.0: Device attached [ 299.127533][ T9028] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(17) [ 299.129437][ T9028] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 299.132108][ T9028] vhci_hcd vhci_hcd.0: Device attached [ 299.135676][ T9028] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(19) [ 299.137539][ T9028] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 299.143576][ T9028] vhci_hcd vhci_hcd.0: Device attached [ 299.147979][ T9028] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 299.154940][ T9028] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 299.899482][ T4348] hid-generic 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 299.901629][ T4348] hid-generic 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 299.903613][ T4348] hid-generic 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 299.906536][ T9028] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 299.912781][ T4348] hid-generic 0003:1044:7A4D.0006: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 299.941973][ T9028] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(27) [ 299.943790][ T9028] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 299.946425][ T4288] usb 12-1: new low-speed USB device number 2 using vhci_hcd [ 299.950913][ T9028] vhci_hcd vhci_hcd.0: Device attached [ 299.966929][ T9047] vhci_hcd: connection closed [ 299.967176][ T9051] vhci_hcd: connection closed [ 299.976077][ T9045] vhci_hcd: connection closed [ 299.978727][ T9043] vhci_hcd: connection closed [ 299.982149][ T4390] vhci_hcd: stop threads [ 299.985931][ T4390] vhci_hcd: release socket [ 299.987698][ T4390] vhci_hcd: disconnect device [ 299.990512][ T4390] vhci_hcd: stop threads [ 300.012265][ T4390] vhci_hcd: release socket [ 300.013562][ T4390] vhci_hcd: disconnect device [ 300.017089][ T9030] vhci_hcd: connection reset by peer [ 300.019589][ T4390] vhci_hcd: stop threads [ 300.020691][ T4390] vhci_hcd: release socket [ 300.022379][ T4390] vhci_hcd: disconnect device [ 300.027885][ T4390] vhci_hcd: stop threads [ 300.029118][ T4390] vhci_hcd: release socket [ 300.030462][ T4390] vhci_hcd: disconnect device [ 300.031833][ T4390] vhci_hcd: stop threads [ 300.033129][ T4390] vhci_hcd: release socket [ 300.035618][ T4390] vhci_hcd: disconnect device [ 300.109949][ T4346] usb 1-1: USB disconnect, device number 9 [ 300.131137][ T9063] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 300.187997][ T9057] fido_id[9057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 300.733197][ T9073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1372'. [ 300.743903][ T9073] netlink: 'syz.5.1372': attribute type 7 has an invalid length. [ 300.753276][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1372'. [ 300.788950][ T9073] device ip6gretap0 entered promiscuous mode [ 300.814483][ T9073] device syz_tun entered promiscuous mode [ 300.844108][ T9073] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 300.846425][ T9073] Cannot create hsr debugfs directory [ 300.850246][ T9076] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 300.852840][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 300.868613][ T9074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.885986][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.888455][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.037715][ T9097] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1381'. [ 302.235286][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.237985][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.353454][ T9111] netlink: 'syz.5.1387': attribute type 10 has an invalid length. [ 302.427300][ T9115] device geneve2 entered promiscuous mode [ 303.390365][ T9122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.554699][ T9140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.131166][ T4288] vhci_hcd: vhci_device speed not set [ 305.663385][ T9167] netlink: 'syz.0.1404': attribute type 10 has an invalid length. [ 306.733940][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 306.765931][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 306.989951][ T9193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.870112][ T9202] netlink: 'syz.4.1419': attribute type 10 has an invalid length. [ 308.645448][ T9223] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 309.149838][ T9242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.355191][ T9245] bridge0: port 3(netdevsim0) entered blocking state [ 309.357667][ T9245] bridge0: port 3(netdevsim0) entered disabled state [ 309.372756][ T9245] device netdevsim0 entered promiscuous mode [ 309.377332][ T9245] bridge0: port 3(netdevsim0) entered blocking state [ 309.379460][ T9245] bridge0: port 3(netdevsim0) entered forwarding state [ 309.948854][ T9239] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 310.334157][ T9252] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 310.564379][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.992300][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.312651][ T9259] netlink: 'syz.5.1435': attribute type 10 has an invalid length. [ 311.853794][ T9276] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 312.621929][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.557458][ T9302] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 315.205043][ T9331] netlink: 'syz.2.1466': attribute type 10 has an invalid length. [ 316.332350][ T9344] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 316.366468][ T9341] serio: Serial port ptm0 [ 318.218367][ T9346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.637524][ T9392] netlink: 'syz.4.1474': attribute type 10 has an invalid length. [ 320.533137][ T9402] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 322.638059][ T9418] device gretap0 entered promiscuous mode [ 322.674158][ T9418] batman_adv: batadv0: Adding interface: macvlan2 [ 322.676085][ T9418] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.718657][ T9418] batman_adv: batadv0: Interface activated: macvlan2 [ 323.024838][ T9421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.122997][ T9432] netlink: 'syz.2.1488': attribute type 10 has an invalid length. [ 323.598845][ T9438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.343317][ T9468] netlink: 'syz.5.1502': attribute type 10 has an invalid length. [ 327.380716][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.383289][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.746956][ T9499] netlink: 'syz.5.1513': attribute type 10 has an invalid length. [ 329.214201][ T9504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.420786][ T9529] netlink: 'syz.5.1524': attribute type 10 has an invalid length. [ 332.466400][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1532'. [ 332.469025][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1532'. [ 332.568660][ T9556] device team0 entered promiscuous mode [ 332.571631][ T9556] device team_slave_0 entered promiscuous mode [ 332.573536][ T9556] device team_slave_1 entered promiscuous mode [ 332.614666][ T9556] device bond0 entered promiscuous mode [ 332.616330][ T9556] device bond_slave_0 entered promiscuous mode [ 332.618084][ T9556] device bond_slave_1 entered promiscuous mode [ 332.624680][ T9556] device wlan1 entered promiscuous mode [ 332.664335][ T9556] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 332.666807][ T9556] Cannot create hsr debugfs directory [ 332.674364][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 332.682019][ T9569] netlink: 'syz.5.1537': attribute type 10 has an invalid length. [ 332.687905][ T9552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.726359][ T9572] random: crng reseeded on system resumption [ 335.025019][ T9612] netlink: 'syz.2.1551': attribute type 10 has an invalid length. [ 335.189721][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.192331][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.070041][ T9625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.826398][ T9667] netlink: 'syz.4.1566': attribute type 10 has an invalid length. [ 340.547542][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1577'. [ 341.863127][ T9684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.059814][ T9725] netlink: 'syz.1.1586': attribute type 10 has an invalid length. [ 343.503454][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.777596][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.790168][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.173711][ T9775] netlink: 'syz.0.1603': attribute type 10 has an invalid length. [ 345.513110][ T9788] device netdevsim0 entered promiscuous mode [ 345.534183][ T9788] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.561934][ T9783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.595371][ T9792] tipc: Enabled bearer , priority 0 [ 345.629728][ T9792] device syzkaller0 entered promiscuous mode [ 345.631980][ T9792] tipc: Resetting bearer [ 345.658074][ T9785] tipc: Resetting bearer [ 346.522174][ T9801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.561088][ T9801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.571299][ T9841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.072620][ T9785] tipc: Disabling bearer [ 358.094665][ T9815] netlink: 'syz.0.1620': attribute type 10 has an invalid length. [ 358.100333][ T9819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1619'. [ 358.107413][ T9820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1619'. [ 358.734055][ T9865] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 358.741776][ T9865] CIFS: Unable to determine destination address [ 359.481410][ T9869] Bluetooth: MGMT ver 1.22 [ 359.517693][ T9869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.520202][ T9869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.722733][ T9876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.733785][ T9878] netlink: 'syz.1.1639': attribute type 10 has an invalid length. [ 360.870514][ T9908] netlink: 'syz.4.1652': attribute type 10 has an invalid length. [ 361.762098][ T9928] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1657'. [ 361.771304][ T9928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1657'. [ 361.918737][ T9932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.971625][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.984291][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.241445][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.281261][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.064500][ T9965] netlink: 'syz.0.1669': attribute type 10 has an invalid length. [ 363.491225][ T9973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.726446][T10029] netlink: 'syz.0.1686': attribute type 10 has an invalid length. [ 367.048419][T10033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.368436][T10056] netlink: 'syz.0.1696': attribute type 1 has an invalid length. [ 368.370591][T10056] netlink: 'syz.0.1696': attribute type 2 has an invalid length. [ 368.580777][T10068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1700'. [ 369.008782][T10076] netlink: 'syz.4.1702': attribute type 10 has an invalid length. [ 370.292400][T10100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.310518][T10115] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 371.704708][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.706747][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.884755][T10158] netlink: 'syz.5.1728': attribute type 10 has an invalid length. [ 372.969884][T10172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.972001][T10200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.989707][T10200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.037712][T10207] netlink: 'syz.2.1746': attribute type 10 has an invalid length. [ 375.139587][T10212] trusted_key: encrypted_key: insufficient parameters specified [ 376.252974][T10239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.602677][T10255] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 377.437212][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 379.316479][T10270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.335932][T10270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.508278][T10274] serio: Serial port ptm0 [ 380.622506][T10296] netlink: 'syz.5.1773': attribute type 10 has an invalid length. [ 382.026043][T10308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.054316][T10315] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 382.056044][T10315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.059143][T10315] vhci_hcd vhci_hcd.0: Device attached [ 382.062305][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.094395][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.164254][T10317] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 382.171151][ T4419] vhci_hcd: stop threads [ 382.172310][ T4419] vhci_hcd: release socket [ 382.173458][ T4419] vhci_hcd: disconnect device [ 384.328107][T10351] netlink: 'syz.0.1790': attribute type 10 has an invalid length. [ 385.126589][T10370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.485827][ T5659] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 386.719722][ T5659] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 386.723145][ T5659] usb 1-1: config 0 has no interface number 0 [ 386.776416][ T5659] usb 1-1: config 0 interface 41 has no altsetting 0 [ 386.817897][ T5659] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 386.820634][ T5659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.823029][ T5659] usb 1-1: Product: syz [ 386.825805][ T5659] usb 1-1: Manufacturer: syz [ 386.830341][ T5659] usb 1-1: SerialNumber: syz [ 386.839115][ T5659] usb 1-1: config 0 descriptor?? [ 386.875968][T10402] netlink: 'syz.4.1806': attribute type 10 has an invalid length. [ 387.628966][T10422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.741660][ T5659] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 389.165028][ T5659] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 389.168052][ T5659] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 389.170632][ T5659] CoreChips: probe of 1-1:0.41 failed with error -71 [ 389.181665][ T5659] usb 1-1: USB disconnect, device number 10 [ 389.394780][T10457] netlink: 'syz.5.1824': attribute type 10 has an invalid length. [ 390.779404][T10473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.891701][T10483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.894878][T10483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.744066][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 391.747164][T10494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.789085][T10494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.940348][T10512] netlink: 'syz.4.1842': attribute type 10 has an invalid length. [ 393.145720][T10529] netlink: 'syz.0.1855': attribute type 10 has an invalid length. [ 394.311017][T10534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.311881][T10543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.333611][T10543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.446505][T10563] netlink: 'syz.4.1859': attribute type 10 has an invalid length. [ 397.136106][T10584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.307822][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.310424][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.402191][T10603] netlink: 'syz.1.1872': attribute type 10 has an invalid length. [ 400.100938][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 400.122687][T10627] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 400.138978][T10627] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 400.655992][T10637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.736904][T10643] netlink: 'syz.2.1886': attribute type 10 has an invalid length. [ 402.250804][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.484304][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'. [ 403.643413][T10688] netlink: 'syz.4.1899': attribute type 10 has an invalid length. [ 404.508751][T10702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.107413][T10731] netlink: 'syz.4.1916': attribute type 10 has an invalid length. [ 405.685837][T10745] xt_nat: multiple ranges no longer supported [ 406.363558][T10757] bond0: (slave wlan1): Error: Slave device does not support XDP [ 406.831879][T10776] netlink: 'syz.5.1929': attribute type 10 has an invalid length. [ 406.869755][T10769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.161531][T10795] tipc: Started in network mode [ 408.162932][T10795] tipc: Node identity 4, cluster identity 4711 [ 408.168285][T10795] tipc: Node number set to 4 [ 408.171186][T10797] netlink: 'syz.5.1936': attribute type 1 has an invalid length. [ 408.197314][T10797] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1936'. [ 408.332152][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.344828][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.563374][T10811] netlink: 'syz.2.1942': attribute type 10 has an invalid length. [ 409.490850][T10816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.796111][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1946'. [ 411.541409][T10859] netlink: 'syz.4.1955': attribute type 10 has an invalid length. [ 411.816356][T10866] netlink: 'syz.2.1960': attribute type 12 has an invalid length. [ 412.765526][T10879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.966821][T10892] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1969'. [ 413.211899][T10908] netlink: 'syz.2.1973': attribute type 10 has an invalid length. [ 413.797298][T10921] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1980'. [ 413.807841][T10921] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 414.968295][T10944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.049055][T10954] netlink: 'syz.5.1992': attribute type 10 has an invalid length. [ 415.308177][T10959] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1993'. [ 415.320235][T10959] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 415.466518][T10964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.489005][T10964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.522193][T10966] device dummy0 entered promiscuous mode [ 415.523850][T10966] device vlan2 entered promiscuous mode [ 416.732718][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 417.399420][T10995] netlink: 'syz.5.2004': attribute type 10 has an invalid length. [ 417.645493][T11000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.785404][T11012] netlink: 'syz.1.2020': attribute type 10 has an invalid length. [ 417.830426][T11014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2010'. [ 417.832998][T11014] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 417.986876][T11018] device dummy0 entered promiscuous mode [ 417.988496][T11018] device vlan2 entered promiscuous mode [ 418.960808][T11051] netlink: 'syz.5.2026': attribute type 10 has an invalid length. [ 418.983445][T11050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2024'. [ 418.989794][T11050] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 419.483059][T11061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.848555][T11072] device dummy0 entered promiscuous mode [ 419.851453][T11072] device vlan2 entered promiscuous mode [ 420.186378][T11089] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 422.483522][T11121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.609451][T11128] 9pnet_fd: Insufficient options for proto=fd [ 422.760802][T11134] netlink: 'syz.4.2053': attribute type 10 has an invalid length. [ 422.800946][T11137] device dummy0 entered promiscuous mode [ 422.802683][T11137] device vlan2 entered promiscuous mode [ 422.864136][ T4421] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 423.050712][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.059225][ T4421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.071475][ T4421] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 423.091034][ T4421] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 423.114136][ T4421] usb 1-1: Manufacturer: syz [ 423.144568][ T4421] usb 1-1: config 0 descriptor?? [ 423.163819][ T4421] hub 1-1:0.0: USB hub found [ 423.351657][ T4421] hub 1-1:0.0: 1 port detected [ 424.491236][T11166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.687565][ T504] hub 1-1:0.0: activate --> -90 [ 424.769700][T11178] netlink: 'syz.2.2066': attribute type 10 has an invalid length. [ 424.897803][ T4421] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 424.901450][ T6237] usb 1-1: USB disconnect, device number 11 [ 424.906682][ T4421] usb 1-1: Failed to suspend device, error -19 [ 426.204370][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 427.028007][T11211] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 427.030787][T11211] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 427.605366][T11212] netlink: 'syz.2.2077': attribute type 10 has an invalid length. [ 427.747107][T11213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.810759][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.813209][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.154199][T11253] netlink: 'syz.0.2091': attribute type 10 has an invalid length. [ 429.233264][T11258] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2093'. [ 430.147429][T11265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.199189][T11271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.201659][T11271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.280188][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.283819][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.833447][T11284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.853159][T11299] device syzkaller0 entered promiscuous mode [ 432.436598][T11312] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 433.144630][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.146514][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.566891][T11340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.581848][T11340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.397911][T11341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.258491][T11374] netlink: 'syz.5.2126': attribute type 10 has an invalid length. [ 446.796498][T11371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.277434][T11390] tipc: New replicast peer: 255.255.255.255 [ 447.279914][T11390] tipc: Enabled bearer , priority 10 [ 447.282637][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2131'. [ 447.285224][T11390] tipc: Disabling bearer [ 449.722162][T11417] netlink: 'syz.2.2141': attribute type 10 has an invalid length. [ 451.765578][T11440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.124664][T11465] netlink: 'syz.5.2159': attribute type 10 has an invalid length. [ 456.038261][T11502] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2170'. [ 456.889872][T11516] netlink: 'syz.1.2173': attribute type 10 has an invalid length. [ 456.896644][T11505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.604067][T11545] syz.0.2179 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 461.289779][T11568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.329825][T11570] netlink: 'syz.4.2186': attribute type 10 has an invalid length. [ 463.082193][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.103418][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.138258][T11615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.208056][T11620] netlink: 'syz.5.2204': attribute type 10 has an invalid length. [ 466.973089][T11659] netlink: 'syz.4.2215': attribute type 10 has an invalid length. [ 467.063015][T11656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.635555][T11742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.655717][T11754] netlink: 'syz.2.2234': attribute type 10 has an invalid length. [ 474.264445][T11797] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 474.267117][T11797] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 475.543539][T11812] netlink: 'syz.1.2251': attribute type 10 has an invalid length. [ 475.838125][T11813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.699951][T11852] overlayfs: failed to resolve './file0': -2 [ 479.836154][T11868] netlink: 'syz.5.2267': attribute type 10 has an invalid length. [ 480.467322][T11883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.836743][T11920] netlink: 'syz.1.2282': attribute type 10 has an invalid length. [ 483.699700][T11928] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.701868][T11928] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.808872][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 483.808884][ T27] audit: type=1326 audit(2000000070.680:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 483.873466][ T27] audit: type=1326 audit(2000000070.680:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 483.896106][ T27] audit: type=1326 audit(2000000070.690:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 483.913027][ T27] audit: type=1326 audit(2000000070.690:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 483.930569][ T27] audit: type=1326 audit(2000000070.690:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 483.939057][ T27] audit: type=1326 audit(2000000070.690:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 483.949984][ T27] audit: type=1326 audit(2000000070.690:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 483.970756][ T27] audit: type=1326 audit(2000000070.690:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 483.992606][ T27] audit: type=1326 audit(2000000070.690:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 484.000394][ T27] audit: type=1326 audit(2000000070.690:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.5.2296" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 484.861048][T11959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.417366][T11928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.978886][T11928] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.981387][T11928] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.983761][T11928] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.986536][T11928] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.401905][T11973] netlink: 'syz.0.2298': attribute type 10 has an invalid length. [ 486.569569][T11998] libceph: resolve '0' (ret=-3): failed [ 487.576178][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 487.630442][T12017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.714856][T12023] netlink: 'syz.5.2315': attribute type 10 has an invalid length. [ 489.392011][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2326'. [ 490.665814][T12050] device hsr_slave_1 left promiscuous mode [ 490.705835][T12072] netlink: 'syz.2.2329': attribute type 10 has an invalid length. [ 490.819724][T12085] netlink: 'syz.4.2334': attribute type 3 has an invalid length. [ 491.413366][T12094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.960414][T12113] netlink: 'syz.2.2344': attribute type 10 has an invalid length. [ 492.752654][T12141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.616448][T12158] netlink: 'syz.2.2360': attribute type 10 has an invalid length. [ 494.584881][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.587916][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.805625][T12176] device syzkaller1 entered promiscuous mode [ 495.949053][T12185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.244590][T12190] random: crng reseeded on system resumption [ 496.384585][T12198] netlink: 'syz.1.2374': attribute type 10 has an invalid length. [ 497.782533][T12237] netlink: 'syz.1.2386': attribute type 10 has an invalid length. [ 497.972335][T12243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.238991][T12259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2394'. [ 500.170549][T12277] netlink: 'syz.0.2398': attribute type 10 has an invalid length. [ 500.836526][T12294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.840462][T12328] netlink: 'syz.4.2411': attribute type 10 has an invalid length. [ 504.062886][T12346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.090530][T12346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.119064][T12348] netlink: 'syz.1.2422': attribute type 1 has an invalid length. [ 504.266261][T12349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.097871][T12379] netlink: 'syz.1.2431': attribute type 10 has an invalid length. [ 506.421579][T12389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.263218][T12417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.376475][T12428] netlink: 'syz.2.2447': attribute type 10 has an invalid length. [ 510.526559][T12464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.559647][T12476] netlink: 'syz.5.2462': attribute type 10 has an invalid length. [ 514.335408][T12531] netlink: 'syz.4.2476': attribute type 10 has an invalid length. [ 515.217227][T12540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.228929][T12540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.654470][T12547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.055731][T12578] netlink: 'syz.2.2492': attribute type 10 has an invalid length. [ 518.335140][T12589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.606331][T12620] netlink: 'syz.1.2505': attribute type 10 has an invalid length. [ 520.634277][T12629] netlink: 'syz.1.2509': attribute type 10 has an invalid length. [ 520.641050][T12629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2509'. [ 520.669401][T12629] device geneve0 entered promiscuous mode [ 520.681807][T12629] team0: Port device geneve0 added [ 521.912149][T12650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.242692][T12671] netlink: 'syz.4.2520': attribute type 10 has an invalid length. [ 525.218220][T12687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.364901][T12708] netlink: 'syz.4.2532': attribute type 10 has an invalid length. [ 528.832994][T12753] netlink: 'syz.5.2544': attribute type 10 has an invalid length. [ 528.953760][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.183182][T12798] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2559'. [ 531.185610][T12799] netlink: 'syz.5.2558': attribute type 10 has an invalid length. [ 531.187923][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 531.403591][T12802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.488084][T12815] delete_channel: no stack [ 534.475179][T12844] netlink: 'syz.1.2570': attribute type 10 has an invalid length. [ 534.533289][T12845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.018483][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2581'. [ 536.104871][T12885] netlink: 'syz.0.2585': attribute type 10 has an invalid length. [ 537.016772][T12880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.019365][T12880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.119858][T12901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.122398][T12901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.862449][T12916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.247983][T12928] netlink: 'syz.0.2597': attribute type 10 has an invalid length. [ 538.312820][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 538.312833][ T27] audit: type=1326 audit(2000000125.180:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 538.325242][ T27] audit: type=1326 audit(2000000125.190:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 538.361301][ T27] audit: type=1326 audit(2000000125.190:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 538.375473][ T27] audit: type=1326 audit(2000000125.190:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=21 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 538.386454][ T27] audit: type=1326 audit(2000000125.220:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 538.393233][ T27] audit: type=1326 audit(2000000125.230:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4f5b728 code=0x7ffc0000 [ 540.476087][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.008495][T12980] netlink: 'syz.0.2611': attribute type 10 has an invalid length. [ 541.633937][ T4304] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 543.632522][T13029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.765591][T13047] netlink: 'syz.0.2628': attribute type 10 has an invalid length. [ 546.060964][ T51] block nbd5: Attempted send on invalid socket [ 546.062919][ T51] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.090627][ T51] block nbd5: Attempted send on invalid socket [ 546.092354][ T51] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.096223][T13075] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 546.218301][ T51] block nbd5: Attempted send on invalid socket [ 546.220132][ T51] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.228200][T13075] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 546.285506][ T51] block nbd5: Attempted send on invalid socket [ 546.287189][ T51] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.301591][ T51] block nbd5: Attempted send on invalid socket [ 546.303388][ T51] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.308363][T13075] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 546.312677][ T51] block nbd5: Attempted send on invalid socket [ 546.314959][ T51] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.337292][T13075] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 546.340620][ T78] block nbd5: Attempted send on invalid socket [ 546.342351][ T78] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.354419][ T51] block nbd5: Attempted send on invalid socket [ 546.356217][ T51] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.360153][T13075] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 546.363081][ T51] block nbd5: Attempted send on invalid socket [ 546.364902][ T51] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.367983][T13075] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 546.371213][ T51] block nbd5: Attempted send on invalid socket [ 546.372986][ T51] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.381145][T13075] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 546.385650][T13075] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 546.388307][T13075] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 547.496643][T13104] netlink: 'syz.2.2645': attribute type 10 has an invalid length. [ 547.836858][T13112] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 547.838941][T13112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 547.842353][T13112] vhci_hcd vhci_hcd.0: Device attached [ 548.248326][T13118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.451791][T13126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.465157][T13126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.649208][ T6237] usb 10-1: new high-speed USB device number 2 using vhci_hcd [ 549.529159][T13113] vhci_hcd: connection reset by peer [ 549.544541][ T7212] vhci_hcd: stop threads [ 549.545721][ T7212] vhci_hcd: release socket [ 549.547926][ T7212] vhci_hcd: disconnect device [ 550.508345][T13153] netlink: 'syz.5.2659': attribute type 1 has an invalid length. [ 550.638708][T13159] netlink: 'syz.2.2661': attribute type 10 has an invalid length. [ 551.773722][T13164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.288840][T13209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.291287][T13209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.304349][ T6237] vhci_hcd: vhci_device speed not set [ 554.750661][T13217] netlink: 'syz.1.2677': attribute type 10 has an invalid length. [ 556.024793][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.026492][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.086309][T13238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.269570][T13257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.292699][T13257] netlink: 'syz.1.2687': attribute type 1 has an invalid length. [ 557.297733][T13257] netlink: 'syz.1.2687': attribute type 2 has an invalid length. [ 558.337193][T13260] netlink: 'syz.4.2690': attribute type 10 has an invalid length. [ 559.427919][T13275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.432087][T13275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.881611][T13282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.015170][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 560.248860][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 560.252830][ T14] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 560.258699][ T14] usb 1-1: config 0 has no interface number 0 [ 560.263247][ T14] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 560.277742][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.285631][ T14] usb 1-1: Product: syz [ 560.289237][ T14] usb 1-1: Manufacturer: syz [ 560.291743][ T14] usb 1-1: SerialNumber: syz [ 560.306525][ T14] usb 1-1: config 0 descriptor?? [ 561.149763][ T14] usb 1-1: USB disconnect, device number 12 [ 561.371671][T13314] netlink: 'syz.5.2706': attribute type 10 has an invalid length. [ 562.309321][T13305] udevd[13305]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.540064][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.542564][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.573623][T13322] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 562.575463][T13322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 562.585103][T13322] vhci_hcd vhci_hcd.0: Device attached [ 562.589519][T13323] vhci_hcd: connection closed [ 562.589770][ T6818] vhci_hcd: stop threads [ 562.592245][ T6818] vhci_hcd: release socket [ 562.593465][ T6818] vhci_hcd: disconnect device [ 562.770163][ T4349] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 562.946027][ T4349] usb 1-1: Using ep0 maxpacket: 32 [ 562.948957][ T4349] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 562.951237][ T4349] usb 1-1: config 0 has no interface number 0 [ 562.959820][ T4349] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 562.972680][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.986823][ T4349] usb 1-1: Product: syz [ 562.988009][ T4349] usb 1-1: Manufacturer: syz [ 562.989239][ T4349] usb 1-1: SerialNumber: syz [ 563.020541][ T4349] usb 1-1: config 0 descriptor?? [ 563.042830][ T4349] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 564.321109][ T4349] usb 1-1: qt2_attach - failed to power on unit: -71 [ 564.323068][ T4349] quatech2: probe of 1-1:0.51 failed with error -71 [ 564.381208][ T4349] usb 1-1: USB disconnect, device number 13 [ 564.553173][T13349] netlink: 'syz.4.2717': attribute type 10 has an invalid length. [ 564.575755][T13349] team0: Device ipvlan1 failed to register rx_handler [ 565.494296][T13346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.848114][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.859644][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.982194][T13367] netlink: 'syz.0.2722': attribute type 10 has an invalid length. [ 566.538692][T13369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.695731][T13385] input: syz0 as /devices/virtual/input/input18 [ 569.205762][T13397] netlink: 'syz.5.2730': attribute type 10 has an invalid length. [ 569.245495][T13397] team0: Device ipvlan1 failed to register rx_handler [ 569.367466][T13405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.370052][T13405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.424538][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.427018][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.529591][T13406] netlink: 'syz.2.2734': attribute type 10 has an invalid length. [ 571.053523][T13440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.317406][T13449] netlink: 'syz.2.2749': attribute type 10 has an invalid length. [ 571.361430][T13449] team0: Device ipvlan1 failed to register rx_handler [ 571.423302][T13450] netlink: 'syz.1.2748': attribute type 10 has an invalid length. [ 572.569059][ T4288] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 572.607904][T13473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.611574][T13473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.935044][ T4288] usb 1-1: Using ep0 maxpacket: 16 [ 572.942496][ T4288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.946095][ T4288] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 572.955634][ T4288] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 573.094648][ T4288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.096982][ T4288] usb 1-1: Product: syz [ 573.098148][ T4288] usb 1-1: Manufacturer: syz [ 573.099431][ T4288] usb 1-1: SerialNumber: syz [ 575.342635][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.347551][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.270254][ T4288] usb 1-1: USB disconnect, device number 14 [ 578.393472][T13515] netlink: 'syz.0.2763': attribute type 10 has an invalid length. [ 578.396152][T13508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.527972][T13525] netlink: 'syz.0.2767': attribute type 10 has an invalid length. [ 578.534579][T13525] team0: Device ipvlan1 failed to register rx_handler [ 580.759394][T13547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.761909][T13547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.151646][T13541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.203376][T13561] netlink: 'syz.2.2780': attribute type 10 has an invalid length. [ 584.288970][T13599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.308345][T13606] netlink: 'syz.5.2792': attribute type 10 has an invalid length. [ 585.027209][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 585.277206][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 585.327374][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 585.356374][ T24] usb 1-1: config 0 has no interface number 0 [ 585.625571][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 585.628050][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.630199][ T24] usb 1-1: Product: syz [ 585.631230][ T24] usb 1-1: Manufacturer: syz [ 585.632526][ T24] usb 1-1: SerialNumber: syz [ 585.643185][ T24] usb 1-1: config 0 descriptor?? [ 585.731112][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 586.505408][ T24] usb 1-1: qt2_attach - failed to power on unit: -71 [ 586.507316][ T24] quatech2: probe of 1-1:0.51 failed with error -71 [ 586.511447][ T24] usb 1-1: USB disconnect, device number 15 [ 586.648122][T13643] serio: Serial port ptm1 [ 587.365496][T13646] netlink: 'syz.5.2807': attribute type 10 has an invalid length. [ 587.456247][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 587.642560][T13658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.999999][T13690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.490367][T13694] serio: Serial port ptm0 [ 589.497603][T13690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.763798][T13706] netlink: 'syz.2.2824': attribute type 10 has an invalid length. [ 591.270630][T13720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.706054][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.823068][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.007213][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.009621][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.399306][T13746] netlink: 'syz.0.2837': attribute type 10 has an invalid length. [ 592.853391][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2838'. [ 593.280552][T13754] serio: Serial port ptm1 [ 594.077830][T13765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.119275][T13765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.425109][T13784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.669201][T13791] netlink: 'syz.5.2850': attribute type 10 has an invalid length. [ 599.380902][T13831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.451930][T13841] netlink: 'syz.5.2864': attribute type 10 has an invalid length. [ 599.744360][T13851] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 599.746733][T13851] netlink: 'syz.1.2868': attribute type 2 has an invalid length. [ 599.748958][T13849] netlink: 'syz.0.2866': attribute type 39 has an invalid length. [ 599.880527][T13849] device syz_tun left promiscuous mode [ 599.956389][T12962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 599.960833][T12962] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 599.985427][T12962] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 599.990443][ T4306] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 599.992750][ T4306] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 600.011644][ T4306] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 600.021941][ T4304] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 600.024871][ T4304] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 600.040104][ T4304] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 600.048555][ T4304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 600.051173][ T4304] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 600.053453][ T4304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 601.859000][ T4298] device syz_tun left promiscuous mode [ 602.104916][ T4304] Bluetooth: hci6: command 0x0409 tx timeout [ 602.889283][T13856] chnl_net:caif_netlink_parms(): no params data found [ 603.133171][T13895] netlink: 'syz.5.2878': attribute type 10 has an invalid length. [ 603.167342][T13856] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.169491][T13856] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.178180][T13856] device bridge_slave_0 entered promiscuous mode [ 603.206546][T13856] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.211973][T13856] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.225644][T13856] device bridge_slave_1 entered promiscuous mode [ 603.301472][T13856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.329888][T13856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.418538][T13856] team0: Port device team_slave_0 added [ 603.421943][T13856] team0: Port device team_slave_1 added [ 603.456445][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2880'. [ 604.204337][ T4304] Bluetooth: hci6: command 0x041b tx timeout [ 604.574396][T13901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.580565][T13900] bond0: (slave bond_slave_0): Releasing backup interface [ 604.670741][T13856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.672638][T13856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.686481][T13856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.691031][T13856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.692956][T13856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.705011][T13856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.796272][T13856] device hsr_slave_0 entered promiscuous mode [ 604.834736][T13856] device hsr_slave_1 entered promiscuous mode [ 605.007846][T13856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.028910][T13856] Cannot create hsr debugfs directory [ 606.286811][ T4306] Bluetooth: hci6: command 0x040f tx timeout [ 606.485770][T13937] use of bytesused == 0 is deprecated and will be removed in the future, [ 606.488402][T13937] use the actual size instead. [ 607.161548][T13939] netlink: 'syz.5.2889': attribute type 10 has an invalid length. [ 607.625070][T13953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.627470][T13953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.351998][ T4304] Bluetooth: hci6: command 0x0419 tx timeout [ 609.379401][T13971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.477192][T13963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.485514][ T6973] tipc: Left network mode [ 609.489803][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'. [ 609.730778][T13988] netlink: 'syz.0.2903': attribute type 10 has an invalid length. [ 609.906323][T13856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 610.898550][ T6973] device ip6gretap0 left promiscuous mode [ 611.754770][T14003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.757304][T14003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.891961][T13856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 611.955922][T13856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 612.894186][T14004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.949241][T13856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 613.985840][T14027] netlink: 'syz.4.2914': attribute type 10 has an invalid length. [ 614.734325][T14034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.867624][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2918'. [ 614.913518][T13856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.151373][T14051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.161856][T14051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.195202][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 615.197835][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 615.203835][T13856] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.217656][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 615.220654][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 616.355848][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.357882][ T6955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.364651][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.207617][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 617.218922][T13585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 617.227579][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.229593][T13585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.308219][T14072] netlink: 'syz.1.2926': attribute type 10 has an invalid length. [ 617.321335][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 617.442663][T14078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2929'. [ 617.464993][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.466729][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.493541][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 617.496753][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 617.500029][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 617.504522][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 617.509907][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 617.515177][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 617.643127][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 617.663152][T13856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.675652][T13856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 617.982644][ T6973] IPVS: stopping backup sync thread 9276 ... [ 618.046717][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 618.071755][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 618.139127][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.808860][ T6973] bond0: (slave wlan1): Releasing backup interface [ 620.844987][T14116] netlink: 'syz.4.2939': attribute type 10 has an invalid length. [ 621.644313][T14096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.955645][ T14] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 622.027724][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.030067][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.036712][T13856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.047861][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 622.050549][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 622.134216][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 622.208026][ T14] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 622.214734][ T14] usb 1-1: config 0 has no interface number 0 [ 622.218271][ T6973] device hsr_slave_0 left promiscuous mode [ 622.239101][ T14] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 622.250605][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.257295][ T14] usb 1-1: Product: syz [ 622.261808][ T14] usb 1-1: Manufacturer: syz [ 622.267500][ T14] usb 1-1: SerialNumber: syz [ 622.287844][ T14] usb 1-1: config 0 descriptor?? [ 622.300927][ T14] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 622.340771][ T6973] device hsr_slave_1 left promiscuous mode [ 622.524178][ T6973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.527229][ T6973] device bridge_slave_1 left promiscuous mode [ 622.531227][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.904487][ T6973] device bridge_slave_0 left promiscuous mode [ 623.007858][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.198818][ T6973] team0 (unregistering): Port device team_slave_1 removed [ 626.398954][ T6973] team0 (unregistering): Port device team_slave_0 removed [ 626.596962][ T6973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.796726][ T6973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.384531][ T14] usb 1-1: qt2_attach - failed to power on unit: -110 [ 627.386508][ T14] quatech2: probe of 1-1:0.51 failed with error -110 [ 629.491196][ T6973] bond0 (unregistering): Released all slaves [ 629.711398][T13856] device veth0_vlan entered promiscuous mode [ 629.723146][ T4393] usb 1-1: USB disconnect, device number 16 [ 629.728932][T13856] device veth1_vlan entered promiscuous mode [ 629.770981][T13856] device veth0_macvtap entered promiscuous mode [ 629.791378][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 629.794704][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.806023][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 629.808735][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 629.819540][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 629.824556][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 629.831234][T13856] device veth1_macvtap entered promiscuous mode [ 629.855800][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.858764][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 629.861294][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 629.879491][T13856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.882408][T13856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.892214][T13856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.895953][T13856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.898503][T13856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.901164][T13856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.903875][T13856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.907560][T13856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.911739][T13856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.913881][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.922906][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.930765][T13856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.933568][T13856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.936572][T13856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.939390][T13856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.942173][T13856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.945263][T13856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.949266][T13856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.951443][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.956529][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.961967][T13856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.964471][T13856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.966758][T13856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.969086][T13856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.021132][ T7212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.023493][ T7212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.029938][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 630.043000][ T6818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.045428][ T6818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.049851][ T6818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.299671][T14174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.302307][T14174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.435011][ T4304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.199466][T12962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.210863][ T4309] device syz_tun left promiscuous mode [ 632.225913][T12962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.228600][T12962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.230869][T12962] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 632.232949][T12962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.376156][T14195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.370780][ T4304] Bluetooth: hci1: command 0x0409 tx timeout [ 634.508674][ T5055] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.629338][T12962] Bluetooth: hci1: command 0x041b tx timeout [ 636.839851][ T5055] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.177648][ T5055] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.194916][T14257] [ 637.195793][T14257] ============================= [ 637.197208][T14257] WARNING: suspicious RCU usage [ 637.198439][T14257] 6.1.138-syzkaller #0 Not tainted [ 637.199802][T14257] ----------------------------- [ 637.200031][T14190] chnl_net:caif_netlink_parms(): no params data found [ 637.201100][T14257] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage! [ 637.205313][T14257] [ 637.205313][T14257] other info that might help us debug this: [ 637.205313][T14257] [ 637.208041][T14257] [ 637.208041][T14257] rcu_scheduler_active = 2, debug_locks = 1 [ 637.210030][T14257] 3 locks held by syz.2.2974/14257: [ 637.211305][T14257] #0: ffff800017734bb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 637.213486][T14257] #1: ffff000100d407c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x238/0x760 [ 637.216257][T14257] #2: ffff0000e9cf0d40 (&wdev->mtx){+.+.}-{3:3}, at: nl80211_new_station+0x10ac/0x1584 [ 637.218927][T14257] [ 637.218927][T14257] stack backtrace: [ 637.220460][T14257] CPU: 1 PID: 14257 Comm: syz.2.2974 Not tainted 6.1.138-syzkaller #0 [ 637.222545][T14257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 637.225193][T14257] Call trace: [ 637.226029][T14257] dump_backtrace+0x1c8/0x1f4 [ 637.227293][T14257] show_stack+0x2c/0x3c [ 637.228434][T14257] __dump_stack+0x30/0x40 [ 637.229660][T14257] dump_stack_lvl+0xf8/0x160 [ 637.230883][T14257] dump_stack+0x1c/0x5c [ 637.231966][T14257] lockdep_rcu_suspicious+0x20c/0x3d4 [ 637.233375][T14257] sta_remove_link+0x2bc/0x3d8 [ 637.234657][T14257] sta_info_free+0x60/0x608 [ 637.235852][T14257] ieee80211_add_station+0x2fc/0x4d4 [ 637.237200][T14257] rdev_add_station+0x148/0x37c [ 637.238461][T14257] nl80211_new_station+0x116c/0x1584 [ 637.239834][T14257] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 637.241251][T14257] genl_rcv_msg+0x444/0x62c [ 637.242394][T14257] netlink_rcv_skb+0x208/0x3c4 [ 637.243608][T14257] genl_rcv+0x38/0x50 [ 637.244664][T14257] netlink_unicast+0x600/0x818 [ 637.245907][T14257] netlink_sendmsg+0x6e8/0x9b0 [ 637.247161][T14257] ____sys_sendmsg+0x5b8/0x918 [ 637.248483][T14257] __sys_sendmsg+0x25c/0x320 [ 637.249688][T14257] __arm64_sys_sendmsg+0x80/0x94 [ 637.251001][T14257] invoke_syscall+0x98/0x2bc [ 637.252212][T14257] el0_svc_common+0x138/0x258 [ 637.253390][T14257] do_el0_svc+0x58/0x13c [ 637.254504][T14257] el0_svc+0x58/0x138 [ 637.255597][T14257] el0t_64_sync_handler+0x84/0xf0 [ 637.256963][T14257] el0t_64_sync+0x18c/0x190 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 637.322083][T14249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.408698][T12967] device syz_tun left promiscuous mode [ 637.629761][ T5055] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.356880][ T5055] device ip6gretap0 left promiscuous mode [ 639.796300][ T5055] bond0: (slave wlan1): Releasing backup interface [ 640.227842][ T5055] device hsr_slave_0 left promiscuous mode [ 640.264451][ T5055] device hsr_slave_1 left promiscuous mode [ 640.345401][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.347605][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.355129][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.357107][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.362574][ T5055] device bridge_slave_1 left promiscuous mode [ 640.367956][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.416575][ T5055] device bridge_slave_0 left promiscuous mode [ 640.418434][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.774578][ T5055] device veth1_macvtap left promiscuous mode [ 640.776689][ T5055] device veth0_macvtap left promiscuous mode [ 640.778467][ T5055] device veth1_vlan left promiscuous mode [ 640.780271][ T5055] device veth0_vlan left promiscuous mode [ 643.117409][ T5055] team0 (unregistering): Port device team_slave_1 removed [ 643.277830][ T5055] team0 (unregistering): Port device team_slave_0 removed [ 643.454880][ T5055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.695489][ T5055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.327518][ T5055] bond0 (unregistering): Released all slaves