last executing test programs: 5.681305436s ago: executing program 0 (id=2211): unshare(0x2c060000) unshare(0x2030780) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r2, 0x9503) listen(r2, 0x100) socket$unix(0x1, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf252100000024002d80080002000300000008000300070000000500010005000000050004000100000008000300", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4000c04}, 0x200488d4) 4.479673315s ago: executing program 0 (id=2216): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000001) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) 4.251357793s ago: executing program 0 (id=2219): syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902860003010140750904000000010100000a24010600080201020904010000010200000904010101010200000b2402010c038f076d15630a24020198010f07347c0924020208000180020924020109010809590905010940020610050725010001070009040200000102000009040201010141d9420a058209"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xcb, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x10, 0x3, 0x7}}}}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.97307188s ago: executing program 1 (id=2225): syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x82002) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x400}, 0x18) mount$bpf(0x0, 0x0, 0x0, 0x120c060, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000380)=0x10) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) 3.0690691s ago: executing program 1 (id=2229): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000001) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) 3.038904896s ago: executing program 1 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000d2e5bf308000300", @ANYRES32=0x0, @ANYBLOB="4800128009000100626f6e64"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.967721828s ago: executing program 1 (id=2232): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) getpeername$packet(r0, 0x0, 0x0) 2.76264488s ago: executing program 0 (id=2236): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.039633444s ago: executing program 2 (id=2237): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf252100000024002d80080002000300000008000300070000000500010005000000050004000100000008000300", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4000c04}, 0x200488d4) 1.9674084s ago: executing program 0 (id=2239): syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x82002) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x400}, 0x18) mount$bpf(0x0, 0x0, 0x0, 0x120c060, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000380)=0x10) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x800, 0x0, 0x2, 0x0, 0x8, 0x8}, 0x20) 1.910100844s ago: executing program 2 (id=2242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r1, 0xe096044a3fc9e6f1, 0x3, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 1.073441236s ago: executing program 2 (id=2243): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0x64010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f00006dbffc)=0xffe, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r3}, 0x18) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000001640)={0xffffffffffffffff, 0x9, 0xd, 0x3, 0x200, 0x7, 0x800000000000008, 0xfffffffffffffffa}, &(0x7f00000002c0)={0x95f9, 0x2, 0x7, 0x4, 0xf43, 0xf9, 0xffc, 0x381d9307}, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38303231310062d6a5b6307000e8fc08fb8d723f2d3ea8b6db8f92853611293ee85d3c14ef875060ece03cf95ff55b98800f89184a2194ab43649e8b38c788b1cfece5d27318f3baf2352c6c0377f199264b10e5eb8407e718b36b3f878e900cbbcbba1a5c3afbd6d55c93ca07e3bca01521de4cfccd50803c917d8c37c38f8e35d91157f07fee00e2d1fac41f2cd000737c54d9c6930bc1fad96b801116728e60cf057d19d91a013f63819ca288e31b5bbeb587cbc0282e3a5779d3237791eb081e5c4542e23007e721753a292df4629ea41c08f6"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000001a40)=""/156, 0x9c}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}, 0x10000000}], 0x1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002200)=""/4094, 0xffe}, {&(0x7f00000016c0)=""/231, 0xe7}, {&(0x7f00000017c0)=""/189, 0xbd}, {&(0x7f0000001880)=""/179, 0xb3}], 0x4}, 0x40) 1.071930297s ago: executing program 0 (id=2246): syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902860003010140750904000000010100000a24010600080201020904010000010200000904010101010200000b2402010c038f076d15630a24020198010f07347c0924020208000180020924020109010809590905010940020610050725010001070009040200000102000009040201010141d9420a058209"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xcb, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x10, 0x3, 0x7}}}}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 955.174615ms ago: executing program 1 (id=2249): socket(0x80000000000000a, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 613.31594ms ago: executing program 3 (id=2255): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x174, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x5, 0x5, 0xc72, 0x1, 0x1, 0xffd0, 0x2ff]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x7fff, 0x0, 0x3, 0x9, 0xcd8, 0x4]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x81, 0xc, 0x5, 0x3ff, 0x3, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x5}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x3}, {0x6, 0x8}, {0x3, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x4}, {0x4, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x5}, {0x3}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0xa}, {}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x7}, {0x7, 0x8}, {0x6, 0x6}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x3, 0x6c, 0xc, 0x3, 0x1b, 0x24, 0x36, 0x12, 0x55, 0x7d, 0x12, 0x16, 0x6, 0x36, 0x5, 0x18, 0x48, 0x18, 0x3, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40, 0x5, 0x8000, 0x5, 0x2, 0x0, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x6c, 0x1b, 0x30, 0xb, 0x60, 0xb, 0x24, 0x9, 0x6c, 0x3, 0x6c, 0x1b, 0x3, 0x3, 0x1, 0xc, 0x36, 0x60, 0x1, 0x30]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x7}, {0x0, 0xa}, {0x4}, {0x4, 0x7}, {0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x2}, {0x5, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x5, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x6}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0x1}, {0x6, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x5, 0x8}, {0x2, 0x4}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x96c, 0x7, 0x5, 0x1ff, 0x400, 0x7, 0x59]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0xc0}, 0x81) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 519.620598ms ago: executing program 3 (id=2257): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) close(r6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 501.273183ms ago: executing program 3 (id=2258): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 432.754806ms ago: executing program 4 (id=2261): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 431.547423ms ago: executing program 3 (id=2262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff0200"], 0xffe) 404.686316ms ago: executing program 4 (id=2263): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000040)=0x2000001) 377.008482ms ago: executing program 4 (id=2264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf252100000024002d80080002000300000008000300070000000500010005000000050004000100000008000300", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4000c04}, 0x200488d4) 346.808855ms ago: executing program 4 (id=2265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtclass={0x64, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xf, 0xb}, {0x1, 0xb}}, [@c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xd}}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x275461a364d8dd42}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x4}}]}}, @c_cbq={{0x8}, {0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000840}, 0x880) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x62}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}]}, 0x2c}}, 0x40) 226.537202ms ago: executing program 4 (id=2266): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) bind$ax25(r0, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x24, 0x22, 0x9, 0x0, 0x0, {0x1}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xb3bc}]}]}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r2, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 225.340649ms ago: executing program 3 (id=2267): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 146.243187ms ago: executing program 2 (id=2268): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r0, 0x0, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) 131.850117ms ago: executing program 3 (id=2269): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 109.972314ms ago: executing program 2 (id=2270): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}}, 0x1c}}, 0x4040814) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x0) 39.373754ms ago: executing program 2 (id=2271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x8000) 39.157835ms ago: executing program 1 (id=2272): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="0b2bfdf155af08cf46", 0x9}], 0x1}}], 0x1, 0x20040004) 0s ago: executing program 4 (id=2273): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x81}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x43}]}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xd, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[r0, r0, 0x1], &(0x7f0000000400)=[{0x5, 0x1, 0x9, 0x1}, {0x5, 0x1, 0x6}, {0x5, 0x3, 0xa}, {0x0, 0x1, 0xa, 0x9}, {0x4, 0x2, 0x3, 0xc}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000480)='mm_compaction_begin\x00', r1}, 0x18) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fcffffff0000000000000000950000000000003400"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x34}, 0x90) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001180)='pimreg\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000005080)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xffffbff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) r5 = socket(0x10, 0x3, 0xc) write(r5, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) kernel console output (not intermixed with test programs): osed [ 66.948764][ T7072] vhci_hcd: connection closed [ 66.952047][ T670] vhci_hcd: stop threads [ 66.952105][ T670] vhci_hcd: release socket [ 66.952149][ T670] vhci_hcd: disconnect device [ 66.952352][ T670] vhci_hcd: stop threads [ 66.952371][ T670] vhci_hcd: release socket [ 66.952397][ T670] vhci_hcd: disconnect device [ 66.952801][ T670] vhci_hcd: stop threads [ 66.952825][ T670] vhci_hcd: release socket [ 66.952851][ T670] vhci_hcd: disconnect device [ 66.959820][ T670] vhci_hcd: stop threads [ 66.959846][ T670] vhci_hcd: release socket [ 66.959886][ T670] vhci_hcd: disconnect device [ 66.969582][ T11] usb 6-1: new full-speed USB device number 2 using vhci_hcd [ 66.969663][ T11] usb 6-1: enqueue for inactive port 0 [ 67.035432][ T11] vhci_hcd: vhci_device speed not set [ 67.184242][ T7105] binder: 7104:7105 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 67.184742][ T7105] binder: 7104:7105 BC_FREE_BUFFER no match for buffer at offset 0 [ 68.284384][ T7125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.284701][ T7125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.906068][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 69.258615][ T7141] binder: 7138:7141 ioctl c00c620f 0 returned -14 [ 69.278538][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'. [ 69.549897][ T7154] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 69.549940][ T7154] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.550585][ T7154] vhci_hcd vhci_hcd.0: Device attached [ 69.561668][ T7154] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 69.561707][ T7154] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 69.561798][ T7154] vhci_hcd vhci_hcd.0: Device attached [ 69.562535][ T7154] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.572458][ T7154] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 69.572491][ T7154] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.572570][ T7154] vhci_hcd vhci_hcd.0: Device attached [ 69.588477][ T7154] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 69.588515][ T7154] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 69.588602][ T7154] vhci_hcd vhci_hcd.0: Device attached [ 69.615390][ T7154] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 69.615431][ T7154] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 69.615521][ T7154] vhci_hcd vhci_hcd.0: Device attached [ 69.616391][ T7154] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.616954][ T7154] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.633381][ T9] cfg80211: failed to load regulatory.db [ 69.636728][ T7154] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 69.661371][ T7154] vhci_hcd vhci_hcd.0: port 0 already used [ 69.696965][ T7164] vhci_hcd: connection closed [ 69.698034][ T7155] vhci_hcd: connection closed [ 69.699850][ T6810] vhci_hcd: stop threads [ 69.703678][ T7157] vhci_hcd: connection closed [ 69.703901][ T7161] vhci_hcd: connection closed [ 69.704215][ T7159] vhci_hcd: connection closed [ 69.706685][ T6810] vhci_hcd: release socket [ 69.706728][ T6810] vhci_hcd: disconnect device [ 69.708074][ T6810] vhci_hcd: stop threads [ 69.708100][ T6810] vhci_hcd: release socket [ 69.708144][ T6810] vhci_hcd: disconnect device [ 69.718757][ T6810] vhci_hcd: stop threads [ 69.718813][ T6810] vhci_hcd: release socket [ 69.718859][ T6810] vhci_hcd: disconnect device [ 69.731042][ T6810] vhci_hcd: stop threads [ 69.731104][ T6810] vhci_hcd: release socket [ 69.731150][ T6810] vhci_hcd: disconnect device [ 69.735450][ T6810] vhci_hcd: stop threads [ 69.735483][ T6810] vhci_hcd: release socket [ 69.735527][ T6810] vhci_hcd: disconnect device [ 70.426300][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 70.796109][ T7189] binder: 7187:7189 ioctl c00c620f 0 returned -14 [ 70.796507][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.176'. [ 71.165422][ T7202] loop2: detected capacity change from 0 to 512 [ 71.229083][ T7202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.522361][ T7184] loop3: detected capacity change from 0 to 32768 [ 71.537742][ T7184] (syz.3.175,7184,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 71.542044][ T7184] (syz.3.175,7184,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 71.601381][ T7184] JBD2: Ignoring recovery information on journal [ 71.663955][ T7184] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 71.693684][ T7184] (syz.3.175,7184,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xe37077ba. Applying ECC. [ 71.693765][ T7184] (syz.3.175,7184,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0xe37077ba [ 71.693817][ T7184] (syz.3.175,7184,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 71.693851][ T7184] (syz.3.175,7184,1):ocfs2_quota_read:201 ERROR: status = -5 [ 71.693886][ T7184] Quota error (device loop3): find_block_dqentry: Can't read quota tree block 6 [ 71.693955][ T7184] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 71.693989][ T7184] (syz.3.175,7184,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 71.694107][ T7184] (syz.3.175,7184,1):ocfs2_mknod:314 ERROR: status = -5 [ 71.694150][ T7184] (syz.3.175,7184,1):ocfs2_mknod:502 ERROR: status = -5 [ 71.694193][ T7184] (syz.3.175,7184,1):ocfs2_mkdir:658 ERROR: status = -5 [ 72.337361][ T6597] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.446710][ T6525] ocfs2: Unmounting device (7,3) on (node local) [ 72.485452][ T6597] usb 1-1: Using ep0 maxpacket: 32 [ 72.499509][ T6597] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 72.513408][ T6597] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 72.513474][ T6597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.513516][ T6597] usb 1-1: Product: syz [ 72.513543][ T6597] usb 1-1: Manufacturer: syz [ 72.513569][ T6597] usb 1-1: SerialNumber: syz [ 72.535001][ T7210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.023817][ T7235] loop4: detected capacity change from 0 to 2048 [ 73.024638][ T7235] udf: Unknown parameter 'undelete`E:' [ 73.578827][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 73.588532][ T6094] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 73.767052][ T6597] usb 1-1: USB disconnect, device number 3 [ 74.113894][ T7244] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 74.114011][ T7244] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 74.361581][ T7246] lo speed is unknown, defaulting to 1000 [ 75.002576][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.159518][ T7226] loop1: detected capacity change from 0 to 40427 [ 75.201296][ T7226] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 75.203952][ T7226] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 75.212598][ T7226] F2FS-fs (loop1): invalid crc value [ 75.922072][ T7226] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 75.922311][ T7226] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.762121][ T7256] loop0: detected capacity change from 0 to 32768 [ 77.826280][ T7256] (syz.0.200,7256,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 77.830325][ T7256] (syz.0.200,7256,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.133454][ T7288] loop3: detected capacity change from 0 to 2048 [ 78.140535][ T7288] udf: Unknown parameter 'undelete`E:' [ 78.539221][ T7256] JBD2: Ignoring recovery information on journal [ 78.620892][ T7284] loop2: detected capacity change from 0 to 512 [ 78.680967][ T7256] JBD2: journal reset failed [ 78.683092][ T7256] (syz.0.200,7256,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 78.686295][ T7256] (syz.0.200,7256,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 78.704483][ T7284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.712667][ T7300] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 78.712790][ T7300] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 80.475039][ T7316] loop0: detected capacity change from 0 to 40427 [ 80.488809][ T7316] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 80.488865][ T7316] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.505827][ T7316] F2FS-fs (loop0): invalid crc value [ 80.760035][ T7316] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 80.762207][ T7316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.667396][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.678288][ T7333] binder: tried to use weak ref as strong ref [ 81.678349][ T7333] binder: 7332:7333 Acquire 1 refcount change on invalid ref 0 ret -22 [ 81.679133][ T7333] binder: 7332:7333 got transaction to invalid handle, 1 [ 81.679178][ T7333] binder: 7333:7332 cannot find target node [ 81.679209][ T7333] binder: 7332:7333 transaction async to 0:0 failed 10/29201/-22, code 0 size 104-24 line 3152 [ 81.688724][ T6597] binder: undelivered TRANSACTION_ERROR: 29201 [ 82.349770][ T7342] loop3: detected capacity change from 0 to 2048 [ 82.355761][ T7342] udf: Unknown parameter 'undelete`E:' [ 83.599461][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.599772][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.755617][ T7341] loop4: detected capacity change from 0 to 32768 [ 83.773424][ T7341] (syz.4.221,7341,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.778286][ T7341] (syz.4.221,7341,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.805419][ T7341] JBD2: Ignoring recovery information on journal [ 83.896078][ T7370] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 83.953012][ T7341] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 84.723885][ T7377] siw: device registration error -23 [ 84.963621][ T6529] ocfs2: Unmounting device (7,4) on (node local) [ 84.998387][ T7380] loop0: detected capacity change from 0 to 512 [ 85.053580][ T7380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.517412][ T7373] loop2: detected capacity change from 0 to 40427 [ 85.633297][ T7373] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 85.633365][ T7373] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 85.655546][ T7373] F2FS-fs (loop2): invalid crc value [ 85.773108][ T7373] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.773193][ T7373] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.975996][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.976692][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.333991][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.341045][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.243342][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.293202][ T7407] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.293274][ T7407] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.293306][ T7407] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.293335][ T7407] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.377092][ T7436] binder: 7435:7436 ioctl c00c620f 0 returned -14 [ 87.377460][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 87.798588][ T7458] loop4: detected capacity change from 0 to 512 [ 88.483376][ T7458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.547134][ T7466] binder: 7464:7466 ioctl c00c620f 0 returned -14 [ 88.550286][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'. [ 88.860862][ T7478] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 88.860982][ T7478] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 89.539397][ T7498] binder: 7497:7498 ioctl c00c620f 0 returned -14 [ 89.544841][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 90.619395][ T7510] loop3: detected capacity change from 0 to 32768 [ 90.620047][ T7510] XFS: attr2 mount option is deprecated. [ 90.644869][ T7510] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 90.755618][ T7510] XFS (loop3): Ending clean mount [ 90.760364][ T7510] XFS (loop3): Quotacheck needed: Please wait. [ 90.806668][ T7510] XFS (loop3): Quotacheck: Done. [ 92.879554][ T7536] loop1: detected capacity change from 0 to 2048 [ 92.880952][ T7536] udf: Unknown parameter 'undelete`E:' [ 92.945980][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 92.997397][ T6525] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 93.513923][ T7540] binder: 7539:7540 ioctl c00c620f 0 returned -14 [ 93.514325][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.284'. [ 93.779132][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 94.730498][ T7553] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 94.730562][ T7553] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 94.868292][ T7556] process 'syz.2.289' launched './file1' with NULL argv: empty string added [ 94.880687][ T6529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.677006][ T7576] binder: BINDER_SET_CONTEXT_MGR already set [ 95.679989][ T7576] binder: 7575:7576 ioctl 4018620d 20000040 returned -16 [ 95.684389][ T7576] binder: 7575:7576 got transaction to invalid handle, 1 [ 95.687884][ T7576] binder: 7576:7575 cannot find target node [ 95.690941][ T7576] binder: 7575:7576 transaction async to 0:0 failed 13/29201/-22, code 0 size 104-24 line 3152 [ 95.699733][ T1790] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.928179][ T7556] capability: warning: `syz.2.289' uses deprecated v2 capabilities in a way that may be insecure [ 96.307374][ T7593] loop1: detected capacity change from 0 to 512 [ 96.342842][ T7593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.755381][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 96.827996][ T6094] Bluetooth: Unexpected continuation frame (len 16) [ 97.772805][ T7615] lo speed is unknown, defaulting to 1000 [ 98.562113][ T7620] binder: BINDER_SET_CONTEXT_MGR already set [ 98.565796][ T7620] binder: 7619:7620 ioctl 4018620d 20000040 returned -16 [ 98.566327][ T7620] binder: 7619:7620 got transaction to invalid handle, 1 [ 98.566362][ T7620] binder: 7620:7619 cannot find target node [ 98.566386][ T7620] binder: 7619:7620 transaction async to 0:0 failed 16/29201/-22, code 0 size 104-24 line 3152 [ 98.574649][ T11] binder: undelivered TRANSACTION_ERROR: 29201 [ 98.777549][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.392509][ T7638] loop4: detected capacity change from 0 to 2048 [ 99.393974][ T7638] udf: Unknown parameter 'undelete`E:' [ 99.400690][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 100.210561][ T6526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.945346][ T7660] lo speed is unknown, defaulting to 1000 [ 102.066598][ T7667] netlink: 'syz.1.322': attribute type 7 has an invalid length. [ 102.248488][ T7680] loop4: detected capacity change from 0 to 512 [ 102.953718][ T7680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.068913][ T6643] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.946644][ T6643] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 103.946709][ T6643] usb 1-1: config 0 has no interface number 0 [ 103.946766][ T6643] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 103.946801][ T6643] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 103.948890][ T6643] usb 1-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 103.948927][ T6643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.948951][ T6643] usb 1-1: Product: syz [ 103.948972][ T6643] usb 1-1: Manufacturer: syz [ 103.948993][ T6643] usb 1-1: SerialNumber: syz [ 103.951255][ T6643] usb 1-1: config 0 descriptor?? [ 104.078637][ T7693] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 104.078680][ T7693] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 104.080657][ T7693] vhci_hcd vhci_hcd.0: Device attached [ 104.089646][ T7693] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 104.089685][ T7693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.089769][ T7693] vhci_hcd vhci_hcd.0: Device attached [ 104.090631][ T7693] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.102411][ T7693] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 104.102447][ T7693] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.102529][ T7693] vhci_hcd vhci_hcd.0: Device attached [ 104.111865][ T7693] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(20) [ 104.111902][ T7693] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.111984][ T7693] vhci_hcd vhci_hcd.0: Device attached [ 104.129484][ T7693] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 104.129521][ T7693] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 104.129698][ T7693] vhci_hcd vhci_hcd.0: Device attached [ 104.130692][ T7693] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.145740][ T7693] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.146641][ T7693] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.168623][ T7693] vhci_hcd vhci_hcd.0: port 0 already used [ 104.179928][ T7705] vhci_hcd: connection closed [ 104.185470][ T41] vhci_hcd: stop threads [ 104.185537][ T41] vhci_hcd: release socket [ 104.185572][ T41] vhci_hcd: disconnect device [ 104.185647][ T7702] vhci_hcd: connection closed [ 104.186386][ T41] vhci_hcd: stop threads [ 104.186447][ T41] vhci_hcd: release socket [ 104.186475][ T41] vhci_hcd: disconnect device [ 104.190141][ T7700] vhci_hcd: connection closed [ 104.190379][ T7698] vhci_hcd: connection closed [ 104.196049][ T7696] vhci_hcd: connection closed [ 104.200237][ T41] vhci_hcd: stop threads [ 104.200302][ T41] vhci_hcd: release socket [ 104.200412][ T41] vhci_hcd: disconnect device [ 104.205992][ T41] vhci_hcd: stop threads [ 104.206057][ T41] vhci_hcd: release socket [ 104.206099][ T41] vhci_hcd: disconnect device [ 104.206302][ T6643] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 104.210470][ T41] vhci_hcd: stop threads [ 104.210498][ T41] vhci_hcd: release socket [ 104.210542][ T41] vhci_hcd: disconnect device [ 104.212978][ T6643] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.220600][ T6643] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 104.220755][ T6643] usb 1-1: media controller created [ 104.250244][ T6643] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.267977][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.275533][ T6597] vhci_hcd: vhci_device speed not set [ 104.353011][ T6643] DVB: Unable to find symbol dib7000p_attach() [ 104.353076][ T6643] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 104.353930][ T6643] Registered IR keymap rc-dib0700-rc5 [ 104.409187][ T6643] dib0700: ir protocol setup failed [ 104.409394][ T6643] dvb-usb: could not initialize remote control. [ 104.409415][ T6643] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 104.413985][ T6643] usb 1-1: USB disconnect, device number 4 [ 104.485706][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 104.835537][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.862797][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.915819][ T6643] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 105.479685][ T7695] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.479760][ T7695] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.479790][ T7695] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.479819][ T7695] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.499448][ T6529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.818449][ T7744] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 105.819248][ T7744] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 106.791047][ T7759] loop4: detected capacity change from 0 to 32768 [ 106.791726][ T7759] XFS: attr2 mount option is deprecated. [ 106.845130][ T7771] loop3: detected capacity change from 0 to 512 [ 106.946323][ T7771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.975807][ T7759] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.124181][ T7759] XFS (loop4): Ending clean mount [ 107.129291][ T7759] XFS (loop4): Quotacheck needed: Please wait. [ 107.153747][ T7759] XFS (loop4): Quotacheck: Done. [ 107.353599][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 107.969728][ T6529] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.144799][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.150895][ T7812] bond0: (slave rose0): Enslaving as an active interface with an up link [ 109.219794][ T7820] binder: BINDER_SET_CONTEXT_MGR already set [ 109.221680][ T7820] binder: 7819:7820 ioctl 4018620d 20000040 returned -16 [ 109.226775][ T7820] binder: 7819:7820 got transaction to invalid handle, 1 [ 109.228979][ T7820] binder: 7820:7819 cannot find target node [ 109.230677][ T7820] binder: 7819:7820 transaction async to 0:0 failed 18/29201/-22, code 0 size 104-24 line 3152 [ 109.235378][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 109.674402][ T7841] netlink: 84 bytes leftover after parsing attributes in process `syz.2.366'. [ 110.734180][ T7861] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 110.772742][ T7864] binder: BINDER_SET_CONTEXT_MGR already set [ 110.772802][ T7864] binder: 7862:7864 ioctl 4018620d 20000040 returned -16 [ 110.784477][ T7864] binder: 7862:7864 got transaction to invalid handle, 1 [ 110.784541][ T7864] binder: 7864:7862 cannot find target node [ 110.784565][ T7864] binder: 7862:7864 transaction async to 0:0 failed 20/29201/-22, code 0 size 104-24 line 3152 [ 110.785493][ T6589] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.069453][ T6525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.195383][ T6598] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 111.392277][ T6598] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.448553][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 111.455602][ T6598] usb 1-1: not running at top speed; connect to a high speed hub [ 111.459445][ T6598] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 111.459512][ T6598] usb 1-1: config 1 interface 0 has no altsetting 0 [ 111.465993][ T6598] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 111.466048][ T6598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.466091][ T6598] usb 1-1: Product: syz [ 111.466119][ T6598] usb 1-1: Manufacturer: syz [ 111.466145][ T6598] usb 1-1: SerialNumber: syz [ 111.481019][ T7878] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.768055][ T6598] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 111.788119][ T6598] usb 1-1: USB disconnect, device number 5 [ 113.584647][ T7936] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 113.669712][ T7940] loop4: detected capacity change from 0 to 512 [ 113.705960][ T7940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.372795][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 115.075045][ T6598] Process accounting resumed [ 115.891668][ T7972] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 117.210017][ T6529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.340226][ T6597] Process accounting resumed [ 118.742615][ T8015] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 119.973290][ T8037] loop3: detected capacity change from 0 to 512 [ 120.052851][ T8037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.350975][ T7711] Process accounting resumed [ 120.358972][ T8052] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 122.173479][ T8071] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 122.181484][ T8071] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 122.613934][ T6525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.189744][ T8102] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 125.458354][ T8129] loop0: detected capacity change from 0 to 512 [ 125.493458][ T8129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.966326][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.979710][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 125.983039][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.502619][ T8162] siw: device registration error -23 [ 128.143972][ T8164] @: renamed from vlan0 [ 128.962918][ T6534] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.149343][ T8177] "syz.4.459" (8177) uses obsolete ecb(arc4) skcipher [ 129.267867][ T8174] siw: device registration error -23 [ 129.403378][ T8190] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 129.403443][ T8190] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 129.403485][ T8190] netlink: 'syz.0.464': attribute type 2 has an invalid length. [ 129.403512][ T8190] netlink: 'syz.0.464': attribute type 2 has an invalid length. [ 129.403539][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 129.557837][ T8198] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 129.557882][ T8198] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 129.563366][ T8198] vhci_hcd vhci_hcd.0: Device attached [ 129.570957][ T8198] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 129.570996][ T8198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.575147][ T8198] vhci_hcd vhci_hcd.0: Device attached [ 129.579912][ T8198] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.598785][ T8198] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 129.598822][ T8198] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.603079][ T8198] vhci_hcd vhci_hcd.0: Device attached [ 129.658021][ T8208] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(23) [ 129.658065][ T8208] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 129.663879][ T8208] vhci_hcd vhci_hcd.0: Device attached [ 129.667105][ T8208] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.670394][ T8208] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.674667][ T8208] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.679979][ T8208] vhci_hcd vhci_hcd.0: port 0 already used [ 129.746007][ T7707] vhci_hcd: vhci_device speed not set [ 129.760304][ T8198] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 129.760341][ T8198] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.760429][ T8198] vhci_hcd vhci_hcd.0: Device attached [ 129.783269][ T8200] vhci_hcd: connection closed [ 129.783517][ T8203] vhci_hcd: connection closed [ 129.785641][ T8205] vhci_hcd: connection closed [ 129.788192][ T8209] vhci_hcd: connection closed [ 129.792101][ T647] vhci_hcd: stop threads [ 129.792175][ T647] vhci_hcd: release socket [ 129.792239][ T647] vhci_hcd: disconnect device [ 129.805597][ T7707] usb 4-1: new full-speed USB device number 2 using vhci_hcd [ 129.805670][ T7707] usb 4-1: enqueue for inactive port 0 [ 129.810076][ T647] vhci_hcd: stop threads [ 129.810130][ T647] vhci_hcd: release socket [ 129.810200][ T647] vhci_hcd: disconnect device [ 129.816519][ T647] vhci_hcd: stop threads [ 129.816569][ T647] vhci_hcd: release socket [ 129.816628][ T647] vhci_hcd: disconnect device [ 129.821964][ T647] vhci_hcd: stop threads [ 129.822012][ T647] vhci_hcd: release socket [ 129.822072][ T647] vhci_hcd: disconnect device [ 129.835614][ T8207] vhci_hcd: connection closed [ 129.839053][ T12] vhci_hcd: stop threads [ 129.839123][ T12] vhci_hcd: release socket [ 129.844057][ T12] vhci_hcd: disconnect device [ 129.876528][ T7707] vhci_hcd: vhci_device speed not set [ 130.018238][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 131.166422][ T7711] usb usb5-port1: attempt power cycle [ 131.656037][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.656320][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.869153][ T7711] usb usb5-port1: unable to enumerate USB device [ 132.495816][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.502420][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.721840][ T8254] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.725646][ T8254] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.729072][ T8254] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.732902][ T8254] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.137024][ T8268] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 133.137085][ T8268] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 133.428630][ T8279] siw: device registration error -23 [ 134.527437][ T8308] netlink: 'syz.3.499': attribute type 10 has an invalid length. [ 134.527499][ T8308] hsr0: entered promiscuous mode [ 134.527977][ T8308] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 134.528605][ T8308] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 134.534529][ T8308] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 135.130194][ T8316] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 135.130260][ T8316] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 135.140853][ T8315] syz.4.502 uses obsolete (PF_INET,SOCK_PACKET) [ 137.104261][ T8342] siw: device registration error -23 [ 137.838332][ T8351] fuse: Bad value for 'fd' [ 138.638431][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'. [ 138.738300][ T8362] fuse: Bad value for 'group_id' [ 138.738373][ T8362] fuse: Bad value for 'group_id' [ 138.744939][ T26] Process accounting resumed [ 139.447192][ T8382] fuse: Bad value for 'fd' [ 139.598238][ T8390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 139.710527][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 142.482709][ T8416] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 142.482774][ T8416] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 142.547875][ T8423] fuse: Bad value for 'fd' [ 142.579336][ T8425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 142.932208][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 143.526925][ T8443] siw: device registration error -23 [ 145.135458][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 145.369762][ T8473] loop1: detected capacity change from 0 to 32768 [ 145.370441][ T8473] XFS: attr2 mount option is deprecated. [ 145.425855][ T8473] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.637792][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 145.977147][ T8473] XFS (loop1): Ending clean mount [ 145.979880][ T8473] XFS (loop1): Quotacheck needed: Please wait. [ 146.023367][ T8473] XFS (loop1): Quotacheck: Done. [ 146.796773][ T6526] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.027625][ T8515] loop1: detected capacity change from 0 to 2048 [ 148.028316][ T8515] udf: Unknown parameter 'undelete`E:' [ 148.033921][ T8515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.564'. [ 148.901176][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.568'. [ 149.490623][ T8532] binder: BINDER_SET_CONTEXT_MGR already set [ 149.492693][ T8532] binder: 8530:8532 ioctl 4018620d 20000040 returned -16 [ 149.510963][ T8532] binder: 8530:8532 got transaction to invalid handle, 1 [ 149.514001][ T8532] binder: 8532:8530 cannot find target node [ 149.519844][ T8532] binder: 8530:8532 transaction async to 0:0 failed 22/29201/-22, code 0 size 104-24 line 3152 [ 149.555424][ T7711] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.625625][ T6094] Bluetooth: Unexpected continuation frame (len 16) [ 150.412460][ T8544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.412771][ T8544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.419782][ T8541] loop0: detected capacity change from 0 to 32768 [ 150.420435][ T8541] XFS: attr2 mount option is deprecated. [ 150.449869][ T6094] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 150.477493][ T8541] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.624952][ T8541] XFS (loop0): Ending clean mount [ 150.630136][ T8541] XFS (loop0): Quotacheck needed: Please wait. [ 151.317397][ T8541] XFS (loop0): Quotacheck: Done. [ 151.412469][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.580'. [ 152.061209][ T6534] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.659855][ T6094] Bluetooth: Unexpected continuation frame (len 16) [ 154.350144][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.352908][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.433423][ T8607] binder: 8606:8607 ioctl c0306201 0 returned -14 [ 155.439874][ T8607] binder: 8606:8607 got transaction to invalid handle, 1 [ 155.442049][ T8607] binder: 8607:8606 cannot find target node [ 155.443854][ T8607] binder: 8606:8607 transaction async to 0:0 failed 26/29201/-22, code 0 size 104-24 line 3152 [ 155.449562][ T7717] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.108437][ T6094] Bluetooth: Unexpected continuation frame (len 16) [ 156.662959][ T8627] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 156.663002][ T8627] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 156.700286][ T8627] vhci_hcd vhci_hcd.0: Device attached [ 156.727718][ T8627] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 156.727761][ T8627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.727820][ T8627] vhci_hcd vhci_hcd.0: Device attached [ 156.738183][ T8625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.751710][ T8625] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 156.751817][ T8625] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.751870][ T8625] vhci_hcd vhci_hcd.0: Device attached [ 156.768805][ T8625] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 156.768832][ T8625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 156.768907][ T8625] vhci_hcd vhci_hcd.0: Device attached [ 156.775868][ T8625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.776541][ T8625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.777066][ T8625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 156.783804][ T8625] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(30) [ 156.783833][ T8625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.784096][ T8625] vhci_hcd vhci_hcd.0: Device attached [ 156.840046][ T8637] vhci_hcd: connection closed [ 156.843821][ T41] vhci_hcd: stop threads [ 156.843897][ T41] vhci_hcd: release socket [ 156.843933][ T41] vhci_hcd: disconnect device [ 156.846341][ T8631] vhci_hcd: connection closed [ 156.846681][ T41] vhci_hcd: stop threads [ 156.846712][ T41] vhci_hcd: release socket [ 156.846755][ T41] vhci_hcd: disconnect device [ 156.846956][ T8628] vhci_hcd: connection closed [ 156.847274][ T626] vhci_hcd: stop threads [ 156.847303][ T626] vhci_hcd: release socket [ 156.847340][ T626] vhci_hcd: disconnect device [ 156.847551][ T8633] vhci_hcd: connection closed [ 156.847897][ T626] vhci_hcd: stop threads [ 156.848072][ T626] vhci_hcd: release socket [ 156.848112][ T626] vhci_hcd: disconnect device [ 156.992208][ T8649] binder: 8648:8649 ioctl c0306201 0 returned -14 [ 156.998337][ T8649] binder: 8648:8649 got transaction to invalid handle, 1 [ 157.000965][ T8649] binder: 8649:8648 cannot find target node [ 157.002822][ T8649] binder: 8648:8649 transaction async to 0:0 failed 30/29201/-22, code 0 size 104-24 line 3152 [ 157.007495][ T7711] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.015216][ T7717] vhci_hcd: vhci_device speed not set [ 157.063289][ T8652] syzkaller0: entered promiscuous mode [ 157.065156][ T8652] syzkaller0: entered allmulticast mode [ 158.071596][ T8641] vhci_hcd: connection closed [ 158.071864][ T6880] vhci_hcd: stop threads [ 158.074972][ T6880] vhci_hcd: release socket [ 158.079732][ T6880] vhci_hcd: disconnect device [ 158.490964][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 159.122054][ T8682] binder: BINDER_SET_CONTEXT_MGR already set [ 159.122119][ T8682] binder: 8679:8682 ioctl 4018620d 20000040 returned -16 [ 159.122563][ T8682] binder: 8679:8682 got transaction to invalid handle, 1 [ 159.122592][ T8682] binder: 8682:8679 cannot find target node [ 159.122615][ T8682] binder: 8679:8682 transaction async to 0:0 failed 33/29201/-22, code 0 size 104-24 line 3152 [ 159.130537][ T7707] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.311856][ T8694] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 159.311895][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 159.316716][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 159.327998][ T8694] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 159.328033][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.328111][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 159.328896][ T8694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 159.343177][ T8694] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 159.343211][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 159.343290][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 159.350829][ T8694] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 159.350861][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 159.355223][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 159.385639][ T8708] fuse: Bad value for 'fd' [ 159.409485][ T8709] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 159.413249][ T8709] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 159.417290][ T8709] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 159.422845][ T8709] vhci_hcd vhci_hcd.0: port 0 already used [ 159.475288][ T8694] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 159.475333][ T8694] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 159.480065][ T8694] vhci_hcd vhci_hcd.0: Device attached [ 159.483412][ T8702] vhci_hcd: connection closed [ 159.485111][ T8705] vhci_hcd: connection closed [ 159.485434][ T6810] vhci_hcd: stop threads [ 159.485468][ T6810] vhci_hcd: release socket [ 159.485517][ T6810] vhci_hcd: disconnect device [ 159.485733][ T6810] vhci_hcd: stop threads [ 159.485752][ T6810] vhci_hcd: release socket [ 159.485778][ T6810] vhci_hcd: disconnect device [ 159.490159][ T8713] tipc: Started in network mode [ 159.490207][ T8713] tipc: Node identity da26e96912dd, cluster identity 4711 [ 159.490343][ T8700] vhci_hcd: connection closed [ 159.490672][ T626] vhci_hcd: stop threads [ 159.490700][ T626] vhci_hcd: release socket [ 159.490786][ T626] vhci_hcd: disconnect device [ 159.490949][ T8713] tipc: Enabled bearer , priority 0 [ 159.491573][ T8713] syzkaller0: entered promiscuous mode [ 159.491604][ T8713] syzkaller0: entered allmulticast mode [ 159.501469][ T8696] vhci_hcd: connection closed [ 159.501892][ T626] vhci_hcd: stop threads [ 159.501927][ T626] vhci_hcd: release socket [ 159.501970][ T626] vhci_hcd: disconnect device [ 159.502053][ T8698] vhci_hcd: connection closed [ 159.502417][ T41] vhci_hcd: stop threads [ 159.502445][ T41] vhci_hcd: release socket [ 159.502516][ T41] vhci_hcd: disconnect device [ 160.175189][ T8713] tipc: Resetting bearer [ 160.287709][ T8712] tipc: Resetting bearer [ 160.386722][ T8712] tipc: Disabling bearer [ 160.592455][ T8727] binder: 8726:8727 got transaction to invalid handle, 1 [ 160.594725][ T8727] binder: 8727:8726 cannot find target node [ 160.597039][ T8727] binder: 8726:8727 transaction async to 0:0 failed 37/29201/-22, code 0 size 104-24 line 3152 [ 160.600833][ T6597] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.784444][ T8737] fuse: Bad value for 'fd' [ 160.920802][ T8743] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 160.927326][ T6598] IPVS: starting estimator thread 0... [ 161.002087][ T8749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 161.002126][ T8749] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.002530][ T8749] vhci_hcd vhci_hcd.0: Device attached [ 161.009321][ T8749] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 161.009357][ T8749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.009430][ T8749] vhci_hcd vhci_hcd.0: Device attached [ 161.015674][ T8747] IPVS: using max 34 ests per chain, 81600 per kthread [ 161.015942][ T8749] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 161.015965][ T8749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.016008][ T8749] vhci_hcd vhci_hcd.0: Device attached [ 161.017525][ T8749] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 161.017555][ T8749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.017594][ T8749] vhci_hcd vhci_hcd.0: Device attached [ 161.019624][ T8749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(19) [ 161.019653][ T8749] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 161.019804][ T8749] vhci_hcd vhci_hcd.0: Device attached [ 161.020982][ T8749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.027253][ T8749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.029097][ T8749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.031241][ T8749] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(29) [ 161.031267][ T8749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.031459][ T8749] vhci_hcd vhci_hcd.0: Device attached [ 161.052325][ T8760] vhci_hcd: connection closed [ 161.052607][ T626] vhci_hcd: stop threads [ 161.052747][ T626] vhci_hcd: release socket [ 161.052778][ T626] vhci_hcd: disconnect device [ 161.054566][ T8756] vhci_hcd: connection closed [ 161.054986][ T626] vhci_hcd: stop threads [ 161.055016][ T626] vhci_hcd: release socket [ 161.055043][ T626] vhci_hcd: disconnect device [ 161.055089][ T8758] vhci_hcd: connection closed [ 161.055480][ T626] vhci_hcd: stop threads [ 161.055508][ T626] vhci_hcd: release socket [ 161.055566][ T626] vhci_hcd: disconnect device [ 161.057518][ T8754] vhci_hcd: connection closed [ 161.057820][ T626] vhci_hcd: stop threads [ 161.057848][ T626] vhci_hcd: release socket [ 161.057875][ T626] vhci_hcd: disconnect device [ 161.059158][ T8750] vhci_hcd: connection closed [ 161.059403][ T626] vhci_hcd: stop threads [ 161.059431][ T626] vhci_hcd: release socket [ 161.059457][ T626] vhci_hcd: disconnect device [ 161.070330][ T8752] vhci_hcd: connection closed [ 161.076797][ T626] vhci_hcd: stop threads [ 161.076837][ T626] vhci_hcd: release socket [ 161.076865][ T626] vhci_hcd: disconnect device [ 161.256584][ T8767] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 161.342885][ T8769] binder: 8768:8769 got transaction to invalid handle, 1 [ 161.342952][ T8769] binder: 8769:8768 cannot find target node [ 161.343283][ T8769] binder: 8768:8769 transaction async to 0:0 failed 41/29201/-22, code 0 size 104-24 line 3152 [ 161.344048][ T7707] binder: undelivered TRANSACTION_ERROR: 29201 [ 162.176296][ T8785] loop1: detected capacity change from 0 to 2048 [ 162.182906][ T8785] udf: Unknown parameter 'undelete`E:' [ 162.263680][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 162.263825][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'. [ 162.880337][ T8797] binder: 8796:8797 got transaction to invalid handle, 1 [ 162.882602][ T8797] binder: 8797:8796 cannot find target node [ 162.884689][ T8797] binder: 8796:8797 transaction async to 0:0 failed 45/29201/-22, code 0 size 104-24 line 3152 [ 162.889229][ T7707] binder: undelivered TRANSACTION_ERROR: 29201 [ 162.918775][ T8799] netlink: 52 bytes leftover after parsing attributes in process `syz.4.655'. [ 162.938298][ T8799] netlink: 84 bytes leftover after parsing attributes in process `syz.4.655'. [ 163.141628][ T8801] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 163.145227][ T8801] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 163.525765][ T8807] syzkaller0: entered promiscuous mode [ 163.525827][ T8807] syzkaller0: entered allmulticast mode [ 163.936920][ T6540] Bluetooth: hci3: command 0x0406 tx timeout [ 163.938814][ T6541] Bluetooth: hci0: command 0x0406 tx timeout [ 163.938892][ T6541] Bluetooth: hci2: command 0x0406 tx timeout [ 163.942534][ T6531] Bluetooth: hci1: command 0x0406 tx timeout [ 164.348634][ T8832] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 165.384996][ T8848] syzkaller0: entered promiscuous mode [ 165.389025][ T8848] syzkaller0: entered allmulticast mode [ 166.520937][ T8863] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 166.521009][ T8863] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 167.626107][ T8897] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 169.310863][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 169.961336][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.704'. [ 171.401190][ T8962] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 173.457736][ T8989] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 173.670551][ T8991] loop3: detected capacity change from 0 to 32768 [ 173.671252][ T8991] XFS: attr2 mount option is deprecated. [ 173.693488][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.694911][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.700836][ T8991] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.780904][ T8991] XFS (loop3): Ending clean mount [ 173.785787][ T8991] XFS (loop3): Quotacheck needed: Please wait. [ 173.801282][ T8991] XFS (loop3): Quotacheck: Done. [ 175.061812][ T6525] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 175.229607][ T9009] tipc: Enabling of bearer rejected, failed to enable media [ 175.230235][ T9009] syzkaller0: entered promiscuous mode [ 175.230305][ T9009] syzkaller0: entered allmulticast mode [ 177.391558][ T9046] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 177.736346][ T9048] loop3: detected capacity change from 0 to 2048 [ 177.744044][ T9048] udf: Unknown parameter 'undelete`E:' [ 178.154155][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 178.154229][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 179.256498][ T9063] tipc: Enabling of bearer rejected, failed to enable media [ 179.257037][ T9063] syzkaller0: entered promiscuous mode [ 179.257068][ T9063] syzkaller0: entered allmulticast mode [ 179.843382][ T52] Bluetooth: Unexpected continuation frame (len 16) [ 181.573122][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.577945][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.582040][ T52] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 181.600510][ T9106] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 181.816827][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 182.059381][ T9112] tipc: Enabling of bearer rejected, failed to enable media [ 182.064948][ T9112] syzkaller0: entered promiscuous mode [ 182.066898][ T9112] syzkaller0: entered allmulticast mode [ 184.319971][ T9140] loop4: detected capacity change from 0 to 32768 [ 184.321396][ T9140] XFS: attr2 mount option is deprecated. [ 184.335647][ T6094] Bluetooth: hci4: command 0x0406 tx timeout [ 184.387381][ T9140] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.449423][ T9140] XFS (loop4): Ending clean mount [ 184.450530][ T9140] XFS (loop4): Quotacheck needed: Please wait. [ 184.493314][ T9140] XFS (loop4): Quotacheck: Done. [ 185.081564][ T9158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.081862][ T9158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.091913][ T52] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 185.262041][ T6529] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.423897][ T9184] loop3: detected capacity change from 0 to 512 [ 186.672794][ T9188] loop1: detected capacity change from 0 to 32768 [ 186.673459][ T9188] XFS: attr2 mount option is deprecated. [ 186.698677][ T9184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.756239][ T9188] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.816533][ T9188] XFS (loop1): Ending clean mount [ 186.821052][ T9188] XFS (loop1): Quotacheck needed: Please wait. [ 186.859556][ T9188] XFS (loop1): Quotacheck: Done. [ 187.423665][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.423758][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.629331][ T6526] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.657796][ T9212] tipc: Enabling of bearer rejected, failed to enable media [ 187.660968][ T9212] syzkaller0: entered promiscuous mode [ 187.666332][ T9212] syzkaller0: entered allmulticast mode [ 189.874111][ T6525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.854362][ T9260] loop0: detected capacity change from 0 to 32768 [ 190.855039][ T9260] XFS: attr2 mount option is deprecated. [ 190.919179][ T9260] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.947480][ T9260] XFS (loop0): Ending clean mount [ 190.952467][ T9260] XFS (loop0): Quotacheck needed: Please wait. [ 190.987259][ T9260] XFS (loop0): Quotacheck: Done. [ 191.779347][ T6534] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.418260][ T9283] loop1: detected capacity change from 0 to 512 [ 192.875570][ T9291] siw: device registration error -23 [ 193.448530][ T9283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.605051][ T9284] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 193.605094][ T9284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 193.605199][ T9284] vhci_hcd vhci_hcd.0: Device attached [ 193.744183][ T9295] netdevsim netdevsim4: Direct firmware load for x failed with error -2 [ 193.744275][ T9295] netdevsim netdevsim4: Falling back to sysfs fallback for: x [ 193.846848][ T7707] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 194.097477][ T9301] vhci_hcd: connection reset by peer [ 194.099588][ T742] vhci_hcd: stop threads [ 194.099628][ T742] vhci_hcd: release socket [ 194.099725][ T742] vhci_hcd: disconnect device [ 195.255533][ T9319] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 195.255663][ T9319] netlink: 224 bytes leftover after parsing attributes in process `syz.0.814'. [ 195.626941][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'. [ 196.090704][ T6526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.164605][ T9344] fuse: Bad value for 'fd' [ 196.170043][ T6598] Process accounting resumed [ 196.939761][ T9368] netlink: 'syz.4.831': attribute type 13 has an invalid length. [ 197.074315][ T9370] loop4: detected capacity change from 0 to 512 [ 197.140895][ T9370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.389801][ T9377] fuse: Bad value for 'fd' [ 197.399576][ T7714] Process accounting resumed [ 197.840751][ T9388] netlink: 84 bytes leftover after parsing attributes in process `syz.1.839'. [ 198.644824][ T9401] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 198.757850][ T9404] fuse: Bad value for 'fd' [ 198.760506][ T6597] Process accounting resumed [ 198.908160][ T6529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.965478][ T7707] vhci_hcd: vhci_device speed not set [ 199.740842][ T9437] loop2: detected capacity change from 0 to 512 [ 199.772879][ T9437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.842012][ T9443] fuse: Invalid rootmode [ 199.845116][ T7711] Process accounting resumed [ 200.281973][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 201.007851][ T9470] Cannot find del_set index 128 as target [ 202.802550][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'. [ 203.561462][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.562817][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.691677][ T6535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.713900][ T9530] netlink: 'syz.2.890': attribute type 1 has an invalid length. [ 204.819415][ T9533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.819595][ T9533] IPv6: NLM_F_CREATE should be set when creating new route [ 204.819620][ T9533] IPv6: NLM_F_CREATE should be set when creating new route [ 204.820521][ T9533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.862263][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.868473][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.069082][ T9502] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.069147][ T9502] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.069186][ T9502] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.069216][ T9502] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.277495][ T9530] bond1: entered promiscuous mode [ 205.279609][ T9530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.317138][ T9531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.317464][ T9531] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 205.317519][ T9531] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 205.324862][ T9531] bond1: (slave wireguard0): making interface the new active one [ 205.324911][ T9531] wireguard0: entered promiscuous mode [ 205.328674][ T9531] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 205.444054][ T9533] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 205.448779][ T9533] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 205.559465][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 206.486628][ T9550] siw: device registration error -23 [ 207.897522][ T9584] hsr0: left promiscuous mode [ 208.157867][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 209.127418][ T9610] siw: device registration error -23 [ 209.938943][ T9614] siw: device registration error -23 [ 210.223714][ T9619] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 210.418752][ T9623] tipc: Started in network mode [ 210.421376][ T9623] tipc: Node identity aa903049d12a, cluster identity 4711 [ 210.421503][ T9623] tipc: Enabled bearer , priority 0 [ 210.428343][ T9623] syzkaller0: entered promiscuous mode [ 210.432160][ T9623] syzkaller0: entered allmulticast mode [ 211.094160][ T9623] tipc: Resetting bearer [ 211.144950][ T9622] tipc: Resetting bearer [ 211.316505][ T9622] tipc: Disabling bearer [ 211.494776][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'. [ 212.422444][ T7717] lo speed is unknown, defaulting to 1000 [ 213.268578][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.930'. [ 214.103934][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.938'. [ 214.357681][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 215.300599][ T9708] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 216.421413][ T9731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'. [ 216.654464][ T9735] siw: device registration error -23 [ 217.156294][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 217.505783][ T9755] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 217.555636][ T9748] netlink: 'syz.4.962': attribute type 4 has an invalid length. [ 218.077338][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 219.223695][ T9814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.983'. [ 219.297386][ T9818] fuse: Unknown parameter 'use00000000000000000000' [ 219.303445][ T7714] Process accounting resumed [ 219.459810][ T9825] binder: 9824:9825 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 219.464006][ T9825] binder: 9824:9825 ioctl c0306201 0 returned -14 [ 219.510091][ T9829] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 220.721976][ T9861] tipc: Enabling of bearer rejected, failed to enable media [ 221.023471][ T9880] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 224.024189][ T9921] loop4: detected capacity change from 0 to 32768 [ 224.024818][ T9921] XFS: attr2 mount option is deprecated. [ 224.190594][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 224.224546][ T9921] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.340648][ T9948] siw: device registration error -23 [ 224.957774][ T9921] XFS (loop4): Ending clean mount [ 224.960736][ T9921] XFS (loop4): Quotacheck needed: Please wait. [ 224.987602][ T9921] XFS (loop4): Quotacheck: Done. [ 225.019246][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 225.828416][ T9964] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 225.859721][ T6529] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.924186][ T9980] lo speed is unknown, defaulting to 1000 [ 227.944722][ T9987] siw: device registration error -23 [ 227.978235][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 228.024770][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1045'. [ 228.145767][ T9998] loop4: detected capacity change from 0 to 32768 [ 228.146418][ T9998] XFS: attr2 mount option is deprecated. [ 228.196059][ T9998] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 228.256989][ T9998] XFS (loop4): Ending clean mount [ 228.260980][ T9998] XFS (loop4): Quotacheck needed: Please wait. [ 228.311567][ T9998] XFS (loop4): Quotacheck: Done. [ 228.375782][T10014] warning: `syz.3.1050' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 228.405523][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 229.103544][ T6529] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.163811][T10034] tipc: Enabled bearer , priority 0 [ 229.167353][T10034] syzkaller0: entered promiscuous mode [ 229.167417][T10034] syzkaller0: entered allmulticast mode [ 229.238032][T10034] tipc: Resetting bearer [ 229.257358][T10033] tipc: Resetting bearer [ 229.316744][T10033] tipc: Disabling bearer [ 229.546731][T10052] siw: device registration error -23 [ 229.606981][T10065] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 229.648036][T10068] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 229.727980][T10068] bond2: entered promiscuous mode [ 229.728242][T10068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.764747][T10076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.768249][T10076] bond2: (slave wireguard2): The slave device specified does not support setting the MAC address [ 229.771491][T10076] bond2: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 229.790610][T10076] bond2: (slave wireguard2): making interface the new active one [ 229.793095][T10076] wireguard2: entered promiscuous mode [ 229.796113][T10076] bond2: (slave wireguard2): Enslaving as an active interface with an up link [ 229.851525][T10073] lo speed is unknown, defaulting to 1000 [ 230.133398][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 230.409577][T10115] netlink: 'syz.3.1090': attribute type 1 has an invalid length. [ 230.431549][T10115] bond1: entered promiscuous mode [ 230.431793][T10115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.444224][T10114] tipc: Started in network mode [ 230.444308][T10114] tipc: Node identity 1e8b42a63b54, cluster identity 4711 [ 230.444392][T10114] tipc: Enabled bearer , priority 0 [ 230.445729][T10114] syzkaller0: entered promiscuous mode [ 230.445762][T10114] syzkaller0: entered allmulticast mode [ 230.604950][T10115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.605276][T10115] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 230.605896][T10115] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 230.616689][T10115] bond1: (slave wireguard0): making interface the new active one [ 230.616755][T10115] wireguard0: entered promiscuous mode [ 230.617599][T10115] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 230.638734][T10128] fuse: Bad value for 'fd' [ 230.642557][ T7714] Process accounting resumed [ 230.886986][T10133] siw: device registration error -23 [ 231.062138][T10149] netlink: 'syz.1.1104': attribute type 1 has an invalid length. [ 231.340939][T10114] tipc: Resetting bearer [ 231.370631][T10149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.399396][T10150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.399530][T10150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.399562][T10150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.399592][T10150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.402521][T10150] bond1: (slave geneve2): making interface the new active one [ 231.403799][T10150] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 231.422588][T10151] bond1: entered promiscuous mode [ 231.425889][T10151] geneve2: entered promiscuous mode [ 231.431165][T10156] fuse: Bad value for 'fd' [ 231.432706][T10112] tipc: Resetting bearer [ 231.439507][ T7714] Process accounting resumed [ 231.447374][T10157] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 231.615919][T10112] tipc: Disabling bearer [ 231.638029][ T7717] tipc: Node number set to 635388582 [ 231.653764][T10157] bond2: entered promiscuous mode [ 231.654096][T10157] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.693843][T10161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.700940][T10161] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 231.701010][T10161] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 231.709885][T10161] bond2: (slave wireguard1): making interface the new active one [ 231.712487][T10161] wireguard1: entered promiscuous mode [ 231.719467][T10161] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 231.722641][T10171] syz_tun: entered allmulticast mode [ 231.725556][T10165] syz_tun: left allmulticast mode [ 231.809640][T10176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1113'. [ 231.812589][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'. [ 231.815675][T10176] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 232.006189][T10181] siw: device registration error -23 [ 232.701595][T10188] fuse: Bad value for 'fd' [ 232.704921][ T7714] Process accounting resumed [ 232.769654][T10197] binder: 10195:10197 tried to acquire reference to desc 0, got 1 instead [ 232.793707][ T7714] binder: undelivered transaction 52, process died. [ 232.793852][ T7714] binder: undelivered TRANSACTION_COMPLETE [ 232.797012][T10194] tipc: Enabled bearer , priority 0 [ 232.810862][T10194] tipc: Resetting bearer [ 232.998930][T10203] siw: device registration error -23 [ 233.141688][ T7717] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 233.637798][T10193] tipc: Disabling bearer [ 233.720522][T10210] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 233.730765][T10210] bond3: entered promiscuous mode [ 233.731012][T10210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.812705][T10210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.813075][T10210] bond3: (slave wireguard3): The slave device specified does not support setting the MAC address [ 233.813130][T10210] bond3: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 233.841217][T10210] bond3: (slave wireguard3): making interface the new active one [ 233.841269][T10210] wireguard3: entered promiscuous mode [ 233.906983][T10210] bond3: (slave wireguard3): Enslaving as an active interface with an up link [ 233.971183][ T7717] usb 1-1: Using ep0 maxpacket: 32 [ 233.976326][ T7717] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 233.982265][ T7717] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.982615][ T7717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.982640][ T7717] usb 1-1: Manufacturer: ఄ [ 233.982662][ T7717] usb 1-1: SerialNumber: 쾗ᛒ袛牢鸨ꅼ베欿蚝吺듮㞼껼ᓪᗚ鏏ꝇꆖ춞ᶱꨑ촸蟬몀壑ꋚ꫾膇∙蝡屜ᥞጕ㌬몍Ⲟ뿇棌 [ 233.987858][T10192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.028213][T10226] netlink: 'syz.2.1130': attribute type 10 has an invalid length. [ 234.172997][T10227] siw: device registration error -23 [ 234.276689][T10226] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 234.775906][ T52] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 234.804234][ T7717] usb 1-1: USB disconnect, device number 6 [ 234.893577][T10235] binder: 10232:10235 tried to acquire reference to desc 0, got 1 instead [ 234.894388][ T6597] binder: undelivered TRANSACTION_COMPLETE [ 234.911555][ T6589] binder: undelivered transaction 57, process died. [ 235.114054][T10243] tipc: Enabled bearer , priority 0 [ 235.822159][T10248] siw: device registration error -23 [ 235.945626][T10243] tipc: Resetting bearer [ 236.046144][T10251] netlink: 'syz.3.1140': attribute type 1 has an invalid length. [ 236.100634][T10253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.100695][T10253] IPv6: NLM_F_CREATE should be set when creating new route [ 236.100734][T10253] IPv6: NLM_F_CREATE should be set when creating new route [ 236.114006][T10253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.117171][T10242] tipc: Disabling bearer [ 236.148424][T10251] bond3: entered promiscuous mode [ 236.155145][T10251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.453586][T10265] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1144'. [ 236.458127][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 236.461767][T10265] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1144'. [ 236.623549][T10270] siw: device registration error -23 [ 236.642439][T10265] netlink: 'syz.3.1144': attribute type 3 has an invalid length. [ 236.651074][T10265] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1144'. [ 237.240613][T10269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.285860][T10265] lo speed is unknown, defaulting to 1000 [ 237.438949][T10278] loop2: detected capacity change from 0 to 32768 [ 237.439661][T10278] XFS: attr2 mount option is deprecated. [ 237.479190][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1150'. [ 237.578318][T10278] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.627949][T10278] XFS (loop2): Ending clean mount [ 237.632125][T10278] XFS (loop2): Quotacheck needed: Please wait. [ 237.642694][T10298] tipc: Enabled bearer , priority 0 [ 237.644630][T10278] XFS (loop2): Quotacheck: Done. [ 237.648013][T10298] tipc: Resetting bearer [ 238.326462][T10295] tipc: Disabling bearer [ 239.198352][T10313] siw: device registration error -23 [ 239.259693][ T6535] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 239.681520][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 240.083395][T10338] tipc: Started in network mode [ 240.083463][T10338] tipc: Node identity 9a277db18e5a, cluster identity 4711 [ 240.083591][T10338] tipc: Enabled bearer , priority 0 [ 240.085691][T10338] syzkaller0: entered promiscuous mode [ 240.085737][T10338] syzkaller0: entered allmulticast mode [ 240.091689][T10338] tipc: Resetting bearer [ 240.112041][T10337] tipc: Resetting bearer [ 240.186122][T10337] tipc: Disabling bearer [ 240.268937][T10349] siw: device registration error -23 [ 241.784580][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 241.991307][T10380] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 242.001449][T10382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1187'. [ 243.129061][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 243.139893][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 243.155426][ T6589] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 243.211673][T10410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1196'. [ 243.214990][T10410] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1196'. [ 243.422679][T10416] loop4: detected capacity change from 0 to 32768 [ 243.423571][T10416] XFS: attr2 mount option is deprecated. [ 243.445409][ T6589] usb 1-1: Using ep0 maxpacket: 32 [ 243.449476][ T6589] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 243.453834][ T6589] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 243.456744][ T6589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.459093][ T6589] usb 1-1: Manufacturer: ఄ [ 243.460489][ T6589] usb 1-1: SerialNumber: 쾗ᛒ袛牢鸨ꅼ베欿蚝吺듮㞼껼ᓪᗚ鏏ꝇꆖ춞ᶱꨑ촸蟬몀壑ꋚ꫾膇∙蝡屜ᥞጕ㌬몍Ⲟ뿇棌 [ 243.466542][T10416] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.478008][T10395] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.502025][T10416] XFS (loop4): Ending clean mount [ 243.524793][T10416] XFS (loop4): Quotacheck needed: Please wait. [ 243.559164][T10430] siw: device registration error -23 [ 244.182266][T10399] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 244.187989][ T52] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 244.205456][T10428] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 244.269254][T10416] XFS (loop4): Quotacheck: Done. [ 244.275763][ T6589] usb 1-1: USB disconnect, device number 7 [ 245.019551][ T6529] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 245.101112][T10450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1209'. [ 245.101792][T10450] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1209'. [ 245.377387][T10467] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 245.377453][T10467] netlink: 'syz.1.1216': attribute type 8 has an invalid length. [ 245.382721][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 245.382791][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 246.305252][T10484] tipc: Enabled bearer , priority 0 [ 246.307854][T10484] syzkaller0: entered promiscuous mode [ 246.307919][T10484] syzkaller0: entered allmulticast mode [ 246.339247][T10484] tipc: Resetting bearer [ 246.377300][T10481] tipc: Resetting bearer [ 246.555835][T10481] tipc: Disabling bearer [ 247.541151][T10519] tipc: Enabled bearer , priority 0 [ 247.560145][T10519] syzkaller0: entered promiscuous mode [ 247.561958][T10519] syzkaller0: entered allmulticast mode [ 247.614127][T10525] tipc: Started in network mode [ 247.614215][T10525] tipc: Node identity 5e21534c530f, cluster identity 4711 [ 247.614306][T10525] tipc: Enabled bearer , priority 0 [ 247.616039][T10525] syzkaller0: entered promiscuous mode [ 247.616636][T10525] syzkaller0: entered allmulticast mode [ 247.620603][T10525] tipc: Resetting bearer [ 247.625574][T10522] tipc: Resetting bearer [ 247.688076][T10522] tipc: Disabling bearer [ 247.700596][T10518] tipc: Resetting bearer [ 247.756700][T10518] tipc: Disabling bearer [ 247.767798][T10529] tipc: Enabled bearer , priority 0 [ 247.768364][T10529] syzkaller0: entered promiscuous mode [ 247.768396][T10529] syzkaller0: entered allmulticast mode [ 247.777815][T10529] tipc: Resetting bearer [ 247.779721][T10528] tipc: Resetting bearer [ 247.895718][T10532] siw: device registration error -23 [ 248.067421][T10528] tipc: Disabling bearer [ 248.763833][T10552] __nla_validate_parse: 2 callbacks suppressed [ 248.763916][T10552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1250'. [ 248.764390][T10552] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1250'. [ 248.817384][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.992794][T10560] tipc: Enabled bearer , priority 0 [ 248.993509][T10560] syzkaller0: entered promiscuous mode [ 248.993542][T10560] syzkaller0: entered allmulticast mode [ 248.999621][T10560] tipc: Resetting bearer [ 249.001601][T10559] tipc: Resetting bearer [ 249.065846][T10559] tipc: Disabling bearer [ 249.327816][T10566] siw: device registration error -23 [ 250.130388][T10575] tipc: Enabled bearer , priority 0 [ 250.130908][T10575] syzkaller0: entered promiscuous mode [ 250.130939][T10575] syzkaller0: entered allmulticast mode [ 250.137279][T10575] tipc: Resetting bearer [ 250.184029][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1261'. [ 250.184535][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1261'. [ 250.206927][T10574] tipc: Resetting bearer [ 250.254080][T10574] tipc: Disabling bearer [ 250.682312][T10598] loop4: detected capacity change from 0 to 2048 [ 250.688570][T10598] udf: Unknown parameter 'undelete`E:' [ 250.768652][T10598] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1266'. [ 251.259648][T10603] netlink: 'syz.4.1269': attribute type 4 has an invalid length. [ 251.507362][T10614] siw: device registration error -23 [ 252.197528][T10622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1275'. [ 252.256060][T10622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1275'. [ 252.510815][T10631] siw: device registration error -23 [ 253.531089][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 254.196591][T10663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1288'. [ 254.197581][T10663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1288'. [ 254.593194][T10672] siw: device registration error -23 [ 255.141543][T10669] bond1: left promiscuous mode [ 255.141611][T10669] geneve2: left promiscuous mode [ 255.145778][T10669] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.145849][T10669] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.145880][T10669] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.145909][T10669] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.670785][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1302'. [ 255.807059][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 255.830205][T10704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1303'. [ 256.373037][T10721] siw: device registration error -23 [ 257.003560][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1312'. [ 257.089833][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 257.112489][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1314'. [ 257.216728][T10737] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 257.235133][T10737] bond2: entered promiscuous mode [ 257.235605][T10737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.319386][T10737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.319453][T10737] IPv6: NLM_F_CREATE should be set when creating new route [ 257.319492][T10737] IPv6: NLM_F_CREATE should be set when creating new route [ 257.326589][T10737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.811657][T10762] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1324'. [ 257.878722][T10765] siw: device registration error -23 [ 258.606467][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1327'. [ 258.901691][T10791] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 258.901767][T10791] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 260.287505][T10812] __nla_validate_parse: 2 callbacks suppressed [ 260.291334][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 260.296405][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1343'. [ 261.147318][T10833] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 261.799986][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 261.948542][T10848] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1353'. [ 262.201482][T10855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1357'. [ 262.935187][T10884] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 263.562343][T10878] loop2: detected capacity change from 0 to 32768 [ 263.562984][T10878] XFS: attr2 mount option is deprecated. [ 263.592199][T10878] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.663850][T10878] XFS (loop2): Ending clean mount [ 263.671746][T10878] XFS (loop2): Quotacheck needed: Please wait. [ 263.685194][T10878] XFS (loop2): Quotacheck: Done. [ 263.785067][T10899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1368'. [ 263.864411][T10903] tipc: Enabled bearer , priority 0 [ 264.477951][ T6535] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 264.561105][T10903] syzkaller0: entered promiscuous mode [ 264.561172][T10903] syzkaller0: entered allmulticast mode [ 264.567743][T10912] tipc: Resetting bearer [ 264.579769][T10902] tipc: Resetting bearer [ 264.646117][T10902] tipc: Disabling bearer [ 264.740978][T10925] netlink: 'syz.0.1378': attribute type 10 has an invalid length. [ 264.752617][T10925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.757315][T10925] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 264.924305][T10933] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 265.493646][T10936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'. [ 266.765112][T10979] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 267.578118][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 268.104785][T11010] loop4: detected capacity change from 0 to 2048 [ 268.111713][T11010] udf: Unknown parameter 'undelete`E:' [ 268.195862][T11010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1406'. [ 269.107456][T11025] loop1: detected capacity change from 0 to 32768 [ 269.108105][T11025] XFS: attr2 mount option is deprecated. [ 269.149060][T11025] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 269.196090][T11025] XFS (loop1): Ending clean mount [ 269.198916][T11025] XFS (loop1): Quotacheck needed: Please wait. [ 269.222910][T11025] XFS (loop1): Quotacheck: Done. [ 269.341343][T11041] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1416'. [ 269.381798][T11041] gretap0: entered promiscuous mode [ 270.549539][T11045] gretap0: left promiscuous mode [ 270.568949][ T6526] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 270.616247][T11045] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.616509][T11045] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.556042][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 271.634085][T11045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.653710][T11045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.093157][T11045] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.093236][T11045] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.093301][T11045] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.093338][T11045] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.370123][ T7717] lo speed is unknown, defaulting to 1000 [ 272.370196][ T7717] syz0: Port: 1 Link DOWN [ 274.148034][T11093] loop0: detected capacity change from 0 to 32768 [ 274.148708][T11093] XFS: attr2 mount option is deprecated. [ 274.230873][T11105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1432'. [ 274.237230][T11093] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 274.281966][T11093] XFS (loop0): Ending clean mount [ 274.284918][T11093] XFS (loop0): Quotacheck needed: Please wait. [ 274.328553][T11093] XFS (loop0): Quotacheck: Done. [ 274.584878][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1438'. [ 276.615531][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1444'. [ 277.226494][ T6534] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 279.890528][T11215] nbd0: detected capacity change from 0 to 127 [ 280.306919][ T52] block nbd0: Receive control failed (result -104) [ 280.312240][T11229] netlink: 'syz.0.1472': attribute type 11 has an invalid length. [ 280.389841][T11227] tipc: Enabled bearer , priority 0 [ 280.390758][T11227] syzkaller0: entered promiscuous mode [ 280.390793][T11227] syzkaller0: entered allmulticast mode [ 280.520334][T11226] tipc: Resetting bearer [ 280.646600][T11226] tipc: Disabling bearer [ 280.801565][T11259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'. [ 281.714651][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 281.820138][T11275] netlink: 'syz.4.1489': attribute type 11 has an invalid length. [ 282.018772][T11278] loop0: detected capacity change from 0 to 32768 [ 282.019491][T11278] XFS: attr2 mount option is deprecated. [ 283.286214][T11278] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 283.456579][T11278] XFS (loop0): Ending clean mount [ 283.459848][T11278] XFS (loop0): Quotacheck needed: Please wait. [ 283.678054][T11278] XFS (loop0): Quotacheck: Done. [ 285.017087][ T6534] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 285.117425][T11314] tipc: Enabled bearer , priority 0 [ 285.117937][T11314] syzkaller0: entered promiscuous mode [ 285.117968][T11314] syzkaller0: entered allmulticast mode [ 285.123683][T11315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'. [ 285.157567][T11314] tipc: Resetting bearer [ 285.164542][T11311] tipc: Resetting bearer [ 285.380120][T11311] tipc: Disabling bearer [ 286.045441][T11320] netlink: 'syz.1.1501': attribute type 13 has an invalid length. [ 286.045512][T11320] netlink: 'syz.1.1501': attribute type 17 has an invalid length. [ 286.194541][T11320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.198463][T11320] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.357792][T11320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.092268][T11342] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 287.100058][T11344] syzkaller0: entered promiscuous mode [ 287.101789][T11344] syzkaller0: entered allmulticast mode [ 287.346234][T11358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1514'. [ 288.549963][T11374] lo speed is unknown, defaulting to 1000 [ 289.459982][T11389] tipc: Enabling of bearer rejected, failed to enable media [ 289.716497][T11402] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 289.716561][T11402] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 289.970113][T11408] syzkaller0: entered promiscuous mode [ 289.971919][T11408] syzkaller0: entered allmulticast mode [ 291.451294][T11434] tipc: Enabled bearer , priority 0 [ 291.454061][T11434] syzkaller0: entered promiscuous mode [ 291.454134][T11434] syzkaller0: entered allmulticast mode [ 291.474324][T11432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1536'. [ 291.561497][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 291.564816][T11437] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.565018][T11437] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.565052][T11437] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.565082][T11437] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.570191][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 291.610208][T11434] tipc: Resetting bearer [ 291.666068][T11433] tipc: Resetting bearer [ 291.727578][T11433] tipc: Disabling bearer [ 291.774893][ T6597] IPVS: starting estimator thread 0... [ 291.775622][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 291.865460][T11448] IPVS: using max 34 ests per chain, 81600 per kthread [ 292.287610][T11464] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1548'. [ 293.359785][T11478] tipc: Enabled bearer , priority 0 [ 293.362478][T11478] syzkaller0: entered promiscuous mode [ 293.364140][T11478] syzkaller0: entered allmulticast mode [ 293.409095][T11478] tipc: Resetting bearer [ 293.465649][T11477] tipc: Resetting bearer [ 293.548255][T11477] tipc: Disabling bearer [ 293.562126][T11494] netlink: 'syz.1.1563': attribute type 12 has an invalid length. [ 293.574890][T11494] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:19999 [ 293.752481][T11499] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1561'. [ 293.895641][ T52] Bluetooth: Unexpected continuation frame (len 16) [ 294.296611][T11511] IPv6: sit1: Disabled Multicast RS [ 294.636568][T11529] tipc: Enabled bearer , priority 0 [ 294.637222][T11529] syzkaller0: entered promiscuous mode [ 294.637293][T11529] syzkaller0: entered allmulticast mode [ 294.687146][T11529] tipc: Resetting bearer [ 294.689169][T11527] tipc: Resetting bearer [ 294.859716][T11532] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1577'. [ 294.862856][T11527] tipc: Disabling bearer [ 295.511219][ T52] Bluetooth: Unexpected continuation frame (len 16) [ 295.555379][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 296.082776][T11561] tipc: Enabled bearer , priority 0 [ 296.233135][T11565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1588'. [ 296.353343][T11575] batman_adv: batadv0: Adding interface: dummy0 [ 296.353407][T11575] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.353463][T11575] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 296.591356][T11585] tipc: Enabled bearer , priority 0 [ 296.595136][T11585] syzkaller0: entered promiscuous mode [ 296.597280][T11585] syzkaller0: entered allmulticast mode [ 296.602515][T11585] tipc: Resetting bearer [ 296.609147][T11584] tipc: Resetting bearer [ 296.657385][T11584] tipc: Disabling bearer [ 297.040781][T11561] tipc: Disabling bearer [ 297.076744][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1601'. [ 297.612882][T11629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1617'. [ 298.365265][T11664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 298.633519][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1640'. [ 298.633671][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1640'. [ 298.635074][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1640'. [ 299.596189][T11728] __nla_validate_parse: 1 callbacks suppressed [ 299.596250][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1658'. [ 299.672434][T11738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1666'. [ 299.821652][T11750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1671'. [ 299.849716][T11753] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 301.569980][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1693'. [ 302.003218][T11838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1707'. [ 302.003283][T11838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1707'. [ 302.354052][T11864] netlink: 'syz.3.1720': attribute type 11 has an invalid length. [ 302.405858][T11869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1721'. [ 302.409217][T11869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1721'. [ 302.812895][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1729'. [ 303.475546][T11901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1734'. [ 303.503801][T11900] netlink: 'syz.2.1733': attribute type 11 has an invalid length. [ 304.640831][T11935] netlink: 'syz.0.1748': attribute type 11 has an invalid length. [ 305.214610][T11963] netlink: 'syz.0.1760': attribute type 1 has an invalid length. [ 305.474043][T11971] __nla_validate_parse: 4 callbacks suppressed [ 305.474122][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1761'. [ 306.236139][T11977] netlink: 'syz.4.1765': attribute type 11 has an invalid length. [ 306.260963][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 306.674450][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1774'. [ 307.764524][T12015] netlink: 'syz.2.1779': attribute type 11 has an invalid length. [ 307.836899][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 307.969928][T12023] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 308.632850][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 308.657194][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1786'. [ 308.883557][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 309.708848][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1804'. [ 309.784799][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1805'. [ 310.258225][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.261141][ T56] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 30 seconds [ 310.261324][ T56] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 30 seconds [ 310.261380][ T56] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 30 seconds [ 310.261417][ T56] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 30 seconds [ 310.364209][T12095] lo speed is unknown, defaulting to 1000 [ 310.785684][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1811'. [ 310.871306][T12114] lo speed is unknown, defaulting to 1000 [ 311.881206][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1818'. [ 312.195944][T12137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1819'. [ 312.196014][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 312.309437][T12139] tipc: Enabled bearer , priority 0 [ 312.309692][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1823'. [ 312.334572][T12139] syzkaller0: entered promiscuous mode [ 312.334643][T12139] syzkaller0: entered allmulticast mode [ 313.135818][T12138] tipc: Resetting bearer [ 313.138310][ T52] Bluetooth: Unexpected continuation frame (len 16) [ 313.253325][T12138] tipc: Disabling bearer [ 313.582212][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1831'. [ 313.930242][T12160] lo speed is unknown, defaulting to 1000 [ 314.033246][T12189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1835'. [ 314.043086][T12187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1836'. [ 314.625636][ T6094] Bluetooth: Unexpected continuation frame (len 16) [ 315.183965][T12217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1843'. [ 315.256757][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 315.914947][T12233] lo speed is unknown, defaulting to 1000 [ 316.593928][T12243] __nla_validate_parse: 2 callbacks suppressed [ 316.594009][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'. [ 316.712777][T12252] batadv_slave_0: entered promiscuous mode [ 316.720140][T12252] batadv_slave_0: left promiscuous mode [ 317.197197][ T6094] Bluetooth: Unexpected continuation frame (len 16) [ 318.106917][T12270] loop4: detected capacity change from 0 to 32768 [ 318.107599][T12270] XFS: attr2 mount option is deprecated. [ 318.860003][T12270] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.871554][T12281] tipc: Enabled bearer , priority 0 [ 318.886172][T12281] syzkaller0: entered promiscuous mode [ 318.886255][T12281] syzkaller0: entered allmulticast mode [ 318.938243][T12270] XFS (loop4): Ending clean mount [ 318.939546][T12270] XFS (loop4): Quotacheck needed: Please wait. [ 318.948266][T12270] XFS (loop4): Quotacheck: Done. [ 319.081974][T12287] bond1: left promiscuous mode [ 319.090652][T12287] wireguard0: left promiscuous mode [ 320.071514][ T6589] tipc: Node number set to 3371952489 [ 320.146992][T12287] bond2: left promiscuous mode [ 320.147058][T12287] wireguard1: left promiscuous mode [ 320.185264][ T6529] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 320.251667][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 320.423263][T12287] bond3: left promiscuous mode [ 320.426729][T12287] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.426863][T12287] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.426910][T12287] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.426946][T12287] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.884314][ T6094] Bluetooth: Unexpected continuation frame (len 16) [ 320.888413][T12274] tipc: Resetting bearer [ 321.410796][T12274] tipc: Disabling bearer [ 321.437343][T12311] lo speed is unknown, defaulting to 1000 [ 321.829163][T12330] lo: entered promiscuous mode [ 321.830088][T12330] netlink: 'syz.4.1880': attribute type 8 has an invalid length. [ 321.830331][T12330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.073801][T12334] siw: device registration error -23 [ 322.804973][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1881'. [ 323.504462][T12342] bond2: left promiscuous mode [ 323.557342][T12348] tipc: Enabled bearer , priority 0 [ 323.558826][T12348] syzkaller0: entered promiscuous mode [ 323.558863][T12348] syzkaller0: entered allmulticast mode [ 323.801131][ T6094] Bluetooth: Unexpected continuation frame (len 16) [ 324.444322][T12346] tipc: Resetting bearer [ 324.668073][ T7717] tipc: Node number set to 221139788 [ 324.686838][T12346] tipc: Disabling bearer [ 324.912231][T12373] siw: device registration error -23 [ 325.482864][T12366] lo speed is unknown, defaulting to 1000 [ 325.516584][T12377] batadv_slave_0: entered promiscuous mode [ 325.528968][T12377] batadv_slave_0: left promiscuous mode [ 325.872372][ T6094] Bluetooth: Unexpected continuation frame (len 16) [ 326.529029][T12401] tipc: Enabled bearer , priority 0 [ 326.532746][T12401] syzkaller0: entered promiscuous mode [ 326.532840][T12401] syzkaller0: entered allmulticast mode [ 327.365515][T12407] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 327.473022][T12400] tipc: Resetting bearer [ 327.616643][ T7717] tipc: Node number set to 2075799625 [ 327.656462][T12400] tipc: Disabling bearer [ 327.761736][T12438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1912'. [ 327.904566][T12427] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 327.907027][T12427] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 327.917734][T12429] syzkaller0: entered promiscuous mode [ 327.917795][T12429] syzkaller0: entered allmulticast mode [ 328.551703][T12488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1923'. [ 328.587887][T12484] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 328.587954][T12484] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 328.744126][T12495] syzkaller0: entered promiscuous mode [ 328.744205][T12495] syzkaller0: entered allmulticast mode [ 328.920612][T12504] batadv_slave_0: entered promiscuous mode [ 328.920782][T12504] batadv_slave_0: left promiscuous mode [ 328.937367][T12508] lo speed is unknown, defaulting to 1000 [ 329.359692][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 329.844732][T12576] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 329.844805][T12576] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 330.261963][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1952'. [ 330.906970][T12610] batadv_slave_0: entered promiscuous mode [ 330.907144][T12610] batadv_slave_0: left promiscuous mode [ 331.082493][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 331.384703][T12632] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 331.384776][T12632] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 332.112887][T12650] batadv_slave_0: entered promiscuous mode [ 332.116974][T12650] batadv_slave_0: left promiscuous mode [ 332.191049][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 332.484086][T12676] lo: left promiscuous mode [ 332.620447][T12684] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 332.633583][T12684] bond4: entered promiscuous mode [ 332.633885][T12684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 332.680718][T12684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.680866][T12684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.832958][T12696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.833272][T12696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.835738][ T6094] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 333.140898][T12699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'. [ 333.713319][T12721] batadv_slave_0: entered promiscuous mode [ 333.715829][T12721] batadv_slave_0: left promiscuous mode [ 333.938115][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'. [ 334.165504][T12730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.168386][T12730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.173409][ T6094] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 335.158526][T12766] loop2: detected capacity change from 0 to 32768 [ 335.159200][T12766] XFS: attr2 mount option is deprecated. [ 335.197691][T12766] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 335.217493][T12766] XFS (loop2): Ending clean mount [ 335.218745][T12766] XFS (loop2): Quotacheck needed: Please wait. [ 335.236365][T12766] XFS (loop2): Quotacheck: Done. [ 336.339702][T12782] netlink: 'syz.1.2019': attribute type 1 has an invalid length. [ 336.361855][T12782] bond3: entered promiscuous mode [ 336.365660][T12782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.420589][ T6535] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 336.452523][T12782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.452593][T12782] IPv6: NLM_F_CREATE should be set when creating new route [ 336.452633][T12782] IPv6: NLM_F_CREATE should be set when creating new route [ 336.475605][T12782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.475708][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.476015][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.482515][ T6094] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 337.714326][T12816] netlink: 'syz.0.2032': attribute type 1 has an invalid length. [ 337.749723][T12816] bond1: entered promiscuous mode [ 337.751733][T12816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.772735][T12816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.772797][T12816] IPv6: NLM_F_CREATE should be set when creating new route [ 337.772840][T12816] IPv6: NLM_F_CREATE should be set when creating new route [ 337.775161][T12816] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.628203][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.628504][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.629829][ T6094] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 340.652707][ T56] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 60 seconds [ 340.652794][ T56] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 60 seconds [ 340.652826][ T56] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 60 seconds [ 340.652856][ T56] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 60 seconds [ 340.834797][T12886] tipc: Enabled bearer , priority 0 [ 340.874433][T12884] tipc: Disabling bearer [ 340.972654][T12904] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:19999 [ 340.986688][T12894] netlink: 'syz.1.2058': attribute type 12 has an invalid length. [ 340.995643][T12907] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 341.247170][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.250068][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.253974][ T6094] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 342.355633][T12938] netlink: 'syz.4.2073': attribute type 12 has an invalid length. [ 342.360559][T12938] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:19999 [ 342.491382][T12946] tipc: Enabled bearer , priority 0 [ 342.494952][T12943] tipc: Disabling bearer [ 342.670648][T12955] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 343.481792][T12960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.484508][T12960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.488616][ T6094] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 343.622015][T12959] loop3: detected capacity change from 0 to 32768 [ 343.622671][T12959] XFS: attr2 mount option is deprecated. [ 343.673102][T12959] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 343.720636][T12959] XFS (loop3): Ending clean mount [ 343.721819][T12959] XFS (loop3): Quotacheck needed: Please wait. [ 343.738536][T12959] XFS (loop3): Quotacheck: Done. [ 343.916932][T12983] netlink: 'syz.1.2085': attribute type 12 has an invalid length. [ 343.918136][T12983] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:19999 [ 344.573895][T12993] netlink: 'syz.2.2089': attribute type 11 has an invalid length. [ 344.584946][ T6525] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.322425][T12994] tipc: Enabled bearer , priority 0 [ 345.338940][T12990] tipc: Disabling bearer [ 345.439737][T13008] netlink: 'syz.0.2091': attribute type 1 has an invalid length. [ 345.454204][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 345.490314][T12993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.587086][T13030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.587457][T13030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.594937][ T6094] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 347.614918][T13034] netlink: 'syz.0.2099': attribute type 12 has an invalid length. [ 347.634080][T13034] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:19999 [ 348.770832][T13048] tipc: Enabled bearer , priority 0 [ 348.809411][T13048] tipc: Resetting bearer [ 348.844242][T13052] netlink: 'syz.0.2105': attribute type 1 has an invalid length. [ 348.947433][T13058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.947572][T13058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.000490][T13047] tipc: Disabling bearer [ 349.018055][T13050] tipc: Enabling of bearer <5dp:s> rejected, media not registered [ 349.889999][T13068] tipc: Enabled bearer , priority 0 [ 349.895013][T13068] syzkaller0: entered promiscuous mode [ 349.895086][T13068] syzkaller0: entered allmulticast mode [ 350.663369][T13073] tipc: Resetting bearer [ 350.754772][T13065] tipc: Resetting bearer [ 350.805777][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2113'. [ 350.939023][T13065] tipc: Disabling bearer [ 351.726068][T13105] batadv_slave_0: entered promiscuous mode [ 351.726611][T13105] batadv_slave_0: left promiscuous mode [ 352.633252][T13119] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 352.685896][T13122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.686054][T13122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.270060][T13136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 354.295498][T13148] tipc: Enabling of bearer rejected, failed to enable media [ 354.324461][T13152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2133'. [ 354.382473][T13150] tipc: Enabled bearer , priority 0 [ 354.382986][T13150] syzkaller0: entered promiscuous mode [ 354.383018][T13150] syzkaller0: entered allmulticast mode [ 354.675815][T13171] loop2: detected capacity change from 0 to 2048 [ 354.676485][T13171] udf: Unknown parameter 'undelete`E:' [ 354.682013][T13171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2135'. [ 355.427000][T13166] tipc: Resetting bearer [ 356.017571][T13145] tipc: Resetting bearer [ 356.285846][T13145] tipc: Disabling bearer [ 356.468661][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 356.638863][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 357.390884][T13176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.640566][T13197] bond1: left promiscuous mode [ 357.645737][T13197] wireguard0: left promiscuous mode [ 357.672591][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2147'. [ 357.789175][T13197] bond2: left promiscuous mode [ 357.790789][T13197] wireguard2: left promiscuous mode [ 357.877417][T13197] bond3: left promiscuous mode [ 357.877479][T13197] wireguard3: left promiscuous mode [ 357.979821][T13197] bond4: left promiscuous mode [ 357.996275][T13206] batadv_slave_0: entered promiscuous mode [ 357.996479][T13206] batadv_slave_0: left promiscuous mode [ 358.115716][T13215] tipc: Enabling of bearer rejected, failed to enable media [ 358.219158][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2152'. [ 359.267424][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2154'. [ 359.993322][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 360.195796][T13254] netlink: 'syz.0.2162': attribute type 1 has an invalid length. [ 360.455065][T13262] tipc: Enabling of bearer rejected, failed to enable media [ 361.346434][T13268] netlink: 'syz.3.2168': attribute type 1 has an invalid length. [ 361.451108][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2170'. [ 362.122332][T13290] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 363.201012][T13306] tipc: Enabling of bearer rejected, failed to enable media [ 364.581710][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2191'. [ 365.721475][T13356] tipc: Enabling of bearer rejected, failed to enable media [ 366.871981][T13378] netlink: 616 bytes leftover after parsing attributes in process `syz.0.2203'. [ 368.702426][T13424] netlink: 'syz.4.2222': attribute type 1 has an invalid length. [ 368.734294][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2224'. [ 368.765519][ T7711] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 368.915535][ T7711] usb 1-1: Using ep0 maxpacket: 32 [ 368.927758][ T6094] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 368.935159][ T7711] usb 1-1: unable to get BOS descriptor or descriptor too short [ 368.945410][ T7711] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 368.945480][ T7711] usb 1-1: can't read configurations, error -71 [ 369.722200][T13441] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2230'. [ 371.616590][ T56] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 90 seconds [ 371.616673][ T56] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 90 seconds [ 371.616726][ T56] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 90 seconds [ 371.616762][ T56] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 90 seconds [ 371.705990][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.818979][T13491] xt_hashlimit: size too large, truncated to 1048576 [ 372.045399][ T6597] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 372.052544][T13505] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 372.215420][ T6597] usb 1-1: Using ep0 maxpacket: 32 [ 372.219208][ T6094] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 372.224622][ T6597] usb 1-1: unable to get BOS descriptor or descriptor too short [ 372.227873][ T6597] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 372.231346][ T6597] usb 1-1: can't read configurations, error -71 [ 372.415529][T13529] trusted_key: syz.4.2265 sent an empty control message without MSG_MORE. [ 372.496081][T13532] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 372.577238][T13535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2267'. [ 372.613085][ T31] audit: type=1400 audit(372.580:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6142 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.613169][ T31] audit: type=1400 audit(372.580:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6142 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.614921][ T31] audit: type=1400 audit(372.590:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6142 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.636676][ T31] audit: type=1400 audit(372.620:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13531 comm="syz.4.2266" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.683142][ T31] audit: type=1400 audit(372.660:6): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6535 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.694331][ T31] audit: type=1400 audit(372.670:7): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=13489 comm="syz.1.2249" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.714178][ T31] audit: type=1400 audit(372.690:8): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6535 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.714274][ T31] audit: type=1400 audit(372.690:9): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6535 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.746769][ T31] audit: type=1400 audit(372.730:10): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=626 comm="kworker/u8:5" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.796327][ T31] audit: type=1400 audit(372.780:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6142 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 372.848001][T13553] netlink: 'syz.4.2273': attribute type 1 has an invalid length. [ 376.769923][ T6142] udevd[6142]: worker [6691] /devices/virtual/block/nbd0 is taking a long time [ 379.296364][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 379.296425][ T31] audit: type=1400 audit(379.280:19): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 379.713992][ T31] audit: type=1400 audit(379.690:20): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 386.417046][ T31] audit: type=1400 audit(386.400:21): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 386.882846][ T31] audit: type=1400 audit(386.860:22): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 400.497876][ T31] audit: type=1400 audit(400.480:23): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 401.218129][ T31] audit: type=1400 audit(401.200:24): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=628 comm="kworker/u8:6" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 401.776770][ T112] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 120 seconds [ 401.776848][ T112] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 120 seconds [ 401.776905][ T112] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 120 seconds [ 401.776943][ T112] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 120 seconds [ 428.017915][ T31] audit: type=1400 audit(428.000:25): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 430.146012][ T31] audit: type=1400 audit(430.130:26): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 431.864015][ T112] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 150 seconds [ 431.864089][ T112] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 150 seconds [ 431.864120][ T112] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 150 seconds [ 431.864150][ T112] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 150 seconds [ 433.145930][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.875501][ T6142] udevd[6142]: worker [6691] /devices/virtual/block/nbd0 timeout; kill it [ 460.877771][ T6142] udevd[6142]: seq 16737 '/devices/virtual/block/nbd0' killed [ 461.942426][ T112] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 180 seconds [ 461.942503][ T112] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 180 seconds [ 461.942557][ T112] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 180 seconds [ 461.942587][ T112] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 180 seconds [ 484.338331][ T31] audit: type=1400 audit(484.320:27): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 487.490261][ T31] audit: type=1400 audit(487.470:28): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 492.025759][ T112] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 210 seconds [ 492.025837][ T112] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 210 seconds [ 492.025897][ T112] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 210 seconds [ 492.025934][ T112] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 210 seconds [ 494.575964][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.102516][ T112] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 240 seconds [ 522.102593][ T112] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 240 seconds [ 522.102624][ T112] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 240 seconds [ 522.102654][ T112] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 240 seconds [ 552.182510][ T112] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 270 seconds [ 552.182585][ T112] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 270 seconds [ 552.182616][ T112] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 270 seconds [ 552.182646][ T112] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 270 seconds [ 556.015990][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.255742][ T112] block nbd0: Possible stuck request 000000007674fdd1: control (read@0,1024B). Runtime 300 seconds [ 582.255821][ T112] block nbd0: Possible stuck request 00000000812ca055: control (read@1024,1024B). Runtime 300 seconds [ 582.255853][ T112] block nbd0: Possible stuck request 00000000b2b632fd: control (read@2048,1024B). Runtime 300 seconds [ 582.255883][ T112] block nbd0: Possible stuck request 00000000da2736b4: control (read@3072,1024B). Runtime 300 seconds [ 596.978024][ T31] audit: type=1400 audit(596.960:29): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=626 comm="kworker/u8:5" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 602.178037][ T31] audit: type=1400 audit(602.160:30): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.95 dest=51308 netif=enp0s0 [ 610.415723][ T32] INFO: task udevd:6691 blocked for more than 143 seconds. [ 610.418046][ T32] Not tainted 6.16.0-rc7-syzkaller-gce5c617ec2d0 #0 [ 610.418110][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 610.418135][ T32] task:udevd state:D stack:0 pid:6691 tgid:6691 ppid:6142 task_flags:0x400140 flags:0x00000019 [ 610.418183][ T32] Call trace: [ 610.418214][ T32] __switch_to+0x418/0x87c (T) [ 610.418253][ T32] __schedule+0x141c/0x2a14 [ 610.418284][ T32] schedule+0xb4/0x230 [ 610.418315][ T32] io_schedule+0x84/0xf0 [ 610.418345][ T32] folio_wait_bit_common+0x56c/0x9e0 [ 610.418377][ T32] do_read_cache_folio+0x23c/0x5bc [ 610.418406][ T32] read_cache_folio+0x68/0x88 [ 610.418435][ T32] read_part_sector+0xcc/0x6fc [ 610.418468][ T32] adfspart_check_POWERTEC+0x90/0xd5c [ 610.418499][ T32] bdev_disk_changed+0x674/0x11fc [ 610.418530][ T32] blkdev_get_whole+0x2b0/0x4a4 [ 610.418562][ T32] bdev_open+0x3b0/0xc20 [ 610.418593][ T32] blkdev_open+0x300/0x440 [ 610.418624][ T32] do_dentry_open+0xb7c/0x1544 [ 610.418655][ T32] vfs_open+0x44/0x2d4 [ 610.418691][ T32] path_openat+0x2424/0x2c40 [ 610.418720][ T32] do_filp_open+0x18c/0x36c [ 610.418748][ T32] do_sys_openat2+0x11c/0x1b4 [ 610.418778][ T32] __arm64_sys_openat+0x120/0x158 [ 610.418808][ T32] invoke_syscall+0x98/0x2b8 [ 610.418837][ T32] el0_svc_common+0x130/0x23c [ 610.418865][ T32] do_el0_svc+0x48/0x58 [ 610.418893][ T32] el0_svc+0x58/0x180 [ 610.418921][ T32] el0t_64_sync_handler+0x84/0x12c [ 610.418950][ T32] el0t_64_sync+0x198/0x19c [ 610.419005][ T32] [ 610.419005][ T32] Showing all locks held in the system: [ 610.419031][ T32] 2 locks held by kworker/u8:0/12: [ 610.419058][ T32] 1 lock held by khungtaskd/32: [ 610.419081][ T32] #0: ffff80008f869980 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 610.419213][ T32] 2 locks held by getty/6293: [ 610.419238][ T32] #0: ffff0000d2b730a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 610.419339][ T32] #1: ffff80009ba3e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 [ 610.419450][ T32] 1 lock held by udevd/6691: [ 610.419474][ T32] #0: ffff0000ca0ea358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xcc/0xc20 [ 610.419579][ T32] [ 610.419600][ T32] ============================================= [ 610.419600][ T32] [ 610.419623][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 610.485331][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-gce5c617ec2d0 #0 PREEMPT [ 610.488460][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 610.491410][ T32] Call trace: [ 610.492421][ T32] show_stack+0x2c/0x3c (C) [ 610.493707][ T32] __dump_stack+0x30/0x40 [ 610.495015][ T32] dump_stack_lvl+0x30/0x12c [ 610.496393][ T32] dump_stack+0x1c/0x28 [ 610.497700][ T32] panic+0x2bc/0x7ac [ 610.498943][ T32] hung_task_panic+0x0/0x2c [ 610.500308][ T32] kthread+0x5fc/0x75c [ 610.501489][ T32] ret_from_fork+0x10/0x20 [ 610.502827][ T32] SMP: stopping secondary CPUs [ 610.504286][ T32] Kernel Offset: disabled [ 610.505584][ T32] CPU features: 0x10000,00040e00,040008a1,04017203 [ 610.507484][ T32] Memory Limit: none [ 611.119132][ T32] Rebooting in 86400 seconds..