last executing test programs: 11m53.091510563s ago: executing program 1 (id=2074): socket(0x1d, 0x2, 0x6) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x24004040}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x40}}], 0x2, 0x40015) 11m52.832827805s ago: executing program 1 (id=2075): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 11m51.791145062s ago: executing program 3 (id=2083): socket(0x1d, 0x2, 0x6) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x24004040}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x40}}], 0x2, 0x40015) 11m51.504495282s ago: executing program 3 (id=2087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @broadcast}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x9d}}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 11m50.811709237s ago: executing program 3 (id=2090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) 11m50.183070488s ago: executing program 3 (id=2095): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05042dbd7000fedbdf250100000008000100", @ANYBLOB="440002"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 11m49.993488787s ago: executing program 3 (id=2098): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000002940)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000014c0)=')O', 0x2}], 0x1}, 0x0) 11m49.835562465s ago: executing program 3 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x181700, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 11m49.589886044s ago: executing program 1 (id=2102): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(0x0, r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 11m49.331085526s ago: executing program 1 (id=2104): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa81", 0x4}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda924", 0x28}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m47.920953287s ago: executing program 1 (id=2108): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ff", 0x7) 11m47.710763974s ago: executing program 1 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000400)=@ctrl_frame=@bar={{}, {0x4}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x8, {0xf, 0x5}, "e2f842faf0c703ba"}]}}, 0x1e) 11m46.307077947s ago: executing program 0 (id=2116): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) 11m46.162657019s ago: executing program 0 (id=2117): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68", 0x4f, 0x5, 0xff}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217", 0xa0}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(0x0, 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m46.088988516s ago: executing program 2 (id=2118): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) 11m45.983065705s ago: executing program 0 (id=2119): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ff", 0x7) 11m45.904579937s ago: executing program 2 (id=2120): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11m45.744813003s ago: executing program 0 (id=2121): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x50, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f47e29853ca1b0a61fe01e5f14b81270"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x4000084) 11m45.738355488s ago: executing program 2 (id=2122): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(0x0, r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 11m45.480441935s ago: executing program 0 (id=2123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) 11m45.414414053s ago: executing program 2 (id=2124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80), 0x0, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 11m45.389864419s ago: executing program 0 (id=2125): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 11m45.117268993s ago: executing program 2 (id=2126): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) 11m43.999060687s ago: executing program 2 (id=2127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 11m34.571950347s ago: executing program 32 (id=2100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x181700, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 11m32.627252535s ago: executing program 33 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000400)=@ctrl_frame=@bar={{}, {0x4}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x8, {0xf, 0x5}, "e2f842faf0c703ba"}]}}, 0x1e) 11m29.616907196s ago: executing program 34 (id=2125): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 11m28.131100283s ago: executing program 35 (id=2127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 4.414524081s ago: executing program 5 (id=5656): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000001100), 0x0, 0x4010) 3.211012785s ago: executing program 5 (id=5671): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 2.826030908s ago: executing program 5 (id=5679): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 1.726713229s ago: executing program 5 (id=5695): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x2000001c}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 1.183104315s ago: executing program 4 (id=5705): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = dup2(r0, r1) read$watch_queue(r2, &(0x7f0000001c80)=""/187, 0xbb) 1.06257296s ago: executing program 6 (id=5706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252500000008000200", @ANYRES32, @ANYBLOB="05002b000000000005002a"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x800) 1.062149473s ago: executing program 7 (id=5707): recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0, 0xfe, "0062baad630400"}) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 1.001751706s ago: executing program 4 (id=5708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000", @ANYBLOB="cd3e0000000002000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcb"], 0x114}}, 0x0) 917.947524ms ago: executing program 6 (id=5709): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) kernel console output (not intermixed with test programs): 550.901304][T11256] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 550.989371][T11256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.028363][T11256] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 551.091888][T11256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.131130][T11256] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 551.214684][T11256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.239239][T11256] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 551.275754][T11256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.626207][T11266] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 551.695506][T11266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.710528][T11266] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 551.754177][T11266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.796646][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 551.804542][T11266] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 551.835622][T11266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.854825][T11266] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 551.890639][T11266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.196691][T11249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 552.251229][T11249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.288689][T11256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.333015][T11249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 552.398779][T11249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 552.420592][T11249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 552.457204][T11249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 552.502302][T11249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 552.543941][T11249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 552.806946][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 552.903221][T11256] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.012847][T11261] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.052628][T11261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 553.067548][T11261] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 553.127879][T11261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.149569][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.149795][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.181121][T11261] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 553.225496][T11261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.237563][T11261] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 553.273442][T11261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.322610][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.322818][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.625686][T11266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.758473][T11266] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.861563][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.885450][T10394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.911497][T11249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.970559][T10396] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.973695][T10396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.131867][T11249] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.395979][ T1201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.525563][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.525810][T10394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.672526][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.672699][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.703196][T11261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.894396][ T1201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.214419][T11261] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.424524][ T1201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.540221][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.540392][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.603406][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.603730][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.828425][ T1201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.909654][T11256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.413895][T11266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.985064][ T1201] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.059767][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 558.144764][T11249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.225965][T11256] veth0_vlan: entered promiscuous mode [ 558.373559][T11256] veth1_vlan: entered promiscuous mode [ 558.545540][T11261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.813219][ T1201] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.335038][ T1201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.526069][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 559.613988][T11256] veth0_macvtap: entered promiscuous mode [ 559.801179][ T1201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.870323][T11256] veth1_macvtap: entered promiscuous mode [ 559.969063][T11266] veth0_vlan: entered promiscuous mode [ 560.084803][T11256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.110051][T11266] veth1_vlan: entered promiscuous mode [ 560.215659][T11256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.369794][T11249] veth0_vlan: entered promiscuous mode [ 560.555014][T10394] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.568130][T10394] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.607577][ T181] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.618253][T11261] veth0_vlan: entered promiscuous mode [ 560.651547][ T181] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.860537][T11249] veth1_vlan: entered promiscuous mode [ 561.033866][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 561.056890][T11261] veth1_vlan: entered promiscuous mode [ 561.388042][ T1201] bridge_slave_1: left allmulticast mode [ 561.388083][ T1201] bridge_slave_1: left promiscuous mode [ 561.401051][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.528688][ T1201] bridge_slave_0: left allmulticast mode [ 561.528717][ T1201] bridge_slave_0: left promiscuous mode [ 561.528988][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.747889][ T1201] bridge_slave_1: left allmulticast mode [ 561.747938][ T1201] bridge_slave_1: left promiscuous mode [ 561.748140][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.849589][ T1201] bridge_slave_0: left allmulticast mode [ 561.849629][ T1201] bridge_slave_0: left promiscuous mode [ 561.849906][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.828156][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.888584][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.929956][ T1201] bond0 (unregistering): Released all slaves [ 563.074889][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.074975][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.497959][ T1201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.579690][ T1201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.599885][ T1201] bond0 (unregistering): Released all slaves [ 563.653900][T11266] veth0_macvtap: entered promiscuous mode [ 563.821517][T11266] veth1_macvtap: entered promiscuous mode [ 564.008605][ T1201] tipc: Left network mode [ 564.196186][T11249] veth0_macvtap: entered promiscuous mode [ 564.249856][T11266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.251144][T11261] veth0_macvtap: entered promiscuous mode [ 564.274871][T10396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.274893][T10396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.319799][ T1201] tipc: Left network mode [ 564.371070][T11249] veth1_macvtap: entered promiscuous mode [ 564.395180][T11261] veth1_macvtap: entered promiscuous mode [ 564.555789][T11266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.643139][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.643163][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.782349][T10394] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.796421][T10394] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.821234][T10396] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.966093][T10396] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.314701][T11249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.330233][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 565.451750][T11261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.565518][T11249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.768446][T11261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.792047][ T1176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.801367][ T1176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.803470][ T1176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.874518][ T1176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.467297][ T5345] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 566.675834][ T5345] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 566.675894][ T5345] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.675937][ T5345] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 566.675955][ T5345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.727647][ T5345] usbtmc 6-1:16.0: bulk endpoints not found [ 566.749450][ T181] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.775661][ T181] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.818876][ T181] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.895390][ T181] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.037554][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.037574][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.538101][T10396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.538121][T10396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.107204][ T5953] usb 6-1: USB disconnect, device number 2 [ 569.440242][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.440265][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.674463][ T1201] hsr_slave_0: left promiscuous mode [ 569.706585][ T1201] hsr_slave_1: left promiscuous mode [ 569.710094][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.710123][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.769972][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.770003][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.082694][ T1201] hsr_slave_0: left promiscuous mode [ 570.137623][ T1201] hsr_slave_1: left promiscuous mode [ 570.138793][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.138819][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.226320][ T1201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.226353][ T1201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.570277][ T1201] veth1_macvtap: left promiscuous mode [ 570.570363][ T1201] veth0_macvtap: left promiscuous mode [ 570.570620][ T1201] veth1_vlan: left promiscuous mode [ 570.570753][ T1201] veth0_vlan: left promiscuous mode [ 570.644534][T11556] syz.5.2135 (11556): drop_caches: 2 [ 570.749345][ T1201] veth1_macvtap: left promiscuous mode [ 570.749457][ T1201] veth0_macvtap: left promiscuous mode [ 570.749750][ T1201] veth1_vlan: left promiscuous mode [ 570.749950][ T1201] veth0_vlan: left promiscuous mode [ 571.847947][ T1201] team0 (unregistering): Port device team_slave_1 removed [ 571.898454][ T1201] team0 (unregistering): Port device team_slave_0 removed [ 572.611477][ T1201] team0 (unregistering): Port device team_slave_1 removed [ 572.668808][ T1201] team0 (unregistering): Port device team_slave_0 removed [ 572.949064][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 573.096634][T10396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.096657][T10396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.235429][T10390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.235452][T10390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.664027][T11577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.749019][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.749040][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.153333][T11610] binder: BINDER_SET_CONTEXT_MGR already set [ 575.153351][T11610] binder: 11608:11610 ioctl 4018620d 200000004a80 returned -16 [ 575.309090][T11615] binder_alloc: 11612: binder_alloc_buf, no vma [ 576.951709][T11637] netlink: 'syz.4.2147': attribute type 24 has an invalid length. [ 578.537498][T11679] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 581.346242][T11759] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.866521][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 583.850959][T11811] batadv_slave_0: entered promiscuous mode [ 583.853501][T11811] batadv_slave_0: left promiscuous mode [ 584.952299][T11806] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.059415][T11841] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2193'. [ 585.155238][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 585.752094][T11806] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.469967][T11806] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.510256][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 586.944852][T11806] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.245961][T11893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2202'. [ 587.756454][ T5272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 587.766475][ T1176] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.966624][ T1201] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.177909][ T1201] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.352052][ T1201] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.941713][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2212'. [ 589.711057][T11956] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 589.755105][T11956] overlayfs: overlapping lowerdir path [ 591.055197][T11986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.175304][T11990] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 591.730745][T11999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.638133][ T32] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 592.790172][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 592.790787][ T32] usb 5-1: not running at top speed; connect to a high speed hub [ 592.792031][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 592.794637][ T32] usb 5-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 592.794665][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.794689][ T32] usb 5-1: Product: syz [ 592.794700][ T32] usb 5-1: Manufacturer: syz [ 592.794711][ T32] usb 5-1: SerialNumber: syz [ 592.857626][T12012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 593.126866][T12012] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 593.290125][ T32] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 593.290258][ T32] usb 5-1: MIDIStreaming interface descriptor not found [ 593.404293][T12025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.481157][ T32] usb 5-1: USB disconnect, device number 2 [ 593.804277][T12033] udevd[12033]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.850625][T12028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.673559][T12045] nbd5: detected capacity change from 0 to 63 [ 594.733630][T12046] block nbd5: NBD_DISCONNECT [ 594.881292][T12046] block nbd5: Disconnected due to user request. [ 594.884146][T12027] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.884451][T12027] Buffer I/O error on dev nbd5, logical block 1, async page read [ 594.884877][T12027] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.884906][T12027] Buffer I/O error on dev nbd5, logical block 2, async page read [ 594.885056][T12027] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.885082][T12027] Buffer I/O error on dev nbd5, logical block 3, async page read [ 594.885390][T12046] block nbd5: shutting down sockets [ 594.978864][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.978904][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 595.004644][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 595.004726][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 595.005481][ T11] Buffer I/O error on dev nbd5, logical block 1, async page read [ 595.005641][ T11] Buffer I/O error on dev nbd5, logical block 2, async page read [ 595.005801][ T11] Buffer I/O error on dev nbd5, logical block 3, async page read [ 595.068912][T12027] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.068939][T12027] Buffer I/O error on dev nbd5, logical block 0, async page read [ 595.069054][T12027] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.069073][T12027] Buffer I/O error on dev nbd5, logical block 1, async page read [ 595.069174][T12027] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.069280][T12027] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.069412][T12027] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.152472][T12027] ldm_validate_partition_table(): Disk read failed. [ 595.156026][T12027] Dev nbd5: unable to read RDB block 0 [ 595.189868][T12027] nbd5: unable to read partition table [ 595.555167][T12027] ldm_validate_partition_table(): Disk read failed. [ 595.583536][T12027] Dev nbd5: unable to read RDB block 0 [ 595.596973][T12027] nbd5: unable to read partition table [ 596.243775][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.387281][ T32] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 596.542074][ T32] usb 7-1: unable to get BOS descriptor or descriptor too short [ 596.542717][ T32] usb 7-1: not running at top speed; connect to a high speed hub [ 596.544122][ T32] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 596.546886][ T32] usb 7-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 596.546917][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.546941][ T32] usb 7-1: Product: syz [ 596.546957][ T32] usb 7-1: Manufacturer: syz [ 596.546974][ T32] usb 7-1: SerialNumber: syz [ 596.624284][T12077] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 597.279475][ T32] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.279556][ T32] usb 7-1: MIDIStreaming interface descriptor not found [ 597.634660][ T32] usb 7-1: USB disconnect, device number 2 [ 597.919973][T12105] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 597.920297][T12105] overlayfs: overlapping lowerdir path [ 597.976834][T12034] udevd[12034]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.561132][T12118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.326126][T12131] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 599.326724][T12131] overlayfs: overlapping lowerdir path [ 599.528263][T11598] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 599.679935][T11598] usb 8-1: unable to get BOS descriptor or descriptor too short [ 599.680549][T11598] usb 8-1: not running at top speed; connect to a high speed hub [ 599.681862][T11598] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 599.686061][T11598] usb 8-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 599.686094][T11598] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.686115][T11598] usb 8-1: Product: syz [ 599.686129][T11598] usb 8-1: Manufacturer: syz [ 599.686149][T11598] usb 8-1: SerialNumber: syz [ 599.740827][T12129] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 600.165412][T11598] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.165470][T11598] usb 8-1: MIDIStreaming interface descriptor not found [ 600.620912][T11598] usb 8-1: USB disconnect, device number 2 [ 600.862917][T12160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.339431][T12175] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 601.339975][T12175] overlayfs: overlapping lowerdir path [ 602.078737][ T5704] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 602.232985][ T5704] usb 6-1: unable to get BOS descriptor or descriptor too short [ 602.234126][ T5704] usb 6-1: not running at top speed; connect to a high speed hub [ 602.256231][ T5704] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 602.297201][ T5704] usb 6-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 602.297233][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.297254][ T5704] usb 6-1: Product: syz [ 602.297269][ T5704] usb 6-1: Manufacturer: syz [ 602.297284][ T5704] usb 6-1: SerialNumber: syz [ 602.351656][T12191] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 602.903223][ T5704] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 602.906374][ T5704] usb 6-1: MIDIStreaming interface descriptor not found [ 603.222826][ T5704] usb 6-1: USB disconnect, device number 3 [ 603.489226][T12229] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 603.512598][T12229] overlayfs: overlapping lowerdir path [ 603.897606][T12235] block nbd7: NBD_DISCONNECT [ 604.677353][ T5704] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 604.843197][ T5704] usb 8-1: unable to get BOS descriptor or descriptor too short [ 604.843946][ T5704] usb 8-1: not running at top speed; connect to a high speed hub [ 604.845492][ T5704] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 604.859576][ T5704] usb 8-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 604.859626][ T5704] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.859649][ T5704] usb 8-1: Product: syz [ 604.859665][ T5704] usb 8-1: Manufacturer: syz [ 604.859682][ T5704] usb 8-1: SerialNumber: syz [ 604.968477][T12259] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 605.449877][ T5704] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 605.449937][ T5704] usb 8-1: MIDIStreaming interface descriptor not found [ 605.579224][T12284] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 605.579736][T12284] overlayfs: overlapping lowerdir path [ 605.918762][T12294] block nbd5: NBD_DISCONNECT [ 606.216151][ T5704] usb 8-1: USB disconnect, device number 3 [ 606.657592][T11548] udevd[11548]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.780214][T12322] batadv_slave_0: entered promiscuous mode [ 606.781170][T12320] batadv_slave_0: left promiscuous mode [ 607.007378][ T10] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 607.161363][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 607.162310][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 607.163526][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 607.210933][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 607.210975][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.210997][ T10] usb 7-1: Product: syz [ 607.211013][ T10] usb 7-1: Manufacturer: syz [ 607.211029][ T10] usb 7-1: SerialNumber: syz [ 607.285253][T12321] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 607.643371][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 607.643432][ T10] usb 7-1: MIDIStreaming interface descriptor not found [ 608.066002][T12352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.089460][ T10] usb 7-1: USB disconnect, device number 3 [ 608.482389][T11548] udevd[11548]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.630725][ T6292] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 608.784496][ T6292] usb 8-1: config index 0 descriptor too short (expected 141, got 72) [ 608.806802][ T6292] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 608.806836][ T6292] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.806860][ T6292] usb 8-1: Product: syz [ 608.806876][ T6292] usb 8-1: Manufacturer: syz [ 608.806893][ T6292] usb 8-1: SerialNumber: syz [ 608.865563][ T6292] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 608.986066][T12373] binder: BINDER_SET_CONTEXT_MGR already set [ 608.986082][T12373] binder: 12371:12373 ioctl 4018620d 200000004a80 returned -16 [ 609.077434][T11618] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 609.379637][ T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 609.592375][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 609.593127][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 609.594835][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 609.606384][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 609.606417][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.606439][ T10] usb 6-1: Product: syz [ 609.606455][ T10] usb 6-1: Manufacturer: syz [ 609.606471][ T10] usb 6-1: SerialNumber: syz [ 609.750817][T12376] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 610.473489][T11618] usb 8-1: Service connection timeout for: 256 [ 610.473532][T11618] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 610.502335][ T32] usb 8-1: USB disconnect, device number 4 [ 610.725065][T11618] ath9k_htc: Failed to initialize the device [ 610.740084][ T32] usb 8-1: ath9k_htc: USB layer deinitialized [ 610.785170][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 610.785224][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 610.975533][T12373] syz.4.2331 (12373): drop_caches: 2 [ 611.001658][ T10] usb 6-1: USB disconnect, device number 4 [ 611.127887][T11548] udevd[11548]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.444515][T12388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.227273][T11618] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 612.391665][T11618] usb 8-1: unable to get BOS descriptor or descriptor too short [ 612.393378][T11618] usb 8-1: not running at top speed; connect to a high speed hub [ 612.394826][T11618] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 612.425155][T11618] usb 8-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 612.425188][T11618] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.425203][T11618] usb 8-1: Product: syz [ 612.425214][T11618] usb 8-1: Manufacturer: syz [ 612.425225][T11618] usb 8-1: SerialNumber: syz [ 612.463929][T12409] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 612.853769][T11618] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.853813][T11618] usb 8-1: MIDIStreaming interface descriptor not found [ 613.017482][T11618] usb 8-1: USB disconnect, device number 5 [ 613.141745][T12027] udevd[12027]: setting mode of /dev/bus/usb/008/005 to 020664 failed: No such file or directory [ 613.141913][T12027] udevd[12027]: setting owner of /dev/bus/usb/008/005 to uid=0, gid=0 failed: No such file or directory [ 613.218708][T11548] udevd[11548]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.466157][T12434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.807366][ T823] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 614.973683][T12464] overlayfs: missing 'lowerdir' [ 615.007325][ T823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 615.012522][ T823] usb 6-1: not running at top speed; connect to a high speed hub [ 615.014881][ T823] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 615.054498][ T823] usb 6-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 615.054531][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.054554][ T823] usb 6-1: Product: syz [ 615.054566][ T823] usb 6-1: Manufacturer: syz [ 615.054576][ T823] usb 6-1: SerialNumber: syz [ 615.115820][T12458] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 615.202836][T12466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.529605][ T823] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.529675][ T823] usb 6-1: MIDIStreaming interface descriptor not found [ 615.667963][ T823] usb 6-1: USB disconnect, device number 5 [ 615.909747][T12475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.182063][T12484] overlayfs: missing 'lowerdir' [ 616.394383][T12485] nbd4: detected capacity change from 0 to 63 [ 616.407789][ T5626] block nbd4: Receive control failed (result -104) [ 616.717392][T12500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.257427][ T32] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 617.413587][ T32] usb 7-1: unable to get BOS descriptor or descriptor too short [ 617.415258][ T32] usb 7-1: not running at top speed; connect to a high speed hub [ 617.416544][ T32] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 617.486899][ T32] usb 7-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 617.486933][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.486956][ T32] usb 7-1: Product: syz [ 617.486972][ T32] usb 7-1: Manufacturer: syz [ 617.486988][ T32] usb 7-1: SerialNumber: syz [ 617.544562][T12506] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 617.887640][T12517] nbd: nbd4 already in use [ 617.997625][ T32] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 617.997683][ T32] usb 7-1: MIDIStreaming interface descriptor not found [ 618.165274][ T32] usb 7-1: USB disconnect, device number 4 [ 618.305440][T12034] udevd[12034]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.374822][T12525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.623922][T12530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.022243][T12540] nbd: nbd4 already in use [ 620.331530][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.701834][T12570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.423219][T12603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.562864][ T32] wlan1: No legacy rates in association response [ 622.563791][T12604] wlan1: No legacy rates in association response [ 622.704531][T12606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.423855][T12610] nbd0: detected capacity change from 0 to 63 [ 623.450173][ T5626] block nbd0: Receive control failed (result -32) [ 623.480632][T12027] block nbd0: Send control failed (result -32) [ 623.480812][T12027] block nbd0: Request send failed, requeueing [ 623.590852][ T99] block nbd0: Dead connection, failed to find a fallback [ 623.590880][ T99] block nbd0: shutting down sockets [ 623.590897][ T99] blk_print_req_error: 135 callbacks suppressed [ 623.590911][ T99] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.590940][ T99] buffer_io_error: 138 callbacks suppressed [ 623.590953][ T99] Buffer I/O error on dev nbd0, logical block 0, async page read [ 623.594238][T12027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.594272][T12027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 623.594452][T12027] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.594479][T12027] Buffer I/O error on dev nbd0, logical block 2, async page read [ 623.594630][T12027] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.594656][T12027] Buffer I/O error on dev nbd0, logical block 3, async page read [ 623.594835][T12027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.594862][T12027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 623.595024][T12027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.595050][T12027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 623.595198][T12027] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.595223][T12027] Buffer I/O error on dev nbd0, logical block 2, async page read [ 623.595365][T12027] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.595389][T12027] Buffer I/O error on dev nbd0, logical block 3, async page read [ 623.595540][T12027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.595564][T12027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 623.595741][T12027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 623.595774][T12027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 623.885102][T12027] ldm_validate_partition_table(): Disk read failed. [ 623.907606][T12027] Dev nbd0: unable to read RDB block 0 [ 623.934559][T12027] nbd0: unable to read partition table [ 624.019632][T12027] ldm_validate_partition_table(): Disk read failed. [ 624.096230][T12027] Dev nbd0: unable to read RDB block 0 [ 624.113477][T12027] nbd0: unable to read partition table [ 624.496090][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.496200][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.892125][T12631] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.273843][T12638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.602022][T12631] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.620497][T12645] nbd: must specify at least one socket [ 626.213570][T12631] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.668253][T12631] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.203325][ T145] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.242062][ T1201] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.290879][ T1201] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.340622][ T1201] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.175372][T12681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.238797][T12681] wlan1: No legacy rates in association response [ 628.373305][T12685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.444692][T12693] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.522019][T12732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.960222][T12693] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.378746][T12693] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.826286][T12742] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.194122][T12742] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.359432][ T1201] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.681541][T12742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.727819][ T1176] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.853910][ T39] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.937567][ T1201] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.196877][T12763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.221059][T12742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.909285][ T1192] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.105908][T12774] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.166684][ T1176] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.239343][ T1176] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.282759][ T1176] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.373594][T12774] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.834574][T12774] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.041588][T12774] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.361824][T12796] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.434507][ T1192] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.473197][ T1192] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.496805][ T39] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.646891][ T1201] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.746273][T12796] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.901207][T12798] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.977557][T12803] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2484'. [ 636.263489][T12796] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.340753][T12798] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.761379][T12798] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.891172][T12796] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.015988][T12798] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.312327][ T1192] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.363865][ T39] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.366832][ T39] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.421047][ T39] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.421369][ T39] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.483866][ T39] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.484078][ T39] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.553449][ T1201] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.691508][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2494'. [ 639.064056][T12844] block nbd4: NBD_DISCONNECT [ 639.064086][T12844] block nbd4: Send disconnect failed -32 [ 639.064108][T12844] block nbd4: shutting down sockets [ 639.128199][ C1] blk_print_req_error: 138 callbacks suppressed [ 639.128216][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.128237][ C1] buffer_io_error: 138 callbacks suppressed [ 639.128246][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 639.128456][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.128498][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 639.128553][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.128577][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 639.128622][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.128638][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 639.273702][T12486] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.273730][T12486] Buffer I/O error on dev nbd4, logical block 0, async page read [ 639.273848][T12486] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.273866][T12486] Buffer I/O error on dev nbd4, logical block 1, async page read [ 639.273965][T12486] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.273983][T12486] Buffer I/O error on dev nbd4, logical block 2, async page read [ 639.274120][T12486] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.274147][T12486] Buffer I/O error on dev nbd4, logical block 3, async page read [ 639.274287][T12486] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.274306][T12486] Buffer I/O error on dev nbd4, logical block 0, async page read [ 639.274404][T12486] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.274422][T12486] Buffer I/O error on dev nbd4, logical block 1, async page read [ 639.297877][T12486] ldm_validate_partition_table(): Disk read failed. [ 639.319920][T12486] Dev nbd4: unable to read RDB block 0 [ 639.362699][T12486] nbd4: unable to read partition table [ 639.430517][T12486] ldm_validate_partition_table(): Disk read failed. [ 639.492255][T12486] Dev nbd4: unable to read RDB block 0 [ 639.506560][T12486] nbd4: unable to read partition table [ 640.079456][T12860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.099789][T12854] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.298700][T12854] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.688212][T12854] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.003756][T12854] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.090647][T12882] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2513'. [ 641.386869][ T145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.434463][T10396] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.536676][T10396] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.536732][T10396] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.754723][T12895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.946226][T12898] netlink: 'syz.7.2521': attribute type 25 has an invalid length. [ 642.350486][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2526'. [ 642.858674][T12928] netlink: 'syz.4.2534': attribute type 25 has an invalid length. [ 643.290457][T12933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.587470][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 644.522395][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 644.736885][T12974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.403569][T13011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.420063][T13011] wlan1: No legacy rates in association response [ 648.288789][T13043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.295669][T13043] wlan1: No legacy rates in association response [ 650.557648][T13084] nbd: must specify an index to disconnect [ 651.483714][T13104] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2599'. [ 651.781157][T13111] fuse: Unknown parameter 'user_i00000000000000000000' [ 653.674689][T13151] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.833106][T13151] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.052654][T13151] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.240343][T13157] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.382600][T13151] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.677795][T13157] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.930042][T13157] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.987926][T11649] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 655.066230][ T145] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.096482][ T39] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.122454][ T1201] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.157710][T11649] usb 7-1: Using ep0 maxpacket: 32 [ 655.159767][T11649] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 655.159801][T11649] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 655.159830][T11649] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 655.159872][T11649] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 655.159901][T11649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.165118][T11649] usb 7-1: config 0 descriptor?? [ 655.167699][T13165] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 655.337335][T11649] hub 7-1:0.0: USB hub found [ 655.343307][T13157] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.400360][T11649] hub 7-1:0.0: 2 ports detected [ 655.429986][ T1201] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.672514][T13174] nbd: must specify at least one socket [ 655.851070][ T145] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.002768][ T145] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.036827][ T3320] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.079156][ T3320] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.978555][T11649] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 657.047296][T11618] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 657.053902][ T5705] usb 7-1: USB disconnect, device number 5 [ 657.054164][T11618] hub 7-1:0.0: set hub depth failed [ 657.160580][T11649] usb 5-1: Using ep0 maxpacket: 16 [ 657.172704][T11649] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 657.172738][T11649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.172760][T11649] usb 5-1: Product: syz [ 657.172776][T11649] usb 5-1: Manufacturer: syz [ 657.172792][T11649] usb 5-1: SerialNumber: syz [ 657.367290][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 657.392494][T13166] Bluetooth: hci2: command 0x0406 tx timeout [ 657.604032][ T5705] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 657.777203][ T5705] usb 7-1: Using ep0 maxpacket: 32 [ 657.779674][ T5705] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 657.779720][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 657.779750][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 657.779795][ T5705] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 657.779819][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.805398][ T5705] usb 7-1: config 0 descriptor?? [ 657.807398][T13165] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 657.855566][ T5705] hub 7-1:0.0: USB hub found [ 658.052326][ T5705] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 658.077388][ T5705] usbhid 7-1:0.0: can't add hid device: -71 [ 658.077512][ T5705] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 658.117880][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2635'. [ 658.163257][ T5705] usb 7-1: USB disconnect, device number 6 [ 658.331933][T13204] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2636'. [ 658.763499][T11649] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 658.787334][T11649] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 658.787986][T11649] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 658.788188][T11649] usb 5-1: media controller created [ 658.839463][T11649] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 658.927714][T11649] zl10353_read_register: readreg error (reg=127, ret==-71) [ 659.012968][T11649] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 659.031150][T11649] usb 5-1: USB disconnect, device number 3 [ 659.465931][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2645'. [ 659.514166][T13229] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2646'. [ 659.580768][T11649] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 659.761916][T11649] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.761947][T11649] usb 7-1: config 0 has no interfaces? [ 659.761979][T11649] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 659.762006][T11649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.825994][T11649] usb 7-1: config 0 descriptor?? [ 660.042384][ T10] usb 7-1: USB disconnect, device number 7 [ 660.517294][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 660.667283][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 660.669593][ T10] usb 7-1: config 0 has an invalid interface number: 61 but max is 1 [ 660.669623][ T10] usb 7-1: config 0 has an invalid interface number: 98 but max is 1 [ 660.669643][ T10] usb 7-1: config 0 has no interface number 0 [ 660.669660][ T10] usb 7-1: config 0 has no interface number 1 [ 660.672051][ T10] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 660.672081][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.672101][ T10] usb 7-1: Product: syz [ 660.672120][ T10] usb 7-1: Manufacturer: syz [ 660.672131][ T10] usb 7-1: SerialNumber: syz [ 660.676910][ T10] usb 7-1: config 0 descriptor?? [ 660.837978][T13252] fuse: Bad value for 'fd' [ 660.873551][ T10] viperboard 7-1:0.61: version 0.00 found at bus 007 address 008 [ 661.295476][ T10] viperboard 7-1:0.98: version 0.00 found at bus 007 address 008 [ 661.330403][ T10] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 661.330436][ T10] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 661.382435][ T10] usb 7-1: USB disconnect, device number 8 [ 662.020397][T13269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.413009][ T5621] Bluetooth: hci6: command 0x0406 tx timeout [ 662.414107][T13195] Bluetooth: hci0: command 0x0406 tx timeout [ 663.727184][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 663.881669][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 663.882307][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 663.884615][ T10] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 663.884653][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 663.926590][ T10] usb 5-1: string descriptor 0 read error: -22 [ 663.926741][ T10] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 663.926768][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.960199][T13301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 664.389033][T13301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.390945][T13301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.418374][T13301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.419014][T13301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.477482][T11649] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 664.629566][T11649] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.629598][T11649] usb 6-1: config 0 has no interfaces? [ 664.629631][T11649] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 664.629657][T11649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.636093][T11649] usb 6-1: config 0 descriptor?? [ 664.685069][T13301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.688677][T13301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.711461][T13301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.713762][T13301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.748488][T13301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.789999][T13301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.839975][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.840001][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.840438][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.840469][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.840497][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.840526][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.840552][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.840577][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.840601][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.840627][ T10] acrux 0003:1A34:F705.0008: unknown main item tag 0x0 [ 664.915474][T11618] usb 6-1: USB disconnect, device number 6 [ 664.983381][ T10] acrux 0003:1A34:F705.0008: hidraw0: USB HID v0.07 Device [HID 1a34:f705] on usb-dummy_hcd.4-1/input0 [ 664.983421][ T10] acrux 0003:1A34:F705.0008: no inputs found [ 664.983438][ T10] acrux 0003:1A34:F705.0008: Failed to enable force feedback support, error: -19 [ 665.054115][ T10] usb 5-1: USB disconnect, device number 4 [ 665.101132][T13316] fido_id[13316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 665.377162][T11618] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 665.557135][T11618] usb 6-1: Using ep0 maxpacket: 32 [ 665.559819][T11618] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 665.559849][T11618] usb 6-1: config 0 has an invalid interface number: 98 but max is 1 [ 665.559872][T11618] usb 6-1: config 0 has no interface number 0 [ 665.559890][T11618] usb 6-1: config 0 has no interface number 1 [ 665.563674][T11618] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 665.563705][T11618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.563729][T11618] usb 6-1: Product: syz [ 665.563745][T11618] usb 6-1: Manufacturer: syz [ 665.563761][T11618] usb 6-1: SerialNumber: syz [ 665.646234][T11618] usb 6-1: config 0 descriptor?? [ 665.758411][T11618] viperboard 6-1:0.61: version 0.00 found at bus 006 address 007 [ 665.842306][T11618] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 665.842341][T11618] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 665.878992][T11618] viperboard 6-1:0.98: version 0.00 found at bus 006 address 007 [ 666.317215][ T5705] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 666.468963][ T5705] usb 7-1: Using ep0 maxpacket: 32 [ 666.484891][ T5705] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 666.484928][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 666.484958][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 666.485006][ T5705] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 666.485031][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.535903][ T5705] usb 7-1: config 0 descriptor?? [ 666.539691][T13330] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 666.570214][ T5705] hub 7-1:0.0: USB hub found [ 666.964744][ T5705] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 667.182247][ T5705] usbhid 7-1:0.0: can't add hid device: -32 [ 667.182385][ T5705] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 667.238251][ T5705] usb 7-1: USB disconnect, device number 9 [ 667.280463][ T10] usb 6-1: USB disconnect, device number 7 [ 667.787212][ T5705] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 667.947289][ T5705] usb 7-1: Using ep0 maxpacket: 32 [ 667.952752][ T5705] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 667.952789][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 667.952821][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 667.952868][ T5705] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 667.952894][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.054268][ T5705] usb 7-1: config 0 descriptor?? [ 668.060423][T13330] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 668.115424][ T5705] hub 7-1:0.0: USB hub found [ 668.284738][ T5705] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 668.299696][ T5705] usbhid 7-1:0.0: can't add hid device: -71 [ 668.299828][ T5705] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 668.323894][ T5705] usb 7-1: USB disconnect, device number 10 [ 669.243490][T13384] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2705'. [ 669.722377][T13400] binder: 13399:13400 ioctl c0306201 0 returned -14 [ 670.077431][T13400] syz.4.2712 (13400): drop_caches: 2 [ 670.204584][T13400] syz.4.2712 (13400): drop_caches: 2 [ 672.453778][T13452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.475632][T13486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.151093][T13503] netlink: 'syz.6.2748': attribute type 25 has an invalid length. [ 675.647343][ T5705] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 675.797216][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 675.800148][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 675.805319][ T5705] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 675.805353][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 675.805377][ T5705] usb 5-1: Product: syz [ 675.805393][ T5705] usb 5-1: Manufacturer: syz [ 675.805410][ T5705] usb 5-1: SerialNumber: syz [ 675.845141][ T5705] usb 5-1: config 0 descriptor?? [ 675.850498][T13511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 675.879555][ T5705] hub 5-1:0.0: bad descriptor, ignoring hub [ 675.879597][ T5705] hub 5-1:0.0: probe with driver hub failed with error -5 [ 676.120052][T13522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.679336][T13536] fuse: Bad value for 'fd' [ 676.812671][ T5705] usb 5-1: USB disconnect, device number 5 [ 677.680992][T13560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.706029][ T5705] libceph: connect (1)[c::]:6789 error -101 [ 677.706187][ T5705] libceph: mon0 (1)[c::]:6789 connect error [ 677.957997][ T5705] libceph: connect (1)[c::]:6789 error -101 [ 677.958173][ T5705] libceph: mon0 (1)[c::]:6789 connect error [ 678.571307][T13561] ceph: No mds server is up or the cluster is laggy [ 678.596113][ T5345] libceph: connect (1)[c::]:6789 error -101 [ 678.596338][ T5345] libceph: mon0 (1)[c::]:6789 connect error [ 678.957307][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2773'. [ 679.760968][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2783'. [ 679.786767][T13597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.913861][T13602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.382888][T13632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.479178][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 681.479385][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 681.480578][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 681.488643][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 681.756728][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 681.756888][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 682.258169][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 682.258369][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 682.283924][T13636] ceph: No mds server is up or the cluster is laggy [ 683.532429][T13670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.353402][T13699] fuse: Bad value for 'group_id' [ 684.353417][T13699] fuse: Bad value for 'group_id' [ 684.423110][T13703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.339519][T13715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.437262][ T5705] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 685.613720][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 685.615972][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 685.633982][ T5705] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 685.634013][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 685.634035][ T5705] usb 5-1: Product: syz [ 685.634056][ T5705] usb 5-1: Manufacturer: syz [ 685.634067][ T5705] usb 5-1: SerialNumber: syz [ 685.646826][ T5705] usb 5-1: config 0 descriptor?? [ 685.675373][T13707] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 685.701033][ T5705] hub 5-1:0.0: bad descriptor, ignoring hub [ 685.701062][ T5705] hub 5-1:0.0: probe with driver hub failed with error -5 [ 685.941231][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.942403][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.074784][T13728] netlink: 'syz.5.2832': attribute type 25 has an invalid length. [ 686.227977][ T10] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 686.380702][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 686.381620][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 686.383722][ T10] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 686.383757][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 686.424100][ T10] usb 8-1: string descriptor 0 read error: -22 [ 686.424242][ T10] usb 8-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 686.424270][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.475989][T13725] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 686.900517][ T10] usbhid 8-1:1.0: can't add hid device: -32 [ 686.900658][ T10] usbhid 8-1:1.0: probe with driver usbhid failed with error -32 [ 686.941018][ T10] usb 8-1: USB disconnect, device number 6 [ 686.982276][T13747] netlink: 'syz.6.2841': attribute type 25 has an invalid length. [ 687.049869][T11649] usb 5-1: USB disconnect, device number 6 [ 687.881569][T13769] netlink: 'syz.6.2850': attribute type 25 has an invalid length. [ 688.235534][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 688.235746][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 688.251323][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 688.251536][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 688.507185][ T5705] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 688.538267][ T6292] libceph: connect (1)[c::]:6789 error -101 [ 688.538461][ T6292] libceph: mon0 (1)[c::]:6789 connect error [ 688.557513][ T823] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 688.657179][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 688.659743][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 688.662304][ T5705] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 688.662341][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 688.662357][ T5705] usb 5-1: Product: syz [ 688.662368][ T5705] usb 5-1: Manufacturer: syz [ 688.662381][ T5705] usb 5-1: SerialNumber: syz [ 688.668105][ T5705] usb 5-1: config 0 descriptor?? [ 688.705235][T13781] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 688.712195][ T5705] hub 5-1:0.0: bad descriptor, ignoring hub [ 688.712303][ T5705] hub 5-1:0.0: probe with driver hub failed with error -5 [ 688.747918][ T823] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 688.751172][ T823] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 688.751204][ T823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.751232][ T823] usb 7-1: Product: syz [ 688.751244][ T823] usb 7-1: Manufacturer: syz [ 688.751254][ T823] usb 7-1: SerialNumber: syz [ 688.970638][T13776] ceph: No mds server is up or the cluster is laggy [ 689.012387][ T823] usb 7-1: selecting invalid altsetting 1 [ 689.226724][ T823] LME2510(C): Firmware Status: 06 03 00 00 00 00 [ 689.226824][ T823] dvb_usb_lmedm04 7-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 689.423807][T11649] usb 7-1: USB disconnect, device number 11 [ 689.600451][T13796] netlink: 'syz.5.2861': attribute type 25 has an invalid length. [ 689.747321][T11618] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 689.917213][T11618] usb 8-1: Using ep0 maxpacket: 32 [ 689.919651][T11618] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 689.922282][T11618] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 689.922313][T11618] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 689.922337][T11618] usb 8-1: Product: syz [ 689.922353][T11618] usb 8-1: Manufacturer: syz [ 689.922369][T11618] usb 8-1: SerialNumber: syz [ 689.975270][T11618] usb 8-1: config 0 descriptor?? [ 689.977795][T13794] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 689.994351][T11618] hub 8-1:0.0: bad descriptor, ignoring hub [ 689.994393][T11618] hub 8-1:0.0: probe with driver hub failed with error -5 [ 690.025938][T11618] chaoskey 8-1:0.0: Unable to register with hwrng [ 690.113208][T13802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.007515][T11618] usb 8-1: USB disconnect, device number 7 [ 691.149324][T13820] netlink: 'syz.5.2870': attribute type 25 has an invalid length. [ 691.277606][T13822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 692.535339][ T6292] usb 5-1: USB disconnect, device number 7 [ 693.014971][T13844] netlink: 'syz.5.2879': attribute type 25 has an invalid length. [ 695.883481][T13902] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2899'. [ 696.005293][T13906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.527194][ T823] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 696.682661][ T823] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 696.685076][ T823] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 696.685108][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.685129][ T823] usb 5-1: Product: syz [ 696.685144][ T823] usb 5-1: Manufacturer: syz [ 696.685159][ T823] usb 5-1: SerialNumber: syz [ 696.787373][T13915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.961234][ T823] usb 5-1: selecting invalid altsetting 1 [ 697.057212][ T6292] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 697.162180][ T823] LME2510(C): Firmware Status: 06 03 00 00 00 00 [ 697.162268][ T823] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 697.212070][ T6292] usb 8-1: Using ep0 maxpacket: 32 [ 697.214129][ T6292] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 697.216963][ T6292] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 697.241637][ T6292] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 697.241671][ T6292] usb 8-1: Product: syz [ 697.241682][ T6292] usb 8-1: Manufacturer: syz [ 697.241693][ T6292] usb 8-1: SerialNumber: syz [ 697.246215][ T6292] usb 8-1: config 0 descriptor?? [ 697.248108][T13916] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 697.283214][ T6292] hub 8-1:0.0: bad descriptor, ignoring hub [ 697.283241][ T6292] hub 8-1:0.0: probe with driver hub failed with error -5 [ 697.376827][ T6292] usb 5-1: USB disconnect, device number 8 [ 698.243413][T13940] fuse: Bad value for 'fd' [ 698.253222][ T145] raw-gadget.1 gadget.7: failed to queue suspend event [ 698.318096][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 698.348189][ T181] raw-gadget.1 gadget.7: failed to queue suspend event [ 698.417327][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 698.444547][ T1201] raw-gadget.1 gadget.7: failed to queue suspend event [ 698.517626][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 698.560445][ T1201] raw-gadget.1 gadget.7: failed to queue suspend event [ 698.667470][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 698.690569][ T145] raw-gadget.1 gadget.7: failed to queue suspend event [ 698.757454][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 698.846244][ T181] raw-gadget.1 gadget.7: failed to queue suspend event [ 698.910134][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 698.941236][ T181] raw-gadget.1 gadget.7: failed to queue suspend event [ 699.007304][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 699.048596][ T1201] raw-gadget.1 gadget.7: failed to queue suspend event [ 699.117429][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 699.141137][ T1201] raw-gadget.1 gadget.7: failed to queue suspend event [ 699.158026][ T823] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 699.208544][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 699.240264][ T145] raw-gadget.1 gadget.7: failed to queue suspend event [ 699.310559][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 699.310735][ T823] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 699.335797][ T823] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 699.335820][ T823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.335836][ T823] usb 6-1: Product: syz [ 699.335846][ T823] usb 6-1: Manufacturer: syz [ 699.335857][ T823] usb 6-1: SerialNumber: syz [ 699.428290][ T145] raw-gadget.1 gadget.7: failed to queue suspend event [ 699.497501][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 699.530733][ T145] raw-gadget.1 gadget.7: failed to queue suspend event [ 699.586519][ T823] usb 6-1: selecting invalid altsetting 1 [ 699.597257][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 699.600014][T13971] fuse: fd is not a fuse device [ 699.674195][ T3408] raw-gadget.1 gadget.7: failed to queue suspend event [ 699.737303][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 699.759274][ T3408] raw-gadget.1 gadget.7: failed to queue suspend event [ 699.788562][ T823] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 699.788714][ T823] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 699.820952][T13973] fuse: fd is not a fuse device [ 699.851151][T13916] raw-gadget.1 gadget.7: failed to queue resume event [ 699.875594][ T3408] raw-gadget.1 gadget.7: failed to queue suspend event [ 699.915018][T13916] raw-gadget.1 gadget.7: failed to queue disconnect event [ 700.017939][ T6292] usb 8-1: USB disconnect, device number 8 [ 700.478918][T13995] fuse: Bad value for 'fd' [ 700.890762][ T5704] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 701.037361][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 701.049377][ T5704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 701.064407][ T5704] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 701.064441][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 701.064465][ T5704] usb 5-1: Product: syz [ 701.064481][ T5704] usb 5-1: Manufacturer: syz [ 701.064497][ T5704] usb 5-1: SerialNumber: syz [ 701.102609][ T5704] usb 5-1: config 0 descriptor?? [ 701.103812][T14001] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 701.123457][ T5704] hub 5-1:0.0: bad descriptor, ignoring hub [ 701.127683][ T5704] hub 5-1:0.0: probe with driver hub failed with error -5 [ 701.178883][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2948'. [ 701.965074][ T5705] usb 6-1: USB disconnect, device number 8 [ 702.042766][ T5704] usb 5-1: USB disconnect, device number 9 [ 702.096129][T14032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 702.282418][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2958'. [ 703.751020][T14076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.455731][T14109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.667650][T14135] fuse: Bad value for 'fd' [ 707.440725][T14159] fuse: Bad value for 'fd' [ 708.417141][T12096] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 708.472357][T14185] fuse: Bad value for 'fd' [ 708.581276][T12096] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 708.585721][T12096] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 708.585753][T12096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.585776][T12096] usb 5-1: Product: syz [ 708.585792][T12096] usb 5-1: Manufacturer: syz [ 708.585808][T12096] usb 5-1: SerialNumber: syz [ 708.599417][ T5705] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 708.748916][ T5705] usb 6-1: Using ep0 maxpacket: 32 [ 708.752293][ T5705] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.754124][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 708.754216][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.754289][ T5705] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 708.754357][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.800531][ T5705] usb 6-1: config 0 descriptor?? [ 708.811473][T14183] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 708.838584][ T5705] hub 6-1:0.0: USB hub found [ 708.904300][T12096] usb 5-1: selecting invalid altsetting 1 [ 709.035247][ T5705] hub 6-1:0.0: 2 ports detected [ 709.087259][T11649] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 709.107627][T12096] LME2510(C): Firmware Status: 06 03 00 00 00 00 [ 709.107772][T12096] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 709.247124][T11649] usb 8-1: Using ep0 maxpacket: 32 [ 709.249833][T11649] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 709.253099][T11649] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 709.253131][T11649] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 709.253154][T11649] usb 8-1: Product: syz [ 709.253170][T11649] usb 8-1: Manufacturer: syz [ 709.253187][T11649] usb 8-1: SerialNumber: syz [ 709.308147][T11649] usb 8-1: config 0 descriptor?? [ 709.310571][T14194] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 709.329388][T11649] hub 8-1:0.0: bad descriptor, ignoring hub [ 709.329428][T11649] hub 8-1:0.0: probe with driver hub failed with error -5 [ 709.373941][ T5704] usb 5-1: USB disconnect, device number 10 [ 710.451039][ T5705] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 710.457402][ T5705] usb 6-1: USB disconnect, device number 9 [ 710.792018][T14234] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3034'. [ 710.818472][ T823] usb 8-1: USB disconnect, device number 9 [ 711.951935][T14273] fuse: fd is not a fuse device [ 712.676784][T14294] fuse: Unknown parameter 'use00000000000000000000' [ 712.977144][T11618] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 713.131593][T11618] usb 8-1: Using ep0 maxpacket: 32 [ 713.140529][T11618] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 713.140567][T11618] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 713.140597][T11618] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 713.140648][T11618] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 713.140666][T11618] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.156437][T11618] usb 8-1: config 0 descriptor?? [ 713.163567][T14296] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 713.226455][T11618] hub 8-1:0.0: USB hub found [ 713.402854][T11618] hub 8-1:0.0: 2 ports detected [ 714.822562][T11618] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 714.828863][T11618] usb 8-1: USB disconnect, device number 10 [ 716.467199][ T5704] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 716.617146][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 716.621366][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 716.621402][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 716.621434][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 716.621481][ T5704] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 716.621508][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.699313][ T5704] usb 5-1: config 0 descriptor?? [ 716.704644][T14371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 716.719821][ T5704] hub 5-1:0.0: USB hub found [ 716.771068][T14383] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3093'. [ 716.934048][ T5704] hub 5-1:0.0: 2 ports detected [ 718.363825][ T823] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 718.365991][ T823] usb 5-1: USB disconnect, device number 11 [ 720.897727][ T32] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 720.935059][ T823] libceph: connect (1)[c::]:6789 error -101 [ 720.935214][ T823] libceph: mon0 (1)[c::]:6789 connect error [ 720.951164][ T823] libceph: connect (1)[c::]:6789 error -101 [ 720.951339][ T823] libceph: mon0 (1)[c::]:6789 connect error [ 721.057160][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 721.085498][ T32] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.085537][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 721.085568][ T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 721.085616][ T32] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 721.085642][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.209435][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 721.209677][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 721.254330][ T32] usb 6-1: config 0 descriptor?? [ 721.255633][T14483] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 721.278542][ T32] hub 6-1:0.0: USB hub found [ 721.483094][ T32] hub 6-1:0.0: 2 ports detected [ 721.718647][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 721.719071][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 721.756441][T14487] ceph: No mds server is up or the cluster is laggy [ 722.326412][ T32] usb 6-1: USB disconnect, device number 10 [ 723.203620][T14543] fuse: Bad value for 'fd' [ 723.667174][ T5704] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 723.817118][ T5704] usb 8-1: Using ep0 maxpacket: 32 [ 723.820364][ T5704] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 723.826324][ T5704] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 723.826359][ T5704] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 723.826383][ T5704] usb 8-1: Product: syz [ 723.826399][ T5704] usb 8-1: Manufacturer: syz [ 723.826414][ T5704] usb 8-1: SerialNumber: syz [ 723.848495][ T5704] usb 8-1: config 0 descriptor?? [ 723.885982][T14549] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 723.911750][ T5704] hub 8-1:0.0: bad descriptor, ignoring hub [ 723.911792][ T5704] hub 8-1:0.0: probe with driver hub failed with error -5 [ 724.388051][ T5704] usb 8-1: USB disconnect, device number 11 [ 734.525245][T14854] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3285'. [ 735.645917][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3296'. [ 739.206141][T14984] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3338'. [ 740.339856][T15010] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3348'. [ 741.045393][T15032] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3358'. [ 743.472567][T15092] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3381'. [ 744.923038][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3396'. [ 745.562797][T15150] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3405'. [ 746.303613][T15174] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3415'. [ 747.375450][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.375560][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.561444][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3429'. [ 748.652708][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3439'. [ 749.670041][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3448'. [ 750.756370][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3458'. [ 751.524616][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3469'. [ 752.294010][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3479'. [ 752.376294][T15336] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3481'. [ 753.233900][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3490'. [ 753.538735][T15366] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3493'. [ 754.235957][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3499'. [ 754.718036][T15396] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3505'. [ 755.277919][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3508'. [ 755.978322][T15427] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.3516'. [ 756.391255][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 756.450237][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 756.456053][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 756.484491][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 756.486641][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 757.700431][ T181] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.101663][ T181] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.413780][ T181] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.603306][T15438] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.603641][T15438] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.603926][T15438] bridge_slave_0: entered allmulticast mode [ 758.609096][T15438] bridge_slave_0: entered promiscuous mode [ 758.647383][T11250] Bluetooth: hci1: command tx timeout [ 758.682641][ T181] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.734924][T15438] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.735386][T15438] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.735674][T15438] bridge_slave_1: entered allmulticast mode [ 758.760106][T15438] bridge_slave_1: entered promiscuous mode [ 758.828915][T15438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.835531][T15438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.919716][T15438] team0: Port device team_slave_0 added [ 758.924281][T15438] team0: Port device team_slave_1 added [ 758.983872][T15438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.983889][T15438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.983914][T15438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.988729][T15438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.988778][T15438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.988853][T15438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.222525][T15438] hsr_slave_0: entered promiscuous mode [ 759.232782][T15438] hsr_slave_1: entered promiscuous mode [ 759.282075][T15438] debugfs: 'hsr0' already exists in 'hsr' [ 759.282096][T15438] Cannot create hsr debugfs directory [ 759.666672][T15486] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3529'. [ 760.027720][ T181] bridge_slave_1: left allmulticast mode [ 760.027748][ T181] bridge_slave_1: left promiscuous mode [ 760.028035][ T181] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.148508][ T181] bridge_slave_0: left allmulticast mode [ 760.148536][ T181] bridge_slave_0: left promiscuous mode [ 760.173691][ T181] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.728996][T11250] Bluetooth: hci1: command tx timeout [ 761.478004][ T181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.560087][ T181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.610296][ T181] bond0 (unregistering): Released all slaves [ 762.807129][T11250] Bluetooth: hci1: command tx timeout [ 762.909332][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 763.320023][T15538] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3539'. [ 764.477258][ T181] hsr_slave_0: left promiscuous mode [ 764.517206][ T181] hsr_slave_1: left promiscuous mode [ 764.518858][ T181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.518893][ T181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.547960][ T181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.547982][ T181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.707981][ T181] veth1_macvtap: left promiscuous mode [ 764.708056][ T181] veth0_macvtap: left promiscuous mode [ 764.708261][ T181] veth1_vlan: left promiscuous mode [ 764.757197][ T181] veth0_vlan: left promiscuous mode [ 764.887204][T11250] Bluetooth: hci1: command tx timeout [ 765.937926][ T181] team0 (unregistering): Port device team_slave_1 removed [ 765.997870][ T181] team0 (unregistering): Port device team_slave_0 removed [ 767.998681][T15438] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 768.141217][T15438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.317400][T15438] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 768.459300][T15438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.470180][T15438] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 768.594137][T15438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.630485][T15438] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 768.727460][T15438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.985242][T15438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.052671][T15438] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.074861][T10396] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.075037][T10396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.135482][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.135696][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.033069][T15438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.707337][T15438] veth0_vlan: entered promiscuous mode [ 770.746909][T15438] veth1_vlan: entered promiscuous mode [ 770.861455][T15438] veth0_macvtap: entered promiscuous mode [ 770.875501][T15438] veth1_macvtap: entered promiscuous mode [ 770.925446][T15438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.954015][T15438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.020756][ T1201] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.020810][ T1201] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.020850][ T1201] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.020889][ T1201] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.992164][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.992187][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.208374][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.208396][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.086441][T16125] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.3680'. [ 803.852653][T16169] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.3692'. [ 806.493384][T16209] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.3703'. [ 808.818569][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.818682][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.853769][T16618] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3811'. [ 836.726783][T16658] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3822'. [ 839.528198][T16705] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3833'. [ 850.627214][T16867] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3875'. [ 853.420008][T16908] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3886'. [ 856.261962][T16949] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3897'. [ 870.253716][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.253840][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.572813][T11250] Bluetooth: hci1: command 0x0406 tx timeout [ 884.968402][T10390] kworker/u8:4 (10390) used greatest stack depth: 17816 bytes left [ 922.617854][T17943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4153'. [ 931.693015][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.693131][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.817852][T18438] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 959.160433][T18488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 962.696798][T18541] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 993.130479][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.130817][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 1052.880659][T19942] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4664'. [ 1052.911164][T19942] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4664'. [ 1054.571554][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.571667][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.196278][T19978] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4674'. [ 1055.229163][T19978] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4674'. [ 1057.458891][T20014] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4684'. [ 1057.490336][T20014] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4684'. [ 1060.306742][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4696'. [ 1060.367371][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4696'. [ 1060.447598][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4696'. [ 1060.508189][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4696'. [ 1060.614131][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4696'. [ 1060.701166][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4696'. [ 1063.479247][T20113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1063.564526][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1063.620512][T20113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1063.699139][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1064.812707][ T1176] kworker/u8:9 (1176) used greatest stack depth: 16696 bytes left [ 1066.452229][T20160] __nla_validate_parse: 2 callbacks suppressed [ 1066.452244][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1066.530891][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1066.612980][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1066.687293][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1066.775686][T20160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1066.862831][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1080.281693][T11250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1080.375100][T11250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1080.377378][T11250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1080.394458][T11250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1080.415979][T11250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1081.817345][T20377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.817820][T20377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.818125][T20377] bridge_slave_0: entered allmulticast mode [ 1081.821092][T20377] bridge_slave_0: entered promiscuous mode [ 1081.833601][T20377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.836782][T20377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.838117][T20377] bridge_slave_1: entered allmulticast mode [ 1081.857660][T20377] bridge_slave_1: entered promiscuous mode [ 1081.960884][T20377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.969450][T20377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.034724][T20377] team0: Port device team_slave_0 added [ 1082.044100][T20377] team0: Port device team_slave_1 added [ 1082.331171][T20377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.331185][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.331210][T20377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.334480][T20377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.334493][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.334515][T20377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.555806][T20377] hsr_slave_0: entered promiscuous mode [ 1082.567952][T11250] Bluetooth: hci0: command tx timeout [ 1082.577448][T20377] hsr_slave_1: entered promiscuous mode [ 1082.580103][T20377] debugfs: 'hsr0' already exists in 'hsr' [ 1082.580127][T20377] Cannot create hsr debugfs directory [ 1082.924069][T20377] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.194040][T20377] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.494535][T20377] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.702501][T20377] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.185826][T20377] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1084.236257][T20377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.246325][T20377] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1084.284005][T20377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.288401][T20377] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1084.428901][T20377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1084.430065][T20377] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1084.489382][T20377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1084.648019][T11250] Bluetooth: hci0: command tx timeout [ 1084.831348][T20377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.894630][T20377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.932405][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.932579][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.976053][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.976242][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.806523][T20377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.262992][T20377] veth0_vlan: entered promiscuous mode [ 1086.329952][T20377] veth1_vlan: entered promiscuous mode [ 1086.406770][T20377] veth0_macvtap: entered promiscuous mode [ 1086.441463][T20377] veth1_macvtap: entered promiscuous mode [ 1086.509517][T20377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.564291][T20377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.626155][ T1201] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.631431][ T1201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.639560][ T1201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.645190][ T3320] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.727355][T11250] Bluetooth: hci0: command tx timeout [ 1087.797694][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.797717][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.135664][T20464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.135695][T20464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.807388][T11250] Bluetooth: hci0: command tx timeout [ 1109.121154][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1109.148068][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1109.149720][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1109.151508][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1109.182560][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1110.686225][ T3408] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.212434][T20854] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4881'. [ 1111.287051][ T5626] Bluetooth: hci3: command tx timeout [ 1111.390572][ T3408] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.942100][ T3408] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.572571][ T3408] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.064689][T20823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.075694][T20823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.076105][T20823] bridge_slave_0: entered allmulticast mode [ 1113.109380][T20823] bridge_slave_0: entered promiscuous mode [ 1113.145126][T20823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.145537][T20823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.145955][T20823] bridge_slave_1: entered allmulticast mode [ 1113.180198][T20823] bridge_slave_1: entered promiscuous mode [ 1113.367137][ T5626] Bluetooth: hci3: command tx timeout [ 1113.485516][T20823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.530063][T20823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.622174][T20823] team0: Port device team_slave_0 added [ 1113.636596][T20823] team0: Port device team_slave_1 added [ 1113.885002][T20823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.885019][T20823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.885050][T20823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.944894][T20823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.944913][T20823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.944944][T20823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.571509][T20823] hsr_slave_0: entered promiscuous mode [ 1114.574145][T20823] hsr_slave_1: entered promiscuous mode [ 1114.576301][T20823] debugfs: 'hsr0' already exists in 'hsr' [ 1114.576329][T20823] Cannot create hsr debugfs directory [ 1115.138575][ T3408] bridge_slave_1: left allmulticast mode [ 1115.138615][ T3408] bridge_slave_1: left promiscuous mode [ 1115.139010][ T3408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.271425][ T3408] bridge_slave_0: left allmulticast mode [ 1115.271462][ T3408] bridge_slave_0: left promiscuous mode [ 1115.271973][ T3408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.446955][T11250] Bluetooth: hci3: command tx timeout [ 1116.009944][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.010053][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.327072][ T5626] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1116.404517][ T3408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.557512][ T3408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.600749][ T3408] bond0 (unregistering): Released all slaves [ 1117.527034][ T5626] Bluetooth: hci3: command tx timeout [ 1120.762877][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1121.608472][ T3408] hsr_slave_0: left promiscuous mode [ 1121.664844][ T3408] hsr_slave_1: left promiscuous mode [ 1121.673396][ T3408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.673430][ T3408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.714743][ T3408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.714773][ T3408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.755962][T20990] syz.5.4913 (20990) used greatest stack depth: 16536 bytes left [ 1121.834438][ T3408] veth1_macvtap: left promiscuous mode [ 1121.834547][ T3408] veth0_macvtap: left promiscuous mode [ 1121.834919][ T3408] veth1_vlan: left promiscuous mode [ 1121.835129][ T3408] veth0_vlan: left promiscuous mode [ 1124.678026][ T3408] team0 (unregistering): Port device team_slave_1 removed [ 1124.750926][ T3408] team0 (unregistering): Port device team_slave_0 removed [ 1125.002062][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1126.712109][T20823] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1126.743800][T20823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1126.746487][T20823] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1126.783277][T20823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1126.785005][T20823] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1126.854348][T20823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1126.855837][T20823] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1126.885827][T20823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1127.195439][T20823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.242357][T20823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.265127][T20938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.265398][T20938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.319382][T20938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.319498][T20938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.839780][T20823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.133850][T20823] veth0_vlan: entered promiscuous mode [ 1128.152847][T20823] veth1_vlan: entered promiscuous mode [ 1128.211282][T20823] veth0_macvtap: entered promiscuous mode [ 1128.225113][T20823] veth1_macvtap: entered promiscuous mode [ 1128.266136][T20823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.292369][T20823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.319622][T20938] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.319917][T20938] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.319959][T20938] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.319999][T20938] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.001420][T10396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.001444][T10396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.086697][T20948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.086718][T20948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.716505][T11250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1130.803231][T11250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1130.804637][T11250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1130.831247][T11250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1130.843153][T11250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1132.221216][ T145] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.753117][T21168] netlink: 'syz.5.4939': attribute type 2 has an invalid length. [ 1132.753146][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4939'. [ 1132.753163][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4939'. [ 1132.753180][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4939'. [ 1132.967717][ T5626] Bluetooth: hci4: command tx timeout [ 1133.903311][ T145] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.425117][ T145] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.763048][ T145] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.047039][ T5626] Bluetooth: hci4: command tx timeout [ 1136.084522][T21131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.084977][T21131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.085317][T21131] bridge_slave_0: entered allmulticast mode [ 1136.095884][T21131] bridge_slave_0: entered promiscuous mode [ 1136.125175][T21131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.125564][T21131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.125961][T21131] bridge_slave_1: entered allmulticast mode [ 1136.171526][T21131] bridge_slave_1: entered promiscuous mode [ 1136.616597][T21131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.678381][T21238] loop2: detected capacity change from 0 to 7 [ 1136.778885][T21238] Dev loop2: unable to read RDB block 7 [ 1136.778935][T21238] loop2: AHDI p1 p2 p3 [ 1136.778959][T21238] loop2: partition table partially beyond EOD, truncated [ 1136.812015][T21238] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1136.812062][T21238] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1137.003300][T21131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.127430][ T5626] Bluetooth: hci4: command tx timeout [ 1137.398849][ T145] bridge_slave_1: left allmulticast mode [ 1137.398887][ T145] bridge_slave_1: left promiscuous mode [ 1137.399183][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.649591][ T145] bridge_slave_0: left allmulticast mode [ 1137.649628][ T145] bridge_slave_0: left promiscuous mode [ 1137.649870][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.214573][ T5626] Bluetooth: hci4: command tx timeout [ 1139.301641][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.368257][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.415929][ T145] bond0 (unregistering): Released all slaves [ 1139.696751][T21131] team0: Port device team_slave_0 added [ 1139.830963][T21131] team0: Port device team_slave_1 added [ 1139.959994][T21131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.960009][T21131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.960031][T21131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.998683][T21131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.998804][T21131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.998838][T21131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.217098][ T145] IPVS: stopping backup sync thread 11679 ... [ 1141.190913][T21131] hsr_slave_0: entered promiscuous mode [ 1141.203571][T21131] hsr_slave_1: entered promiscuous mode [ 1141.222456][T21131] debugfs: 'hsr0' already exists in 'hsr' [ 1141.222484][T21131] Cannot create hsr debugfs directory [ 1141.553589][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1142.277036][ T145] hsr_slave_0: left promiscuous mode [ 1142.317024][ T145] hsr_slave_1: left promiscuous mode [ 1142.318008][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.318029][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.368933][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.368962][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.490962][ T145] veth1_macvtap: left promiscuous mode [ 1142.491074][ T145] veth0_macvtap: left promiscuous mode [ 1142.492791][ T145] veth1_vlan: left promiscuous mode [ 1142.493270][ T145] veth0_vlan: left promiscuous mode [ 1143.344569][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1143.408891][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1143.635315][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1145.868592][T21131] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1145.907613][T21131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1145.910448][T21131] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1145.966924][T21131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1145.968406][T21131] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1146.017566][T21131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.019363][T21131] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1146.064939][T21131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.293621][T21131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.345108][T21131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.412727][T20951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.412991][T20951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.476730][T20939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.479017][T20939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.280948][T21131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.706056][T21131] veth0_vlan: entered promiscuous mode [ 1147.731641][T21131] veth1_vlan: entered promiscuous mode [ 1147.805245][T21131] veth0_macvtap: entered promiscuous mode [ 1147.824743][T21131] veth1_macvtap: entered promiscuous mode [ 1147.861799][T21131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.883446][T21131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.908104][ T181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.908394][ T181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.908436][ T181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.908476][ T181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.648904][T20939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.648926][T20939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.829213][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.829236][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.469896][T21550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5041'. [ 1157.469923][T21550] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5041'. [ 1159.995908][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5061'. [ 1159.995938][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5061'. [ 1159.995956][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5061'. [ 1163.392145][T21647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5087'. [ 1163.392172][T21647] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5087'. [ 1164.988963][ T38] audit: type=1326 audit(1780312043.054:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21694 comm="syz.5.5109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bcbdce59 code=0x7ffc0000 [ 1164.989022][ T38] audit: type=1326 audit(1780312043.054:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21694 comm="syz.5.5109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bcbdce59 code=0x7ffc0000 [ 1165.046617][ T38] audit: type=1326 audit(1780312043.104:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21694 comm="syz.5.5109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bcbdce59 code=0x7ffc0000 [ 1165.054601][ T38] audit: type=1326 audit(1780312043.114:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21694 comm="syz.5.5109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f11bcbdce59 code=0x7ffc0000 [ 1165.054764][ T38] audit: type=1326 audit(1780312043.114:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21694 comm="syz.5.5109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bcbdce59 code=0x7ffc0000 [ 1165.054890][ T38] audit: type=1326 audit(1780312043.114:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21694 comm="syz.5.5109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bcbdce59 code=0x7ffc0000 [ 1165.060384][ T38] audit: type=1326 audit(1780312043.114:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21694 comm="syz.5.5109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11bcbdce59 code=0x7ffc0000 [ 1165.066439][ T38] audit: type=1326 audit(1780312043.124:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21694 comm="syz.5.5109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f11bcbdce59 code=0x7ffc0000 [ 1165.113080][ T38] audit: type=1326 audit(1780312043.134:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21694 comm="syz.5.5109" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f11bcbdce59 code=0x7ffc0000 [ 1169.295077][T21796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5157'. [ 1170.342454][T21834] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5174'. [ 1170.465406][T21837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5175'. [ 1170.945554][T21858] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5185'. [ 1171.256741][T21866] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5188'. [ 1171.565591][T21878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5195'. [ 1171.867695][T21888] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5199'. [ 1172.104898][T21899] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5205'. [ 1172.857153][T21919] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5215'. [ 1173.639553][T21943] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5226'. [ 1175.028588][T21987] __nla_validate_parse: 1 callbacks suppressed [ 1175.028611][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5247'. [ 1176.045651][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5256'. [ 1177.458209][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.458320][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.108055][T22172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5327'. [ 1185.345201][T22198] loop7: detected capacity change from 0 to 16384 [ 1185.469378][T22201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5340'. [ 1186.259300][T22224] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5351'. [ 1187.459660][T22251] loop7: detected capacity change from 0 to 16384 [ 1190.290493][T22297] loop7: detected capacity change from 0 to 16384 [ 1193.610064][T22357] hub 8-0:1.0: USB hub found [ 1193.662384][T22357] hub 8-0:1.0: 1 port detected [ 1195.411140][T22381] loop7: detected capacity change from 0 to 16384 [ 1196.256530][T22392] hub 8-0:1.0: USB hub found [ 1196.262885][T22392] hub 8-0:1.0: 1 port detected [ 1198.969381][T22423] loop7: detected capacity change from 0 to 16384 [ 1199.483453][T22432] hub 8-0:1.0: USB hub found [ 1199.490613][T22432] hub 8-0:1.0: 1 port detected [ 1201.244285][T22453] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5446'. [ 1201.439005][T22455] loop7: detected capacity change from 0 to 16384 [ 1202.710935][T22472] hub 8-0:1.0: USB hub found [ 1202.713775][T22472] hub 8-0:1.0: 1 port detected [ 1204.076673][T22480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5457'. [ 1204.813886][T22505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5471'. [ 1205.776682][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 1206.471415][T22554] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5493'. [ 1207.394535][T22577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5504'. [ 1208.363106][T22603] netlink: 248 bytes leftover after parsing attributes in process `syz.6.5516'. [ 1210.294048][T22679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5553'. [ 1219.288563][T22877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5640'. [ 1224.779469][T23032] ================================================================== [ 1224.779559][T23032] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 1224.779639][T23032] Read of size 8 at addr ffff88803c23e788 by task syz.5.5704/23032 [ 1224.779669][T23032] [ 1224.779700][T23032] CPU: 0 UID: 0 PID: 23032 Comm: syz.5.5704[ 1224.779700][T23032] CPU: 0 UID: 0 PID: 23032 Comm: syz.5.5704 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1224.779735][T23032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1224.779761][T23032] Call Trace: [ 1224.779774][T23032] [ 1224.779843][T23032] dump_stack_lvl+0xe8/0x150 [ 1224.779920][T23032] print_address_description+0x55/0x1e0 [ 1224.779952][T23032] ? clear_tfile_check_list+0x114/0x380 [ 1224.780010][T23032] print_report+0x58/0x70 [ 1224.780039][T23032] kasan_report+0x117/0x150 [ 1224.780069][T23032] ? clear_tfile_check_list+0x114/0x380 [ 1224.780107][T23032] clear_tfile_check_list+0x114/0x380 [ 1224.780142][T23032] ? clear_tfile_check_list+0x22/0x380 [ 1224.780179][T23032] do_epoll_ctl_file+0x8fd/0xed0 [ 1224.780211][T23032] ? do_epoll_ctl_file+0xac3/0xed0 [ 1224.780245][T23032] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1224.780278][T23032] ? __fget_files+0x3a6/0x420 [ 1224.780305][T23032] ? __fget_files+0x2a/0x420 [ 1224.780336][T23032] __se_sys_epoll_ctl+0x14e/0x210 [ 1224.780370][T23032] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1224.780411][T23032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.780436][T23032] do_syscall_64+0x174/0x580 [ 1224.780472][T23032] ? trace_irq_disable+0x3b/0x140 [ 1224.780497][T23032] ? clear_bhb_loop+0x40/0x90 [ 1224.780524][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.780547][T23032] RIP: 0033:0x7f11bcbdce59 [ 1224.780605][T23032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.780661][T23032] RSP: 002b:00007f11ba9d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1224.780715][T23032] RAX: ffffffffffffffda RBX: 00007f11bce56270 RCX: 00007f11bcbdce59 [ 1224.780733][T23032] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 1224.780748][T23032] RBP: 00007f11bcc72d6f R08: 0000000000000000 R09: 0000000000000000 [ 1224.780764][T23032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.780779][T23032] R13: 00007f11bce56308 R14: 00007f11bce56270 R15: 00007ffeba1ae1a8 [ 1224.780808][T23032] [ 1224.780816][T23032] [ 1224.780822][T23032] Allocated by task 23024: [ 1224.780833][T23032] kasan_save_track+0x3e/0x80 [ 1224.780857][T23032] __kasan_slab_alloc+0x6c/0x80 [ 1224.780882][T23032] kmem_cache_alloc_noprof+0x33b/0x680 [ 1224.780906][T23032] ep_insert+0x512/0x1820 [ 1224.780933][T23032] do_epoll_ctl_file+0x8bb/0xed0 [ 1224.780961][T23032] __se_sys_epoll_ctl+0x14e/0x210 [ 1224.780990][T23032] do_syscall_64+0x174/0x580 [ 1224.781023][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.781045][T23032] [ 1224.781050][T23032] Freed by task 23019: [ 1224.781060][T23032] kasan_save_track+0x3e/0x80 [ 1224.781083][T23032] kasan_save_free_info+0x46/0x50 [ 1224.781114][T23032] __kasan_slab_free+0x5c/0x80 [ 1224.781138][T23032] kmem_cache_free+0x187/0x6c0 [ 1224.781164][T23032] eventpoll_release_file+0xc2/0x240 [ 1224.781191][T23032] __fput+0x83c/0xa70 [ 1224.781213][T23032] task_work_run+0x1d9/0x270 [ 1224.781237][T23032] get_signal+0x11eb/0x1330 [ 1224.781266][T23032] arch_do_signal_or_restart+0xbc/0x840 [ 1224.781287][T23032] exit_to_user_mode_loop+0xa9/0x680 [ 1224.781311][T23032] do_syscall_64+0x353/0x580 [ 1224.781344][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.781365][T23032] [ 1224.781370][T23032] The buggy address belongs to the object at ffff88803c23e780 [ 1224.781370][T23032] which belongs to the cache ep_head of size 16 [ 1224.781399][T23032] The buggy address is located 8 bytes inside of [ 1224.781399][T23032] freed 16-byte region [ffff88803c23e780, ffff88803c23e790) [ 1224.781450][T23032] [ 1224.781457][T23032] The buggy address belongs to the physical page: [ 1224.781499][T23032] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803c23e8a0 pfn:0x3c23e [ 1224.781523][T23032] memcg:ffff88802a6ae001 [ 1224.781533][T23032] flags: 0x80000000000200(workingset|node=0|zone=1) [ 1224.781558][T23032] page_type: f5(slab) [ 1224.781584][T23032] raw: 0080000000000200 ffff888020ec4dc0 ffffea0000fda510 ffffea0000d8e190 [ 1224.781607][T23032] raw: ffff88803c23e8a0 000000080080002d 00000000f5000000 ffff88802a6ae001 [ 1224.781619][T23032] page dumped because: kasan: bad access detected [ 1224.781634][T23032] page_owner tracks the page as allocated [ 1224.781649][T23032] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4982, tgid 4982 (udevd), ts 43699447951, free_ts 42191477908 [ 1224.781689][T23032] post_alloc_hook+0x1f9/0x250 [ 1224.781713][T23032] get_page_from_freelist+0x265c/0x26e0 [ 1224.781743][T23032] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1224.781772][T23032] allocate_slab+0x74/0x5e0 [ 1224.781803][T23032] refill_objects+0x33c/0x3d0 [ 1224.781833][T23032] __pcs_replace_empty_main+0x373/0x720 [ 1224.781866][T23032] kmem_cache_alloc_noprof+0x433/0x680 [ 1224.781888][T23032] ep_insert+0x512/0x1820 [ 1224.781914][T23032] do_epoll_ctl_file+0x8bb/0xed0 [ 1224.781941][T23032] __se_sys_epoll_ctl+0x14e/0x210 [ 1224.781971][T23032] do_syscall_64+0x174/0x580 [ 1224.782003][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.782024][T23032] page last free pid 4983 tgid 4983 stack trace: [ 1224.782037][T23032] __free_frozen_pages+0x10af/0x1190 [ 1224.782062][T23032] __slab_free+0x252/0x2a0 [ 1224.782088][T23032] qlist_free_all+0x99/0x100 [ 1224.782108][T23032] kasan_quarantine_reduce+0x148/0x160 [ 1224.782131][T23032] __kasan_slab_alloc+0x22/0x80 [ 1224.782155][T23032] kmem_cache_alloc_noprof+0x33b/0x680 [ 1224.782180][T23032] do_getname+0x2e/0x250 [ 1224.782199][T23032] do_readlinkat+0xc8/0x510 [ 1224.782222][T23032] __x64_sys_readlink+0x7f/0x90 [ 1224.782245][T23032] do_syscall_64+0x174/0x580 [ 1224.782276][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.782309][T23032] [ 1224.782315][T23032] Memory state around the buggy address: [ 1224.782327][T23032] ffff88803c23e680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1224.782344][T23032] ffff88803c23e700: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1224.782360][T23032] >ffff88803c23e780: fa fb fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 1224.782372][T23032] ^ [ 1224.782384][T23032] ffff88803c23e800: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1224.782400][T23032] ffff88803c23e880: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1224.782413][T23032] ================================================================== [ 1224.816951][T23032] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1224.817005][T23032] CPU: 0 UID: 0 PID: 23032 Comm: syz.5.5704 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1224.817055][T23032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1224.817090][T23032] Call Trace: [ 1224.817117][T23032] [ 1224.817141][T23032] vpanic+0x56c/0xa60 [ 1224.817214][T23032] ? __pfx_vpanic+0x10/0x10 [ 1224.817301][T23032] ? __pfx___schedule+0x10/0x10 [ 1224.817395][T23032] panic+0xc5/0xd0 [ 1224.817479][T23032] ? __pfx_panic+0x10/0x10 [ 1224.817566][T23032] ? preempt_schedule_thunk+0x16/0x40 [ 1224.817720][T23032] ? clear_tfile_check_list+0x114/0x380 [ 1224.817813][T23032] check_panic_on_warn+0x89/0xb0 [ 1224.817895][T23032] ? clear_tfile_check_list+0x114/0x380 [ 1224.817980][T23032] end_report+0x73/0x170 [ 1224.818061][T23032] ? clear_tfile_check_list+0x114/0x380 [ 1224.818141][T23032] kasan_report+0x128/0x150 [ 1224.818253][T23032] ? clear_tfile_check_list+0x114/0x380 [ 1224.818356][T23032] clear_tfile_check_list+0x114/0x380 [ 1224.818450][T23032] ? clear_tfile_check_list+0x22/0x380 [ 1224.818545][T23032] do_epoll_ctl_file+0x8fd/0xed0 [ 1224.818649][T23032] ? do_epoll_ctl_file+0xac3/0xed0 [ 1224.818734][T23032] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1224.818820][T23032] ? __fget_files+0x3a6/0x420 [ 1224.818898][T23032] ? __fget_files+0x2a/0x420 [ 1224.818988][T23032] __se_sys_epoll_ctl+0x14e/0x210 [ 1224.819105][T23032] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1224.819185][T23032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.819250][T23032] do_syscall_64+0x174/0x580 [ 1224.819341][T23032] ? trace_irq_disable+0x3b/0x140 [ 1224.819405][T23032] ? clear_bhb_loop+0x40/0x90 [ 1224.819477][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.819539][T23032] RIP: 0033:0x7f11bcbdce59 [ 1224.819592][T23032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.819660][T23032] RSP: 002b:00007f11ba9d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1224.819725][T23032] RAX: ffffffffffffffda RBX: 00007f11bce56270 RCX: 00007f11bcbdce59 [ 1224.819778][T23032] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 1224.819812][T23032] RBP: 00007f11bcc72d6f R08: 0000000000000000 R09: 0000000000000000 [ 1224.819855][T23032] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1224.819896][T23032] R13: 00007f11bce56308 R14: 00007f11bce56270 R15: 00007ffeba1ae1a8 [ 1224.819961][T23032] [ 1224.820602][T23032] Kernel Offset: disabled