last executing test programs: 12.793160476s ago: executing program 2 (id=119): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f0190080000000007000806"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9.603270496s ago: executing program 2 (id=135): lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 6.576167342s ago: executing program 2 (id=143): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f0190080000000007000806"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.237373082s ago: executing program 0 (id=147): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(0x0, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.293051823s ago: executing program 3 (id=148): syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYBLOB="b70795"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r1, 0xffffffffffffffff, 0x0) 4.864940626s ago: executing program 1 (id=149): syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x0, 0x0, 0x0, 0x805, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 4.863478886s ago: executing program 0 (id=150): socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 3.953211445s ago: executing program 1 (id=151): lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 3.869012567s ago: executing program 0 (id=152): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) memfd_secret(0x80000) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.735809712s ago: executing program 0 (id=153): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@data_err_abort}, {@init_itable}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x3, 0x5ad, &(0x7f0000001000)="$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") io_setup(0x5, 0x0) close(0x4) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1c6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) read$msr(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) syz_emit_ethernet(0x3e, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@empty, @remote, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x4, 0x1, 0x3}}, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "1584df09032f2ae01a9f5dbf19a2a12fe20e1454c463ad1ac2f1accf06e0b10b4f2ab5bd93a6350e330af483ca585faab3706867fa6780b8a26555b9be09cf8d"}}}}, &(0x7f0000000080)={0x1, 0x1, [0x4d4, 0x8e0, 0xe2c, 0xc12]}) 3.222282008s ago: executing program 2 (id=154): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) memfd_secret(0x80000) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.14657405s ago: executing program 2 (id=155): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1010c10, &(0x7f0000000080)=ANY=[], 0x7, 0x150f, &(0x7f0000002ac0)="$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") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) 3.123313741s ago: executing program 3 (id=156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.810900062s ago: executing program 2 (id=157): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) fcntl$addseals(r4, 0x409, 0x7) 1.800476813s ago: executing program 1 (id=158): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r0, &(0x7f0000000700)=[{&(0x7f0000000580)="6e091b1c", 0x4}, {0x0}], 0x2, 0x1, 0x81, 0x1a) 1.713179165s ago: executing program 3 (id=159): syz_open_dev$ttys(0xc, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x0, 0x0, 0x0, 0x805, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 1.712880806s ago: executing program 1 (id=160): socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 1.502957332s ago: executing program 0 (id=161): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000621a00"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) 655.057969ms ago: executing program 3 (id=162): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 258.238331ms ago: executing program 1 (id=163): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 209.188653ms ago: executing program 3 (id=164): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$full(0xffffff9c, &(0x7f0000000240), 0x200200, 0x0) socket$inet6(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) memfd_secret(0x80000) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 207.712053ms ago: executing program 0 (id=165): io_uring_setup(0x68f1, &(0x7f00000005c0)={0x0, 0x48c7, 0x8, 0x7, 0x1000168}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@dax_inode}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@sysvgroups}, {@block_validity}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000400)="$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") r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1fa8, 0x2b0e}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x3}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4004081) 80.806347ms ago: executing program 1 (id=166): lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) 0s ago: executing program 3 (id=167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000000c0), 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 63.574815][ T5755] cgroup: Unknown subsys name 'net' [ 63.712182][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.031369][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.108243][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.116693][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.130699][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.139194][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.147831][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.155103][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.163254][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.168931][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.180187][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.186680][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.188403][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.203684][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.206629][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.219390][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.226902][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.227561][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.242108][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.250076][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.258111][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.266538][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.273875][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.282075][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.286972][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.299542][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.716117][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 67.777457][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 67.821983][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 67.855482][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 67.909805][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.918102][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.925402][ T5768] bridge_slave_0: entered allmulticast mode [ 67.932478][ T5768] bridge_slave_0: entered promiscuous mode [ 67.979645][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.987523][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.994667][ T5768] bridge_slave_1: entered allmulticast mode [ 68.001623][ T5768] bridge_slave_1: entered promiscuous mode [ 68.009007][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.016342][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.023618][ T5767] bridge_slave_0: entered allmulticast mode [ 68.032769][ T5767] bridge_slave_0: entered promiscuous mode [ 68.059375][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.068880][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.076151][ T5767] bridge_slave_1: entered allmulticast mode [ 68.082810][ T5767] bridge_slave_1: entered promiscuous mode [ 68.135101][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.148476][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.170001][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.181376][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.225492][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.232969][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.240198][ T5769] bridge_slave_0: entered allmulticast mode [ 68.248105][ T5769] bridge_slave_0: entered promiscuous mode [ 68.264593][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.271934][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.279330][ T5769] bridge_slave_1: entered allmulticast mode [ 68.286411][ T5769] bridge_slave_1: entered promiscuous mode [ 68.315008][ T5768] team0: Port device team_slave_0 added [ 68.322219][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.329818][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.337192][ T5772] bridge_slave_0: entered allmulticast mode [ 68.343877][ T5772] bridge_slave_0: entered promiscuous mode [ 68.360131][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.367410][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.374580][ T5772] bridge_slave_1: entered allmulticast mode [ 68.381590][ T5772] bridge_slave_1: entered promiscuous mode [ 68.391463][ T5767] team0: Port device team_slave_0 added [ 68.399763][ T5768] team0: Port device team_slave_1 added [ 68.432261][ T5767] team0: Port device team_slave_1 added [ 68.462419][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.482777][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.490081][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.518450][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.530729][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.539576][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.566004][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.578702][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.585679][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.612372][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.625153][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.646803][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.659319][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.669175][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.676482][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.702534][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.777241][ T5769] team0: Port device team_slave_0 added [ 68.805363][ T5767] hsr_slave_0: entered promiscuous mode [ 68.811946][ T5767] hsr_slave_1: entered promiscuous mode [ 68.831286][ T5768] hsr_slave_0: entered promiscuous mode [ 68.838425][ T5768] hsr_slave_1: entered promiscuous mode [ 68.844910][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.853368][ T5768] Cannot create hsr debugfs directory [ 68.860448][ T5769] team0: Port device team_slave_1 added [ 68.881018][ T5772] team0: Port device team_slave_0 added [ 68.923008][ T5772] team0: Port device team_slave_1 added [ 68.952243][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.959633][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.986008][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.019949][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.027104][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.053088][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.064660][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.072102][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.098236][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.137478][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.144472][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.171126][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.247492][ T5769] hsr_slave_0: entered promiscuous mode [ 69.253976][ T5769] hsr_slave_1: entered promiscuous mode [ 69.260525][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.268602][ T51] Bluetooth: hci1: command tx timeout [ 69.274103][ T5769] Cannot create hsr debugfs directory [ 69.346539][ T5781] Bluetooth: hci2: command tx timeout [ 69.346768][ T5773] Bluetooth: hci0: command tx timeout [ 69.352471][ T51] Bluetooth: hci3: command tx timeout [ 69.363912][ T5772] hsr_slave_0: entered promiscuous mode [ 69.370418][ T5772] hsr_slave_1: entered promiscuous mode [ 69.377151][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.384922][ T5772] Cannot create hsr debugfs directory [ 69.601555][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.613043][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.624389][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.665014][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.729358][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.744167][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.755115][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.779911][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.870951][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.882822][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.892884][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.920922][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.954926][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.021535][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.044890][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.063950][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.081758][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.091444][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.105100][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.112533][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.151170][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.158370][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.208780][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.223997][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.284402][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.294220][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.329436][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.336645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.360213][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.367500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.382436][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.389601][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.405058][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.412302][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.618950][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.675099][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.710578][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.717822][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.756869][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.764036][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.856740][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.999147][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.009930][ T5767] veth0_vlan: entered promiscuous mode [ 71.050185][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.062832][ T5767] veth1_vlan: entered promiscuous mode [ 71.151682][ T5769] veth0_vlan: entered promiscuous mode [ 71.194887][ T5769] veth1_vlan: entered promiscuous mode [ 71.203180][ T5767] veth0_macvtap: entered promiscuous mode [ 71.222470][ T5767] veth1_macvtap: entered promiscuous mode [ 71.241256][ T5768] veth0_vlan: entered promiscuous mode [ 71.281859][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.309108][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.319938][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.337280][ T5769] veth0_macvtap: entered promiscuous mode [ 71.348909][ T5768] veth1_vlan: entered promiscuous mode [ 71.354187][ T51] Bluetooth: hci1: command tx timeout [ 71.363534][ T5769] veth1_macvtap: entered promiscuous mode [ 71.373731][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.384394][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.394157][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.403687][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.426826][ T5773] Bluetooth: hci3: command tx timeout [ 71.427143][ T5781] Bluetooth: hci2: command tx timeout [ 71.432320][ T51] Bluetooth: hci0: command tx timeout [ 71.491153][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.505117][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.523019][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.569580][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.585626][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.600394][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.615095][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.624516][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.634320][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.646836][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.672737][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.687420][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.739393][ T5768] veth0_macvtap: entered promiscuous mode [ 71.750137][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.752531][ T5772] veth0_vlan: entered promiscuous mode [ 71.764411][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.813594][ T5768] veth1_macvtap: entered promiscuous mode [ 71.845482][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.857316][ T5772] veth1_vlan: entered promiscuous mode [ 71.868744][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.923194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.928599][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.953115][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.963842][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.971958][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.982611][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.000244][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.034456][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.049009][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.060082][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.070675][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.082913][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.094250][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.103211][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.113998][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.125584][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.159952][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.172566][ T5772] veth0_macvtap: entered promiscuous mode [ 72.179954][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.218293][ T5772] veth1_macvtap: entered promiscuous mode [ 72.311979][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.376029][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.387015][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.398089][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.408995][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.426906][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.438870][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.554745][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.605984][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.635020][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.649811][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.664403][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.680297][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.694428][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.794556][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.884970][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.900870][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.910157][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.016799][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.063698][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.128440][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.194722][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.211491][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.284376][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.314947][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.341987][ T5813] usb 1-1: config 0 has no interfaces? [ 73.363269][ T5813] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.396461][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.416090][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.426719][ T51] Bluetooth: hci1: command tx timeout [ 73.434855][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.467116][ T5813] usb 1-1: config 0 descriptor?? [ 73.506414][ T51] Bluetooth: hci0: command tx timeout [ 73.507651][ T5781] Bluetooth: hci2: command tx timeout [ 73.511920][ T5773] Bluetooth: hci3: command tx timeout [ 73.751475][ T5861] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 73.751475][ T5861] program syz.3.6 not setting count and/or reply_len properly [ 73.831570][ T5865] syz.2.7[5865]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.883827][ T5865] loop2: detected capacity change from 0 to 1024 [ 73.923686][ T5865] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.999318][ T5865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.667735][ T5865] overlayfs: missing 'lowerdir' [ 74.675651][ T5865] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 74.762489][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.307196][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 75.509342][ T51] Bluetooth: hci1: command tx timeout [ 75.587383][ T5773] Bluetooth: hci3: command tx timeout [ 75.587383][ T5781] Bluetooth: hci0: command tx timeout [ 75.598547][ T51] Bluetooth: hci2: command tx timeout [ 75.639338][ T23] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 75.717050][ T23] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 75.843404][ T23] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 75.939691][ T23] usb 3-1: config 150 has no interface number 0 [ 76.007253][ T23] usb 3-1: config 150 interface 204 has no altsetting 0 [ 76.042779][ T5757] usb 1-1: USB disconnect, device number 2 [ 76.077300][ T23] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 76.107924][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.152473][ T23] usb 3-1: Product: syz [ 76.171271][ T23] usb 3-1: Manufacturer: syz [ 76.246677][ T23] usb 3-1: SerialNumber: syz [ 76.637801][ T5894] Bluetooth: MGMT ver 1.22 [ 76.657934][ T5894] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 76.684951][ T5896] loop0: detected capacity change from 0 to 1024 [ 76.717693][ T5896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.782472][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.352757][ T5896] overlayfs: missing 'lowerdir' [ 78.487383][ T9] usb 3-1: USB disconnect, device number 2 [ 78.507051][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.049853][ T5923] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 79.049853][ T5923] program syz.1.21 not setting count and/or reply_len properly [ 79.710664][ T5928] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 80.461169][ T5938] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 80.945975][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 81.032309][ T5944] loop0: detected capacity change from 0 to 1024 [ 81.077739][ T5944] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.130198][ T5944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.169070][ T9] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 81.197548][ T9] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 81.234721][ T9] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 81.274787][ T9] usb 3-1: config 150 has no interface number 0 [ 81.466167][ T9] usb 3-1: config 150 interface 204 has no altsetting 0 [ 81.583473][ T9] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 81.634009][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.855308][ T9] usb 3-1: Product: syz [ 81.916049][ T28] cfg80211: failed to load regulatory.db [ 81.942965][ T9] usb 3-1: Manufacturer: syz [ 81.948669][ T5944] overlayfs: missing 'lowerdir' [ 81.963777][ T9] usb 3-1: SerialNumber: syz [ 82.028183][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.076809][ T5757] usb 3-1: USB disconnect, device number 3 [ 84.375778][ T5972] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 85.430404][ T5979] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 86.212478][ T5999] loop2: detected capacity change from 0 to 1024 [ 86.238676][ T5999] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.264412][ T5999] EXT4-fs: inline encryption not supported [ 86.360032][ T5997] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 86.360032][ T5997] program syz.1.43 not setting count and/or reply_len properly [ 86.404837][ T5999] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 86.968241][ T27] audit: type=1326 audit(1779818530.481:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.2.48" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb88179ce59 code=0x0 [ 87.066361][ T5757] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 87.262300][ T5757] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 87.283599][ T5757] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 87.358253][ T5757] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 87.399803][ T5757] usb 1-1: config 150 has no interface number 0 [ 87.429661][ T5757] usb 1-1: config 150 interface 204 has no altsetting 0 [ 87.479239][ T5757] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 87.489225][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.509710][ T5757] usb 1-1: Product: syz [ 87.515425][ T5757] usb 1-1: Manufacturer: syz [ 87.523783][ T5757] usb 1-1: SerialNumber: syz [ 87.972516][ T6016] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 89.026951][ T6029] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 89.949888][ T28] usb 1-1: USB disconnect, device number 3 [ 90.142189][ T6048] loop3: detected capacity change from 0 to 1024 [ 90.169030][ T6048] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.175630][ T6048] EXT4-fs: inline encryption not supported [ 90.211948][ T6051] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 90.325553][ T6048] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 90.416374][ T6056] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 90.416374][ T6056] program syz.0.63 not setting count and/or reply_len properly [ 91.568879][ T6063] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 92.439731][ T27] audit: type=1326 audit(1779818535.951:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.62" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa44a59ce59 code=0x0 [ 92.554724][ T6081] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 92.740595][ T787] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.953478][ T6089] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 92.953478][ T6089] program syz.2.74 not setting count and/or reply_len properly [ 93.668440][ T787] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 93.807243][ T787] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 93.819014][ T787] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 93.828847][ T787] usb 2-1: config 150 has no interface number 0 [ 93.835892][ T787] usb 2-1: config 150 interface 204 has no altsetting 0 [ 93.857627][ T787] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 93.876210][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.884291][ T787] usb 2-1: Product: syz [ 93.892900][ T787] usb 2-1: Manufacturer: syz [ 93.897845][ T787] usb 2-1: SerialNumber: syz [ 93.968100][ T6095] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 94.426215][ T6108] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 94.613795][ T6111] loop3: detected capacity change from 0 to 1024 [ 94.634679][ T6111] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.766079][ T6111] EXT4-fs: inline encryption not supported [ 94.832803][ T6111] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 94.945102][ T6117] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 94.945102][ T6117] program syz.2.85 not setting count and/or reply_len properly [ 95.638949][ T28] usb 2-1: USB disconnect, device number 2 [ 95.741390][ T6120] loop2: detected capacity change from 0 to 1024 [ 95.829278][ T6120] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.194575][ T6120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.955051][ T6127] overlayfs: missing 'lowerdir' [ 97.256239][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.281188][ T27] audit: type=1326 audit(1779818540.791:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz.3.84" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa44a59ce59 code=0x0 [ 97.354012][ T6138] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 97.976081][ T5814] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 98.231354][ T5814] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 98.293668][ T5814] usb 1-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 98.374156][ T5814] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 98.435095][ T5814] usb 1-1: config 150 has no interface number 0 [ 98.489922][ T5814] usb 1-1: config 150 interface 204 has no altsetting 0 [ 98.572862][ T5814] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 98.636789][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.668909][ T5814] usb 1-1: Product: syz [ 98.673137][ T5814] usb 1-1: Manufacturer: syz [ 98.711316][ T5814] usb 1-1: SerialNumber: syz [ 98.879755][ T6158] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 98.879755][ T6158] program syz.1.94 not setting count and/or reply_len properly [ 99.397142][ T6165] loop3: detected capacity change from 0 to 1024 [ 99.420877][ T6165] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.468722][ T6167] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 99.486651][ T6165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.617592][ T6165] overlayfs: missing 'lowerdir' [ 99.651884][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.818662][ T6177] loop2: detected capacity change from 0 to 1024 [ 99.861426][ T6177] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.912542][ T6177] EXT4-fs: inline encryption not supported [ 99.961431][ T6177] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 101.168138][ T28] usb 1-1: USB disconnect, device number 4 [ 101.404238][ T27] audit: type=1326 audit(1779818544.911:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.105" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb88179ce59 code=0x0 [ 101.507458][ T6198] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 101.651023][ T6202] loop3: detected capacity change from 0 to 1024 [ 101.672735][ T6202] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.751635][ T6202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.926908][ T6202] overlayfs: missing 'lowerdir' [ 101.978971][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.437366][ T6214] mmap: syz.2.115 (6214) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.479946][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.490502][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.500436][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.511063][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.521144][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.531760][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.541714][ T6214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.552642][ T6214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.571729][ T6214] batman_adv: batadv0: Adding interface: vlan2 [ 102.578043][ T6214] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.603337][ T6214] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 103.603621][ T6224] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 103.603621][ T6224] program syz.0.114 not setting count and/or reply_len properly [ 105.386427][ T6236] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 105.556040][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 106.431658][ T8] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 106.455948][ T8] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 106.476260][ T8] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 106.486873][ T8] usb 3-1: config 150 has no interface number 0 [ 106.493198][ T8] usb 3-1: config 150 interface 204 has no altsetting 0 [ 106.503150][ T8] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 106.512516][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.520623][ T8] usb 3-1: Product: syz [ 106.525307][ T8] usb 3-1: Manufacturer: syz [ 106.530261][ T8] usb 3-1: SerialNumber: syz [ 106.779716][ T8] xr_serial 3-1:150.204: skipping garbage [ 106.848869][ T6250] warning: `syz.0.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.974693][ T27] audit: type=1326 audit(1779818550.481:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6241 comm="syz.1.123" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa17ef9ce59 code=0x0 [ 107.383470][ T6262] Zero length message leads to an empty skb [ 108.109016][ T6270] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 108.216765][ T6272] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 108.352473][ T28] usb 3-1: USB disconnect, device number 4 [ 110.150567][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 110.289819][ T6296] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 110.289819][ T6296] program syz.2.135 not setting count and/or reply_len properly [ 111.137396][ T27] audit: type=1326 audit(1779818554.651:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6298 comm="syz.0.140" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd2159ce59 code=0x0 [ 111.160708][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.401970][ T6306] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 111.539686][ T6312] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 112.156546][ T2132] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 113.023000][ T2132] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 113.031646][ T2132] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 113.046954][ T2132] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 113.056490][ T2132] usb 3-1: config 150 has no interface number 0 [ 113.062821][ T2132] usb 3-1: config 150 interface 204 has no altsetting 0 [ 113.074588][ T2132] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 113.092699][ T2132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.101875][ T2132] usb 3-1: Product: syz [ 113.106863][ T2132] usb 3-1: Manufacturer: syz [ 113.111533][ T2132] usb 3-1: SerialNumber: syz [ 113.335977][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.392364][ T2132] xr_serial 3-1:150.204: skipping garbage [ 113.491547][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 113.565956][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 113.573238][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 113.916863][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB7, skipping [ 113.931571][ T8] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 113.941038][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.949255][ T8] usb 4-1: Product: syz [ 113.953524][ T8] usb 4-1: Manufacturer: syz [ 113.958289][ T8] usb 4-1: SerialNumber: syz [ 113.968185][ T8] usb 4-1: config 0 descriptor?? [ 114.172604][ T6337] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 114.203781][ T8] usb 4-1: USB disconnect, device number 2 [ 114.382855][ T6341] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 114.382855][ T6341] program syz.1.151 not setting count and/or reply_len properly [ 114.676214][ T27] audit: type=1326 audit(1779818558.181:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6338 comm="syz.0.153" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd2159ce59 code=0x0 [ 114.699616][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.740319][ T9] usb 3-1: USB disconnect, device number 5 [ 114.798994][ T6345] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 117.618482][ T6373] overlayfs: missing 'lowerdir' [ 117.878776][ T6381] netlink: 'syz.0.165': attribute type 2 has an invalid length. [ 117.879317][ T6379] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 117.958826][ T6381] ------------[ cut here ]------------ [ 117.964398][ T6381] kernel BUG at net/phonet/socket.c:213! [ 117.976049][ T6381] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 117.982194][ T6381] CPU: 0 PID: 6381 Comm: syz.0.165 Not tainted syzkaller #0 [ 117.989506][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.999627][ T6381] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 118.005391][ T6381] Code: 41 5f 5d c3 e8 bc 6a cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 25 8b 23 f8 e9 02 ff ff ff e8 0b 4c cb f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 118.025459][ T6381] RSP: 0018:ffffc9000443f960 EFLAGS: 00010287 [ 118.031662][ T6381] RAX: ffffffff89bbdfe5 RBX: 0000000000000000 RCX: 0000000000080000 [ 118.039668][ T6381] RDX: ffffc9000bed9000 RSI: 0000000000000046 RDI: 0000000000000047 [ 118.047856][ T6381] RBP: ffffc9000443fa10 R08: ffffffff8e8b3aef R09: 1ffffffff1d1675d [ 118.055848][ T6381] R10: dffffc0000000000 R11: fffffbfff1d1675e R12: dffffc0000000000 [ 118.063843][ T6381] R13: ffff88805df2d400 R14: ffff888079308c80 R15: 1ffff92000887f30 [ 118.071843][ T6381] FS: 00007fcd224876c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 118.080970][ T6381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.087576][ T6381] CR2: 00007fa44b3456b8 CR3: 000000002da60000 CR4: 00000000003506f0 [ 118.095569][ T6381] Call Trace: [ 118.098860][ T6381] [ 118.101789][ T6381] ? pn_socket_ioctl+0x350/0x350 [ 118.106727][ T6381] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 118.112034][ T6381] ? security_socket_sendmsg+0x80/0xa0 [ 118.117523][ T6381] ? pn_socket_ioctl+0x350/0x350 [ 118.122480][ T6381] ____sys_sendmsg+0x5ba/0x960 [ 118.127249][ T6381] ? __asan_memset+0x22/0x40 [ 118.131842][ T6381] ? __sys_sendmsg_sock+0x30/0x30 [ 118.136878][ T6381] ? __import_iovec+0x5f2/0x850 [ 118.141733][ T6381] ? import_iovec+0x73/0xa0 [ 118.146243][ T6381] ___sys_sendmsg+0x2a6/0x360 [ 118.151021][ T6381] ? __sys_sendmsg+0x2a0/0x2a0 [ 118.155820][ T6381] ? exc_page_fault+0x8c/0x100 [ 118.160658][ T6381] __se_sys_sendmsg+0x1c2/0x2b0 [ 118.165514][ T6381] ? __x64_sys_sendmsg+0x80/0x80 [ 118.170488][ T6381] ? lockdep_hardirqs_on+0x98/0x150 [ 118.175695][ T6381] do_syscall_64+0x55/0xb0 [ 118.180117][ T6381] ? clear_bhb_loop+0x40/0x90 [ 118.184796][ T6381] ? clear_bhb_loop+0x40/0x90 [ 118.189479][ T6381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.195377][ T6381] RIP: 0033:0x7fcd2159ce59 [ 118.199807][ T6381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.219412][ T6381] RSP: 002b:00007fcd22487028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.227828][ T6381] RAX: ffffffffffffffda RBX: 00007fcd21815fa0 RCX: 00007fcd2159ce59 [ 118.235807][ T6381] RDX: 0000000004004081 RSI: 00002000000002c0 RDI: 0000000000000007 [ 118.243793][ T6381] RBP: 00007fcd21632d6f R08: 0000000000000000 R09: 0000000000000000 [ 118.251785][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.259758][ T6381] R13: 00007fcd21816038 R14: 00007fcd21815fa0 R15: 00007fff5ed94a98 [ 118.267735][ T6381] [ 118.270840][ T6381] Modules linked in: [ 118.294134][ T6381] ---[ end trace 0000000000000000 ]--- [ 118.299800][ T6381] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 118.305771][ T6381] Code: 41 5f 5d c3 e8 bc 6a cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 25 8b 23 f8 e9 02 ff ff ff e8 0b 4c cb f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 118.328717][ T6381] RSP: 0018:ffffc9000443f960 EFLAGS: 00010287 [ 118.445214][ T6390] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 118.445214][ T6390] program syz.1.166 not setting count and/or reply_len properly [ 118.544633][ T6381] RAX: ffffffff89bbdfe5 RBX: 0000000000000000 RCX: 0000000000080000 [ 118.596325][ T6381] RDX: ffffc9000bed9000 RSI: 0000000000000046 RDI: 0000000000000047 [ 118.668388][ T6381] RBP: ffffc9000443fa10 R08: ffffffff8e8b3aef R09: 1ffffffff1d1675d [ 118.722710][ T6381] R10: dffffc0000000000 R11: fffffbfff1d1675e R12: dffffc0000000000 [ 118.766539][ T6381] R13: ffff88805df2d400 R14: ffff888079308c80 R15: 1ffff92000887f30 [ 118.775215][ T6381] FS: 00007fcd224876c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 118.795235][ T6381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.803975][ T6381] CR2: 000000110c3fa368 CR3: 000000002da60000 CR4: 00000000003506f0 [ 118.821040][ T6381] Kernel panic - not syncing: Fatal exception [ 118.827448][ T6381] Kernel Offset: disabled [ 118.831810][ T6381] Rebooting in 86400 seconds..