last executing test programs: 51.117881537s ago: executing program 0 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="440033008000e100ffffffffffff08021100000000000000004d0001400000010003013404063e020d80"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) 50.997250298s ago: executing program 0 (id=338): syz_80211_inject_frame(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="68040a00080211000001080211000000ffffffffffffb4050a2d4b4fb19ba138be85af4435f8b5c6724a8f114bdbcf8f435adf050457c171a691894a4ffe981927e25cb57d81364e94231ecc3811fc50a68afccb28dea869bfa6518637548d984fed1699356671ebec04d3474eb43f0a72a1ea99a32d24e9a63ca3d82f238eddfc610265d20320814536bf14a94a0db001ff303869"], 0x230) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 50.289587131s ago: executing program 0 (id=349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r2, 0xdb689000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.001329462s ago: executing program 0 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 49.679717719s ago: executing program 0 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 49.275436719s ago: executing program 3 (id=359): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r2, 0xdb689000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 49.213437843s ago: executing program 3 (id=360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) 49.093692275s ago: executing program 3 (id=361): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000002100)=0x200) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 49.053512479s ago: executing program 3 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 48.936062994s ago: executing program 3 (id=363): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) 48.772650563s ago: executing program 0 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="440033008000e100ffffffffffff08021100000000000000004d0001400000010003013404063e020d80"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) 48.499473144s ago: executing program 32 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="440033008000e100ffffffffffff08021100000000000000004d0001400000010003013404063e020d80"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) 47.702999697s ago: executing program 3 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 47.458963887s ago: executing program 33 (id=374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 46.647585227s ago: executing program 1 (id=381): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time}], 0x1c) 45.723795307s ago: executing program 1 (id=383): syz_usb_connect(0x6, 0x2d, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYBLOB="8f8751cc0df15bb8df576cb652de652bf0c7d3e669073f395810ffbcbce74f27814c1976c8f5957ff30304f09795bdbb9bc0751754a9f967835a0156d80d88c4255fadf9ca52568842", @ANYRES8, @ANYRES8=0x0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000373000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(0x0, 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x82) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) 45.038802539s ago: executing program 1 (id=389): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time}], 0x1c) 44.044993137s ago: executing program 1 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 43.88524488s ago: executing program 1 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, 0x0, 0x0) 42.601162165s ago: executing program 1 (id=397): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time}], 0x1c) 42.330551195s ago: executing program 34 (id=397): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time}], 0x1c) 12.804310819s ago: executing program 5 (id=471): syz_usb_connect(0x6, 0x2d, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYBLOB="8f8751cc0df15bb8df576cb652de652bf0c7d3e669073f395810ffbcbce74f27814c1976c8f5957ff30304f09795bdbb9bc0751754a9f967835a0156d80d88c4255fadf9ca5256884201", @ANYRES8, @ANYRES8=0x0], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000373000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(0x0, 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x82) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) open(&(0x7f0000000000)='.\x00', 0x1000000, 0x0) 12.656926844s ago: executing program 6 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 12.467241564s ago: executing program 6 (id=474): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aacacdf7a4c66bc957", 0x1a}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1", 0xab}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x1b4}], 0x1}}], 0x2, 0x42054) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 12.025630305s ago: executing program 5 (id=478): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x5, 0x1, 0x0, 0x1, [@generic='@']}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0xc010) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x2020) 11.815481883s ago: executing program 5 (id=480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x44) 11.585711383s ago: executing program 5 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 10.192701174s ago: executing program 6 (id=483): syz_80211_inject_frame(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="68040a00080211000001080211000000ffffffffffffb4050a2d4b4fb19ba138be85af4435f8b5c6724a8f114bdbcf8f435adf050457c171a691894a4ffe981927e25cb57d81364e94231ecc3811fc50a68afccb28dea869bfa6518637548d984fed1699356671ebec04d3474eb43f0a72a1ea99a32d24e9a63ca3d82f238eddfc610265d20320814536bf14a94a0db001ff303869b6"], 0x230) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e1f"], 0x22) 9.791144859s ago: executing program 5 (id=484): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 6.823851885s ago: executing program 35 (id=483): syz_80211_inject_frame(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="68040a00080211000001080211000000ffffffffffffb4050a2d4b4fb19ba138be85af4435f8b5c6724a8f114bdbcf8f435adf050457c171a691894a4ffe981927e25cb57d81364e94231ecc3811fc50a68afccb28dea869bfa6518637548d984fed1699356671ebec04d3474eb43f0a72a1ea99a32d24e9a63ca3d82f238eddfc610265d20320814536bf14a94a0db001ff303869b6"], 0x230) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e1f"], 0x22) 6.575367165s ago: executing program 2 (id=489): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x5, 0x1, 0x0, 0x1, [@generic='@']}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0xc010) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) 6.28892946s ago: executing program 2 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x44) 6.012506461s ago: executing program 2 (id=491): syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806f, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x6, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.689341452s ago: executing program 5 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 5.096195663s ago: executing program 36 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 4.214600482s ago: executing program 2 (id=494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xb4f) write$tun(r0, &(0x7f0000000700)=ANY=[], 0x14c) 3.577486845s ago: executing program 2 (id=495): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.973598614s ago: executing program 2 (id=502): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d0000000109022400010000"], 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\n.\x00\x00'], 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 559.534961ms ago: executing program 4 (id=504): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x5, 0x1, 0x0, 0x1, [@generic='@']}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0xc010) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="98"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) 491.982085ms ago: executing program 4 (id=505): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x1}) 387.602362ms ago: executing program 4 (id=506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1808, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 305.443808ms ago: executing program 4 (id=507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x44) 177.876673ms ago: executing program 4 (id=508): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c20000", 0x10) 0s ago: executing program 4 (id=509): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 92.000397][ T9] cfg80211: failed to load regulatory.db [ 93.447092][ T5595] cgroup: Unknown subsys name 'net' [ 93.686663][ T5595] cgroup: Unknown subsys name 'cpuset' [ 93.741656][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.792841][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.494176][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.497590][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.498406][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.500364][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.501264][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.632862][ T4923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.653430][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.654301][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.655828][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.686467][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.718159][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.738709][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.767235][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.769069][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.770956][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.785061][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.805903][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.841240][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.860753][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.863987][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.593291][ T4923] Bluetooth: hci0: command tx timeout [ 101.831226][ T4923] Bluetooth: hci1: command tx timeout [ 101.911217][ T4923] Bluetooth: hci2: command tx timeout [ 101.991277][ T4923] Bluetooth: hci3: command tx timeout [ 102.019906][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.020201][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.020413][ T5616] bridge_slave_0: entered allmulticast mode [ 102.034446][ T5616] bridge_slave_0: entered promiscuous mode [ 102.092436][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.092700][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.092905][ T5616] bridge_slave_1: entered allmulticast mode [ 102.095371][ T5616] bridge_slave_1: entered promiscuous mode [ 102.213488][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.213810][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.214001][ T5612] bridge_slave_0: entered allmulticast mode [ 102.216691][ T5612] bridge_slave_0: entered promiscuous mode [ 102.258800][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.259143][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.259416][ T5617] bridge_slave_0: entered allmulticast mode [ 102.271245][ T5617] bridge_slave_0: entered promiscuous mode [ 102.310121][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.310453][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.310899][ T5612] bridge_slave_1: entered allmulticast mode [ 102.320399][ T5612] bridge_slave_1: entered promiscuous mode [ 102.346502][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.346925][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.347247][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.347528][ T5617] bridge_slave_1: entered allmulticast mode [ 102.350379][ T5617] bridge_slave_1: entered promiscuous mode [ 102.390341][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.390581][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.391681][ T5615] bridge_slave_0: entered allmulticast mode [ 102.405606][ T5615] bridge_slave_0: entered promiscuous mode [ 102.446124][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.504699][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.505085][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.505356][ T5615] bridge_slave_1: entered allmulticast mode [ 102.508223][ T5615] bridge_slave_1: entered promiscuous mode [ 102.608315][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.643903][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.675279][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.678753][ T5616] team0: Port device team_slave_0 added [ 102.702166][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.707962][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.746922][ T5616] team0: Port device team_slave_1 added [ 102.772051][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.870595][ T5612] team0: Port device team_slave_0 added [ 102.896869][ T5617] team0: Port device team_slave_0 added [ 102.923779][ T5612] team0: Port device team_slave_1 added [ 102.925720][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.925732][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.925753][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.940435][ T5617] team0: Port device team_slave_1 added [ 102.965991][ T5615] team0: Port device team_slave_0 added [ 103.011276][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.011294][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.011323][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.068843][ T5615] team0: Port device team_slave_1 added [ 103.142902][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.142916][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.142938][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.147755][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.147768][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.147788][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.238502][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.238564][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.238642][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.262412][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.262463][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.262520][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.279591][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.279641][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.279780][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.399102][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.399116][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.399136][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.477788][ T5616] hsr_slave_0: entered promiscuous mode [ 103.479575][ T5616] hsr_slave_1: entered promiscuous mode [ 103.671330][ T4923] Bluetooth: hci0: command tx timeout [ 103.896075][ T5612] hsr_slave_0: entered promiscuous mode [ 103.897647][ T5612] hsr_slave_1: entered promiscuous mode [ 103.899072][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 103.899166][ T5612] Cannot create hsr debugfs directory [ 103.921628][ T4923] Bluetooth: hci1: command tx timeout [ 103.951408][ T5617] hsr_slave_0: entered promiscuous mode [ 103.952990][ T5617] hsr_slave_1: entered promiscuous mode [ 103.954285][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 103.954315][ T5617] Cannot create hsr debugfs directory [ 103.991429][ T4923] Bluetooth: hci2: command tx timeout [ 104.016472][ T5615] hsr_slave_0: entered promiscuous mode [ 104.018018][ T5615] hsr_slave_1: entered promiscuous mode [ 104.019271][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 104.019301][ T5615] Cannot create hsr debugfs directory [ 104.072910][ T4923] Bluetooth: hci3: command tx timeout [ 104.913962][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.969787][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.989740][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.017778][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.032070][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.068210][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.099623][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.126449][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.264658][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.298733][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.310503][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.369901][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.389307][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.407435][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.445252][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.489697][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.667397][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.704155][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.708705][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.749733][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.764177][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.764900][ T4923] Bluetooth: hci0: command tx timeout [ 105.790141][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.823620][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.867650][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.001816][ T4923] Bluetooth: hci1: command tx timeout [ 106.052258][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.071404][ T4923] Bluetooth: hci2: command tx timeout [ 106.097167][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.118825][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.152691][ T4923] Bluetooth: hci3: command tx timeout [ 106.176028][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.181849][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.236144][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.254222][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.286553][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.366665][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.496482][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.550435][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.550609][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.578440][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.636199][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.636345][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.764198][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.812595][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.812851][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.864243][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.903401][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.903564][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.007473][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.071663][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.076725][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.076896][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.165173][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.165407][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.296447][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.425546][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.425771][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.558639][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.559891][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.831192][ T4923] Bluetooth: hci0: command tx timeout [ 108.071749][ T4923] Bluetooth: hci1: command tx timeout [ 108.154971][ T4923] Bluetooth: hci2: command tx timeout [ 108.241287][ T4923] Bluetooth: hci3: command tx timeout [ 108.318271][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.649011][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.863258][ T5616] veth0_vlan: entered promiscuous mode [ 108.998068][ T5616] veth1_vlan: entered promiscuous mode [ 109.048274][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.169624][ T5612] veth0_vlan: entered promiscuous mode [ 109.243942][ T5612] veth1_vlan: entered promiscuous mode [ 109.259018][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.289380][ T5616] veth0_macvtap: entered promiscuous mode [ 109.337585][ T5616] veth1_macvtap: entered promiscuous mode [ 109.409189][ T5617] veth0_vlan: entered promiscuous mode [ 109.465262][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.468619][ T5617] veth1_vlan: entered promiscuous mode [ 109.521977][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.550142][ T5612] veth0_macvtap: entered promiscuous mode [ 109.587433][ T1419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.608685][ T5612] veth1_macvtap: entered promiscuous mode [ 109.617165][ T1419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.642601][ T1419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.664389][ T5615] veth0_vlan: entered promiscuous mode [ 109.672983][ T1419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.816256][ T5615] veth1_vlan: entered promiscuous mode [ 109.848135][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.993344][ T5617] veth0_macvtap: entered promiscuous mode [ 110.027270][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.065456][ T5617] veth1_macvtap: entered promiscuous mode [ 110.096207][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.113330][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.120089][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.150846][ T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.311167][ T1427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.311190][ T1427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.433132][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.434282][ T5615] veth0_macvtap: entered promiscuous mode [ 110.598482][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.614450][ T5615] veth1_macvtap: entered promiscuous mode [ 110.637967][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.637989][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.681954][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.755602][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.759201][ T3324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.759737][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.864388][ T1427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.864411][ T1427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.975566][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.319535][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.417742][ T5759] binder: 5758:5759 ioctl c0306201 0 returned -14 [ 111.471417][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.471433][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.503848][ T5760] binder: 5758:5760 ioctl c0306201 0 returned -14 [ 111.558092][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.584574][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.622120][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.638996][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.924685][ T1419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.924708][ T1419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.512739][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.512762][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.787503][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.787525][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.039271][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.039318][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.023766][ T5780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.092282][ T5784] binder: BINDER_SET_CONTEXT_MGR already set [ 114.092298][ T5784] binder: 5782:5784 ioctl 4018620d 200000004a80 returned -16 [ 114.414817][ T5794] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 114.423966][ T5794] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.490270][ T5794] vhci_hcd vhci_hcd.0: Device attached [ 114.893684][ T5795] vhci_hcd: connection closed [ 114.896810][ T154] vhci_hcd vhci_hcd.3: stop threads [ 114.898024][ T154] vhci_hcd vhci_hcd.3: release socket [ 114.924243][ T154] vhci_hcd vhci_hcd.3: disconnect device [ 114.984139][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 115.657426][ T5813] binder: BINDER_SET_CONTEXT_MGR already set [ 115.657444][ T5813] binder: 5812:5813 ioctl 4018620d 200000004a80 returned -16 [ 116.065236][ T5819] binder: 5817:5819 ioctl c0306201 0 returned -14 [ 116.072391][ T4923] Bluetooth: hci1: command 0x206a tx timeout [ 116.085062][ T60] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 116.584126][ T5828] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 116.584158][ T5828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.584261][ T5828] vhci_hcd vhci_hcd.0: Device attached [ 116.704589][ T5832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.749651][ T5829] vhci_hcd: connection closed [ 116.753934][ T1183] vhci_hcd vhci_hcd.3: stop threads [ 116.753954][ T1183] vhci_hcd vhci_hcd.3: release socket [ 116.753982][ T1183] vhci_hcd vhci_hcd.3: disconnect device [ 116.917451][ T5838] binder: BINDER_SET_CONTEXT_MGR already set [ 116.917468][ T5838] binder: 5837:5838 ioctl 4018620d 200000004a80 returned -16 [ 117.145347][ T5844] binder: 5843:5844 ioctl c0306201 0 returned -14 [ 117.395842][ T5850] netlink: 68 bytes leftover after parsing attributes in process `syz.3.39'. [ 117.803983][ T5865] binder: 5864:5865 ioctl c0306201 0 returned -14 [ 117.884851][ T5866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.294254][ T5869] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 118.294282][ T5869] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.298231][ T5869] vhci_hcd vhci_hcd.0: Device attached [ 118.408986][ T5873] netlink: 68 bytes leftover after parsing attributes in process `syz.0.48'. [ 118.432533][ T5870] vhci_hcd: connection closed [ 118.433201][ T1427] vhci_hcd vhci_hcd.2: stop threads [ 118.433226][ T1427] vhci_hcd vhci_hcd.2: release socket [ 118.433266][ T1427] vhci_hcd vhci_hcd.2: disconnect device [ 118.723828][ T4923] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 118.723881][ T4923] Bluetooth: hci3: command 0x206a tx timeout [ 119.884736][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.911990][ T5620] Bluetooth: hci1: command 0x206a tx timeout [ 119.914134][ T60] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 120.141340][ T37] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 120.285263][ T5905] netlink: 68 bytes leftover after parsing attributes in process `syz.0.60'. [ 120.362664][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.396310][ T37] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 120.396354][ T37] usb 3-1: can't read configurations, error -71 [ 120.701440][ T5914] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 120.701474][ T5914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.701661][ T5914] vhci_hcd vhci_hcd.0: Device attached [ 121.040180][ T5915] vhci_hcd: connection closed [ 121.041425][ T68] vhci_hcd vhci_hcd.3: stop threads [ 121.041453][ T68] vhci_hcd vhci_hcd.3: release socket [ 121.042415][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 121.702957][ T5700] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 121.927529][ T4923] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 121.927579][ T4923] Bluetooth: hci0: command 0x206a tx timeout [ 122.164887][ T5931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.283883][ T5936] binder: BINDER_SET_CONTEXT_MGR already set [ 122.283900][ T5936] binder: 5935:5936 ioctl 4018620d 200000004a80 returned -16 [ 122.522460][ T5944] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 122.522488][ T5944] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.527088][ T5944] vhci_hcd vhci_hcd.0: Device attached [ 122.597284][ T5945] vhci_hcd: connection closed [ 122.604013][ T44] vhci_hcd vhci_hcd.2: stop threads [ 122.604041][ T44] vhci_hcd vhci_hcd.2: release socket [ 122.604080][ T44] vhci_hcd vhci_hcd.2: disconnect device [ 124.112531][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 124.231177][ T4923] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 124.231221][ T4923] Bluetooth: hci1: command 0x206a tx timeout [ 124.308082][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.310141][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 124.310180][ T9] usb 2-1: can't read configurations, error -71 [ 124.374788][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.386547][ T5970] binder: BINDER_SET_CONTEXT_MGR already set [ 124.386589][ T5970] binder: 5967:5970 ioctl 4018620d 200000004a80 returned -16 [ 124.913639][ T5976] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 124.913669][ T5976] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.914490][ T5976] vhci_hcd vhci_hcd.0: Device attached [ 125.043924][ T5977] vhci_hcd: connection closed [ 125.045578][ T1183] vhci_hcd vhci_hcd.1: stop threads [ 125.045607][ T1183] vhci_hcd vhci_hcd.1: release socket [ 125.051420][ T1183] vhci_hcd vhci_hcd.1: disconnect device [ 125.091393][ T32] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 126.344418][ T5997] binder: BINDER_SET_CONTEXT_MGR already set [ 126.344435][ T5997] binder: 5994:5997 ioctl 4018620d 200000004a80 returned -16 [ 126.391350][ T60] Bluetooth: hci2: command 0x206a tx timeout [ 126.391480][ T4923] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 126.503821][ T5998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.654782][ T5707] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 127.000153][ T5707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.014244][ T5707] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 127.014284][ T5707] usb 3-1: can't read configurations, error -71 [ 128.136262][ T6021] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 128.136293][ T6021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.136389][ T6021] vhci_hcd vhci_hcd.0: Device attached [ 128.315698][ T6025] vhci_hcd: connection closed [ 128.316772][ T1427] vhci_hcd vhci_hcd.0: stop threads [ 128.316799][ T1427] vhci_hcd vhci_hcd.0: release socket [ 128.326065][ T1427] vhci_hcd vhci_hcd.0: disconnect device [ 128.361353][ T32] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 128.488276][ T6036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.552369][ T4923] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 128.731275][ T4923] Bluetooth: hci0: command 0x206a tx timeout [ 129.561441][ T6063] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 129.561471][ T6063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.561569][ T6063] vhci_hcd vhci_hcd.0: Device attached [ 129.693409][ T6064] vhci_hcd: connection closed [ 129.693801][ T44] vhci_hcd vhci_hcd.3: stop threads [ 129.693827][ T44] vhci_hcd vhci_hcd.3: release socket [ 129.709949][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 129.741981][ T5707] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 129.936570][ T6074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.551165][ T60] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 130.551294][ T4923] Bluetooth: hci1: command 0x206a tx timeout [ 130.579164][ T60] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 130.969025][ T6099] binder: 6094:6099 ioctl c0306201 0 returned -14 [ 131.114321][ T6103] binder: 6094:6103 ioctl c0306201 0 returned -14 [ 131.146604][ T6097] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 131.146635][ T6097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.146726][ T6097] vhci_hcd vhci_hcd.0: Device attached [ 131.362937][ T6104] vhci_hcd: connection closed [ 131.363324][ T104] vhci_hcd vhci_hcd.1: stop threads [ 131.363350][ T104] vhci_hcd vhci_hcd.1: release socket [ 131.363389][ T104] vhci_hcd vhci_hcd.1: disconnect device [ 131.559585][ T6117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.631129][ T4923] Bluetooth: hci1: command 0x206a tx timeout [ 132.655391][ T6142] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 132.655421][ T6142] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 132.655527][ T6142] vhci_hcd vhci_hcd.0: Device attached [ 132.775370][ T6148] binder: 6147:6148 ioctl c0306201 0 returned -14 [ 132.830155][ T6149] binder: 6147:6149 ioctl c0306201 0 returned -14 [ 132.849839][ T6143] vhci_hcd: connection closed [ 132.850461][ T104] vhci_hcd vhci_hcd.2: stop threads [ 132.850489][ T104] vhci_hcd vhci_hcd.2: release socket [ 132.857027][ T104] vhci_hcd vhci_hcd.2: disconnect device [ 132.901359][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 132.965643][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.965741][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.237697][ T6157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.593480][ T4923] Bluetooth: hci0: command 0x206a tx timeout [ 133.595328][ T60] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 133.631737][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 134.170537][ T6176] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 134.170569][ T6176] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 134.172615][ T6176] vhci_hcd vhci_hcd.0: Device attached [ 134.265816][ T6178] vhci_hcd: connection closed [ 134.277897][ T1427] vhci_hcd vhci_hcd.2: stop threads [ 134.277924][ T1427] vhci_hcd vhci_hcd.2: release socket [ 134.277963][ T1427] vhci_hcd vhci_hcd.2: disconnect device [ 134.556745][ T6191] binder: 6189:6191 ioctl c0306201 0 returned -14 [ 134.575446][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 134.611551][ T6193] binder: 6189:6193 ioctl c0306201 0 returned -14 [ 134.649327][ T6194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.389280][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 135.390915][ T6216] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 135.390942][ T6216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.409159][ T6216] vhci_hcd vhci_hcd.0: Device attached [ 135.553166][ T6217] vhci_hcd: connection closed [ 135.566144][ T68] vhci_hcd vhci_hcd.0: stop threads [ 135.566173][ T68] vhci_hcd vhci_hcd.0: release socket [ 135.566260][ T68] vhci_hcd vhci_hcd.0: disconnect device [ 135.671913][ T4923] Bluetooth: hci0: command 0x206a tx timeout [ 135.672411][ T60] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 135.796688][ T6229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.013311][ T6238] binder: 6237:6238 ioctl 4018620d 0 returned -22 [ 136.349718][ T6248] binder: 6247:6248 ioctl c0306201 0 returned -14 [ 136.412706][ T6252] binder: 6247:6252 ioctl c0306201 0 returned -14 [ 136.477194][ T6255] binder: 6254:6255 ioctl 4018620d 0 returned -22 [ 136.604926][ T6258] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 136.604954][ T6258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.605458][ T6258] vhci_hcd vhci_hcd.0: Device attached [ 136.749524][ T6260] vhci_hcd: connection closed [ 136.756665][ T44] vhci_hcd vhci_hcd.1: stop threads [ 136.756707][ T44] vhci_hcd vhci_hcd.1: release socket [ 136.756791][ T44] vhci_hcd vhci_hcd.1: disconnect device [ 137.055748][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.262011][ T6277] binder: 6276:6277 ioctl 4018620d 0 returned -22 [ 137.667277][ T6289] binder: 6288:6289 ioctl c0306201 0 returned -14 [ 137.751640][ T4923] Bluetooth: hci0: command 0x206a tx timeout [ 137.751713][ T60] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 137.782653][ T6295] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 137.782683][ T6295] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.785962][ T6295] vhci_hcd vhci_hcd.0: Device attached [ 137.940547][ T6300] binder: BINDER_SET_CONTEXT_MGR already set [ 137.940563][ T6300] binder: 6299:6300 ioctl 4018620d 200000004a80 returned -16 [ 137.986844][ T6297] vhci_hcd: connection closed [ 137.988295][ T44] vhci_hcd vhci_hcd.0: stop threads [ 137.988321][ T44] vhci_hcd vhci_hcd.0: release socket [ 137.988402][ T44] vhci_hcd vhci_hcd.0: disconnect device [ 138.022293][ T9] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 138.040463][ T9] usb 33-1: enqueue for inactive port 0 [ 138.111296][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 138.249820][ T6306] netlink: 68 bytes leftover after parsing attributes in process `syz.2.228'. [ 138.367940][ T6311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.655972][ T6320] binder: BINDER_SET_CONTEXT_MGR already set [ 138.655984][ T6320] binder: 6319:6320 ioctl 4018620d 200000004a80 returned -16 [ 138.870699][ T6326] netlink: 68 bytes leftover after parsing attributes in process `syz.0.238'. [ 139.127361][ T6334] binder: 6332:6334 ioctl c0306201 0 returned -14 [ 139.263535][ T6341] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 139.263565][ T6341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.266608][ T6341] vhci_hcd vhci_hcd.0: Device attached [ 139.267588][ T6340] binder: BINDER_SET_CONTEXT_MGR already set [ 139.267601][ T6340] binder: 6338:6340 ioctl 4018620d 200000004a80 returned -16 [ 139.416842][ T6342] vhci_hcd: connection closed [ 139.418942][ T68] vhci_hcd vhci_hcd.3: stop threads [ 139.418970][ T68] vhci_hcd vhci_hcd.3: release socket [ 139.419051][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 139.441234][ T5622] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 139.565487][ T6349] netlink: 68 bytes leftover after parsing attributes in process `syz.2.248'. [ 139.663100][ T60] Bluetooth: hci3: Malformed LE Event: 0x1b [ 139.672693][ T6352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.420556][ T6371] binder: 6370:6371 ioctl c0306201 0 returned -14 [ 140.540715][ T6375] binder: 6372:6375 ioctl c0306201 0 returned -14 [ 140.599702][ T6377] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 140.599723][ T6377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.599852][ T6377] vhci_hcd vhci_hcd.0: Device attached [ 140.710664][ T6379] vhci_hcd: connection closed [ 140.717475][ T68] vhci_hcd vhci_hcd.1: stop threads [ 140.717504][ T68] vhci_hcd vhci_hcd.1: release socket [ 140.717545][ T68] vhci_hcd vhci_hcd.1: disconnect device [ 140.800611][ T6385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.801247][ T60] Bluetooth: hci0: Malformed LE Event: 0x1b [ 141.717955][ T6403] binder: 6400:6403 ioctl c0306201 0 returned -14 [ 142.019981][ T6409] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 142.020013][ T6409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 142.020124][ T6409] vhci_hcd vhci_hcd.0: Device attached [ 142.039572][ T60] Bluetooth: hci0: Malformed LE Event: 0x1b [ 142.047893][ T6410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.134064][ T6411] vhci_hcd: connection closed [ 142.135346][ T1427] vhci_hcd vhci_hcd.2: stop threads [ 142.135374][ T1427] vhci_hcd vhci_hcd.2: release socket [ 142.165623][ T1427] vhci_hcd vhci_hcd.2: disconnect device [ 142.206687][ T6415] binder: 6414:6415 ioctl c0306201 0 returned -14 [ 142.209380][ T6415] binder: 6414:6415 ioctl c0306201 0 returned -14 [ 142.597678][ T6427] binder: 6426:6427 ioctl c0306201 0 returned -14 [ 142.858854][ T6437] binder: 6436:6437 ioctl c0306201 0 returned -14 [ 142.860194][ T6437] binder: 6436:6437 ioctl c0306201 0 returned -14 [ 143.250812][ T6445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.373227][ T6449] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 143.373256][ T6449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.375576][ T6449] vhci_hcd vhci_hcd.0: Device attached [ 143.490582][ T6451] vhci_hcd: connection closed [ 143.491708][ T44] vhci_hcd vhci_hcd.3: stop threads [ 143.491734][ T44] vhci_hcd vhci_hcd.3: release socket [ 143.491812][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 143.538504][ T6454] binder: 6453:6454 ioctl c0306201 0 returned -14 [ 143.563271][ T37] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 143.717297][ T6458] binder: 6457:6458 ioctl c0306201 0 returned -14 [ 143.738700][ T6458] binder: 6457:6458 ioctl c0306201 0 returned -14 [ 144.226426][ T6471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.250861][ T6475] binder: 6472:6475 ioctl c0306201 0 returned -14 [ 144.371996][ T6479] binder: 6478:6479 ioctl c0306201 0 returned -14 [ 144.426231][ T6481] binder: 6478:6481 ioctl c0306201 0 returned -14 [ 144.905247][ T6488] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 144.905280][ T6488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.917278][ T6488] vhci_hcd vhci_hcd.0: Device attached [ 145.070101][ T6489] vhci_hcd: connection closed [ 145.092077][ T68] vhci_hcd vhci_hcd.3: stop threads [ 145.092110][ T68] vhci_hcd vhci_hcd.3: release socket [ 145.092190][ T68] vhci_hcd vhci_hcd.3: disconnect device [ 145.143030][ T37] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 145.445264][ T6502] binder: 6500:6502 ioctl c0306201 0 returned -14 [ 145.627453][ T6505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.662433][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 145.818494][ T6514] binder: 6513:6514 ioctl c0306201 0 returned -14 [ 146.305415][ T6527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 146.305443][ T6527] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.305543][ T6527] vhci_hcd vhci_hcd.0: Device attached [ 146.446391][ T6528] vhci_hcd: connection closed [ 146.450080][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 146.473351][ T1427] vhci_hcd vhci_hcd.2: stop threads [ 146.473380][ T1427] vhci_hcd vhci_hcd.2: release socket [ 146.487890][ T1427] vhci_hcd vhci_hcd.2: disconnect device [ 146.511355][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 146.987543][ T6543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.195465][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.341'. [ 147.215233][ T6553] binder: 6552:6553 ioctl c0306201 0 returned -14 [ 147.662088][ T6565] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 147.662119][ T6565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.662413][ T6565] vhci_hcd vhci_hcd.0: Device attached [ 147.700118][ T6566] binder: BINDER_SET_CONTEXT_MGR already set [ 147.700135][ T6566] binder: 6564:6566 ioctl 4018620d 200000004a80 returned -16 [ 147.807226][ T6567] vhci_hcd: connection closed [ 147.807827][ T165] vhci_hcd vhci_hcd.3: stop threads [ 147.807855][ T165] vhci_hcd vhci_hcd.3: release socket [ 147.807896][ T165] vhci_hcd vhci_hcd.3: disconnect device [ 148.175171][ T6577] binder: 6576:6577 ioctl c0306201 0 returned -14 [ 148.477228][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.100480][ T6597] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 149.100510][ T6597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.100626][ T6597] vhci_hcd vhci_hcd.0: Device attached [ 149.191367][ T6598] vhci_hcd: connection closed [ 149.194837][ T165] vhci_hcd vhci_hcd.1: stop threads [ 149.194889][ T165] vhci_hcd vhci_hcd.1: release socket [ 149.194930][ T165] vhci_hcd vhci_hcd.1: disconnect device [ 149.225349][ T6601] binder: 6600:6601 ioctl c0306201 0 returned -14 [ 149.556278][ T3324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.655684][ T4923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.670818][ T4923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.684607][ T4923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.688226][ T4923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.689073][ T4923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.035085][ T6615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.381795][ T3324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.766283][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.793549][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.796778][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.817885][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.826209][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.895768][ T3324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.938449][ T6631] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 150.938480][ T6631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.938584][ T6631] vhci_hcd vhci_hcd.0: Device attached [ 151.063938][ T6632] vhci_hcd: connection closed [ 151.064550][ T104] vhci_hcd vhci_hcd.2: stop threads [ 151.064577][ T104] vhci_hcd vhci_hcd.2: release socket [ 151.064618][ T104] vhci_hcd vhci_hcd.2: disconnect device [ 151.386084][ T3324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.708066][ T6650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.831492][ T4923] Bluetooth: hci0: command tx timeout [ 152.730596][ T6666] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 152.730626][ T6666] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 152.730737][ T6666] vhci_hcd vhci_hcd.0: Device attached [ 152.811137][ T6667] vhci_hcd: connection closed [ 152.814580][ T68] vhci_hcd vhci_hcd.2: stop threads [ 152.814609][ T68] vhci_hcd vhci_hcd.2: release socket [ 152.814649][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 152.871340][ T4923] Bluetooth: hci2: command tx timeout [ 153.032943][ T3324] bridge_slave_1: left allmulticast mode [ 153.034220][ T3324] bridge_slave_1: left promiscuous mode [ 153.053738][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.262520][ T3324] bridge_slave_0: left allmulticast mode [ 153.262552][ T3324] bridge_slave_0: left promiscuous mode [ 153.262763][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.457269][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.911464][ T4923] Bluetooth: hci0: command tx timeout [ 154.632090][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.714330][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.767545][ T3324] bond0 (unregistering): Released all slaves [ 154.827370][ T6684] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 154.827398][ T6684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.843691][ T6684] vhci_hcd vhci_hcd.0: Device attached [ 154.908953][ T6685] vhci_hcd: connection closed [ 154.909321][ T1427] vhci_hcd vhci_hcd.2: stop threads [ 154.909351][ T1427] vhci_hcd vhci_hcd.2: release socket [ 154.909392][ T1427] vhci_hcd vhci_hcd.2: disconnect device [ 154.961458][ T4923] Bluetooth: hci2: command tx timeout [ 155.858439][ T6704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.001965][ T4923] Bluetooth: hci0: command tx timeout [ 156.092097][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.127875][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.130610][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.138485][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.141362][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.308234][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 157.032406][ T4923] Bluetooth: hci2: command tx timeout [ 157.060322][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.060628][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.060861][ T6607] bridge_slave_0: entered allmulticast mode [ 157.084614][ T6607] bridge_slave_0: entered promiscuous mode [ 157.113618][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.113995][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.114324][ T6607] bridge_slave_1: entered allmulticast mode [ 157.116829][ T6607] bridge_slave_1: entered promiscuous mode [ 157.306152][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.386578][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.524204][ T6732] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 157.524233][ T6732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.524336][ T6732] vhci_hcd vhci_hcd.0: Device attached [ 157.603587][ T6733] vhci_hcd: connection closed [ 157.603803][ T1419] vhci_hcd vhci_hcd.2: stop threads [ 157.603832][ T1419] vhci_hcd vhci_hcd.2: release socket [ 157.603872][ T1419] vhci_hcd vhci_hcd.2: disconnect device [ 157.651496][ T3324] hsr_slave_0: left promiscuous mode [ 157.691317][ T3324] hsr_slave_1: left promiscuous mode [ 157.692610][ T3324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.692699][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.739150][ T3324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.739179][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.854007][ T3324] veth1_macvtap: left promiscuous mode [ 157.854280][ T3324] veth0_macvtap: left promiscuous mode [ 157.854610][ T3324] veth1_vlan: left promiscuous mode [ 157.854977][ T3324] veth0_vlan: left promiscuous mode [ 158.071194][ T4923] Bluetooth: hci0: command tx timeout [ 158.244365][ T4923] Bluetooth: hci1: command tx timeout [ 158.256030][ T6750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.952737][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 159.011790][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 159.112237][ T4923] Bluetooth: hci2: command tx timeout [ 159.271922][ T6607] team0: Port device team_slave_0 added [ 159.290763][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.429087][ T6607] team0: Port device team_slave_1 added [ 159.584999][ T6761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 159.585032][ T6761] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.585155][ T6761] vhci_hcd vhci_hcd.0: Device attached [ 159.683973][ T6762] vhci_hcd: connection closed [ 159.715760][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.715779][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.715805][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.729883][ T1419] vhci_hcd vhci_hcd.2: stop threads [ 159.729979][ T1419] vhci_hcd vhci_hcd.2: release socket [ 159.761684][ T1419] vhci_hcd vhci_hcd.2: disconnect device [ 159.826819][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.826834][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.826936][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.871277][ T32] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 159.918371][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.918806][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.919118][ T6625] bridge_slave_0: entered allmulticast mode [ 159.929964][ T6625] bridge_slave_0: entered promiscuous mode [ 159.964427][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.964826][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.965071][ T6625] bridge_slave_1: entered allmulticast mode [ 159.967538][ T6625] bridge_slave_1: entered promiscuous mode [ 160.116171][ T6625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.134651][ T6607] hsr_slave_0: entered promiscuous mode [ 160.137724][ T6607] hsr_slave_1: entered promiscuous mode [ 160.139108][ T6607] debugfs: 'hsr0' already exists in 'hsr' [ 160.139139][ T6607] Cannot create hsr debugfs directory [ 160.175397][ T6625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.311402][ T4923] Bluetooth: hci1: command tx timeout [ 160.472005][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.701583][ T6625] team0: Port device team_slave_0 added [ 160.770950][ T6625] team0: Port device team_slave_1 added [ 161.020617][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.020635][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.020663][ T6625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.162260][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.162278][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.162304][ T6625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.267301][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 161.489478][ T3324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.731780][ T6625] hsr_slave_0: entered promiscuous mode [ 161.733404][ T6625] hsr_slave_1: entered promiscuous mode [ 161.734683][ T6625] debugfs: 'hsr0' already exists in 'hsr' [ 161.734713][ T6625] Cannot create hsr debugfs directory [ 161.896505][ T3324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.988197][ T6795] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 161.988227][ T6795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.005048][ T6795] vhci_hcd vhci_hcd.0: Device attached [ 162.094914][ T6796] vhci_hcd: connection closed [ 162.096182][ T1419] vhci_hcd vhci_hcd.2: stop threads [ 162.096215][ T1419] vhci_hcd vhci_hcd.2: release socket [ 162.096247][ T1419] vhci_hcd vhci_hcd.2: disconnect device [ 162.345553][ T3324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.393599][ T4923] Bluetooth: hci1: command tx timeout [ 162.440718][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.442630][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.446731][ T6708] bridge_slave_0: entered allmulticast mode [ 162.463828][ T6708] bridge_slave_0: entered promiscuous mode [ 162.506937][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.507272][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.507519][ T6708] bridge_slave_1: entered allmulticast mode [ 162.513884][ T6708] bridge_slave_1: entered promiscuous mode [ 162.919276][ T6812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.958257][ T3324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.188930][ T6708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.249475][ T6708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.294982][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 163.455085][ T6708] team0: Port device team_slave_0 added [ 163.497593][ T6708] team0: Port device team_slave_1 added [ 163.653866][ T6607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.716266][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.775865][ T6607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.809469][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.880437][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.880451][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.880471][ T6708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.885547][ T6607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.964486][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.982459][ T6708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.982477][ T6708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.982507][ T6708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.983810][ T6607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.106010][ T6607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.465109][ T6835] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 164.465134][ T6835] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.469181][ T6835] vhci_hcd vhci_hcd.0: Device attached [ 164.471898][ T4923] Bluetooth: hci1: command tx timeout [ 164.569180][ T6836] vhci_hcd: connection closed [ 164.569565][ T68] vhci_hcd vhci_hcd.2: stop threads [ 164.569590][ T68] vhci_hcd vhci_hcd.2: release socket [ 164.569630][ T68] vhci_hcd vhci_hcd.2: disconnect device [ 164.640442][ T6708] hsr_slave_0: entered promiscuous mode [ 164.649530][ T6708] hsr_slave_1: entered promiscuous mode [ 164.650816][ T6708] debugfs: 'hsr0' already exists in 'hsr' [ 164.650881][ T6708] Cannot create hsr debugfs directory [ 164.909308][ T3324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.974620][ T6625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.005485][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.056876][ T6625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.099744][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.159061][ T6625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.213261][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.265011][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.379078][ T3324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.475127][ T6625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.520773][ T6625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.748367][ T3324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.094457][ T3324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.785248][ T6864] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 166.785277][ T6864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.786959][ T6607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.787723][ T6864] vhci_hcd vhci_hcd.0: Device attached [ 166.787766][ T6708] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 166.869914][ T6708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.916380][ T6865] vhci_hcd: connection closed [ 166.916720][ T1183] vhci_hcd vhci_hcd.2: stop threads [ 166.916748][ T1183] vhci_hcd vhci_hcd.2: release socket [ 166.920779][ T1183] vhci_hcd vhci_hcd.2: disconnect device [ 166.961978][ T5714] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 167.025594][ T6708] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 167.067583][ T6708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.087627][ T6708] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 167.137442][ T6708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.183030][ T6708] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 167.237870][ T6708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.258483][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 167.544346][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.625548][ T6883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.701724][ T3324] bridge_slave_1: left allmulticast mode [ 167.701763][ T3324] bridge_slave_1: left promiscuous mode [ 167.702111][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.822402][ T3324] bridge_slave_0: left allmulticast mode [ 167.822433][ T3324] bridge_slave_0: left promiscuous mode [ 167.826376][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.082295][ T3324] bridge_slave_1: left allmulticast mode [ 168.082332][ T3324] bridge_slave_1: left promiscuous mode [ 168.082615][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.252582][ T3324] bridge_slave_0: left allmulticast mode [ 168.252608][ T3324] bridge_slave_0: left promiscuous mode [ 168.252804][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.989395][ T6892] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 168.989424][ T6892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.005856][ T6892] vhci_hcd vhci_hcd.0: Device attached [ 169.065000][ T6893] vhci_hcd: connection closed [ 169.066623][ T104] vhci_hcd vhci_hcd.2: stop threads [ 169.066652][ T104] vhci_hcd vhci_hcd.2: release socket [ 169.066692][ T104] vhci_hcd vhci_hcd.2: disconnect device [ 169.262798][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.343930][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.363731][ T3324] bond0 (unregistering): Released all slaves [ 169.808339][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.962123][ T3324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.022061][ T3324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.052165][ T3324] bond0 (unregistering): Released all slaves [ 170.107695][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.107834][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.187861][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.188071][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.295187][ T6625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.599119][ T6625] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.778672][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.778886][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.846942][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.847086][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.257345][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 171.664688][ T6925] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 171.664710][ T6925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.666394][ T6925] vhci_hcd vhci_hcd.0: Device attached [ 171.715031][ T6926] vhci_hcd: connection closed [ 171.715581][ T13] vhci_hcd vhci_hcd.2: stop threads [ 171.715604][ T13] vhci_hcd vhci_hcd.2: release socket [ 171.715632][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 171.856212][ T6708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.099060][ T6708] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.633427][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.633678][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.774817][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.774989][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.308915][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 173.407995][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.474543][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.783432][ T3324] hsr_slave_0: left promiscuous mode [ 173.821282][ T3324] hsr_slave_1: left promiscuous mode [ 173.822496][ T3324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.822522][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.862391][ T3324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.862420][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.063006][ T3324] hsr_slave_0: left promiscuous mode [ 174.104807][ T3324] hsr_slave_1: left promiscuous mode [ 174.106058][ T3324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.106084][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.145923][ T3324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.145955][ T3324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.309557][ T3324] veth1_macvtap: left promiscuous mode [ 174.309670][ T3324] veth0_macvtap: left promiscuous mode [ 174.309996][ T3324] veth1_vlan: left promiscuous mode [ 174.310191][ T3324] veth0_vlan: left promiscuous mode [ 174.491430][ T3324] veth1_macvtap: left promiscuous mode [ 174.491508][ T3324] veth0_macvtap: left promiscuous mode [ 174.491713][ T3324] veth1_vlan: left promiscuous mode [ 174.491870][ T3324] veth0_vlan: left promiscuous mode [ 174.878409][ T6987] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 174.878438][ T6987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.889503][ T6987] vhci_hcd vhci_hcd.0: Device attached [ 174.996824][ T6988] vhci_hcd: connection closed [ 174.997241][ T1183] vhci_hcd vhci_hcd.2: stop threads [ 174.997266][ T1183] vhci_hcd vhci_hcd.2: release socket [ 174.997306][ T1183] vhci_hcd vhci_hcd.2: disconnect device [ 175.696814][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 175.731784][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.771819][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 176.542062][ T3324] team0 (unregistering): Port device team_slave_1 removed [ 176.594096][ T3324] team0 (unregistering): Port device team_slave_0 removed [ 176.863215][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 177.740538][ T6625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.281395][ T6607] veth0_vlan: entered promiscuous mode [ 178.338894][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.496516][ T6607] veth1_vlan: entered promiscuous mode [ 178.825323][ T6607] veth0_macvtap: entered promiscuous mode [ 178.916107][ T6607] veth1_macvtap: entered promiscuous mode [ 179.060201][ T6708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.147548][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 179.316287][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.420481][ T6607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.526047][ T1221] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.538155][ T1221] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.588212][ T1221] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.600761][ T1221] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.941347][ T6625] veth0_vlan: entered promiscuous mode [ 180.291360][ T6625] veth1_vlan: entered promiscuous mode [ 180.535629][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.535650][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.574859][ T5700] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 180.694610][ T6708] veth0_vlan: entered promiscuous mode [ 180.715186][ T3324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.715207][ T3324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.742243][ T5700] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 180.742273][ T5700] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 180.742297][ T5700] usb 3-1: config 179 has no interface number 0 [ 180.742333][ T5700] usb 3-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 180.742354][ T5700] usb 3-1: config 179 interface 65 has no altsetting 0 [ 180.742379][ T5700] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 180.742397][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.884207][ T6708] veth1_vlan: entered promiscuous mode [ 180.997032][ T6625] veth0_macvtap: entered promiscuous mode [ 181.059351][ T6625] veth1_macvtap: entered promiscuous mode [ 181.216665][ T7072] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 181.335604][ T6625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.459628][ T6625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.477360][ T6708] veth0_macvtap: entered promiscuous mode [ 181.615415][ T6708] veth1_macvtap: entered promiscuous mode [ 181.624964][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.628053][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.629850][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.637627][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.808193][ T822] usb 3-1: USB disconnect, device number 6 [ 181.920483][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 182.056187][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.207465][ T7096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.370841][ T6708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.479633][ T104] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.496624][ T104] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.545943][ T104] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.547872][ T104] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.863474][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.863496][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.124828][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.124848][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.348205][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.348228][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.776162][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.776185][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.933670][ T7140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.049529][ T7143] binder: 7142:7143 ioctl c0306201 0 returned -14 [ 185.530043][ T7158] binder: 7157:7158 ioctl 4018620d 0 returned -22 [ 185.974715][ T7172] binder: 7171:7172 ioctl c0306201 0 returned -14 [ 191.420094][ T1419] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.561766][ T1248] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 191.597208][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.622664][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.625780][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.627588][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.658986][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.727353][ T1248] usb 5-1: device descriptor read/64, error -71 [ 191.992739][ T1248] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 192.121185][ T1248] usb 5-1: device descriptor read/64, error -71 [ 192.212674][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 192.237174][ T1248] usb usb5-port1: attempt power cycle [ 192.368045][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.392595][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 192.392627][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 192.392650][ T9] usb 3-1: Product: syz [ 192.392666][ T9] usb 3-1: Manufacturer: syz [ 192.392681][ T9] usb 3-1: SerialNumber: syz [ 192.553343][ T1419] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.743011][ T1248] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 192.773027][ T1248] usb 5-1: device descriptor read/8, error -71 [ 192.832115][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 192.933687][ T9] usb 3-1: USB disconnect, device number 7 [ 193.033617][ T1248] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 193.077853][ T1248] usb 5-1: device descriptor read/8, error -71 [ 193.124270][ T9] usblp0: removed [ 193.184136][ T1248] usb usb5-port1: unable to enumerate USB device [ 193.352696][ T1419] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.383748][ T4923] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.425056][ T4923] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.455376][ T4923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.459823][ T4923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.460591][ T4923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.611159][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 193.754608][ T60] Bluetooth: hci1: command tx timeout [ 193.929968][ T1419] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.404718][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.404834][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.241346][ T7277] binder: 7276:7277 ioctl 4018620d 0 returned -22 [ 195.591231][ T60] Bluetooth: hci2: command tx timeout [ 195.831804][ T60] Bluetooth: hci1: command tx timeout [ 195.855378][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 196.201740][ T1419] bridge_slave_1: left allmulticast mode [ 196.202122][ T1419] bridge_slave_1: left promiscuous mode [ 196.202366][ T1419] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.341201][ T1419] bridge_slave_0: left allmulticast mode [ 196.341239][ T1419] bridge_slave_0: left promiscuous mode [ 196.341300][ T37] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 196.341507][ T1419] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.497409][ T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.497438][ T37] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 196.497478][ T37] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 196.497503][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.646771][ T37] usb 3-1: config 0 descriptor?? [ 197.501999][ T1419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.560063][ T7304] binder: 7303:7304 ioctl c0306201 0 returned -14 [ 197.583186][ T1419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.627470][ T1419] bond0 (unregistering): Released all slaves [ 197.671171][ T60] Bluetooth: hci2: command tx timeout [ 197.911097][ T60] Bluetooth: hci1: command tx timeout [ 198.031477][ T7295] ------------[ cut here ]------------ [ 198.031492][ T7295] !chanctx_conf [ 198.031506][ T7295] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x627/0x6b0, CPU#0: syz.2.502/7295 [ 198.031547][ T7295] Modules linked in: [ 198.031597][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: syz.2.502 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 198.031629][ T7295] Tainted: [L]=SOFTLOCKUP [ 198.031638][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.031656][ T7295] RIP: 0010:rate_control_rate_init+0x627/0x6b0 [ 198.031681][ T7295] Code: 02 02 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 65 95 16 f7 90 0f 0b 90 eb e1 e8 5a 95 16 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 00 00 00 [ 198.031701][ T7295] RSP: 0018:ffffc90003ef6fd8 EFLAGS: 00010287 [ 198.031720][ T7295] RAX: ffffffff8aaf3646 RBX: ffff88805eb54000 RCX: 0000000000080000 [ 198.031738][ T7295] RDX: ffffc90012bca000 RSI: 00000000000024bf RDI: 00000000000024c0 [ 198.031754][ T7295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.031768][ T7295] R10: dffffc0000000000 R11: ffffed100bd6a841 R12: 1ffff1100bd6a80a [ 198.031785][ T7295] R13: ffff88804c101180 R14: 0000000000000001 R15: ffffffff8aaf3162 [ 198.031802][ T7295] FS: 00007f4b0bd2c6c0(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 198.031822][ T7295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.031838][ T7295] CR2: 00007f6a9d5d4e9c CR3: 000000003f39e000 CR4: 00000000003526f0 [ 198.031858][ T7295] Call Trace: [ 198.031872][ T7295] [ 198.031890][ T7295] rate_control_rate_init_all_links+0x109/0x1a0 [ 198.031923][ T7295] sta_apply_auth_flags+0x1c2/0x400 [ 198.031960][ T7295] sta_apply_parameters+0x10ac/0x18b0 [ 198.032005][ T7295] ieee80211_add_station+0x3e6/0x710 [ 198.032043][ T7295] rdev_add_station+0xfc/0x290 [ 198.032074][ T7295] nl80211_new_station+0x1cab/0x2130 [ 198.032106][ T7295] ? __rtnl_unlock+0xc8/0xf0 [ 198.032141][ T7295] ? __pfx_nl80211_new_station+0x10/0x10 [ 198.032190][ T7295] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.032248][ T7295] ? nl80211_pre_doit+0x57c/0x8d0 [ 198.032301][ T7295] genl_family_rcv_msg_doit+0x22a/0x330 [ 198.032349][ T7295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.032403][ T7295] ? bpf_lsm_capable+0x9/0x20 [ 198.032433][ T7295] ? security_capable+0x7e/0x2c0 [ 198.032478][ T7295] genl_rcv_msg+0x61c/0x7a0 [ 198.032524][ T7295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.032564][ T7295] ? ref_tracker_free+0x673/0x820 [ 198.032598][ T7295] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 198.032632][ T7295] ? __pfx_nl80211_new_station+0x10/0x10 [ 198.032655][ T7295] ? __pfx_nl80211_post_doit+0x10/0x10 [ 198.032692][ T7295] ? ____sys_sendmsg+0x55c/0x870 [ 198.032720][ T7295] ? ___sys_sendmsg+0x2a5/0x360 [ 198.032761][ T7295] netlink_rcv_skb+0x232/0x4b0 [ 198.032794][ T7295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.032834][ T7295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.032889][ T7295] genl_rcv+0x28/0x40 [ 198.032923][ T7295] netlink_unicast+0x780/0x920 [ 198.032963][ T7295] netlink_sendmsg+0x813/0xb40 [ 198.033005][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.033039][ T7295] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 198.033074][ T7295] ? aa_sock_msg_perm+0x122/0x200 [ 198.033099][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.033129][ T7295] sock_sendmsg_nosec+0x13a/0x180 [ 198.033169][ T7295] ____sys_sendmsg+0x55c/0x870 [ 198.033206][ T7295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.033246][ T7295] ? import_iovec+0x73/0xa0 [ 198.033283][ T7295] ___sys_sendmsg+0x2a5/0x360 [ 198.033312][ T7295] ? __lock_acquire+0x6b5/0x2d10 [ 198.033348][ T7295] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.033384][ T7295] ? futex_wake+0x506/0x5e0 [ 198.033443][ T7295] ? __fget_files+0x2a/0x420 [ 198.033467][ T7295] ? __fget_files+0x3a6/0x420 [ 198.033503][ T7295] __x64_sys_sendmsg+0x1b7/0x290 [ 198.033537][ T7295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.033589][ T7295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.033616][ T7295] do_syscall_64+0x174/0x580 [ 198.033652][ T7295] ? trace_irq_disable+0x3b/0x140 [ 198.033691][ T7295] ? clear_bhb_loop+0x40/0x90 [ 198.033721][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.033744][ T7295] RIP: 0033:0x7f4b0db1ce59 [ 198.033775][ T7295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.033796][ T7295] RSP: 002b:00007f4b0bd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.033821][ T7295] RAX: ffffffffffffffda RBX: 00007f4b0dd96180 RCX: 00007f4b0db1ce59 [ 198.033839][ T7295] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 198.033854][ T7295] RBP: 00007f4b0dbb2d6f R08: 0000000000000000 R09: 0000000000000000 [ 198.033869][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.033883][ T7295] R13: 00007f4b0dd96218 R14: 00007f4b0dd96180 R15: 00007ffd1a68def8 [ 198.033919][ T7295] [ 198.033932][ T7295] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 198.033952][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: syz.2.502 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 198.033984][ T7295] Tainted: [L]=SOFTLOCKUP [ 198.033993][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.034007][ T7295] Call Trace: [ 198.034016][ T7295] [ 198.034026][ T7295] vpanic+0x56c/0xa60 [ 198.034063][ T7295] ? __pfx__printk+0x10/0x10 [ 198.034087][ T7295] ? __pfx_vpanic+0x10/0x10 [ 198.034119][ T7295] ? is_bpf_text_address+0x292/0x2b0 [ 198.034153][ T7295] ? is_bpf_text_address+0x26/0x2b0 [ 198.034197][ T7295] panic+0xc5/0xd0 [ 198.034231][ T7295] ? __pfx_panic+0x10/0x10 [ 198.034292][ T7295] __warn+0x315/0x4c0 [ 198.034325][ T7295] ? rate_control_rate_init+0x627/0x6b0 [ 198.034353][ T7295] ? rate_control_rate_init+0x627/0x6b0 [ 198.034379][ T7295] __report_bug+0x339/0x540 [ 198.034417][ T7295] ? rate_control_rate_init+0x627/0x6b0 [ 198.034442][ T7295] ? __pfx___report_bug+0x10/0x10 [ 198.034473][ T7295] ? __lock_acquire+0x6b5/0x2d10 [ 198.034508][ T7295] ? __lock_acquire+0x6b5/0x2d10 [ 198.034548][ T7295] ? rate_control_rate_init+0x627/0x6b0 [ 198.034572][ T7295] report_bug+0x16a/0x220 [ 198.034602][ T7295] ? rate_control_rate_init+0x627/0x6b0 [ 198.034624][ T7295] ? rate_control_rate_init+0x629/0x6b0 [ 198.034647][ T7295] handle_bug+0x9c/0x200 [ 198.034682][ T7295] exc_invalid_op+0x1a/0x50 [ 198.034715][ T7295] asm_exc_invalid_op+0x1a/0x20 [ 198.034738][ T7295] RIP: 0010:rate_control_rate_init+0x627/0x6b0 [ 198.034762][ T7295] Code: 02 02 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 65 95 16 f7 90 0f 0b 90 eb e1 e8 5a 95 16 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 00 00 00 [ 198.034782][ T7295] RSP: 0018:ffffc90003ef6fd8 EFLAGS: 00010287 [ 198.034802][ T7295] RAX: ffffffff8aaf3646 RBX: ffff88805eb54000 RCX: 0000000000080000 [ 198.034819][ T7295] RDX: ffffc90012bca000 RSI: 00000000000024bf RDI: 00000000000024c0 [ 198.034835][ T7295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.034849][ T7295] R10: dffffc0000000000 R11: ffffed100bd6a841 R12: 1ffff1100bd6a80a [ 198.034867][ T7295] R13: ffff88804c101180 R14: 0000000000000001 R15: ffffffff8aaf3162 [ 198.034884][ T7295] ? rate_control_rate_init+0x142/0x6b0 [ 198.034915][ T7295] ? rate_control_rate_init+0x626/0x6b0 [ 198.034946][ T7295] ? rate_control_rate_init+0x626/0x6b0 [ 198.034977][ T7295] rate_control_rate_init_all_links+0x109/0x1a0 [ 198.035008][ T7295] sta_apply_auth_flags+0x1c2/0x400 [ 198.035044][ T7295] sta_apply_parameters+0x10ac/0x18b0 [ 198.035089][ T7295] ieee80211_add_station+0x3e6/0x710 [ 198.035130][ T7295] rdev_add_station+0xfc/0x290 [ 198.035162][ T7295] nl80211_new_station+0x1cab/0x2130 [ 198.035195][ T7295] ? __rtnl_unlock+0xc8/0xf0 [ 198.035230][ T7295] ? __pfx_nl80211_new_station+0x10/0x10 [ 198.035253][ T7295] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.035316][ T7295] ? nl80211_pre_doit+0x57c/0x8d0 [ 198.035360][ T7295] genl_family_rcv_msg_doit+0x22a/0x330 [ 198.035404][ T7295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.035456][ T7295] ? bpf_lsm_capable+0x9/0x20 [ 198.035486][ T7295] ? security_capable+0x7e/0x2c0 [ 198.035531][ T7295] genl_rcv_msg+0x61c/0x7a0 [ 198.035575][ T7295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.035610][ T7295] ? ref_tracker_free+0x673/0x820 [ 198.035642][ T7295] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 198.035676][ T7295] ? __pfx_nl80211_new_station+0x10/0x10 [ 198.035698][ T7295] ? __pfx_nl80211_post_doit+0x10/0x10 [ 198.035733][ T7295] ? ____sys_sendmsg+0x55c/0x870 [ 198.035760][ T7295] ? ___sys_sendmsg+0x2a5/0x360 [ 198.035801][ T7295] netlink_rcv_skb+0x232/0x4b0 [ 198.035831][ T7295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.035869][ T7295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.035923][ T7295] genl_rcv+0x28/0x40 [ 198.035956][ T7295] netlink_unicast+0x780/0x920 [ 198.035993][ T7295] netlink_sendmsg+0x813/0xb40 [ 198.036034][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.036068][ T7295] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 198.036102][ T7295] ? aa_sock_msg_perm+0x122/0x200 [ 198.036128][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.036157][ T7295] sock_sendmsg_nosec+0x13a/0x180 [ 198.036196][ T7295] ____sys_sendmsg+0x55c/0x870 [ 198.036232][ T7295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.036273][ T7295] ? import_iovec+0x73/0xa0 [ 198.036311][ T7295] ___sys_sendmsg+0x2a5/0x360 [ 198.036340][ T7295] ? __lock_acquire+0x6b5/0x2d10 [ 198.036377][ T7295] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.036411][ T7295] ? futex_wake+0x506/0x5e0 [ 198.036469][ T7295] ? __fget_files+0x2a/0x420 [ 198.036493][ T7295] ? __fget_files+0x3a6/0x420 [ 198.036529][ T7295] __x64_sys_sendmsg+0x1b7/0x290 [ 198.036562][ T7295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.036614][ T7295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.036640][ T7295] do_syscall_64+0x174/0x580 [ 198.036669][ T7295] ? trace_irq_disable+0x3b/0x140 [ 198.036699][ T7295] ? clear_bhb_loop+0x40/0x90 [ 198.036729][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.036754][ T7295] RIP: 0033:0x7f4b0db1ce59 [ 198.036775][ T7295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.036795][ T7295] RSP: 002b:00007f4b0bd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.036819][ T7295] RAX: ffffffffffffffda RBX: 00007f4b0dd96180 RCX: 00007f4b0db1ce59 [ 198.036837][ T7295] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 198.036852][ T7295] RBP: 00007f4b0dbb2d6f R08: 0000000000000000 R09: 0000000000000000 [ 198.036867][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.036881][ T7295] R13: 00007f4b0dd96218 R14: 00007f4b0dd96180 R15: 00007ffd1a68def8 [ 198.036919][ T7295] [ 198.037513][ T7295] Kernel Offset: disabled