last executing test programs: 7m6.866193689s ago: executing program 1 (id=753): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 7m5.586489156s ago: executing program 1 (id=755): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa", 0xa1}, {&(0x7f0000001400)="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", 0xfc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003880)="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", 0xbe8}, {0x0}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m5.316125441s ago: executing program 1 (id=758): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045dd750e47e4acf8e33696473ec0690766ec8c6bd63758c22c1ad988a2b9eaf393e5bb0940e70740617b2435879d7c7263c81bcfee090f32f1", 0xf6}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)="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", 0xfc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7m5.277748542s ago: executing program 3 (id=760): syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7m5.107018736s ago: executing program 1 (id=761): syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) close(0xffffffffffffffff) 7m3.92007844s ago: executing program 3 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7m3.692383625s ago: executing program 1 (id=765): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x84}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m3.596041337s ago: executing program 3 (id=766): syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000001240), 0x1, 0x11ab, &(0x7f0000001280)="$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") 7m3.067948158s ago: executing program 3 (id=767): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@largeio}, {@gquota}, {@grpid}]}, 0x5, 0xb93c, &(0x7f0000010b40)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='rtc_irq_set_state\x00', r3, 0x0, 0x10001}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x5a, 0x2, 0x9, 0x7, 0x2, 0x3, 0xeb8, 0x199, 0x40, 0x375, 0x4, 0x5, 0x38, 0x1, 0xb9f, 0x8, 0x4}, [{0x4, 0x9, 0xf, 0xcba, 0xb0f0, 0x1, 0x100000000, 0xfffffffffffffffc}]}, 0x78) truncate(&(0x7f0000000100)='./file1\x00', 0xc88) 7m2.912477601s ago: executing program 1 (id=768): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fadvise64(r0, 0x9154, 0x5, 0x5) 7m2.295424694s ago: executing program 32 (id=768): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fadvise64(r0, 0x9154, 0x5, 0x5) 6m58.484466673s ago: executing program 3 (id=775): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400f9801800018006000600800a00000c0015000300000000000000040002"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc000) 6m54.413734277s ago: executing program 3 (id=781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xf, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0xfffffc01}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347103e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3bfffff00"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 6m53.776392961s ago: executing program 33 (id=781): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xf, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0xfffffc01}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347103e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3bfffff00"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 6m41.547750175s ago: executing program 4 (id=769): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) recvfrom(r0, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x0, 0x0) 6m41.244075281s ago: executing program 4 (id=813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0) 6m40.847477779s ago: executing program 4 (id=815): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2, 0x6}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000009c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000940)={0x12, 0x10, 0xfa00, {&(0x7f0000000980), r2, r0}}, 0x18) 6m40.530523596s ago: executing program 4 (id=816): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m25.461163048s ago: executing program 34 (id=816): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.513101256s ago: executing program 2 (id=2230): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7.399899368s ago: executing program 2 (id=2235): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x51, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xfffffffffffffffe, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x7fff, 0x8, 0xfffffffffffffffa, 0x2, 0x0, 0x6], 0x8080000}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000280)=""/135) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000140)=0xfffffff9, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {}, 0x1}) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x20000000) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000340)={0x7ff, 0x807}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) read(r6, 0x0, 0x0) 7.135365683s ago: executing program 0 (id=2236): fanotify_init(0x200, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0xd, 0x5, 0x1, 0x6}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000200)=[{r2, 0x8000}], 0x1, 0x3) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000780)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) 4.154647451s ago: executing program 2 (id=2242): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0xd3c, [0xffff, 0x5d, 0x8, 0x6, 0x2, 0xc1, 0x3, 0x115f, 0x46, 0x401, 0xa, 0x200, 0xf26, 0x0, 0x240, 0x9, 0xf046, 0x0, 0x1, 0xf000, 0xfffb, 0xf, 0x5, 0x0, 0x1, 0x1000, 0x4efc, 0x8, 0x7f, 0x5, 0x2, 0x6, 0x2, 0x3, 0x1402, 0xf, 0x7, 0xc, 0x52, 0x3e, 0x10, 0x3, 0xf, 0x2, 0x734, 0xd, 0x7a7e, 0xfffc], 0x1c0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000080)={0x1, 0x1000000000002, 0x120000000001, 0x2, 0x4ff, 0xe5, 0x1000001000, 0x400080000049}, 0x0, &(0x7f0000000000)={0x3fe, 0x0, 0x0, 0x9, 0x86, 0x8000800, 0x5}, 0x0, 0x0) 4.154486861s ago: executing program 5 (id=2243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xac, r1, 0x105, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x6, 0x80, [@supported_rates]}, @NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4901}, @device_b, @device_a, @initial, {0x5, 0x1}}, 0x8, @random=0x6c, 0x2, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x1, 0x25, 0x9}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x5, 0x9d, 0x2}}, @val={0x2d, 0x1a, {0x1, 0x3, 0x4, 0x0, {0x9, 0x14, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xd, 0x4}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x20}}, @val={0x76, 0x6, {0x1, 0xfd, 0x25, 0x1ff}}}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xac}}, 0x0) 4.15108353s ago: executing program 0 (id=2250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x8100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TCFLSH(r3, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.022195433s ago: executing program 5 (id=2244): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.552165012s ago: executing program 2 (id=2245): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 3.218267309s ago: executing program 2 (id=2247): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) 3.183775559s ago: executing program 6 (id=2249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockname$inet(r0, 0x0, 0x0) 3.091427531s ago: executing program 2 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRES64=r1, @ANYRES64=r0, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r1], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r3, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.989217673s ago: executing program 5 (id=2252): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="c033", 0x2, 0x800, &(0x7f00000002c0)={0xa, 0x4e24, 0xa132, @private0, 0x8}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) r2 = dup(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x259, 0x5425, 0x7, 0x200, 0xdd}, &(0x7f0000000180)=0x98) 2.692061479s ago: executing program 5 (id=2253): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x51, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0x8, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xfffffffffffffffe, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x7fff, 0x8, 0xfffffffffffffffa, 0x2, 0x0, 0x6], 0x8080000}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000280)=""/135) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000140)=0xfffffff9, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {}, 0x1}) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x20000000) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000340)={0x7ff, 0x807}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = inotify_init1(0x0) read(r6, 0x0, 0x0) 2.594265011s ago: executing program 6 (id=2254): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x1200) 1.876388804s ago: executing program 0 (id=2256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0xac, r1, 0x105, 0x0, 0x8000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x6, 0x80, [@supported_rates]}, @NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4901}, @device_b, @device_a, @initial, {0x5, 0x1}}, 0x8, @random=0x6c, 0x2, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x1, 0x25, 0x9}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x5, 0x9d, 0x2}}, @val={0x2d, 0x1a, {0x1, 0x3, 0x4, 0x0, {0x9, 0x14, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xd, 0x4}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x20}}, @val={0x76, 0x6, {0x1, 0xfd, 0x25, 0x1ff}}}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xac}}, 0x0) 1.874370085s ago: executing program 6 (id=2257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.516172562s ago: executing program 0 (id=2258): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x406, r1) write$binfmt_script(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.419251663s ago: executing program 6 (id=2259): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) 1.253859896s ago: executing program 0 (id=2260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.149089958s ago: executing program 5 (id=2261): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.100432649s ago: executing program 6 (id=2262): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockname$inet(r0, 0x0, 0x0) 995.574621ms ago: executing program 0 (id=2263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x8100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TCFLSH(r3, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 110.029209ms ago: executing program 5 (id=2264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRES64=r1, @ANYRES64=r0, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r1], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r3, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=2265): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="c033", 0x2, 0x800, &(0x7f00000002c0)={0xa, 0x4e24, 0xa132, @private0, 0x8}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) r2 = dup(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x259, 0x5425, 0x7, 0x200, 0xdd}, &(0x7f0000000180)=0x98) kernel console output (not intermixed with test programs): 88,0):ocfs2_modify_bh:105 ERROR: status = -30 [ 236.615482][ T5788] (syz-executor,5788,0):ocfs2_local_free_info:856 ERROR: status = -30 [ 236.624475][ T5788] (syz-executor,5788,0):ocfs2_start_trans:379 ERROR: status = -30 [ 236.632701][ T5788] OCFS2: abort (device loop3): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 236.638316][ T8007] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 236.645244][ T5788] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 236.662286][ T5823] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 236.670389][ T5788] OCFS2: Returning error to the calling process. [ 236.677972][ T5788] (syz-executor,5788,0):ocfs2_modify_bh:105 ERROR: status = -30 [ 236.686055][ T5788] (syz-executor,5788,0):ocfs2_local_free_info:856 ERROR: status = -30 [ 236.727401][ T5788] (syz-executor,5788,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x69a15b13, computed 0x9892300b. Applying ECC. [ 236.769713][ T7932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.795658][ T5788] (syz-executor,5788,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x69a15b13, computed 0x9892300b [ 236.852421][ T5788] (syz-executor,5788,1):ocfs2_validate_inode_block:1382 ERROR: Checksum failed for dinode 23 [ 236.854847][ T7932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.869515][ T5788] (syz-executor,5788,1):ocfs2_assign_bh:2416 ERROR: status = -5 [ 236.881605][ T5823] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.904348][ T5788] (syz-executor,5788,1):ocfs2_inode_lock_full_nested:2511 ERROR: status = -5 [ 236.905686][ T5823] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.934061][ T5788] (syz-executor,5788,1):ocfs2_shutdown_local_alloc:411 ERROR: status = -5 [ 236.942715][ T5823] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.942745][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.958978][ T8003] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.973708][ T5823] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 236.998151][ T5788] Buffer I/O error on dev loop3, logical block 16936, lost sync page write [ 237.012157][ T5788] (syz-executor,5788,1):ocfs2_write_block:78 ERROR: status = -5 [ 237.021175][ T5788] (syz-executor,5788,1):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 237.043831][ T5788] (syz-executor,5788,1):ocfs2_put_slot:517 ERROR: status = -5 [ 237.080626][ T5788] (syz-executor,5788,1):ocfs2_journal_shutdown:1107 ERROR: status = -5 [ 237.119891][ T5788] ocfs2: Unmounting device (7,3) on (node local) [ 237.132700][ T7932] team0: Port device team_slave_0 added [ 237.157843][ T7932] team0: Port device team_slave_1 added [ 237.228454][ T5823] usb 1-1: USB disconnect, device number 2 [ 237.445756][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.452766][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.516040][ T7932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.542703][ T7932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.565601][ T7932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.635679][ T7932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.790321][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.951131][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.102327][ T7932] hsr_slave_0: entered promiscuous mode [ 238.156138][ T7932] hsr_slave_1: entered promiscuous mode [ 238.297690][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.469451][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.616237][ T5802] Bluetooth: hci1: command tx timeout [ 238.704533][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.715206][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.723701][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.732550][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.746677][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 238.755797][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.500865][ T7932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.625354][ T7932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.644288][ T7932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.652287][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 239.714352][ T7932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.837839][ T8031] chnl_net:caif_netlink_parms(): no params data found [ 240.099690][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.110218][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.120477][ T8031] bridge_slave_0: entered allmulticast mode [ 240.139500][ T8031] bridge_slave_0: entered promiscuous mode [ 240.152768][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.170515][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.178306][ T8031] bridge_slave_1: entered allmulticast mode [ 240.192859][ T8031] bridge_slave_1: entered promiscuous mode [ 240.321137][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.407701][ T71] hsr_slave_0: left promiscuous mode [ 240.429698][ T71] hsr_slave_1: left promiscuous mode [ 240.449049][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.475673][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.517283][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.525112][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.552101][ T71] bridge_slave_1: left allmulticast mode [ 240.567525][ T71] bridge_slave_1: left promiscuous mode [ 240.573479][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.593429][ T71] bridge_slave_0: left allmulticast mode [ 240.601266][ T71] bridge_slave_0: left promiscuous mode [ 240.611098][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.672051][ T71] veth1_macvtap: left promiscuous mode [ 240.684941][ T71] veth0_macvtap: left promiscuous mode [ 240.693404][ T71] veth1_vlan: left promiscuous mode [ 240.705771][ T71] veth0_vlan: left promiscuous mode [ 240.865875][ T5794] Bluetooth: hci0: command tx timeout [ 241.353921][ T71] team0 (unregistering): Port device team_slave_1 removed [ 241.397760][ T71] team0 (unregistering): Port device team_slave_0 removed [ 241.441339][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.503979][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.981257][ T71] bond0 (unregistering): Released all slaves [ 242.084435][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.232705][ T8031] team0: Port device team_slave_0 added [ 242.269863][ T8031] team0: Port device team_slave_1 added [ 242.389025][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'. [ 242.432253][ T8080] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.441757][ T8080] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.450580][ T8080] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.459467][ T8080] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.499132][ T8080] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.508253][ T8080] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.517302][ T8080] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.526328][ T8080] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.716777][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.731024][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.757502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 242.844874][ T8031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.921882][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.935702][ T5794] Bluetooth: hci0: command tx timeout [ 242.966132][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.036144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 243.064238][ T8031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.066539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 243.563710][ T8031] hsr_slave_0: entered promiscuous mode [ 243.613327][ T8031] hsr_slave_1: entered promiscuous mode [ 243.635765][ T8031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.654584][ T8031] Cannot create hsr debugfs directory [ 243.893014][ T7932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.007832][ T7932] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.093605][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.100825][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.340185][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.347387][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.380200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 244.583973][ T8122] ubi31: attaching mtd0 [ 244.624767][ T8122] ubi31: scanning is finished [ 244.651915][ T8122] ubi31: empty MTD device detected [ 244.667839][ T7932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.705297][ T8031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.772499][ T8031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.788768][ T8122] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 244.820546][ T8122] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 244.854763][ T8031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.873029][ T8122] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 244.893016][ T8031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.925759][ T8122] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 244.977696][ T8122] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 244.984720][ T8122] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 245.017020][ T5794] Bluetooth: hci0: command tx timeout [ 245.045112][ T8122] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3876222073 [ 245.097927][ T8122] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 245.139215][ T8127] ubi31: background thread "ubi_bgt31d" started, PID 8127 [ 245.276397][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.285928][ T5880] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 245.373455][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.432050][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.439330][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.488421][ T5880] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 245.500262][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.521937][ T5880] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 245.526250][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.533236][ T5880] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 245.538215][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.554077][ T5880] usb 1-1: Manufacturer: syz [ 245.566769][ T5880] usb 1-1: config 0 descriptor?? [ 245.630521][ T8150] Bluetooth: Invalid byte 00 after esc byte [ 245.645288][ T7932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.838592][ T5880] rc_core: IR keymap rc-hauppauge not found [ 245.847206][ T5880] Registered IR keymap rc-empty [ 245.855176][ T5880] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 245.908903][ T5880] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 245.962481][ T8140] bond0: entered promiscuous mode [ 245.980769][ T8140] bond_slave_0: entered promiscuous mode [ 246.022795][ T8140] bond_slave_1: entered promiscuous mode [ 246.064635][ T8140] batadv0: entered promiscuous mode [ 246.111976][ T8140] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 246.307652][ T5880] usb 1-1: USB disconnect, device number 3 [ 246.513699][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.850864][ T7932] veth0_vlan: entered promiscuous mode [ 246.907881][ T7932] veth1_vlan: entered promiscuous mode [ 247.014182][ T7932] veth0_macvtap: entered promiscuous mode [ 247.064004][ T7932] veth1_macvtap: entered promiscuous mode [ 247.095984][ T5802] Bluetooth: hci0: command tx timeout [ 247.143730][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.215668][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.239474][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.276525][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.308870][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.345089][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.391308][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.435594][ T7932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.471905][ T7932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.496182][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 247.538366][ T7932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.621527][ T7932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.764787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 247.928662][ T7932] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.958647][ T7932] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.975789][ T7932] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.013148][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 248.050438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 248.083224][ T8203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.215330][ T8031] veth0_vlan: entered promiscuous mode [ 248.380318][ T8031] veth1_vlan: entered promiscuous mode [ 248.497765][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.686381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.891239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.993576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 249.096105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 249.344083][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.442543][ T8031] veth0_macvtap: entered promiscuous mode [ 249.459547][ T8031] veth1_macvtap: entered promiscuous mode [ 249.502465][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.511130][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.522794][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.564935][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.595914][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.665619][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.682104][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.694576][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.706991][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.888000][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.902334][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.913444][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.924990][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.946430][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.984092][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.014157][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.048881][ T8224] tipc: Started in network mode [ 250.054182][ T8224] tipc: Node identity 6a6908940db2, cluster identity 4711 [ 250.101135][ T8224] tipc: Enabled bearer , priority 0 [ 250.137746][ T8221] tipc: Resetting bearer [ 250.536391][ T8235] netlink: 56 bytes leftover after parsing attributes in process `syz.4.813'. [ 251.354206][ T28] tipc: Node number set to 1742407828 [ 251.964027][ T8254] 9pnet_virtio: no channels available for device syz [ 255.117604][ T8221] tipc: Disabling bearer [ 255.202248][ T8031] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.244697][ T8031] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.281175][ T8031] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.305627][ T8031] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.663440][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.708228][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.823344][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.862189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.991345][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.002395][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.236355][ T8295] process 'syz.5.823' launched './file0' with NULL argv: empty string added [ 260.513304][ T8311] tipc: Started in network mode [ 260.531084][ T8311] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 260.541447][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 260.573248][ T8311] tipc: Enabled bearer , priority 10 [ 260.746646][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 260.766268][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 260.811048][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.833361][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 260.854467][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.876776][ T23] usb 1-1: Product: syz [ 260.881041][ T23] usb 1-1: Manufacturer: syz [ 260.899583][ T8323] Zero length message leads to an empty skb [ 260.910277][ T23] usb 1-1: SerialNumber: syz [ 261.065223][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'. [ 261.153632][ T23] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 261.350735][ T5823] usb 1-1: USB disconnect, device number 4 [ 261.414814][ T5823] usblp0: removed [ 261.699452][ T23] tipc: Node number set to 4269801494 [ 262.795050][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 264.652873][ T8381] Bluetooth: MGMT ver 1.22 [ 265.412677][ T8386] mmap: syz.2.843 (8386) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 266.368299][ T8399] binder: 8387:8399 ioctl 0 200000000040 returned -22 [ 267.755366][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.769817][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.780741][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.804410][ T8419] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 267.825440][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.843397][ T5794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 267.850973][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.338695][ T8433] block device autoloading is deprecated and will be removed. [ 268.509232][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.685085][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.902115][ T5794] Bluetooth: hci4: command tx timeout [ 270.470926][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 270.865402][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.886007][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.912397][ T8423] bridge_slave_0: entered allmulticast mode [ 270.930533][ T8423] bridge_slave_0: entered promiscuous mode [ 270.964814][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.995360][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.046882][ T8423] bridge_slave_1: entered allmulticast mode [ 271.066623][ T8423] bridge_slave_1: entered promiscuous mode [ 271.381592][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.781025][ T5794] Bluetooth: hci4: command tx timeout [ 272.842038][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.847901][ T8423] team0: Port device team_slave_0 added [ 273.919015][ T8423] team0: Port device team_slave_1 added [ 274.424091][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.495755][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.645816][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.682259][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.799081][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.859946][ T5794] Bluetooth: hci4: command tx timeout [ 274.973931][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.182614][ T8510] input: syz1 as /devices/virtual/input/input6 [ 275.468425][ T8423] hsr_slave_0: entered promiscuous mode [ 275.568147][ T8423] hsr_slave_1: entered promiscuous mode [ 275.635781][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.664889][ T8423] Cannot create hsr debugfs directory [ 275.736094][ T7932] syz-executor (7932) used greatest stack depth: 20072 bytes left [ 275.853003][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.220165][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.559198][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.946368][ T5794] Bluetooth: hci4: command tx timeout [ 277.157769][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.810616][ T8423] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 278.868034][ T8423] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 280.447688][ T8423] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.481441][ T8423] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.589759][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.750863][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.928953][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.936196][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.086866][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.094031][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.540390][ T8616] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 283.023024][ T11] hsr_slave_0: left promiscuous mode [ 283.023962][ T11] hsr_slave_1: left promiscuous mode [ 283.024805][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.024847][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.042808][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.042835][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.062030][ T8631] netlink: 'syz.0.899': attribute type 1 has an invalid length. [ 283.062138][ T8631] netlink: 244 bytes leftover after parsing attributes in process `syz.0.899'. [ 283.067288][ T11] bridge_slave_1: left allmulticast mode [ 283.067308][ T11] bridge_slave_1: left promiscuous mode [ 283.067489][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.167567][ T11] bridge_slave_0: left allmulticast mode [ 283.167589][ T11] bridge_slave_0: left promiscuous mode [ 283.167743][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.305450][ T11] veth1_macvtap: left promiscuous mode [ 283.305604][ T11] veth0_macvtap: left promiscuous mode [ 283.305797][ T11] veth1_vlan: left promiscuous mode [ 283.305890][ T11] veth0_vlan: left promiscuous mode [ 285.945824][ T11] team0 (unregistering): Port device team_slave_1 removed [ 286.064459][ T11] team0 (unregistering): Port device team_slave_0 removed [ 286.197830][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.374095][ T8665] random: crng reseeded on system resumption [ 286.440678][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.595014][ T11] bond0 (unregistering): Released all slaves [ 288.207878][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.582044][ T8697] 9pnet_virtio: no channels available for device syz [ 288.620403][ T8701] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 288.664242][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.938045][ T8423] veth0_vlan: entered promiscuous mode [ 288.973061][ T8423] veth1_vlan: entered promiscuous mode [ 289.046570][ T8423] veth0_macvtap: entered promiscuous mode [ 289.078988][ T8423] veth1_macvtap: entered promiscuous mode [ 289.135280][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.164941][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.215670][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.234078][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.254988][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.276078][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.303839][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.360131][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.405652][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.425628][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.445742][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.473043][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.520261][ T8423] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.544092][ T8423] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.564525][ T8423] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.605846][ T8423] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.888380][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.924592][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.022288][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.038464][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.690752][ T8779] overlay: filesystem on ./file0 not supported as upperdir [ 293.760462][ T8824] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 293.878829][ T8827] syz.5.944 uses obsolete (PF_INET,SOCK_PACKET) [ 293.893166][ T8827] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 294.025346][ T27] audit: type=1800 audit(1759601255.176:2): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.939" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 294.053146][ T8832] block nbd6: shutting down sockets [ 294.082473][ T8824] ksmbd: Unknown IPC event: 6, ignore. [ 294.406353][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.948'. [ 294.476302][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.948'. [ 294.659661][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.950'. [ 295.738088][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.955'. [ 295.779711][ T8871] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.915884][ T5861] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 297.140581][ T5861] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.205644][ T5861] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 297.206376][ T5861] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.206452][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 297.206479][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 297.242799][ T5861] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.242823][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.242837][ T5861] usb 6-1: Product: syz [ 297.242847][ T5861] usb 6-1: Manufacturer: syz [ 297.299962][ T5861] cdc_wdm 6-1:1.0: skipping garbage [ 297.299997][ T5861] cdc_wdm 6-1:1.0: skipping garbage [ 297.304998][ T5861] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 297.305032][ T5861] cdc_wdm 6-1:1.0: Unknown control protocol [ 299.381515][ T5794] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 299.664524][ T5861] usb 6-1: USB disconnect, device number 2 [ 299.734999][ T5823] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 299.840239][ T5823] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.390789][ T8940] syz.2.972 (8940): drop_caches: 2 [ 300.402509][ T8969] bridge_slave_0: left allmulticast mode [ 300.465873][ T8969] bridge_slave_0: left promiscuous mode [ 300.478683][ T8940] syz.2.972 (8940): drop_caches: 2 [ 300.487196][ T8960] fido_id[8960]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.518574][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.759501][ T8969] bridge_slave_1: left allmulticast mode [ 300.765330][ T8969] bridge_slave_1: left promiscuous mode [ 300.796875][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.002332][ T8969] bond0: (slave bond_slave_0): Releasing backup interface [ 301.117419][ T8969] bond0: (slave bond_slave_1): Releasing backup interface [ 301.126656][ T27] audit: type=1326 audit(1759601262.276:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.0.981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x0 [ 301.321201][ T8969] team0: Port device team_slave_0 removed [ 301.884576][ T8969] team0: Port device team_slave_1 removed [ 301.907004][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.914682][ T8969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.929108][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.944718][ T8969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.982642][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.978'. [ 302.013186][ T8974] team0: Mode changed to "loadbalance" [ 302.170736][ T8988] netlink: 36 bytes leftover after parsing attributes in process `syz.5.983'. [ 302.818998][ T27] audit: type=1800 audit(1759601263.956:4): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.986" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 303.546747][ T9015] netlink: 16 bytes leftover after parsing attributes in process `syz.6.989'. [ 305.915376][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.998'. [ 305.954029][ T9049] veth1_to_batadv: entered allmulticast mode [ 306.592231][ T9056] block device autoloading is deprecated and will be removed. [ 306.625721][ T9053] block device autoloading is deprecated and will be removed. [ 306.909502][ T9062] 9pnet_virtio: no channels available for device syz [ 307.495705][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 307.775717][ T5823] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 308.001063][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.065610][ T5823] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 308.074984][ T5823] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 308.147134][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.191690][ T5823] usb 3-1: config 0 descriptor?? [ 308.219834][ T5823] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 308.246233][ T5823] dvb-usb: bulk message failed: -22 (3/0) [ 308.294514][ T5823] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 308.354150][ T5823] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 308.375844][ T5823] usb 3-1: media controller created [ 308.404099][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.489475][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 308.521446][ T5823] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 308.558728][ T5823] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 308.618884][ T5823] dvb-usb: schedule remote query interval to 150 msecs. [ 308.636118][ T5823] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 308.692836][ T5823] usb 3-1: USB disconnect, device number 4 [ 308.842492][ T5823] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 310.197132][ T27] audit: type=1326 audit(1759601271.356:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ae98eec9 code=0x7ffc0000 [ 310.257028][ T27] audit: type=1326 audit(1759601271.386:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 310.342221][ T27] audit: type=1326 audit(1759601271.386:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 310.415880][ T27] audit: type=1326 audit(1759601271.386:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 310.475763][ T27] audit: type=1326 audit(1759601271.386:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 310.536265][ T28] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 310.553468][ T27] audit: type=1326 audit(1759601271.386:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 310.618273][ T27] audit: type=1326 audit(1759601271.386:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 310.701581][ T27] audit: type=1326 audit(1759601271.386:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 310.756005][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 310.772884][ T28] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.811613][ T28] usb 3-1: config 0 has no interface number 0 [ 310.816156][ T27] audit: type=1326 audit(1759601271.386:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 310.836582][ T9114] netlink: 'syz.0.1009': attribute type 30 has an invalid length. [ 310.869715][ T28] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 310.895089][ T9114] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 310.899775][ T27] audit: type=1326 audit(1759601271.386:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9074 comm="syz.5.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 310.905445][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.973148][ T28] usb 3-1: Product: syz [ 310.979516][ T9114] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 310.994981][ T28] usb 3-1: Manufacturer: syz [ 311.006076][ T28] usb 3-1: SerialNumber: syz [ 311.023689][ T28] usb 3-1: config 0 descriptor?? [ 311.048741][ T28] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 311.081612][ T28] usb 3-1: selecting invalid altsetting 1 [ 311.096198][ T28] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 311.138480][ T28] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 311.184778][ T28] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 311.231521][ T28] usb 3-1: media controller created [ 311.392439][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.501579][ T28] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 311.522541][ T28] zl10353_read_register: readreg error (reg=127, ret==-71) [ 311.541863][ T28] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 311.698151][ T2909] Bluetooth: Short BCSP packet [ 311.956044][ T28] usb 3-1: USB disconnect, device number 5 [ 311.993607][ T9133] syz.2.1017: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 312.014022][ T9133] CPU: 0 PID: 9133 Comm: syz.2.1017 Not tainted syzkaller #0 [ 312.021463][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.031573][ T9133] Call Trace: [ 312.034889][ T9133] [ 312.037867][ T9133] dump_stack_lvl+0x16c/0x230 [ 312.042602][ T9133] ? show_regs_print_info+0x20/0x20 [ 312.047846][ T9133] ? load_image+0x3b0/0x3b0 [ 312.052391][ T9133] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 312.058848][ T9133] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 312.065405][ T9133] warn_alloc+0x210/0x300 [ 312.069795][ T9133] ? stack_trace_save+0x9c/0xe0 [ 312.074699][ T9133] ? zone_watermark_ok_safe+0x230/0x230 [ 312.080314][ T9133] ? kasan_set_track+0x5f/0x70 [ 312.085151][ T9133] ? kasan_set_track+0x4e/0x70 [ 312.089953][ T9133] ? __kasan_kmalloc+0x8f/0xa0 [ 312.094767][ T9133] ? xsk_init_queue+0xb0/0x110 [ 312.099590][ T9133] ? xsk_setsockopt+0x4db/0x6f0 [ 312.104480][ T9133] ? do_sock_setsockopt+0x175/0x1a0 [ 312.109731][ T9133] ? __x64_sys_setsockopt+0x184/0x200 [ 312.115154][ T9133] __vmalloc_node_range+0x126/0x1320 [ 312.120493][ T9133] ? free_vm_area+0x50/0x50 [ 312.125019][ T9133] vmalloc_user+0x74/0x80 [ 312.129360][ T9133] ? xskq_create+0xbf/0x170 [ 312.133866][ T9133] xskq_create+0xbf/0x170 [ 312.138302][ T9133] xsk_init_queue+0xb0/0x110 [ 312.142911][ T9133] xsk_setsockopt+0x4db/0x6f0 [ 312.147596][ T9133] ? xsk_poll+0x670/0x670 [ 312.151961][ T9133] ? __fget_files+0x28/0x4d0 [ 312.156562][ T9133] ? aa_sock_opt_perm+0x74/0x100 [ 312.161512][ T9133] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 312.167070][ T9133] ? security_socket_setsockopt+0x7e/0xa0 [ 312.172811][ T9133] ? xsk_poll+0x670/0x670 [ 312.177193][ T9133] do_sock_setsockopt+0x175/0x1a0 [ 312.182251][ T9133] ? __fdget+0x180/0x210 [ 312.186510][ T9133] __x64_sys_setsockopt+0x184/0x200 [ 312.191733][ T9133] do_syscall_64+0x55/0xb0 [ 312.196160][ T9133] ? clear_bhb_loop+0x40/0x90 [ 312.200841][ T9133] ? clear_bhb_loop+0x40/0x90 [ 312.205633][ T9133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.211640][ T9133] RIP: 0033:0x7f466f18eec9 [ 312.216121][ T9133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.235756][ T9133] RSP: 002b:00007f4670113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 312.244183][ T9133] RAX: ffffffffffffffda RBX: 00007f466f3e5fa0 RCX: 00007f466f18eec9 [ 312.252190][ T9133] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 312.260182][ T9133] RBP: 00007f466f211f91 R08: 0000000000000004 R09: 0000000000000000 [ 312.268254][ T9133] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 312.276233][ T9133] R13: 00007f466f3e6038 R14: 00007f466f3e5fa0 R15: 00007ffdc0ffdfb8 [ 312.284227][ T9133] [ 312.338221][ T9133] Mem-Info: [ 312.342123][ T9133] active_anon:16818 inactive_anon:0 isolated_anon:0 [ 312.342123][ T9133] active_file:10790 inactive_file:39996 isolated_file:0 [ 312.342123][ T9133] unevictable:768 dirty:72 writeback:0 [ 312.342123][ T9133] slab_reclaimable:7050 slab_unreclaimable:93761 [ 312.342123][ T9133] mapped:31111 shmem:12259 pagetables:657 [ 312.342123][ T9133] sec_pagetables:0 bounce:0 [ 312.342123][ T9133] kernel_misc_reclaimable:0 [ 312.342123][ T9133] free:1343060 free_pcp:12211 free_cma:0 [ 312.448192][ T9133] Node 0 active_anon:67472kB inactive_anon:0kB active_file:43160kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124444kB dirty:288kB writeback:0kB shmem:47500kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11732kB pagetables:2628kB sec_pagetables:0kB all_unreclaimable? no [ 312.539910][ T9133] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 312.619892][ T9133] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.678428][ T9133] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 312.700400][ T9133] Node 0 DMA32 free:1460992kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:67480kB inactive_anon:0kB active_file:43160kB inactive_file:158468kB unevictable:1536kB writepending:288kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:30580kB local_pcp:17284kB free_cma:0kB [ 312.904092][ T9133] lowmem_reserve[]: 0 0 1 1 1 [ 312.913481][ T9133] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 313.000445][ T9133] lowmem_reserve[]: 0 0 0 0 0 [ 313.005206][ T9133] Node 1 Normal free:3895424kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:8512kB free_cma:0kB [ 313.083065][ T9133] lowmem_reserve[]: 0 0 0 0 0 [ 313.093274][ T9133] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 313.124071][ T9133] Node 0 DMA32: 1163*4kB (UME) 1353*8kB (UME) 1337*16kB (UME) 405*32kB (UME) 406*64kB (UME) 84*128kB (UME) 19*256kB (UME) 3*512kB (UME) 5*1024kB (UME) 3*2048kB (UM) 337*4096kB (UM) = 1484580kB [ 313.190220][ T9133] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 313.219531][ T9133] Node 1 Normal: 250*4kB (UME) 45*8kB (UME) 49*16kB (UME) 67*32kB (UME) 23*64kB (UME) 4*128kB (UE) 2*256kB (UE) 3*512kB (UME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3895424kB [ 313.392380][ T9133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.444293][ T9133] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 313.502993][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 313.511409][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 313.550201][ T9133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 313.618564][ T9133] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 313.694698][ T9133] 58970 total pagecache pages [ 313.710674][ T9133] 0 pages in swap cache [ 313.749329][ T9133] Free swap = 124460kB [ 313.770308][ T9133] Total swap = 124996kB [ 313.880861][ T9133] 2097051 pages RAM [ 313.891350][ T9133] 0 pages HighMem/MovableOnly [ 313.911406][ T9133] 416136 pages reserved [ 313.933797][ T9133] 0 pages cma reserved [ 314.656955][ T9160] Illegal XDP return value 630620160 on prog (id 87) dev N/A, expect packet loss! [ 317.597458][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.618052][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.305142][ T9245] netlink: 'syz.2.1037': attribute type 4 has an invalid length. [ 322.910550][ T9265] 9pnet_virtio: no channels available for device syz [ 323.529103][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 326.751357][ T9305] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1050'. [ 326.782953][ T9305] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1050'. [ 326.809089][ T9305] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1050'. [ 326.962180][ T9311] 9pnet_virtio: no channels available for device syz [ 327.102194][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1055'. [ 327.122214][ T9313] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1055'. [ 327.385974][ T9313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.431927][ T9313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.458517][ T9313] bond0 (unregistering): Released all slaves [ 331.133555][ T9392] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 331.485231][ T9399] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1074'. [ 332.572056][ T9420] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1079'. [ 332.992002][ T9431] 9pnet_virtio: no channels available for device syz [ 340.028317][ T9487] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 340.830725][ T9521] input: syz0 as /devices/virtual/input/input8 [ 341.612132][ T9543] tipc: Enabling of bearer rejected, failed to enable media [ 342.798121][ T9562] netlink: 'syz.6.1107': attribute type 8 has an invalid length. [ 343.997237][ T9579] netlink: 'syz.6.1110': attribute type 1 has an invalid length. [ 344.005184][ T9569] can0: slcan on ptm0. [ 344.039929][ T9579] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1110'. [ 344.106721][ T9574] lo speed is unknown, defaulting to 1000 [ 344.158196][ T9574] lo speed is unknown, defaulting to 1000 [ 344.183389][ T9574] lo speed is unknown, defaulting to 1000 [ 344.206624][ T9567] can0 (unregistered): slcan off ptm0. [ 344.235036][ T9574] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 344.351114][ T9574] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 344.558055][ T9574] lo speed is unknown, defaulting to 1000 [ 344.607024][ T9574] lo speed is unknown, defaulting to 1000 [ 344.618876][ T9574] lo speed is unknown, defaulting to 1000 [ 346.747630][ T9574] lo speed is unknown, defaulting to 1000 [ 349.132174][ T9624] netlink: 'syz.5.1120': attribute type 10 has an invalid length. [ 349.171604][ T9624] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 349.615036][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.636596][ T9644] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 349.805275][ T9646] siw: device registration error -23 [ 351.091118][ T9657] kAFS: unable to lookup cell 'Þ({^ú@' [ 352.649109][ T27] kauditd_printk_skb: 180 callbacks suppressed [ 352.649125][ T27] audit: type=1326 audit(1759601313.806:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 352.802169][ T27] audit: type=1326 audit(1759601313.846:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 352.916379][ T27] audit: type=1326 audit(1759601313.906:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ff712af79 code=0x7ffc0000 [ 352.995628][ T27] audit: type=1326 audit(1759601313.906:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ff712af79 code=0x7ffc0000 [ 353.073072][ T27] audit: type=1326 audit(1759601313.906:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ff712af79 code=0x7ffc0000 [ 353.155637][ T27] audit: type=1326 audit(1759601313.906:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ff712af79 code=0x7ffc0000 [ 353.272060][ T27] audit: type=1326 audit(1759601313.906:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ff712af79 code=0x7ffc0000 [ 353.351039][ T27] audit: type=1326 audit(1759601313.906:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ff712af79 code=0x7ffc0000 [ 353.445702][ T27] audit: type=1326 audit(1759601313.906:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ff712af79 code=0x7ffc0000 [ 353.532740][ T27] audit: type=1326 audit(1759601313.906:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ff712af79 code=0x7ffc0000 [ 354.516199][ T9718] lo speed is unknown, defaulting to 1000 [ 354.522368][ T9718] lo speed is unknown, defaulting to 1000 [ 354.535081][ T9718] lo speed is unknown, defaulting to 1000 [ 354.590651][ T9718] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 354.659026][ T9718] lo speed is unknown, defaulting to 1000 [ 354.671062][ T9718] lo speed is unknown, defaulting to 1000 [ 354.683522][ T9718] lo speed is unknown, defaulting to 1000 [ 354.695184][ T9718] lo speed is unknown, defaulting to 1000 [ 358.530644][ T9759] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 358.906996][ T9767] kAFS: unable to lookup cell 'Þ({^ú@' [ 362.051337][ T9808] kAFS: unable to lookup cell 'Þ({^ú@' [ 362.221489][ T9816] siw: device registration error -23 [ 362.242108][ T9813] trusted_key: syz.5.1149 sent an empty control message without MSG_MORE. ˆÊÿà ªªªªª3ªªªªª4ˆ¨"ÜN©[ 364.698181][ T5802] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 364.708029][ T5802] Bluetooth: hci0: Injecting HCI hardware error event [ 365.582876][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 365.589437][ T5802] Bluetooth: hci0: hardware error 0x00 [ 366.544543][ T9902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1160'. [ 367.228082][ T9908] siw: device registration error -23 [ 367.898427][ T5802] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 368.540173][ T9918] kAFS: unable to lookup cell 'Þ({^ú@' ˆÊÿà ªªªªª3ªªªªª4ˆ¨"ÜN©[ 369.451510][ T9937] sg_write: process 799 (syz.0.1168) changed security contexts after opening file descriptor, this is not allowed. ˆÊÿà ªªªªª3ªªªªª4ˆ¨"ÜN©[ 372.535896][T10007] 9pnet_virtio: no channels available for device syz [ 374.769808][T10021] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1182'. [ 378.180165][T10050] kAFS: unable to lookup cell 'Þ({^ú@' [ 378.656947][T10055] overlayfs: failed to resolve './file1': -2 [ 378.865120][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.873145][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.684393][T10070] sch_tbf: peakrate 5 is lower than or equals to rate 7 ! ˆÊÿà ªªªªª3ªªªªª4ˆ¨"ÜN©[ 384.072586][T10113] tmpfs: Bad value for 'mpol' [ 384.448888][T10119] overlayfs: failed to resolve './file1': -2 [ 384.705558][T10126] overlayfs: failed to resolve './file1': -2 [ 385.595171][T10143] kAFS: unable to lookup cell 'Þ({^ú@' [ 388.754490][T10174] overlayfs: failed to resolve './file0': -2 [ 389.285054][T10185] netlink: 'syz.2.1211': attribute type 7 has an invalid length. [ 390.143592][T10211] overlayfs: failed to resolve './file0': -2 [ 390.148362][T10207] netlink: 'syz.0.1216': attribute type 10 has an invalid length. [ 390.164799][T10207] syz_tun: entered promiscuous mode [ 390.210273][T10207] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 392.889869][T10261] netlink: 'syz.5.1226': attribute type 7 has an invalid length. [ 393.047256][T10264] overlayfs: failed to resolve './file0': -2 [ 393.833487][ T5880] libceph: connect (1)[c::]:6789 error -22 [ 393.843332][T10278] pim6reg: entered allmulticast mode [ 393.874114][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 393.888343][T10280] pim6reg: left allmulticast mode [ 393.908837][T10259] ceph: No mds server is up or the cluster is laggy [ 393.946577][T10278] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1229'. [ 394.178283][ T5880] libceph: connect (1)[c::]:6789 error -22 [ 394.184525][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 394.524192][T10279] vxfs: WRONG superblock magic 00000000 at 1 [ 394.531018][T10279] vxfs: WRONG superblock magic 00000000 at 8 [ 394.537142][T10279] vxfs: can't find superblock. [ 394.740051][ T5861] libceph: connect (1)[c::]:6789 error -22 [ 394.764131][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 395.526145][T10301] overlayfs: failed to resolve './file0': -2 [ 395.810054][T10313] netlink: 'syz.6.1240': attribute type 7 has an invalid length. [ 396.043425][T10315] netlink: 'syz.0.1243': attribute type 10 has an invalid length. [ 396.066412][T10315] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 396.086511][T10315] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 397.018299][T10333] veth1_to_bond: entered allmulticast mode [ 397.176114][T10333] veth1_to_bond: left allmulticast mode [ 397.412836][T10343] overlayfs: failed to resolve './file0': -2 [ 397.521887][T10344] pim6reg: entered allmulticast mode [ 397.575272][T10347] pim6reg: left allmulticast mode [ 397.632407][T10344] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1247'. [ 397.679402][ T27] kauditd_printk_skb: 337 callbacks suppressed [ 397.679418][ T27] audit: type=1326 audit(1759601358.836:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 397.749238][ T27] audit: type=1326 audit(1759601358.836:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 397.817114][ T27] audit: type=1326 audit(1759601358.846:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 397.915671][ T27] audit: type=1326 audit(1759601358.976:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 398.006634][ T27] audit: type=1326 audit(1759601358.976:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.0.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 398.249517][T10367] netlink: 'syz.2.1252': attribute type 10 has an invalid length. [ 398.284096][T10367] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 400.271726][T10412] overlayfs: failed to resolve './file0': -2 [ 401.710832][T10443] syz.0.1261 (10443): /proc/10423/oom_adj is deprecated, please use /proc/10423/oom_score_adj instead. [ 401.848028][T10441] pim6reg: entered allmulticast mode [ 401.918569][T10444] pim6reg: left allmulticast mode [ 401.928977][T10441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1263'. [ 402.414265][T10458] overlayfs: failed to resolve './file0': -2 [ 402.648014][T10456] netlink: 'syz.5.1267': attribute type 10 has an invalid length. [ 404.502862][T10495] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 405.737607][T10510] overlayfs: failed to resolve './file0': -2 [ 407.163253][T10532] pim6reg: entered allmulticast mode [ 407.180719][T10532] pim6reg: left allmulticast mode [ 407.394452][T10535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1279'. [ 407.595111][T10537] netlink: 'syz.6.1280': attribute type 10 has an invalid length. [ 408.227884][T10561] overlayfs: failed to resolve './file0': -2 [ 408.420152][T10567] siw: device registration error -23 [ 410.102102][T10576] comedi comedi3: multiq3: I/O port conflict (0x4f27,16) [ 410.150870][T10582] overlayfs: failed to resolve './file1': -2 [ 410.451728][T10587] netlink: 'syz.5.1292': attribute type 10 has an invalid length. [ 411.869183][ T27] audit: type=1326 audit(1759601373.026:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ae98eec9 code=0x7ffc0000 [ 411.920215][ T27] audit: type=1326 audit(1759601373.026:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ae98eec9 code=0x7ffc0000 [ 411.945758][ T27] audit: type=1326 audit(1759601373.056:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36ae98eec9 code=0x7ffc0000 [ 412.042040][ T27] audit: type=1326 audit(1759601373.056:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ae98eec9 code=0x7ffc0000 [ 412.155757][ T27] audit: type=1326 audit(1759601373.056:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f36ae98eec9 code=0x7ffc0000 [ 412.213708][ T27] audit: type=1326 audit(1759601373.056:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 412.367774][ T27] audit: type=1326 audit(1759601373.056:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 412.393221][ T27] audit: type=1326 audit(1759601373.056:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 412.404590][T10622] pim6reg: entered allmulticast mode [ 412.415726][ T27] audit: type=1326 audit(1759601373.056:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 412.415789][ T27] audit: type=1326 audit(1759601373.056:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10615 comm="syz.5.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36ae92af79 code=0x7ffc0000 [ 412.475803][T10623] pim6reg: left allmulticast mode [ 413.622005][T10633] siw: device registration error -23 [ 415.243822][T10635] ucma_write: process 290 (syz.6.1302) changed security contexts after opening file descriptor, this is not allowed. [ 415.557670][T10637] overlayfs: failed to resolve './file1': -2 [ 416.484563][T10656] netlink: 'syz.0.1307': attribute type 16 has an invalid length. [ 416.492715][T10656] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1307'. [ 416.510096][T10656] 9pnet_virtio: no channels available for device syz [ 417.240874][T10667] overlayfs: failed to resolve './file1': -2 [ 417.363918][T10665] fuse: Unknown parameter '0x000000000000000900000000000000000000' [ 420.387280][T10705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1327'. [ 420.526840][T10705] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1327'. [ 421.080187][T10705] batadv1: entered allmulticast mode [ 421.907047][ T5794] Bluetooth: hci4: command 0x0406 tx timeout [ 423.976842][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 424.905822][T10775] nbd2: detected capacity change from 0 to 63 [ 424.973175][T10778] block nbd2: NBD_DISCONNECT [ 424.983130][T10778] block nbd2: Disconnected due to user request. [ 425.005336][T10778] block nbd2: shutting down sockets [ 425.708735][T10792] syz.2.1357[10792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.709007][T10792] syz.2.1357[10792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.744162][T10792] syz.2.1357[10792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.783611][T10792] syz.2.1357[10792] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.455123][ T27] kauditd_printk_skb: 743 callbacks suppressed [ 426.455140][ T27] audit: type=1326 audit(1759601387.606:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10806 comm="syz.2.1364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f466f18eec9 code=0x0 [ 426.496187][ T5802] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 428.039757][ T5802] Bluetooth: hci1: sending frame failed (-49) [ 428.056702][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 428.666070][ T5880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 428.855618][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 428.864436][ T5880] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 428.879048][ T5880] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 428.889453][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 428.907827][ T5880] usb 1-1: Product: syz [ 428.916700][ T5880] usb 1-1: Manufacturer: syz [ 428.926963][ T5880] usb 1-1: SerialNumber: syz [ 428.952564][ T5880] usb 1-1: config 0 descriptor?? [ 428.967597][T10841] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 428.989861][ T5880] hub 1-1:0.0: bad descriptor, ignoring hub [ 428.998204][ T5880] hub: probe of 1-1:0.0 failed with error -5 [ 429.320863][ T5880] usb 1-1: USB disconnect, device number 5 [ 430.004438][T10875] pim6reg: entered allmulticast mode [ 430.779081][T10888] fuse: root generation should be zero [ 431.594654][T10898] pim6reg: entered allmulticast mode [ 432.226603][ T5794] Bluetooth: hci1: command 0x1003 tx timeout [ 432.234348][ T5802] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 433.088752][T10922] pim6reg: entered allmulticast mode [ 436.002002][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.041098][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.313843][T10965] 9pnet_virtio: no channels available for device syz [ 439.804745][ T27] audit: type=1326 audit(1759601400.956:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 440.954754][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.961296][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.985671][ T27] audit: type=1326 audit(1759601400.956:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 441.974389][ T27] audit: type=1326 audit(1759601400.996:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 442.535910][ T27] audit: type=1326 audit(1759601400.996:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 442.668968][ T27] audit: type=1326 audit(1759601400.996:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 442.802112][ T27] audit: type=1326 audit(1759601400.996:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 442.973557][ T27] audit: type=1326 audit(1759601400.996:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 443.568228][ T27] audit: type=1326 audit(1759601400.996:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 443.599287][ T27] audit: type=1326 audit(1759601400.996:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 443.642030][ T27] audit: type=1326 audit(1759601400.996:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.6.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 443.842502][T11026] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1440'. [ 444.150163][T11041] loop2: detected capacity change from 0 to 7 [ 444.170012][T11041] Dev loop2: unable to read RDB block 7 [ 444.179784][T11041] loop2: AHDI p1 p2 p3 [ 444.184030][T11041] loop2: partition table partially beyond EOD, truncated [ 444.205861][T11041] loop2: p1 start 1601398130 is beyond EOD, truncated [ 444.213596][T11041] loop2: p2 start 1702059890 is beyond EOD, truncated [ 444.256652][ T5802] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 444.333042][T11046] loop6: detected capacity change from 0 to 1024 [ 444.376656][T11046] ext3: Unknown parameter 'measure' [ 447.136329][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.281221][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.315635][ T5861] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 448.507724][ T5861] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 448.530151][ T5861] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 448.555731][ T5861] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 448.567190][ T5861] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 448.578380][ T5861] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 448.591767][ T5861] usb 6-1: config 0 interface 0 has no altsetting 0 [ 448.603412][ T5861] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 448.612623][ T5861] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 448.621479][ T5861] usb 6-1: Product: syz [ 448.625899][ T5861] usb 6-1: Manufacturer: syz [ 448.630542][ T5861] usb 6-1: SerialNumber: syz [ 448.644929][ T5861] usb 6-1: config 0 descriptor?? [ 448.662523][T11089] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 448.672527][ T5861] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 448.692232][ T5861] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 448.839767][T11103] 9pnet_virtio: no channels available for device syz [ 449.122219][ T5880] usb 6-1: USB disconnect, device number 3 [ 449.134119][ T5880] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 449.405674][ T5881] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 449.415914][ T5802] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 449.422825][ T5794] Bluetooth: hci1: command 0x1003 tx timeout [ 449.824348][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 450.262142][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 450.298210][ T5881] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 450.347133][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.620273][ T5881] usb 1-1: config 0 descriptor?? [ 451.088302][ T5881] usbhid 1-1:0.0: can't add hid device: -71 [ 451.094451][ T5881] usbhid: probe of 1-1:0.0 failed with error -71 [ 451.109891][ T5881] usb 1-1: USB disconnect, device number 6 [ 454.376293][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 454.383324][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 454.799898][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1495'. [ 456.954165][ T5794] Bluetooth: hci1: sending frame failed (-49) [ 456.963516][ T5795] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 457.085135][T11226] comedi comedi3: pcmmio: I/O port conflict (0x4f29,32) [ 458.117200][T11234] overlayfs: missing 'lowerdir' [ 458.408016][T11167] Set syz1 is full, maxelem 65536 reached [ 458.589002][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 458.589020][ T27] audit: type=1326 audit(1759601419.726:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.2.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466f18eec9 code=0x7fc00000 [ 459.346823][T11263] overlayfs: missing 'lowerdir' [ 459.693006][T11267] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1521'. [ 459.850968][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1523'. [ 459.881196][ T27] audit: type=1326 audit(1759601421.036:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.2.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f466f12af79 code=0x7fc00000 [ 459.976255][ T27] audit: type=1326 audit(1759601421.036:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.2.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f466f12b03f code=0x7fc00000 [ 460.045803][ T27] audit: type=1326 audit(1759601421.036:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.2.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f466f18eec9 code=0x7fc00000 [ 460.396757][T11284] overlayfs: missing 'lowerdir' [ 460.405273][T11275] syzkaller0: entered promiscuous mode [ 460.425990][T11275] syzkaller0: entered allmulticast mode [ 461.335705][T11296] hub 9-0:1.0: USB hub found [ 461.344738][T11296] hub 9-0:1.0: 1 port detected [ 461.766789][T11317] overlayfs: missing 'lowerdir' [ 461.966763][T11323] input: syz1 as /devices/virtual/input/input9 [ 463.396099][T11335] hub 9-0:1.0: USB hub found [ 463.401141][T11335] hub 9-0:1.0: 1 port detected [ 464.046659][T11346] overlayfs: missing 'lowerdir' [ 467.418733][T11369] overlayfs: missing 'lowerdir' [ 467.562804][T11367] hub 9-0:1.0: USB hub found [ 467.567763][T11367] hub 9-0:1.0: 1 port detected [ 468.295722][ T5795] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 469.082372][T11397] comedi comedi0: pcl726: I/O port conflict (0x3,16) [ 469.102014][T11398] overlayfs: missing 'workdir' [ 469.304203][T11403] overlayfs: missing 'workdir' [ 469.506081][T11401] hub 9-0:1.0: USB hub found [ 469.511015][T11401] hub 9-0:1.0: 1 port detected [ 471.415757][ T5795] Bluetooth: hci1: command 0x1003 tx timeout [ 471.422994][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 471.767806][T11434] overlayfs: missing 'workdir' [ 475.545043][T11477] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 475.564674][T11477] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 477.515728][ T5795] Bluetooth: hci1: command 0x1003 tx timeout [ 477.523176][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 477.856567][T11490] lo speed is unknown, defaulting to 1000 [ 478.698555][T11505] loop0: detected capacity change from 0 to 256 [ 478.702432][T11507] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 478.713974][T11507] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 478.865824][T11510] syzkaller1: entered promiscuous mode [ 478.887452][T11510] syzkaller1: entered allmulticast mode [ 479.664513][T11533] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 479.705035][T11533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 479.747697][ T5860] IPVS: starting estimator thread 0... [ 479.873176][T11535] IPVS: using max 16 ests per chain, 38400 per kthread [ 481.342204][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 482.304507][T11556] overlayfs: missing 'lowerdir' [ 482.556616][T11568] 9pnet_virtio: no channels available for device syz [ 484.393556][T11589] overlayfs: missing 'lowerdir' [ 484.733417][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.746380][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.775714][ T5795] Bluetooth: hci1: command 0x1003 tx timeout [ 484.783506][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 484.862113][T11593] netlink: 'syz.0.1632': attribute type 16 has an invalid length. [ 484.870258][T11593] netlink: 'syz.0.1632': attribute type 17 has an invalid length. [ 484.891605][T11593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.056199][T11602] syzkaller1: entered promiscuous mode [ 485.061753][T11602] syzkaller1: entered allmulticast mode [ 486.197580][T11619] overlayfs: missing 'lowerdir' [ 487.004190][ T48] Bluetooth: hci1: Frame reassembly failed (-84) [ 488.525976][T11636] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.955557][T11639] netlink: 'syz.6.1645': attribute type 16 has an invalid length. [ 488.978224][T11639] netlink: 'syz.6.1645': attribute type 17 has an invalid length. [ 489.017899][ T5795] Bluetooth: hci1: command 0x1003 tx timeout [ 489.028490][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 489.099062][T11639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.052272][T11734] netlink: 'syz.5.1657': attribute type 16 has an invalid length. [ 491.088819][T11734] netlink: 'syz.5.1657': attribute type 17 has an invalid length. [ 491.257165][T11734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.949900][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.201996][T11774] netlink: 'syz.2.1668': attribute type 16 has an invalid length. [ 495.210182][T11774] netlink: 'syz.2.1668': attribute type 17 has an invalid length. [ 495.232690][T11774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.381982][T11807] lo speed is unknown, defaulting to 1000 [ 497.735691][ T5861] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 497.918674][ T5861] usb 6-1: config 0 has no interfaces? [ 497.943212][ T5861] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 497.963464][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.963495][ T5861] usb 6-1: Product: syz [ 497.963516][ T5861] usb 6-1: Manufacturer: syz [ 497.963533][ T5861] usb 6-1: SerialNumber: syz [ 497.983991][ T5861] usb 6-1: config 0 descriptor?? [ 498.284681][T11807] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.371233][ T5861] usb 6-1: USB disconnect, device number 4 [ 499.729428][T11828] netlink: 'syz.6.1685': attribute type 16 has an invalid length. [ 499.742433][T11828] netlink: 'syz.6.1685': attribute type 17 has an invalid length. [ 499.769025][T11828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.739110][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.745691][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.924921][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1704'. [ 503.033785][T11876] sp0: Synchronizing with TNC [ 505.510232][T11907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1716'. [ 505.770272][T11907] sp0: Synchronizing with TNC [ 508.016541][T11941] ip6erspan0: entered allmulticast mode [ 508.233254][ T27] audit: type=1326 audit(1759601469.386:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.2.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466f18eec9 code=0x7fc00000 [ 508.291639][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1728'. [ 508.478982][T11955] sp0: Synchronizing with TNC [ 510.102101][T11970] ubi: mtd0 is already attached to ubi31 [ 510.135242][T11970] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1731'. [ 510.994481][ T27] audit: type=1326 audit(1759601472.146:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.2.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f466f12af79 code=0x7fc00000 [ 511.895607][ T5794] Bluetooth: hci4: command 0x0406 tx timeout [ 512.278400][T11981] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 512.469140][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1733'. [ 512.668858][T11990] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1737'. [ 512.711062][T11990] sp0: Synchronizing with TNC [ 512.944013][T11994] ip6erspan0: entered allmulticast mode [ 514.375721][ T5795] Bluetooth: hci1: command 0x1003 tx timeout [ 514.384086][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 516.444676][ T27] audit: type=1326 audit(1759601477.596:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 516.505627][ T27] audit: type=1326 audit(1759601477.636:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 516.575712][ T27] audit: type=1326 audit(1759601477.636:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 516.615696][ T27] audit: type=1326 audit(1759601477.636:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 516.651016][ T27] audit: type=1326 audit(1759601477.636:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 516.747033][ T27] audit: type=1326 audit(1759601477.636:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 516.830532][ T27] audit: type=1326 audit(1759601477.646:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 516.900305][ T27] audit: type=1326 audit(1759601477.646:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 516.939869][ T27] audit: type=1326 audit(1759601477.646:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 516.985149][ T27] audit: type=1326 audit(1759601477.646:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12026 comm="syz.6.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884298eec9 code=0x7ffc0000 [ 517.188219][T11680] Bluetooth: hci1: Frame reassembly failed (-84) [ 517.991982][T12040] ip6erspan0: entered allmulticast mode [ 518.132286][T12052] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 518.250619][T12056] loop6: detected capacity change from 0 to 256 [ 518.567955][T12059] loop2: detected capacity change from 0 to 128 [ 518.862323][T12048] overlayfs: statfs failed on './file0' [ 519.401473][ T5794] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 524.139641][T12108] loop5: detected capacity change from 0 to 32768 [ 524.162905][T12108] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 524.217079][ T5795] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 524.219773][ T5794] Bluetooth: hci1: command 0x1003 tx timeout [ 524.294677][T12108] XFS (loop5): Ending clean mount [ 524.314694][T12108] XFS (loop5): Quotacheck needed: Please wait. [ 524.400193][T12108] XFS (loop5): Quotacheck: Done. [ 526.694283][ T8031] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 531.984431][T12165] lo speed is unknown, defaulting to 1000 [ 532.000031][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 532.000048][ T27] audit: type=1326 audit(1759601493.156:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 532.072288][ T27] audit: type=1326 audit(1759601493.196:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 532.157293][ T27] audit: type=1326 audit(1759601493.196:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 532.185651][ T27] audit: type=1326 audit(1759601493.196:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 532.208391][ T27] audit: type=1326 audit(1759601493.196:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 532.232336][ T27] audit: type=1326 audit(1759601493.196:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 532.255264][ T27] audit: type=1326 audit(1759601493.196:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 532.282729][ T27] audit: type=1326 audit(1759601493.206:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ff718d710 code=0x7ffc0000 [ 532.313917][ T27] audit: type=1326 audit(1759601493.206:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 532.342004][ T27] audit: type=1326 audit(1759601493.206:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12164 comm="syz.0.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff718eec9 code=0x7ffc0000 [ 532.916049][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'. [ 532.927121][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'. [ 532.936737][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1795'. [ 533.495778][ T5795] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 533.763658][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1799'. [ 533.812177][T12181] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.821075][T12181] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.830157][T12181] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.838997][T12181] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.871980][T12181] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.881315][T12181] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.890362][T12181] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.899798][T12181] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.217735][T12177] loop0: detected capacity change from 0 to 32768 [ 534.251300][T12177] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 534.389467][T12177] XFS (loop0): Ending clean mount [ 534.416028][T12177] XFS (loop0): Quotacheck needed: Please wait. [ 534.510712][T12177] XFS (loop0): Quotacheck: Done. [ 535.046966][T11674] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.289308][T11674] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.488848][T11674] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.675415][T11674] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.087666][ T5793] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 536.397175][T12210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.411665][T12210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.420386][T12210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.433890][T12210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.448113][T12210] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 536.461839][T12210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.560273][T12209] lo speed is unknown, defaulting to 1000 [ 536.765894][T12137] syz.2.1783: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 536.786519][T12137] CPU: 1 PID: 12137 Comm: syz.2.1783 Not tainted syzkaller #0 [ 536.794158][T12137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 536.804283][T12137] Call Trace: [ 536.807601][T12137] [ 536.810572][T12137] dump_stack_lvl+0x16c/0x230 [ 536.815337][T12137] ? show_regs_print_info+0x20/0x20 [ 536.820595][T12137] ? load_image+0x3b0/0x3b0 [ 536.825145][T12137] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 536.831638][T12137] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 536.838223][T12137] warn_alloc+0x210/0x300 [ 536.842578][T12137] ? zone_watermark_ok_safe+0x230/0x230 [ 536.848254][T12137] ? _raw_spin_unlock+0x3a/0x40 [ 536.853143][T12137] __vmalloc_node_range+0x662/0x1320 [ 536.858468][T12137] ? __asan_memset+0x22/0x40 [ 536.863174][T12137] ? free_vm_area+0x50/0x50 [ 536.867694][T12137] ? kvmalloc_node+0x70/0x180 [ 536.872378][T12137] ? rcu_is_watching+0x15/0xb0 [ 536.877148][T12137] ? kvmalloc_node+0x70/0x180 [ 536.881832][T12137] ? trace_kmalloc+0x1f/0xa0 [ 536.886434][T12137] kvmalloc_node+0x13f/0x180 [ 536.891032][T12137] ? hash_ip4_resize+0x1f4/0x19f0 [ 536.896076][T12137] hash_ip4_resize+0x1f4/0x19f0 [ 536.900954][T12137] ? hash_ip4_uadt+0x6cd/0x860 [ 536.905730][T12137] ? hash_ip4_kadt+0x450/0x450 [ 536.910509][T12137] call_ad+0x43f/0xae0 [ 536.914600][T12137] ? ip_set_ad+0x930/0x930 [ 536.919057][T12137] ? __nla_parse+0x40/0x50 [ 536.923506][T12137] ip_set_ad+0x787/0x930 [ 536.928040][T12137] ? trace_raw_output_contention_begin+0xd0/0xf0 [ 536.934395][T12137] ? ip_set_dump_done+0x1e0/0x1e0 [ 536.939439][T12137] ? rcu_is_watching+0x15/0xb0 [ 536.944246][T12137] nfnetlink_rcv_msg+0xb49/0x1130 [ 536.949331][T12137] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.955439][T12137] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 536.960684][T12137] ? nfnetlink_unbind+0x160/0x160 [ 536.965747][T12137] ? __dev_queue_xmit+0x1a64/0x35a0 [ 536.970952][T12137] ? __netlink_deliver_tap+0x5ab/0x830 [ 536.976449][T12137] ? netlink_deliver_tap+0x19c/0x1b0 [ 536.981741][T12137] ? netlink_unicast+0x72c/0x8d0 [ 536.986775][T12137] ? netlink_sendmsg+0x8c1/0xbe0 [ 536.991720][T12137] ? ____sys_sendmsg+0x5bf/0x950 [ 536.996678][T12137] ? ___sys_sendmsg+0x220/0x290 [ 537.001561][T12137] ? __se_sys_sendmsg+0x1a5/0x270 [ 537.006608][T12137] ? do_syscall_64+0x55/0xb0 [ 537.011218][T12137] netlink_rcv_skb+0x216/0x480 [ 537.016021][T12137] ? nfnetlink_unbind+0x160/0x160 [ 537.021055][T12137] ? netlink_ack+0x1110/0x1110 [ 537.025850][T12137] ? apparmor_capable+0x137/0x1a0 [ 537.030891][T12137] ? bpf_lsm_capable+0x9/0x10 [ 537.035586][T12137] ? security_capable+0x89/0xb0 [ 537.040475][T12137] nfnetlink_rcv+0x274/0x2180 [ 537.045189][T12137] ? __local_bh_enable_ip+0x12e/0x1c0 [ 537.050750][T12137] ? lockdep_hardirqs_on+0x98/0x150 [ 537.056096][T12137] ? __local_bh_enable_ip+0x12e/0x1c0 [ 537.061494][T12137] ? _local_bh_enable+0xa0/0xa0 [ 537.066360][T12137] ? __dev_queue_xmit+0x245/0x35a0 [ 537.071492][T12137] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 537.077058][T12137] ? __dev_queue_xmit+0x245/0x35a0 [ 537.082194][T12137] ? ref_tracker_free+0x634/0x7d0 [ 537.087227][T12137] ? __copy_skb_header+0xa7/0x550 [ 537.092263][T12137] ? refcount_inc+0x70/0x70 [ 537.096781][T12137] ? __skb_clone+0x63/0x790 [ 537.101411][T12137] ? __skb_clone+0x480/0x790 [ 537.106025][T12137] ? __netlink_deliver_tap+0x7e8/0x830 [ 537.111511][T12137] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.116725][T12137] ? __lock_acquire+0x7c80/0x7c80 [ 537.121761][T12137] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.126974][T12137] netlink_unicast+0x751/0x8d0 [ 537.131754][T12137] netlink_sendmsg+0x8c1/0xbe0 [ 537.136536][T12137] ? netlink_getsockopt+0x580/0x580 [ 537.141746][T12137] ? aa_sock_msg_perm+0x94/0x150 [ 537.146779][T12137] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 537.152095][T12137] ? security_socket_sendmsg+0x80/0xa0 [ 537.157566][T12137] ? netlink_getsockopt+0x580/0x580 [ 537.162806][T12137] ____sys_sendmsg+0x5bf/0x950 [ 537.167622][T12137] ? __asan_memset+0x22/0x40 [ 537.172238][T12137] ? __sys_sendmsg_sock+0x30/0x30 [ 537.177303][T12137] ? __import_iovec+0x5f2/0x860 [ 537.182266][T12137] ? import_iovec+0x73/0xa0 [ 537.186799][T12137] ___sys_sendmsg+0x220/0x290 [ 537.191502][T12137] ? __sys_sendmsg+0x270/0x270 [ 537.196321][T12137] ? debug_mutex_init+0x38/0x70 [ 537.201224][T12137] __se_sys_sendmsg+0x1a5/0x270 [ 537.206114][T12137] ? __x64_sys_sendmsg+0x80/0x80 [ 537.211095][T12137] ? lockdep_hardirqs_on+0x98/0x150 [ 537.216444][T12137] do_syscall_64+0x55/0xb0 [ 537.220880][T12137] ? clear_bhb_loop+0x40/0x90 [ 537.225574][T12137] ? clear_bhb_loop+0x40/0x90 [ 537.230268][T12137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.236179][T12137] RIP: 0033:0x7f466f18eec9 [ 537.240622][T12137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.260250][T12137] RSP: 002b:00007f4670113038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.268683][T12137] RAX: ffffffffffffffda RBX: 00007f466f3e5fa0 RCX: 00007f466f18eec9 [ 537.276668][T12137] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000004 [ 537.284642][T12137] RBP: 00007f466f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.292618][T12137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.300621][T12137] R13: 00007f466f3e6038 R14: 00007f466f3e5fa0 R15: 00007ffdc0ffdfb8 [ 537.308672][T12137] [ 537.324912][T12137] Mem-Info: [ 537.328718][T12137] active_anon:15013 inactive_anon:0 isolated_anon:0 [ 537.328718][T12137] active_file:10841 inactive_file:40100 isolated_file:0 [ 537.328718][T12137] unevictable:768 dirty:101 writeback:0 [ 537.328718][T12137] slab_reclaimable:6368 slab_unreclaimable:97554 [ 537.328718][T12137] mapped:24134 shmem:10613 pagetables:637 [ 537.328718][T12137] sec_pagetables:0 bounce:0 [ 537.328718][T12137] kernel_misc_reclaimable:0 [ 537.328718][T12137] free:1340229 free_pcp:11826 free_cma:0 [ 537.379264][T12137] Node 0 active_anon:60052kB inactive_anon:0kB active_file:43364kB inactive_file:160200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96536kB dirty:404kB writeback:0kB shmem:40916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12380kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no [ 537.441276][T12137] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 537.511622][T12137] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 537.574693][T12137] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 537.609285][T12137] Node 0 DMA32 free:1457292kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:50604kB inactive_anon:0kB active_file:43364kB inactive_file:158884kB unevictable:1536kB writepending:404kB present:3129332kB managed:2589604kB mlocked:0kB bounce:0kB free_pcp:31372kB local_pcp:13300kB free_cma:0kB [ 537.669337][T12137] lowmem_reserve[]: 0 0 1 1 1 [ 537.674280][T12137] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 537.674695][T12209] chnl_net:caif_netlink_parms(): no params data found [ 537.716651][T12137] lowmem_reserve[]: 0 0 0 0 0 [ 537.734040][T12137] Node 1 Normal free:3888032kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:26784kB local_pcp:14144kB free_cma:0kB [ 537.770726][T12137] lowmem_reserve[]: 0 0 0 0 0 [ 537.777195][T12137] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 537.792495][T12137] Node 0 DMA32: 536*4kB (UME) 528*8kB (UME) 423*16kB (UME) 234*32kB (ME) 337*64kB (UME) 157*128kB (UME) 51*256kB (UME) 14*512kB (UME) 8*1024kB (UME) 3*2048kB (UM) 333*4096kB (M) = 1460816kB [ 537.812133][T12137] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 537.830118][T12137] Node 1 Normal: 250*4kB (UME) 45*8kB (UME) 49*16kB (UME) 84*32kB (UME) 27*64kB (UME) 4*128kB (UE) 2*256kB (UE) 3*512kB (UME) 0*1024kB 4*2048kB (UME) 945*4096kB (M) = 3888032kB [ 537.884521][T12137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 537.901445][T12137] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 537.916631][T12137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 537.966753][T12137] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 538.000717][T12137] 57474 total pagecache pages [ 538.005765][T12137] 0 pages in swap cache [ 538.010013][T12137] Free swap = 124644kB [ 538.014278][T12137] Total swap = 124996kB [ 538.018608][T12137] 2097051 pages RAM [ 538.022453][T12137] 0 pages HighMem/MovableOnly [ 538.027240][T12137] 416136 pages reserved [ 538.031428][T12137] 0 pages cma reserved [ 538.112868][T12220] Bluetooth: Invalid byte 00 after esc byte [ 538.122914][T12209] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.137489][T12209] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.145354][T12209] bridge_slave_0: entered allmulticast mode [ 538.157187][T12209] bridge_slave_0: entered promiscuous mode [ 538.173316][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'. [ 538.189714][T12225] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.198890][T12225] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.208036][T12225] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.216843][ T5802] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 538.223390][T12225] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.259500][T12225] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.269174][T12225] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.278501][T12225] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.288017][T12225] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.403602][T12209] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.420691][T12209] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.433793][T12209] bridge_slave_1: entered allmulticast mode [ 538.441981][T12209] bridge_slave_1: entered promiscuous mode [ 538.517356][T12209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.549874][ T5802] Bluetooth: hci4: command tx timeout [ 538.571478][T11674] hsr_slave_0: left promiscuous mode [ 538.600351][T11674] hsr_slave_1: left promiscuous mode [ 538.611354][T11674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.632480][T11674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.659988][T11674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.682362][T11674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.691236][T11674] bridge_slave_1: left allmulticast mode [ 538.713123][T11674] bridge_slave_1: left promiscuous mode [ 538.726449][T11674] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.746971][T11674] bridge_slave_0: left allmulticast mode [ 538.753556][T11674] bridge_slave_0: left promiscuous mode [ 538.767343][T11674] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.797734][T11674] veth1_macvtap: left promiscuous mode [ 538.803375][T11674] veth0_macvtap: left promiscuous mode [ 538.809600][T11674] veth1_vlan: left promiscuous mode [ 538.815265][T11674] veth0_vlan: left promiscuous mode [ 540.025625][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1814'. [ 540.034564][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1814'. [ 540.043947][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1814'. [ 540.374634][ T5802] Bluetooth: hci5: command 0x1003 tx timeout [ 540.382707][T12210] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 540.621649][T12210] Bluetooth: hci4: command tx timeout [ 540.759442][T11674] pim6reg (unregistering): left allmulticast mode [ 541.399753][T11674] team0 (unregistering): Port device team_slave_1 removed [ 541.462827][T11674] team0 (unregistering): Port device team_slave_0 removed [ 542.158765][T12209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.203904][ T5823] lo speed is unknown, defaulting to 1000 [ 542.293759][T12209] team0: Port device team_slave_0 added [ 542.333239][T12209] team0: Port device team_slave_1 added [ 542.390565][T12209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.397841][T12209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.427315][T12209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.441944][T12209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.449186][T12209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.478324][T12209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.566944][T12209] hsr_slave_0: entered promiscuous mode [ 542.573392][T12209] hsr_slave_1: entered promiscuous mode [ 542.698097][T12210] Bluetooth: hci4: command tx timeout [ 543.030171][T12209] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 543.041086][T12209] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 543.052508][T12209] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 543.063268][T12209] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 543.146717][T12209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.178903][T12209] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.192933][T11674] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.200133][T11674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.215079][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.222284][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.433096][T12209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.683960][T12209] veth0_vlan: entered promiscuous mode [ 543.697426][T12209] veth1_vlan: entered promiscuous mode [ 543.732275][T12209] veth0_macvtap: entered promiscuous mode [ 543.742103][T12209] veth1_macvtap: entered promiscuous mode [ 543.764167][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.774839][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.786503][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.797326][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.809021][T12209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.821657][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.832293][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.844551][T12209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.862744][T12209] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.871786][T12209] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.881118][T12209] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.891525][T12209] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.970743][T11674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.983417][T11674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.012811][T11675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.020812][T11675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.775590][T12210] Bluetooth: hci4: command tx timeout [ 546.634971][T12281] loop6: detected capacity change from 0 to 32768 [ 546.682771][T12281] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 546.705336][T12307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1825'. [ 546.721935][T12307] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.730881][T12307] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.739697][T12307] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.752604][T12307] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.761862][T12307] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.770881][T12307] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.833691][T12281] XFS (loop6): Ending clean mount [ 546.849048][T12281] XFS (loop6): Quotacheck needed: Please wait. [ 546.934578][T12281] XFS (loop6): Quotacheck: Done. [ 547.938436][T12209] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 549.359173][T12328] Set syz1 is full, maxelem 6117 reached [ 551.186392][T12334] loop0: detected capacity change from 0 to 32768 [ 551.208000][T12334] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 551.352641][T12334] XFS (loop0): Ending clean mount [ 551.367799][T12334] XFS (loop0): Quotacheck needed: Please wait. [ 551.431422][T12334] XFS (loop0): Quotacheck: Done. [ 551.946171][ T5793] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 552.657705][T11683] Bluetooth: Invalid byte 5e after esc byte [ 554.242536][T12377] loop0: detected capacity change from 0 to 32768 [ 554.305764][T12377] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 554.375599][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 554.380684][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 554.499482][T12377] XFS (loop0): Ending clean mount [ 554.554659][T12377] XFS (loop0): Quotacheck needed: Please wait. [ 555.875584][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1854'. [ 555.884512][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1854'. [ 555.893783][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1854'. [ 556.169572][T12377] XFS (loop0): Quotacheck: Done. [ 556.464683][ T5793] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 560.615669][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 560.616128][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 561.472013][T12450] loop2: detected capacity change from 0 to 32768 [ 561.500714][T12450] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 561.598894][T12450] XFS (loop2): Ending clean mount [ 561.614820][T12450] XFS (loop2): Quotacheck needed: Please wait. [ 561.650533][T12450] XFS (loop2): Quotacheck: Done. [ 561.696793][ T5790] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 562.118226][T11679] Bluetooth: hci1: Frame reassembly failed (-84) [ 563.181291][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.191187][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.707409][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 563.716643][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 563.725733][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 564.137276][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 564.335812][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 569.015645][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 569.888383][T12568] trusted_key: encrypted_key: insufficient parameters specified [ 574.791318][T12210] Bluetooth: hci1: sending frame failed (-49) [ 574.801898][ T5802] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 576.649634][T12626] trusted_key: encrypted_key: insufficient parameters specified [ 578.703026][T12625] random: crng reseeded on system resumption [ 579.974766][T11683] Bluetooth: hci1: Frame reassembly failed (-84) [ 581.975861][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 583.558013][T12690] random: crng reseeded on system resumption [ 585.922291][T12718] random: crng reseeded on system resumption [ 591.655614][ T5802] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 592.407942][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1967'. [ 593.051693][ T2958] Bluetooth: hci1: Frame reassembly failed (-84) [ 595.105740][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 595.105882][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 595.325773][T12252] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 595.338930][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1987'. [ 595.528504][T12252] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 595.856297][T12252] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 595.867163][T12252] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 595.876437][T12252] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 595.887851][T12252] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 595.909330][T12252] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 595.918881][T12252] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 595.932131][T12252] usb 3-1: Product: syz [ 595.940087][T12252] usb 3-1: Manufacturer: syz [ 595.955300][T12252] cdc_wdm 3-1:1.0: skipping garbage [ 595.963922][T12252] cdc_wdm 3-1:1.0: skipping garbage [ 595.971189][T12252] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 595.977705][T12252] cdc_wdm 3-1:1.0: Unknown control protocol [ 596.280951][T12252] usb 3-1: USB disconnect, device number 6 [ 597.290669][T11687] Bluetooth: hci1: Frame reassembly failed (-84) [ 597.924546][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 597.924560][ T27] audit: type=1800 audit(1759601559.076:1370): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1999" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 599.335989][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 599.344602][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 599.555772][T12252] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 599.758570][T12252] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 599.767514][T12252] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 599.778470][T12252] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 599.789541][T12252] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 599.800853][T12252] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 599.814718][T12252] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 599.825467][T12252] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 599.833759][T12252] usb 7-1: Product: syz [ 599.838489][T12252] usb 7-1: Manufacturer: syz [ 599.849583][T12252] cdc_wdm 7-1:1.0: skipping garbage [ 599.854907][T12252] cdc_wdm 7-1:1.0: skipping garbage [ 599.861832][T12252] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 599.871034][T12252] cdc_wdm 7-1:1.0: Unknown control protocol [ 600.086314][ T5860] usb 7-1: USB disconnect, device number 2 [ 600.720601][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2004'. [ 602.681531][ T27] audit: type=1800 audit(1759601563.736:1371): pid=12956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2014" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 603.325528][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 603.507834][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 603.516897][ T23] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 603.527722][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 603.537691][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 603.549191][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 603.565057][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 603.585626][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 603.593715][ T23] usb 1-1: Product: syz [ 603.606369][ T23] usb 1-1: Manufacturer: syz [ 603.619748][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 603.625221][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 603.638951][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 603.644939][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 603.849417][T12252] usb 1-1: USB disconnect, device number 7 [ 605.085329][ T27] audit: type=1800 audit(1759601566.236:1372): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2029" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 605.256982][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 605.271811][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 609.095720][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 609.096200][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 610.614818][T13097] trusted_key: encrypted_key: insufficient parameters specified [ 612.455727][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 612.463698][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 614.166746][ T5802] Bluetooth: hci1: sending frame failed (-49) [ 614.174816][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 615.214140][T13163] trusted_key: encrypted_key: insufficient parameters specified [ 619.655557][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 620.486441][T13218] trusted_key: encrypted_key: insufficient parameters specified [ 622.089676][T11679] Bluetooth: hci1: Frame reassembly failed (-84) [ 623.405563][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 623.607686][ T5860] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 623.616125][ T5860] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 623.626777][ T5860] usb 6-1: config 0 interface 0 has no altsetting 0 [ 623.637113][ T5860] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 623.742043][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 623.750971][ T5860] usb 6-1: Product: syz [ 623.755196][ T5860] usb 6-1: Manufacturer: syz [ 623.760317][ T5860] usb 6-1: SerialNumber: syz [ 623.804448][ T5860] usb 6-1: config 0 descriptor?? [ 623.815239][ T5860] hub 6-1:0.0: bad descriptor, ignoring hub [ 623.822824][ T5860] hub: probe of 6-1:0.0 failed with error -5 [ 623.841465][ T5860] usb 6-1: selecting invalid altsetting 0 [ 624.205770][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 624.213847][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 624.670901][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.678085][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.887848][T13290] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 626.918532][ T23] usb 6-1: USB disconnect, device number 5 [ 627.071098][T11687] Bluetooth: hci1: Frame reassembly failed (-84) [ 629.095825][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 629.104475][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 634.295733][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 634.302966][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 636.247444][T13504] mmap: syz.6.2189 (13504): VmData 37494784 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 637.708716][T11675] Bluetooth: hci1: Frame reassembly failed (-84) [ 638.677743][T13558] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 639.735599][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 639.743214][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 641.912565][T13623] netlink: 'syz.6.2213': attribute type 10 has an invalid length. [ 641.940661][T13623] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2213'. [ 641.963186][T13623] dummy0: entered promiscuous mode [ 643.096268][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 643.104845][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 647.335856][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 647.344021][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 649.153845][T13730] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 649.324163][T13726] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 649.350903][T13726] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 649.375664][T13726] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 649.384064][T13726] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 649.394885][T13726] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 649.407059][T13726] kvm: requested 96381 ns i8254 timer period limited to 200000 ns [ 649.444141][T13726] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 649.453044][T13726] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 649.461659][T13726] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 649.495723][ T5802] Bluetooth: hci1: command 0x1003 tx timeout [ 649.503967][T12210] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 650.253922][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 650.264244][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 650.274193][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 650.283291][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 650.291391][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 650.300753][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 650.673273][T11675] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.933540][T11675] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.064001][T11675] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.217954][T11675] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.652550][T13741] chnl_net:caif_netlink_parms(): no params data found [ 651.677709][T11675] tipc: Disabling bearer [ 651.705097][T11675] tipc: Left network mode [ 651.946735][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.954600][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.962207][T13741] bridge_slave_0: entered allmulticast mode [ 651.971109][T13741] bridge_slave_0: entered promiscuous mode [ 651.980554][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.987982][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.995474][T13741] bridge_slave_1: entered allmulticast mode [ 652.003035][T13741] bridge_slave_1: entered promiscuous mode [ 652.082885][T13741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.119535][T13741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.163221][T13741] team0: Port device team_slave_0 added [ 652.195112][T13741] team0: Port device team_slave_1 added [ 652.228499][T13741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.235638][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.262503][T13741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.293669][T13741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.301094][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.327568][T13741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.375804][ T5802] Bluetooth: hci1: command tx timeout [ 652.404378][T13741] hsr_slave_0: entered promiscuous mode [ 652.411149][T13741] hsr_slave_1: entered promiscuous mode [ 652.418031][T13741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.425963][T13741] Cannot create hsr debugfs directory [ 652.727718][T11675] bond0: (slave wlan1): Releasing backup interface [ 652.747148][T11675] ------------[ cut here ]------------ [ 652.753273][T11675] WARNING: CPU: 1 PID: 11675 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 652.766116][T11675] Modules linked in: [ 652.770102][T11675] CPU: 1 PID: 11675 Comm: kworker/u4:17 Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 652.778509][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 652.779646][ T5802] Bluetooth: hci2: command 0x1003 tx timeout [ 652.788830][T11675] Workqueue: netns cleanup_net [ 652.788949][T11675] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 652.788990][T11675] Code: 7c 2d 00 00 74 08 48 89 df e8 38 83 e9 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 71 9f 83 00 e8 6c 2b 92 f7 <0f> 0b eb c5 48 c7 c1 9c b7 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 652.789014][T11675] RSP: 0018:ffffc9000be17548 EFLAGS: 00010293 [ 652.797575][T12210] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 652.800302][T11675] [ 652.800313][T11675] RAX: ffffffff89f35f84 RBX: ffff88805bb1d598 RCX: ffff88802dd50000 [ 652.800335][T11675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.858316][T11675] RBP: 0000000000000000 R08: ffffffff8e4a82ef R09: 1ffffffff1c9505d [ 652.866665][T11675] R10: dffffc0000000000 R11: fffffbfff1c9505e R12: ffff88805bb1ec08 [ 652.874703][T11675] R13: 1ffff1100b763ab3 R14: ffff88805bb1e3c0 R15: dffffc0000000000 [ 652.882989][T11675] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 652.892064][T11675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.898825][T11675] CR2: 00007f36aebb4198 CR3: 0000000060bb3000 CR4: 00000000003506e0 [ 652.906953][T11675] Call Trace: [ 652.910306][T11675] [ 652.913271][T11675] ? trace_drv_return_void+0x1c0/0x1c0 [ 652.918916][T11675] unregister_netdevice_many_notify+0x1257/0x1810 [ 652.925452][T11675] ? lock_chain_count+0x20/0x20 [ 652.930375][T11675] ? unregister_netdevice_many+0x20/0x20 [ 652.936210][T11675] ? kernfs_remove_by_name_ns+0x117/0x150 [ 652.941998][T11675] ? __lock_acquire+0x7c80/0x7c80 [ 652.947184][T11675] unregister_netdevice_queue+0x324/0x360 [ 652.952983][T11675] ? list_netdevice+0x730/0x730 [ 652.958165][T11675] ? kernfs_remove_by_name_ns+0x117/0x150 [ 652.964318][T11675] _cfg80211_unregister_wdev+0x16b/0x580 [ 652.970224][T11675] ieee80211_remove_interfaces+0x496/0x680 [ 652.976317][T11675] ? ieee80211_do_stop+0x1db0/0x1db0 [ 652.981669][T11675] ? rcu_is_watching+0x15/0xb0 [ 652.986608][T11675] ieee80211_unregister_hw+0x5d/0x2a0 [ 652.992045][T11675] mac80211_hwsim_del_radio+0x274/0x450 [ 652.997723][T11675] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 653.003343][T11675] hwsim_exit_net+0x585/0x640 [ 653.008159][T11675] ? hwsim_init_net+0x90/0x90 [ 653.012886][T11675] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 653.018844][T11675] cleanup_net+0x6f4/0xb90 [ 653.023325][T11675] ? ops_free_list+0x3b0/0x3b0 [ 653.028241][T11675] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.033487][T11675] ? process_scheduled_works+0x957/0x15b0 [ 653.039319][T11675] ? process_scheduled_works+0x957/0x15b0 [ 653.045092][T11675] process_scheduled_works+0xa45/0x15b0 [ 653.050819][T11675] ? assign_work+0x400/0x400 [ 653.055527][T11675] ? assign_work+0x39e/0x400 [ 653.060181][T11675] worker_thread+0xa55/0xfc0 [ 653.065105][T11675] kthread+0x2fa/0x390 [ 653.069408][T11675] ? pr_cont_work+0x560/0x560 [ 653.074154][T11675] ? kthread_blkcg+0xd0/0xd0 [ 653.078874][T11675] ret_from_fork+0x48/0x80 [ 653.083349][T11675] ? kthread_blkcg+0xd0/0xd0 [ 653.088047][T11675] ret_from_fork_asm+0x11/0x20 [ 653.092892][T11675] [ 653.096095][T11675] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 653.103407][T11675] CPU: 1 PID: 11675 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 653.111170][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.121260][T11675] Workqueue: netns cleanup_net [ 653.126079][T11675] Call Trace: [ 653.129403][T11675] [ 653.132371][T11675] dump_stack_lvl+0x16c/0x230 [ 653.137104][T11675] ? show_regs_print_info+0x20/0x20 [ 653.142350][T11675] ? load_image+0x3b0/0x3b0 [ 653.146910][T11675] panic+0x2c0/0x710 [ 653.150848][T11675] ? bpf_jit_dump+0xd0/0xd0 [ 653.155395][T11675] ? ret_from_fork_asm+0x11/0x20 [ 653.160382][T11675] __warn+0x2e0/0x470 [ 653.164405][T11675] ? ieee80211_link_release_channel+0x154/0x180 [ 653.170705][T11675] ? ieee80211_link_release_channel+0x154/0x180 [ 653.177000][T11675] report_bug+0x2be/0x4f0 [ 653.181372][T11675] ? ieee80211_link_release_channel+0x154/0x180 [ 653.187664][T11675] ? ieee80211_link_release_channel+0x154/0x180 [ 653.193951][T11675] ? ieee80211_link_release_channel+0x156/0x180 [ 653.200241][T11675] handle_bug+0xcf/0x120 [ 653.204527][T11675] exc_invalid_op+0x1a/0x50 [ 653.209082][T11675] asm_exc_invalid_op+0x1a/0x20 [ 653.213968][T11675] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 653.220978][T11675] Code: 7c 2d 00 00 74 08 48 89 df e8 38 83 e9 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 71 9f 83 00 e8 6c 2b 92 f7 <0f> 0b eb c5 48 c7 c1 9c b7 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 653.240628][T11675] RSP: 0018:ffffc9000be17548 EFLAGS: 00010293 [ 653.246713][T11675] RAX: ffffffff89f35f84 RBX: ffff88805bb1d598 RCX: ffff88802dd50000 [ 653.254699][T11675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 653.262683][T11675] RBP: 0000000000000000 R08: ffffffff8e4a82ef R09: 1ffffffff1c9505d [ 653.270668][T11675] R10: dffffc0000000000 R11: fffffbfff1c9505e R12: ffff88805bb1ec08 [ 653.278654][T11675] R13: 1ffff1100b763ab3 R14: ffff88805bb1e3c0 R15: dffffc0000000000 [ 653.286647][T11675] ? ieee80211_link_release_channel+0x154/0x180 [ 653.292923][T11675] ? ieee80211_link_release_channel+0x154/0x180 [ 653.299184][T11675] ? trace_drv_return_void+0x1c0/0x1c0 [ 653.304667][T11675] unregister_netdevice_many_notify+0x1257/0x1810 [ 653.311107][T11675] ? lock_chain_count+0x20/0x20 [ 653.315984][T11675] ? unregister_netdevice_many+0x20/0x20 [ 653.321674][T11675] ? kernfs_remove_by_name_ns+0x117/0x150 [ 653.327506][T11675] ? __lock_acquire+0x7c80/0x7c80 [ 653.332553][T11675] unregister_netdevice_queue+0x324/0x360 [ 653.338305][T11675] ? list_netdevice+0x730/0x730 [ 653.343442][T11675] ? kernfs_remove_by_name_ns+0x117/0x150 [ 653.349189][T11675] _cfg80211_unregister_wdev+0x16b/0x580 [ 653.354862][T11675] ieee80211_remove_interfaces+0x496/0x680 [ 653.360705][T11675] ? ieee80211_do_stop+0x1db0/0x1db0 [ 653.366014][T11675] ? rcu_is_watching+0x15/0xb0 [ 653.370813][T11675] ieee80211_unregister_hw+0x5d/0x2a0 [ 653.376221][T11675] mac80211_hwsim_del_radio+0x274/0x450 [ 653.381790][T11675] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 653.387365][T11675] hwsim_exit_net+0x585/0x640 [ 653.392062][T11675] ? hwsim_init_net+0x90/0x90 [ 653.396761][T11675] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 653.402594][T11675] cleanup_net+0x6f4/0xb90 [ 653.407040][T11675] ? ops_free_list+0x3b0/0x3b0 [ 653.411832][T11675] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.417064][T11675] ? process_scheduled_works+0x957/0x15b0 [ 653.422800][T11675] ? process_scheduled_works+0x957/0x15b0 [ 653.428536][T11675] process_scheduled_works+0xa45/0x15b0 [ 653.434134][T11675] ? assign_work+0x400/0x400 [ 653.438748][T11675] ? assign_work+0x39e/0x400 [ 653.443375][T11675] worker_thread+0xa55/0xfc0 [ 653.448004][T11675] kthread+0x2fa/0x390 [ 653.452086][T11675] ? pr_cont_work+0x560/0x560 [ 653.456778][T11675] ? kthread_blkcg+0xd0/0xd0 [ 653.461378][T11675] ret_from_fork+0x48/0x80 [ 653.465809][T11675] ? kthread_blkcg+0xd0/0xd0 [ 653.470413][T11675] ret_from_fork_asm+0x11/0x20 [ 653.475208][T11675] [ 653.478588][T11675] Kernel Offset: disabled [ 653.483057][T11675] Rebooting in 86400 seconds..