last executing test programs: 11.176420145s ago: executing program 1 (id=1036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20) 8.674955869s ago: executing program 1 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) 8.674514739s ago: executing program 3 (id=1041): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f0000000180)={0xe, &(0x7f0000000080)=[{0x6, '\x00', @buffer={"1ca8f0bc35ceb9168467eba7d4c8f16a3e07e62e8ce28e5480b06bd7d6b51e79", 0x20}, 0x6}, {0x17, '\x00', @st={0x4, [{0x2, @svalue=0xfffffffffffffffb}, {0x2, @uvalue=0x800}, {0x2, @svalue=0xfffffffffffffffb}, {0x2, @uvalue=0x6}]}, 0x2}]}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000640)=""/249, 0xf9}, 0x10000) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r7 = msgget$private(0x0, 0x6c2) msgsnd(r7, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r2], 0x2000, 0x0) 7.24590785s ago: executing program 1 (id=1043): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 6.784119683s ago: executing program 3 (id=1047): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000940)='A\xf9\xaf\xc2\xea\xe2\xc0\xe1\x8f.<#pk\x87\xf4s\xe5\xe5\x00\x00\x00\x00\'\x02\x82\x86\x17\xd6\x8ck\x9cx\xbe\v[\xc6\xcc\xd4B', &(0x7f0000000ac0)='%*.\x01\xdf\x16ec\r\x04\x00\x89\xc3\x1f\xfe\xb3?1\bO\xb5\xea~8\xac\xfb\x8e\xd5\x83x\xfe\xc2N\x0f\xc6\xc3\x80R\xab\xe3\xc2(nk\xaa\x81\xd7v\x84\x97paz\x1d\x15\xa6\x8cE\x00&\x15\xf7C\xc0\xb3\xd5e\x961\tM\x96d\xd7\xcb\x12\t\xfbD\xae\xf6}\xa2X6\x195-B\xe56f\xa3\x19\xa1\x14\xa5\x1d\xd9AV\xc0\xa2\xd8\xd1\xe6[v;mL\xf0\xa4\x94\x81\xd6\x8d\xb8\x99\xbb#\xb9\vtN\xca\xab\xda=\xf6\x93\xbbq\ah 8\xa7Or\x00@\x1e\'WoVF\xc5\xdc/)r\x8c\xa99\xa6\xc7\'sKZ\xc6\xc3\xber\xe0G2m\x13W\xf4g\xbfK\xd5\xb6\xf4|Iy\xc4\xfdu\xf8\'e\x01\xd6\xdc\x1b\x1a\xdc\xb0\x87\rW\xaf\na\x8d\xec\xac\\N\xf4\xd5\xe5\xa7\xb8=\x84\xe2\xfa\xc7k\x15\xd5u\xa2E\xe5\x9a\x89M\xb3\xff2f\xd1\xfbK^:\xd2`\x8bk\xb5pw0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.84221861s ago: executing program 2 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec08894194"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x22) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x49e8648f) write$FUSE_ENTRY(r2, &(0x7f0000000440)={0x90, 0x0, r4, {0x0, 0x0, 0xffffffffffffffff, 0x2, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}}}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 5.792565833s ago: executing program 3 (id=1050): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x84, 0x6, @random="fbb6e9de22c1"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 5.592779442s ago: executing program 1 (id=1051): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350073797a5f74756e000000000077eef46608000a00", @ANYRES32=r1], 0x3c}}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 5.588605003s ago: executing program 2 (id=1052): mkdirat(0xffffffffffffff9c, 0x0, 0x110) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x200002, 0x200003, 0xff, 0x100, 0x4000024}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x10000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x43, 0x0, 0x0) 4.896374157s ago: executing program 3 (id=1053): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.773663053s ago: executing program 0 (id=1054): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.747607944s ago: executing program 2 (id=1055): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) 4.593119662s ago: executing program 3 (id=1056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 4.359997134s ago: executing program 1 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30, 0x84}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x3f0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 4.359876274s ago: executing program 2 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) 4.358300314s ago: executing program 0 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000080)=0x1, 0xff79) 3.270163638s ago: executing program 0 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_socket_connect_nvme_tcp() r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x100000001) waitid$P_PIDFD(0x3, r4, 0x0, 0x8, 0x0) 3.149774954s ago: executing program 2 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.960214043s ago: executing program 1 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013"], 0x0, 0x35, 0x0, 0x1}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.067609127s ago: executing program 0 (id=1062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @broadcast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 923.017035ms ago: executing program 3 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) 909.291885ms ago: executing program 2 (id=1064): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="ae46bc2fa9cb201922fe82a5c7562897", 0x10) 0s ago: executing program 0 (id=1066): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 81.075608][ T5757] cgroup: Unknown subsys name 'net' [ 81.213912][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.889775][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.468101][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.488967][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.498372][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.506806][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.515041][ T5770] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.522489][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.556936][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.574921][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.595048][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.614979][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.623520][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.639643][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.648000][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.655061][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.661655][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.664627][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.671190][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.684078][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.691527][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.692933][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.709024][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.718081][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.726484][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.733932][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.162139][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 85.221952][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 85.351696][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 85.373078][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.381103][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.388750][ T5768] bridge_slave_0: entered allmulticast mode [ 85.396276][ T5768] bridge_slave_0: entered promiscuous mode [ 85.410366][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.417638][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.424863][ T5768] bridge_slave_1: entered allmulticast mode [ 85.432100][ T5768] bridge_slave_1: entered promiscuous mode [ 85.457098][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 85.526814][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.539513][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.567499][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.574820][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.582071][ T5772] bridge_slave_0: entered allmulticast mode [ 85.589597][ T5772] bridge_slave_0: entered promiscuous mode [ 85.631085][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.638468][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.645959][ T5772] bridge_slave_1: entered allmulticast mode [ 85.653372][ T5772] bridge_slave_1: entered promiscuous mode [ 85.703556][ T5768] team0: Port device team_slave_0 added [ 85.762173][ T5768] team0: Port device team_slave_1 added [ 85.781763][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.793699][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.803152][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.811225][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.818629][ T5771] bridge_slave_0: entered allmulticast mode [ 85.826248][ T5771] bridge_slave_0: entered promiscuous mode [ 85.843655][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.851025][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.858623][ T5773] bridge_slave_0: entered allmulticast mode [ 85.866062][ T5773] bridge_slave_0: entered promiscuous mode [ 85.883864][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.891114][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.898851][ T5771] bridge_slave_1: entered allmulticast mode [ 85.906331][ T5771] bridge_slave_1: entered promiscuous mode [ 85.923598][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.930926][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.938919][ T5773] bridge_slave_1: entered allmulticast mode [ 85.946715][ T5773] bridge_slave_1: entered promiscuous mode [ 85.986196][ T5772] team0: Port device team_slave_0 added [ 86.005769][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.012765][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.038956][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.052883][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.060220][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.086482][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.111646][ T5772] team0: Port device team_slave_1 added [ 86.143056][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.157372][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.178722][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.200246][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.207394][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.233999][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.258228][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.279918][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.287850][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.314406][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.340940][ T5773] team0: Port device team_slave_0 added [ 86.392385][ T5773] team0: Port device team_slave_1 added [ 86.425248][ T5768] hsr_slave_0: entered promiscuous mode [ 86.432044][ T5768] hsr_slave_1: entered promiscuous mode [ 86.467911][ T5772] hsr_slave_0: entered promiscuous mode [ 86.475231][ T5772] hsr_slave_1: entered promiscuous mode [ 86.481434][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.489923][ T5772] Cannot create hsr debugfs directory [ 86.499706][ T5771] team0: Port device team_slave_0 added [ 86.519157][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.526251][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.552311][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.565567][ T51] Bluetooth: hci0: command tx timeout [ 86.582397][ T5771] team0: Port device team_slave_1 added [ 86.611004][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.618284][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.644678][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.714535][ T51] Bluetooth: hci3: command tx timeout [ 86.750496][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.760534][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.786803][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.797702][ T51] Bluetooth: hci2: command tx timeout [ 86.803384][ T51] Bluetooth: hci1: command tx timeout [ 86.845396][ T5773] hsr_slave_0: entered promiscuous mode [ 86.851792][ T5773] hsr_slave_1: entered promiscuous mode [ 86.858481][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.866144][ T5773] Cannot create hsr debugfs directory [ 86.872359][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.881888][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.912846][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.179692][ T5771] hsr_slave_0: entered promiscuous mode [ 87.188033][ T5771] hsr_slave_1: entered promiscuous mode [ 87.200088][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.209063][ T5771] Cannot create hsr debugfs directory [ 87.387705][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.461737][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.483144][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.519266][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.581048][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.627259][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.639099][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.666127][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.788372][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.809337][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.821652][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.848588][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.933841][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.946991][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.958047][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.969580][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.003329][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.057329][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.083830][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.099168][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.106575][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.142280][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.149481][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.189568][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.217648][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.224895][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.264140][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.271349][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.308080][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.341186][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.407396][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.442206][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.449449][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.462278][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.481139][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.488422][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.532175][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.539402][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.558768][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.566027][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.634913][ T51] Bluetooth: hci0: command tx timeout [ 88.797251][ T51] Bluetooth: hci3: command tx timeout [ 88.874868][ T51] Bluetooth: hci1: command tx timeout [ 88.875912][ T5778] Bluetooth: hci2: command tx timeout [ 88.940458][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.063515][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.129403][ T5768] veth0_vlan: entered promiscuous mode [ 89.210291][ T5768] veth1_vlan: entered promiscuous mode [ 89.242373][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.259997][ T5772] veth0_vlan: entered promiscuous mode [ 89.301616][ T5772] veth1_vlan: entered promiscuous mode [ 89.349734][ T5768] veth0_macvtap: entered promiscuous mode [ 89.364105][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.379202][ T5768] veth1_macvtap: entered promiscuous mode [ 89.459698][ T5773] veth0_vlan: entered promiscuous mode [ 89.469648][ T5772] veth0_macvtap: entered promiscuous mode [ 89.481926][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.496590][ T5771] veth0_vlan: entered promiscuous mode [ 89.513493][ T5772] veth1_macvtap: entered promiscuous mode [ 89.526926][ T5773] veth1_vlan: entered promiscuous mode [ 89.543100][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.569456][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.580103][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.589270][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.598640][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.630765][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.642029][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.653925][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.676174][ T5773] veth0_macvtap: entered promiscuous mode [ 89.683718][ T5771] veth1_vlan: entered promiscuous mode [ 89.725169][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.738575][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.751027][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.763685][ T5773] veth1_macvtap: entered promiscuous mode [ 89.777406][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.786959][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.795866][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.805388][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.849249][ T5771] veth0_macvtap: entered promiscuous mode [ 89.880061][ T5771] veth1_macvtap: entered promiscuous mode [ 89.894176][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.905782][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.916519][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.927248][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.939597][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.951169][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.962042][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.972253][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.983012][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.994877][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.062011][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.071087][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.083457][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.092537][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.125466][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.133512][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.154333][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.165866][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.176939][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.188581][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.199680][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.210218][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.221435][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.230023][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.255267][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.276796][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.291572][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.302948][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.313535][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.325469][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.336106][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.347550][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.372831][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.381926][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.402306][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.413371][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.424638][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.433369][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.497680][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.519982][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.553753][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.575844][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.666576][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.692813][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.715481][ T5778] Bluetooth: hci0: command tx timeout [ 90.796183][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.804046][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.874915][ T5778] Bluetooth: hci3: command tx timeout [ 90.925518][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.955961][ T5778] Bluetooth: hci2: command tx timeout [ 90.961436][ T5778] Bluetooth: hci1: command tx timeout [ 90.994577][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.303700][ T788] cfg80211: failed to load regulatory.db [ 92.446212][ T5854] syz.2.7[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.560948][ T5854] loop2: detected capacity change from 0 to 2048 [ 92.652088][ T5854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.794349][ T51] Bluetooth: hci0: command tx timeout [ 92.954445][ T51] Bluetooth: hci3: command tx timeout [ 93.125771][ T5778] Bluetooth: hci2: command tx timeout [ 93.131435][ T51] Bluetooth: hci1: command tx timeout [ 93.849333][ T5868] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 93.984490][ T5868] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 94.014593][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.210949][ T788] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 94.236115][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.263011][ T788] usb 2-1: Product: syz [ 94.267887][ T788] usb 2-1: Manufacturer: syz [ 94.272528][ T788] usb 2-1: SerialNumber: syz [ 95.378622][ T788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 95.409712][ T788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 95.453886][ T788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 95.481780][ T788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 95.504614][ T788] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 95.546355][ T788] lan78xx: probe of 2-1:1.0 failed with error -71 [ 95.591372][ T788] usb 2-1: USB disconnect, device number 2 [ 96.572808][ T5890] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.588260][ T5890] xt_TCPMSS: Only works on TCP SYN packets [ 98.249988][ T5897] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 99.824556][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.034370][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 100.042122][ T27] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 100.050839][ T27] usb 2-1: config 0 has no interface number 0 [ 100.061310][ T27] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 100.076501][ T27] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 100.104530][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.112698][ T27] usb 2-1: Product: syz [ 100.119714][ T27] usb 2-1: Manufacturer: syz [ 100.124935][ T27] usb 2-1: SerialNumber: syz [ 100.132350][ T27] usb 2-1: config 0 descriptor?? [ 100.139971][ T5917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.369374][ T5917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.439707][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.448802][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.202684][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.260972][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.651828][ T27] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 102.677205][ T27] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 102.703464][ T27] asix: probe of 2-1:0.188 failed with error -71 [ 102.727874][ T27] usb 2-1: USB disconnect, device number 3 [ 102.825220][ T5924] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.834370][ T5924] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.844943][ T5924] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.853920][ T5924] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.025067][ T5924] syz.3.26 (5924) used greatest stack depth: 19944 bytes left [ 104.200402][ T5933] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.434525][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 104.448412][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.459892][ T5933] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 33, using maximum allowed: 30 [ 104.471368][ T5933] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 104.487044][ T5933] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.496174][ T5933] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 104.534972][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.569557][ T5933] usb 4-1: config 0 descriptor?? [ 104.856622][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.864789][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.973309][ T5943] loop3: detected capacity change from 0 to 8192 [ 105.189842][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.262625][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.294031][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.409445][ T5926] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 105.425676][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.447411][ T5926] usb 3-1: Product: syz [ 105.460701][ T5926] usb 3-1: Manufacturer: syz [ 105.471449][ T5926] usb 3-1: SerialNumber: syz [ 105.510415][ T5939] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.520777][ T5939] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.530019][ T5939] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.539960][ T5939] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.725120][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 105.749144][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 105.771973][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 105.786080][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 105.796716][ T5926] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 105.811450][ T5954] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 105.826061][ T5926] lan78xx: probe of 3-1:1.0 failed with error -71 [ 105.833774][ T5954] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.855274][ T5926] usb 3-1: USB disconnect, device number 2 [ 106.019855][ T5975] tipc: Started in network mode [ 106.032741][ T5975] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.044196][ T5975] tipc: Enabled bearer , priority 10 [ 106.106903][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.232257][ T5981] tipc: Enabled bearer , priority 0 [ 106.348859][ T5970] usb 4-1: USB disconnect, device number 2 [ 107.543814][ T5962] tipc: Node number set to 2886997162 [ 110.473660][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.481513][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.337479][ T6029] xt_TCPMSS: Only works on TCP SYN packets [ 112.310559][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.455859][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.490085][ T6015] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.500690][ T6015] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.510915][ T6015] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.520204][ T6015] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.692074][ T6054] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 117.324527][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 117.516661][ T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.524834][ T9] usb 2-1: config 0 has no interface number 0 [ 117.530974][ T9] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 117.542098][ T9] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 117.553401][ T9] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 117.564600][ T9] usb 2-1: config 0 interface 2 has no altsetting 0 [ 117.574681][ T9] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 117.583787][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.606936][ T9] usb 2-1: Product: syz [ 117.611169][ T9] usb 2-1: Manufacturer: syz [ 117.624746][ T9] usb 2-1: SerialNumber: syz [ 117.652182][ T9] usb 2-1: config 0 descriptor?? [ 117.664494][ T6070] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.671837][ T6070] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.939170][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 118.063319][ T9] usb 2-1: USB disconnect, device number 4 [ 118.944709][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.786869][ T28] audit: type=1326 audit(1774630869.430:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 119.848702][ T28] audit: type=1326 audit(1774630869.430:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 119.853009][ T6102] loop3: detected capacity change from 0 to 2048 [ 119.902229][ T28] audit: type=1326 audit(1774630869.430:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 120.023945][ T28] audit: type=1326 audit(1774630869.430:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 120.072923][ T28] audit: type=1326 audit(1774630869.430:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 120.114026][ T6102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 120.124482][ T28] audit: type=1326 audit(1774630869.430:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 120.179470][ T28] audit: type=1326 audit(1774630869.430:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 120.254453][ T28] audit: type=1326 audit(1774630869.430:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 120.325973][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 120.344564][ T28] audit: type=1326 audit(1774630869.430:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f50d9f9c502 code=0x7ffc0000 [ 120.398907][ T28] audit: type=1326 audit(1774630869.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f50d9f5cfce code=0x7ffc0000 [ 121.280094][ T6115] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 123.096452][ T6130] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 123.133321][ T6129] syzkaller0: entered promiscuous mode [ 123.164382][ T6129] syzkaller0: entered allmulticast mode [ 128.884991][ T6198] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 128.939905][ T6198] loop2: detected capacity change from 0 to 512 [ 128.960436][ T6201] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 129.006522][ T6201] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 129.074149][ T6198] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 129.133721][ T6198] EXT4-fs (loop2): 1 truncate cleaned up [ 129.158263][ T6198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.186918][ T6208] loop1: detected capacity change from 0 to 4096 [ 129.194925][ T6208] EXT4-fs: inline encryption not supported [ 129.201333][ T6208] EXT4-fs: Ignoring removed i_version option [ 129.207446][ T6208] EXT4-fs: Ignoring removed oldalloc option [ 129.225038][ T6208] EXT4-fs (loop1): Test dummy encryption mode enabled [ 129.266520][ T6208] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 129.276225][ T6198] ext4: Unknown parameter 'ì¥YðÌÚ„yµ²Fm¤ïŠ©«±ZÉ1Ø(O[½Å [ 129.276225][ T6198] ^¥Æ+EïóªØ]0rQ#Íó{ØÌŽÎcÄpç6;æ°:ªPŸrïfè˜l¿íÐIG>Žá¦?Ï…-H"’&Fþ)ð!Iˆ|.z' [ 129.285007][ T6208] System zones: 0-5 [ 129.318459][ T6208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.760518][ T5967] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 130.360461][ T5967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 130.368922][ T5967] usb 3-1: not running at top speed; connect to a high speed hub [ 130.378471][ T5967] usb 3-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 130.395208][ T5967] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 130.416303][ T5967] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.429670][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.439063][ T5967] usb 3-1: Product: syz [ 130.443342][ T5967] usb 3-1: Manufacturer: syz [ 130.454454][ T5967] usb 3-1: SerialNumber: syz [ 130.551637][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.700282][ T5967] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 130.709856][ T5967] usb 3-1: unit 5 not found! [ 130.745702][ T5967] usb 3-1: USB disconnect, device number 3 [ 130.884510][ T5970] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 131.104175][ T5970] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 131.125942][ T6206] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 131.333504][ T5970] usb 4-1: config 0 has no interface number 0 [ 131.492053][ T5970] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 131.503875][ T6206] EXT4-fs (loop2): Remounting filesystem read-only [ 131.544027][ T5970] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 131.570337][ T5970] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 131.590705][ T5970] usb 4-1: config 0 interface 2 has no altsetting 0 [ 131.601412][ T5970] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 131.618855][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.627369][ T5970] usb 4-1: Product: syz [ 131.631568][ T5970] usb 4-1: Manufacturer: syz [ 131.692380][ T6223] xt_TCPMSS: Only works on TCP SYN packets [ 132.139650][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.423128][ T5970] usb 4-1: SerialNumber: syz [ 132.440337][ T5970] usb 4-1: config 0 descriptor?? [ 132.446467][ T6217] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.453775][ T6217] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 133.898975][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.916670][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.994234][ C0] sched: RT throttling activated [ 134.007051][ T5970] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 134.219348][ T5970] usb 4-1: USB disconnect, device number 3 [ 134.284576][ T5967] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.522276][ T5967] usb 3-1: Using ep0 maxpacket: 32 [ 135.318952][ T5967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.370063][ T5967] usb 3-1: too many endpoints for config 0 interface 0 altsetting 9: 33, using maximum allowed: 30 [ 135.392536][ T5967] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 135.416202][ T5967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 135.423157][ T5967] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 135.433339][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.467275][ T5967] usb 3-1: config 0 descriptor?? [ 135.747018][ T6250] loop3: detected capacity change from 0 to 1024 [ 135.756090][ T6250] ======================================================= [ 135.756090][ T6250] WARNING: The mand mount option has been deprecated and [ 135.756090][ T6250] and is ignored by this kernel. Remove the mand [ 135.756090][ T6250] option from the mount to silence this warning. [ 135.756090][ T6250] ======================================================= [ 135.791693][ T6250] EXT4-fs: inline encryption not supported [ 135.888840][ T6250] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.194008][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.995070][ T9] usb 3-1: USB disconnect, device number 4 [ 138.051198][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.285690][ T6262] netlink: 'syz.2.111': attribute type 21 has an invalid length. [ 138.370219][ T6267] syzkaller0: entered promiscuous mode [ 138.377368][ T6267] syzkaller0: entered allmulticast mode [ 139.824632][ T6285] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.022325][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 141.158217][ T6302] netlink: 63 bytes leftover after parsing attributes in process `syz.2.123'. [ 142.884321][ T5970] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.064401][ T5970] usb 2-1: Using ep0 maxpacket: 32 [ 143.082100][ T5970] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.097163][ T5970] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.107526][ T5970] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.124173][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.146686][ T5970] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.159730][ T5970] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.189608][ T5970] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.211072][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.234492][ T5970] usb 2-1: config 0 descriptor?? [ 143.427263][ T6335] syzkaller0: entered promiscuous mode [ 143.432891][ T6335] syzkaller0: entered allmulticast mode [ 143.463272][ T5970] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 143.816860][ T6350] x_tables: duplicate entry at hook 3 [ 143.838635][ T6350] netlink: 'syz.2.136': attribute type 16 has an invalid length. [ 143.859365][ T6350] netlink: 'syz.2.136': attribute type 17 has an invalid length. [ 144.395063][ T5970] usb 2-1: USB disconnect, device number 5 [ 144.619441][ T5970] usblp0: removed [ 145.081289][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.097838][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.149636][ T5970] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.473204][ T6350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.524855][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 145.588310][ T5970] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.706509][ T5970] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.747758][ T5970] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 145.796617][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.852561][ T5970] usb 2-1: config 0 descriptor?? [ 145.948679][ T6368] netlink: 'syz.0.143': attribute type 10 has an invalid length. [ 145.974433][ T6368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.143'. [ 145.996029][ T6368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.014332][ T6368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.036295][ T6368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.054441][ T6368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.135605][ T6368] team0: Port device geneve0 added [ 146.145733][ T6369] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 146.455232][ T6377] tipc: Enabling of bearer rejected, failed to enable media [ 146.514643][ T787] usb 2-1: USB disconnect, device number 6 [ 147.379855][ T6388] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 147.429281][ T6388] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 147.478640][ T6388] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 147.722110][ T6393] syzkaller0: entered promiscuous mode [ 147.736219][ T6393] syzkaller0: entered allmulticast mode [ 148.367885][ T6400] loop3: detected capacity change from 0 to 2048 [ 148.377589][ T6400] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 148.388657][ T6400] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 148.406745][ T6400] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 148.427954][ T6400] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.514610][ T6402] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 148.757163][ T6402] bond1: entered promiscuous mode [ 148.781252][ T6402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.880489][ T6403] macvtap1: entered allmulticast mode [ 148.930043][ T6405] bond1: (slave bridge1): making interface the new active one [ 149.125594][ T6405] bridge1: entered promiscuous mode [ 149.145577][ T6405] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 149.287544][ T6411] process 'syz.1.155' launched './file1' with NULL argv: empty string added [ 149.846345][ T6413] loop3: detected capacity change from 0 to 16 [ 149.938594][ T6413] erofs: (device loop3): mounted with root inode @ nid 36. [ 150.079863][ T6413] sch_fq: defrate 0 ignored. [ 154.680979][ T6451] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 154.779273][ T6451] bond2: entered promiscuous mode [ 154.785056][ T6451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.800309][ T6455] macvtap1: entered allmulticast mode [ 155.717923][ T6451] bond2: (slave bridge1): making interface the new active one [ 155.758923][ T6451] bridge1: entered promiscuous mode [ 155.787729][ T6451] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 156.034710][ T6461] syzkaller0: entered promiscuous mode [ 156.040252][ T6461] syzkaller0: entered allmulticast mode [ 157.144111][ T5811] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 158.308039][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 158.344309][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.776180][ T5811] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 158.805181][ T5811] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.816326][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.828524][ T5811] usb 4-1: config 0 descriptor?? [ 159.381811][ T5948] usb 4-1: USB disconnect, device number 4 [ 159.447750][ T6508] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 159.455770][ T6508] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 159.496576][ T6505] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 159.505941][ T6505] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 159.518997][ T6505] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 159.527518][ T6505] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 159.542552][ T6505] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 159.557405][ T6505] kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 159.566182][ T6505] kvm: requested 119009 ns i8254 timer period limited to 200000 ns [ 159.575050][ T6505] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 159.585335][ T6505] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 159.815213][ T6514] x_tables: duplicate entry at hook 3 [ 159.832803][ T6514] netlink: 'syz.1.184': attribute type 16 has an invalid length. [ 159.851115][ T6516] loop2: detected capacity change from 0 to 512 [ 159.868690][ T6514] netlink: 'syz.1.184': attribute type 17 has an invalid length. [ 159.887213][ T6516] __quota_error: 21 callbacks suppressed [ 159.887226][ T6516] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 159.918919][ T6516] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.941600][ T6516] EXT4-fs (loop2): mount failed [ 160.414625][ T6526] loop2: detected capacity change from 0 to 2048 [ 160.426951][ T6526] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 160.438417][ T6526] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 160.473194][ T6526] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 160.525828][ T6526] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.213740][ T6514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.249083][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.187'. [ 161.349206][ T6533] netlink: 'syz.2.190': attribute type 9 has an invalid length. [ 161.611489][ T6542] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 163.439538][ T5931] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.774338][ T787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.788879][ T6566] syzkaller0: entered promiscuous mode [ 163.794687][ T6566] syzkaller0: entered allmulticast mode [ 163.814328][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 163.826533][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.838864][ T5931] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.848513][ T5931] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.857810][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.869292][ T5931] usb 3-1: config 0 descriptor?? [ 164.046574][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.057926][ T787] usb 2-1: config 0 has no interfaces? [ 164.066884][ T787] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 164.076099][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.084168][ T787] usb 2-1: Product: syz [ 164.092883][ T787] usb 2-1: Manufacturer: syz [ 164.097766][ T787] usb 2-1: SerialNumber: syz [ 164.105714][ T787] usb 2-1: config 0 descriptor?? [ 164.401155][ T6563] loop1: detected capacity change from 0 to 512 [ 164.733545][ T6563] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 165.026113][ T6563] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.098948][ T6563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 165.134362][ T6563] System zones: 1-12 [ 165.159601][ T6563] EXT4-fs (loop1): 1 truncate cleaned up [ 165.183486][ T6563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.228519][ T5811] usb 2-1: USB disconnect, device number 7 [ 165.323566][ T787] usb 3-1: USB disconnect, device number 5 [ 165.486831][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 165.789446][ T6587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.142529][ T6590] bond2: entered promiscuous mode [ 166.157368][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.174883][ T6590] bond2: entered allmulticast mode [ 166.248937][ T6590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.277657][ T6590] team0: Port device bond2 added [ 166.510289][ T6587] vxcan3: entered promiscuous mode [ 166.689341][ T6587] bond2: (slave vxcan3): refused to change device type [ 168.002837][ T6606] netlink: 'syz.0.212': attribute type 5 has an invalid length. [ 168.424692][ T6612] syzkaller0: entered promiscuous mode [ 168.430238][ T6612] syzkaller0: entered allmulticast mode [ 170.335670][ T6633] loop2: detected capacity change from 0 to 2048 [ 170.383926][ T6633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.010043][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.222726][ T6679] x_tables: duplicate entry at hook 3 [ 174.232036][ T6679] netlink: 'syz.3.232': attribute type 16 has an invalid length. [ 174.253938][ T6679] netlink: 'syz.3.232': attribute type 17 has an invalid length. [ 174.579277][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.767163][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.656371][ T6679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.067310][ T6698] binder_alloc: 6696: binder_alloc_buf, no vma [ 177.107489][ T6699] loop1: detected capacity change from 0 to 1024 [ 177.130785][ T6699] EXT4-fs: Ignoring removed orlov option [ 177.384383][ T5838] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 177.456708][ T6699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.656359][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 177.689484][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.904663][ T5838] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.914508][ T5838] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 177.924131][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.944361][ T5838] usb 3-1: config 0 descriptor?? [ 179.071349][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.859879][ T5838] usb 3-1: USB disconnect, device number 6 [ 180.105505][ T6738] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 180.218137][ T6738] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.278377][ T6740] bond3: entered allmulticast mode [ 180.375858][ T6741] bond3: (slave ip6gretap1): making interface the new active one [ 180.435713][ T6741] ip6gretap1: entered allmulticast mode [ 180.471793][ T6741] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 183.348968][ T6776] netlink: 'syz.2.255': attribute type 1 has an invalid length. [ 183.433116][ T6776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.466532][ T6780] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 183.491357][ T6779] syzkaller0: entered promiscuous mode [ 183.504719][ T6779] syzkaller0: entered allmulticast mode [ 184.244391][ T5838] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.437376][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 184.445265][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.461143][ T5838] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.470601][ T5838] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 184.484129][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.496056][ T5838] usb 3-1: config 0 descriptor?? [ 184.946764][ T5931] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 185.831713][ T6803] loop1: detected capacity change from 0 to 2048 [ 185.886325][ T5838] usb 3-1: USB disconnect, device number 7 [ 186.018023][ T6803] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.907019][ T28] audit: type=1804 audit(1774630936.560:33): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.262" name="/newroot/58/file0/file1" dev="loop1" ino=1367 res=1 errno=0 [ 188.172701][ T51] Bluetooth: Wrong link type (-57) [ 191.307509][ T6844] loop2: detected capacity change from 0 to 128 [ 191.327463][ T6844] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 192.241314][ T6854] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 193.447199][ T6867] netlink: 72 bytes leftover after parsing attributes in process `syz.2.279'. [ 194.511510][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.521725][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.643155][ T5931] IPVS: starting estimator thread 0... [ 194.736379][ T6877] IPVS: using max 18 ests per chain, 43200 per kthread [ 195.027419][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 195.877115][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.902232][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.933085][ T5838] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 195.949022][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.961716][ T5838] usb 4-1: config 0 descriptor?? [ 196.052207][ T6903] netlink: 'syz.0.289': attribute type 10 has an invalid length. [ 196.075214][ T6903] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 196.459159][ T5838] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 196.488810][ T5838] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 196.586393][ T5838] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 196.599606][ T5838] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 196.627743][ T5838] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 196.652892][ T5838] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 196.752124][ T5838] usb 4-1: USB disconnect, device number 5 [ 196.800645][ T5838] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 196.865341][ T6912] fido_id[6912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 197.138988][ T6916] Zero length message leads to an empty skb [ 197.166149][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 202.570502][ T6976] kvm: pic: non byte write [ 202.575812][ T6976] kvm: pic: non byte write [ 204.553277][ T51] Bluetooth: hci0: command tx timeout [ 205.214396][ T5838] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 205.481607][ T5838] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 205.505649][ T5838] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 205.730643][ T5838] usb 3-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 205.748778][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.770186][ T5838] usb 3-1: Product: syz [ 205.779770][ T5838] usb 3-1: Manufacturer: syz [ 205.787194][ T5838] usb 3-1: SerialNumber: syz [ 205.911048][ T7004] smc: net device bond0 applied user defined pnetid SYZ2 [ 205.921837][ T7004] netlink: 14 bytes leftover after parsing attributes in process `syz.3.317'. [ 206.023993][ T5838] usb 3-1: USB disconnect, device number 8 [ 206.128612][ T7004] smc: removing net device bond0 with user defined pnetid SYZ2 [ 206.138787][ T7004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.149897][ T7004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.160905][ T7004] bond0 (unregistering): Released all slaves [ 206.954413][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 208.513538][ T7028] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.603644][ T7029] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 209.092748][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.327'. [ 209.129243][ T7037] netlink: 'syz.1.328': attribute type 4 has an invalid length. [ 210.444606][ T5970] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 210.650635][ T5970] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.672904][ T7043] syz.2.330 (7043): drop_caches: 2 [ 210.678071][ T5970] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 210.709746][ T5970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.730810][ T7060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.754573][ T5970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 210.787687][ T5970] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 210.820751][ T5970] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.839109][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.857810][ T5970] usb 2-1: Product: syz [ 210.867396][ T5970] usb 2-1: Manufacturer: syz [ 210.887178][ T5970] cdc_wdm 2-1:1.0: skipping garbage [ 210.895674][ T5970] cdc_wdm 2-1:1.0: skipping garbage [ 210.916687][ T5970] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 210.922655][ T5970] cdc_wdm 2-1:1.0: Unknown control protocol [ 210.936583][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 211.016298][ T7065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'. [ 211.077568][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 211.179333][ T5970] usb 2-1: USB disconnect, device number 9 [ 211.854474][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 211.860871][ T5770] Bluetooth: hci1: command 0x0406 tx timeout [ 211.867215][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 212.831064][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 212.937522][ T7081] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.996243][ T7087] macvlan2: entered promiscuous mode [ 213.001682][ T7087] macvlan2: entered allmulticast mode [ 213.090007][ T7085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.345'. [ 213.976739][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.353'. [ 214.654294][ T28] audit: type=1326 audit(1774630964.300:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 214.707399][ T28] audit: type=1326 audit(1774630964.300:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 214.761916][ T28] audit: type=1326 audit(1774630964.300:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 214.789040][ T28] audit: type=1326 audit(1774630964.300:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 214.817880][ T28] audit: type=1326 audit(1774630964.300:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 214.863820][ T28] audit: type=1326 audit(1774630964.300:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 214.920844][ T28] audit: type=1326 audit(1774630964.300:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 214.990565][ T28] audit: type=1326 audit(1774630964.300:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 215.018504][ T28] audit: type=1326 audit(1774630964.300:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 215.075097][ T28] audit: type=1326 audit(1774630964.300:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd002f9c799 code=0x7ffc0000 [ 215.219589][ T7141] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 215.325846][ T7141] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.392210][ T7146] bond5: (slave geneve2): making interface the new active one [ 215.438219][ T7146] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 215.530741][ T7151] loop1: detected capacity change from 0 to 256 [ 215.567945][ T7151] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.611475][ T7151] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 215.653851][ T7151] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 216.529212][ T7178] UBIFS error (pid: 7178): cannot open "./file0", error -22 [ 217.669500][ T7189] syzkaller0: entered promiscuous mode [ 217.721582][ T7189] syzkaller0: entered allmulticast mode [ 219.152675][ T7208] libceph: resolve '96.' (ret=-3): failed [ 219.268405][ T7211] loop1: detected capacity change from 0 to 1024 [ 219.366901][ T7211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.808007][ T7221] bad cache= option: no%e [ 219.808007][ T7221] [ 219.814949][ T7221] CIFS: VFS: bad cache= option: no%e [ 220.579277][ T7228] netlink: zone id is out of range [ 220.596565][ T7228] netlink: zone id is out of range [ 220.607614][ T7228] netlink: zone id is out of range [ 220.620529][ T7228] netlink: zone id is out of range [ 220.642138][ T7228] netlink: zone id is out of range [ 220.661943][ T7228] netlink: zone id is out of range [ 220.801398][ T7228] netlink: zone id is out of range [ 220.806628][ T7228] netlink: zone id is out of range [ 220.847584][ T7228] netlink: zone id is out of range [ 220.872848][ T7228] netlink: zone id is out of range [ 222.514022][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 222.871890][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.887768][ T7264] syz.2.393 uses obsolete (PF_INET,SOCK_PACKET) [ 225.724871][ T7293] loop2: detected capacity change from 0 to 40427 [ 225.980462][ T7293] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 225.989909][ T7293] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 226.042863][ T7293] F2FS-fs (loop2): Image doesn't support compression [ 226.049689][ T7293] F2FS-fs (loop2): Image doesn't support compression [ 226.056668][ T7293] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x216 [ 226.475980][ T7293] F2FS-fs (loop2): invalid crc value [ 227.155843][ T7293] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 227.163628][ T7293] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 227.194131][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 229.376954][ T7318] tipc: Enabling of bearer rejected, failed to enable media [ 230.489479][ T7341] loop1: detected capacity change from 0 to 128 [ 230.544009][ T7341] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.570975][ T7341] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.589304][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.606350][ T7341] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.414: checksumming directory block 0 [ 230.629982][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.653375][ T7341] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.414: checksumming directory block 0 [ 230.674599][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.710328][ T7341] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.414: checksumming directory block 0 [ 230.736632][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.761226][ T7341] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.414: checksumming directory block 0 [ 230.777759][ T7347] netlink: 136 bytes leftover after parsing attributes in process `syz.3.417'. [ 230.784817][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.807001][ T7341] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.414: checksumming directory block 0 [ 230.821601][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.842105][ T7341] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.414: checksumming directory block 0 [ 230.855871][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.872446][ T7341] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.414: checksumming directory block 0 [ 230.886291][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.906203][ T7341] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.414: checksumming directory block 0 [ 230.922684][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.944448][ T7341] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.414: checksumming directory block 0 [ 230.963269][ T7341] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.414: No space for directory leaf checksum. Please run e2fsck -D. [ 230.988230][ T7341] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.414: Directory block failed checksum [ 231.070838][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.322732][ T7370] syz_tun: entered allmulticast mode [ 233.479918][ T7364] veth1_to_team: entered allmulticast mode [ 233.680880][ T7363] syz_tun: left allmulticast mode [ 234.049578][ T7381] loop1: detected capacity change from 0 to 256 [ 234.094333][ T7381] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.113840][ T7381] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 234.174169][ T7381] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 234.302672][ T7381] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 234.415074][ T7381] exFAT-fs (loop1): Filesystem has been set read-only [ 237.974416][ T5971] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 238.184265][ T5971] usb 2-1: Using ep0 maxpacket: 32 [ 238.196811][ T5971] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 238.209552][ T5971] usb 2-1: config 0 has no interface number 0 [ 238.230219][ T5971] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 238.249006][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.267531][ T5971] usb 2-1: Product: syz [ 238.271747][ T5971] usb 2-1: Manufacturer: syz [ 238.284242][ T5971] usb 2-1: SerialNumber: syz [ 238.300427][ T5971] usb 2-1: config 0 descriptor?? [ 238.324628][ T5971] smsc95xx v2.0.0 [ 238.809552][ T5971] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 238.829072][ T5971] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 239.466176][ T5971] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 239.514768][ T5971] smsc95xx: probe of 2-1:0.67 failed with error -32 [ 239.746066][ T7425] loop2: detected capacity change from 0 to 256 [ 241.054619][ T5971] usb 2-1: USB disconnect, device number 10 [ 241.905029][ T7442] fuse: Unknown parameter 'grou00000000000000000000' [ 242.811565][ T7457] netlink: 'syz.3.447': attribute type 11 has an invalid length. [ 243.484820][ T5931] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 243.694261][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 243.706260][ T5931] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 243.729182][ T5931] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 243.744266][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.775602][ T5931] usb 3-1: Product: syz [ 243.779832][ T5931] usb 3-1: Manufacturer: syz [ 243.804397][ T5931] usb 3-1: SerialNumber: syz [ 243.821575][ T5931] usb 3-1: config 0 descriptor?? [ 243.836404][ T7464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 243.865467][ T5931] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 244.200706][ T5931] usb 3-1: USB disconnect, device number 9 [ 247.406395][ T7517] loop2: detected capacity change from 0 to 1024 [ 247.890697][ T7515] hfsplus: found bad thread record in catalog [ 248.199642][ T4229] hfsplus: b-tree write err: -5, ino 25 [ 248.210736][ T4229] hfsplus: b-tree write err: -5, ino 4 [ 248.217103][ T4229] hfsplus: b-tree write err: -5, ino 2 [ 249.684426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 249.866042][ T7535] netlink: 'syz.2.467': attribute type 2 has an invalid length. [ 249.898480][ T7535] netlink: 'syz.2.467': attribute type 2 has an invalid length. [ 249.950359][ T5775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 249.960818][ T5775] CPU: 1 PID: 5775 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 249.968434][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.978507][ T5775] Workqueue: hci3 hci_rx_work [ 249.983222][ T5775] Call Trace: [ 249.986531][ T5775] [ 249.989487][ T5775] dump_stack_lvl+0x18c/0x250 [ 249.994181][ T5775] ? show_regs_print_info+0x20/0x20 [ 249.999506][ T5775] ? load_image+0x400/0x400 [ 250.004033][ T5775] sysfs_create_dir_ns+0x26e/0x2a0 [ 250.009154][ T5775] ? sysfs_warn_dup+0xa0/0xa0 [ 250.013859][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 250.019077][ T5775] kobject_add_internal+0x61c/0xcc0 [ 250.024301][ T5775] kobject_add+0x164/0x240 [ 250.028763][ T5775] ? __rwlock_init+0x150/0x150 [ 250.033542][ T5775] ? kobject_init+0x1e0/0x1e0 [ 250.038233][ T5775] ? _raw_spin_unlock+0x28/0x40 [ 250.043088][ T5775] ? get_device_parent+0x366/0x390 [ 250.048208][ T5775] device_add+0x408/0xc20 [ 250.052548][ T5775] hci_conn_add_sysfs+0xd5/0x1e0 [ 250.057495][ T5775] le_conn_complete_evt+0xf5d/0x1540 [ 250.062785][ T5775] ? hci_event_packet+0x4cb/0x1270 [ 250.067914][ T5775] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 250.074206][ T5775] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 250.079919][ T5775] ? skb_pull_data+0xfb/0x200 [ 250.084608][ T5775] hci_le_conn_complete_evt+0x187/0x440 [ 250.090165][ T5775] ? hci_remote_host_features_evt+0x150/0x150 [ 250.096239][ T5775] hci_event_packet+0x7ba/0x1270 [ 250.101191][ T5775] ? bis_list+0x290/0x290 [ 250.105527][ T5775] ? lockdep_hardirqs_on+0x98/0x150 [ 250.110735][ T5775] ? hci_send_to_monitor+0xd7/0x4f0 [ 250.115952][ T5775] hci_rx_work+0x43a/0xd60 [ 250.120394][ T5775] ? process_scheduled_works+0x96f/0x15d0 [ 250.126214][ T5775] process_scheduled_works+0xa5d/0x15d0 [ 250.131795][ T5775] ? worker_attach_to_pool+0x380/0x380 [ 250.137261][ T5775] ? assign_work+0x3d2/0x5d0 [ 250.141856][ T5775] worker_thread+0xa55/0xfc0 [ 250.146506][ T5775] kthread+0x2fa/0x390 [ 250.150576][ T5775] ? pr_cont_work+0x560/0x560 [ 250.155258][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 250.159859][ T5775] ret_from_fork+0x48/0x80 [ 250.164396][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 250.169003][ T5775] ret_from_fork_asm+0x11/0x20 [ 250.173782][ T5775] [ 250.179362][ T5775] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 250.193543][ T5775] Bluetooth: hci3: failed to register connection device [ 250.535687][ T7545] netlink: 'syz.2.473': attribute type 1 has an invalid length. [ 250.607291][ T7545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.687737][ T7552] macvlan3: entered promiscuous mode [ 250.764335][ T7552] macvlan3: entered allmulticast mode [ 250.796291][ T7552] bond5: entered promiscuous mode [ 250.832653][ T7552] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 250.876425][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 250.902142][ T7552] bond5: left promiscuous mode [ 251.008689][ T7545] bond5: (slave ip6gretap0): making interface the new active one [ 251.037119][ T7545] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 254.880075][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 255.849448][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.858619][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.836891][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 257.195324][ T7622] team0: Port device bridge0 added [ 258.168169][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 258.273596][ T7635] smc: adding net device bond0 with user defined pnetid SYZ2 [ 258.451337][ T7638] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 261.115452][ T7658] syzkaller0: entered promiscuous mode [ 261.134337][ T7658] syzkaller0: entered allmulticast mode [ 267.115759][ T7694] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 267.303220][ T7694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.241922][ T7700] macvlan3: entered promiscuous mode [ 268.526314][ T7700] macvlan3: entered allmulticast mode [ 268.605884][ T7700] bond6: entered promiscuous mode [ 268.645401][ T7700] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 268.679083][ T7700] bond6: left promiscuous mode [ 268.825497][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 268.874924][ T7704] bond6: (slave ip6gretap2): making interface the new active one [ 268.883595][ T7704] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 268.936522][ T7711] veth7: entered promiscuous mode [ 268.946372][ T7711] bond1: (slave veth7): Enslaving as an active interface with an up link [ 268.955747][ T7716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.520'. [ 268.976782][ T7716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.518814][ T7731] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 269.652079][ T7734] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.661799][ T7734] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.675097][ T7734] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.687602][ T7734] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.701239][ T7734] bond7: (slave geneve3): making interface the new active one [ 269.710757][ T7734] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 269.752469][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 269.779433][ T7737] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.864645][ T7734] syz.0.525 (7734) used greatest stack depth: 19920 bytes left [ 271.051451][ T7753] netlink: 'syz.3.531': attribute type 1 has an invalid length. [ 271.130142][ T7753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.152660][ T7757] macvlan2: entered promiscuous mode [ 271.188898][ T7757] macvlan2: entered allmulticast mode [ 271.316292][ T7757] bond2: entered promiscuous mode [ 271.321977][ T7757] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.453875][ T7757] bond2: left promiscuous mode [ 271.607853][ T7753] bond2: (slave ip6gretap1): making interface the new active one [ 271.638921][ T7753] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 274.467395][ T7789] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 274.482292][ T7789] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 274.591935][ T7789] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 276.923943][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 279.190357][ T7836] loop2: detected capacity change from 0 to 512 [ 279.230175][ T7840] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 279.318439][ T7840] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.433346][ T7840] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 279.489287][ T7687] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.297135][ T7859] loop2: detected capacity change from 0 to 32768 [ 282.337289][ T7859] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.557 (7859) [ 282.372009][ T7859] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 282.383042][ T7859] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 282.391959][ T7859] BTRFS info (device loop2): enabling disk space caching [ 282.399121][ T7859] BTRFS info (device loop2): force clearing of disk cache [ 282.406677][ T7859] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 282.416725][ T7859] BTRFS info (device loop2): use zstd compression, level 3 [ 282.423981][ T7859] BTRFS info (device loop2): disk space caching is enabled [ 282.496436][ T7859] BTRFS info (device loop2): enabling ssd optimizations [ 282.503603][ T7859] BTRFS info (device loop2): auto enabling async discard [ 282.519554][ T7859] BTRFS info (device loop2): rebuilding free space tree [ 282.575499][ T7859] BTRFS info (device loop2): disabling free space tree [ 282.583080][ T7859] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.593111][ T7859] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 283.581116][ T5771] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 283.641299][ T7884] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 283.721390][ T7854] loop1: detected capacity change from 0 to 40427 [ 283.762327][ T7854] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 283.770992][ T7854] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 283.794301][ T7884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.813192][ T7854] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 283.869638][ T7854] F2FS-fs (loop1): Found nat_bits in checkpoint [ 283.906523][ T7885] bond3: entered allmulticast mode [ 284.070024][ T7887] bond3: (slave ip6gretap2): making interface the new active one [ 284.090034][ T7854] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 284.102638][ T7854] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 284.114348][ T7887] ip6gretap2: entered allmulticast mode [ 284.135730][ T7887] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 285.506130][ T7906] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 285.551006][ T7906] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 285.581520][ T7906] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 287.486858][ T7933] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 291.827454][ T7964] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 291.869736][ T7964] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 295.804416][ T5971] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 295.820320][ T8012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.594'. [ 296.033212][ T5971] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.089136][ T5971] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 296.164084][ T5971] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.267114][ T5971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 296.466551][ T5971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 296.510584][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 296.531941][ T5971] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.557051][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.580522][ T5971] usb 3-1: Product: syz [ 296.591780][ T5971] usb 3-1: Manufacturer: syz [ 296.640839][ T5971] cdc_wdm 3-1:1.0: skipping garbage [ 296.664856][ T5971] cdc_wdm 3-1:1.0: skipping garbage [ 296.732465][ T5971] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 296.754842][ T5971] cdc_wdm 3-1:1.0: Unknown control protocol [ 296.806707][ T8021] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 296.898876][ T8021] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.017469][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.596'. [ 297.346010][ T5970] usb 3-1: USB disconnect, device number 10 [ 297.558786][ T8028] loop1: detected capacity change from 0 to 128 [ 297.586254][ T8028] FAT-fs (loop1): Unrecognized mount option "00000000000000000000" or missing value [ 297.684330][ T7687] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.795329][ C1] net_ratelimit: 23 callbacks suppressed [ 298.795350][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 298.812288][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 298.822138][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 298.831975][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 298.841903][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 298.853040][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 301.111017][ T8075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.609'. [ 305.798928][ T8129] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 308.579521][ T8147] loop1: detected capacity change from 0 to 164 [ 309.517452][ T8165] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.632'. [ 309.527421][ T8165] openvswitch: netlink: ct_state flags 00030000 unsupported [ 313.727832][ T8209] tipc: Started in network mode [ 313.732783][ T8209] tipc: Node identity 080211, cluster identity 4711 [ 313.785204][ T8209] tipc: Enabled bearer , priority 0 [ 314.916496][ T28] kauditd_printk_skb: 173 callbacks suppressed [ 314.916511][ T28] audit: type=1326 audit(1774631064.352:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 315.423903][ T28] audit: type=1326 audit(1774631064.352:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 315.536330][ T28] audit: type=1326 audit(1774631064.352:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 315.640360][ T5775] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 315.648530][ T28] audit: type=1326 audit(1774631064.362:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 315.744655][ T28] audit: type=1326 audit(1774631064.362:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 315.777074][ T5811] tipc: Node number set to 134353152 [ 315.787222][ T28] audit: type=1326 audit(1774631064.362:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 315.809787][ T28] audit: type=1326 audit(1774631064.362:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 315.832025][ T28] audit: type=1326 audit(1774631064.362:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 315.854325][ T28] audit: type=1326 audit(1774631064.362:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 315.876596][ T28] audit: type=1326 audit(1774631064.362:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabad39c799 code=0x7ffc0000 [ 318.229226][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.235655][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.210809][ T8255] libceph: resolve '96.' (ret=-3): failed [ 320.031044][ T5775] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 320.040277][ T5775] Bluetooth: hci0: Injecting HCI hardware error event [ 320.051146][ T5775] Bluetooth: hci0: hardware error 0x00 [ 320.860345][ T8290] warning: `syz.0.667' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 320.929563][ T8290] bridge_slave_0: left allmulticast mode [ 320.935397][ T8290] bridge_slave_0: left promiscuous mode [ 320.941381][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.952890][ T8290] bridge_slave_1: left allmulticast mode [ 320.959039][ T8290] bridge_slave_1: left promiscuous mode [ 320.964977][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.976735][ T8290] bond8: (slave veth0_to_bond): Releasing active interface [ 321.000221][ T8290] bond0: (slave bond_slave_0): Releasing backup interface [ 321.010050][ T8290] bond0: (slave bond_slave_1): Releasing backup interface [ 321.081048][ T8290] team0: Port device team_slave_0 removed [ 321.361155][ T8290] team0: Port device team_slave_1 removed [ 321.771823][ T8290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.793178][ T8290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.879302][ T8290] team0: Port device geneve0 removed [ 321.920117][ T8290] bond0: (slave wlan1): Releasing backup interface [ 322.145454][ T8290] bond1: (slave bridge1): Releasing backup interface [ 322.152221][ T8290] bridge1: left promiscuous mode [ 322.840021][ T5775] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 322.948674][ T8290] team0: Port device bond2 removed [ 322.977011][ T8290] bond3: (slave ip6gretap1): Releasing active interface [ 322.985726][ T8290] ip6gretap1: left allmulticast mode [ 323.033554][ T8290] bond5: (slave geneve2): Releasing active interface [ 323.067564][ T8290] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.085703][ T8290] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.094638][ T8290] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.281997][ T8312] libceph: resolve '96.' (ret=-3): failed [ 323.441860][ T8290] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.674615][ T8290] bond6: (slave ip6gretap2): Releasing active interface [ 323.740028][ T8290] bond7: (slave geneve3): Releasing active interface [ 323.763651][ T8290] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 323.793174][ T8290] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 323.812168][ T8290] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 323.837830][ T8290] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 323.922737][ T8293] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 323.970582][ T8293] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 324.536160][ T8327] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.671'. [ 324.546459][ T8327] openvswitch: netlink: ct_state flags 00030000 unsupported [ 325.119718][ T5775] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 325.224126][ T8328] mmap: syz.0.672 (8328) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 327.319292][ T5775] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 328.902666][ T8353] tmpfs: Bad value for 'nr_blocks' [ 329.091713][ T8358] tipc: Enabling of bearer rejected, already enabled [ 331.008980][ T8386] lo: entered allmulticast mode [ 331.017865][ T8386] veth1_to_team: entered allmulticast mode [ 331.040506][ T8385] lo: left allmulticast mode [ 332.586229][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.697'. [ 333.713467][ T8430] smc: net device bond0 applied user defined pnetid SYZ2 [ 333.721482][ T8430] netlink: 14 bytes leftover after parsing attributes in process `syz.1.702'. [ 333.846280][ T8433] overlayfs: failed to resolve './file0': -40 [ 333.856817][ T8430] smc: removing net device bond0 with user defined pnetid SYZ2 [ 333.910676][ T8430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.244760][ T8430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.153337][ T8430] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 335.297785][ T8430] bond0 (unregistering): Released all slaves [ 338.038454][ T8484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 340.752255][ T8510] smc: net device bond0 applied user defined pnetid SYZ2 [ 340.768913][ T8510] netlink: 14 bytes leftover after parsing attributes in process `syz.0.724'. [ 341.055553][ T8510] smc: removing net device bond0 with user defined pnetid SYZ2 [ 341.082165][ T8510] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 341.536625][ T8510] bond0 (unregistering): Released all slaves [ 342.136333][ T8531] loop1: detected capacity change from 0 to 1024 [ 342.208827][ T8531] hfsplus: found bad thread record in catalog [ 342.988505][ T11] hfsplus: b-tree write err: -5, ino 25 [ 342.994424][ T11] hfsplus: b-tree write err: -5, ino 4 [ 343.000012][ T11] hfsplus: b-tree write err: -5, ino 2 [ 349.282079][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'. [ 351.129121][ T8623] x_tables: duplicate underflow at hook 1 [ 351.954184][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.753'. [ 354.665856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 358.807059][ T8670] bond0: (slave syz_tun): Releasing backup interface [ 358.902454][ T8670] team0: Port device bridge0 removed [ 358.909636][ T8670] bridge_slave_0: left allmulticast mode [ 358.948493][ T8670] bridge_slave_0: left promiscuous mode [ 358.969316][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.991645][ T8670] bridge_slave_1: left allmulticast mode [ 359.010762][ T8670] bridge_slave_1: left promiscuous mode [ 359.032597][ T8670] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.073442][ T8670] team0: Port device team_slave_0 removed [ 359.107761][ T8670] team0: Port device team_slave_1 removed [ 359.129463][ T8670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.168742][ T8670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.192215][ T8670] bond1: (slave veth7): Releasing backup interface [ 359.953149][ T8670] bond2: (slave ip6gretap1): Releasing active interface [ 360.062695][ T8670] bond3: (slave ip6gretap2): Releasing active interface [ 360.084309][ T8670] ip6gretap2: left allmulticast mode [ 360.150723][ T8679] netlink: 'syz.3.765': attribute type 10 has an invalid length. [ 361.212492][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 365.982269][ T8745] tipc: Enabling of bearer rejected, failed to enable media [ 367.677213][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 369.057578][ T8758] 8021q: adding VLAN 0 to HW filter on device bond6 [ 369.171062][ T8761] bond6: entered promiscuous mode [ 369.178203][ T8767] fuse: Unknown parameter 'grou00000000000000000000' [ 369.200261][ T8761] bond6: entered allmulticast mode [ 369.232513][ T8761] 8021q: adding VLAN 0 to HW filter on device bond6 [ 369.244178][ T8761] team0: Port device bond6 added [ 369.280004][ T8769] team0: Port device bridge0 added [ 369.322204][ T8758] vxcan3: entered promiscuous mode [ 369.349411][ T8758] bond6: (slave vxcan3): refused to change device type [ 369.402268][ T8769] bond1: left promiscuous mode [ 369.422115][ T8769] bond2: left promiscuous mode [ 369.427515][ T8769] macvlan2: left promiscuous mode [ 369.637216][ T8775] ªªªªªª: renamed from vlan0 [ 372.768975][ T8800] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 374.283445][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 374.314226][ T8806] smc: adding net device bond0 with user defined pnetid SYZ2 [ 374.323873][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.405299][ T8806] bond0: entered promiscuous mode [ 374.410542][ T8806] bond0: entered allmulticast mode [ 374.418068][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.436741][ T8806] team0: Port device bond0 added [ 374.463512][ T8806] vxcan3: entered promiscuous mode [ 374.469044][ T8806] bond0: (slave vxcan3): refused to change device type [ 374.627931][ T8804] bond0: (slave netdevsim0): Releasing backup interface [ 374.775227][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.782654][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.821298][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.829015][ T8812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.837992][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.845711][ T8812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.998025][ T8812] team0: Port device bridge0 added [ 375.024036][ T11] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 377.240224][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 377.240239][ T28] audit: type=1107 audit(1774631122.853:231): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 380.293645][ T8840] syz.1.804 (8840) used greatest stack depth: 17128 bytes left [ 381.745312][ T8865] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 381.772640][ T8865] syzkaller0: entered promiscuous mode [ 381.786470][ T8865] syzkaller0: entered allmulticast mode [ 381.795283][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'. [ 381.824550][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 381.854002][ T8871] 8021q: adding VLAN 0 to HW filter on device bond6 [ 381.861283][ T8865] tipc: Started in network mode [ 381.871502][ T8865] tipc: Node identity 16003f542e19, cluster identity 4711 [ 381.882002][ T8865] tipc: Enabled bearer , priority 0 [ 381.936304][ T8871] bond6: entered promiscuous mode [ 381.952452][ T8871] bond6: entered allmulticast mode [ 381.993194][ T8871] 8021q: adding VLAN 0 to HW filter on device bond6 [ 382.018459][ T8871] team0: Port device bond6 added [ 382.032612][ T8864] tipc: Resetting bearer [ 382.081772][ T8864] tipc: Disabling bearer [ 382.118366][ T8875] vxcan3: entered promiscuous mode [ 382.129062][ T8875] bond6: (slave vxcan3): refused to change device type [ 383.350702][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.357121][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.590384][ T8911] xt_cluster: node mask cannot exceed total number of nodes [ 387.309899][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 390.837616][ T8963] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 392.988972][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 401.208673][ T9029] loop1: detected capacity change from 0 to 1024 [ 401.392968][ T9029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.744316][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.997921][ T9053] loop1: detected capacity change from 0 to 1024 [ 403.009365][ T9053] hfsplus: invalid file type 0177777 for inode 2 [ 403.016273][ T9053] hfsplus: failed to load root directory [ 403.053204][ T9053] loop1: detected capacity change from 0 to 2048 [ 403.477374][ T9053] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 404.333235][ T9059] Driver unsupported XDP return value 0 on prog (id 96) dev N/A, expect packet loss! [ 407.474231][ T9091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.804838][ T9091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.947920][ T5838] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 408.127397][ T9091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.189296][ T9106] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 408.195871][ T5838] usb 2-1: config 0 has no interfaces? [ 408.438078][ T5838] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 408.447890][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 408.456479][ T5838] usb 2-1: Product: syz [ 408.460963][ T5838] usb 2-1: Manufacturer: syz [ 408.465601][ T5838] usb 2-1: SerialNumber: syz [ 408.511774][ T5838] usb 2-1: config 0 descriptor?? [ 408.517185][ T9091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.372383][ T5838] usb 2-1: USB disconnect, device number 11 [ 409.905611][ T9091] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.087946][ T9091] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.346078][ T9091] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.453128][ T9091] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.931016][ T28] audit: type=1107 audit(1774631155.302:232): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 414.167039][ T9156] loop1: detected capacity change from 0 to 2048 [ 414.187590][ T9156] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.840153][ T9180] random: crng reseeded on system resumption [ 420.769940][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 420.929325][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 422.057914][ T9245] netlink: 'syz.2.913': attribute type 1 has an invalid length. [ 422.154763][ T9245] bond7: entered promiscuous mode [ 422.164790][ T9245] bond7: entered allmulticast mode [ 422.177207][ T9245] 8021q: adding VLAN 0 to HW filter on device bond7 [ 422.240364][ T9245] bridge3: entered promiscuous mode [ 422.289866][ T8014] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 422.312577][ T9245] bridge3: entered allmulticast mode [ 422.461855][ T8014] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 422.473397][ T9245] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 422.506078][ T9247] bridge4: entered promiscuous mode [ 422.518174][ T9247] bridge4: entered allmulticast mode [ 422.525212][ T9247] bond7: (slave bridge4): Enslaving as a backup interface with a down link [ 428.366417][ T9289] tipc: Enabling of bearer rejected, failed to enable media [ 428.404013][ T9289] netlink: 104 bytes leftover after parsing attributes in process `syz.1.924'. [ 428.432885][ T9289] tipc: Enabling of bearer rejected, failed to enable media [ 429.721858][ T9279] autofs4:pid:9279:autofs_fill_super: called with bogus options [ 431.843689][ T9325] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 434.631655][ T9340] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 434.756206][ T9340] 8021q: adding VLAN 0 to HW filter on device bond7 [ 435.744879][ T9353] netlink: 76 bytes leftover after parsing attributes in process `syz.2.943'. [ 435.874794][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.3.942'. [ 435.957278][ T9340] bond7: entered promiscuous mode [ 436.012318][ T9346] bond7: (slave dummy0): making interface the new active one [ 436.027466][ T9346] dummy0: entered promiscuous mode [ 436.034741][ T9346] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 436.238760][ T9366] syzkaller0: entered promiscuous mode [ 436.244457][ T9366] syzkaller0: entered allmulticast mode [ 438.017268][ T9377] loop1: detected capacity change from 0 to 128 [ 438.143116][ T9377] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 438.176539][ T9377] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 439.062788][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.331068][ T9397] netlink: 'syz.2.957': attribute type 1 has an invalid length. [ 440.453286][ T9397] 8021q: adding VLAN 0 to HW filter on device bond8 [ 440.546602][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'. [ 440.561330][ T9399] bond8: entered promiscuous mode [ 440.759962][ T9397] bond8: (slave dummy0): making interface the new active one [ 440.860551][ T9397] dummy0: entered promiscuous mode [ 440.969372][ T9397] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 444.115125][ T9432] netlink: 'syz.2.965': attribute type 10 has an invalid length. [ 444.277446][ T9435] netlink: 176 bytes leftover after parsing attributes in process `syz.2.965'. [ 449.136251][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.153960][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.918302][ T9493] netlink: 'syz.2.977': attribute type 21 has an invalid length. [ 451.926254][ T9493] netlink: 'syz.2.977': attribute type 6 has an invalid length. [ 451.934196][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.977'. [ 454.842663][ T9524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.850589][ T9524] IPv6: NLM_F_CREATE should be set when creating new route [ 454.857936][ T9524] IPv6: NLM_F_CREATE should be set when creating new route [ 454.865260][ T9524] IPv6: NLM_F_CREATE should be set when creating new route [ 456.148119][ T9530] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 456.202007][ T9530] ref_ctr increment failed for inode: 0x546 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888076e2a600 [ 456.331494][ T9536] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 456.360477][ T9536] ref_ctr decrement failed for inode: 0x546 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888076e2a600 [ 456.579337][ T9540] netlink: 2 bytes leftover after parsing attributes in process `syz.1.993'. [ 457.553732][ T9551] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1003'. [ 457.661271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 461.369493][ T28] audit: type=1326 audit(1774631201.511:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 461.521804][ T28] audit: type=1326 audit(1774631201.511:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 461.544537][ T28] audit: type=1326 audit(1774631201.511:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 461.567918][ T28] audit: type=1326 audit(1774631201.511:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 461.598680][ T28] audit: type=1326 audit(1774631201.511:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 461.697347][ T28] audit: type=1326 audit(1774631201.511:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 461.793403][ T28] audit: type=1326 audit(1774631201.511:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 462.072791][ T28] audit: type=1326 audit(1774631201.511:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 462.251647][ T28] audit: type=1326 audit(1774631201.511:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 462.292224][ T28] audit: type=1326 audit(1774631201.511:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.3.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d9f9c799 code=0x7ffc0000 [ 463.574771][ T9623] vlan2: entered promiscuous mode [ 463.580165][ T9623] vlan2: entered allmulticast mode [ 463.608370][ T9623] hsr_slave_1: entered allmulticast mode [ 465.098236][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 468.012897][ T9667] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2392044225/2392044227 [ 468.037910][ T9667] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2392044225/2392044227 [ 468.069449][ T9667] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2392044225/2392044227 [ 468.224361][ T9674] loop1: detected capacity change from 0 to 128 [ 468.405041][ T5775] Bluetooth: hci3: unexpected event for opcode 0x080d [ 469.336715][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'. [ 469.606622][ T9691] bond9: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 469.692433][ T9691] bond9: (slave ip_vti0): Error -95 calling set_mac_address [ 469.939771][ T9695] atomic_op ffff8880799bd198 conn xmit_atomic 0000000000000000 [ 471.243926][ T9687] bond9 (unregistering): Released all slaves [ 473.078878][ T5775] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 473.087734][ T5775] Bluetooth: hci3: Injecting HCI hardware error event [ 473.096802][ T5775] Bluetooth: hci3: hardware error 0x00 [ 475.331500][ T5775] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 476.008065][ T9750] capability: warning: `syz.2.1052' uses 32-bit capabilities (legacy support in use) [ 476.036339][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'. [ 476.211125][ T9751] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 476.293851][ T9751] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 476.324671][ T9756] bond1 (unregistering): Released all slaves [ 480.071682][ T9792] kvm: kvm [9791]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x243 [ 480.144804][ T9792] kvm: kvm [9791]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xaf51 [ 480.159486][ T9792] kvm: kvm [9791]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2b60 [ 480.342384][ T9792] kvm: kvm [9791]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd6f8 [ 480.355879][ T9792] kvm: kvm [9791]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x108b [ 480.371495][ T9792] kvm: kvm [9791]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60d1 [ 480.886388][ T9792] kvm: kvm [9791]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x478 [ 480.954571][ T9819] ------------[ cut here ]------------ [ 480.960462][ T9819] WARNING: CPU: 0 PID: 9819 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 480.971430][ T9819] Modules linked in: [ 480.975512][ T9819] CPU: 0 PID: 9819 Comm: syz.0.1066 Not tainted syzkaller #0 [ 480.982922][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.993044][ T9819] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 480.999992][ T9819] Code: 7c 2d 00 00 74 08 48 89 df e8 68 7e d6 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 71 bc 85 00 e8 3c 42 7e f7 <0f> 0b eb c5 48 c7 c1 6c 37 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 481.019976][ T9819] RSP: 0018:ffffc9000548f978 EFLAGS: 00010287 [ 481.026099][ T9819] RAX: ffffffff8a08dde4 RBX: ffff88805cc09598 RCX: 0000000000080000 [ 481.034393][ T9819] RDX: ffffc9000d33a000 RSI: 00000000000172dc RDI: 00000000000172dd [ 481.042498][ T9819] RBP: 0000000000000000 R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 481.050610][ T9819] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: ffff88805cc0ac08 [ 481.058891][ T9819] R13: 1ffff1100b9812b3 R14: ffff88805cc0a3c0 R15: dffffc0000000000 [ 481.067461][ T9819] FS: 00007f2da58b56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 481.076595][ T9819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.083482][ T9819] CR2: 0000001b2d520ff8 CR3: 000000007d8d2000 CR4: 00000000003526f0 [ 481.091516][ T9819] Call Trace: [ 481.094961][ T9819] [ 481.097952][ T9819] ieee80211_if_change_type+0x211/0xa70 [ 481.103574][ T9819] ? do_raw_spin_unlock+0x121/0x230 [ 481.108820][ T9819] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 481.115652][ T9819] ? cfg80211_mlme_purge_registrations+0x1d4/0x210 [ 481.122213][ T9819] ieee80211_change_iface+0x5c/0x4c0 [ 481.127593][ T9819] cfg80211_change_iface+0x812/0xf30 [ 481.132941][ T9819] cfg80211_wext_siwmode+0x1e8/0x2c0 [ 481.138322][ T9819] ? cfg80211_wext_giwname+0x30/0x30 [ 481.143655][ T9819] ? apparmor_capable+0x137/0x1a0 [ 481.148794][ T9819] ? cfg80211_wext_giwname+0x30/0x30 [ 481.154123][ T9819] ioctl_standard_call+0xd8/0x2b0 [ 481.159250][ T9819] ? cfg80211_wext_giwname+0x30/0x30 [ 481.164583][ T9819] wext_ioctl_dispatch+0x1cb/0x600 [ 481.169846][ T9819] ? wext_ioctl_dispatch+0x600/0x600 [ 481.175180][ T9819] ? iw_handler_get_private+0x1f0/0x1f0 [ 481.180814][ T9819] ? wext_handle_ioctl+0x1d0/0x1d0 [ 481.186344][ T9819] ? __might_fault+0xaa/0x120 [ 481.191152][ T9819] ? __might_fault+0xc6/0x120 [ 481.195879][ T9819] ? __might_fault+0xaa/0x120 [ 481.200664][ T9819] wext_handle_ioctl+0x117/0x1d0 [ 481.205774][ T9819] ? call_commit_handler+0xf0/0xf0 [ 481.211270][ T9819] sock_ioctl+0x15d/0x7e0 [ 481.215658][ T9819] ? sock_poll+0x3e0/0x3e0 [ 481.220155][ T9819] ? bpf_lsm_file_ioctl+0x9/0x10 [ 481.225400][ T9819] ? security_file_ioctl+0x80/0xa0 [ 481.230608][ T9819] ? sock_poll+0x3e0/0x3e0 [ 481.237854][ T9819] __se_sys_ioctl+0xfd/0x170 [ 481.242606][ T9819] do_syscall_64+0x55/0xa0 [ 481.247084][ T9819] ? clear_bhb_loop+0x40/0x90 [ 481.251824][ T9819] ? clear_bhb_loop+0x40/0x90 [ 481.256645][ T9819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.262605][ T9819] RIP: 0033:0x7f2da499c799 [ 481.267134][ T9819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.286830][ T9819] RSP: 002b:00007f2da58b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.295304][ T9819] RAX: ffffffffffffffda RBX: 00007f2da4c15fa0 RCX: 00007f2da499c799 [ 481.303435][ T9819] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000004 [ 481.311509][ T9819] RBP: 00007f2da4a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 481.319730][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.327769][ T9819] R13: 00007f2da4c16038 R14: 00007f2da4c15fa0 R15: 00007fff8d0d7418 [ 481.335856][ T9819] [ 481.339143][ T9819] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 481.346742][ T9819] CPU: 0 PID: 9819 Comm: syz.0.1066 Not tainted syzkaller #0 [ 481.354142][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.364234][ T9819] Call Trace: [ 481.367549][ T9819] [ 481.370523][ T9819] dump_stack_lvl+0x18c/0x250 [ 481.375253][ T9819] ? show_regs_print_info+0x20/0x20 [ 481.380505][ T9819] ? load_image+0x400/0x400 [ 481.385029][ T9819] panic+0x2dc/0x730 [ 481.388969][ T9819] ? bpf_jit_dump+0xd0/0xd0 [ 481.393531][ T9819] __warn+0x2e0/0x470 [ 481.397545][ T9819] ? ieee80211_link_release_channel+0x154/0x180 [ 481.403839][ T9819] ? ieee80211_link_release_channel+0x154/0x180 [ 481.410105][ T9819] report_bug+0x2be/0x4f0 [ 481.414460][ T9819] ? ieee80211_link_release_channel+0x154/0x180 [ 481.420723][ T9819] ? ieee80211_link_release_channel+0x154/0x180 [ 481.426984][ T9819] ? ieee80211_link_release_channel+0x156/0x180 [ 481.433237][ T9819] handle_bug+0xcf/0x120 [ 481.437514][ T9819] exc_invalid_op+0x1a/0x50 [ 481.442082][ T9819] asm_exc_invalid_op+0x1a/0x20 [ 481.446955][ T9819] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 481.453827][ T9819] Code: 7c 2d 00 00 74 08 48 89 df e8 68 7e d6 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 71 bc 85 00 e8 3c 42 7e f7 <0f> 0b eb c5 48 c7 c1 6c 37 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 481.473444][ T9819] RSP: 0018:ffffc9000548f978 EFLAGS: 00010287 [ 481.479611][ T9819] RAX: ffffffff8a08dde4 RBX: ffff88805cc09598 RCX: 0000000000080000 [ 481.487596][ T9819] RDX: ffffc9000d33a000 RSI: 00000000000172dc RDI: 00000000000172dd [ 481.495585][ T9819] RBP: 0000000000000000 R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 481.503665][ T9819] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: ffff88805cc0ac08 [ 481.511654][ T9819] R13: 1ffff1100b9812b3 R14: ffff88805cc0a3c0 R15: dffffc0000000000 [ 481.519648][ T9819] ? ieee80211_link_release_channel+0x154/0x180 [ 481.525946][ T9819] ? ieee80211_link_release_channel+0x154/0x180 [ 481.532208][ T9819] ieee80211_if_change_type+0x211/0xa70 [ 481.537772][ T9819] ? do_raw_spin_unlock+0x121/0x230 [ 481.542993][ T9819] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 481.549693][ T9819] ? cfg80211_mlme_purge_registrations+0x1d4/0x210 [ 481.556213][ T9819] ieee80211_change_iface+0x5c/0x4c0 [ 481.561529][ T9819] cfg80211_change_iface+0x812/0xf30 [ 481.566840][ T9819] cfg80211_wext_siwmode+0x1e8/0x2c0 [ 481.572147][ T9819] ? cfg80211_wext_giwname+0x30/0x30 [ 481.577454][ T9819] ? apparmor_capable+0x137/0x1a0 [ 481.582524][ T9819] ? cfg80211_wext_giwname+0x30/0x30 [ 481.587831][ T9819] ioctl_standard_call+0xd8/0x2b0 [ 481.592891][ T9819] ? cfg80211_wext_giwname+0x30/0x30 [ 481.598241][ T9819] wext_ioctl_dispatch+0x1cb/0x600 [ 481.603399][ T9819] ? wext_ioctl_dispatch+0x600/0x600 [ 481.608709][ T9819] ? iw_handler_get_private+0x1f0/0x1f0 [ 481.614274][ T9819] ? wext_handle_ioctl+0x1d0/0x1d0 [ 481.619430][ T9819] ? __might_fault+0xaa/0x120 [ 481.624132][ T9819] ? __might_fault+0xc6/0x120 [ 481.628830][ T9819] ? __might_fault+0xaa/0x120 [ 481.633532][ T9819] wext_handle_ioctl+0x117/0x1d0 [ 481.638506][ T9819] ? call_commit_handler+0xf0/0xf0 [ 481.643657][ T9819] sock_ioctl+0x15d/0x7e0 [ 481.648027][ T9819] ? sock_poll+0x3e0/0x3e0 [ 481.652467][ T9819] ? bpf_lsm_file_ioctl+0x9/0x10 [ 481.657422][ T9819] ? security_file_ioctl+0x80/0xa0 [ 481.662599][ T9819] ? sock_poll+0x3e0/0x3e0 [ 481.667135][ T9819] __se_sys_ioctl+0xfd/0x170 [ 481.671762][ T9819] do_syscall_64+0x55/0xa0 [ 481.676221][ T9819] ? clear_bhb_loop+0x40/0x90 [ 481.680957][ T9819] ? clear_bhb_loop+0x40/0x90 [ 481.685670][ T9819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.691599][ T9819] RIP: 0033:0x7f2da499c799 [ 481.696038][ T9819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.715679][ T9819] RSP: 002b:00007f2da58b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.724119][ T9819] RAX: ffffffffffffffda RBX: 00007f2da4c15fa0 RCX: 00007f2da499c799 [ 481.732110][ T9819] RDX: 0000200000000000 RSI: 0000000000008b06 RDI: 0000000000000004 [ 481.740100][ T9819] RBP: 00007f2da4a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 481.748090][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.756085][ T9819] R13: 00007f2da4c16038 R14: 00007f2da4c15fa0 R15: 00007fff8d0d7418 [ 481.764091][ T9819] [ 481.767704][ T9819] Kernel Offset: disabled [ 481.772150][ T9819] Rebooting in 86400 seconds..