last executing test programs: 1m24.422292106s ago: executing program 4 (id=789): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x37) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) 1m23.326287981s ago: executing program 4 (id=797): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) 1m23.160774394s ago: executing program 4 (id=799): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) r3 = fsopen(&(0x7f0000000100)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 1m22.426117234s ago: executing program 4 (id=805): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r5, &(0x7f0000000700)='keyring\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r7, @ANYRES16=r0], 0x1c}}, 0x0) 1m21.141973172s ago: executing program 4 (id=808): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev}], 0x10) sendto$inet(r0, &(0x7f0000000080)="d3", 0x1, 0x20000050, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) 1m20.766186337s ago: executing program 4 (id=812): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0xfdbb, 0x0, 0x0, &(0x7f0000000440)=""/217, 0xcd}, 0x218}], 0x40000ee, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 1m5.709196439s ago: executing program 32 (id=812): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0xfdbb, 0x0, 0x0, &(0x7f0000000440)=""/217, 0xcd}, 0x218}], 0x40000ee, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 9.194349641s ago: executing program 0 (id=1058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x374, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x338, 0x2, [@TCA_MATCHALL_ACT={0x2f4, 0x2, [@m_skbedit={0x14c, 0x1f, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x6, 0x20000000, 0xaf000000, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xef, 0x6, "4c0b2d056d27d61bf9caa7638256403e0a873ca84f9e23b21c8b50af1caf8445094c77efc7a906cc51927cae63f5582b9cd772754ad95975f8cd15a7eaf94d6407b559f7e03319122770e276d047f4e861875f58f1f09c50ed6055b988b88edb58dbe1b4964af4b889e66d3e316861be06762ece4361114a00bf7934b73b2fcfcc13476192158ee9e4eb6ac960884827b73b0070d251dfb26c40ee090cf9d8b117e148b8bf73557fc7200d34a97ba8fdfb6822477f55185368e5735891cf0e8306674740bbb34c5274c454ba6a9f17fe9ac26abf476434507f12237fdafb132634a52843c93aa663f4dac1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x90, 0x16, 0x0, 0x0, {{0x8}, {0x4}, {0x68, 0x6, "efb1ceb9e1fd5c3140979a820830591412b3a1e51ff01430b993e9513caeae48b445fc37a3632c283671b57dd18d62cc84acc268c7342a5de3348ec761f3af57144f222391ee893e8205a4803bb4aa896c4072f30729be7dd8940468da8e00213347348f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x114, 0x1a, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "a15a6ce4ed2dbc77499eb26844a4b31b"}, @TCA_CT_LABELS={0x14, 0x7, "bf91b338555d4b4d82637cd8f81d8678"}]}, {0xc2, 0x6, "c527675bf7f4646ae31c844a33598eff03ceaabbf6272a809016b3f45d79c400b539c7a4d14eaae83644f301ed04c18bf42d5c76a75e8a581d9a3557c255c6295de63eb3da7d415bef4d1f78361360ce6fe6411cab60fa0a5057105013247436fea28171a79df64b155fc529fcfebcabf8e2f34843a55ef8798b5d34a7f442bde0879242568c20977076b5be5c90ddd6de40fd02d6c00f1f52b2454bd700ba583c7a3e90fc14df63eeb534c65c8bfdca7233e81f51f78cc2c2ccc2f16679"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x374}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) 9.145607672s ago: executing program 5 (id=1059): syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x28e41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x17, 0x30) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in=@rand_addr=0x64010100, 0x0, 0x3, 0x4e20, 0x4000, 0x2, 0x0, 0xa0, 0x67}, {0x0, 0x15000000000003, 0x0, 0xe, 0x7ffd, 0xffffffffffffffff, 0xfffffffffffffffe, 0xd3d}, {0x0, 0x4, 0x0, 0xfffffffffffffffa}, 0x0, 0x6e6bba, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x38011, r0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc92}]}, &(0x7f0000000140)=0x10) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r7, 0xab00, r8) 8.821969497s ago: executing program 0 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) shutdown(r4, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x4d, @private1, @loopback={0x0, 0xffff888101827518}, 0x700, 0x0, 0x3}}) 7.810028351s ago: executing program 1 (id=1067): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000000c0)={r2, 0x800, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a7ddf8a69ea917ded5ba193b3e7772fd29f35239d2", "530bf65043114b2e53000006000000000010e200", [0x1000000000]}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 6.973123803s ago: executing program 0 (id=1068): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") msgsnd(0x0, 0x0, 0x1004, 0x800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7b7, &(0x7f00000007c0)="$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") syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000280), 0x3, 0x438, &(0x7f00000021c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x3000000000000) socket$nl_xfrm(0x10, 0x3, 0x6) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6000, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) 6.162936284s ago: executing program 2 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r8, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 5.993446366s ago: executing program 5 (id=1075): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf652100000008000300", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) 5.922954397s ago: executing program 5 (id=1076): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="9d", 0x3ec0}], 0x1) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)}, 0x40000042) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r5}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0900000004000000060000000b"], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 5.866317518s ago: executing program 3 (id=1077): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./file2\x00', 0x22200c8c, &(0x7f0000000000)=ANY=[], 0x1, 0x1526, &(0x7f000000a000)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) 5.821902189s ago: executing program 0 (id=1078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) shutdown(r4, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x4d, @private1, @loopback={0x0, 0xffff888101827518}, 0x700, 0x0, 0x3}}) 5.72043405s ago: executing program 3 (id=1079): set_mempolicy(0x6, 0x0, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000200)={0x7, 0x2}) r3 = epoll_create1(0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0xe, {0x200f, 0x3, 0x9, 0x2, 0x7, 0x7ffa, 0x3, 0x3, 0x6, 0xfffc, 0x2, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000100)=0x44) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x400c000) 5.418332364s ago: executing program 5 (id=1080): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 5.369910825s ago: executing program 5 (id=1081): syz_open_dev$vcsa(0x0, 0x1, 0x40002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 5.341252135s ago: executing program 1 (id=1082): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401002cbd7000fedbdf25080003000100004008004b00130000"], 0x28}, 0x1, 0x0, 0x0, 0x20044836}, 0x20004004) 5.244325076s ago: executing program 2 (id=1083): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002140)=@delchain={0xf4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0xb0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x98, 0x1, [@m_nat={0x94, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x69, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b436361246e3000e13fa20bea090aab2bdd9895404add20f4fcf1a162cef77fa510e284971b2c20e689c84c729801c399b2e8e9d7612504fa384dfa0fff7632779c87c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.081818799s ago: executing program 3 (id=1084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 5.044952839s ago: executing program 1 (id=1085): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) 4.948258121s ago: executing program 2 (id=1086): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf652100000008000300", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) 4.821734043s ago: executing program 0 (id=1087): syz_usb_connect(0x5, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x28e41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x17, 0x30) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in=@rand_addr=0x64010100, 0x0, 0x3, 0x4e20, 0x4000, 0x2, 0x0, 0xa0, 0x67}, {0x0, 0x15000000000003, 0x0, 0xe, 0x7ffd, 0xffffffffffffffff, 0xfffffffffffffffe, 0xd3d}, {0x0, 0x4, 0x0, 0xfffffffffffffffa}, 0x0, 0x6e6bba, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x38011, r0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc92}]}, &(0x7f0000000140)=0x10) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 4.698010625s ago: executing program 1 (id=1088): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 4.614347156s ago: executing program 2 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000500)='./file0\x00', 0x3000002, &(0x7f0000000000)={[{@nodatacow}, {@metadata_ratio={'metadata_ratio', 0x3d, 0xff}}, {@discard_sync}, {@nossd_spread}, {@acl}, {@treelog}, {}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@ssd_spread}, {@enospc_debug}, {}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000400)={"67c7827276a7e22b74076d32758e654f", 0x0, 0x0, {0xffffffffffffffff}, {0x9, 0x4}, 0x5, [0xe953, 0x100, 0x8, 0xffffffffffffffff, 0x9, 0x0, 0x4, 0x8, 0x6, 0xffffffffffffffff, 0x5, 0x6, 0xbc78, 0x5, 0x1, 0x101]}) 4.579571526s ago: executing program 3 (id=1090): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f00000000c0)=0x40001, 0x4) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x70) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) 4.475336528s ago: executing program 1 (id=1091): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000001c0)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) shutdown(r3, 0x0) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4.018195534s ago: executing program 5 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1c}}, 0x8010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x3000}) io_uring_enter(r1, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) mq_open(0x0, 0x840, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB='de=0x00000000800000b1,norock,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000001000,check=strict,iocharset=cp949,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 1.213292313s ago: executing program 0 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r8, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 1.104970565s ago: executing program 1 (id=1094): set_mempolicy(0x6, 0x0, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000200)={0x7, 0x2}) r3 = epoll_create1(0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0xe, {0x200f, 0x3, 0x9, 0x2, 0x7, 0x7ffa, 0x3, 0x3, 0x6, 0xfffc, 0x2, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000100)=0x44) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x400c000) 1.042305096s ago: executing program 2 (id=1095): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000101401002cbd7000fedbdf25080003000100004008004b001300000008"], 0x28}, 0x1, 0x0, 0x0, 0x20044836}, 0x20004004) 996.809196ms ago: executing program 3 (id=1096): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002140)=@delchain={0xf4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0xb0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x98, 0x1, [@m_nat={0x94, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x69, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b436361246e3000e13fa20bea090aab2bdd9895404add20f4fcf1a162cef77fa510e284971b2c20e689c84c729801c399b2e8e9d7612504fa384dfa0fff7632779c87c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 185.659198ms ago: executing program 2 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) shutdown(r4, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x4d, @private1, @loopback={0x0, 0xffff888101827518}, 0x700, 0x0, 0x3}}) 0s ago: executing program 3 (id=1098): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r1) kernel console output (not intermixed with test programs): 0:50:50 [ 44.397889][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.401709][ T507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.409411][ T89] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.413191][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 44.482706][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.485114][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.505052][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.619983][ T4442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 45.178284][ T4455] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 45.765741][ T4311] Bluetooth: hci0: command 0x0419 tx timeout [ 45.767551][ T4311] Bluetooth: hci1: command 0x0419 tx timeout [ 45.846432][ T4323] Bluetooth: hci3: command 0x0419 tx timeout [ 45.848112][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 45.849681][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 45.868574][ T4472] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 46.083939][ T4478] binder: 4477:4478 tried to acquire reference to desc 0, got 1 instead [ 46.093557][ T4478] binder_alloc: 4477: binder_alloc_buf, no vma [ 46.099858][ T4478] binder: cannot allocate buffer: vma cleared, target dead or dying [ 46.099921][ T4478] binder: 4477:4478 transaction async to 4477:0 failed 8/29189/-3, size 0-24 line 3239 [ 46.255418][ T113] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.464072][ T113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.467794][ T113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.470522][ T113] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 46.473066][ T113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.497835][ T113] usb 1-1: config 0 descriptor?? [ 46.581181][ T4478] syz.3.19 (4478): drop_caches: 2 [ 46.609189][ T4361] binder: undelivered TRANSACTION_ERROR: 29189 [ 46.941319][ T113] usbhid 1-1:0.0: can't add hid device: -71 [ 46.943225][ T113] usbhid: probe of 1-1:0.0 failed with error -71 [ 46.961154][ T113] usb 1-1: USB disconnect, device number 2 [ 47.135701][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 47.156584][ T4502] bridge0: port 3(vlan2) entered blocking state [ 47.158530][ T4502] bridge0: port 3(vlan2) entered disabled state [ 47.434517][ T4437] delete_channel: no stack [ 47.573903][ T4524] Zero length message leads to an empty skb [ 47.641689][ T4526] binder: 4525:4526 tried to acquire reference to desc 0, got 1 instead [ 47.654005][ T4526] binder_alloc: 4525: binder_alloc_buf, no vma [ 47.662738][ T4526] binder: cannot allocate buffer: vma cleared, target dead or dying [ 47.662775][ T4526] binder: 4525:4526 transaction async to 4525:0 failed 13/29189/-3, size 0-24 line 3239 [ 47.718194][ T4526] syz.2.34 (4526): drop_caches: 2 [ 47.755779][ T4440] binder: undelivered TRANSACTION_ERROR: 29189 [ 48.071817][ T4549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.077303][ T4549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.842361][ T4566] tipc: Started in network mode [ 48.844013][ T4566] tipc: Node identity e0000001, cluster identity 4711 [ 48.854139][ T4566] tipc: Enabling of bearer rejected, failed to enable media [ 48.999492][ T4569] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 49.162414][ T4573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.51'. [ 49.279859][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 49.532313][ T4587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 49.636041][ T4591] loop6: detected capacity change from 0 to 7 [ 49.641327][ T4300] Dev loop6: unable to read RDB block 7 [ 49.642989][ T4300] loop6: AHDI p1 p2 p3 p4 [ 49.644452][ T4300] loop6: partition table partially beyond EOD, truncated [ 49.657189][ T4300] loop6: p1 start 926365495 is beyond EOD, truncated [ 49.659130][ T4300] loop6: p2 start 12124160 is beyond EOD, truncated [ 49.660993][ T4300] loop6: p3 start 1886353253 is beyond EOD, truncated [ 49.676988][ T4591] Dev loop6: unable to read RDB block 7 [ 49.678578][ T4591] loop6: AHDI p1 p2 p3 p4 [ 49.680952][ T4591] loop6: partition table partially beyond EOD, truncated [ 49.683002][ T4591] loop6: p1 start 926365495 is beyond EOD, truncated [ 49.713832][ T4591] loop6: p2 start 12124160 is beyond EOD, truncated [ 49.723082][ T4591] loop6: p3 start 1886353253 is beyond EOD, truncated [ 50.440725][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 50.884885][ T4619] input: syz0 as /devices/virtual/input/input3 [ 51.230784][ T4601] netpci0: tun_chr_ioctl cmd 1074812118 [ 51.232678][ T4604] netlink: 'syz.0.60': attribute type 5 has an invalid length. [ 51.251114][ T4610] netlink: 'syz.4.63': attribute type 8 has an invalid length. [ 52.221603][ T4311] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 52.400263][ T4633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.405615][ T4633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.811378][ T4639] loop2: detected capacity change from 0 to 32768 [ 52.981008][ T27] audit: type=1326 audit(52.960:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.4.75" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8695aba8 code=0x0 [ 53.950792][ T4311] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 54.090594][ T4673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'. [ 54.529841][ T4688] binder: 4687:4688 tried to acquire reference to desc 0, got 1 instead [ 54.533813][ T4688] binder: 4687:4688 got transaction with invalid data ptr [ 54.536729][ T4688] binder: 4687:4688 transaction async to 4687:0 failed 18/29201/-14, size 0-24 line 3342 [ 54.551865][ T4688] syz.0.95 (4688): drop_caches: 2 [ 54.556572][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 54.984407][ C0] vcan0: j1939_tp_rxtimer: 0x000000003459d2d7: rx timeout, send abort [ 54.988114][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000003459d2d7: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 54.993046][ C0] vcan0: j1939_tp_rxtimer: 0x00000000dfcd0676: rx timeout, send abort [ 54.998018][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000dfcd0676: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 55.061274][ T4311] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 55.221517][ T4718] binder: BINDER_SET_CONTEXT_MGR already set [ 55.223530][ T4718] binder: 4717:4718 ioctl 4018620d 20000040 returned -16 [ 55.234032][ T4718] syz.2.109 (4718): drop_caches: 2 [ 55.689402][ T4730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.692263][ T4730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.144405][ T4751] binder: BINDER_SET_CONTEXT_MGR already set [ 56.146362][ T4751] binder: 4750:4751 ioctl 4018620d 20000040 returned -16 [ 56.183963][ T4751] syz.4.120 (4751): drop_caches: 2 [ 56.874599][ T4311] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 57.983774][ T4780] binder: BINDER_SET_CONTEXT_MGR already set [ 57.990338][ T4780] binder: 4779:4780 ioctl 4018620d 20000040 returned -16 [ 58.033280][ T4780] syz.4.132 (4780): drop_caches: 2 [ 58.347397][ T4311] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 58.969790][ T4799] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 59.750266][ T4804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.753063][ T4804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.072238][ T4815] binder: 4814:4815 got transaction to invalid handle, 1 [ 60.074154][ T4815] binder: 4815:4814 cannot find target node [ 60.088441][ T4815] binder: 4814:4815 transaction async to 0:0 failed 28/29201/-22, size 0-24 line 3054 [ 60.106132][ T4815] syz.1.144 (4815): drop_caches: 2 [ 60.129322][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 61.422894][ T4311] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 63.302855][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 63.522134][ T4311] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 63.526115][ T4875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 63.606815][ C1] vcan0: j1939_tp_rxtimer: 0x000000002ee042cb: rx timeout, send abort [ 63.610005][ C1] vcan0: j1939_xtp_rx_abort_one: 0x000000002ee042cb: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 64.487760][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489772][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.663974][ T4311] Bluetooth: hci3: Invalid handle: 0x0f00 > 0x0eff [ 65.848076][ T4915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.850602][ T4915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.055564][ T4311] Bluetooth: hci0: Unknown advertising packet type: 0x4b00 [ 66.055618][ T4311] Bluetooth: hci0: Malformed LE Event: 0x0d [ 66.850357][ T4932] Bluetooth: MGMT ver 1.22 [ 67.844298][ T4311] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 69.706226][ T1515] cfg80211: failed to load regulatory.db [ 69.817604][ T5002] hub 9-0:1.0: USB hub found [ 69.820004][ T5002] hub 9-0:1.0: 8 ports detected [ 70.698701][ T4311] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 72.232411][ T5079] capability: warning: `syz.2.211' uses deprecated v2 capabilities in a way that may be insecure [ 72.455009][ T5089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 72.480518][ T5089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 72.816810][ T4311] Bluetooth: hci3: Invalid handle: 0x0f00 > 0x0eff [ 74.224952][ T5123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.238615][ T5123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.533130][ T5138] netlink: 56 bytes leftover after parsing attributes in process `syz.4.227'. [ 75.705482][ T4323] Bluetooth: hci3: Invalid handle: 0x0f00 > 0x0eff [ 76.923881][ T5188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.248'. [ 78.284982][ T4311] Bluetooth: hci3: Invalid handle: 0x0f00 > 0x0eff [ 78.988624][ T5218] loop0: detected capacity change from 0 to 32768 [ 80.557440][ T5241] tipc: Started in network mode [ 80.558786][ T5241] tipc: Node identity 26f5bec5493a, cluster identity 4711 [ 80.560912][ T5241] tipc: Enabled bearer , priority 0 [ 80.590569][ T4323] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 80.665461][ T4901] tipc: Resetting bearer [ 80.672343][ T5239] tipc: Resetting bearer [ 81.596694][ T22] tipc: Node number set to 1875885765 [ 82.253061][ T5271] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.275'. [ 92.264046][ T5239] tipc: Disabling bearer [ 92.999905][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.185892][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 93.192202][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.200791][ T22] usb 1-1: config 0 has no interfaces? [ 93.204433][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.219579][ T22] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.223309][ T22] usb 1-1: Manufacturer: syz [ 93.242615][ T22] usb 1-1: config 0 descriptor?? [ 93.390843][ T5314] loop6: detected capacity change from 0 to 7 [ 93.391750][ T4323] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 93.401919][ T5314] Dev loop6: unable to read RDB block 7 [ 93.403757][ T5314] loop6: unable to read partition table [ 93.406653][ T5314] loop6: partition table beyond EOD, truncated [ 93.408764][ T5314] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.468536][ T22] usb 1-1: USB disconnect, device number 3 [ 93.838329][ T5320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.841073][ T5320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.276821][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.279484][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.316812][ T5328] loop4: detected capacity change from 0 to 32768 [ 94.376114][ T4382] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 94.380839][ T4382] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 94.391025][ T4382] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 94.401161][ T4382] hid-generic 00A0:0008:0003.0001: unknown main item tag 0x0 [ 94.410188][ T4382] hid-generic 00A0:0008:0003.0001: item fetching failed at offset 6/15 [ 94.424414][ T4382] hid-generic: probe of 00A0:0008:0003.0001 failed with error -22 [ 94.595510][ T5342] input: syz0 as /devices/virtual/input/input5 [ 94.810706][ C1] Unknown status report in ack skb [ 94.931091][ T4311] Bluetooth: hci0: Invalid handle: 0x0f00 > 0x0eff [ 96.700438][ T5371] loop2: detected capacity change from 0 to 32768 [ 98.858080][ T5397] kthread_run failed with err -4 [ 99.256919][ T4323] Bluetooth: hci3: Invalid handle: 0x0f00 > 0x0eff [ 100.356861][ T5419] loop0: detected capacity change from 0 to 32768 [ 100.638647][ T5427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.244843][ T113] libceph: connect (1)[c::]:6789 error -101 [ 101.247374][ T113] libceph: mon0 (1)[c::]:6789 connect error [ 101.506763][ T113] libceph: connect (1)[c::]:6789 error -101 [ 101.508613][ T113] libceph: mon0 (1)[c::]:6789 connect error [ 101.696718][ T5442] ceph: No mds server is up or the cluster is laggy [ 102.309938][ T4382] libceph: connect (1)[c::]:6789 error -101 [ 102.312798][ T4382] libceph: mon0 (1)[c::]:6789 connect error [ 103.047345][ T4323] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 103.770588][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 103.942031][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.946694][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.958256][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.962754][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.489526][ T5487] loop3: detected capacity change from 0 to 32768 [ 105.413997][ T4311] Bluetooth: hci3: Invalid handle: 0x0f00 > 0x0eff [ 105.776519][ T5506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.964362][ T5513] netlink: 'syz.3.347': attribute type 12 has an invalid length. [ 106.746830][ T4311] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 108.071614][ T5531] loop0: detected capacity change from 0 to 32768 [ 108.419621][ T5537] 9pnet_fd: Insufficient options for proto=fd [ 108.455681][ T5535] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 108.457731][ T5535] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.510697][ T5535] vhci_hcd vhci_hcd.0: Device attached [ 108.575140][ T5536] vhci_hcd: connection closed [ 108.578002][ T5059] vhci_hcd: stop threads [ 108.581497][ T5059] vhci_hcd: release socket [ 108.582919][ T5059] vhci_hcd: disconnect device [ 108.680012][ T5535] tipc: Cannot configure node identity twice [ 109.296628][ T4311] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 110.341023][ T4354] libceph: connect (1)[c::]:6789 error -101 [ 110.344683][ T4354] libceph: mon0 (1)[c::]:6789 connect error [ 110.612911][ T5560] ceph: No mds server is up or the cluster is laggy [ 110.635656][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 110.637347][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 111.052422][ T5569] loop2: detected capacity change from 0 to 32768 [ 112.156476][ T5593] binder: 5592:5593 ioctl c0306201 0 returned -14 [ 112.163846][ T5593] binder: 5592:5593 got transaction to invalid handle, 1 [ 112.171698][ T4311] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 112.193954][ T5593] binder: 5593:5592 cannot find target node [ 112.202858][ T5593] binder: 5592:5593 transaction async to 0:0 failed 32/29201/-22, size 0-24 line 3054 [ 112.213258][ T5593] syz.1.378 (5593): drop_caches: 2 [ 112.222896][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 113.129257][ T5607] loop3: detected capacity change from 0 to 32768 [ 114.474084][ T5622] binder: 5621:5622 ioctl c0306201 0 returned -14 [ 114.493271][ T5622] binder: 5621:5622 got transaction to invalid handle, 1 [ 114.519295][ T5622] binder: 5622:5621 cannot find target node [ 114.521206][ T5622] binder: 5621:5622 transaction async to 0:0 failed 36/29201/-22, size 0-24 line 3054 [ 114.538591][ T5624] input: syz0 as /devices/virtual/input/input6 [ 114.589333][ T5622] syz.2.390 (5622): drop_caches: 2 [ 114.612864][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.772440][ T4311] Bluetooth: hci0: Invalid handle: 0x0f00 > 0x0eff [ 115.004945][ T5630] loop6: detected capacity change from 0 to 7 [ 115.025632][ T5630] Dev loop6: unable to read RDB block 7 [ 115.034136][ T5630] loop6: unable to read partition table [ 115.053418][ T5630] loop6: partition table beyond EOD, truncated [ 115.055209][ T5630] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.298175][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'. [ 117.809333][ T5677] binder: 5676:5677 got transaction to invalid handle, 1 [ 117.811354][ T5677] binder: 5677:5676 cannot find target node [ 117.813250][ T5677] binder: 5676:5677 transaction async to 0:0 failed 40/29201/-22, size 0-24 line 3054 [ 117.829176][ T5677] syz.0.411 (5677): drop_caches: 2 [ 117.831648][ T4354] binder: undelivered TRANSACTION_ERROR: 29201 [ 117.868317][ T4311] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 118.945874][ T5687] xt_limit: Overflow, try lower: 687865856/40 [ 119.467938][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.470592][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.506604][ T5705] loop4: detected capacity change from 0 to 16 [ 119.517921][ T5705] erofs: (device loop4): mounted with root inode @ nid 36. [ 119.737397][ T5711] binder: 5710:5711 got transaction to invalid handle, 1 [ 119.739551][ T5711] binder: 5711:5710 cannot find target node [ 119.741267][ T5711] binder: 5710:5711 transaction async to 0:0 failed 44/29201/-22, size 0-24 line 3054 [ 119.781176][ T5711] syz.0.424 (5711): drop_caches: 2 [ 119.805124][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.257524][ T4311] Bluetooth: Wrong link type (-22) [ 120.401314][ T4323] Bluetooth: hci0: Invalid handle: 0x0f00 > 0x0eff [ 121.338460][ T5743] device syzkaller0 entered promiscuous mode [ 121.367386][ T5747] binder: 5746:5747 got transaction to invalid handle, 1 [ 121.369427][ T5747] binder: 5747:5746 cannot find target node [ 121.371091][ T5747] binder: 5746:5747 transaction async to 0:0 failed 48/29201/-22, size 0-24 line 3054 [ 121.385118][ T5745] loop0: detected capacity change from 0 to 1024 [ 121.392713][ T5747] syz.3.436 (5747): drop_caches: 2 [ 121.396817][ T5745] ======================================================= [ 121.396817][ T5745] WARNING: The mand mount option has been deprecated and [ 121.396817][ T5745] and is ignored by this kernel. Remove the mand [ 121.396817][ T5745] option from the mount to silence this warning. [ 121.396817][ T5745] ======================================================= [ 121.430527][ T5745] EXT4-fs: Ignoring removed oldalloc option [ 121.432399][ T5745] EXT4-fs: Ignoring removed bh option [ 121.439195][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.439858][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.441767][ T5745] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.452817][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.539754][ T5745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.540309][ T5701] loop1: detected capacity change from 0 to 65536 [ 121.652324][ T5701] XFS (loop1): Mounting V5 Filesystem [ 121.755606][ T5701] XFS (loop1): Ending clean mount [ 121.782094][ T5701] XFS (loop1): Quotacheck needed: Please wait. [ 121.853547][ T5701] XFS (loop1): Quotacheck: Done. [ 122.142153][ T4314] XFS (loop1): Unmounting Filesystem [ 122.262625][ T4308] EXT4-fs (loop0): unmounting filesystem. [ 122.265688][ T5768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.235752][ T4311] Bluetooth: hci3: Invalid handle: 0x0f00 > 0x0eff [ 125.926726][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.869033][ T5800] binder: 5797:5800 got transaction to invalid handle, 1 [ 133.876042][ T5800] binder: 5800:5797 cannot find target node [ 133.895589][ T5800] binder: 5797:5800 transaction async to 0:0 failed 52/29201/-22, size 0-24 line 3054 [ 133.916177][ T5800] syz.1.449 (5800): drop_caches: 2 [ 134.070663][ T4354] binder: undelivered TRANSACTION_ERROR: 29201 [ 135.709314][ T5828] loop1: detected capacity change from 0 to 8192 [ 135.726495][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.729204][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.845144][ T5828] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.895092][ T5828] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 135.899608][ T5828] REISERFS (device loop1): using ordered data mode [ 135.902158][ T5828] reiserfs: using flush barriers [ 135.906244][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 135.909546][ T5828] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.914339][ T5828] REISERFS (device loop1): checking transaction log (loop1) [ 136.099081][ T5840] loop2: detected capacity change from 0 to 256 [ 136.301414][ T5840] FAT-fs (loop2): Directory bread(block 64) failed [ 136.303710][ T5840] FAT-fs (loop2): Directory bread(block 65) failed [ 136.306497][ T5840] FAT-fs (loop2): Directory bread(block 66) failed [ 136.308842][ T5840] FAT-fs (loop2): Directory bread(block 67) failed [ 136.311464][ T5840] FAT-fs (loop2): Directory bread(block 68) failed [ 136.313726][ T5840] FAT-fs (loop2): Directory bread(block 69) failed [ 136.316278][ T5840] FAT-fs (loop2): Directory bread(block 70) failed [ 136.318385][ T5840] FAT-fs (loop2): Directory bread(block 71) failed [ 136.320987][ T5840] FAT-fs (loop2): Directory bread(block 72) failed [ 136.323046][ T5840] FAT-fs (loop2): Directory bread(block 73) failed [ 136.649128][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.652444][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.686044][ T5828] REISERFS (device loop1): Using r5 hash to sort names [ 136.701719][ T5828] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 137.538150][ T5856] binder: 5855:5856 got transaction to invalid handle, 1 [ 137.540785][ T5856] binder: 5856:5855 cannot find target node [ 137.542405][ T5856] binder: 5855:5856 transaction async to 0:0 failed 56/29201/-22, size 0-24 line 3054 [ 137.556638][ T5856] syz.2.467 (5856): drop_caches: 2 [ 137.559686][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.629124][ T5858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'. [ 138.137927][ T5880] loop6: detected capacity change from 0 to 7 [ 138.170510][ T5880] Dev loop6: unable to read RDB block 7 [ 138.172433][ T5880] loop6: unable to read partition table [ 138.191331][ T5880] loop6: partition table beyond EOD, truncated [ 138.193206][ T5880] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.727463][ T5885] binder: 5884:5885 got transaction to invalid handle, 1 [ 138.736397][ T5885] binder: 5885:5884 cannot find target node [ 138.743740][ T5885] binder: 5884:5885 transaction async to 0:0 failed 60/29201/-22, size 0-24 line 3054 [ 138.794182][ T5885] syz.3.479 (5885): drop_caches: 2 [ 138.811920][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.058915][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 139.194535][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.205601][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.277906][ T5915] loop6: detected capacity change from 0 to 7 [ 139.285148][ T5915] Dev loop6: unable to read RDB block 7 [ 139.300530][ T5915] loop6: unable to read partition table [ 139.302573][ T5915] loop6: partition table beyond EOD, truncated [ 139.304456][ T5915] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.845775][ T4361] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.092182][ T4361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.113921][ T4361] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 140.160181][ T4361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.473231][ T5931] binder: 5930:5931 got transaction to invalid handle, 1 [ 140.482484][ T5931] binder: 5931:5930 cannot find target node [ 140.484159][ T5931] binder: 5930:5931 transaction async to 0:0 failed 63/29201/-22, size 0-24 line 3054 [ 140.520919][ T5931] syz.4.495 (5931): drop_caches: 2 [ 140.528085][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 140.560767][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.496'. [ 140.624579][ T4361] usb 1-1: config 0 descriptor?? [ 140.629816][ T4361] pwc: Askey VC010 type 2 USB webcam detected. [ 140.909199][ T5950] loop6: detected capacity change from 0 to 7 [ 140.920289][ T5950] Dev loop6: unable to read RDB block 7 [ 140.921924][ T5950] loop6: unable to read partition table [ 140.923591][ T5950] loop6: partition table beyond EOD, truncated [ 140.956929][ T5950] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.033474][ T4361] pwc: recv_control_msg error -32 req 02 val 2b00 [ 141.036364][ T4361] pwc: recv_control_msg error -32 req 02 val 2700 [ 141.041542][ T4361] pwc: recv_control_msg error -32 req 02 val 2c00 [ 141.085343][ T5960] binder: tried to use weak ref as strong ref [ 141.087469][ T5960] binder: 5959:5960 Acquire 1 refcount change on invalid ref 0 ret -22 [ 141.090465][ T5960] binder: 5959:5960 got transaction to invalid handle, 1 [ 141.092660][ T5960] binder: 5960:5959 cannot find target node [ 141.094501][ T5960] binder: 5959:5960 transaction async to 0:0 failed 66/29201/-22, size 0-24 line 3054 [ 141.110058][ T5960] syz.3.507 (5960): drop_caches: 2 [ 141.113496][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 141.244778][ T4361] pwc: recv_control_msg error -32 req 04 val 1300 [ 141.247576][ T4361] pwc: recv_control_msg error -32 req 04 val 1400 [ 141.250124][ T4361] pwc: recv_control_msg error -32 req 02 val 2000 [ 141.252711][ T4361] pwc: recv_control_msg error -32 req 02 val 2100 [ 141.268382][ T4361] pwc: recv_control_msg error -32 req 04 val 1500 [ 141.277905][ T4361] pwc: recv_control_msg error -32 req 02 val 2500 [ 141.282828][ T4361] pwc: recv_control_msg error -32 req 02 val 2400 [ 141.292939][ T4361] pwc: recv_control_msg error -32 req 02 val 2600 [ 141.301557][ T4361] pwc: recv_control_msg error -32 req 02 val 2900 [ 141.311263][ T4361] pwc: recv_control_msg error -32 req 02 val 2800 [ 142.671664][ T4323] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 142.675076][ T4323] Bluetooth: hci3: Injecting HCI hardware error event [ 142.677752][ T4361] pwc: recv_control_msg error -71 req 04 val 1200 [ 142.683631][ T4323] Bluetooth: hci3: hardware error 0x00 [ 142.776356][ T4361] pwc: Registered as video11. [ 142.804455][ T4361] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 142.835527][ T4361] usb 1-1: USB disconnect, device number 4 [ 142.924168][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.511'. [ 143.259467][ T4311] Bluetooth: hci3: unexpected event for opcode 0x080c [ 143.325662][ T5996] binder: tried to use weak ref as strong ref [ 143.327700][ T5996] binder: 5995:5996 Acquire 1 refcount change on invalid ref 0 ret -22 [ 143.331040][ T5996] binder: 5995:5996 got transaction to invalid handle, 1 [ 143.337507][ T5996] binder: 5996:5995 cannot find target node [ 143.342811][ T5996] binder: 5995:5996 transaction async to 0:0 failed 69/29201/-22, size 0-24 line 3054 [ 143.369066][ T5996] syz.1.518 (5996): drop_caches: 2 [ 143.396281][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.594833][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.523'. [ 145.034529][ T6039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.528'. [ 145.043608][ T6039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.528'. [ 145.125586][ T4323] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 145.803769][ T6045] loop3: detected capacity change from 0 to 1024 [ 145.815965][ T6045] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 145.819154][ T6045] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 145.822214][ T6047] binder: 6046:6047 ioctl 4018620d 0 returned -22 [ 145.831517][ T6047] binder: tried to use weak ref as strong ref [ 145.838320][ T6045] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.530: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 145.841443][ T6047] binder: 6046:6047 Acquire 1 refcount change on invalid ref 0 ret -22 [ 145.857313][ T6047] binder: 6046:6047 got transaction to invalid handle, 1 [ 145.859423][ T6047] binder: 6047:6046 cannot find target node [ 145.861080][ T6047] binder: 6046:6047 transaction async to 0:0 failed 72/29201/-22, size 0-24 line 3054 [ 145.904419][ T6047] syz.2.532 (6047): drop_caches: 2 [ 145.912858][ T6045] EXT4-fs (loop3): no journal found [ 145.914283][ T6045] EXT4-fs (loop3): can't get journal size [ 145.943452][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.982504][ T6045] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.781999][ T4316] EXT4-fs (loop3): unmounting filesystem. [ 146.873815][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.537'. [ 147.185201][ T6073] loop2: detected capacity change from 0 to 2048 [ 148.066877][ T6081] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.338688][ T6086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.543'. [ 148.348183][ T6086] netlink: 40 bytes leftover after parsing attributes in process `syz.0.543'. [ 148.907750][ T6087] binder: 6084:6087 ioctl 4018620d 0 returned -22 [ 148.923789][ T6085] binder: tried to use weak ref as strong ref [ 148.949775][ T6085] binder: 6084:6085 Acquire 1 refcount change on invalid ref 0 ret -22 [ 148.960108][ T6085] binder: 6084:6085 got transaction to invalid handle, 1 [ 148.962043][ T6085] binder: 6085:6084 cannot find target node [ 148.988464][ T6085] binder: 6084:6085 transaction async to 0:0 failed 75/29201/-22, size 0-24 line 3054 [ 149.043318][ T6085] syz.1.545 (6085): drop_caches: 2 [ 149.109050][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.858937][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 151.307717][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.559'. [ 151.364408][ T6129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.559'. [ 151.883849][ T6129] Can't find ip_set type hash:ip,p [ 151.885820][ T6128] Can't find ip_set type hash:ip,p [ 152.113159][ T6139] binder: 6137:6139 ioctl 4018620d 0 returned -22 [ 152.138168][ T6139] binder: tried to use weak ref as strong ref [ 152.139968][ T6139] binder: 6137:6139 Acquire 1 refcount change on invalid ref 0 ret -22 [ 152.164435][ T6139] binder: 6137:6139 got transaction to invalid handle, 1 [ 152.169853][ T6139] binder: 6139:6137 cannot find target node [ 152.171470][ T6139] binder: 6137:6139 transaction async to 0:0 failed 78/29201/-22, size 0-24 line 3054 [ 152.194518][ T6139] syz.0.562 (6139): drop_caches: 2 [ 152.205673][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.232014][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'. [ 152.761295][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 152.816411][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 153.341720][ T6164] Can't find ip_set type hash:ip,p [ 153.343739][ T6163] Can't find ip_set type hash:ip,p [ 153.737473][ T6174] binder: 6173:6174 ioctl c0306201 0 returned -14 [ 153.764511][ T6174] binder: 6173:6174 got transaction to invalid handle, 1 [ 153.803409][ T6174] binder: 6174:6173 cannot find target node [ 153.805003][ T6174] binder: 6173:6174 transaction async to 0:0 failed 82/29201/-22, size 0-24 line 3054 [ 153.814544][ T6174] syz.2.576 (6174): drop_caches: 2 [ 153.827802][ T6178] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 153.867564][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.182358][ T6191] loop2: detected capacity change from 0 to 64 [ 154.330896][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 154.586707][ T4311] Bluetooth: hci0: command 0x0406 tx timeout [ 154.601721][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.585'. [ 154.657744][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.585'. [ 155.181059][ T6206] Can't find ip_set type hash:ip,p [ 155.183072][ T6205] Can't find ip_set type hash:ip,p [ 155.218870][ T6203] netlink: 280 bytes leftover after parsing attributes in process `syz.1.580'. [ 155.627867][ T6219] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 156.320082][ T6221] binder: 6220:6221 ioctl c0306201 0 returned -14 [ 156.322546][ T6221] binder: 6220:6221 got transaction to invalid handle, 1 [ 156.324582][ T6221] binder: 6221:6220 cannot find target node [ 156.352455][ T6221] binder: 6220:6221 transaction async to 0:0 failed 86/29201/-22, size 0-24 line 3054 [ 156.376897][ T6221] syz.3.592 (6221): drop_caches: 2 [ 156.427011][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.593513][ T4311] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 158.206556][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 158.263655][ T6277] binder: 6276:6277 ioctl c0306201 0 returned -14 [ 158.268567][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 158.284609][ T6277] binder: 6276:6277 got transaction to invalid handle, 1 [ 158.293375][ T6277] binder: 6277:6276 cannot find target node [ 158.297752][ T6277] binder: 6276:6277 transaction async to 0:0 failed 90/29201/-22, size 0-24 line 3054 [ 158.316600][ T6277] syz.2.609 (6277): drop_caches: 2 [ 158.322761][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.950446][ T6318] binder: 6317:6318 got transaction to invalid handle, 1 [ 160.952841][ T6318] binder: 6318:6317 cannot find target node [ 160.960878][ T6318] binder: 6317:6318 transaction async to 0:0 failed 94/29201/-22, size 0-24 line 3054 [ 161.102546][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.182446][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.209033][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.941019][ T6343] netlink: 28 bytes leftover after parsing attributes in process `syz.0.627'. [ 163.643986][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 163.814370][ T6363] binder: 6362:6363 got transaction to invalid handle, 1 [ 163.816720][ T6363] binder: 6363:6362 cannot find target node [ 163.818439][ T6363] binder: 6362:6363 transaction async to 0:0 failed 98/29201/-22, size 0-24 line 3054 [ 163.829031][ T6363] syz.4.633 (6363): drop_caches: 2 [ 163.833304][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 163.845576][ T4318] Bluetooth: hci0: command 0x0406 tx timeout [ 163.848973][ T4323] Bluetooth: hci1: command 0x0406 tx timeout [ 163.851753][ T4313] Bluetooth: hci2: command 0x0406 tx timeout [ 164.192485][ T6327] block nbd1: shutting down sockets [ 165.804169][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 166.952832][ T6404] binder: 6403:6404 got transaction to invalid handle, 1 [ 166.954861][ T6404] binder: 6404:6403 cannot find target node [ 166.999690][ T6404] binder: 6403:6404 transaction async to 0:0 failed 102/29201/-22, size 0-24 line 3054 [ 167.040303][ T6404] syz.2.644 (6404): drop_caches: 2 [ 167.211415][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.305115][ T6410] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 167.418173][ T6413] netlink: 'syz.2.647': attribute type 10 has an invalid length. [ 167.662873][ T6413] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.845950][ T6428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.653'. [ 168.922662][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.946831][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.096488][ T6446] binder: 6443:6446 got transaction to invalid handle, 1 [ 169.098451][ T6446] binder: 6446:6443 cannot find target node [ 169.100013][ T6446] binder: 6443:6446 transaction async to 0:0 failed 106/29201/-22, size 0-24 line 3054 [ 169.133595][ T6446] syz.4.657 (6446): drop_caches: 2 [ 169.144053][ T4371] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.259591][ T6452] loop4: detected capacity change from 0 to 512 [ 169.302352][ T6452] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.659: iget: bad extended attribute block 1 [ 169.306562][ T6452] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.659: couldn't read orphan inode 15 (err -117) [ 169.320704][ T6452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.386979][ T4307] EXT4-fs (loop4): unmounting filesystem. [ 171.637419][ T6476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.666'. [ 171.783374][ T6484] binder: 6483:6484 got transaction to invalid handle, 1 [ 171.801296][ T6484] binder: 6484:6483 cannot find target node [ 171.802939][ T6484] binder: 6483:6484 transaction async to 0:0 failed 110/29201/-22, size 0-24 line 3054 [ 171.830500][ T6484] syz.2.669 (6484): drop_caches: 2 [ 171.838019][ T4361] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.614970][ T6518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.679'. [ 174.762357][ T6522] binder: 6519:6522 got transaction to invalid handle, 1 [ 174.764283][ T6522] binder: 6522:6519 cannot find target node [ 174.781298][ T6522] binder: 6519:6522 transaction async to 0:0 failed 114/29201/-22, size 0-24 line 3054 [ 174.816938][ T6522] syz.1.680 (6522): drop_caches: 2 [ 174.824792][ T4368] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.867349][ T6528] loop3: detected capacity change from 0 to 512 [ 174.920149][ T6528] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.962246][ T6528] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 175.169206][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.686'. [ 176.018300][ T4311] Bluetooth: hci4: command 0x2016 tx timeout [ 176.193181][ T6546] loop1: detected capacity change from 0 to 512 [ 177.124953][ T6546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 177.387624][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.693'. [ 177.744470][ T4314] EXT4-fs (loop1): unmounting filesystem. [ 178.284271][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.698'. [ 178.363721][ T6576] binder: 6575:6576 tried to acquire reference to desc 0, got 1 instead [ 178.397994][ T6576] binder: 6575:6576 ioctl c0306201 0 returned -14 [ 178.415391][ T4313] Bluetooth: hci2: command 0x2016 tx timeout [ 178.449791][ T6576] syz.1.694 (6576): drop_caches: 2 [ 178.598384][ T4311] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 178.646945][ T6581] loop0: detected capacity change from 0 to 2048 [ 178.661349][ T6581] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.723332][ T6585] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.727511][ T6581] syz.0.700: attempt to access beyond end of device [ 178.727511][ T6581] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 179.742545][ T6606] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 180.443880][ T6613] binder: 6612:6613 tried to acquire reference to desc 0, got 1 instead [ 180.453629][ T6613] binder: 6612:6613 ioctl c0306201 0 returned -14 [ 180.460948][ T6613] syz.0.712 (6613): drop_caches: 2 [ 180.534610][ T4313] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 180.573449][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.714'. [ 180.685012][ T6628] loop1: detected capacity change from 0 to 512 [ 180.690916][ T6628] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.719: casefold flag without casefold feature [ 180.694618][ T6628] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.719: couldn't read orphan inode 15 (err -117) [ 180.700521][ T6628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.657323][ T4314] EXT4-fs (loop1): unmounting filesystem. [ 182.968153][ T6651] binder: 6648:6651 tried to acquire reference to desc 0, got 1 instead [ 182.974173][ T6651] binder: 6648:6651 ioctl c0306201 0 returned -14 [ 182.981285][ T6651] syz.1.726 (6651): drop_caches: 2 [ 183.877984][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.730'. [ 183.974265][ T4313] Bluetooth: hci0: Invalid handle: 0x0f00 > 0x0eff [ 184.349240][ T6676] loop0: detected capacity change from 0 to 256 [ 184.917634][ T6687] binder: 6686:6687 tried to acquire reference to desc 0, got 1 instead [ 184.949474][ T6687] syz.2.738 (6687): drop_caches: 2 [ 186.442257][ T4313] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 186.522849][ T4313] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 186.870278][ T6727] binder: 6726:6727 tried to acquire reference to desc 0, got 1 instead [ 186.907588][ T6727] syz.2.752 (6727): drop_caches: 2 [ 187.375923][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.950731][ T6753] device vlan2 entered promiscuous mode [ 187.964157][ T6753] device macvlan1 entered promiscuous mode [ 188.228233][ T4313] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 188.241799][ T6758] binder: 6757:6758 tried to acquire reference to desc 0, got 1 instead [ 188.252982][ T6758] syz.3.765 (6758): drop_caches: 2 [ 193.287011][ T4313] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 194.130344][ T6843] device netdevsim0 entered promiscuous mode [ 194.186507][ T6843] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.547838][ T6850] loop0: detected capacity change from 0 to 1024 [ 194.550429][ T6850] ext4: Bad value for 'jqfmt' [ 194.607452][ T6832] loop2: detected capacity change from 0 to 32768 [ 194.608711][ T6230] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.733751][ T6832] XFS (loop2): Mounting V5 Filesystem [ 194.809341][ T6832] XFS (loop2): Ending clean mount [ 194.854469][ T6832] XFS (loop2): Quotacheck needed: Please wait. [ 194.898463][ T6832] XFS (loop2): Quotacheck: Done. [ 195.133474][ T4306] XFS (loop2): Unmounting Filesystem [ 195.724690][ T6884] device bridge1 entered promiscuous mode [ 197.374846][ T6907] syz_tun: tun_net_xmit 42 [ 197.396332][ T6907] syz_tun: tun_net_xmit 42 [ 197.406090][ T6907] syz_tun: tun_net_xmit 42 [ 197.407699][ T6907] syz_tun: tun_net_xmit 42 [ 197.432318][ T6907] syz_tun: tun_net_xmit 42 [ 197.447015][ T6907] syz_tun: tun_net_xmit 42 [ 197.464213][ T6912] netlink: 'syz.2.813': attribute type 13 has an invalid length. [ 197.484178][ T6907] syz_tun: tun_net_xmit 42 [ 197.496442][ T6912] netlink: 'syz.2.813': attribute type 17 has an invalid length. [ 197.516858][ T6907] syz_tun: tun_net_xmit 42 [ 197.518501][ T6907] syz_tun: tun_net_xmit 42 [ 197.549470][ T6907] syz_tun: tun_net_xmit 42 [ 197.572668][ T6907] syz_tun: tun_net_xmit 42 [ 197.599587][ T6907] syz_tun: tun_net_xmit 42 [ 197.615002][ T6907] syz_tun: tun_net_xmit 42 [ 197.630665][ T6907] syz_tun: tun_net_xmit 42 [ 197.656255][ T6907] syz_tun: tun_net_xmit 42 [ 197.677242][ T6907] syz_tun: tun_net_xmit 42 [ 197.694431][ T6907] syz_tun: tun_net_xmit 42 [ 197.713477][ T6907] syz_tun: tun_net_xmit 42 [ 197.741084][ T6907] syz_tun: tun_net_xmit 42 [ 197.800333][ T6907] syz_tun: tun_net_xmit 42 [ 197.801721][ T6907] syz_tun: tun_net_xmit 42 [ 197.803004][ T6907] syz_tun: tun_net_xmit 42 [ 197.804334][ T6907] syz_tun: tun_net_xmit 42 [ 197.805979][ T6907] syz_tun: tun_net_xmit 42 [ 197.807313][ T6907] syz_tun: tun_net_xmit 42 [ 197.808673][ T6907] syz_tun: tun_net_xmit 42 [ 197.809972][ T6907] syz_tun: tun_net_xmit 42 [ 197.811372][ T6907] syz_tun: tun_net_xmit 42 [ 197.812721][ T6907] syz_tun: tun_net_xmit 42 [ 197.814055][ T6907] syz_tun: tun_net_xmit 42 [ 197.815638][ T6907] syz_tun: tun_net_xmit 42 [ 197.816944][ T6907] syz_tun: tun_net_xmit 42 [ 197.818374][ T6907] syz_tun: tun_net_xmit 42 [ 197.819716][ T6907] syz_tun: tun_net_xmit 42 [ 197.821151][ T6907] syz_tun: tun_net_xmit 42 [ 197.822430][ T6907] syz_tun: tun_net_xmit 42 [ 197.823727][ T6907] syz_tun: tun_net_xmit 42 [ 197.825079][ T6907] syz_tun: tun_net_xmit 42 [ 197.826431][ T6907] syz_tun: tun_net_xmit 110 [ 197.827836][ T6907] syz_tun: tun_net_xmit 42 [ 197.829147][ T6907] syz_tun: tun_net_xmit 42 [ 197.830504][ T6907] syz_tun: tun_net_xmit 42 [ 197.831812][ T6907] syz_tun: tun_net_xmit 42 [ 197.833131][ T6907] syz_tun: tun_net_xmit 42 [ 197.834349][ T6907] syz_tun: tun_net_xmit 42 [ 197.835754][ T6907] syz_tun: tun_net_xmit 42 [ 197.837040][ T6907] syz_tun: tun_net_xmit 42 [ 197.838281][ T6907] syz_tun: tun_net_xmit 42 [ 197.839563][ T6907] syz_tun: tun_net_xmit 42 [ 197.840936][ T6907] syz_tun: tun_net_xmit 42 [ 197.842234][ T6907] syz_tun: tun_net_xmit 42 [ 197.843471][ T6907] syz_tun: tun_net_xmit 42 [ 197.844778][ T6907] syz_tun: tun_net_xmit 42 [ 197.846268][ T6907] syz_tun: tun_net_xmit 42 [ 197.847558][ T6907] syz_tun: tun_net_xmit 42 [ 197.848823][ T6907] syz_tun: tun_net_xmit 42 [ 197.850284][ T6907] syz_tun: tun_net_xmit 42 [ 197.851506][ T6907] syz_tun: tun_net_xmit 42 [ 197.853070][ T6907] syz_tun: tun_net_xmit 42 [ 197.854408][ T6907] syz_tun: tun_net_xmit 42 [ 197.856758][ T6907] syz_tun: tun_net_xmit 42 [ 197.858126][ T6907] syz_tun: tun_net_xmit 42 [ 197.859442][ T6907] syz_tun: tun_net_xmit 42 [ 197.860832][ T6907] syz_tun: tun_net_xmit 42 [ 197.862055][ T6907] syz_tun: tun_net_xmit 42 [ 197.863486][ T6907] syz_tun: tun_net_xmit 42 [ 197.863896][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.864752][ T6907] syz_tun: tun_net_xmit 42 [ 197.868354][ T6907] syz_tun: tun_net_xmit 42 [ 197.869694][ T6907] syz_tun: tun_net_xmit 42 [ 197.871058][ T6907] syz_tun: tun_net_xmit 42 [ 197.872354][ T6907] syz_tun: tun_net_xmit 42 [ 197.873665][ T6907] syz_tun: tun_net_xmit 42 [ 197.874946][ T6907] syz_tun: tun_net_xmit 42 [ 197.876404][ T6907] syz_tun: tun_net_xmit 42 [ 197.877720][ T6907] syz_tun: tun_net_xmit 42 [ 197.879050][ T6907] syz_tun: tun_net_xmit 42 [ 197.880299][ T6907] syz_tun: tun_net_xmit 42 [ 197.881672][ T6907] syz_tun: tun_net_xmit 42 [ 197.883022][ T6907] syz_tun: tun_net_xmit 42 [ 197.884337][ T6907] syz_tun: tun_net_xmit 42 [ 197.885746][ T6907] syz_tun: tun_net_xmit 42 [ 197.887035][ T6907] syz_tun: tun_net_xmit 42 [ 197.888332][ T6907] syz_tun: tun_net_xmit 42 [ 197.889630][ T6907] syz_tun: tun_net_xmit 42 [ 197.890991][ T6907] syz_tun: tun_net_xmit 42 [ 197.892291][ T6907] syz_tun: tun_net_xmit 42 [ 197.893583][ T6907] syz_tun: tun_net_xmit 42 [ 197.894921][ T6907] syz_tun: tun_net_xmit 42 [ 197.896329][ T6907] syz_tun: tun_net_xmit 42 [ 197.897626][ T6907] syz_tun: tun_net_xmit 42 [ 197.898988][ T6907] syz_tun: tun_net_xmit 42 [ 197.900311][ T6907] syz_tun: tun_net_xmit 42 [ 197.901648][ T6907] syz_tun: tun_net_xmit 42 [ 197.902950][ T6907] syz_tun: tun_net_xmit 42 [ 197.904310][ T6907] syz_tun: tun_net_xmit 42 [ 197.905880][ T6907] syz_tun: tun_net_xmit 42 [ 197.907149][ T6907] syz_tun: tun_net_xmit 42 [ 197.908492][ T6907] syz_tun: tun_net_xmit 42 [ 197.909754][ T6907] syz_tun: tun_net_xmit 42 [ 197.911051][ T6907] syz_tun: tun_net_xmit 42 [ 197.912425][ T6907] syz_tun: tun_net_xmit 42 [ 197.913673][ T6907] syz_tun: tun_net_xmit 42 [ 197.914968][ T6907] syz_tun: tun_net_xmit 42 [ 197.916376][ T6907] syz_tun: tun_net_xmit 42 [ 197.917648][ T6907] syz_tun: tun_net_xmit 42 [ 197.919037][ T6907] syz_tun: tun_net_xmit 42 [ 197.920427][ T6907] syz_tun: tun_net_xmit 42 [ 197.921784][ T6907] syz_tun: tun_net_xmit 42 [ 197.923170][ T6907] syz_tun: tun_net_xmit 42 [ 197.924497][ T6907] syz_tun: tun_net_xmit 42 [ 197.926274][ T6907] syz_tun: tun_net_xmit 42 [ 197.927756][ T6907] syz_tun: tun_net_xmit 42 [ 197.929185][ T6907] syz_tun: tun_net_xmit 42 [ 197.930522][ T6907] syz_tun: tun_net_xmit 42 [ 197.931871][ T6907] syz_tun: tun_net_xmit 42 [ 197.933121][ T6907] syz_tun: tun_net_xmit 42 [ 197.934468][ T6907] syz_tun: tun_net_xmit 42 [ 197.935884][ T6907] syz_tun: tun_net_xmit 42 [ 197.937311][ T6907] syz_tun: tun_net_xmit 42 [ 197.938656][ T6907] syz_tun: tun_net_xmit 42 [ 197.939965][ T6907] syz_tun: tun_net_xmit 42 [ 197.941316][ T6907] syz_tun: tun_net_xmit 42 [ 197.942593][ T6907] syz_tun: tun_net_xmit 42 [ 197.943920][ T6907] syz_tun: tun_net_xmit 42 [ 197.965423][ T6907] syz_tun: tun_net_xmit 42 [ 197.966962][ T6907] syz_tun: tun_net_xmit 42 [ 197.968291][ T6907] syz_tun: tun_net_xmit 42 [ 197.969674][ T6907] syz_tun: tun_net_xmit 42 [ 197.970990][ T6907] syz_tun: tun_net_xmit 42 [ 197.972359][ T6907] syz_tun: tun_net_xmit 42 [ 197.973671][ T6907] syz_tun: tun_net_xmit 42 [ 197.974936][ T6907] syz_tun: tun_net_xmit 42 [ 198.045558][ T6907] syz_tun: tun_net_xmit 42 [ 198.047054][ T6907] syz_tun: tun_net_xmit 42 [ 198.050679][ T6907] syz_tun: tun_net_xmit 42 [ 198.052244][ T6907] syz_tun: tun_net_xmit 42 [ 198.053701][ T6907] syz_tun: tun_net_xmit 42 [ 198.071073][ T6907] syz_tun: tun_net_xmit 42 [ 198.072679][ T6907] syz_tun: tun_net_xmit 42 [ 198.074062][ T6907] syz_tun: tun_net_xmit 42 [ 198.084586][ T6907] syz_tun: tun_net_xmit 42 [ 198.086221][ T6907] syz_tun: tun_net_xmit 42 [ 198.090825][ T6907] syz_tun: tun_net_xmit 42 [ 198.092275][ T6907] syz_tun: tun_net_xmit 42 [ 198.101010][ T6907] syz_tun: tun_net_xmit 42 [ 198.102442][ T6907] syz_tun: tun_net_xmit 42 [ 198.103882][ T6907] syz_tun: tun_net_xmit 42 [ 198.114069][ T6907] syz_tun: tun_net_xmit 42 [ 198.115607][ T6907] syz_tun: tun_net_xmit 42 [ 198.116973][ T6907] syz_tun: tun_net_xmit 42 [ 198.118314][ T6907] syz_tun: tun_net_xmit 42 [ 198.124179][ T6907] syz_tun: tun_net_xmit 42 [ 198.134345][ T6907] syz_tun: tun_net_xmit 42 [ 198.215710][ T6912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.234419][ T6907] syz_tun: tun_net_xmit 42 [ 198.253995][ T6907] syz_tun: tun_net_xmit 42 [ 198.255713][ T6907] syz_tun: tun_net_xmit 42 [ 198.257784][ T6907] syz_tun: tun_net_xmit 42 [ 198.259094][ T6907] syz_tun: tun_net_xmit 42 [ 198.260407][ T6907] syz_tun: tun_net_xmit 42 [ 198.262211][ T6907] syz_tun: tun_net_xmit 42 [ 198.263513][ T6907] syz_tun: tun_net_xmit 42 [ 198.299795][ T6907] syz_tun: tun_net_xmit 42 [ 198.301157][ T6907] syz_tun: tun_net_xmit 42 [ 198.302447][ T6907] syz_tun: tun_net_xmit 42 [ 198.303752][ T6907] syz_tun: tun_net_xmit 42 [ 198.305123][ T6907] syz_tun: tun_net_xmit 42 [ 198.351446][ T6907] syz_tun: tun_net_xmit 42 [ 198.352778][ T6907] syz_tun: tun_net_xmit 42 [ 198.354068][ T6907] syz_tun: tun_net_xmit 42 [ 198.360701][ T6907] syz_tun: tun_net_xmit 42 [ 198.362094][ T6907] syz_tun: tun_net_xmit 42 [ 198.363478][ T6907] syz_tun: tun_net_xmit 42 [ 198.365481][ T113] syz_tun: tun_net_xmit 110 [ 198.401214][ T6907] syz_tun: tun_net_xmit 42 [ 198.408015][ T6907] syz_tun: tun_net_xmit 42 [ 198.413343][ T6907] syz_tun: tun_net_xmit 42 [ 198.422983][ T6907] syz_tun: tun_net_xmit 42 [ 198.424532][ T6907] syz_tun: tun_net_xmit 42 [ 198.439429][ T6907] syz_tun: tun_net_xmit 42 [ 198.450194][ T6907] syz_tun: tun_net_xmit 42 [ 198.459842][ T6907] syz_tun: tun_net_xmit 42 [ 198.461307][ T6907] syz_tun: tun_net_xmit 42 [ 198.476463][ T6907] syz_tun: tun_net_xmit 42 [ 198.482512][ T6907] syz_tun: tun_net_xmit 42 [ 198.491881][ T6907] syz_tun: tun_net_xmit 42 [ 198.500262][ T6907] syz_tun: tun_net_xmit 42 [ 198.507562][ T6907] syz_tun: tun_net_xmit 42 [ 198.514652][ T6907] syz_tun: tun_net_xmit 42 [ 198.523085][ T6907] syz_tun: tun_net_xmit 42 [ 198.531596][ T6907] syz_tun: tun_net_xmit 42 [ 198.539041][ T6907] syz_tun: tun_net_xmit 42 [ 198.548640][ T6907] syz_tun: tun_net_xmit 42 [ 198.560252][ T6907] syz_tun: tun_net_xmit 42 [ 198.568581][ T6907] syz_tun: tun_net_xmit 42 [ 198.577869][ T6907] syz_tun: tun_net_xmit 42 [ 198.585611][ T6907] syz_tun: tun_net_xmit 42 [ 198.592896][ T6907] syz_tun: tun_net_xmit 42 [ 198.602603][ T6907] syz_tun: tun_net_xmit 42 [ 198.604195][ T6907] syz_tun: tun_net_xmit 42 [ 198.618836][ T6907] syz_tun: tun_net_xmit 42 [ 198.627104][ T6907] syz_tun: tun_net_xmit 42 [ 198.633020][ T6907] syz_tun: tun_net_xmit 42 [ 198.641565][ T6907] syz_tun: tun_net_xmit 42 [ 198.651015][ T6907] syz_tun: tun_net_xmit 42 [ 198.662119][ T6907] syz_tun: tun_net_xmit 42 [ 198.674032][ T6907] syz_tun: tun_net_xmit 42 [ 198.682359][ T6907] syz_tun: tun_net_xmit 42 [ 198.689897][ T6907] syz_tun: tun_net_xmit 42 [ 198.700627][ T6907] syz_tun: tun_net_xmit 42 [ 198.706813][ T6907] syz_tun: tun_net_xmit 42 [ 198.714676][ T6907] syz_tun: tun_net_xmit 42 [ 198.724846][ T6907] syz_tun: tun_net_xmit 42 [ 198.732097][ T6907] syz_tun: tun_net_xmit 42 [ 198.741884][ T6907] syz_tun: tun_net_xmit 42 [ 198.752099][ T6907] syz_tun: tun_net_xmit 42 [ 198.758168][ T6907] syz_tun: tun_net_xmit 42 [ 198.764102][ T6907] syz_tun: tun_net_xmit 42 [ 198.779280][ T6907] syz_tun: tun_net_xmit 42 [ 198.785188][ T6907] syz_tun: tun_net_xmit 42 [ 198.791454][ T6907] syz_tun: tun_net_xmit 42 [ 198.814556][ T6907] syz_tun: tun_net_xmit 42 [ 198.822912][ T6907] syz_tun: tun_net_xmit 42 [ 198.830191][ T6907] syz_tun: tun_net_xmit 42 [ 198.839361][ T6907] syz_tun: tun_net_xmit 42 [ 198.840880][ T6907] syz_tun: tun_net_xmit 42 [ 198.853580][ T6907] syz_tun: tun_net_xmit 42 [ 198.861744][ T6907] syz_tun: tun_net_xmit 42 [ 198.870090][ T6907] syz_tun: tun_net_xmit 42 [ 198.881738][ T6907] syz_tun: tun_net_xmit 42 [ 198.892337][ T6907] syz_tun: tun_net_xmit 42 [ 198.901520][ T6907] syz_tun: tun_net_xmit 42 [ 198.903099][ T6907] syz_tun: tun_net_xmit 42 [ 198.916083][ T6907] syz_tun: tun_net_xmit 42 [ 198.926004][ T6907] syz_tun: tun_net_xmit 42 [ 198.933156][ T6907] syz_tun: tun_net_xmit 42 [ 198.942361][ T6907] syz_tun: tun_net_xmit 42 [ 198.943870][ T6907] syz_tun: tun_net_xmit 42 [ 198.963570][ T6907] syz_tun: tun_net_xmit 42 [ 198.973905][ T6907] syz_tun: tun_net_xmit 42 [ 198.985150][ T6907] syz_tun: tun_net_xmit 42 [ 198.995510][ T6907] syz_tun: tun_net_xmit 42 [ 199.006404][ T6907] syz_tun: tun_net_xmit 42 [ 199.014515][ T6907] syz_tun: tun_net_xmit 42 [ 199.024114][ T6907] syz_tun: tun_net_xmit 42 [ 199.033470][ T6907] syz_tun: tun_net_xmit 42 [ 199.035052][ T6907] syz_tun: tun_net_xmit 42 [ 199.050317][ T6907] syz_tun: tun_net_xmit 42 [ 199.056269][ T6907] syz_tun: tun_net_xmit 42 [ 199.065635][ T6907] syz_tun: tun_net_xmit 42 [ 199.071542][ T6907] syz_tun: tun_net_xmit 42 [ 199.080600][ T6907] syz_tun: tun_net_xmit 42 [ 199.094800][ T6907] syz_tun: tun_net_xmit 42 [ 199.115489][ T6907] syz_tun: tun_net_xmit 42 [ 199.116875][ T6907] syz_tun: tun_net_xmit 42 [ 199.118168][ T6907] syz_tun: tun_net_xmit 42 [ 199.119438][ T6907] syz_tun: tun_net_xmit 42 [ 199.144984][ T6907] syz_tun: tun_net_xmit 42 [ 199.151364][ T6907] syz_tun: tun_net_xmit 42 [ 199.152687][ T6907] syz_tun: tun_net_xmit 42 [ 199.154082][ T6907] syz_tun: tun_net_xmit 42 [ 199.212264][ T6907] syz_tun: tun_net_xmit 42 [ 199.213698][ T6907] syz_tun: tun_net_xmit 42 [ 199.214963][ T6907] syz_tun: tun_net_xmit 42 [ 199.230541][ T6907] syz_tun: tun_net_xmit 42 [ 199.231934][ T6907] syz_tun: tun_net_xmit 42 [ 199.233333][ T6907] syz_tun: tun_net_xmit 42 [ 199.234667][ T6907] syz_tun: tun_net_xmit 42 [ 199.261388][ T6907] syz_tun: tun_net_xmit 42 [ 199.262760][ T6907] syz_tun: tun_net_xmit 42 [ 199.264015][ T6907] syz_tun: tun_net_xmit 42 [ 199.280266][ T4311] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 199.286149][ T6907] syz_tun: tun_net_xmit 42 [ 199.287544][ T6907] syz_tun: tun_net_xmit 42 [ 199.288848][ T6907] syz_tun: tun_net_xmit 42 [ 199.290218][ T6907] syz_tun: tun_net_xmit 42 [ 199.305123][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.311953][ T6907] syz_tun: tun_net_xmit 42 [ 199.312034][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.314894][ T6907] syz_tun: tun_net_xmit 42 [ 199.326281][ T6907] syz_tun: tun_net_xmit 42 [ 199.332685][ T6907] syz_tun: tun_net_xmit 42 [ 199.333932][ T6907] syz_tun: tun_net_xmit 42 [ 199.350742][ T6907] syz_tun: tun_net_xmit 42 [ 199.352032][ T6907] syz_tun: tun_net_xmit 42 [ 199.354019][ T6907] syz_tun: tun_net_xmit 42 [ 199.360099][ T6907] syz_tun: tun_net_xmit 42 [ 199.363804][ T6907] syz_tun: tun_net_xmit 42 [ 199.365187][ T6907] syz_tun: tun_net_xmit 42 [ 199.371717][ T6907] syz_tun: tun_net_xmit 42 [ 199.373622][ T6907] syz_tun: tun_net_xmit 42 [ 199.375126][ T6907] syz_tun: tun_net_xmit 42 [ 199.385586][ T6907] syz_tun: tun_net_xmit 42 [ 199.386989][ T6907] syz_tun: tun_net_xmit 42 [ 199.388952][ T6907] syz_tun: tun_net_xmit 42 [ 199.390332][ T6907] syz_tun: tun_net_xmit 42 [ 199.391691][ T6907] syz_tun: tun_net_xmit 42 [ 199.400969][ T6907] syz_tun: tun_net_xmit 42 [ 199.402348][ T6907] syz_tun: tun_net_xmit 42 [ 199.403854][ T6907] syz_tun: tun_net_xmit 42 [ 199.406743][ T6907] syz_tun: tun_net_xmit 42 [ 199.408087][ T6907] syz_tun: tun_net_xmit 42 [ 199.409486][ T6907] syz_tun: tun_net_xmit 42 [ 199.411053][ T6907] syz_tun: tun_net_xmit 42 [ 199.412425][ T6907] syz_tun: tun_net_xmit 42 [ 199.413722][ T6907] syz_tun: tun_net_xmit 42 [ 199.419214][ T6930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.821'. [ 199.434913][ T6907] syz_tun: tun_net_xmit 42 [ 199.437122][ T6907] syz_tun: tun_net_xmit 42 [ 199.438503][ T6907] syz_tun: tun_net_xmit 42 [ 199.439991][ T6907] syz_tun: tun_net_xmit 42 [ 199.441337][ T6907] syz_tun: tun_net_xmit 42 [ 199.442686][ T6907] syz_tun: tun_net_xmit 42 [ 199.443961][ T6907] syz_tun: tun_net_xmit 42 [ 199.457042][ T6907] syz_tun: tun_net_xmit 42 [ 199.458484][ T6907] syz_tun: tun_net_xmit 42 [ 199.459862][ T6907] syz_tun: tun_net_xmit 42 [ 199.461198][ T6907] syz_tun: tun_net_xmit 42 [ 199.462518][ T6907] syz_tun: tun_net_xmit 42 [ 199.463926][ T6907] syz_tun: tun_net_xmit 42 [ 199.465293][ T6907] syz_tun: tun_net_xmit 42 [ 199.478350][ T6907] syz_tun: tun_net_xmit 42 [ 199.479910][ T6907] syz_tun: tun_net_xmit 42 [ 199.481296][ T6907] syz_tun: tun_net_xmit 42 [ 199.482662][ T6907] syz_tun: tun_net_xmit 42 [ 199.483979][ T6907] syz_tun: tun_net_xmit 42 [ 199.507715][ T6907] syz_tun: tun_net_xmit 42 [ 199.509154][ T6907] syz_tun: tun_net_xmit 42 [ 199.510439][ T6907] syz_tun: tun_net_xmit 42 [ 199.511827][ T6907] syz_tun: tun_net_xmit 42 [ 199.513312][ T6907] syz_tun: tun_net_xmit 42 [ 199.524977][ T6907] syz_tun: tun_net_xmit 42 [ 199.528871][ T6907] syz_tun: tun_net_xmit 42 [ 199.530132][ T6907] syz_tun: tun_net_xmit 42 [ 199.531482][ T6907] syz_tun: tun_net_xmit 42 [ 199.532757][ T6907] syz_tun: tun_net_xmit 42 [ 199.534035][ T6907] syz_tun: tun_net_xmit 42 [ 199.547796][ T6907] syz_tun: tun_net_xmit 42 [ 199.549134][ T6907] syz_tun: tun_net_xmit 42 [ 199.550485][ T6907] syz_tun: tun_net_xmit 42 [ 199.551798][ T6907] syz_tun: tun_net_xmit 42 [ 199.574196][ T6907] syz_tun: tun_net_xmit 42 [ 199.582008][ T6907] syz_tun: tun_net_xmit 42 [ 199.583375][ T6907] syz_tun: tun_net_xmit 42 [ 199.593936][ T6907] syz_tun: tun_net_xmit 42 [ 199.598951][ T6907] syz_tun: tun_net_xmit 42 [ 199.600204][ T6907] syz_tun: tun_net_xmit 42 [ 199.601576][ T6907] syz_tun: tun_net_xmit 42 [ 199.602931][ T6907] syz_tun: tun_net_xmit 42 [ 199.614520][ T6907] syz_tun: tun_net_xmit 42 [ 199.619388][ T6907] syz_tun: tun_net_xmit 42 [ 199.620769][ T6907] syz_tun: tun_net_xmit 42 [ 199.622087][ T6907] syz_tun: tun_net_xmit 42 [ 199.623317][ T6907] syz_tun: tun_net_xmit 42 [ 199.659855][ T6907] syz_tun: tun_net_xmit 42 [ 199.661172][ T6907] syz_tun: tun_net_xmit 42 [ 199.662604][ T6907] syz_tun: tun_net_xmit 42 [ 199.678684][ T6907] syz_tun: tun_net_xmit 42 [ 199.684704][ T6907] syz_tun: tun_net_xmit 42 [ 199.690464][ T6907] syz_tun: tun_net_xmit 42 [ 199.691781][ T6907] syz_tun: tun_net_xmit 42 [ 199.693154][ T6907] syz_tun: tun_net_xmit 42 [ 199.702547][ T6907] syz_tun: tun_net_xmit 42 [ 199.703899][ T6907] syz_tun: tun_net_xmit 42 [ 199.710685][ T6907] syz_tun: tun_net_xmit 42 [ 199.712031][ T6907] syz_tun: tun_net_xmit 42 [ 199.713586][ T6907] syz_tun: tun_net_xmit 42 [ 199.714911][ T6907] syz_tun: tun_net_xmit 42 [ 199.721121][ T6907] syz_tun: tun_net_xmit 42 [ 199.722485][ T6907] syz_tun: tun_net_xmit 42 [ 199.723883][ T6907] syz_tun: tun_net_xmit 42 [ 199.725170][ T6907] syz_tun: tun_net_xmit 42 [ 199.731537][ T6907] syz_tun: tun_net_xmit 42 [ 199.732813][ T6907] syz_tun: tun_net_xmit 42 [ 199.734170][ T6907] syz_tun: tun_net_xmit 42 [ 199.739153][ T6907] syz_tun: tun_net_xmit 42 [ 199.740480][ T6907] syz_tun: tun_net_xmit 42 [ 199.742054][ T6907] syz_tun: tun_net_xmit 42 [ 199.743375][ T6907] syz_tun: tun_net_xmit 42 [ 199.744749][ T6907] syz_tun: tun_net_xmit 42 [ 199.748772][ T6907] syz_tun: tun_net_xmit 42 [ 199.750112][ T6907] syz_tun: tun_net_xmit 42 [ 199.751438][ T6907] syz_tun: tun_net_xmit 42 [ 199.752997][ T6907] syz_tun: tun_net_xmit 42 [ 199.754299][ T6907] syz_tun: tun_net_xmit 42 [ 199.762139][ T6907] syz_tun: tun_net_xmit 42 [ 199.763778][ T6907] syz_tun: tun_net_xmit 42 [ 199.765078][ T6907] syz_tun: tun_net_xmit 42 [ 199.769197][ T6907] syz_tun: tun_net_xmit 42 [ 199.770602][ T6907] syz_tun: tun_net_xmit 42 [ 199.772129][ T6907] syz_tun: tun_net_xmit 42 [ 199.773588][ T6907] syz_tun: tun_net_xmit 42 [ 199.779656][ T6907] syz_tun: tun_net_xmit 42 [ 199.781040][ T6907] syz_tun: tun_net_xmit 42 [ 199.782564][ T6907] syz_tun: tun_net_xmit 42 [ 199.783896][ T6907] syz_tun: tun_net_xmit 42 [ 199.787799][ T6907] syz_tun: tun_net_xmit 42 [ 199.789141][ T6907] syz_tun: tun_net_xmit 42 [ 199.790478][ T6907] syz_tun: tun_net_xmit 42 [ 199.791851][ T6907] syz_tun: tun_net_xmit 42 [ 199.793319][ T6907] syz_tun: tun_net_xmit 42 [ 199.794599][ T6907] syz_tun: tun_net_xmit 42 [ 199.800368][ T6907] syz_tun: tun_net_xmit 42 [ 199.801724][ T6907] syz_tun: tun_net_xmit 42 [ 199.803098][ T6907] syz_tun: tun_net_xmit 42 [ 199.804621][ T6907] syz_tun: tun_net_xmit 42 [ 199.808452][ T6907] syz_tun: tun_net_xmit 42 [ 199.809744][ T6907] syz_tun: tun_net_xmit 42 [ 199.811040][ T6907] syz_tun: tun_net_xmit 42 [ 199.812514][ T6907] syz_tun: tun_net_xmit 42 [ 199.813845][ T6907] syz_tun: tun_net_xmit 42 [ 199.827660][ T6907] syz_tun: tun_net_xmit 42 [ 199.835077][ T6907] syz_tun: tun_net_xmit 42 [ 199.839124][ T6907] syz_tun: tun_net_xmit 42 [ 199.840980][ T6907] syz_tun: tun_net_xmit 42 [ 199.842334][ T6907] syz_tun: tun_net_xmit 42 [ 199.878066][ T6907] syz_tun: tun_net_xmit 42 [ 199.879555][ T6907] syz_tun: tun_net_xmit 42 [ 199.882695][ T6907] syz_tun: tun_net_xmit 42 [ 199.883983][ T6907] syz_tun: tun_net_xmit 42 [ 199.891225][ T6907] syz_tun: tun_net_xmit 42 [ 199.892595][ T6907] syz_tun: tun_net_xmit 42 [ 199.893970][ T6907] syz_tun: tun_net_xmit 42 [ 199.903713][ T6907] syz_tun: tun_net_xmit 42 [ 199.920027][ T6907] syz_tun: tun_net_xmit 42 [ 199.921408][ T6907] syz_tun: tun_net_xmit 42 [ 199.922768][ T6907] syz_tun: tun_net_xmit 42 [ 199.924037][ T6907] syz_tun: tun_net_xmit 42 [ 199.933094][ T6907] syz_tun: tun_net_xmit 42 [ 199.934465][ T6907] syz_tun: tun_net_xmit 42 [ 199.940700][ T6907] syz_tun: tun_net_xmit 42 [ 199.942019][ T6907] syz_tun: tun_net_xmit 42 [ 199.943432][ T6907] syz_tun: tun_net_xmit 42 [ 199.944803][ T6907] syz_tun: tun_net_xmit 42 [ 199.955451][ T6907] syz_tun: tun_net_xmit 42 [ 199.956782][ T6907] syz_tun: tun_net_xmit 42 [ 199.958294][ T6907] syz_tun: tun_net_xmit 42 [ 199.959636][ T6907] syz_tun: tun_net_xmit 42 [ 199.960999][ T6907] syz_tun: tun_net_xmit 42 [ 199.962295][ T6907] syz_tun: tun_net_xmit 42 [ 199.963570][ T6907] syz_tun: tun_net_xmit 42 [ 199.964900][ T6907] syz_tun: tun_net_xmit 42 [ 199.969720][ T6937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.981613][ T6907] syz_tun: tun_net_xmit 42 [ 199.982984][ T6907] syz_tun: tun_net_xmit 42 [ 199.984265][ T6907] syz_tun: tun_net_xmit 42 [ 199.998836][ T6907] syz_tun: tun_net_xmit 42 [ 200.000203][ T6907] syz_tun: tun_net_xmit 42 [ 200.001605][ T6907] syz_tun: tun_net_xmit 42 [ 200.013171][ T6907] syz_tun: tun_net_xmit 42 [ 200.014556][ T6907] syz_tun: tun_net_xmit 42 [ 200.020681][ T6907] syz_tun: tun_net_xmit 42 [ 200.022153][ T6907] syz_tun: tun_net_xmit 42 [ 200.032054][ T6907] syz_tun: tun_net_xmit 42 [ 200.177288][ T6907] syz_tun: tun_net_xmit 42 [ 200.179261][ T6907] syz_tun: tun_net_xmit 42 [ 200.180590][ T6907] syz_tun: tun_net_xmit 42 [ 200.181920][ T6907] syz_tun: tun_net_xmit 42 [ 200.183680][ T6907] syz_tun: tun_net_xmit 42 [ 200.184978][ T6907] syz_tun: tun_net_xmit 42 [ 200.186489][ T6907] syz_tun: tun_net_xmit 42 [ 200.187803][ T6907] syz_tun: tun_net_xmit 42 [ 200.189135][ T6907] syz_tun: tun_net_xmit 42 [ 200.190406][ T6907] syz_tun: tun_net_xmit 42 [ 200.191692][ T6907] syz_tun: tun_net_xmit 42 [ 200.192955][ T6907] syz_tun: tun_net_xmit 42 [ 200.194298][ T6907] syz_tun: tun_net_xmit 42 [ 200.195741][ T6907] syz_tun: tun_net_xmit 42 [ 200.197102][ T6907] syz_tun: tun_net_xmit 42 [ 200.198436][ T6907] syz_tun: tun_net_xmit 42 [ 200.199734][ T6907] syz_tun: tun_net_xmit 42 [ 200.201045][ T6907] syz_tun: tun_net_xmit 42 [ 200.202315][ T6907] syz_tun: tun_net_xmit 42 [ 200.203616][ T6907] syz_tun: tun_net_xmit 42 [ 200.204880][ T6907] syz_tun: tun_net_xmit 42 [ 200.207187][ T6907] syz_tun: tun_net_xmit 42 [ 200.208824][ T6907] syz_tun: tun_net_xmit 42 [ 200.210075][ T6907] syz_tun: tun_net_xmit 42 [ 200.211363][ T6907] syz_tun: tun_net_xmit 42 [ 200.212648][ T6907] syz_tun: tun_net_xmit 42 [ 200.214023][ T6907] syz_tun: tun_net_xmit 42 [ 200.215421][ T6907] syz_tun: tun_net_xmit 42 [ 200.216723][ T6907] syz_tun: tun_net_xmit 42 [ 200.218002][ T6907] syz_tun: tun_net_xmit 42 [ 200.219402][ T6907] syz_tun: tun_net_xmit 42 [ 200.220718][ T6907] syz_tun: tun_net_xmit 42 [ 200.222017][ T6907] syz_tun: tun_net_xmit 42 [ 200.223354][ T6907] syz_tun: tun_net_xmit 42 [ 200.224693][ T6907] syz_tun: tun_net_xmit 42 [ 200.226110][ T6907] syz_tun: tun_net_xmit 42 [ 200.227492][ T6907] syz_tun: tun_net_xmit 42 [ 200.228900][ T6907] syz_tun: tun_net_xmit 42 [ 200.230332][ T6907] syz_tun: tun_net_xmit 42 [ 200.231673][ T6907] syz_tun: tun_net_xmit 42 [ 200.232912][ T6907] syz_tun: tun_net_xmit 42 [ 200.431942][ T6907] syz_tun: tun_net_xmit 42 [ 200.549339][ T6907] syz_tun: tun_net_xmit 42 [ 200.844718][ T6907] syz_tun: tun_net_xmit 42 [ 200.865587][ T6907] syz_tun: tun_net_xmit 42 [ 200.867112][ T6907] syz_tun: tun_net_xmit 42 [ 200.870869][ T6907] syz_tun: tun_net_xmit 42 [ 200.880270][ T6907] syz_tun: tun_net_xmit 42 [ 200.896813][ T6907] syz_tun: tun_net_xmit 42 [ 200.904795][ T6907] syz_tun: tun_net_xmit 42 [ 200.912218][ T6907] syz_tun: tun_net_xmit 42 [ 200.931813][ T6907] syz_tun: tun_net_xmit 42 [ 200.969360][ T6907] syz_tun: tun_net_xmit 42 [ 200.993895][ T6907] syz_tun: tun_net_xmit 42 [ 200.995582][ T6907] syz_tun: tun_net_xmit 42 [ 200.997113][ T6907] syz_tun: tun_net_xmit 42 [ 201.015516][ T6907] syz_tun: tun_net_xmit 42 [ 201.016855][ T6907] syz_tun: tun_net_xmit 42 [ 201.018221][ T6907] syz_tun: tun_net_xmit 42 [ 201.019734][ T6907] syz_tun: tun_net_xmit 42 [ 201.021168][ T6907] syz_tun: tun_net_xmit 42 [ 201.022698][ T6907] syz_tun: tun_net_xmit 42 [ 201.024062][ T6907] syz_tun: tun_net_xmit 42 [ 201.060347][ T6907] syz_tun: tun_net_xmit 42 [ 201.062268][ T6907] syz_tun: tun_net_xmit 42 [ 201.063625][ T6907] syz_tun: tun_net_xmit 42 [ 201.065051][ T6907] syz_tun: tun_net_xmit 42 [ 201.090567][ T6907] syz_tun: tun_net_xmit 42 [ 201.091920][ T6907] syz_tun: tun_net_xmit 42 [ 201.093299][ T6907] syz_tun: tun_net_xmit 42 [ 201.094658][ T6907] syz_tun: tun_net_xmit 42 [ 201.141156][ T6907] syz_tun: tun_net_xmit 42 [ 201.142673][ T6907] syz_tun: tun_net_xmit 42 [ 201.153728][ T6907] syz_tun: tun_net_xmit 42 [ 201.155274][ T6907] syz_tun: tun_net_xmit 42 [ 201.164651][ T6907] syz_tun: tun_net_xmit 42 [ 201.167205][ T6907] syz_tun: tun_net_xmit 42 [ 201.185523][ T6907] syz_tun: tun_net_xmit 42 [ 201.187085][ T6907] syz_tun: tun_net_xmit 42 [ 201.236812][ T6907] syz_tun: tun_net_xmit 42 [ 201.238122][ T6907] syz_tun: tun_net_xmit 42 [ 201.239477][ T6907] syz_tun: tun_net_xmit 42 [ 201.240863][ T6907] syz_tun: tun_net_xmit 42 [ 201.242144][ T6907] syz_tun: tun_net_xmit 42 [ 201.243578][ T6907] syz_tun: tun_net_xmit 42 [ 201.244895][ T6907] syz_tun: tun_net_xmit 42 [ 201.262668][ T6907] syz_tun: tun_net_xmit 42 [ 201.264101][ T6907] syz_tun: tun_net_xmit 42 [ 201.271744][ T6907] syz_tun: tun_net_xmit 42 [ 201.273137][ T6907] syz_tun: tun_net_xmit 42 [ 201.998122][ T6907] syz_tun: tun_net_xmit 42 [ 201.999660][ T6907] syz_tun: tun_net_xmit 42 [ 202.021811][ T6907] syz_tun: tun_net_xmit 42 [ 202.023398][ T6907] syz_tun: tun_net_xmit 42 [ 202.026216][ T6907] syz_tun: tun_net_xmit 42 [ 202.035685][ T6907] syz_tun: tun_net_xmit 42 [ 202.037222][ T6907] syz_tun: tun_net_xmit 42 [ 202.038666][ T6907] syz_tun: tun_net_xmit 42 [ 202.050407][ T6907] syz_tun: tun_net_xmit 42 [ 202.052144][ T6907] syz_tun: tun_net_xmit 42 [ 202.053533][ T6907] syz_tun: tun_net_xmit 42 [ 202.054781][ T6907] syz_tun: tun_net_xmit 42 [ 202.056716][ T6907] syz_tun: tun_net_xmit 42 [ 202.058507][ T6907] syz_tun: tun_net_xmit 42 [ 202.060376][ T6907] syz_tun: tun_net_xmit 42 [ 202.062019][ T6907] syz_tun: tun_net_xmit 42 [ 202.063632][ T6907] syz_tun: tun_net_xmit 42 [ 202.064958][ T6907] syz_tun: tun_net_xmit 42 [ 202.066464][ T6907] syz_tun: tun_net_xmit 42 [ 202.067804][ T6907] syz_tun: tun_net_xmit 42 [ 202.069094][ T6907] syz_tun: tun_net_xmit 42 [ 202.070335][ T6907] syz_tun: tun_net_xmit 42 [ 202.075569][ T6907] syz_tun: tun_net_xmit 42 [ 202.077001][ T6907] syz_tun: tun_net_xmit 42 [ 202.078318][ T6907] syz_tun: tun_net_xmit 42 [ 202.079578][ T6907] syz_tun: tun_net_xmit 42 [ 202.080900][ T6907] syz_tun: tun_net_xmit 42 [ 202.082134][ T6907] syz_tun: tun_net_xmit 42 [ 202.083435][ T6907] syz_tun: tun_net_xmit 42 [ 202.084738][ T6907] syz_tun: tun_net_xmit 42 [ 202.088130][ T6907] syz_tun: tun_net_xmit 42 [ 202.089445][ T6907] syz_tun: tun_net_xmit 42 [ 202.090721][ T6907] syz_tun: tun_net_xmit 42 [ 202.092002][ T6907] syz_tun: tun_net_xmit 42 [ 202.093322][ T6907] syz_tun: tun_net_xmit 42 [ 202.094620][ T6907] syz_tun: tun_net_xmit 42 [ 202.097664][ T6907] syz_tun: tun_net_xmit 42 [ 202.099022][ T6907] syz_tun: tun_net_xmit 42 [ 202.100319][ T6907] syz_tun: tun_net_xmit 42 [ 202.101644][ T6907] syz_tun: tun_net_xmit 42 [ 202.102946][ T6907] syz_tun: tun_net_xmit 42 [ 202.104210][ T6907] syz_tun: tun_net_xmit 42 [ 202.105610][ T6907] syz_tun: tun_net_xmit 42 [ 202.106875][ T6907] syz_tun: tun_net_xmit 42 [ 202.108140][ T6907] syz_tun: tun_net_xmit 42 [ 202.109470][ T6907] syz_tun: tun_net_xmit 42 [ 202.110741][ T6907] syz_tun: tun_net_xmit 42 [ 202.111970][ T6907] syz_tun: tun_net_xmit 42 [ 202.113222][ T6907] syz_tun: tun_net_xmit 42 [ 202.118154][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.833'. [ 202.118678][ T6907] syz_tun: tun_net_xmit 42 [ 202.122024][ T6907] syz_tun: tun_net_xmit 42 [ 202.123355][ T6907] syz_tun: tun_net_xmit 42 [ 202.124660][ T6907] syz_tun: tun_net_xmit 42 [ 202.144804][ T6907] syz_tun: tun_net_xmit 42 [ 202.151735][ T6907] syz_tun: tun_net_xmit 42 [ 202.153449][ T6907] syz_tun: tun_net_xmit 42 [ 202.156023][ T6907] syz_tun: tun_net_xmit 42 [ 202.157324][ T6907] syz_tun: tun_net_xmit 42 [ 202.158634][ T6907] syz_tun: tun_net_xmit 42 [ 202.160020][ T6907] syz_tun: tun_net_xmit 42 [ 202.161301][ T6907] syz_tun: tun_net_xmit 42 [ 202.173414][ T6907] syz_tun: tun_net_xmit 42 [ 202.174780][ T6907] syz_tun: tun_net_xmit 42 [ 202.181782][ T6907] syz_tun: tun_net_xmit 42 [ 202.183140][ T6907] syz_tun: tun_net_xmit 42 [ 202.184504][ T6907] syz_tun: tun_net_xmit 42 [ 202.187076][ T6907] syz_tun: tun_net_xmit 42 [ 202.188398][ T6907] syz_tun: tun_net_xmit 42 [ 202.189755][ T6907] syz_tun: tun_net_xmit 42 [ 202.191112][ T6907] syz_tun: tun_net_xmit 42 [ 202.192488][ T6907] syz_tun: tun_net_xmit 42 [ 202.193759][ T6907] syz_tun: tun_net_xmit 42 [ 202.195043][ T6907] syz_tun: tun_net_xmit 42 [ 202.210707][ T6907] syz_tun: tun_net_xmit 42 [ 202.212111][ T6907] syz_tun: tun_net_xmit 42 [ 202.213369][ T6907] syz_tun: tun_net_xmit 42 [ 202.214899][ T6907] syz_tun: tun_net_xmit 42 [ 202.217621][ T6907] syz_tun: tun_net_xmit 42 [ 202.218955][ T6907] syz_tun: tun_net_xmit 42 [ 202.220336][ T6907] syz_tun: tun_net_xmit 42 [ 202.221748][ T6907] syz_tun: tun_net_xmit 42 [ 202.222993][ T6907] syz_tun: tun_net_xmit 42 [ 202.224296][ T6907] syz_tun: tun_net_xmit 42 [ 202.230928][ T6907] syz_tun: tun_net_xmit 42 [ 202.232248][ T6907] syz_tun: tun_net_xmit 42 [ 202.233544][ T6907] syz_tun: tun_net_xmit 42 [ 202.234822][ T6907] syz_tun: tun_net_xmit 42 [ 202.236708][ T6907] syz_tun: tun_net_xmit 42 [ 202.242472][ T6907] syz_tun: tun_net_xmit 42 [ 202.243733][ T6907] syz_tun: tun_net_xmit 42 [ 202.245049][ T6907] syz_tun: tun_net_xmit 42 [ 202.257202][ T6907] syz_tun: tun_net_xmit 42 [ 202.258633][ T6907] syz_tun: tun_net_xmit 42 [ 202.260240][ T6907] syz_tun: tun_net_xmit 42 [ 202.261591][ T6907] syz_tun: tun_net_xmit 42 [ 202.268379][ T6907] syz_tun: tun_net_xmit 42 [ 202.269704][ T6907] syz_tun: tun_net_xmit 42 [ 202.271059][ T6907] syz_tun: tun_net_xmit 42 [ 202.272363][ T6907] syz_tun: tun_net_xmit 42 [ 202.273602][ T6907] syz_tun: tun_net_xmit 42 [ 202.274913][ T6907] syz_tun: tun_net_xmit 42 [ 202.278691][ T6907] syz_tun: tun_net_xmit 42 [ 202.280133][ T6907] syz_tun: tun_net_xmit 42 [ 202.281599][ T6907] syz_tun: tun_net_xmit 42 [ 202.282975][ T6907] syz_tun: tun_net_xmit 42 [ 202.284210][ T6907] syz_tun: tun_net_xmit 42 [ 202.289811][ T6907] syz_tun: tun_net_xmit 42 [ 202.291217][ T6907] syz_tun: tun_net_xmit 42 [ 202.292699][ T6907] syz_tun: tun_net_xmit 42 [ 202.293979][ T6907] syz_tun: tun_net_xmit 42 [ 202.297908][ T6907] syz_tun: tun_net_xmit 42 [ 202.299458][ T6907] syz_tun: tun_net_xmit 42 [ 202.300811][ T6907] syz_tun: tun_net_xmit 42 [ 202.302106][ T6907] syz_tun: tun_net_xmit 42 [ 202.303514][ T6907] syz_tun: tun_net_xmit 42 [ 202.304937][ T6907] syz_tun: tun_net_xmit 42 [ 202.313323][ T6907] syz_tun: tun_net_xmit 42 [ 202.314754][ T6907] syz_tun: tun_net_xmit 42 [ 202.330063][ T6907] syz_tun: tun_net_xmit 42 [ 202.331474][ T6907] syz_tun: tun_net_xmit 42 [ 202.332989][ T6907] syz_tun: tun_net_xmit 42 [ 202.334381][ T6907] syz_tun: tun_net_xmit 42 [ 202.343799][ T6907] syz_tun: tun_net_xmit 42 [ 202.345110][ T6907] syz_tun: tun_net_xmit 42 [ 202.363493][ T6907] syz_tun: tun_net_xmit 42 [ 202.364909][ T6907] syz_tun: tun_net_xmit 42 [ 202.385539][ T6907] syz_tun: tun_net_xmit 42 [ 202.387005][ T6907] syz_tun: tun_net_xmit 42 [ 202.388336][ T6907] syz_tun: tun_net_xmit 42 [ 202.419239][ T6907] syz_tun: tun_net_xmit 42 [ 202.420741][ T6907] syz_tun: tun_net_xmit 42 [ 202.422181][ T6907] syz_tun: tun_net_xmit 42 [ 202.423649][ T6907] syz_tun: tun_net_xmit 42 [ 202.433554][ T6907] syz_tun: tun_net_xmit 42 [ 202.434941][ T6907] syz_tun: tun_net_xmit 42 [ 202.442162][ T6907] syz_tun: tun_net_xmit 42 [ 202.443581][ T6907] syz_tun: tun_net_xmit 42 [ 202.444951][ T6907] syz_tun: tun_net_xmit 42 [ 202.531503][ T6907] syz_tun: tun_net_xmit 42 [ 202.577208][ T6907] syz_tun: tun_net_xmit 42 [ 202.755555][ T6907] syz_tun: tun_net_xmit 42 [ 202.803770][ T6907] syz_tun: tun_net_xmit 42 [ 203.068761][ T6907] syz_tun: tun_net_xmit 42 [ 203.115825][ T6907] syz_tun: tun_net_xmit 42 [ 203.117323][ T6907] syz_tun: tun_net_xmit 42 [ 203.118603][ T6907] syz_tun: tun_net_xmit 42 [ 203.119973][ T6907] syz_tun: tun_net_xmit 42 [ 203.121284][ T6907] syz_tun: tun_net_xmit 42 [ 203.165387][ T6907] syz_tun: tun_net_xmit 42 [ 203.166722][ T6907] syz_tun: tun_net_xmit 42 [ 203.168030][ T6907] syz_tun: tun_net_xmit 42 [ 203.169356][ T6907] syz_tun: tun_net_xmit 42 [ 203.170665][ T6907] syz_tun: tun_net_xmit 42 [ 203.171989][ T6907] syz_tun: tun_net_xmit 42 [ 203.239405][ T6907] syz_tun: tun_net_xmit 42 [ 203.240763][ T6907] syz_tun: tun_net_xmit 42 [ 203.242037][ T6907] syz_tun: tun_net_xmit 42 [ 203.243339][ T6907] syz_tun: tun_net_xmit 42 [ 203.244651][ T6907] syz_tun: tun_net_xmit 42 [ 203.275917][ T6907] syz_tun: tun_net_xmit 42 [ 203.277311][ T6907] syz_tun: tun_net_xmit 42 [ 203.278686][ T6907] syz_tun: tun_net_xmit 42 [ 203.285845][ T6907] syz_tun: tun_net_xmit 42 [ 203.287380][ T6907] syz_tun: tun_net_xmit 42 [ 203.299183][ T6974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.303307][ T6907] syz_tun: tun_net_xmit 42 [ 203.304619][ T6907] syz_tun: tun_net_xmit 42 [ 203.313488][ T6907] syz_tun: tun_net_xmit 42 [ 203.314872][ T6907] syz_tun: tun_net_xmit 42 [ 203.316414][ T6907] syz_tun: tun_net_xmit 42 [ 203.317799][ T6907] syz_tun: tun_net_xmit 42 [ 203.319121][ T6907] syz_tun: tun_net_xmit 42 [ 203.320372][ T6907] syz_tun: tun_net_xmit 42 [ 203.321704][ T6907] syz_tun: tun_net_xmit 42 [ 203.323190][ T6907] syz_tun: tun_net_xmit 42 [ 203.338113][ T6907] syz_tun: tun_net_xmit 42 [ 203.339522][ T6907] syz_tun: tun_net_xmit 42 [ 203.341005][ T6907] syz_tun: tun_net_xmit 42 [ 203.342309][ T6907] syz_tun: tun_net_xmit 42 [ 203.343859][ T6907] syz_tun: tun_net_xmit 42 [ 203.377799][ T6907] syz_tun: tun_net_xmit 42 [ 203.384676][ T6907] syz_tun: tun_net_xmit 42 [ 203.415508][ T6907] syz_tun: tun_net_xmit 42 [ 203.417051][ T6907] syz_tun: tun_net_xmit 42 [ 203.418571][ T6907] syz_tun: tun_net_xmit 42 [ 203.419932][ T6907] syz_tun: tun_net_xmit 42 [ 203.421274][ T6907] syz_tun: tun_net_xmit 42 [ 203.422573][ T6907] syz_tun: tun_net_xmit 42 [ 203.423868][ T6907] syz_tun: tun_net_xmit 42 [ 203.425130][ T6907] syz_tun: tun_net_xmit 42 [ 203.449296][ T6907] syz_tun: tun_net_xmit 42 [ 203.451317][ T6907] syz_tun: tun_net_xmit 42 [ 203.452704][ T6907] syz_tun: tun_net_xmit 42 [ 203.454035][ T6907] syz_tun: tun_net_xmit 42 [ 203.455484][ T6907] syz_tun: tun_net_xmit 42 [ 203.456815][ T6907] syz_tun: tun_net_xmit 42 [ 203.458081][ T6907] syz_tun: tun_net_xmit 42 [ 203.459510][ T6907] syz_tun: tun_net_xmit 42 [ 203.460825][ T6907] syz_tun: tun_net_xmit 42 [ 203.462146][ T6907] syz_tun: tun_net_xmit 42 [ 203.463453][ T6907] syz_tun: tun_net_xmit 42 [ 203.464836][ T6907] syz_tun: tun_net_xmit 42 [ 203.466291][ T6907] syz_tun: tun_net_xmit 42 [ 203.467753][ T6907] syz_tun: tun_net_xmit 42 [ 203.469266][ T6907] syz_tun: tun_net_xmit 42 [ 203.479615][ T6907] syz_tun: tun_net_xmit 42 [ 203.481208][ T6907] syz_tun: tun_net_xmit 42 [ 203.482628][ T6907] syz_tun: tun_net_xmit 42 [ 203.483957][ T6907] syz_tun: tun_net_xmit 42 [ 203.490697][ T6907] syz_tun: tun_net_xmit 42 [ 203.492041][ T6907] syz_tun: tun_net_xmit 42 [ 203.493322][ T6907] syz_tun: tun_net_xmit 42 [ 203.494710][ T6907] syz_tun: tun_net_xmit 42 [ 203.505485][ T6907] syz_tun: tun_net_xmit 42 [ 203.509933][ T6907] syz_tun: tun_net_xmit 42 [ 203.511211][ T6907] syz_tun: tun_net_xmit 42 [ 203.512633][ T6907] syz_tun: tun_net_xmit 42 [ 203.513993][ T6907] syz_tun: tun_net_xmit 42 [ 204.967073][ T6907] syz_tun: tun_net_xmit 42 [ 204.968486][ T6907] syz_tun: tun_net_xmit 42 [ 204.969870][ T6907] syz_tun: tun_net_xmit 42 [ 204.971294][ T6907] syz_tun: tun_net_xmit 42 [ 204.972714][ T6907] syz_tun: tun_net_xmit 42 [ 204.974005][ T6907] syz_tun: tun_net_xmit 42 [ 204.975758][ T6907] syz_tun: tun_net_xmit 42 [ 204.977103][ T6907] syz_tun: tun_net_xmit 42 [ 204.978380][ T6907] syz_tun: tun_net_xmit 42 [ 204.979720][ T6907] syz_tun: tun_net_xmit 42 [ 204.981047][ T6907] syz_tun: tun_net_xmit 42 [ 204.982426][ T6907] syz_tun: tun_net_xmit 42 [ 204.983799][ T6907] syz_tun: tun_net_xmit 42 [ 204.985504][ T6907] syz_tun: tun_net_xmit 42 [ 204.996248][ T6907] syz_tun: tun_net_xmit 42 [ 204.997651][ T6907] syz_tun: tun_net_xmit 42 [ 204.998952][ T6907] syz_tun: tun_net_xmit 42 [ 205.000356][ T6907] syz_tun: tun_net_xmit 42 [ 205.001637][ T6907] syz_tun: tun_net_xmit 42 [ 205.002976][ T6907] syz_tun: tun_net_xmit 42 [ 205.004261][ T6907] syz_tun: tun_net_xmit 42 [ 205.008617][ T6907] syz_tun: tun_net_xmit 42 [ 205.009987][ T6907] syz_tun: tun_net_xmit 42 [ 205.011320][ T6907] syz_tun: tun_net_xmit 42 [ 205.012689][ T6907] syz_tun: tun_net_xmit 42 [ 205.014009][ T6907] syz_tun: tun_net_xmit 42 [ 205.015409][ T6907] syz_tun: tun_net_xmit 42 [ 205.016748][ T6907] syz_tun: tun_net_xmit 42 [ 205.018052][ T6907] syz_tun: tun_net_xmit 42 [ 205.019350][ T6907] syz_tun: tun_net_xmit 42 [ 205.021534][ T6907] syz_tun: tun_net_xmit 42 [ 205.022766][ T6907] syz_tun: tun_net_xmit 42 [ 205.024054][ T6907] syz_tun: tun_net_xmit 42 [ 205.029706][ T6907] syz_tun: tun_net_xmit 42 [ 205.031067][ T6907] syz_tun: tun_net_xmit 42 [ 205.032446][ T6907] syz_tun: tun_net_xmit 42 [ 205.033790][ T6907] syz_tun: tun_net_xmit 42 [ 205.035189][ T6907] syz_tun: tun_net_xmit 42 [ 205.037648][ T6907] syz_tun: tun_net_xmit 42 [ 205.039126][ T6907] syz_tun: tun_net_xmit 42 [ 205.040467][ T6907] syz_tun: tun_net_xmit 42 [ 205.041739][ T6907] syz_tun: tun_net_xmit 42 [ 205.043237][ T6907] syz_tun: tun_net_xmit 42 [ 205.044566][ T6907] syz_tun: tun_net_xmit 42 [ 205.046115][ T6907] syz_tun: tun_net_xmit 42 [ 205.047580][ T6907] syz_tun: tun_net_xmit 42 [ 205.048940][ T6907] syz_tun: tun_net_xmit 42 [ 205.050491][ T6907] syz_tun: tun_net_xmit 42 [ 205.051881][ T6907] syz_tun: tun_net_xmit 42 [ 205.053264][ T6907] syz_tun: tun_net_xmit 42 [ 205.054605][ T6907] syz_tun: tun_net_xmit 42 [ 205.057288][ T6907] syz_tun: tun_net_xmit 42 [ 205.058617][ T6907] syz_tun: tun_net_xmit 42 [ 205.060021][ T6907] syz_tun: tun_net_xmit 42 [ 205.061532][ T6907] syz_tun: tun_net_xmit 42 [ 205.063014][ T6907] syz_tun: tun_net_xmit 42 [ 205.064432][ T6907] syz_tun: tun_net_xmit 42 [ 205.066206][ T6907] syz_tun: tun_net_xmit 42 [ 205.068136][ T6907] syz_tun: tun_net_xmit 42 [ 205.069462][ T6907] syz_tun: tun_net_xmit 42 [ 205.070846][ T6907] syz_tun: tun_net_xmit 42 [ 205.072298][ T6907] syz_tun: tun_net_xmit 42 [ 205.073722][ T6907] syz_tun: tun_net_xmit 42 [ 205.075150][ T6907] syz_tun: tun_net_xmit 42 [ 205.076672][ T6907] syz_tun: tun_net_xmit 42 [ 205.078013][ T6907] syz_tun: tun_net_xmit 42 [ 205.079408][ T6907] syz_tun: tun_net_xmit 42 [ 205.080716][ T6907] syz_tun: tun_net_xmit 42 [ 205.082090][ T6907] syz_tun: tun_net_xmit 42 [ 205.083524][ T6907] syz_tun: tun_net_xmit 42 [ 205.084871][ T6907] syz_tun: tun_net_xmit 42 [ 205.086443][ T6907] syz_tun: tun_net_xmit 42 [ 205.087925][ T6907] syz_tun: tun_net_xmit 42 [ 205.089315][ T6907] syz_tun: tun_net_xmit 42 [ 205.090691][ T6907] syz_tun: tun_net_xmit 42 [ 205.092132][ T6907] syz_tun: tun_net_xmit 42 [ 205.093652][ T6907] syz_tun: tun_net_xmit 42 [ 205.095104][ T6907] syz_tun: tun_net_xmit 42 [ 205.113456][ T6907] syz_tun: tun_net_xmit 42 [ 205.114911][ T6907] syz_tun: tun_net_xmit 42 [ 205.117777][ T6907] syz_tun: tun_net_xmit 42 [ 205.119168][ T6907] syz_tun: tun_net_xmit 42 [ 205.120440][ T6907] syz_tun: tun_net_xmit 42 [ 205.121871][ T6907] syz_tun: tun_net_xmit 42 [ 205.124272][ T6907] syz_tun: tun_net_xmit 42 [ 205.131209][ T6907] syz_tun: tun_net_xmit 42 [ 205.133162][ T6907] syz_tun: tun_net_xmit 42 [ 205.134624][ T6907] syz_tun: tun_net_xmit 42 [ 205.137027][ T6907] syz_tun: tun_net_xmit 42 [ 205.138817][ T6907] syz_tun: tun_net_xmit 42 [ 205.140137][ T6907] syz_tun: tun_net_xmit 42 [ 205.141444][ T6907] syz_tun: tun_net_xmit 42 [ 205.142774][ T6907] syz_tun: tun_net_xmit 42 [ 205.144103][ T6907] syz_tun: tun_net_xmit 42 [ 205.153718][ T6907] syz_tun: tun_net_xmit 42 [ 205.155038][ T6907] syz_tun: tun_net_xmit 42 [ 205.157119][ T6907] syz_tun: tun_net_xmit 42 [ 205.158396][ T6907] syz_tun: tun_net_xmit 42 [ 205.159708][ T6907] syz_tun: tun_net_xmit 42 [ 205.161020][ T6907] syz_tun: tun_net_xmit 42 [ 205.162317][ T6907] syz_tun: tun_net_xmit 42 [ 205.163632][ T6907] syz_tun: tun_net_xmit 42 [ 205.164929][ T6907] syz_tun: tun_net_xmit 42 [ 205.172390][ T6907] syz_tun: tun_net_xmit 42 [ 205.173888][ T6907] syz_tun: tun_net_xmit 42 [ 205.175182][ T6907] syz_tun: tun_net_xmit 42 [ 205.182730][ T6907] syz_tun: tun_net_xmit 42 [ 205.184093][ T6907] syz_tun: tun_net_xmit 42 [ 205.191450][ T6907] syz_tun: tun_net_xmit 42 [ 205.192764][ T6907] syz_tun: tun_net_xmit 42 [ 205.194104][ T6907] syz_tun: tun_net_xmit 42 [ 205.201046][ T6907] syz_tun: tun_net_xmit 42 [ 205.202383][ T6907] syz_tun: tun_net_xmit 42 [ 205.203627][ T6907] syz_tun: tun_net_xmit 42 [ 205.204885][ T6907] syz_tun: tun_net_xmit 42 [ 205.217857][ T6907] syz_tun: tun_net_xmit 42 [ 205.219177][ T6907] syz_tun: tun_net_xmit 42 [ 205.220541][ T6907] syz_tun: tun_net_xmit 42 [ 205.222112][ T6907] syz_tun: tun_net_xmit 42 [ 205.223409][ T6907] syz_tun: tun_net_xmit 42 [ 205.224715][ T6907] syz_tun: tun_net_xmit 42 [ 205.236789][ T6907] syz_tun: tun_net_xmit 42 [ 205.238105][ T6907] syz_tun: tun_net_xmit 42 [ 205.239482][ T6907] syz_tun: tun_net_xmit 42 [ 205.240885][ T6907] syz_tun: tun_net_xmit 42 [ 205.242257][ T6907] syz_tun: tun_net_xmit 42 [ 205.255397][ T6907] syz_tun: tun_net_xmit 42 [ 205.261198][ T6987] can0: slcan on ttyS3. [ 205.275427][ T6907] syz_tun: tun_net_xmit 42 [ 205.276792][ T6907] syz_tun: tun_net_xmit 42 [ 205.278140][ T6907] syz_tun: tun_net_xmit 42 [ 205.279467][ T6907] syz_tun: tun_net_xmit 42 [ 205.280820][ T6907] syz_tun: tun_net_xmit 42 [ 205.282088][ T6907] syz_tun: tun_net_xmit 42 [ 205.283327][ T6907] syz_tun: tun_net_xmit 42 [ 205.284668][ T6907] syz_tun: tun_net_xmit 42 [ 205.309269][ T6987] capability: warning: `syz.0.841' uses 32-bit capabilities (legacy support in use) [ 205.342673][ T6907] syz_tun: tun_net_xmit 42 [ 205.344288][ T6907] syz_tun: tun_net_xmit 42 [ 205.346418][ T6907] syz_tun: tun_net_xmit 42 [ 205.347773][ T6907] syz_tun: tun_net_xmit 42 [ 205.349073][ T6907] syz_tun: tun_net_xmit 42 [ 205.361278][ T6907] syz_tun: tun_net_xmit 42 [ 205.362684][ T6907] syz_tun: tun_net_xmit 42 [ 205.364136][ T6907] syz_tun: tun_net_xmit 42 [ 205.371383][ T6907] syz_tun: tun_net_xmit 42 [ 205.372727][ T6907] syz_tun: tun_net_xmit 42 [ 205.374011][ T6907] syz_tun: tun_net_xmit 42 [ 205.381415][ T6907] syz_tun: tun_net_xmit 42 [ 205.382768][ T6907] syz_tun: tun_net_xmit 42 [ 205.384162][ T6907] syz_tun: tun_net_xmit 42 [ 205.399954][ T6907] syz_tun: tun_net_xmit 42 [ 205.401326][ T6907] syz_tun: tun_net_xmit 42 [ 205.402679][ T6907] syz_tun: tun_net_xmit 42 [ 205.404049][ T6907] syz_tun: tun_net_xmit 42 [ 205.445478][ T6907] syz_tun: tun_net_xmit 42 [ 205.446955][ T6907] syz_tun: tun_net_xmit 42 [ 205.448346][ T6907] syz_tun: tun_net_xmit 42 [ 205.449668][ T6907] syz_tun: tun_net_xmit 42 [ 205.451082][ T6907] syz_tun: tun_net_xmit 42 [ 205.452398][ T6907] syz_tun: tun_net_xmit 42 [ 205.453712][ T6907] syz_tun: tun_net_xmit 42 [ 205.455108][ T6907] syz_tun: tun_net_xmit 42 [ 205.496385][ T6907] syz_tun: tun_net_xmit 42 [ 205.497798][ T6907] syz_tun: tun_net_xmit 42 [ 205.499163][ T6907] syz_tun: tun_net_xmit 42 [ 205.500895][ T6907] syz_tun: tun_net_xmit 42 [ 205.502319][ T6907] syz_tun: tun_net_xmit 42 [ 205.503610][ T6907] syz_tun: tun_net_xmit 42 [ 205.504929][ T6907] syz_tun: tun_net_xmit 42 [ 205.574835][ T6989] can0 (unregistered): slcan off ttyS3. [ 205.605496][ T6907] syz_tun: tun_net_xmit 42 [ 205.606851][ T6907] syz_tun: tun_net_xmit 42 [ 205.608246][ T6907] syz_tun: tun_net_xmit 42 [ 205.609617][ T6907] syz_tun: tun_net_xmit 42 [ 205.610971][ T6907] syz_tun: tun_net_xmit 42 [ 205.612400][ T6907] syz_tun: tun_net_xmit 42 [ 205.613685][ T6907] syz_tun: tun_net_xmit 42 [ 205.614947][ T6907] syz_tun: tun_net_xmit 42 [ 205.935278][ T6907] syz_tun: tun_net_xmit 42 [ 206.362509][ T6907] syz_tun: tun_net_xmit 42 [ 206.363933][ T6907] syz_tun: tun_net_xmit 42 [ 206.365301][ T6907] syz_tun: tun_net_xmit 42 [ 206.375495][ T6907] syz_tun: tun_net_xmit 42 [ 206.376835][ T6907] syz_tun: tun_net_xmit 42 [ 206.378139][ T6907] syz_tun: tun_net_xmit 42 [ 206.379496][ T6907] syz_tun: tun_net_xmit 42 [ 206.380906][ T6907] syz_tun: tun_net_xmit 42 [ 206.382213][ T6907] syz_tun: tun_net_xmit 42 [ 206.400555][ T6907] syz_tun: tun_net_xmit 42 [ 206.402119][ T6907] syz_tun: tun_net_xmit 42 [ 206.403595][ T6907] syz_tun: tun_net_xmit 42 [ 206.404973][ T6907] syz_tun: tun_net_xmit 42 [ 206.406706][ T6907] syz_tun: tun_net_xmit 42 [ 206.408505][ T6907] syz_tun: tun_net_xmit 42 [ 206.409809][ T6907] syz_tun: tun_net_xmit 42 [ 206.411181][ T6907] syz_tun: tun_net_xmit 42 [ 206.412519][ T6907] syz_tun: tun_net_xmit 42 [ 206.413845][ T6907] syz_tun: tun_net_xmit 42 [ 206.419368][ T6907] syz_tun: tun_net_xmit 42 [ 206.420664][ T6907] syz_tun: tun_net_xmit 42 [ 206.421963][ T6907] syz_tun: tun_net_xmit 42 [ 206.423294][ T6907] syz_tun: tun_net_xmit 42 [ 206.424659][ T6907] syz_tun: tun_net_xmit 42 [ 206.426194][ T6907] syz_tun: tun_net_xmit 42 [ 206.427582][ T6907] syz_tun: tun_net_xmit 42 [ 206.428879][ T6907] syz_tun: tun_net_xmit 42 [ 206.430250][ T6907] syz_tun: tun_net_xmit 42 [ 206.433815][ T6907] syz_tun: tun_net_xmit 42 [ 206.435207][ T6907] syz_tun: tun_net_xmit 42 [ 206.437949][ T6907] syz_tun: tun_net_xmit 42 [ 206.439249][ T6907] syz_tun: tun_net_xmit 42 [ 206.445449][ T6907] syz_tun: tun_net_xmit 42 [ 206.446768][ T6907] syz_tun: tun_net_xmit 42 [ 206.448112][ T6907] syz_tun: tun_net_xmit 42 [ 206.449482][ T6907] syz_tun: tun_net_xmit 42 [ 206.450743][ T6907] syz_tun: tun_net_xmit 42 [ 206.452093][ T6907] syz_tun: tun_net_xmit 42 [ 206.453399][ T6907] syz_tun: tun_net_xmit 42 [ 206.455309][ T6907] syz_tun: tun_net_xmit 42 [ 206.493994][ T6907] syz_tun: tun_net_xmit 42 [ 206.495838][ T6907] syz_tun: tun_net_xmit 42 [ 206.497402][ T6907] syz_tun: tun_net_xmit 42 [ 206.498813][ T6907] syz_tun: tun_net_xmit 42 [ 206.500163][ T6907] syz_tun: tun_net_xmit 42 [ 206.501561][ T6907] syz_tun: tun_net_xmit 42 [ 206.502950][ T6907] syz_tun: tun_net_xmit 42 [ 206.504216][ T6907] syz_tun: tun_net_xmit 42 [ 206.509802][ T7004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.846'. [ 206.516059][ T6907] syz_tun: tun_net_xmit 42 [ 206.517425][ T6907] syz_tun: tun_net_xmit 42 [ 206.526216][ T6907] syz_tun: tun_net_xmit 42 [ 206.527610][ T6907] syz_tun: tun_net_xmit 42 [ 206.529016][ T6907] syz_tun: tun_net_xmit 42 [ 206.530312][ T6907] syz_tun: tun_net_xmit 42 [ 206.531697][ T6907] syz_tun: tun_net_xmit 42 [ 206.551835][ T6907] syz_tun: tun_net_xmit 42 [ 206.553218][ T6907] syz_tun: tun_net_xmit 42 [ 206.554655][ T6907] syz_tun: tun_net_xmit 42 [ 206.573315][ T6907] syz_tun: tun_net_xmit 42 [ 206.574643][ T6907] syz_tun: tun_net_xmit 42 [ 206.579070][ T6907] syz_tun: tun_net_xmit 42 [ 206.580423][ T6907] syz_tun: tun_net_xmit 42 [ 206.581733][ T6907] syz_tun: tun_net_xmit 42 [ 206.583046][ T6907] syz_tun: tun_net_xmit 42 [ 206.584343][ T6907] syz_tun: tun_net_xmit 42 [ 206.605440][ T6907] syz_tun: tun_net_xmit 42 [ 206.610919][ T6907] syz_tun: tun_net_xmit 42 [ 206.612345][ T6907] syz_tun: tun_net_xmit 42 [ 206.613670][ T6907] syz_tun: tun_net_xmit 42 [ 206.615049][ T6907] syz_tun: tun_net_xmit 42 [ 206.630601][ T6907] syz_tun: tun_net_xmit 42 [ 206.631969][ T6907] syz_tun: tun_net_xmit 42 [ 206.633311][ T6907] syz_tun: tun_net_xmit 42 [ 206.634871][ T6907] syz_tun: tun_net_xmit 42 [ 206.656259][ T6907] syz_tun: tun_net_xmit 42 [ 206.657614][ T6907] syz_tun: tun_net_xmit 42 [ 206.659449][ T6907] syz_tun: tun_net_xmit 42 [ 206.660848][ T6907] syz_tun: tun_net_xmit 42 [ 206.662261][ T6907] syz_tun: tun_net_xmit 42 [ 206.663561][ T6907] syz_tun: tun_net_xmit 42 [ 206.664933][ T6907] syz_tun: tun_net_xmit 42 [ 206.687391][ T6907] syz_tun: tun_net_xmit 42 [ 206.688879][ T6907] syz_tun: tun_net_xmit 42 [ 206.690268][ T6907] syz_tun: tun_net_xmit 42 [ 206.691543][ T6907] syz_tun: tun_net_xmit 42 [ 206.692836][ T6907] syz_tun: tun_net_xmit 42 [ 206.694194][ T6907] syz_tun: tun_net_xmit 42 [ 206.705411][ T6907] syz_tun: tun_net_xmit 42 [ 206.706946][ T6907] syz_tun: tun_net_xmit 42 [ 206.708470][ T6907] syz_tun: tun_net_xmit 42 [ 206.789492][ T7014] binder: 7013:7014 tried to acquire reference to desc 0, got 1 instead [ 206.818158][ T7014] binder: 7013:7014 got transaction with invalid data ptr [ 206.824947][ T7014] binder: 7013:7014 transaction async to 7013:0 failed 143/29201/-14, size 0-24 line 3342 [ 206.858913][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.939443][ T4313] Bluetooth: hci0: Invalid handle: 0x0f00 > 0x0eff [ 206.989106][ T7024] binder: 7021:7024 tried to acquire reference to desc 0, got 1 instead [ 207.016832][ T7024] binder: 7021:7024 got transaction with invalid data ptr [ 207.018962][ T7024] binder: 7021:7024 transaction async to 7021:0 failed 148/29201/-14, size 0-24 line 3342 [ 207.072731][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.229268][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.848945][ T7060] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 210.851900][ T7060] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 211.459804][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.858'. [ 211.508577][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 212.299975][ T4313] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 212.482702][ T7077] orangefs_mount: mount request failed with -4 [ 212.529851][ T4311] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.533818][ T4311] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.537432][ T4311] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.540135][ T4311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.542633][ T4311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.544975][ T4311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.667988][ T7094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.674005][ T7100] batman_adv: batadv0: Adding interface: dummy0 [ 212.709777][ T7100] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.753573][ T7100] batman_adv: batadv0: Interface activated: dummy0 [ 212.807586][ T7103] batadv0: mtu less than device minimum [ 212.824083][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.830657][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.836897][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.843051][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.849442][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.855539][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.861791][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.867980][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.874112][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 213.438083][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.874'. [ 213.558728][ T4382] libceph: connect (1)[c::]:6789 error -101 [ 213.560503][ T4382] libceph: mon0 (1)[c::]:6789 connect error [ 214.447160][ T27] audit: type=1400 audit(213.900:3): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=7125 comm="syz.2.876" [ 214.455427][ T4382] libceph: connect (1)[c::]:6789 error -101 [ 214.459539][ T4382] libceph: mon0 (1)[c::]:6789 connect error [ 214.500619][ T7121] ceph: No mds server is up or the cluster is laggy [ 214.589385][ T4311] Bluetooth: hci5: command 0x0409 tx timeout [ 214.822365][ T4313] Bluetooth: hci0: Invalid handle: 0x0f00 > 0x0eff [ 214.942546][ T7089] chnl_net:caif_netlink_parms(): no params data found [ 215.094213][ T4901] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.208026][ T4901] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.260951][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.268512][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.273600][ T7089] device bridge_slave_0 entered promiscuous mode [ 215.324664][ T7156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.347071][ T4901] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.351434][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.353399][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.360778][ T7089] device bridge_slave_1 entered promiscuous mode [ 215.459442][ T4901] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.475590][ T7089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.480101][ T7089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.546937][ T7089] team0: Port device team_slave_0 added [ 215.552025][ T7089] team0: Port device team_slave_1 added [ 215.587805][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.589730][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.630910][ T7089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.642314][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.644213][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.652315][ T7089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.780558][ T7089] device hsr_slave_0 entered promiscuous mode [ 215.819795][ T7089] device hsr_slave_1 entered promiscuous mode [ 215.862637][ T7089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.866142][ T7089] Cannot create hsr debugfs directory [ 215.913069][ T4382] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 216.066134][ T4901] tipc: Left network mode [ 216.118605][ T4382] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.121065][ T4382] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.123847][ T4382] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.139440][ T7089] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.151621][ T4382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 216.154703][ T4382] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 216.176483][ T4382] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.179193][ T4382] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.181609][ T4382] usb 1-1: Product: syz [ 216.183160][ T4382] usb 1-1: Manufacturer: syz [ 216.192608][ T7089] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.202843][ T4382] cdc_wdm 1-1:1.0: skipping garbage [ 216.204369][ T4382] cdc_wdm 1-1:1.0: skipping garbage [ 216.223983][ T4382] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 216.225874][ T4382] cdc_wdm 1-1:1.0: Unknown control protocol [ 216.347104][ T7089] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.642899][ T7089] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.655514][ T4313] Bluetooth: hci5: command 0x041b tx timeout [ 217.220742][ T7089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.239430][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.247286][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.328466][ T7089] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.333556][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.347322][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.363733][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.366018][ T4964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.382795][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.470880][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.474587][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.484692][ T4965] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.486910][ T4965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.497904][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.538764][ T5055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.583281][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.588366][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.596768][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.691689][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.694859][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.706137][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.716384][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.728032][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.734859][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.743851][ T7089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.258099][ T7225] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 218.261047][ T7225] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.738576][ T4311] Bluetooth: hci5: command 0x040f tx timeout [ 218.869757][ T4361] usb 1-1: USB disconnect, device number 5 [ 219.051530][ T7236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.530636][ T7247] bridge0: port 3(netdevsim0) entered blocking state [ 219.533157][ T7247] bridge0: port 3(netdevsim0) entered disabled state [ 219.548620][ T7247] device netdevsim0 entered promiscuous mode [ 219.553427][ T7247] bridge0: port 3(netdevsim0) entered blocking state [ 219.555665][ T7247] bridge0: port 3(netdevsim0) entered forwarding state [ 220.310543][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.312907][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.368753][ T7089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.805559][ T4311] Bluetooth: hci5: command 0x0419 tx timeout [ 221.006122][ T4901] device hsr_slave_0 left promiscuous mode [ 221.081530][ T4901] device hsr_slave_1 left promiscuous mode [ 221.145499][ T4901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.147851][ T4901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.163010][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.170871][ T4901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.172918][ T4901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.176390][ T4901] device bridge_slave_1 left promiscuous mode [ 221.180339][ T4901] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.184208][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.246681][ T4901] device bridge_slave_0 left promiscuous mode [ 221.248474][ T4901] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.432028][ T4901] device veth1_macvtap left promiscuous mode [ 221.434193][ T4901] device veth0_macvtap left promiscuous mode [ 221.437197][ T4901] device veth1_vlan left promiscuous mode [ 221.439262][ T4901] device veth0_vlan left promiscuous mode [ 222.665709][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.470630][ T4901] team0 (unregistering): Port device team_slave_1 removed [ 225.648346][ T4901] team0 (unregistering): Port device team_slave_0 removed [ 225.826178][ T4901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.058487][ T4901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.481740][ T4901] bond0 (unregistering): Released all slaves [ 228.767834][ T7298] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 228.770770][ T7298] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 228.864365][ T7306] bridge0: port 3(netdevsim0) entered blocking state [ 228.867725][ T7306] bridge0: port 3(netdevsim0) entered disabled state [ 228.871130][ T7306] device netdevsim0 entered promiscuous mode [ 228.873141][ T7306] bridge0: port 3(netdevsim0) entered blocking state [ 228.875054][ T7306] bridge0: port 3(netdevsim0) entered forwarding state [ 228.901636][ T7314] tipc: Enabling of bearer rejected, failed to enable media [ 228.904789][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.913340][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.990394][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.993181][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.031835][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.041113][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.056271][ T7089] device veth0_vlan entered promiscuous mode [ 229.106069][ T7089] device veth1_vlan entered promiscuous mode [ 229.155065][ T7089] device veth0_macvtap entered promiscuous mode [ 229.179198][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 229.182118][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 229.184875][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.219901][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.225927][ T5052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.236980][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 229.253392][ T7089] device veth1_macvtap entered promiscuous mode [ 229.276717][ T7337] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 229.295824][ T7337] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 229.508934][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.524659][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.538676][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.553589][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.565589][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.573226][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.587078][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.594381][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.603804][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.621043][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.627122][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.633163][ T5045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.668531][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.671881][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.678061][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.687333][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.697065][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.746658][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.752987][ T7089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.765384][ T7089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.773876][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.780854][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.783930][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.803252][ T7089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.812355][ T7089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.824434][ T7089] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.841694][ T7089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.680034][ T7365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.683985][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.687133][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.706772][ T4313] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 230.721875][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.903993][ T7373] tipc: Enabled bearer , priority 0 [ 230.925822][ T5045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.928693][ T5045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.049579][ T7372] tipc: Resetting bearer [ 231.912102][ T4382] tipc: Node number set to 3758096385 [ 242.783995][ T7372] tipc: Disabling bearer [ 242.812659][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.826025][ T7392] bridge0: port 3(netdevsim0) entered blocking state [ 242.827887][ T7392] bridge0: port 3(netdevsim0) entered disabled state [ 245.325783][ T7421] loop2: detected capacity change from 0 to 40427 [ 245.389459][ T7461] Device name cannot be null; rc = [-22] [ 245.533423][ T7421] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 245.685334][ T7421] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 245.999787][ T7421] F2FS-fs (loop2): invalid crc value [ 246.125776][ T7421] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 247.324534][ T4311] Bluetooth: hci0: Invalid handle: 0x0f00 > 0x0eff [ 247.969166][ T7491] vhci_hcd: invalid port number 96 [ 248.431198][ T7491] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 248.806196][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.432451][ T4313] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 253.948145][ T7584] binder: 7583:7584 tried to acquire reference to desc 0, got 1 instead [ 253.974677][ T7584] binder: 7583:7584 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 253.979171][ T7584] binder: 7584 RLIMIT_NICE not set [ 254.080627][ T7584] binder: 7584 RLIMIT_NICE not set [ 254.105704][ T7584] binder: 7584 RLIMIT_NICE not set [ 254.115391][ T7584] binder: 7583:7584 Acquire 1 refcount change on invalid ref 5 ret -22 [ 254.117687][ T7584] binder: 7583:7584 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 254.171308][ T7593] loop3: detected capacity change from 0 to 256 [ 254.180488][ T7591] xt_connbytes: Forcing CT accounting to be enabled [ 254.182542][ T7591] set match dimension is over the limit! [ 254.259639][ T4440] binder: undelivered TRANSACTION_COMPLETE [ 254.262746][ T4440] binder: undelivered transaction 154, process died. [ 254.268949][ T4440] binder: undelivered TRANSACTION_COMPLETE [ 254.675836][ T27] audit: type=1326 audit(254.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c15aba8 code=0x7ffc0000 [ 255.027763][ T7430] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.153357][ T27] audit: type=1326 audit(254.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=152 compat=0 ip=0xffff9c15aba8 code=0x7ffc0000 [ 255.214096][ T27] audit: type=1326 audit(254.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c15aba8 code=0x7ffc0000 [ 255.271277][ T27] audit: type=1326 audit(254.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9c15aba8 code=0x7ffc0000 [ 255.610280][ T7616] binder: BINDER_SET_CONTEXT_MGR already set [ 255.612998][ T7616] binder: 7604:7616 ioctl 4018620d 20000040 returned -16 [ 255.616658][ T7616] binder: 7604:7616 ioctl c0306201 0 returned -14 [ 256.217493][ T4311] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 258.654444][ T7632] loop5: detected capacity change from 0 to 32768 [ 258.662557][ T7657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.666568][ T7657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.668740][ T7657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.681505][ T7657] device vlan2 left promiscuous mode [ 258.682988][ T7657] device macvlan1 left promiscuous mode [ 258.684990][ T7657] device bridge1 left promiscuous mode [ 258.947919][ T7632] XFS (loop5): Mounting V5 Filesystem [ 259.568578][ T7632] XFS (loop5): AIL initialisation failed: error -12 [ 259.686897][ T7632] XFS (loop5): log mount failed [ 259.933967][ T4313] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 259.976584][ T7698] loop1: detected capacity change from 0 to 16 [ 260.002662][ T7698] erofs: (device loop1): mounted with root inode @ nid 36. [ 260.308228][ T7707] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.311105][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 260.313631][ T7707] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 260.408817][ T27] audit: type=1326 audit(260.380:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa975aba8 code=0x7ffc0000 [ 260.931933][ T27] audit: type=1326 audit(260.380:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=152 compat=0 ip=0xffffa975aba8 code=0x7ffc0000 [ 261.066241][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 261.068838][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 261.075724][ T27] audit: type=1326 audit(260.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa975aba8 code=0x7ffc0000 [ 261.140478][ T7707] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 261.143382][ T27] audit: type=1326 audit(260.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=243 compat=0 ip=0xffffa975aba8 code=0x7ffc0000 [ 261.173954][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 261.186854][ T27] audit: type=1326 audit(260.390:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa975aba8 code=0x7ffc0000 [ 261.193111][ T7707] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 261.293895][ T27] audit: type=1326 audit(260.390:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.2.1008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa975aba8 code=0x7ffc0000 [ 261.317974][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 261.320568][ T7707] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 261.323150][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 261.424713][ T7707] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 261.434837][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 261.470210][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 261.472852][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 261.523109][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 261.560231][ T7707] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 261.562906][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 261.594085][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 261.601793][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 261.606320][ T7707] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 261.609001][ T7707] syz.1.1006: attempt to access beyond end of device [ 261.609001][ T7707] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 261.612868][ T7707] syz.1.1006: attempt to access beyond end of device [ 261.612868][ T7707] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 261.617801][ T7707] syz.1.1006: attempt to access beyond end of device [ 261.617801][ T7707] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 261.621851][ T7707] syz.1.1006: attempt to access beyond end of device [ 261.621851][ T7707] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 262.274224][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.290777][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.585409][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 262.614824][ T4311] Bluetooth: hci5: Invalid handle: 0x0f00 > 0x0eff [ 262.767156][ T22] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 262.769702][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.781290][ T22] usb 1-1: config 0 descriptor?? [ 262.803434][ T22] gspca_main: spca508-2.14.0 probing 8086:0110 [ 262.809908][ T7766] loop2: detected capacity change from 0 to 128 [ 262.814403][ T7766] EXT4-fs: Ignoring removed nobh option [ 262.849895][ T7766] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 263.001344][ T22] gspca_spca508: reg_read err -32 [ 263.003467][ T22] gspca_spca508: reg_read err -32 [ 263.005581][ T22] gspca_spca508: reg_read err -32 [ 263.014679][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 263.515937][ T22] gspca_spca508: reg_read err -110 [ 263.520048][ T22] gspca_spca508: reg write: error -32 [ 263.522032][ T22] spca508: probe of 1-1:0.0 failed with error -32 [ 263.758805][ T22] usb 1-1: USB disconnect, device number 6 [ 263.951070][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 265.152036][ T7804] loop5: detected capacity change from 0 to 128 [ 265.186733][ T7804] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 265.201558][ T7804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.242755][ T27] audit: type=1326 audit(266.220:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef5aba8 code=0x7ffc0000 [ 266.249511][ T27] audit: type=1326 audit(266.220:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef5aba8 code=0x7ffc0000 [ 266.256211][ T27] audit: type=1326 audit(266.220:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=152 compat=0 ip=0xffff7ef5aba8 code=0x7ffc0000 [ 266.262452][ T27] audit: type=1326 audit(266.220:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef5aba8 code=0x7ffc0000 [ 266.268561][ T27] audit: type=1326 audit(266.220:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef5aba8 code=0x7ffc0000 [ 266.274521][ T27] audit: type=1326 audit(266.220:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=243 compat=0 ip=0xffff7ef5aba8 code=0x7ffc0000 [ 266.280574][ T27] audit: type=1326 audit(266.220:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef5aba8 code=0x7ffc0000 [ 266.286551][ T27] audit: type=1326 audit(266.220:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.1038" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef5aba8 code=0x7ffc0000 [ 266.528969][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 266.786278][ T7835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.166311][ T4313] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 267.728540][ T7864] loop2: detected capacity change from 0 to 128 [ 267.824699][ T7865] Bluetooth: MGMT ver 1.22 [ 267.858638][ T7865] device bridge1 entered promiscuous mode [ 268.659002][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 268.824642][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.827475][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.962833][ T7884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.943957][ T4311] Bluetooth: hci0: Invalid handle: 0x0f00 > 0x0eff [ 270.934126][ T7913] loop0: detected capacity change from 0 to 128 [ 270.948834][ T7913] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 271.046351][ T7918] fuse: Bad value for 'fd' [ 271.148818][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 271.829952][ T7888] block nbd5: shutting down sockets [ 271.909618][ T7936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.004772][ T7943] loop3: detected capacity change from 0 to 256 [ 272.039468][ T7943] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.066710][ T7943] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 272.245728][ T4311] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 272.448909][ T7960] mmap: syz.5.1080 (7960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 272.689842][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 273.337644][ T7985] block nbd1: shutting down sockets [ 273.405485][ T4382] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 273.855718][ T4382] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 273.858370][ T4382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.860574][ T4382] usb 1-1: Product: syz [ 273.861690][ T4382] usb 1-1: Manufacturer: syz [ 273.862973][ T4382] usb 1-1: SerialNumber: syz [ 276.675073][ T4382] usb 1-1: config 0 descriptor?? [ 276.698088][ T4382] usb 1-1: can't set config #0, error -71 [ 276.701310][ T4382] usb 1-1: USB disconnect, device number 7 [ 276.922424][ T8007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.046281][ T8011] loop5: detected capacity change from 0 to 1764 [ 277.902844][ T8014] [ 277.903900][ T8014] ============================= [ 277.905454][ T8014] WARNING: suspicious RCU usage [ 277.906868][ T8014] 6.1.142-syzkaller #0 Not tainted [ 277.908395][ T8014] ----------------------------- [ 277.909794][ T8014] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage! [ 277.912181][ T8014] [ 277.912181][ T8014] other info that might help us debug this: [ 277.912181][ T8014] [ 277.914961][ T8014] [ 277.914961][ T8014] rcu_scheduler_active = 2, debug_locks = 1 [ 277.917289][ T8014] 3 locks held by syz.0.1093/8014: [ 277.918843][ T8014] #0: ffff80001777a830 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 277.921277][ T8014] #1: ffff0000de1a07c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x238/0x760 [ 277.924027][ T8014] #2: ffff0000d9700d40 (&wdev->mtx){+.+.}-{3:3}, at: nl80211_new_station+0x10ac/0x1584 [ 277.926982][ T8014] [ 277.926982][ T8014] stack backtrace: [ 277.928553][ T8014] CPU: 1 PID: 8014 Comm: syz.0.1093 Not tainted 6.1.142-syzkaller #0 [ 277.930824][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.933641][ T8014] Call trace: [ 277.934674][ T8014] dump_backtrace+0x1c8/0x1f4 [ 277.935945][ T8014] show_stack+0x2c/0x3c [ 277.937096][ T8014] __dump_stack+0x30/0x40 [ 277.938297][ T8014] dump_stack_lvl+0xf8/0x160 [ 277.939577][ T8014] dump_stack+0x1c/0x5c [ 277.940767][ T8014] lockdep_rcu_suspicious+0x20c/0x3d4 [ 277.942363][ T8014] sta_remove_link+0x2bc/0x3d8 [ 277.943800][ T8014] sta_info_free+0x60/0x608 [ 277.945044][ T8014] ieee80211_add_station+0x2fc/0x4d4 [ 277.946515][ T8014] rdev_add_station+0x148/0x37c [ 277.947900][ T8014] nl80211_new_station+0x116c/0x1584 [ 277.949439][ T8014] genl_family_rcv_msg_doit+0x1f8/0x2f4 [ 277.951044][ T8014] genl_rcv_msg+0x444/0x62c [ 277.952294][ T8014] netlink_rcv_skb+0x208/0x3c4 [ 277.953570][ T8014] genl_rcv+0x38/0x50 [ 277.954777][ T8014] netlink_unicast+0x600/0x818 [ 277.956112][ T8014] netlink_sendmsg+0x6e8/0x9b0 [ 277.957565][ T8014] ____sys_sendmsg+0x5b8/0x918 [ 277.959098][ T8014] __sys_sendmsg+0x25c/0x320 [ 277.960400][ T8014] __arm64_sys_sendmsg+0x80/0x94 [ 277.961875][ T8014] invoke_syscall+0x98/0x2bc [ 277.963205][ T8014] el0_svc_common+0x138/0x258 [ 277.964778][ T8014] do_el0_svc+0x58/0x13c [ 277.965922][ T8014] el0_svc+0x58/0x138 [ 277.967072][ T8014] el0t_64_sync_handler+0x84/0xf0 [ 277.968545][ T8014] el0t_64_sync+0x18c/0x190