last executing test programs: 9.921536256s ago: executing program 0 (id=193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000003060103000042670000000000000000"], 0x14}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x23, &(0x7f0000000040), 0x8) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'nq\x00'}, 0x2c) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x7fff, @remote}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}], 0x1, 0xfc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000780)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x400000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) getsockopt$sock_cred(r3, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000200)) unshare(0x60480) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000040601040000000000000000000000000500010007"], 0x1c}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x3, @pix={0x0, 0xf8, 0x31303453, 0x9, 0x1, 0x40, 0x3, 0xfffffff7, 0x1, 0x7, 0x1, 0x6}}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x8, 0x3, 0x7}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000300)=0x8, 0x4) 8.473994662s ago: executing program 1 (id=199): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 8.171891147s ago: executing program 3 (id=200): syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$cont(0x20, r0, 0x0, 0x0) 7.956164743s ago: executing program 3 (id=201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x23, &(0x7f0000000040)={r2}, 0x8) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'nq\x00'}, 0x2c) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x7fff, @remote}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}], 0x1, 0xfc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000780)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x400000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) getsockopt$sock_cred(r4, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000200)) unshare(0x60480) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000040601040000000000000000000000000500010007"], 0x1c}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x3, @pix={0x0, 0xf8, 0x31303453, 0x9, 0x1, 0x40, 0x3, 0xfffffff7, 0x1, 0x7, 0x1, 0x6}}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x8, 0x3, 0x7}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000040)=0x100, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000300)=0x8, 0x4) 7.823455455s ago: executing program 0 (id=202): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 7.499825799s ago: executing program 1 (id=204): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup2(r4, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND_IP(r5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x6, 'netpci0\x00', {0x2}, 0x9}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000340)={0x0, 'veth1_vlan\x00', {0x2}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030067656e65766531000000000000000000", @ANYRES32=r3], 0x3c}}, 0x4040004) r9 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r10, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r10}}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x6c, 0x2e, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9, 0x4}, {0x5, 0x8}, {0x0, 0xf}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc06}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x3b1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x448d0}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0xae43}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 6.81387765s ago: executing program 0 (id=206): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 6.36043475s ago: executing program 1 (id=207): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="0a00e800ffffffffffff00002c001780040005000400020004000400040004000400040004000200040004000400040004000600040002000a00e80008021100000000001c00e7003fad2c79c647e430c2598342e684eeb571ae38e066467eef0a00e800ffffffffffff00000a00e80008021100000100001c00e700c96f00bd9053fff6b9fd4d2ebd2e562ae164e71c00e700b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d1c00e70025b007e2228d499dfa4c9159aa1950f875de419bb77f579f080005000100000005005300000000001c00e70086ee273988305cbc66646d4a4666d53481865aa4bb2c7fb01c00e700593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf5208001780040006001c00e7007018f0777978f086f6041fd6d6c06260fa0283ade3f27e1914001780040002000400030004000400040001001c00e700613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf208001780040002001c00e700899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c114001780040003000400050004000200040001001c00e7000622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d0a00e80008021100000000002400178004000200040006000400060004000300040003000400040004000100040005000a00e80008021100000000001c001780040003000400060004000600040004000400040004000400100017800400040004000500040005000a001800030303030303000085e3aafe44b0331da72d6c238256471f8db5f021ab758e23a8814af63d0e899928d7ef0fa4f075a7e475783b6b5343f51470e5fc05bb7984d596c0b27cd11bec1ff169d24c2eb2c8a7dd2fb576041a0001520763eb1f7753de8a459a666c153bf8eee36d2f2bc492fa51e2a16d8143538912adc609fa27c4e038f1b3508e855d0b5bee16ae2b953b2877973873e79ffda24d827d6052bb2d0208f5fadadb24df91dc9470c158324e"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 6.24236185s ago: executing program 3 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="0a00e800ffffffffffff00002c001780040005000400020004000400040004000400040004000200040004000400040004000600040002000a00e80008021100000000001c00e7003fad2c79c647e430c2598342e684eeb571ae38e066467eef0a00e800ffffffffffff00000a00e80008021100000100001c00e700c96f00bd9053fff6b9fd4d2ebd2e562ae164e71c00e700b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d1c00e70025b007e2228d499dfa4c9159aa1950f875de419bb77f579f080005000100000005005300000000001c00e70086ee273988305cbc66646d4a4666d53481865aa4bb2c7fb01c00e700593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf5208001780040006001c00e7007018f0777978f086f6041fd6d6c06260fa0283ade3f27e1914001780040002000400030004000400040001001c00e700613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf208001780040002001c00e700899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c114001780040003000400050004000200040001001c00e7000622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d0a00e80008021100000000002400178004000200040006000400060004000300040003000400040004000100040005000a00e80008021100000000001c001780040003000400060004000600040004000400040004000400100017800400040004000500040005000a001800030303030303000085e3aafe44b0331da72d6c238256471f8db5f021ab758e23a8814af63d0e899928d7ef0fa4f075a7e475783b6b5343f51470e5fc05bb7984d596c0b27cd11bec1ff169d24c2eb2c8a7dd2fb576041a0001520763eb1f7753de8a459a666c153bf8eee36d2f2bc492fa51e2a16d8143538912adc609fa27c4e038f1b3508e855d0b5bee16ae2b953b2877973873e79ffda24d827d6052bb2d0208f5fadadb24df91dc9470c158324e"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r10, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 6.01627112s ago: executing program 2 (id=209): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x4e8, 0x340, 0xc0, 0xc0, 0x340, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'nicvf0\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'bond_slave_1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.957428379s ago: executing program 2 (id=210): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='uock io+'], 0xc) close(r5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$usbfs(&(0x7f0000002680), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 5.5490878s ago: executing program 0 (id=211): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='uock io+'], 0xc) close(r5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000002680), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 4.824349783s ago: executing program 2 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000003060103000042670000000000000000"], 0x14}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x23, &(0x7f0000000040), 0x8) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'nq\x00'}, 0x2c) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x7fff, @remote}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}], 0x1, 0xfc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000780)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x400000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) getsockopt$sock_cred(r3, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000200)) unshare(0x60480) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000040601040000000000000000000000000500010007"], 0x1c}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x3, @pix={0x0, 0xf8, 0x31303453, 0x9, 0x1, 0x40, 0x3, 0xfffffff7, 0x1, 0x7, 0x1, 0x6}}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x8, 0x3, 0x7}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000300)=0x8, 0x4) 4.696430443s ago: executing program 1 (id=213): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3088], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = dup(r2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[], 0x0) 4.550446433s ago: executing program 3 (id=214): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 4.26418149s ago: executing program 1 (id=215): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 3.908354429s ago: executing program 4 (id=216): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 3.360118838s ago: executing program 1 (id=217): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup2(r4, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND_IP(r5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x6, 'netpci0\x00', {0x2}, 0x9}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000340)={0x0, 'veth1_vlan\x00', {0x2}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030067656e65766531000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x4040004) r9 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r10, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r10}}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x6c, 0x2e, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9, 0x4}, {0x5, 0x8}, {0x0, 0xf}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc06}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x3b1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x448d0}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0xae43}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 3.334056584s ago: executing program 3 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x23, &(0x7f0000000040)={r2}, 0x8) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x0, 'nq\x00'}, 0x2c) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x7fff, @remote}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}], 0x1, 0xfc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000780)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x400000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) getsockopt$sock_cred(r4, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000200)) unshare(0x60480) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000040601040000000000000000000000000500010007"], 0x1c}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x3, @pix={0x0, 0xf8, 0x31303453, 0x9, 0x1, 0x40, 0x3, 0xfffffff7, 0x1, 0x7, 0x1, 0x6}}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x8, 0x3, 0x7}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000040)=0x100, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000300)=0x8, 0x4) 3.218340821s ago: executing program 2 (id=219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x1, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b1000", 0x2c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) unshare(0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x1ec, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1cf, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x76, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd5285"}, {0xdd, 0xbf, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7d5ab4df31389e8ac5150470ceda144758f"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x60, "a83d63f0d27aa001676fcb9ee526e68baeaffb47b1c3feb502aa94cc0c02fa026b0843067418e349a066eb39770717f632173e6bf4be46c03a8b7d4a3e7be2dd21f3c139c233576a6580ed5368fc27caead9239899776d594603177acb5662b5"}]}}]}, 0x1ec}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.094278505s ago: executing program 4 (id=220): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x4e8, 0x340, 0xc0, 0xc0, 0x340, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'nicvf0\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x0, 'bond_slave_1\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.924080699s ago: executing program 4 (id=221): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702", 0x37, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 2.893135478s ago: executing program 2 (id=222): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="0a00e800ffffffffffff00002c001780040005000400020004000400040004000400040004000200040004000400040004000600040002000a00e80008021100000000001c00e7003fad2c79c647e430c2598342e684eeb571ae38e066467eef0a00e800ffffffffffff00000a00e80008021100000100001c00e700c96f00bd9053fff6b9fd4d2ebd2e562ae164e71c00e700b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d1c00e70025b007e2228d499dfa4c9159aa1950f875de419bb77f579f080005000100000005005300000000001c00e70086ee273988305cbc66646d4a4666d53481865aa4bb2c7fb01c00e700593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf5208001780040006001c00e7007018f0777978f086f6041fd6d6c06260fa0283ade3f27e1914001780040002000400030004000400040001001c00e700613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf208001780040002001c00e700899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c114001780040003000400050004000200040001001c00e7000622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d0a00e80008021100000000002400178004000200040006000400060004000300040003000400040004000100040005000a00e80008021100000000001c001780040003000400060004000600040004000400040004000400100017800400040004000500040005000a001800030303030303000085e3aafe44b0331da72d6c238256471f8db5f021ab758e23a8814af63d0e899928d7ef0fa4f075a7e475783b6b5343f51470e5fc05bb7984d596c0b27cd11bec1ff169d24c2eb2c8a7dd2fb576041a0001520763eb1f7753de8a459a666c153bf8eee36d2f2bc492fa51e2a16d8143538912adc609fa27c4e038f1b3508e855d0b5bee16ae2b953b2877973873e79ffda24d827d6052bb2d0208f5fadadb24df91dc9470c158324e"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 2.654200178s ago: executing program 4 (id=223): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="0a00e800ffffffffffff00002c001780040005000400020004000400040004000400040004000200040004000400040004000600040002000a00e80008021100000000001c00e7003fad2c79c647e430c2598342e684eeb571ae38e066467eef0a00e800ffffffffffff00000a00e80008021100000100001c00e700c96f00bd9053fff6b9fd4d2ebd2e562ae164e71c00e700b2ff383a5dc0ffea98f34b1305f465daaf7e5f02f333218d1c00e70025b007e2228d499dfa4c9159aa1950f875de419bb77f579f080005000100000005005300000000001c00e70086ee273988305cbc66646d4a4666d53481865aa4bb2c7fb01c00e700593cd6f03e665286cc2e9244b03f545a619bb8032fd0bf5208001780040006001c00e7007018f0777978f086f6041fd6d6c06260fa0283ade3f27e1914001780040002000400030004000400040001001c00e700613e396aa0df95d5f8c4a85c44a64d21794e63e3d938fdf208001780040002001c00e700899ff1edf7b30cdcb80fcfe1f13b58057983e1bb003284c114001780040003000400050004000200040001001c00e7000622a9d42c5a2d5bc66a558f57ecafb8252ba46a7087274d0a00e80008021100000000002400178004000200040006000400060004000300040003000400040004000100040005000a00e80008021100000000001c001780040003000400060004000600040004000400040004000400100017800400040004000500040005000a001800030303030303000085e3aafe44b0331da72d6c238256471f8db5f021ab758e23a8814af63d0e899928d7ef0fa4f075a7e475783b6b5343f51470e5fc05bb7984d596c0b27cd11bec1ff169d24c2eb2c8a7dd2fb576041a0001520763eb1f7753de8a459a666c153bf8eee36d2f2bc492fa51e2a16d8143538912adc609fa27c4e038f1b3508e855d0b5bee16ae2b953b2877973873e79ffda24d827d6052bb2d0208f5fadadb24df91dc9470c158324e"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 2.340189187s ago: executing program 0 (id=224): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='uock io+'], 0xc) close(r5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$usbfs(&(0x7f0000002680), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) 1.934038933s ago: executing program 2 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r10, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x14, 0x1, 0x1, [r11]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 821.276665ms ago: executing program 0 (id=226): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3c}}) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = dup2(r4, r4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) write$RDMA_USER_CM_CMD_BIND_IP(r5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x6, 'netpci0\x00', {0x2}, 0x9}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000340)={0x0, 'veth1_vlan\x00', {0x2}, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030067656e657665310000", @ANYRES32=r3, @ANYBLOB="3fcb4304b72750254cb1c9db23f3da24b460c4fa40dddcded1820dac81434bdb1f10cea6b0bb2251274923a0f7969ef1262f4c07a081682d9138c6881d91b7a95f5dc70be5aa822dc3a7cc14fe213689c837c7d3d1a4e8611a5d3cb8e48bbd2aaf08fa6b34d01827502e803e055bf62904000000000000000000"], 0x3c}}, 0x4040004) r9 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r10, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r10}}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x6c, 0x2e, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9, 0x4}, {0x5, 0x8}, {0x0, 0xf}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xc06}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x3b1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x448d0}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0xae43}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 773.629821ms ago: executing program 4 (id=227): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x20108c0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfe, 0x619d, &(0x7f00000012c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)={[{@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8no}, {@fat=@quiet}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x21d, &(0x7f0000000240)="$eJzs3T9rU1EYB+C3ttVSkHQQiiJ4xcUptBX3FqkgBhQlg04W26I0sWAgoEPr5pfQr6Cjq+Cgrn4BEaQKLnarIETqjY2tiU1pb66Y51nyknt+509yySFDTm6drC7NL9cW19fXYmRkIIamYzo2BmIsDsVgpB4FAPA/2Wg04msjlfdcAIDesP8DQP/pcv+/2sMpAQAZ8/0fAPrP9Rs3L8+USrPXkmQkovq4Xq6X08f0+sxi3I1KLMREFOJ7RGNLWl+8VJqdSDZ9GotydbWZX62XB7fnJ6MQY+3zk0lqe344Rpv596OxEFNRiGPt81Nt84fj7Jnfxi9GId7djuWoxHxsZlv5lckkuXCltCN/5Gc7AAAAAAAAAAAAAAAAAAAAAADIQjHZ0vb8nmKx0/U03/35QDvP5xmKE0P5rh0AAAAAAAAAAAAAAAAAAAD+FbUHD5fmKpWF+38r7r199mq3Nl0WA81x99vP/oujpz8+6dRmcG+vz8EWL09lOcS3g+nn9dqd4+dq4+dzeweHI+LPZzreWl8KERnN53mut/GvVe/aePzp9NyLlQ+fu+255x9FAAAAAAAAAAAAAAAAAADQ91o/+t1T7E1mEwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHLT+/z+7Iu81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAjwAAAP//3cefEg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 634.566981ms ago: executing program 3 (id=228): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) 0s ago: executing program 4 (id=229): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xe0701, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x80045105, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) getpid() sendmsg$unix(r11, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x30}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x30) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000ffffffffffff0802110000000802110000a77a1e3724c60010000000fcff0000"], 0x1e) socket$pppl2tp(0x18, 0x1, 0x1) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x0, 0x0, @default, @val={0x1, 0x2, [{}, {}]}, @void}, 0x22) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 65.584858][ T5230] cgroup: Unknown subsys name 'net' [ 65.690815][ T5230] cgroup: Unknown subsys name 'cpuset' [ 65.699431][ T5230] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.240423][ T5230] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.676031][ T5251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.697543][ T5253] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.702161][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.712313][ T5252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.721258][ T5252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.722344][ T5256] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.729057][ T5252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.743084][ T5252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.751262][ T5260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.759379][ T5261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.767731][ T5260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.776476][ T5261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.786104][ T5261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.795504][ T5261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.799674][ T5258] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.803383][ T5261] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.817389][ T5260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.821169][ T5256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.825602][ T5261] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.839674][ T5258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.840405][ T5261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.847003][ T5258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.856306][ T5261] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.863125][ T5258] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.869852][ T5261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.883613][ T5262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.891473][ T5261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.900813][ T5251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.908322][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.924350][ T4630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.404612][ T5255] chnl_net:caif_netlink_parms(): no params data found [ 70.418258][ T5254] chnl_net:caif_netlink_parms(): no params data found [ 70.447147][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 70.505984][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 70.608287][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 70.650624][ T5254] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.660296][ T5254] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.668112][ T5254] bridge_slave_0: entered allmulticast mode [ 70.674951][ T5254] bridge_slave_0: entered promiscuous mode [ 70.719304][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.726781][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.733967][ T5255] bridge_slave_0: entered allmulticast mode [ 70.741139][ T5255] bridge_slave_0: entered promiscuous mode [ 70.748641][ T5254] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.755856][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.763112][ T5254] bridge_slave_1: entered allmulticast mode [ 70.770007][ T5254] bridge_slave_1: entered promiscuous mode [ 70.810288][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.821761][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.829456][ T5255] bridge_slave_1: entered allmulticast mode [ 70.836822][ T5255] bridge_slave_1: entered promiscuous mode [ 70.850322][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.857968][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.865168][ T5240] bridge_slave_0: entered allmulticast mode [ 70.872569][ T5240] bridge_slave_0: entered promiscuous mode [ 70.893752][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.901235][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.908515][ T5241] bridge_slave_0: entered allmulticast mode [ 70.915454][ T5241] bridge_slave_0: entered promiscuous mode [ 70.944038][ T5254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.953858][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.961221][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.968554][ T5240] bridge_slave_1: entered allmulticast mode [ 70.976065][ T5240] bridge_slave_1: entered promiscuous mode [ 70.986214][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.993412][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.001051][ T5241] bridge_slave_1: entered allmulticast mode [ 71.008364][ T5241] bridge_slave_1: entered promiscuous mode [ 71.026097][ T5255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.038406][ T5255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.050806][ T5254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.094195][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.150446][ T5255] team0: Port device team_slave_0 added [ 71.158596][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.174328][ T5254] team0: Port device team_slave_0 added [ 71.183411][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.196856][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.213977][ T5255] team0: Port device team_slave_1 added [ 71.239343][ T5254] team0: Port device team_slave_1 added [ 71.270477][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.277841][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.285055][ T5243] bridge_slave_0: entered allmulticast mode [ 71.292386][ T5243] bridge_slave_0: entered promiscuous mode [ 71.300638][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.308159][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.319608][ T5243] bridge_slave_1: entered allmulticast mode [ 71.326936][ T5243] bridge_slave_1: entered promiscuous mode [ 71.345006][ T5241] team0: Port device team_slave_0 added [ 71.365643][ T5240] team0: Port device team_slave_0 added [ 71.399637][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.406704][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.432761][ T5255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.447865][ T5241] team0: Port device team_slave_1 added [ 71.462361][ T5240] team0: Port device team_slave_1 added [ 71.479969][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.494183][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.501577][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.529431][ T5255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.558605][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.568984][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.595134][ T5254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.617623][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.634615][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.641749][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.669541][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.682397][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.689908][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.716982][ T5254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.729295][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.736596][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.736664][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.743548][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.777007][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.789861][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.797344][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.823405][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.852200][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.861746][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.889031][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.896370][ T5246] Bluetooth: hci4: command tx timeout [ 71.937857][ T5243] team0: Port device team_slave_0 added [ 71.946217][ T5243] team0: Port device team_slave_1 added [ 71.965507][ T5246] Bluetooth: hci3: command tx timeout [ 71.965670][ T54] Bluetooth: hci0: command tx timeout [ 71.977335][ T5261] Bluetooth: hci1: command tx timeout [ 71.994568][ T5241] hsr_slave_0: entered promiscuous mode [ 72.001368][ T5241] hsr_slave_1: entered promiscuous mode [ 72.029152][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.036451][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.049282][ T54] Bluetooth: hci2: command tx timeout [ 72.062942][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.108404][ T5255] hsr_slave_0: entered promiscuous mode [ 72.114800][ T5255] hsr_slave_1: entered promiscuous mode [ 72.121714][ T5255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.130063][ T5255] Cannot create hsr debugfs directory [ 72.137382][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.144356][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.170874][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.197338][ T5240] hsr_slave_0: entered promiscuous mode [ 72.203905][ T5240] hsr_slave_1: entered promiscuous mode [ 72.210145][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.217972][ T5240] Cannot create hsr debugfs directory [ 72.258192][ T5254] hsr_slave_0: entered promiscuous mode [ 72.264699][ T5254] hsr_slave_1: entered promiscuous mode [ 72.271359][ T5254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.279033][ T5254] Cannot create hsr debugfs directory [ 72.413870][ T5243] hsr_slave_0: entered promiscuous mode [ 72.421620][ T5243] hsr_slave_1: entered promiscuous mode [ 72.431568][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.439529][ T5243] Cannot create hsr debugfs directory [ 72.696204][ T5254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.725662][ T5254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.740467][ T5254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.751277][ T5254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.795888][ T5241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.824342][ T5241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.842584][ T5241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.858947][ T5241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.880216][ T5240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.891522][ T5240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.913954][ T5240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.930332][ T5240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.003456][ T5255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.025492][ T5255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.048938][ T5255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.077615][ T5255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.151810][ T5243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.161927][ T5243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.178342][ T5243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.189568][ T5243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.250616][ T5254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.338658][ T5254] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.371773][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.383379][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.390735][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.422552][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.436660][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.443822][ T2552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.482625][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.526534][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.536488][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.548817][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.594110][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.601854][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.612652][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.619806][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.632497][ T5255] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.659132][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.666313][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.679889][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.708612][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.715790][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.728082][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.735298][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.744485][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.751636][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.793368][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.800541][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.922462][ T2552] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.929780][ T2552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.967735][ T54] Bluetooth: hci4: command tx timeout [ 74.045894][ T54] Bluetooth: hci0: command tx timeout [ 74.051395][ T54] Bluetooth: hci1: command tx timeout [ 74.058117][ T5261] Bluetooth: hci3: command tx timeout [ 74.127193][ T54] Bluetooth: hci2: command tx timeout [ 74.214483][ T5254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.282598][ T5255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.455116][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.501503][ T5254] veth0_vlan: entered promiscuous mode [ 74.521614][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.540306][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.580770][ T5254] veth1_vlan: entered promiscuous mode [ 74.664260][ T5241] veth0_vlan: entered promiscuous mode [ 74.702330][ T5241] veth1_vlan: entered promiscuous mode [ 74.724012][ T5254] veth0_macvtap: entered promiscuous mode [ 74.753858][ T5243] veth0_vlan: entered promiscuous mode [ 74.770502][ T5254] veth1_macvtap: entered promiscuous mode [ 74.791481][ T5240] veth0_vlan: entered promiscuous mode [ 74.808712][ T5240] veth1_vlan: entered promiscuous mode [ 74.824120][ T5243] veth1_vlan: entered promiscuous mode [ 74.849626][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.864127][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.888793][ T5254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.899672][ T5254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.910055][ T5254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.919921][ T5254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.939978][ T5241] veth0_macvtap: entered promiscuous mode [ 74.947850][ T5255] veth0_vlan: entered promiscuous mode [ 74.983522][ T5255] veth1_vlan: entered promiscuous mode [ 74.992371][ T5241] veth1_macvtap: entered promiscuous mode [ 75.041158][ T5243] veth0_macvtap: entered promiscuous mode [ 75.078178][ T5243] veth1_macvtap: entered promiscuous mode [ 75.088931][ T5240] veth0_macvtap: entered promiscuous mode [ 75.104801][ T5240] veth1_macvtap: entered promiscuous mode [ 75.140780][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.151761][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.164104][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.192229][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.202934][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.214650][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.226388][ T5241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.235858][ T5241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.244597][ T5241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.254048][ T5241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.267083][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.275120][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.283736][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.294671][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.304794][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.315499][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.327911][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.371508][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.382612][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.393855][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.406509][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.418922][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.432204][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.442877][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.452942][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.463766][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.474027][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.484628][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.497224][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.511188][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.521852][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.532045][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.542918][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.553663][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.564406][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.578598][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.592483][ T5255] veth0_macvtap: entered promiscuous mode [ 75.604721][ T2575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.607892][ T5243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.630009][ T2575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.639613][ T5243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.650125][ T5243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.659809][ T5243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.676790][ T5255] veth1_macvtap: entered promiscuous mode [ 75.697396][ T5240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.706279][ T5240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.715021][ T5240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.724054][ T5240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.781861][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.789771][ T5254] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.793933][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.820463][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.831032][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.840942][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.853740][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.863651][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.874333][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.886397][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.908669][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.917342][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.943642][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.962962][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.993741][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.005101][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.019512][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.031071][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.041866][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.045693][ T54] Bluetooth: hci4: command tx timeout [ 76.058642][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.071418][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.093477][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.107942][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.125568][ T5255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.125594][ T5261] Bluetooth: hci3: command tx timeout [ 76.125691][ T54] Bluetooth: hci1: command tx timeout [ 76.144074][ T5255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.152776][ T54] Bluetooth: hci0: command tx timeout [ 76.158276][ T5255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.171715][ T5255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.206311][ T54] Bluetooth: hci2: command tx timeout [ 76.259742][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.276901][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.308115][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.321131][ T5330] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.370250][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.383544][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.428366][ T2520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.449084][ T2520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.486879][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 76.515905][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 76.529135][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.534267][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 76.559022][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.570704][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 76.593917][ T5333] loop0: detected capacity change from 0 to 512 [ 76.615647][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.635657][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 76.655639][ T2552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.661319][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 76.682236][ T2552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.701401][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 76.725392][ T5333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.751409][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.763125][ T5333] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.789151][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.833327][ T8] usb 3-1: config 0 descriptor?? [ 76.863651][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.955418][ T5299] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.138250][ T5299] usb 2-1: Using ep0 maxpacket: 8 [ 77.159358][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 77.191336][ T5299] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.221883][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.248434][ T8] usb 3-1: USB disconnect, device number 2 [ 77.262104][ T5299] usb 2-1: Product: syz [ 77.274912][ T5299] usb 2-1: Manufacturer: syz [ 77.288251][ T5344] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 77.288550][ T8] usblp0: removed [ 77.308396][ T5299] usb 2-1: SerialNumber: syz [ 77.364844][ T5344] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 77.434649][ T5346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.474515][ T5346] vlan2: entered promiscuous mode [ 77.496094][ T5346] erspan0: entered promiscuous mode [ 77.504062][ T5241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.533485][ T5346] team0: Port device vlan2 added [ 77.577071][ T5299] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 77.694509][ T5350] syz.4.9[5350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.694636][ T5350] syz.4.9[5350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.715004][ T5350] syz.4.9[5350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.950477][ T5357] loop3: detected capacity change from 0 to 512 [ 78.072143][ T5357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.096043][ T5357] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.123232][ T5354] loop0: detected capacity change from 0 to 4096 [ 78.177302][ T54] Bluetooth: hci4: command tx timeout [ 78.195917][ T5354] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 78.206589][ T54] Bluetooth: hci0: command tx timeout [ 78.212101][ T54] Bluetooth: hci3: command tx timeout [ 78.217749][ T54] Bluetooth: hci1: command tx timeout [ 78.261546][ T5364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.288781][ T5261] Bluetooth: hci2: command tx timeout [ 78.320113][ T5367] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 78.369704][ T5358] loop4: detected capacity change from 0 to 32768 [ 78.416435][ T5364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.437228][ T5358] (syz.4.13,5358,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.441513][ T5364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.468576][ T5358] (syz.4.13,5358,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 78.488749][ T5298] usb 2-1: USB disconnect, device number 2 [ 78.495632][ T5240] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.503104][ T5298] usblp0: removed [ 78.633350][ T29] audit: type=1800 audit(1728721824.829:2): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 78.645699][ T5358] JBD2: Ignoring recovery information on journal [ 78.662027][ T29] audit: type=1800 audit(1728721824.869:3): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 78.764924][ T5358] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 79.032478][ T5358] syz.4.13 (5358) used greatest stack depth: 17560 bytes left [ 79.205727][ T5255] ocfs2: Unmounting device (7,4) on (node local) [ 79.496198][ T5393] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.757823][ T5391] loop2: detected capacity change from 0 to 4096 [ 79.892992][ T5397] loop1: detected capacity change from 0 to 64 [ 80.096874][ T5388] loop0: detected capacity change from 0 to 40427 [ 80.176693][ T5375] loop3: detected capacity change from 0 to 40427 [ 80.188544][ T5388] F2FS-fs (loop0): Found nat_bits in checkpoint [ 80.267142][ T5375] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.366722][ T5388] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 80.496117][ T5375] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 80.541580][ T5409] loop2: detected capacity change from 0 to 4096 [ 80.559161][ T5241] syz-executor: attempt to access beyond end of device [ 80.559161][ T5241] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.588199][ T5409] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 80.649805][ T5241] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 80.694023][ T5240] syz-executor: attempt to access beyond end of device [ 80.694023][ T5240] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.736068][ T5240] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 80.746449][ T29] audit: type=1800 audit(1728721826.929:4): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.28" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 80.871537][ T29] audit: type=1800 audit(1728721826.929:5): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.28" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 81.106829][ T5417] loop2: detected capacity change from 0 to 1024 [ 81.114819][ T5417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.130589][ T5417] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.333172][ T5399] loop4: detected capacity change from 0 to 32768 [ 81.341213][ T5399] ======================================================= [ 81.341213][ T5399] WARNING: The mand mount option has been deprecated and [ 81.341213][ T5399] and is ignored by this kernel. Remove the mand [ 81.341213][ T5399] option from the mount to silence this warning. [ 81.341213][ T5399] ======================================================= [ 81.396224][ T5417] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 81.424382][ T5417] System zones: 0-1, 3-36 [ 81.451881][ T5399] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.558343][ T5417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.750298][ T5254] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.750491][ T5399] XFS (loop4): Ending clean mount [ 81.846158][ T5399] XFS (loop4): Quotacheck needed: Please wait. [ 81.931038][ T5399] XFS (loop4): Quotacheck: Done. [ 82.260825][ T5255] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.386701][ T5425] loop1: detected capacity change from 0 to 40427 [ 82.424647][ T5425] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 82.433744][ T5421] loop3: detected capacity change from 0 to 32768 [ 82.463665][ T5425] F2FS-fs (loop1): Image doesn't support compression [ 82.505762][ T5425] F2FS-fs (loop1): Image doesn't support compression [ 82.505928][ T5421] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.31 (5421) [ 82.520671][ T5437] loop2: detected capacity change from 0 to 4096 [ 82.566879][ T5425] F2FS-fs (loop1): invalid crc value [ 82.577557][ T5437] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 82.612602][ T5425] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.689119][ T5421] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 82.754779][ T5421] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 82.799711][ T5421] BTRFS info (device loop3): using free-space-tree [ 82.874788][ T5425] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.062296][ T5425] syz.1.34: attempt to access beyond end of device [ 83.062296][ T5425] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 83.078990][ T5425] syz.1.34: attempt to access beyond end of device [ 83.078990][ T5425] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 83.094168][ T5425] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_get_read_data_page+0x41a/0x8f0 [ 83.284185][ T5456] syzkaller1: entered promiscuous mode [ 83.312985][ T5456] syzkaller1: entered allmulticast mode [ 83.332546][ T5433] loop0: detected capacity change from 0 to 32768 [ 83.343753][ T5433] (syz.0.30,5433,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.371795][ T5433] (syz.0.30,5433,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 83.423677][ T5243] syz-executor: attempt to access beyond end of device [ 83.423677][ T5243] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 83.455645][ T5243] F2FS-fs (loop1): Remounting filesystem read-only [ 83.487228][ T5433] JBD2: Ignoring recovery information on journal [ 83.511845][ T5466] loop2: detected capacity change from 0 to 1024 [ 83.686598][ T5433] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 83.773660][ T5469] loop4: detected capacity change from 0 to 2048 [ 83.785520][ T5421] syz.3.31 (5421) used greatest stack depth: 17304 bytes left [ 84.310330][ T5240] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 84.327453][ T5474] loop1: detected capacity change from 0 to 32768 [ 84.350798][ T5469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.363466][ T5469] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.433612][ T5474] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.519661][ T5241] ocfs2: Unmounting device (7,0) on (node local) [ 84.578011][ T5255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.326523][ T5474] XFS (loop1): Ending clean mount [ 85.412973][ T5474] XFS (loop1): Quotacheck needed: Please wait. [ 85.590666][ T5493] loop3: detected capacity change from 0 to 512 [ 85.645305][ T5493] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 85.653174][ T5493] UDF-fs: Scanning with blocksize 512 failed [ 85.672286][ T5493] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 85.698671][ T5493] UDF-fs: Scanning with blocksize 1024 failed [ 85.715408][ T5474] XFS (loop1): Quotacheck: Done. [ 85.774088][ T5493] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 85.782185][ T5493] UDF-fs: Scanning with blocksize 2048 failed [ 85.792838][ T5493] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 85.872851][ T5243] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.898706][ T5493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.941912][ T29] audit: type=1800 audit(1728721832.129:6): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="bus" dev="loop3" ino=42 res=0 errno=0 [ 85.998686][ T29] audit: type=1800 audit(1728721832.189:7): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="bus" dev="loop3" ino=42 res=0 errno=0 [ 86.078866][ T29] audit: type=1800 audit(1728721832.199:8): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="bus" dev="loop3" ino=42 res=0 errno=0 [ 86.145528][ T5331] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.185083][ T5504] loop4: detected capacity change from 0 to 512 [ 86.239939][ T5504] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.266003][ T5240] UDF-fs: warning (device loop3): udf_evict_inode: Inode 42 (mode 100000) has inode size 43008 different from extent length 45056. Filesystem need not be standards compliant. [ 86.286914][ T5504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.328981][ T5504] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.339116][ T5331] usb 3-1: Using ep0 maxpacket: 16 [ 86.359080][ T5331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.370581][ T5331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.381253][ T5504] EXT4-fs (loop4): 1 truncate cleaned up [ 86.389182][ T5504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.403624][ T5331] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 86.413172][ T5331] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 86.423898][ T5331] usb 3-1: Product: syz [ 86.428232][ T5331] usb 3-1: Manufacturer: syz [ 86.444217][ T5331] usb 3-1: config 0 descriptor?? [ 86.621110][ T5497] loop0: detected capacity change from 0 to 32768 [ 86.667314][ T5255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.748355][ T5497] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 86.758036][ T5521] loop4: detected capacity change from 0 to 1024 [ 86.868613][ T5521] hfsplus: xattr searching failed [ 86.891254][ T5521] hfsplus: b-tree write err: -5, ino 3 [ 86.933079][ T5526] process 'syz.4.53' launched './file0' with NULL argv: empty string added [ 86.939178][ T5497] XFS (loop0): Ending clean mount [ 86.943899][ T5526] hfsplus: xattr searching failed [ 86.956987][ T5526] hfsplus: xattr searching failed [ 86.975032][ T5497] XFS (loop0): Quotacheck needed: Please wait. [ 86.994187][ T5331] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0xd [ 87.050624][ T5331] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 87.062461][ T5497] XFS (loop0): Quotacheck: Done. [ 87.095971][ T937] cfg80211: failed to load regulatory.db [ 87.136821][ T65] hfsplus: b-tree write err: -5, ino 3 [ 87.368603][ T5537] loop4: detected capacity change from 0 to 512 [ 87.385886][ T5241] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 87.527589][ T5537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.600789][ T5331] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 87.602997][ T5537] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.609404][ T5331] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 87.639237][ T5331] kovaplus 0003:1E7D:2D50.0001: probe with driver kovaplus failed with error -71 [ 87.677577][ T5331] usb 3-1: USB disconnect, device number 3 [ 87.853254][ T5531] loop3: detected capacity change from 0 to 32768 [ 87.880773][ T5531] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.56 (5531) [ 87.920379][ T5531] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 87.944916][ T5531] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 87.954583][ T5531] BTRFS info (device loop3): using free-space-tree [ 87.987086][ T5548] loop1: detected capacity change from 0 to 128 [ 88.037445][ T5255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.210679][ T5548] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 88.712859][ T5548] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: none. [ 88.920020][ T5548] ext4 filesystem being remounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.207355][ T5243] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.232139][ T5574] loop0: detected capacity change from 0 to 8 [ 89.250144][ T5574] squashfs: Unknown parameter '' [ 89.529710][ T5579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.584933][ T5240] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 89.621994][ T5579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.662448][ T5579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.106078][ T5583] sctp: [Deprecated]: syz.2.68 (pid 5583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.106078][ T5583] Use struct sctp_sack_info instead [ 90.433030][ T5566] loop4: detected capacity change from 0 to 40427 [ 90.451030][ T5587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.463098][ T5566] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 90.471733][ T5566] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 90.513437][ T5566] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.526661][ T5587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.585964][ T5587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.726052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 90.740109][ T5566] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 90.761357][ T5593] dvmrp0: entered allmulticast mode [ 90.766374][ T5574] loop0: detected capacity change from 0 to 40427 [ 90.767002][ T5566] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.787667][ T5574] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 90.796500][ T5592] dvmrp0: left allmulticast mode [ 90.814482][ T5574] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 90.845425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.855658][ T5574] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.989994][ T5255] syz-executor: attempt to access beyond end of device [ 90.989994][ T5255] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.012225][ T5255] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 91.107100][ T5574] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 91.140214][ T5574] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.176771][ T5599] syz.1.73: attempt to access beyond end of device [ 91.176771][ T5599] nbd1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 91.190427][ T5599] hfsplus: unable to find HFS+ superblock [ 91.218747][ T5599] zonefs (nbd1) ERROR: Not a zoned block device [ 91.275674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.367144][ T29] audit: type=1804 audit(1728721837.559:9): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.64" name="/newroot/11/bus/file0" dev="loop0" ino=10 res=1 errno=0 [ 91.505750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.514260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.630309][ T5604] loop1: detected capacity change from 0 to 512 [ 91.735996][ T5604] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.75: invalid block [ 91.762245][ T5604] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.75: invalid indirect mapped block 4294967295 (level 1) [ 91.828697][ T5604] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.75: invalid indirect mapped block 4294967295 (level 1) [ 91.877438][ T5609] loop4: detected capacity change from 0 to 128 [ 91.892795][ T5604] EXT4-fs (loop1): 2 truncates cleaned up [ 91.955017][ T5609] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 91.975877][ T5604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.003442][ T5609] FAT-fs (loop4): Filesystem has been set read-only [ 92.214865][ T5243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.635521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.895986][ T5619] loop0: detected capacity change from 0 to 4096 [ 92.924086][ T5619] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 93.073145][ T5619] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 93.103416][ T5619] ntfs3(loop0): Failed to load $Extend (-22). [ 93.155529][ T5619] ntfs3(loop0): Failed to initialize $Extend. [ 93.263677][ T5626] loop1: detected capacity change from 0 to 1024 [ 93.321354][ T5626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.524996][ T5243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.527553][ T5633] loop2: detected capacity change from 0 to 4096 [ 93.541915][ T5633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.624425][ T5633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.766618][ T5636] bond_slave_0: entered promiscuous mode [ 93.804080][ T5636] bond_slave_0: entered allmulticast mode [ 93.823594][ T5635] bond_slave_0: left allmulticast mode [ 93.848279][ T5254] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.850384][ T5624] loop4: detected capacity change from 0 to 32768 [ 93.867105][ T5635] bond_slave_0: left promiscuous mode [ 93.895503][ T5624] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.81 (5624) [ 93.954122][ T5624] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.958195][ T5640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.997253][ T5624] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 94.038341][ T5640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.042429][ T5624] BTRFS info (device loop4): using free-space-tree [ 94.089168][ T5640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.328315][ T5624] BTRFS info (device loop4): rebuilding free space tree [ 94.375477][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.565302][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 94.583961][ T25] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 94.596373][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.618627][ T25] usb 1-1: config 0 descriptor?? [ 94.648918][ T25] gspca_main: sq930x-2.14.0 probing 041e:403c [ 94.696416][ T5669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.773628][ T5670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.814498][ T5669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.830594][ T5255] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.169723][ T5297] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.337914][ T5297] usb 4-1: Using ep0 maxpacket: 32 [ 95.343550][ T5298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.353936][ T25] gspca_sq930x: ucbus_write failed -110 [ 95.360471][ T5297] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 95.369641][ T25] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 95.377628][ T5297] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 95.390645][ T5297] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 95.402230][ T5297] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 95.418486][ T5297] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.444428][ T5297] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 95.455603][ T5297] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 95.464208][ T5297] usb 4-1: Product: syz [ 95.469403][ T5297] usb 4-1: Manufacturer: syz [ 95.474050][ T5297] usb 4-1: SerialNumber: syz [ 95.488813][ T5297] usb 4-1: config 0 descriptor?? [ 95.504616][ T5297] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 95.520166][ T5297] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 95.546042][ T5298] usb 5-1: Using ep0 maxpacket: 8 [ 95.568086][ T5298] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.588689][ T5298] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.603078][ T5298] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.613655][ T5298] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.635865][ T5298] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.641020][ T5678] loop2: detected capacity change from 0 to 2048 [ 95.657766][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.692848][ T5297] usb 1-1: USB disconnect, device number 2 [ 95.711895][ T5676] loop1: detected capacity change from 0 to 32768 [ 95.742430][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.778343][ T5676] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.792663][ T5689] loop0: detected capacity change from 0 to 64 [ 95.793387][ T5678] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.843501][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 95.850069][ T25] usb 4-1: USB disconnect, device number 2 [ 95.855576][ T5672] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 95.894116][ T5298] usb 5-1: GET_CAPABILITIES returned 0 [ 95.894532][ T5688] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 95.901858][ T5298] usbtmc 5-1:16.0: can't read capabilities [ 95.990799][ T25] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 96.082577][ T5254] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.151557][ T5676] XFS (loop1): Ending clean mount [ 96.163269][ T5297] usb 5-1: USB disconnect, device number 2 [ 96.177188][ T5676] XFS (loop1): Quotacheck needed: Please wait. [ 96.233127][ T5698] team0: entered promiscuous mode [ 96.249701][ T5698] team_slave_0: entered promiscuous mode [ 96.273486][ T5698] team_slave_1: entered promiscuous mode [ 96.294980][ T5697] team0: left promiscuous mode [ 96.304602][ T5676] XFS (loop1): Quotacheck: Done. [ 96.314783][ T5697] team_slave_0: left promiscuous mode [ 96.325335][ T5697] team_slave_1: left promiscuous mode [ 96.512891][ T5702] loop2: detected capacity change from 0 to 4096 [ 96.522248][ T5243] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.545891][ T5702] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 96.641455][ T5702] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 96.716834][ T5702] ntfs3(loop2): ino=1e, "file1" encrypted i/o not supported [ 96.754450][ T29] audit: type=1800 audit(1728721842.949:10): pid=5702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.101" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 96.784319][ T5700] loop0: detected capacity change from 0 to 40427 [ 96.944695][ T5707] loop3: detected capacity change from 0 to 1024 [ 96.993934][ T5700] F2FS-fs (loop0): invalid crc value [ 97.027916][ T5700] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.090565][ T5706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.191693][ T5706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.231131][ T5700] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.274926][ T5700] syz.0.100: attempt to access beyond end of device [ 97.274926][ T5700] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.298490][ T5700] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 97.334212][ T5706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.489680][ T1123] hfsplus: b-tree write err: -5, ino 4 [ 97.649955][ T5720] loop1: detected capacity change from 0 to 40427 [ 97.675311][ T5720] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 97.683124][ T5720] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.857707][ T5720] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.086165][ T5717] loop2: detected capacity change from 0 to 40427 [ 98.144763][ T5717] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff [ 98.158356][ T5717] F2FS-fs (loop2): invalid crc value [ 98.183368][ T5717] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.207376][ T5720] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 98.214484][ T5720] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.244525][ T5717] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.404059][ T5720] syz.1.106: attempt to access beyond end of device [ 98.404059][ T5720] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.465836][ T5724] loop3: detected capacity change from 0 to 32768 [ 98.613134][ T5243] syz-executor: attempt to access beyond end of device [ 98.613134][ T5243] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 98.661328][ T5243] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.691810][ T5729] loop4: detected capacity change from 0 to 32768 [ 98.833232][ T5740] loop0: detected capacity change from 0 to 8 [ 98.900314][ T5724] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 98.938729][ T5729] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 99.174127][ T5729] XFS (loop4): Ending clean mount [ 99.343811][ T5755] loop1: detected capacity change from 0 to 128 [ 99.391455][ T5757] netlink: 'syz.0.114': attribute type 29 has an invalid length. [ 99.413435][ T5757] netlink: 'syz.0.114': attribute type 29 has an invalid length. [ 99.423267][ T5757] netlink: 'syz.0.114': attribute type 29 has an invalid length. [ 99.496000][ T5255] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 99.531288][ T5760] loop0: detected capacity change from 0 to 256 [ 99.640054][ T5240] ocfs2: Unmounting device (7,3) on (node local) [ 100.044567][ T5767] loop3: detected capacity change from 0 to 64 [ 100.325100][ T5772] loop4: detected capacity change from 0 to 512 [ 100.380633][ T5772] EXT4-fs (loop4): filesystem is read-only [ 100.416868][ T5772] EXT4-fs (loop4): filesystem is read-only [ 100.467044][ T5772] EXT4-fs (loop4): orphan cleanup on readonly fs [ 100.523091][ T5772] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.121: bad orphan inode 16 [ 100.610321][ T5772] ext4_test_bit(bit=15, block=3) = 0 [ 100.623074][ T5772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 100.685544][ T5298] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.716011][ T5778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.123'. [ 100.820983][ T5255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.865539][ T5298] usb 1-1: Using ep0 maxpacket: 32 [ 100.872733][ T5778] sctp: [Deprecated]: syz.3.123 (pid 5778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.872733][ T5778] Use struct sctp_sack_info instead [ 100.905929][ T5298] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 100.918629][ T5763] loop1: detected capacity change from 0 to 32768 [ 100.931717][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.944863][ T5763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.118 (5763) [ 100.974670][ T5298] usb 1-1: config 0 descriptor?? [ 100.982568][ T5763] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.996342][ T5763] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 101.007897][ T5298] gspca_main: sq930x-2.14.0 probing 041e:403c [ 101.014257][ T5763] BTRFS info (device loop1): using free-space-tree [ 101.146887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.298252][ T29] audit: type=1800 audit(1728721847.499:11): pid=5763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.118" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 101.379351][ T5765] loop2: detected capacity change from 0 to 32768 [ 101.420065][ T5765] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.120 (5765) [ 101.497403][ T5765] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 101.531003][ T5243] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.553770][ T5765] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 101.595691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 101.625107][ T5765] BTRFS info (device loop2): using free-space-tree [ 101.705548][ T5298] gspca_sq930x: ucbus_write failed -110 [ 101.712258][ T5298] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 102.048858][ T5296] usb 1-1: USB disconnect, device number 3 [ 102.221526][ T29] audit: type=1800 audit(1728721848.259:12): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.120" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 102.354951][ T5254] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 102.528967][ T5816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.651905][ T5816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.668748][ T5816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.015519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.024086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.175396][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.315273][ T5296] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.344887][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.381052][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.412479][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.425943][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.434349][ T25] usb 2-1: Product: syz [ 103.443823][ T25] usb 2-1: Manufacturer: syz [ 103.450948][ T25] usb 2-1: SerialNumber: syz [ 103.479231][ T5296] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 103.488794][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.518092][ T5296] usb 3-1: Product: syz [ 103.536399][ T5296] usb 3-1: Manufacturer: syz [ 103.553418][ T5296] usb 3-1: SerialNumber: syz [ 103.571167][ T5296] usb 3-1: config 0 descriptor?? [ 103.617646][ T5824] loop4: detected capacity change from 0 to 32768 [ 103.740583][ T5824] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 103.781194][ T25] usb 2-1: 0:2 : does not exist [ 103.849194][ T25] usb 2-1: USB disconnect, device number 3 [ 103.902721][ T5264] udevd[5264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.959663][ T5824] (syz.4.128,5824,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "ÿÿ0xffffffffffffffff¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 104.003421][ T5296] usb 3-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 104.109601][ T5255] ocfs2: Unmounting device (7,4) on (node local) [ 104.216807][ T5296] usb 3-1: Read permanent extended address bc:a9:ed:86:aa:ae:4b:87 from device [ 104.437303][ T5296] usb 3-1: USB disconnect, device number 4 [ 104.537466][ T5833] loop0: detected capacity change from 0 to 40427 [ 104.594577][ T5833] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.615838][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.681459][ T5833] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.750862][ T5851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.760968][ T5331] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.832470][ T5851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.857411][ T5851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.895415][ T25] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.904548][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.917588][ T5331] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 104.919450][ T25] usb 4-1: config 0 descriptor?? [ 104.937531][ T25] cp210x 4-1:0.0: cp210x converter detected [ 104.938753][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.992602][ T5331] usb 2-1: config 0 descriptor?? [ 105.004419][ T5331] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 105.085529][ T5853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.148503][ T5853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.161158][ T5853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.211551][ T5331] gp8psk: usb in 128 operation failed. [ 105.221463][ T5331] gp8psk: usb in 137 operation failed. [ 105.228319][ T5331] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.241631][ T5331] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 105.252422][ T5331] usb 2-1: media controller created [ 105.279836][ T5331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.314092][ T5331] gp8psk_fe: Frontend attached [ 105.325782][ T5331] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 105.336300][ T5331] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 105.343194][ T25] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 105.358028][ T5837] loop3: detected capacity change from 0 to 128 [ 105.418616][ T25] usb 4-1: cp210x converter now attached to ttyUSB0 [ 105.454236][ T5833] syz.0.130: attempt to access beyond end of device [ 105.454236][ T5833] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.551222][ T5241] syz-executor: attempt to access beyond end of device [ 105.551222][ T5241] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 105.566530][ T5241] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 105.566660][ T5856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.573448][ T5241] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 105.612035][ T5296] usb 4-1: USB disconnect, device number 3 [ 105.619831][ T5331] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 105.638688][ T5331] gp8psk: found Genpix USB device pID = 203 (hex) [ 105.670622][ T5296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 105.693402][ T5856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.706291][ T5856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.711814][ T5296] cp210x 4-1:0.0: device disconnected [ 105.794757][ T5859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.828964][ T937] usb 2-1: USB disconnect, device number 4 [ 105.866948][ T5859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.892042][ T5859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.916364][ T937] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 106.022929][ T5861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.085066][ T5861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.103761][ T5861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.669605][ T5868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.930086][ T5868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.319991][ T5868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.366908][ T5876] sctp: [Deprecated]: syz.2.142 (pid 5876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.366908][ T5876] Use struct sctp_sack_info instead [ 107.620194][ T5879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'. [ 107.639049][ T5879] sctp: [Deprecated]: syz.0.143 (pid 5879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.639049][ T5879] Use struct sctp_sack_info instead [ 107.936510][ T5296] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.095340][ T5296] usb 5-1: Using ep0 maxpacket: 32 [ 108.103639][ T5296] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 108.117267][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.138235][ T5296] usb 5-1: config 0 descriptor?? [ 108.161770][ T5296] gspca_main: sq930x-2.14.0 probing 041e:403c [ 108.315422][ T5331] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.394275][ T5888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.475380][ T5331] usb 4-1: Using ep0 maxpacket: 32 [ 108.491148][ T5331] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 108.501949][ T5888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.503833][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.551258][ T5331] usb 4-1: config 0 descriptor?? [ 108.583452][ T5331] gspca_main: sq930x-2.14.0 probing 041e:403c [ 108.855584][ T5296] gspca_sq930x: ucbus_write failed -110 [ 108.865801][ T5296] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 109.103566][ T5296] usb 5-1: USB disconnect, device number 3 [ 109.167658][ T8] wlan1: No basic rates, using min rate instead [ 109.203434][ T8] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 109.218107][ T8] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 109.288307][ T5331] gspca_sq930x: ucbus_write failed -110 [ 109.304392][ T5331] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 109.337637][ T3033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 109.465411][ T65] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 109.505802][ T5894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.513804][ T5895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.552373][ T5331] usb 4-1: USB disconnect, device number 4 [ 109.583989][ T5894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.604253][ T3033] wlan1: authentication with 08:02:11:00:00:00 timed out [ 109.639974][ T5894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.650273][ T5896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.715367][ T5895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.944910][ T5901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.019717][ T5901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.041228][ T5901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.302398][ T5904] wlan1: No basic rates, using min rate instead [ 110.339833][ T5904] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 110.366006][ T5904] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 110.386207][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.510409][ T5898] loop3: detected capacity change from 0 to 32768 [ 110.529181][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.669194][ T5898] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 110.726421][ T5898] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.173642][ T65] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 111.297989][ T65] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 111.341532][ T65] wlan1: authentication with 08:02:11:00:00:00 timed out [ 111.375553][ T5898] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 111.478214][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 111.485486][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 111.669651][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 184ms [ 111.672434][ T5902] loop0: detected capacity change from 0 to 32768 [ 111.679442][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 111.695380][ T5898] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 111.695793][ T5918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.726299][ T5296] wlan1: No basic rates, using min rate instead [ 111.736551][ T5331] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.757231][ T5296] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 111.781426][ T5296] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 111.845429][ T5902] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 111.852493][ T5918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.852871][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.0.152 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 111.871668][ T5918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.872643][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.892605][ T5902] Call Trace: [ 111.892618][ T5902] [ 111.892631][ T5902] dump_stack_lvl+0x241/0x360 [ 111.903744][ T5902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.908987][ T5902] ? __pfx__printk+0x10/0x10 [ 111.913643][ T5902] ? __kmalloc_cache_noprof+0x243/0x390 [ 111.919231][ T5902] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 111.924561][ T5902] sysfs_create_dir_ns+0x2ce/0x3a0 [ 111.925411][ T5331] usb 2-1: Using ep0 maxpacket: 32 [ 111.929711][ T5902] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 111.929756][ T5902] kobject_add_internal+0x435/0x8d0 [ 111.945814][ T5902] kobject_init_and_add+0x124/0x190 [ 111.951107][ T5902] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 111.956977][ T5902] ? __pfx_kobject_init_and_add+0x10/0x10 [ 111.962743][ T5902] ? __init_swait_queue_head+0xae/0x150 [ 111.968360][ T5902] gfs2_sys_fs_add+0x23b/0x4a0 [ 111.973175][ T5902] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 111.978491][ T5902] ? __pfx_alloc_workqueue+0x10/0x10 [ 111.983800][ T5902] ? read_word_at_a_time+0xe/0x20 [ 111.988848][ T5902] ? sized_strscpy+0x8d/0x220 [ 111.993555][ T5902] gfs2_fill_super+0x11ee/0x24d0 [ 111.998521][ T5902] ? __pfx_gfs2_fill_super+0x10/0x10 [ 112.003819][ T5902] ? snprintf+0xda/0x120 [ 112.008103][ T5902] ? __pfx_lock_release+0x10/0x10 [ 112.013167][ T5902] ? do_raw_spin_lock+0x14f/0x370 [ 112.018237][ T5902] ? __pfx_snprintf+0x10/0x10 [ 112.022976][ T5902] ? sb_set_blocksize+0x98/0xf0 [ 112.027849][ T5902] ? setup_bdev_super+0x4e6/0x5d0 [ 112.032893][ T5902] get_tree_bdev_flags+0x48c/0x5c0 [ 112.038037][ T5902] ? __pfx_gfs2_fill_super+0x10/0x10 [ 112.043341][ T5902] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 112.048999][ T5902] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 112.054658][ T5902] gfs2_get_tree+0x54/0x220 [ 112.059183][ T5902] vfs_get_tree+0x90/0x2b0 [ 112.063630][ T5902] do_new_mount+0x2be/0xb40 [ 112.068165][ T5902] ? __pfx_do_new_mount+0x10/0x10 [ 112.073217][ T5902] __se_sys_mount+0x2d6/0x3c0 [ 112.077929][ T5902] ? __pfx___se_sys_mount+0x10/0x10 [ 112.083158][ T5902] ? exc_page_fault+0x590/0x8c0 [ 112.088029][ T5902] ? __x64_sys_mount+0x20/0xc0 [ 112.092824][ T5902] do_syscall_64+0xf3/0x230 [ 112.097349][ T5902] ? clear_bhb_loop+0x35/0x90 [ 112.102041][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.107967][ T5902] RIP: 0033:0x7f0a2957f79a [ 112.112401][ T5902] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.132044][ T5902] RSP: 002b:00007f0a2a336e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 112.140479][ T5902] RAX: ffffffffffffffda RBX: 00007f0a2a336ef0 RCX: 00007f0a2957f79a [ 112.148477][ T5902] RDX: 0000000020037f40 RSI: 0000000020000040 RDI: 00007f0a2a336eb0 [ 112.156462][ T5902] RBP: 0000000020037f40 R08: 00007f0a2a336ef0 R09: 0000000000000800 [ 112.164445][ T5902] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000020000040 [ 112.172428][ T5902] R13: 00007f0a2a336eb0 R14: 0000000000037f44 R15: 0000000020037fc0 [ 112.180427][ T5902] [ 112.196244][ T5902] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 112.211917][ T5902] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 112.224235][ T5331] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 112.233571][ T5331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.260666][ T5331] usb 2-1: config 0 descriptor?? [ 112.281930][ T5331] gspca_main: sq930x-2.14.0 probing 041e:403c [ 112.863905][ T5930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.938319][ T5930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.980632][ T5930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.991170][ T5331] gspca_sq930x: ucbus_write failed -110 [ 113.003968][ T5331] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 113.251920][ T65] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 113.272103][ T8] usb 2-1: USB disconnect, device number 5 [ 113.366130][ T35] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 113.496229][ T65] wlan1: authentication with 08:02:11:00:00:00 timed out [ 113.541395][ T5940] sctp: [Deprecated]: syz.2.162 (pid 5940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.541395][ T5940] Use struct sctp_sack_info instead [ 113.775683][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.808585][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.837785][ T5298] wlan1: No basic rates, using min rate instead [ 113.844917][ T5298] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 113.866057][ T5938] sctp: [Deprecated]: syz.1.163 (pid 5938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.866057][ T5938] Use struct sctp_sack_info instead [ 113.868823][ T5298] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 113.942203][ T5947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.963361][ T5948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.997425][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.005531][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 114.019044][ T5947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.033286][ T3033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 114.038682][ T25] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 114.066478][ T5947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.099444][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.125840][ T25] usb 4-1: config 0 descriptor?? [ 114.153746][ T25] gspca_main: sq930x-2.14.0 probing 041e:403c [ 114.167285][ T1123] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 114.295410][ T3033] wlan1: authentication with 08:02:11:00:00:00 timed out [ 114.760290][ T5950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.789976][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.800806][ T8] wlan1: No basic rates, using min rate instead [ 114.814378][ T8] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 114.825788][ T5950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.846166][ T8] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 114.854537][ T5950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.873626][ T25] gspca_sq930x: ucbus_write failed -110 [ 114.879552][ T25] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 114.895444][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.914991][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.126831][ T8] usb 4-1: USB disconnect, device number 5 [ 116.205388][ T65] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 116.376292][ T3033] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 116.379617][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.446290][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.489850][ T5963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.505337][ T1123] wlan1: authentication with 08:02:11:00:00:00 timed out [ 116.795378][ T5296] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 116.986905][ T5296] usb 4-1: Using ep0 maxpacket: 32 [ 116.996586][ T5296] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 117.006380][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.017758][ T5296] usb 4-1: config 0 descriptor?? [ 117.038216][ T5296] gspca_main: sq930x-2.14.0 probing 041e:403c [ 117.178038][ T5978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.214841][ T5980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.253137][ T5978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.272044][ T5978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.284855][ T5981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.302765][ T5980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.643089][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.676183][ T8] wlan1: No basic rates, using min rate instead [ 117.683595][ T8] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 117.695305][ T8] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 117.707675][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.721114][ T5985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.735417][ T5296] gspca_sq930x: ucbus_write failed -110 [ 117.741077][ T5296] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 117.805680][ T3033] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 117.926336][ T1123] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 118.029899][ T5296] usb 4-1: USB disconnect, device number 6 [ 118.056256][ T3033] wlan1: authentication with 08:02:11:00:00:00 timed out [ 118.128254][ T5989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.190819][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.210722][ T5989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.306254][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.314230][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.546224][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 118.605204][ T25] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 118.617597][ T5989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.684597][ T5997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.750475][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.856791][ T25] usb 3-1: config 0 descriptor?? [ 118.890843][ T25] gspca_main: sq930x-2.14.0 probing 041e:403c [ 119.132857][ T6003] sctp: [Deprecated]: syz.0.185 (pid 6003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.132857][ T6003] Use struct sctp_sack_info instead [ 119.448071][ T6009] sctp: [Deprecated]: syz.4.186 (pid 6009) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.448071][ T6009] Use struct sctp_sack_info instead [ 119.615502][ T25] gspca_sq930x: ucbus_write failed -110 [ 119.669810][ T25] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 119.692972][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.783722][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.842534][ T6012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.014189][ T5298] usb 3-1: USB disconnect, device number 5 [ 120.295125][ T6020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.400168][ T6020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.429086][ T6020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.582289][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.651373][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.682581][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.140884][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.209413][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.226619][ T6029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.275606][ T5298] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.625475][ T5298] usb 1-1: Using ep0 maxpacket: 32 [ 121.642085][ T5298] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 121.696259][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.882433][ T5298] usb 1-1: config 0 descriptor?? [ 122.219917][ T5298] gspca_main: sq930x-2.14.0 probing 041e:403c [ 122.562750][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.587695][ T8] wlan1: No basic rates, using min rate instead [ 122.606100][ T8] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 122.612992][ T6041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.615094][ T8] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 122.650091][ T6042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.667602][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.696939][ T6041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.730323][ T6041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.738552][ T65] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 122.775951][ T5298] gspca_sq930x: ucbus_write failed -110 [ 122.781864][ T5298] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 122.866448][ T2552] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 122.975273][ T2552] wlan1: authentication with 08:02:11:00:00:00 timed out [ 123.013122][ T46] usb 1-1: USB disconnect, device number 4 [ 123.137264][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.148063][ T6038] loop2: detected capacity change from 0 to 32768 [ 123.175292][ T5298] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.183476][ T6038] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.197 (6038) [ 123.218278][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.246865][ T6038] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 123.259212][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.266643][ T6038] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.284742][ T6038] BTRFS info (device loop2): using free-space-tree [ 123.365371][ T5298] usb 4-1: Using ep0 maxpacket: 32 [ 123.375121][ T5298] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 123.442370][ T5298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.455425][ T5298] usb 4-1: config 0 descriptor?? [ 123.556017][ T5298] gspca_main: sq930x-2.14.0 probing 041e:403c [ 123.684633][ T6070] sctp: [Deprecated]: syz.4.203 (pid 6070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.684633][ T6070] Use struct sctp_sack_info instead [ 123.730542][ T6071] sctp: [Deprecated]: syz.1.204 (pid 6071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.730542][ T6071] Use struct sctp_sack_info instead [ 123.797288][ T5254] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 124.175563][ T5298] gspca_sq930x: ucbus_write failed -110 [ 124.181248][ T5298] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 124.432795][ T6074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.546271][ T6074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.567336][ T46] usb 4-1: USB disconnect, device number 7 [ 124.618249][ T6074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.649003][ T6077] Zero length message leads to an empty skb [ 124.671286][ T6077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.758434][ T6077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.780804][ T6077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.874456][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.979517][ T6084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.049023][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.325872][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.485357][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 126.507358][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 126.547685][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.593614][ T8] usb 3-1: config 0 descriptor?? [ 126.613110][ T8] gspca_main: sq930x-2.14.0 probing 041e:403c [ 126.703363][ T6098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.763917][ T6100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.848097][ T6101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.863027][ T6100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.905615][ T6100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.058580][ T6103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.087986][ T5296] wlan1: No basic rates, using min rate instead [ 127.108321][ T5296] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 127.125067][ T6103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.126521][ T5296] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 127.156803][ T6103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.317303][ T8] gspca_sq930x: ucbus_write failed -110 [ 127.323094][ T8] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 127.604327][ T5297] usb 3-1: USB disconnect, device number 6 [ 127.984893][ T5331] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.993334][ T6110] sctp: [Deprecated]: syz.1.217 (pid 6110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.993334][ T6110] Use struct sctp_sack_info instead [ 128.093262][ T6118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.162165][ T6118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.205512][ T65] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 128.213352][ T6118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.235758][ T5331] usb 4-1: Using ep0 maxpacket: 32 [ 128.290160][ T5331] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 128.322637][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.335556][ T65] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 128.349182][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.363559][ T5331] usb 4-1: config 0 descriptor?? [ 128.384217][ T5331] gspca_main: sq930x-2.14.0 probing 041e:403c [ 128.460111][ T6121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.488663][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.165764][ T3033] wlan1: authentication with 08:02:11:00:00:00 timed out [ 129.915306][ T5331] gspca_sq930x: ucbus_write failed -110 [ 129.921004][ T5331] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 130.121407][ T5331] usb 4-1: USB disconnect, device number 8 [ 130.183269][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.245413][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.274380][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.362778][ T6134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.371088][ T6132] sctp: [Deprecated]: syz.0.226 (pid 6132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.371088][ T6132] Use struct sctp_sack_info instead [ 130.513611][ T6135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.632159][ T6131] loop4: detected capacity change from 0 to 32768 [ 130.734979][ T6131] jfs_strtoUCS: char2uni returned -22. [ 130.749363][ T6131] charset = euc-jp, char = 0xf9 [ 130.843767][ T113] ================================================================== [ 130.851895][ T113] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x7e0/0xb80 [ 130.859544][ T113] Read of size 4 at addr ffff88802feb2a94 by task jfsCommit/113 [ 130.867194][ T113] [ 130.869564][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 130.879576][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.889671][ T113] Call Trace: [ 130.892988][ T113] [ 130.895959][ T113] dump_stack_lvl+0x241/0x360 [ 130.900723][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.905964][ T113] ? __pfx__printk+0x10/0x10 [ 130.910605][ T113] ? _printk+0xd5/0x120 [ 130.914803][ T113] ? __virt_addr_valid+0x183/0x530 [ 130.919958][ T113] ? __virt_addr_valid+0x183/0x530 [ 130.925117][ T113] print_report+0x169/0x550 [ 130.929667][ T113] ? __virt_addr_valid+0x183/0x530 [ 130.934811][ T113] ? __virt_addr_valid+0x183/0x530 [ 130.939935][ T113] ? __virt_addr_valid+0x45f/0x530 [ 130.945088][ T113] ? __phys_addr+0xba/0x170 [ 130.949607][ T113] ? jfs_lazycommit+0x7e0/0xb80 [ 130.954485][ T113] kasan_report+0x143/0x180 [ 130.959010][ T113] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 130.964483][ T113] ? jfs_lazycommit+0x7e0/0xb80 [ 130.969353][ T113] jfs_lazycommit+0x7e0/0xb80 [ 130.974042][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 130.979947][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 130.985180][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 130.990436][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 130.996283][ T113] ? __kthread_parkme+0x169/0x1d0 [ 131.001328][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 131.006542][ T113] kthread+0x2f0/0x390 [ 131.010645][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 131.015857][ T113] ? __pfx_kthread+0x10/0x10 [ 131.020456][ T113] ret_from_fork+0x4b/0x80 [ 131.024904][ T113] ? __pfx_kthread+0x10/0x10 [ 131.029502][ T113] ret_from_fork_asm+0x1a/0x30 [ 131.034315][ T113] [ 131.037339][ T113] [ 131.039660][ T113] Allocated by task 6131: [ 131.043984][ T113] kasan_save_track+0x3f/0x80 [ 131.048767][ T113] __kasan_kmalloc+0x98/0xb0 [ 131.053384][ T113] __kmalloc_cache_noprof+0x243/0x390 [ 131.058796][ T113] jfs_fill_super+0xc2/0xd90 [ 131.063422][ T113] get_tree_bdev_flags+0x48c/0x5c0 [ 131.068582][ T113] vfs_get_tree+0x90/0x2b0 [ 131.073006][ T113] do_new_mount+0x2be/0xb40 [ 131.077535][ T113] __se_sys_mount+0x2d6/0x3c0 [ 131.082237][ T113] do_syscall_64+0xf3/0x230 [ 131.086755][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.092661][ T113] [ 131.094979][ T113] Freed by task 5255: [ 131.098953][ T113] kasan_save_track+0x3f/0x80 [ 131.103627][ T113] kasan_save_free_info+0x40/0x50 [ 131.108685][ T113] __kasan_slab_free+0x59/0x70 [ 131.113449][ T113] kfree+0x1a0/0x460 [ 131.117349][ T113] generic_shutdown_super+0x139/0x2d0 [ 131.122719][ T113] kill_block_super+0x44/0x90 [ 131.127395][ T113] deactivate_locked_super+0xc4/0x130 [ 131.132760][ T113] cleanup_mnt+0x41f/0x4b0 [ 131.137295][ T113] task_work_run+0x24f/0x310 [ 131.141974][ T113] syscall_exit_to_user_mode+0x168/0x370 [ 131.147623][ T113] do_syscall_64+0x100/0x230 [ 131.152237][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.158164][ T113] [ 131.160493][ T113] The buggy address belongs to the object at ffff88802feb2a00 [ 131.160493][ T113] which belongs to the cache kmalloc-256 of size 256 [ 131.174553][ T113] The buggy address is located 148 bytes inside of [ 131.174553][ T113] freed 256-byte region [ffff88802feb2a00, ffff88802feb2b00) [ 131.188440][ T113] [ 131.190792][ T113] The buggy address belongs to the physical page: [ 131.197228][ T113] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2feb2 [ 131.205994][ T113] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.214487][ T113] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 131.222469][ T113] page_type: f5(slab) [ 131.226450][ T113] raw: 00fff00000000040 ffff88801ac41b40 0000000000000000 dead000000000001 [ 131.235048][ T113] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 131.243644][ T113] head: 00fff00000000040 ffff88801ac41b40 0000000000000000 dead000000000001 [ 131.252310][ T113] head: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 131.260980][ T113] head: 00fff00000000001 ffffea0000bfac81 ffffffffffffffff 0000000000000000 [ 131.269674][ T113] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 131.278420][ T113] page dumped because: kasan: bad access detected [ 131.284880][ T113] page_owner tracks the page as allocated [ 131.290594][ T113] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5255, tgid 5255 (syz-executor), ts 75034746908, free_ts 72980473492 [ 131.311967][ T113] post_alloc_hook+0x1f3/0x230 [ 131.316738][ T113] get_page_from_freelist+0x3129/0x3270 [ 131.322288][ T113] __alloc_pages_noprof+0x292/0x710 [ 131.327488][ T113] alloc_pages_mpol_noprof+0x3e8/0x680 [ 131.332991][ T113] alloc_slab_page+0x6a/0x120 [ 131.337670][ T113] allocate_slab+0x5a/0x2f0 [ 131.342168][ T113] ___slab_alloc+0xcd1/0x14b0 [ 131.347015][ T113] __slab_alloc+0x58/0xa0 [ 131.351355][ T113] __kmalloc_cache_noprof+0x27b/0x390 [ 131.356730][ T113] ____ip_mc_inc_group+0x5a2/0xe50 [ 131.361843][ T113] ip_mc_up+0x124/0x300 [ 131.366012][ T113] inetdev_event+0xfaa/0x1550 [ 131.370685][ T113] notifier_call_chain+0x19f/0x3e0 [ 131.375802][ T113] __dev_notify_flags+0x207/0x400 [ 131.380823][ T113] dev_change_flags+0xf0/0x1a0 [ 131.385582][ T113] do_setlink+0xcd0/0x41f0 [ 131.390105][ T113] page last free pid 5255 tgid 5255 stack trace: [ 131.396426][ T113] free_unref_page+0xcfb/0xf20 [ 131.401210][ T113] __slab_free+0x31b/0x3d0 [ 131.405625][ T113] qlist_free_all+0x9a/0x140 [ 131.410212][ T113] kasan_quarantine_reduce+0x14f/0x170 [ 131.415666][ T113] __kasan_slab_alloc+0x23/0x80 [ 131.420533][ T113] __kmalloc_cache_noprof+0x1d9/0x390 [ 131.425951][ T113] ref_tracker_alloc+0x14b/0x490 [ 131.430883][ T113] neigh_parms_alloc+0x221/0x570 [ 131.435839][ T113] ipv6_add_dev+0x2ee/0x1220 [ 131.440425][ T113] addrconf_notify+0x6a7/0x1020 [ 131.445277][ T113] notifier_call_chain+0x19f/0x3e0 [ 131.450436][ T113] register_netdevice+0x167f/0x1b00 [ 131.455656][ T113] nsim_create+0x647/0x890 [ 131.460077][ T113] __nsim_dev_port_add+0x6c0/0xae0 [ 131.465197][ T113] nsim_dev_port_add_all+0x33/0xf0 [ 131.470350][ T113] nsim_drv_probe+0x85f/0xb80 [ 131.475048][ T113] [ 131.477412][ T113] Memory state around the buggy address: [ 131.483064][ T113] ffff88802feb2980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.491129][ T113] ffff88802feb2a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.499205][ T113] >ffff88802feb2a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.507299][ T113] ^ [ 131.511883][ T113] ffff88802feb2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.519945][ T113] ffff88802feb2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.528032][ T113] ================================================================== [ 131.536356][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.543545][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 131.553521][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.563579][ T113] Call Trace: [ 131.566859][ T113] [ 131.569786][ T113] dump_stack_lvl+0x241/0x360 [ 131.574473][ T113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.579678][ T113] ? __pfx__printk+0x10/0x10 [ 131.584273][ T113] ? rcu_is_watching+0x15/0xb0 [ 131.589040][ T113] ? lock_release+0xbf/0xa30 [ 131.593628][ T113] ? vscnprintf+0x5d/0x90 [ 131.597960][ T113] panic+0x349/0x880 [ 131.601883][ T113] ? check_panic_on_warn+0x21/0xb0 [ 131.607018][ T113] ? __pfx_panic+0x10/0x10 [ 131.611439][ T113] ? do_raw_spin_unlock+0x13c/0x8b0 [ 131.616664][ T113] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 131.622559][ T113] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.628993][ T113] ? print_report+0x502/0x550 [ 131.633711][ T113] check_panic_on_warn+0x86/0xb0 [ 131.638671][ T113] ? jfs_lazycommit+0x7e0/0xb80 [ 131.643524][ T113] end_report+0x77/0x160 [ 131.647785][ T113] kasan_report+0x154/0x180 [ 131.652307][ T113] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 131.657770][ T113] ? jfs_lazycommit+0x7e0/0xb80 [ 131.662712][ T113] jfs_lazycommit+0x7e0/0xb80 [ 131.667391][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 131.673286][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 131.678497][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 131.683700][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 131.689511][ T113] ? __kthread_parkme+0x169/0x1d0 [ 131.694560][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 131.699763][ T113] kthread+0x2f0/0x390 [ 131.703836][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 131.709079][ T113] ? __pfx_kthread+0x10/0x10 [ 131.713669][ T113] ret_from_fork+0x4b/0x80 [ 131.718086][ T113] ? __pfx_kthread+0x10/0x10 [ 131.722677][ T113] ret_from_fork_asm+0x1a/0x30 [ 131.727584][ T113] [ 131.731178][ T113] Kernel Offset: disabled [ 131.735519][ T113] Rebooting in 86400 seconds..