last executing test programs: 10.930761772s ago: executing program 2 (id=420): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) listen(0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0xfffffffffffffd37, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) 9.900057584s ago: executing program 2 (id=423): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) prlimit64(r1, 0x9, &(0x7f0000000180)={0xe000000, 0xf248}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000001a00)=0xf2b, 0x37) getsockopt$inet6_buf(r5, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xa4) syz_open_dev$video(&(0x7f0000000b40), 0xd6bb, 0x4000) 9.892236144s ago: executing program 1 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x1100100) keyctl$chown(0x6, r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/75, 0x4b}, 0x1}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x4}], 0x2, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') 8.175536084s ago: executing program 1 (id=426): get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000c16000/0x1000)=nil, 0x0) syz_usb_connect(0x0, 0x529, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000024c0fa083c419b818b220000000109021705010000100009046f000f02060000052406000005240000000d240f0100000000000000000004241300692413"], 0x0) setpgid(0x0, 0x0) r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) 7.092029751s ago: executing program 2 (id=428): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r1, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x8000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, 0x0, 0x0, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r7, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r6, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x85, 0x4, 0xfffffffe, 0x717e387d, 0x3, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x0, 0x2}) 5.996196449s ago: executing program 0 (id=429): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 5.093487378s ago: executing program 2 (id=431): memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.06397273s ago: executing program 1 (id=432): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0xffffffffffffffff, 0x800000000400, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x14, 0x1, 0x51, 0x9}}], 0x14}}], 0x1, 0x2a9b0a4a5e70a24c) r1 = socket(0x40000000015, 0x5, 0x0) socket(0x0, 0x1, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x34000) 4.96411455s ago: executing program 2 (id=433): socket$inet6(0xa, 0x800, 0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x44, &(0x7f0000000280)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000003c0)={0x7, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x6}}, {{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1c000000}}}, 0x108) 4.915886815s ago: executing program 0 (id=434): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) 4.656187661s ago: executing program 3 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x3) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x800, 0x0, 0x3, 0x41298, r3, 0x5, '\x00', 0x0, r6, 0x5, 0x4, 0x5, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000e00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) fsetxattr(r8, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='9p\x00', 0x3, 0x1) r9 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r9) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 4.656005411s ago: executing program 0 (id=437): r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050004000000fcdbdf252e000000080003", @ANYRES32=r3, @ANYBLOB="0a003400020202220202"], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socket(0x23, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0xc4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1, 0xa}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @quote={{0x9, 0xfc}, 0x2}}], 0x70) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'netpci0\x00', 0x101}) r6 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r6, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x4c) 3.13801405s ago: executing program 2 (id=438): socket$kcm(0x10, 0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) 2.677377676s ago: executing program 0 (id=439): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) prlimit64(r1, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x8000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, 0x0, 0x0, 0x35, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r7, 0xc01064c5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0], 0x1}) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) keyctl$chown(0x4, r6, 0xffffffffffffffff, 0xee00) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x85, 0x4, 0xfffffffe, 0x717e387d, 0x3, "1ae34e06a6ffffff7f0000000040794233a5bd", 0x0, 0x2}) 2.589930434s ago: executing program 3 (id=440): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) 1.594422662s ago: executing program 1 (id=441): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x1a7}, {&(0x7f0000000680)="3942be216be0581bde117052080512570635f1b7b6521cd8dfe08f80f8e46a59af6924efef4abb21e0b7e7d1b60aecc37a511eee7ac62e38eeef2b843aa68bcf811512c5a750dadca371e62c66b00880a4de408209a64fbbbf452bf0871e5b93e1e3d7523a0edd582646ac86fa14f3337fc6f14a2d587abb467d5884bb1659ed2cb50fe79a646fbcf750642238d4635ef182cc3b7338a86247bc9c49cb0f10ca54689730e4ecfdf9bc3d3efec24e48b24ed158f135dce5ec03a1db6d0532524cfda89a38780166bdb0b82df15ba381dc0e49bb62b953afc89bcb35d91452782c51747422696b3a26", 0xe8}], 0x2}}], 0x1, 0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 1.593763433s ago: executing program 3 (id=442): syz_io_uring_setup(0xec6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 1.511177161s ago: executing program 0 (id=443): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e011a00"], 0x1d) 1.445686347s ago: executing program 3 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe79}, 0x1c) 1.196045162s ago: executing program 0 (id=445): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="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"]) 1.195733882s ago: executing program 1 (id=446): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0xa000, 0x5, 0x3, 0xe6}, {0x200, 0xe, 0x2, 0x40}, {0xe, 0x0, 0x51, 0xd}, {0x101, 0x1, 0x6, 0x6}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0xfffffff9, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0/file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x10f}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) 1.046919607s ago: executing program 3 (id=447): r0 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050004000000fcdbdf252e000000080003", @ANYRES32=r3, @ANYBLOB="0a003400020202220202"], 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socket(0x23, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0xc4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1, 0xa}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @quote={{0x9, 0xfc}, 0x2}}], 0x70) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'netpci0\x00', 0x101}) r6 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r6, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x4c) 109.521239ms ago: executing program 3 (id=448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, 0x0, 0x0) 0s ago: executing program 1 (id=449): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x10020}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x4, &(0x7f0000000180)={0x80, 0xc7}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3", 0x4a}], 0x2, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 81.547773][ T5775] cgroup: Unknown subsys name 'net' [ 81.720139][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.437281][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.801775][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.807033][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.810035][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.816342][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.825440][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.839323][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.841046][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.848226][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.856192][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.862692][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.869223][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.876309][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.889988][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.892544][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.898351][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.912028][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.925303][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.933943][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.941430][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.949951][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.957826][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.958277][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.000882][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.008627][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.542294][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 86.560870][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.669545][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.698820][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.755953][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.763933][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.771571][ T5787] bridge_slave_0: entered allmulticast mode [ 86.778738][ T5787] bridge_slave_0: entered promiscuous mode [ 86.838103][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.845392][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.853803][ T5787] bridge_slave_1: entered allmulticast mode [ 86.861026][ T5787] bridge_slave_1: entered promiscuous mode [ 86.879458][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.887091][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.894490][ T5788] bridge_slave_0: entered allmulticast mode [ 86.901666][ T5788] bridge_slave_0: entered promiscuous mode [ 86.909707][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.917216][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.925158][ T5788] bridge_slave_1: entered allmulticast mode [ 86.932867][ T5788] bridge_slave_1: entered promiscuous mode [ 87.029381][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.057092][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.081410][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.091227][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.098545][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.106788][ T5785] bridge_slave_0: entered allmulticast mode [ 87.113967][ T5785] bridge_slave_0: entered promiscuous mode [ 87.122877][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.130055][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.137353][ T5785] bridge_slave_1: entered allmulticast mode [ 87.145135][ T5785] bridge_slave_1: entered promiscuous mode [ 87.154553][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.204920][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.217074][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.225321][ T5786] bridge_slave_0: entered allmulticast mode [ 87.237764][ T5786] bridge_slave_0: entered promiscuous mode [ 87.330635][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.337821][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.352100][ T5786] bridge_slave_1: entered allmulticast mode [ 87.359726][ T5786] bridge_slave_1: entered promiscuous mode [ 87.396013][ T5788] team0: Port device team_slave_0 added [ 87.437737][ T5787] team0: Port device team_slave_0 added [ 87.470080][ T5788] team0: Port device team_slave_1 added [ 87.505412][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.518751][ T5787] team0: Port device team_slave_1 added [ 87.527975][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.566173][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.575074][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.606986][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.634114][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.670257][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.686185][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.694057][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.725712][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.805453][ T5786] team0: Port device team_slave_0 added [ 87.829611][ T5785] team0: Port device team_slave_0 added [ 87.836587][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.843696][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.869961][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.887230][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.895152][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.921430][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.947909][ T5786] team0: Port device team_slave_1 added [ 87.968571][ T5785] team0: Port device team_slave_1 added [ 87.981922][ T5803] Bluetooth: hci1: command tx timeout [ 88.061915][ T5803] Bluetooth: hci3: command tx timeout [ 88.066787][ T50] Bluetooth: hci2: command tx timeout [ 88.068240][ T5103] Bluetooth: hci0: command tx timeout [ 88.085943][ T5788] hsr_slave_0: entered promiscuous mode [ 88.092487][ T5788] hsr_slave_1: entered promiscuous mode [ 88.100133][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.107242][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.134104][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.146786][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.154132][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.181152][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.194157][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.201229][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.233042][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.252180][ T5787] hsr_slave_0: entered promiscuous mode [ 88.259007][ T5787] hsr_slave_1: entered promiscuous mode [ 88.266047][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.274627][ T5787] Cannot create hsr debugfs directory [ 88.296967][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.304460][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.330827][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.428662][ T5785] hsr_slave_0: entered promiscuous mode [ 88.435849][ T5785] hsr_slave_1: entered promiscuous mode [ 88.443156][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.450873][ T5785] Cannot create hsr debugfs directory [ 88.529831][ T5786] hsr_slave_0: entered promiscuous mode [ 88.536799][ T5786] hsr_slave_1: entered promiscuous mode [ 88.544291][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.552327][ T5786] Cannot create hsr debugfs directory [ 88.935694][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.948612][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.959025][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.971772][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.052096][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.063345][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.074303][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.086084][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.215309][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.227015][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.246979][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.259216][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.368522][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.376110][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.388358][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.403166][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.416243][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.485117][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.517133][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.524577][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.564883][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.572248][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.603389][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.664293][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.686690][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.722451][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.729618][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.748725][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.772423][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.779723][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.813903][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.821146][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.831508][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.838701][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.896460][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.938917][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.016924][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.024191][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.061231][ T5103] Bluetooth: hci1: command tx timeout [ 90.077996][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.085267][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.140800][ T5103] Bluetooth: hci0: command tx timeout [ 90.141151][ T5803] Bluetooth: hci3: command tx timeout [ 90.146255][ T5103] Bluetooth: hci2: command tx timeout [ 90.363448][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.484071][ T5788] veth0_vlan: entered promiscuous mode [ 90.569881][ T5788] veth1_vlan: entered promiscuous mode [ 90.649964][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.675515][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.707097][ T5788] veth0_macvtap: entered promiscuous mode [ 90.718339][ T5788] veth1_macvtap: entered promiscuous mode [ 90.753569][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.775486][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.806002][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.829045][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.839122][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.850188][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.860536][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.956631][ T5786] veth0_vlan: entered promiscuous mode [ 90.990147][ T5787] veth0_vlan: entered promiscuous mode [ 91.012374][ T5786] veth1_vlan: entered promiscuous mode [ 91.044499][ T5787] veth1_vlan: entered promiscuous mode [ 91.095895][ T5785] veth0_vlan: entered promiscuous mode [ 91.117196][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.139311][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.158951][ T5785] veth1_vlan: entered promiscuous mode [ 91.186846][ T5787] veth0_macvtap: entered promiscuous mode [ 91.220717][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.228604][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.243674][ T5787] veth1_macvtap: entered promiscuous mode [ 91.266345][ T5786] veth0_macvtap: entered promiscuous mode [ 91.296745][ T5786] veth1_macvtap: entered promiscuous mode [ 91.340321][ T5785] veth0_macvtap: entered promiscuous mode [ 91.366880][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.380304][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.393837][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.404899][ T5785] veth1_macvtap: entered promiscuous mode [ 91.422473][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.433735][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.444138][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.455217][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.468157][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.529270][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.542993][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.555367][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.564934][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.579054][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.601252][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.618195][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.637279][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.658524][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.685340][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.698392][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.715174][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.727583][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.752268][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.772025][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.789099][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.800600][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.811117][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.828188][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.844576][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.862607][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.875057][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.896367][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.907975][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.917751][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.935266][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.004573][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.170717][ T5103] Bluetooth: hci1: command tx timeout [ 92.253243][ T50] Bluetooth: hci3: command tx timeout [ 92.258945][ T5803] Bluetooth: hci0: command tx timeout [ 92.267377][ T5103] Bluetooth: hci2: command tx timeout [ 92.347820][ T23] cfg80211: failed to load regulatory.db [ 92.615946][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.639342][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.648316][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.657256][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.683701][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.698300][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.708154][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.723390][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.409165][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.419792][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.574061][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.600850][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.731497][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.739356][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.765045][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.786834][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.865217][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.915134][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.391979][ T5103] Bluetooth: hci1: command tx timeout [ 94.399698][ T5103] Bluetooth: hci2: command tx timeout [ 94.422216][ T50] Bluetooth: hci3: command tx timeout [ 94.422299][ T5803] Bluetooth: hci0: command tx timeout [ 94.475615][ T27] audit: type=1326 audit(1760312447.958:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 94.499845][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.509844][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.519488][ T27] audit: type=1326 audit(1760312447.958:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 94.543897][ T27] audit: type=1326 audit(1760312447.958:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 94.566174][ T27] audit: type=1326 audit(1760312447.958:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 94.588711][ T27] audit: type=1326 audit(1760312447.958:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 94.751025][ T27] audit: type=1326 audit(1760312447.958:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 94.795038][ T27] audit: type=1326 audit(1760312447.958:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 94.848227][ T5898] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.856914][ T27] audit: type=1326 audit(1760312447.958:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 94.935260][ T27] audit: type=1326 audit(1760312447.958:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 94.966445][ T27] audit: type=1326 audit(1760312447.958:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2dcb8eec9 code=0x7ffc0000 [ 95.421042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.510922][ T5910] program syz.3.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.348982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.553853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.270692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.285900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.302460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.500871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 98.782057][ T5911] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.815499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.861827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.917172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.958790][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 100.159199][ T5911] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 100.245159][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.334553][ T5911] usb 3-1: Product: syz [ 100.380718][ T5911] usb 3-1: Manufacturer: syz [ 100.436084][ T5911] usb 3-1: SerialNumber: syz [ 100.718925][ T5911] usb 3-1: config 0 descriptor?? [ 100.795547][ T5911] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 101.548994][ T5911] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 102.590325][ T5793] usb 3-1: USB disconnect, device number 2 [ 102.655450][ T5793] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 102.684679][ T5793] visor 3-1:0.0: device disconnected [ 104.175871][ T5950] lo speed is unknown, defaulting to 1000 [ 104.181993][ T5950] lo speed is unknown, defaulting to 1000 [ 104.189735][ T5950] lo speed is unknown, defaulting to 1000 [ 104.200902][ T5950] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.214962][ T5950] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 104.246455][ T5950] lo speed is unknown, defaulting to 1000 [ 104.253669][ T5950] lo speed is unknown, defaulting to 1000 [ 104.260672][ T5950] lo speed is unknown, defaulting to 1000 [ 104.268117][ T5950] lo speed is unknown, defaulting to 1000 [ 104.494539][ T5954] bridge_slave_0: left allmulticast mode [ 104.500270][ T5954] bridge_slave_0: left promiscuous mode [ 104.524480][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.564544][ T5954] bridge_slave_1: left allmulticast mode [ 104.586864][ T5954] bridge_slave_1: left promiscuous mode [ 104.594247][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.608100][ T5954] bond0: (slave bond_slave_0): Releasing backup interface [ 104.677885][ T5954] bond0: (slave bond_slave_1): Releasing backup interface [ 104.808192][ T5954] team0: Port device team_slave_0 removed [ 104.847099][ T5954] team0: Port device team_slave_1 removed [ 104.886032][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.911005][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.943404][ T5883] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.958496][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.971273][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.997595][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 105.111859][ T5965] Bluetooth: MGMT ver 1.22 [ 105.130581][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 105.143148][ T5883] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 105.152393][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.165006][ T5883] usb 3-1: config 0 has no interface number 0 [ 105.172503][ T5883] usb 3-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 105.198508][ T5883] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=22.8b [ 105.211052][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.230868][ T5883] usb 3-1: config 0 descriptor?? [ 105.464838][ T28] usb 3-1: USB disconnect, device number 3 [ 105.767128][ T5974] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.782425][ T5954] syz.3.21 (5954) used greatest stack depth: 19432 bytes left [ 105.919384][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 105.940843][ T5975] bridge_slave_1: left allmulticast mode [ 105.946574][ T5975] bridge_slave_1: left promiscuous mode [ 105.965072][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.989229][ T5975] bridge_slave_0: left allmulticast mode [ 106.000659][ T5975] bridge_slave_0: left promiscuous mode [ 106.010958][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.750993][ T28] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 116.991463][ T28] usb 1-1: device descriptor read/64, error -71 [ 118.861005][ T28] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 119.007754][ T6098] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 119.007754][ T6098] The task syz.1.62 (6098) triggered the difference, watch for misbehavior. [ 119.030971][ T28] usb 1-1: device descriptor read/64, error -71 [ 119.152169][ T28] usb usb1-port1: attempt power cycle [ 122.430718][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.640723][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 122.659092][ T8] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 122.669460][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.680218][ T8] usb 4-1: config 0 has no interface number 0 [ 122.686943][ T8] usb 4-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 122.700657][ T8] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=22.8b [ 122.710993][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.729316][ T8] usb 4-1: config 0 descriptor?? [ 122.740822][ T8] qmi_wwan 4-1:0.111: bogus CDC Union: master=0, slave=0 [ 122.749599][ T8] qmi_wwan: probe of 4-1:0.111 failed with error -22 [ 122.983983][ T8] usb 4-1: USB disconnect, device number 2 [ 124.534343][ T6176] nvme_fabrics: missing parameter 'transport=%s' [ 124.541028][ T6176] nvme_fabrics: missing parameter 'nqn=%s' [ 125.490546][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.579946][ T6197] overlayfs: missing 'lowerdir' [ 125.620701][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.688513][ T8] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 125.709000][ T8] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 125.729182][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.744221][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.754006][ T8] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 125.763349][ T8] usb 1-1: Product: syz [ 125.767915][ T8] usb 1-1: Manufacturer: syz [ 125.784921][ T8] usb 1-1: SerialNumber: syz [ 125.852535][ T8] usb 1-1: config 0 descriptor?? [ 125.865093][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.870550][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 125.889803][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.902861][ T28] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 125.913837][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.949148][ T28] usb 2-1: config 0 descriptor?? [ 126.067638][ T8] hub: probe of 1-1:0.0 failed with error -5 [ 126.613003][ T8] usb 1-1: selecting invalid altsetting 0 [ 127.213550][ T28] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 127.316838][ T28] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 127.380625][ T6216] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 127.430670][ T28] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 127.453209][ T28] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 127.537218][ T6207] nvme_fabrics: missing parameter 'transport=%s' [ 127.543667][ T6207] nvme_fabrics: missing parameter 'nqn=%s' [ 127.580246][ T28] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 127.615454][ T28] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 127.633709][ T28] usb 2-1: USB disconnect, device number 2 [ 127.648202][ T28] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 127.866102][ T6219] fido_id[6219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 128.873979][ T8] usb 1-1: USB disconnect, device number 5 [ 129.268150][ T6235] overlayfs: missing 'lowerdir' [ 130.251022][ T5103] Bluetooth: hci3: unexpected cc 0x203c length: 9 > 1 [ 130.666905][ T6251] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 130.674512][ T6251] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.465945][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 131.465960][ T27] audit: type=1326 audit(1760312484.938:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 131.503963][ T27] audit: type=1326 audit(1760312484.938:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 131.530087][ T27] audit: type=1326 audit(1760312484.948:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 131.598987][ T27] audit: type=1326 audit(1760312484.948:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 132.148700][ T27] audit: type=1326 audit(1760312484.948:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 132.180695][ T27] audit: type=1326 audit(1760312484.958:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 132.215402][ T27] audit: type=1326 audit(1760312484.958:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 132.248167][ T27] audit: type=1326 audit(1760312484.958:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 132.435071][ T27] audit: type=1326 audit(1760312484.958:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 132.457514][ T27] audit: type=1326 audit(1760312484.958:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 133.040714][ T5793] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 133.267360][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.286201][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.442495][ T5793] usb 3-1: config 111 has an invalid interface number: 145 but max is 0 [ 133.477517][ T5793] usb 3-1: config 111 has no interface number 0 [ 133.504054][ T5793] usb 3-1: config 111 interface 145 has no altsetting 0 [ 133.561243][ T5793] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=de.d0 [ 133.598146][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.611008][ T5793] usb 3-1: Product: syz [ 133.615312][ T5793] usb 3-1: Manufacturer: syz [ 133.670546][ T5793] usb 3-1: SerialNumber: syz [ 134.103415][ T6278] warning: `syz.0.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.434343][ T5793] usb 3-1: USB disconnect, device number 4 [ 137.658711][ T6301] overlayfs: missing 'lowerdir' [ 140.357751][ T6337] overlayfs: missing 'lowerdir' [ 142.289292][ T6353] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.490656][ T5793] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 144.972767][ T5793] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 144.989994][ T5793] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 145.000936][ T5793] usb 1-1: config 0 interface 0 has no altsetting 0 [ 145.010901][ T5793] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.024012][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 145.039975][ T5793] usb 1-1: Product: syz [ 145.045570][ T5793] usb 1-1: Manufacturer: syz [ 145.050361][ T5793] usb 1-1: SerialNumber: syz [ 145.059863][ T5793] usb 1-1: config 0 descriptor?? [ 145.068255][ T5793] hub 1-1:0.0: bad descriptor, ignoring hub [ 145.078907][ T5793] hub: probe of 1-1:0.0 failed with error -5 [ 145.089763][ T5793] usb 1-1: selecting invalid altsetting 0 [ 150.970183][ T28] usb 1-1: USB disconnect, device number 6 [ 151.002262][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.293861][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 151.316180][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 151.407208][ T6418] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 151.414767][ T6418] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.036194][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.049623][ T9] usb 2-1: config 0 descriptor?? [ 152.106074][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 154.393018][ T5143] bcm5974 2-1:0.0: could not read from device [ 154.482784][ T5143] bcm5974 2-1:0.0: could not read from device [ 154.523691][ T9] usb 2-1: USB disconnect, device number 3 [ 154.526933][ T5143] bcm5974 2-1:0.0: could not read from device [ 155.251719][ T5883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.323626][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 156.407750][ T5883] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 157.365245][ T5883] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 157.498356][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.593752][ T5883] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.621040][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 157.656601][ T5883] usb 1-1: Product: syz [ 157.680627][ T5883] usb 1-1: Manufacturer: syz [ 157.685298][ T5883] usb 1-1: SerialNumber: syz [ 157.815433][ T5883] usb 1-1: config 0 descriptor?? [ 158.309383][ T5883] hub 1-1:0.0: bad descriptor, ignoring hub [ 158.352226][ T5883] hub: probe of 1-1:0.0 failed with error -5 [ 158.592537][ T5883] usb 1-1: selecting invalid altsetting 0 [ 158.970690][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 159.165833][ T5883] usb 1-1: USB disconnect, device number 7 [ 159.292502][ T9] usb 4-1: device descriptor read/64, error -71 [ 159.682797][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 160.004273][ T9] usb 4-1: device descriptor read/64, error -71 [ 160.242815][ T9] usb usb4-port1: attempt power cycle [ 160.800105][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 160.841284][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.297519][ T9] usb 4-1: device descriptor read/8, error -71 [ 162.430582][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'. [ 170.780550][ T5103] Bluetooth: hci3: command 0x0401 tx timeout [ 170.860620][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'. [ 173.023949][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 173.023965][ T27] audit: type=1326 audit(1760312526.498:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 173.330917][ T27] audit: type=1326 audit(1760312526.498:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 173.481609][ T27] audit: type=1326 audit(1760312526.508:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 173.730514][ T27] audit: type=1326 audit(1760312526.508:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 173.869882][ T27] audit: type=1326 audit(1760312526.508:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 173.897305][ T27] audit: type=1326 audit(1760312526.508:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 173.922992][ T27] audit: type=1326 audit(1760312526.538:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 173.950569][ T27] audit: type=1326 audit(1760312526.538:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 173.973009][ T27] audit: type=1326 audit(1760312526.538:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 174.014470][ T27] audit: type=1326 audit(1760312526.558:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.2.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f0b78eec9 code=0x7ffc0000 [ 176.293651][ T6533] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 176.345123][ T6533] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.855468][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 178.498884][ T6563] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 178.573799][ T6563] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.728776][ T6566] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 179.455032][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 180.743349][ T6569] overlayfs: failed to resolve './file0': -2 [ 182.059933][ T6598] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.078607][ T6598] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 182.546056][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 184.273766][ T6626] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 187.028885][ T6647] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 187.036386][ T6647] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.770790][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 191.673461][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 191.870805][ T9] usb 1-1: device descriptor read/64, error -71 [ 192.264414][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 192.540825][ T9] usb 1-1: device descriptor read/64, error -71 [ 192.766202][ T9] usb usb1-port1: attempt power cycle [ 194.170603][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 194.523897][ T6686] sched: RT throttling activated [ 194.705585][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.716050][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.283028][ T6705] ======================================================= [ 195.283028][ T6705] WARNING: The mand mount option has been deprecated and [ 195.283028][ T6705] and is ignored by this kernel. Remove the mand [ 195.283028][ T6705] option from the mount to silence this warning. [ 195.283028][ T6705] ======================================================= [ 195.318323][ T5911] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.513280][ T5911] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 195.535015][ T5911] usb 1-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 195.566126][ T5911] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 195.611781][ T5911] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 195.823087][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.703374][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.732256][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.769188][ T5911] ath6kl: Failed to submit usb control message: -71 [ 196.794334][ T5911] ath6kl: unable to send the bmi data to the device: -71 [ 196.821667][ T5911] ath6kl: Unable to send get target info: -71 [ 196.859191][ T5911] ath6kl: Failed to init ath6kl core: -71 [ 196.881801][ T5911] ath6kl_usb: probe of 1-1:4.0 failed with error -71 [ 196.921873][ T5911] usb 1-1: USB disconnect, device number 11 [ 197.380222][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 198.158158][ T5103] Bluetooth: hci3: command 0x0401 tx timeout [ 199.798520][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 199.798534][ T27] audit: type=1326 audit(1760312553.278:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 199.890549][ T27] audit: type=1326 audit(1760312553.278:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 200.087251][ T27] audit: type=1326 audit(1760312553.318:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 200.261664][ T27] audit: type=1326 audit(1760312553.318:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 200.293974][ T27] audit: type=1326 audit(1760312553.318:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 200.320709][ T27] audit: type=1326 audit(1760312553.318:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 200.645491][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 200.983673][ T27] audit: type=1326 audit(1760312553.328:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 201.153532][ T27] audit: type=1326 audit(1760312553.328:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 201.180539][ T27] audit: type=1326 audit(1760312553.328:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 201.276735][ T27] audit: type=1326 audit(1760312553.338:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6751 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1918eec9 code=0x7ffc0000 [ 201.602034][ T5103] Bluetooth: hci3: command 0x0401 tx timeout [ 204.837301][ T6789] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 205.384650][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 207.537808][ T5103] Bluetooth: hci3: command 0x0401 tx timeout [ 208.320946][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 211.665173][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 211.806532][ T5794] Bluetooth: hci3: command 0x0401 tx timeout [ 212.226860][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 212.300705][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 212.306874][ T5103] Bluetooth: hci2: command 0x0406 tx timeout [ 214.120172][ T5803] Bluetooth: hci3: command 0x0401 tx timeout [ 214.649165][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.321'. [ 216.518252][ T5803] Bluetooth: hci3: command 0x0401 tx timeout [ 217.736563][ T6948] ALSA: mixer_oss: invalid OSS volume '' [ 219.180973][ T5803] Bluetooth: hci3: command 0x0401 tx timeout [ 219.936649][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 219.951903][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 223.678635][ T5803] Bluetooth: hci3: command 0x0401 tx timeout [ 223.797987][ T6995] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 223.805627][ T6995] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.030955][ T785] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 227.860584][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 227.895038][ T785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.936041][ T785] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 227.966209][ T785] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.217078][ T785] usb 3-1: New USB device found, idVendor=0a25, idProduct=a44e, bcdDevice= 0.40 [ 228.229975][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.238535][ T785] usb 3-1: Product: syz [ 228.243444][ T785] usb 3-1: Manufacturer: syz [ 228.248089][ T785] usb 3-1: SerialNumber: syz [ 228.256602][ T785] usb 3-1: config 0 descriptor?? [ 228.295869][ T785] usb 3-1: can't set config #0, error -71 [ 228.312295][ T785] usb 3-1: USB disconnect, device number 5 [ 229.820624][ T5803] Bluetooth: hci3: command 0x0401 tx timeout [ 232.557593][ T7065] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 232.565150][ T7065] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 234.620730][ T5803] Bluetooth: hci3: command 0x0401 tx timeout [ 234.970783][ T5793] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 235.492761][ T5793] usb 1-1: device descriptor read/64, error -71 [ 235.903327][ T5793] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 236.173232][ T5793] usb 1-1: device descriptor read/64, error -71 [ 236.364270][ T5793] usb usb1-port1: attempt power cycle [ 238.363360][ T7106] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 238.370862][ T7106] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 239.710476][ T27] audit: type=1326 audit(1760312593.128:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 239.820543][ T27] audit: type=1326 audit(1760312593.128:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 239.930561][ T27] audit: type=1326 audit(1760312593.148:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 240.009147][ T27] audit: type=1326 audit(1760312593.148:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 240.037664][ T27] audit: type=1326 audit(1760312593.148:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 240.059887][ T27] audit: type=1326 audit(1760312593.168:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 240.082110][ T27] audit: type=1326 audit(1760312593.168:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 240.104478][ T27] audit: type=1326 audit(1760312593.168:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 240.170490][ T27] audit: type=1326 audit(1760312593.168:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 240.499025][ T27] audit: type=1326 audit(1760312593.168:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.3.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 240.505041][ T5803] Bluetooth: hci3: command 0x0401 tx timeout [ 242.912502][ T5793] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 243.492396][ T5793] usb 2-1: device descriptor read/64, error -71 [ 243.951984][ T5793] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 244.320095][ T5793] usb 2-1: device descriptor read/64, error -71 [ 244.755855][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 244.755874][ T27] audit: type=1326 audit(1760312598.188:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 244.816791][ T5793] usb usb2-port1: attempt power cycle [ 244.867672][ T27] audit: type=1326 audit(1760312598.188:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 244.927654][ T27] audit: type=1326 audit(1760312598.238:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 244.951760][ T27] audit: type=1326 audit(1760312598.238:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 244.974720][ T27] audit: type=1326 audit(1760312598.238:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 245.137434][ T27] audit: type=1326 audit(1760312598.248:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 245.165633][ T27] audit: type=1326 audit(1760312598.248:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 245.205565][ T27] audit: type=1326 audit(1760312598.278:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 245.244262][ T27] audit: type=1326 audit(1760312598.278:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 245.338728][ T27] audit: type=1326 audit(1760312598.278:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c99b8eec9 code=0x7ffc0000 [ 245.748896][ T5793] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 248.174517][ T5793] usb 2-1: device descriptor read/8, error -71 [ 248.956530][ T5803] Bluetooth: hci3: unexpected subevent 0x1a length: 25 > 6 [ 249.222735][ T7179] netlink: 'syz.0.400': attribute type 3 has an invalid length. [ 251.164296][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 251.627515][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 251.766393][ T9] usb 1-1: config 0 has an invalid interface number: 111 but max is 0 [ 251.786993][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.807366][ T9] usb 1-1: config 0 has no interface number 0 [ 251.830600][ T9] usb 1-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 251.880704][ T9] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=22.8b [ 251.923162][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.951925][ T9] usb 1-1: config 0 descriptor?? [ 251.972424][ T9] qmi_wwan: probe of 1-1:0.111 failed with error -22 [ 252.399647][ T9] usb 1-1: USB disconnect, device number 15 [ 256.361520][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.384511][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.072052][ T28] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 260.392478][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 260.404778][ T28] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 260.423826][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.447306][ T28] usb 2-1: config 0 has no interface number 0 [ 260.458348][ T28] usb 2-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 260.477549][ T28] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=22.8b [ 260.534484][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.619904][ T28] usb 2-1: config 0 descriptor?? [ 260.695342][ T28] qmi_wwan: probe of 2-1:0.111 failed with error -22 [ 261.129915][ T28] usb 2-1: USB disconnect, device number 8 [ 262.330349][ T7281] syz.2.431[7281]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 262.738034][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 263.203290][ T7294] dlm: no local IP address has been set [ 263.209761][ T7294] dlm: cannot start dlm midcomms -107 [ 264.340686][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 264.348462][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 264.370438][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 264.651402][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 264.663825][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 264.677989][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 264.689029][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 264.735943][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 264.770921][ T9] usb 2-1: Product: syz [ 264.775163][ T9] usb 2-1: Manufacturer: syz [ 264.841103][ T9] usb 2-1: SerialNumber: syz [ 264.927476][ T9] usb 2-1: config 0 descriptor?? [ 265.122775][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 265.349258][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 265.763100][ T1186] usb 2-1: USB disconnect, device number 9 [ 265.779330][ T1186] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 266.030589][ T5803] Bluetooth: hci0: unexpected subevent 0x1a length: 25 > 6 [ 266.664035][ T7326] dlm: no local IP address has been set [ 266.669747][ T7326] dlm: cannot start dlm midcomms -107 [ 267.410521][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 268.381647][ C1] ------------[ cut here ]------------ [ 268.387772][ C1] WARNING: CPU: 1 PID: 7335 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 268.397914][ C1] Modules linked in: [ 268.401896][ C1] CPU: 1 PID: 7335 Comm: syz.1.449 Not tainted syzkaller #0 [ 268.409290][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.419527][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 268.425938][ C1] Code: 24 4c 89 e7 e8 9e 22 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 fd 96 f7 0f 0b e9 f6 f7 ff ff e8 8d fd 96 f7 <0f> 0b e9 48 fb ff ff e8 81 fd 96 f7 48 c7 c7 60 fd 23 8e 4c 89 e6 [ 268.445636][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 268.451900][ C1] RAX: ffffffff89ee8d43 RBX: ffffffff89ee7b46 RCX: ffff88802cf69e00 [ 268.459905][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.467959][ C1] RBP: 0000000000000000 R08: ffff88802cf69e00 R09: 0000000000000003 [ 268.476002][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807d34e3c0 [ 268.484046][ C1] R13: dffffc0000000000 R14: ffff88807d34e8b0 R15: ffff888026538824 [ 268.492090][ C1] FS: 00007f4d1a1006c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 268.501089][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.507795][ C1] CR2: 000000110c429ac2 CR3: 000000007f47f000 CR4: 00000000003506e0 [ 268.515838][ C1] Call Trace: [ 268.519155][ C1] [ 268.522084][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 268.527688][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 268.533227][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 268.540044][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 268.545680][ C1] __iterate_interfaces+0x243/0x500 [ 268.551410][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 268.557694][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 268.565002][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 268.571319][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 268.578595][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 268.583870][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 268.589207][ C1] ? hw_scan_work+0xf40/0xf40 [ 268.593982][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 268.599140][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 268.605321][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 268.611038][ C1] handle_softirqs+0x280/0x820 [ 268.615936][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 268.620775][ C1] ? do_softirq+0x180/0x180 [ 268.625327][ C1] __irq_exit_rcu+0xc7/0x190 [ 268.629954][ C1] ? irq_exit_rcu+0x20/0x20 [ 268.634544][ C1] irq_exit_rcu+0x9/0x20 [ 268.638816][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 268.644530][ C1] [ 268.647512][ C1] [ 268.650505][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.656523][ C1] RIP: 0010:unix_dgram_sendmsg+0x871/0x1720 [ 268.662496][ C1] Code: 06 00 00 48 89 94 24 d0 00 00 00 48 c1 ea 03 48 89 94 24 c8 00 00 00 48 89 4c 24 10 48 c1 e9 03 48 89 4c 24 48 48 89 5c 24 30 <31> ff 48 89 b4 24 90 00 00 00 e8 20 cf 60 f8 4d 85 e4 74 0a e8 d6 [ 268.682208][ C1] RSP: 0018:ffffc9000bcbf760 EFLAGS: 00000246 [ 268.688333][ C1] RAX: ffffffff8924c6c5 RBX: 7fffffffffffffff RCX: 0000000000080000 [ 268.696390][ C1] RDX: ffffc9000ccda000 RSI: 7fffffffffffffff RDI: 0000000000080000 [ 268.704437][ C1] RBP: ffffc9000bcbf910 R08: ffff88802cf69e07 R09: 1ffff110059ed3c0 [ 268.712488][ C1] R10: dffffc0000000000 R11: ffffed10059ed3c1 R12: ffff88807bae3800 [ 268.720584][ C1] R13: ffffc9000bcbf860 R14: ffff88807bae3668 R15: dffffc0000000000 [ 268.728699][ C1] ? unix_dgram_sendmsg+0xf55/0x1720 [ 268.734111][ C1] ? unix_dgram_poll+0x670/0x670 [ 268.739192][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 268.745802][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 268.750870][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 268.756653][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 268.762297][ C1] ? unix_dgram_poll+0x670/0x670 [ 268.767315][ C1] ____sys_sendmsg+0x5bf/0x950 [ 268.772226][ C1] ? __asan_memset+0x22/0x40 [ 268.776888][ C1] ? __sys_sendmsg_sock+0x30/0x30 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 268.782007][ C1] ? __import_iovec+0x3fa/0x860 [ 268.786939][ C1] ? import_iovec+0x73/0xa0 [ 268.791565][ C1] ___sys_sendmsg+0x220/0x290 [ 268.796342][ C1] ? __sys_sendmsg+0x270/0x270 [ 268.801277][ C1] ? __might_fault+0xc6/0x120 [ 268.806092][ T11] ------------[ cut here ]------------ [ 268.806074][ C1] ? __might_fault+0xaa/0x120 [ 268.811687][ C1] __sys_sendmmsg+0x275/0x4a0 [ 268.811750][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 268.816614][ T11] WARNING: CPU: 0 PID: 11 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 268.821363][ C1] ? __ia32_sys_get_robust_list+0x90/0x90 [ 268.821408][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 268.821437][ C1] ? lock_chain_count+0x20/0x20 [ 268.821471][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 268.826515][ T11] Modules linked in: [ 268.837335][ C1] do_syscall_64+0x55/0xb0 [ 268.843570][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 268.849526][ C1] ? clear_bhb_loop+0x40/0x90 [ 268.854461][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.859283][ C1] ? clear_bhb_loop+0x40/0x90 [ 268.863271][ T11] Workqueue: phy9 ieee80211_csa_finalize_work [ 268.867649][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.875558][ T11] [ 268.880209][ C1] RIP: 0033:0x7f4d1918eec9 [ 268.890591][ T11] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 268.895200][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.895222][ C1] RSP: 002b:00007f4d1a100038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.895248][ C1] RAX: ffffffffffffffda RBX: 00007f4d193e5fa0 RCX: 00007f4d1918eec9 [ 268.895266][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000005 [ 268.895283][ C1] RBP: 00007f4d19211f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.895297][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.895311][ C1] R13: 00007f4d193e6038 R14: 00007f4d193e5fa0 R15: 00007fffaea77868 [ 268.895349][ C1] [ 268.895362][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 268.895373][ C1] CPU: 1 PID: 7335 Comm: syz.1.449 Not tainted syzkaller #0 [ 268.895392][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.895404][ C1] Call Trace: [ 268.895413][ C1] [ 268.895421][ C1] dump_stack_lvl+0x16c/0x230 [ 268.895456][ C1] ? show_regs_print_info+0x20/0x20 [ 268.895485][ C1] ? load_image+0x3b0/0x3b0 [ 268.895524][ C1] panic+0x2c0/0x710 [ 268.895552][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 268.895592][ C1] __warn+0x2e0/0x470 [ 268.895610][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 268.895636][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 268.895658][ C1] report_bug+0x2be/0x4f0 [ 268.895688][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 268.895711][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 268.895733][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 268.895756][ C1] handle_bug+0xcf/0x120 [ 268.895786][ C1] exc_invalid_op+0x1a/0x50 [ 268.895815][ C1] asm_exc_invalid_op+0x1a/0x20 [ 268.895836][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 268.895860][ C1] Code: 24 4c 89 e7 e8 9e 22 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 fd 96 f7 0f 0b e9 f6 f7 ff ff e8 8d fd 96 f7 <0f> 0b e9 48 fb ff ff e8 81 fd 96 f7 48 c7 c7 60 fd 23 8e 4c 89 e6 [ 268.895877][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 268.895896][ C1] RAX: ffffffff89ee8d43 RBX: ffffffff89ee7b46 RCX: ffff88802cf69e00 [ 268.895913][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.895925][ C1] RBP: 0000000000000000 R08: ffff88802cf69e00 R09: 0000000000000003 [ 268.895939][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807d34e3c0 [ 268.895953][ C1] R13: dffffc0000000000 R14: ffff88807d34e8b0 R15: ffff888026538824 [ 268.895975][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 268.895999][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 268.896029][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 268.896053][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 268.896094][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 268.896122][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 268.896159][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 268.896198][ C1] __iterate_interfaces+0x243/0x500 [ 268.896226][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 268.896255][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 268.896287][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 268.896316][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 268.896351][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 268.896381][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 268.896414][ C1] ? hw_scan_work+0xf40/0xf40 [ 268.896449][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 268.896471][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 268.896509][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 268.896542][ C1] handle_softirqs+0x280/0x820 [ 268.896572][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 268.896606][ C1] ? do_softirq+0x180/0x180 [ 268.896643][ C1] __irq_exit_rcu+0xc7/0x190 [ 268.896669][ C1] ? irq_exit_rcu+0x20/0x20 [ 268.896703][ C1] irq_exit_rcu+0x9/0x20 [ 268.896724][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 268.896763][ C1] [ 268.896771][ C1] [ 268.896781][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.896808][ C1] RIP: 0010:unix_dgram_sendmsg+0x871/0x1720 [ 268.896844][ C1] Code: 06 00 00 48 89 94 24 d0 00 00 00 48 c1 ea 03 48 89 94 24 c8 00 00 00 48 89 4c 24 10 48 c1 e9 03 48 89 4c 24 48 48 89 5c 24 30 <31> ff 48 89 b4 24 90 00 00 00 e8 20 cf 60 f8 4d 85 e4 74 0a e8 d6 [ 268.896864][ C1] RSP: 0018:ffffc9000bcbf760 EFLAGS: 00000246 [ 268.896887][ C1] RAX: ffffffff8924c6c5 RBX: 7fffffffffffffff RCX: 0000000000080000 [ 268.896903][ C1] RDX: ffffc9000ccda000 RSI: 7fffffffffffffff RDI: 0000000000080000 [ 268.896921][ C1] RBP: ffffc9000bcbf910 R08: ffff88802cf69e07 R09: 1ffff110059ed3c0 [ 268.896940][ C1] R10: dffffc0000000000 R11: ffffed10059ed3c1 R12: ffff88807bae3800 [ 268.896958][ C1] R13: ffffc9000bcbf860 R14: ffff88807bae3668 R15: dffffc0000000000 [ 268.896985][ C1] ? unix_dgram_sendmsg+0xf55/0x1720 [ 268.897059][ C1] ? unix_dgram_poll+0x670/0x670 [ 268.897101][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 268.897149][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 268.897180][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 268.897211][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 268.897237][ C1] ? unix_dgram_poll+0x670/0x670 [ 268.897272][ C1] ____sys_sendmsg+0x5bf/0x950 [ 268.897319][ C1] ? __asan_memset+0x22/0x40 [ 268.897351][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 268.897384][ C1] ? __import_iovec+0x3fa/0x860 [ 268.897432][ C1] ? import_iovec+0x73/0xa0 [ 268.897472][ C1] ___sys_sendmsg+0x220/0x290 [ 268.897513][ C1] ? __sys_sendmsg+0x270/0x270 [ 268.897606][ C1] ? __might_fault+0xc6/0x120 [ 268.897628][ C1] ? __might_fault+0xaa/0x120 [ 268.897655][ C1] __sys_sendmmsg+0x275/0x4a0 [ 268.897699][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 268.897748][ C1] ? __ia32_sys_get_robust_list+0x90/0x90 [ 268.897791][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 268.897825][ C1] ? lock_chain_count+0x20/0x20 [ 268.897862][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 268.897902][ C1] do_syscall_64+0x55/0xb0 [ 268.897932][ C1] ? clear_bhb_loop+0x40/0x90 [ 268.897958][ C1] ? clear_bhb_loop+0x40/0x90 [ 268.897987][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.898013][ C1] RIP: 0033:0x7f4d1918eec9 [ 268.898034][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.898054][ C1] RSP: 002b:00007f4d1a100038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.898085][ C1] RAX: ffffffffffffffda RBX: 00007f4d193e5fa0 RCX: 00007f4d1918eec9 [ 268.898104][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000005 [ 268.898121][ C1] RBP: 00007f4d19211f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.898135][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.898150][ C1] R13: 00007f4d193e6038 R14: 00007f4d193e5fa0 R15: 00007fffaea77868 [ 268.898187][ C1] [ 268.902699][ C1] Kernel Offset: disabled