last executing test programs: 1m22.827549702s ago: executing program 0 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vcsu(&(0x7f0000000300), 0x5, 0x800) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) close_range(r4, 0xffffffffffffffff, 0x0) 1m21.831783731s ago: executing program 0 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x132}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1m21.413662559s ago: executing program 0 (id=479): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 1m20.140632404s ago: executing program 0 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x88, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x0, 0xfb, 0x15, 0x9}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4c0}, 0x0) 1m20.112334305s ago: executing program 0 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m19.980720817s ago: executing program 0 (id=494): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) 1m4.692225156s ago: executing program 32 (id=494): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) 25.989433092s ago: executing program 1 (id=945): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 25.660888999s ago: executing program 1 (id=946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x24}, 0x4, 0x700000000000000}, 0x0) 25.620469289s ago: executing program 1 (id=948): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000002180)={0x0, 0xfad6, 0x800, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 25.532615151s ago: executing program 1 (id=952): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x19b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 24.946170263s ago: executing program 1 (id=962): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000002180)={0x0, 0xfad6, 0x800, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 24.880324864s ago: executing program 1 (id=965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) 9.522677474s ago: executing program 33 (id=965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) 4.539950701s ago: executing program 6 (id=1119): execveat(0xffffffffffffffff, &(0x7f0000000800)='./file0/file0\x00', 0x0, 0x0, 0x400) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'caif0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001840)={0xc, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0), 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x804}}}, 0x7) 3.968557552s ago: executing program 6 (id=1124): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.485555051s ago: executing program 5 (id=1125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x800, 0x5, 0x8000, 0x5}, 0x0) 3.407429323s ago: executing program 5 (id=1127): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt6_stats\x00') read$FUSE(r0, 0x0, 0x0) 3.328663574s ago: executing program 5 (id=1129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3.258684616s ago: executing program 5 (id=1132): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 3.124485059s ago: executing program 5 (id=1135): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x8000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000340)=0xffffffffffff0001, 0xd, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000192c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0x2}}}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x60}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) 1.694231387s ago: executing program 3 (id=1137): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) 1.620594978s ago: executing program 6 (id=1138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x34}}, 0x0) 1.573598009s ago: executing program 3 (id=1141): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xb) 1.52467598s ago: executing program 6 (id=1143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r1, 0x607, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x80) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 1.51200319s ago: executing program 3 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}}, 0x0) 1.436898432s ago: executing program 3 (id=1146): clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439, 0xffffffffffffffff}) 1.386536242s ago: executing program 3 (id=1147): execveat(0xffffffffffffffff, &(0x7f0000000800)='./file0/file0\x00', 0x0, 0x0, 0x400) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'caif0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001840)={0xc, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0), 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x804}}}, 0x7) 1.312408294s ago: executing program 4 (id=1151): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800010a2cbd7000fcdbdf251d"], 0x30}, 0x1, 0x2, 0x0, 0x4000800}, 0x10) 1.283570745s ago: executing program 4 (id=1152): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x37fffd, @loopback, 0x1000}, 0x1c) 1.220547126s ago: executing program 4 (id=1153): io_uring_setup(0x2cef, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40202, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001400)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f0000050007"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 796.590204ms ago: executing program 3 (id=1159): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r0, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 667.730777ms ago: executing program 2 (id=1160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 581.797448ms ago: executing program 6 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) 545.601819ms ago: executing program 2 (id=1162): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x41448000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10) 466.40524ms ago: executing program 2 (id=1163): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r4) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @loopback}}, 0x24) recvmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 464.998551ms ago: executing program 6 (id=1164): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000e00)=ANY=[@ANYBLOB], 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffffff0000000092c90000950000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 316.664864ms ago: executing program 2 (id=1165): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0xfcff, &(0x7f0000000b00)='\f#\f'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 273.857734ms ago: executing program 4 (id=1166): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x0) 224.913145ms ago: executing program 2 (id=1167): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0128200702ffffffffffff1089a2ebc30b2850b4ae8c1ede6c3095c5"], 0xb) 186.748916ms ago: executing program 4 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}}, 0x0) 120.623327ms ago: executing program 2 (id=1169): execveat(0xffffffffffffffff, &(0x7f0000000800)='./file0/file0\x00', 0x0, 0x0, 0x400) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @multicast, 'caif0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'bond0\x00'}}, 0x1e) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001840)={0xc, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0), 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x804}}}, 0x7) 81.384148ms ago: executing program 4 (id=1170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 0s ago: executing program 5 (id=1171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, r1, 0x607, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x80) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x28200, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) kernel console output (not intermixed with test programs): IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.376880][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.378358][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.379931][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.381371][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.384613][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.386642][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.389468][ T4330] device veth0_vlan entered promiscuous mode [ 27.404750][ T4330] device veth1_vlan entered promiscuous mode [ 27.411570][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.413266][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.414743][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.419152][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.420651][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.422241][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.424576][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.429151][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 27.430583][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 27.432011][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.433502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.442644][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.443959][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.445439][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.460988][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.462589][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.473571][ T4330] device veth0_macvtap entered promiscuous mode [ 27.478881][ T4330] device veth1_macvtap entered promiscuous mode [ 27.488677][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.490390][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.492003][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.493975][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.495456][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.497665][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.499171][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.500766][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.502997][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.505177][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.507054][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.508522][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.510136][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.511662][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.513241][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.515354][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.518231][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.519578][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.520796][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.522109][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.531150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 27.532574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.536679][ T1608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.537957][ T1608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.544484][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.546716][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.548172][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.549786][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.551271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.555726][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.558022][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.559541][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.561857][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.563360][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.564881][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.568066][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.569756][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.572296][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.574575][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.577106][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.585297][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.586874][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.591039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.600727][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.602226][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.603682][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.605227][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.615053][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.618773][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.621095][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.623389][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.624866][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.631624][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.635550][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.640233][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.642196][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.672369][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.673757][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.675386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 27.677805][ T4436] binder: 4435:4436 ioctl c0306201 0 returned -14 [ 27.679124][ T4436] binder: 4435:4436 got transaction to invalid handle, 1 [ 27.680247][ T4436] binder: 4436:4435 cannot find target node [ 27.681162][ T4436] binder: 4435:4436 transaction async to 0:0 failed 4/29201/-22, size 0-0 line 3054 [ 27.698949][ T4436] binder: 4435:4436 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 27.701117][ T4436] binder: 4436 RLIMIT_NICE not set [ 27.710268][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.711989][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.713609][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 27.717433][ T4436] binder: 4435:4436 ioctl c0306201 20000440 returned -11 [ 27.722709][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 27.726767][ T4438] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1'. [ 27.894110][ T4448] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7'. [ 28.476209][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 28.476288][ T4329] Bluetooth: hci3: command 0x041b tx timeout [ 28.479863][ T4324] Bluetooth: hci1: command 0x041b tx timeout [ 28.556318][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 28.566380][ T4324] Bluetooth: hci4: command 0x041b tx timeout [ 28.635314][ T4460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 28.688912][ T4460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 29.062730][ T4464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10'. [ 29.171955][ T4470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 29.230611][ T4470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 29.235741][ T4473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.237431][ T4470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 29.244610][ T4473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.558989][ T4487] binder: 4486:4487 ioctl c0306201 0 returned -14 [ 29.560295][ T4487] binder: 4486:4487 got transaction to invalid handle, 1 [ 29.561400][ T4487] binder: 4487:4486 cannot find target node [ 29.562275][ T4487] binder: 4486:4487 transaction async to 0:0 failed 9/29201/-22, size 0-0 line 3054 [ 29.564218][ T4487] binder: 4486:4487 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 29.567398][ T4487] binder: 4487 RLIMIT_NICE not set [ 29.568214][ T4487] binder: 4486:4487 ioctl c0306201 20000440 returned -11 [ 29.569729][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 29.588187][ T4489] netlink: 596 bytes leftover after parsing attributes in process `syz.4.19'. [ 29.643625][ T4490] binder: 4476:4490 ioctl c0306201 20000080 returned -14 [ 30.368632][ T4513] Zero length message leads to an empty skb [ 30.388077][ T4514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 30.478572][ T4519] binder: 4518:4519 ioctl c0306201 0 returned -14 [ 30.483048][ T4519] binder: 4518:4519 got transaction to invalid handle, 1 [ 30.491789][ T4521] netlink: 596 bytes leftover after parsing attributes in process `syz.3.30'. [ 30.493428][ T4519] binder: 4519:4518 cannot find target node [ 30.500362][ T4519] binder: 4518:4519 transaction async to 0:0 failed 14/29201/-22, size 0-0 line 3054 [ 30.504426][ T4519] binder: 4518:4519 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 30.509279][ T4519] binder: 4519 RLIMIT_NICE not set [ 30.514943][ T4519] binder: 4518:4519 ioctl c0306201 20000440 returned -11 [ 30.521682][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 30.556384][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 30.558635][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 30.559561][ T4333] Bluetooth: hci3: command 0x040f tx timeout [ 30.647307][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 30.648355][ T4324] Bluetooth: hci2: command 0x040f tx timeout [ 31.097407][ T4531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.164309][ T4523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.171495][ T4523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.217859][ T4382] wlan1: authenticate with 08:02:11:00:00:00 [ 31.220133][ T4382] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 31.222096][ T4534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.279204][ T4533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 31.301061][ T4538] netlink: 512 bytes leftover after parsing attributes in process `syz.4.35'. [ 31.346486][ T1856] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 31.456396][ T39] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 31.629066][ T4548] binder: 4546:4548 ioctl c0306201 20000080 returned -14 [ 31.748079][ T1856] wlan1: authentication with 08:02:11:00:00:00 timed out [ 31.852528][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 31.883003][ T4560] netlink: 512 bytes leftover after parsing attributes in process `syz.4.41'. [ 31.906682][ T4562] binder: 4561:4562 got transaction to invalid handle, 1 [ 31.907963][ T4562] binder: 4562:4561 cannot find target node [ 31.909224][ T4562] binder: 4561:4562 ioctl c0306201 20000440 returned -11 [ 32.344032][ T4575] netlink: 512 bytes leftover after parsing attributes in process `syz.3.46'. [ 32.636229][ T4329] Bluetooth: hci3: command 0x0419 tx timeout [ 32.637516][ T4324] Bluetooth: hci1: command 0x0419 tx timeout [ 32.638895][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 32.679894][ T4593] binder: 4592:4593 ioctl c0306201 20000440 returned -11 [ 32.703598][ T4595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.716588][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 32.717678][ T4333] Bluetooth: hci4: command 0x0419 tx timeout [ 32.719276][ T4597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.759398][ T4598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.772326][ T4597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.775021][ T4597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 32.951922][ T4604] binder: 4601:4604 ioctl c0306201 20000080 returned -14 [ 33.523055][ T4618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 33.576173][ T4618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.037945][ T4632] __nla_validate_parse: 4 callbacks suppressed [ 34.037959][ T4632] netlink: 512 bytes leftover after parsing attributes in process `syz.3.63'. [ 34.057634][ T4634] binder_user_error: 5 callbacks suppressed [ 34.057642][ T4634] binder: 4633:4634 got transaction to invalid handle, 1 [ 34.059571][ T4634] binder_debug: 5 callbacks suppressed [ 34.059584][ T4634] binder: 4634:4633 cannot find target node [ 34.061209][ T4634] binder: 4633:4634 transaction async to 0:0 failed 30/29201/-22, size 0-0 line 3054 [ 34.067369][ T4634] binder: 4633:4634 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 34.069227][ T4634] binder: 4634 RLIMIT_NICE not set [ 34.069994][ T4634] binder: 4633:4634 ioctl c0306201 20000440 returned -11 [ 34.072000][ T4382] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.448487][ T4645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.504039][ T4649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.526264][ T4645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.974137][ T4663] binder: 4661:4663 ioctl c0306201 20000080 returned -14 [ 34.987896][ T4665] tipc: Enabling of bearer rejected, failed to enable media [ 34.992165][ T4665] device syzkaller0 entered promiscuous mode [ 35.065419][ T4669] binder: 4668:4669 got transaction to invalid handle, 1 [ 35.067439][ T4669] binder: 4669:4668 cannot find target node [ 35.068517][ T4669] binder: 4668:4669 transaction async to 0:0 failed 36/29201/-22, size 0-0 line 3054 [ 35.070495][ T4669] binder: 4668:4669 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.072768][ T4669] binder: 4669 RLIMIT_NICE not set [ 35.073545][ T4669] binder: 4668:4669 ioctl c0306201 20000440 returned -11 [ 35.075074][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.215846][ T4675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 35.271050][ T4677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 35.762316][ T4698] binder: 4697:4698 got transaction to invalid handle, 1 [ 35.763507][ T4698] binder: 4698:4697 cannot find target node [ 35.764516][ T4698] binder: 4697:4698 transaction async to 0:0 failed 40/29201/-22, size 0-0 line 3054 [ 35.767499][ T4698] binder: 4697:4698 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.769498][ T4698] binder: 4698 RLIMIT_NICE not set [ 35.770350][ T4698] binder: 4697:4698 ioctl c0306201 20000440 returned -11 [ 35.771798][ T4396] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.801521][ T4701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 35.855858][ T4702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 35.858830][ T4702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 36.627226][ T4714] tipc: Enabling of bearer rejected, failed to enable media [ 36.640511][ T4714] device syzkaller0 entered promiscuous mode [ 37.377528][ T4736] binder: 4733:4736 ioctl c0306201 20000080 returned -14 [ 37.406870][ T4738] binder: 4737:4738 got transaction to invalid handle, 1 [ 37.407157][ T4732] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.408192][ T4738] binder: 4738:4737 cannot find target node [ 37.409739][ T4732] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.412607][ T4738] binder: 4737:4738 ioctl c0306201 20000440 returned -11 [ 37.461336][ T4740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 37.514352][ T4740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 37.775199][ T4751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 37.831758][ T4752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 37.834504][ T4751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 38.005056][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.019698][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.304741][ T4732] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.306674][ T4732] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.308235][ T4732] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.309911][ T4732] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.545111][ T4763] ieee802154 phy0 wpan0: encryption failed: -22 [ 39.104107][ T4777] binder_user_error: 2 callbacks suppressed [ 39.104116][ T4777] binder: 4776:4777 tried to acquire reference to desc 0, got 1 instead [ 39.110715][ T4777] binder: 4776:4777 ioctl c0306201 0 returned -14 [ 39.111936][ T4777] binder: 4776:4777 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.114134][ T4777] binder: 4777 RLIMIT_NICE not set [ 39.114912][ T4777] binder: 4776:4777 ioctl c0306201 20000440 returned -11 [ 40.398003][ T4799] binder: 4793:4799 ioctl c0306201 20000080 returned -14 [ 41.257218][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.258527][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.343533][ T4821] 9pnet_fd: Insufficient options for proto=fd [ 41.358752][ T4368] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 41.360004][ T4368] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 41.361118][ T4368] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 41.362258][ T4368] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 41.363413][ T4368] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 41.366359][ T4368] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 41.446439][ T4828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.499987][ T4828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.658561][ T4807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.671303][ T4807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.922455][ T4807] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.924127][ T4807] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.925626][ T4807] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.927169][ T4807] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.098421][ T4810] netlink: 20 bytes leftover after parsing attributes in process `syz.2.118'. [ 42.242384][ T4837] binder: 4836:4837 tried to acquire reference to desc 0, got 1 instead [ 42.243974][ T4837] binder: 4836:4837 ioctl c0306201 0 returned -14 [ 42.245141][ T4837] binder: 4836:4837 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.251601][ T4841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.253727][ T4837] binder: 4837 RLIMIT_NICE not set [ 42.254510][ T4837] binder: 4836:4837 ioctl c0306201 20000440 returned -11 [ 42.304432][ T4841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 42.307060][ T4841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.081059][ T4855] binder: 4853:4855 ioctl c0306201 20000080 returned -14 [ 43.388156][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.389540][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.918980][ T4881] binder: 4880:4881 tried to acquire reference to desc 0, got 1 instead [ 43.921244][ T4881] binder: 4880:4881 ioctl c0306201 0 returned -14 [ 43.922495][ T4881] binder: 4880:4881 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.924726][ T4881] binder: 4881 RLIMIT_NICE not set [ 43.925525][ T4881] binder: 4880:4881 ioctl c0306201 20000440 returned -11 [ 43.987892][ T4885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.044380][ T4887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.071273][ T4889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.124483][ T4889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.127169][ T4889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 44.916896][ T4899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.922097][ T4899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.531337][ T4916] binder: 4915:4916 tried to acquire reference to desc 0, got 1 instead [ 45.533297][ T4916] binder: 4915:4916 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 45.535296][ T4916] binder: 4916 RLIMIT_NICE not set [ 45.536459][ T4916] binder: 4915:4916 ioctl c0306201 20000440 returned -11 [ 45.728021][ T4926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.810751][ T4928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.829262][ T4931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.870577][ T4933] binder: 4923:4933 ioctl c0306201 20000080 returned -14 [ 45.882344][ T4931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 45.890076][ T4931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.883902][ T4951] binder: BINDER_SET_CONTEXT_MGR already set [ 46.885038][ T4951] binder: 4950:4951 ioctl 4018620d 200002c0 returned -16 [ 46.951540][ T4951] binder: tried to use weak ref as strong ref [ 46.965531][ T4951] binder: 4950:4951 Acquire 1 refcount change on invalid ref 0 ret -22 [ 46.973878][ T4951] binder: 4950:4951 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 46.985860][ T4951] binder: 4951 RLIMIT_NICE not set [ 46.993416][ T4951] binder: 4950:4951 ioctl c0306201 20000440 returned -11 [ 47.578111][ T4955] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.579445][ T4955] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.586721][ T4982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.646755][ T4982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.667851][ T4955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.683276][ T4955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.703241][ T4985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.758540][ T4985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.761233][ T4985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.932266][ T4955] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.933657][ T4955] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.935100][ T4955] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.936536][ T4955] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.656929][ T4996] binder: 4991:4996 ioctl c0306201 20000080 returned -14 [ 50.046600][ T5007] binder: 5005:5007 tried to acquire reference to desc 0, got 1 instead [ 50.049433][ T5007] binder: 5005:5007 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 50.052294][ T5007] binder: 5007 RLIMIT_NICE not set [ 50.053206][ T5007] binder: 5005:5007 ioctl c0306201 20000440 returned -11 [ 50.294907][ T5018] device syzkaller0 entered promiscuous mode [ 50.664234][ T5018] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 51.306564][ T5038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.373432][ T5036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.685292][ T5043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.748368][ T5045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.751341][ T5043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.130069][ T5055] binder: 5054:5055 tried to acquire reference to desc 0, got 1 instead [ 52.132021][ T5055] binder: 5054:5055 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 52.134049][ T5055] binder: 5055 RLIMIT_NICE not set [ 52.135217][ T5055] binder: 5054:5055 ioctl c0306201 20000440 returned -11 [ 52.275541][ T5064] device syzkaller0 entered promiscuous mode [ 52.281531][ T5064] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 52.352953][ T5066] binder: 5059:5066 ioctl c0306201 20000080 returned -14 [ 53.127831][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.129077][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.887086][ T5068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.903187][ T5068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.202341][ T5068] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.203824][ T5068] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.205306][ T5068] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.206921][ T5068] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.402011][ T5078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.194'. [ 54.404244][ T5077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.194'. [ 54.432247][ T5079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.193'. [ 54.460135][ T5100] binder: 5099:5100 tried to acquire reference to desc 0, got 1 instead [ 54.463886][ T5100] binder: 5099:5100 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 54.469133][ T5100] binder: 5100 RLIMIT_NICE not set [ 54.469982][ T5100] binder: 5099:5100 ioctl c0306201 20000440 returned -11 [ 54.813618][ T5105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.832181][ T5109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.846939][ T5111] device syzkaller0 entered promiscuous mode [ 54.886202][ T5113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.916903][ T5105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.919404][ T5105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.408139][ T5117] binder: 5116:5117 ioctl c0306201 20000080 returned -14 [ 64.480647][ T112] cfg80211: failed to load regulatory.db [ 64.488603][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489623][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.245646][ T5152] tipc: Started in network mode [ 66.246605][ T5152] tipc: Node identity 6e9f2dd91362, cluster identity 4711 [ 66.247780][ T5152] tipc: Enabled bearer , priority 0 [ 66.252453][ T5152] tipc: Resetting bearer [ 66.319378][ T5160] binder: 5157:5160 tried to acquire reference to desc 0, got 1 instead [ 66.321080][ T5160] binder: 5157:5160 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 66.323285][ T5160] binder: 5160 RLIMIT_NICE not set [ 66.324255][ T5160] binder: 5157:5160 ioctl c0306201 20000440 returned -11 [ 66.396468][ T5159] binder: 5158:5159 ioctl c0306201 20000080 returned -14 [ 66.437638][ T5151] tipc: Disabling bearer [ 66.484600][ T5170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.822160][ T5183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.825233][ T5170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.840478][ T5186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.893414][ T5186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.389000][ T5209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.223'. [ 68.718803][ T5212] binder: 5211:5212 tried to acquire reference to desc 0, got 1 instead [ 68.721024][ T5212] binder: 5211:5212 ioctl c0306201 0 returned -14 [ 68.722343][ T4382] binder_debug: 2 callbacks suppressed [ 68.722350][ T4382] binder: undelivered TRANSACTION_COMPLETE [ 68.751100][ T4396] binder: undelivered transaction 99, process died. [ 69.132588][ T5222] binder: 5221:5222 ioctl c0306201 20000080 returned -14 [ 69.167094][ T5227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.245239][ T5230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.947108][ T5227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.041045][ T5248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.096157][ T5248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.675790][ T5259] binder: 5258:5259 tried to acquire reference to desc 0, got 1 instead [ 70.684674][ T5259] binder: 5258:5259 ioctl c0306201 0 returned -14 [ 70.686959][ T4775] binder: undelivered TRANSACTION_COMPLETE [ 70.693777][ T4775] binder: undelivered transaction 106, process died. [ 71.329989][ T5275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 71.675452][ T5280] binder: 5277:5280 ioctl c0306201 20000080 returned -14 [ 72.626607][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 72.628247][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'. [ 72.669625][ T5300] binder: 5298:5300 tried to acquire reference to desc 0, got 1 instead [ 72.944478][ T5304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.949255][ T5300] binder: 5298:5300 ioctl c0306201 0 returned -14 [ 72.953154][ T14] binder: undelivered TRANSACTION_COMPLETE [ 72.959098][ T5307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.965870][ T14] binder: undelivered transaction 113, process died. [ 72.997435][ T5304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.999976][ T5304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.011940][ T5307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.763729][ T5321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'. [ 74.395993][ T5331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.258'. [ 74.398565][ T5331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.258'. [ 74.489933][ T5339] binder: 5335:5339 ioctl c0306201 20000080 returned -14 [ 75.008024][ T5345] binder: 5342:5345 tried to acquire reference to desc 0, got 1 instead [ 75.022548][ T112] binder: undelivered TRANSACTION_COMPLETE [ 75.034258][ T112] binder: undelivered transaction 120, process died. [ 76.165862][ T5361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.224346][ T5361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.231635][ T5365] tipc: Enabling of bearer rejected, failed to enable media [ 76.235185][ T5365] device syzkaller0 entered promiscuous mode [ 76.253274][ T5365] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 76.635529][ T5372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.689262][ T5370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.691683][ T5370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.804880][ T5374] tipc: Started in network mode [ 76.806118][ T5374] tipc: Node identity 02d48ddd61db, cluster identity 4711 [ 76.807308][ T5374] tipc: Enabled bearer , priority 0 [ 76.815222][ T5374] tipc: Resetting bearer [ 76.964664][ T5373] tipc: Disabling bearer [ 77.074816][ T5387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 77.803128][ T5393] binder: 5390:5393 tried to acquire reference to desc 0, got 1 instead [ 77.805032][ T4775] binder: undelivered TRANSACTION_COMPLETE [ 77.817924][ T3900] binder: undelivered transaction 125, process died. [ 77.866918][ T5399] binder: 5392:5399 ioctl c0306201 20000080 returned -14 [ 79.674589][ T5428] binder: 5412:5428 ioctl c0306201 20000080 returned -14 [ 79.741414][ T5432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.798273][ T5432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.948365][ T5434] tipc: Enabling of bearer rejected, failed to enable media [ 79.953582][ T5434] device syzkaller0 entered promiscuous mode [ 79.965941][ T5434] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 80.039128][ T5436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.110691][ T5440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.113096][ T5440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.484188][ T5449] binder: 5448:5449 tried to acquire reference to desc 0, got 1 instead [ 80.486501][ T3900] binder: undelivered TRANSACTION_COMPLETE [ 80.494006][ T3900] binder: undelivered transaction 134, process died. [ 80.934003][ T5459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.289'. [ 82.190048][ T5477] 9pnet_fd: Insufficient options for proto=fd [ 82.194414][ T4382] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 82.196150][ T4382] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 82.197231][ T4382] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 82.199018][ T4382] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 82.200669][ T4382] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 82.202309][ T4382] hid-generic 0006:0004:0009.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 82.604859][ T5488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.612736][ T5484] fido_id[5484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.658275][ T5488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.745012][ T5495] binder: 5486:5495 ioctl c0306201 20000080 returned -14 [ 83.154973][ T5499] binder: 5498:5499 tried to acquire reference to desc 0, got 1 instead [ 83.162962][ T3900] binder: undelivered TRANSACTION_COMPLETE [ 83.183885][ T3900] binder: undelivered transaction 141, process died. [ 83.218688][ T5501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.271272][ T5501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.273622][ T5501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.474270][ T5528] tipc: Enabled bearer , priority 0 [ 85.476116][ T5528] device syzkaller0 entered promiscuous mode [ 85.756656][ T5528] tipc: Resetting bearer [ 85.761543][ T5527] tipc: Resetting bearer [ 85.796663][ T5527] tipc: Disabling bearer [ 85.805126][ T5540] binder: 5539:5540 tried to acquire reference to desc 0, got 1 instead [ 85.809555][ T4382] binder: undelivered TRANSACTION_COMPLETE [ 85.817738][ T14] binder: undelivered transaction 146, process died. [ 85.840169][ T5542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.875964][ T5543] 9pnet_fd: Insufficient options for proto=fd [ 85.880093][ T4382] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 85.881441][ T4382] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 85.882987][ T4382] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 85.884095][ T4382] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 85.885279][ T4382] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 85.888202][ T4382] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 85.894074][ T5544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.009587][ T5547] fido_id[5547]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.472182][ T5556] binder: 5549:5556 ioctl c0306201 20000080 returned -14 [ 86.529600][ T5562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.587832][ T5565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.590645][ T5562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.542326][ T5585] binder: 5584:5585 tried to acquire reference to desc 0, got 1 instead [ 87.544618][ T24] binder: undelivered TRANSACTION_COMPLETE [ 88.346399][ T4396] binder: undelivered transaction 153, process died. [ 88.398663][ T5596] device syzkaller0 entered promiscuous mode [ 88.402839][ T5596] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 88.605585][ T5605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.891783][ T5605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.927924][ T5609] device syzkaller0 entered promiscuous mode [ 88.937016][ T5608] device syzkaller0 entered promiscuous mode [ 88.938746][ T5602] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 89.897885][ T5627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.951127][ T5627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.138386][ T5631] binder: 5628:5631 ioctl c0306201 20000080 returned -14 [ 90.491982][ T5635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.551777][ T5635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.554360][ T5635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.433019][ T5691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.481070][ T5693] binder: 5683:5693 ioctl c0306201 20000080 returned -14 [ 102.485687][ T5691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.584506][ T5690] 9pnet_fd: Insufficient options for proto=fd [ 102.598746][ T4775] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 102.600127][ T4775] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 102.601434][ T4775] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 102.602689][ T4775] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 102.603845][ T4775] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 102.610071][ T4775] hid-generic 0006:0004:0009.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 102.802373][ T5696] fido_id[5696]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.653995][ T5706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.772885][ T5706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.775396][ T5706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.731807][ T5716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'. [ 106.211665][ T5742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.262301][ T5755] binder: 5744:5755 ioctl c0306201 20000080 returned -14 [ 106.287157][ T5750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.268595][ T5773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.815054][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.950154][ T5773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.149384][ T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 108.150931][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.402965][ T24] usb 1-1: config 0 descriptor?? [ 109.281633][ T5799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.382960][ T5806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.436040][ T24] hackrf 1-1:0.0: usb_control_msg() failed -110 request 0e [ 109.437461][ T24] hackrf 1-1:0.0: Could not detect board [ 109.438360][ T24] hackrf: probe of 1-1:0.0 failed with error -110 [ 109.648236][ T5810] binder: 5800:5810 ioctl c0306201 20000080 returned -14 [ 109.850718][ T3900] usb 1-1: USB disconnect, device number 2 [ 109.885162][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 111.119982][ T5830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.172698][ T5830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.175262][ T5830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.280345][ T5849] device syzkaller0 entered promiscuous mode [ 112.295938][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.306142][ T5859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.360248][ T5865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.373673][ T5849] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 112.817818][ T5873] binder: 5860:5873 ioctl c0306201 20000080 returned -14 [ 114.488018][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.540752][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.543155][ T5897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.079098][ T5924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.145499][ T5929] binder: 5922:5929 ioctl c0306201 20000080 returned -14 [ 116.167227][ T5921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.178066][ T5946] device syzkaller0 entered promiscuous mode [ 117.183097][ T5946] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 117.595254][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.900667][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.908450][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.273933][ T5980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.327211][ T5980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.545626][ T5986] tipc: Started in network mode [ 119.547299][ T5986] tipc: Node identity 164801aa07c3, cluster identity 4711 [ 119.548437][ T5986] tipc: Enabled bearer , priority 0 [ 119.550182][ T5986] device syzkaller0 entered promiscuous mode [ 119.557408][ T5986] tipc: Resetting bearer [ 119.561447][ T5985] tipc: Resetting bearer [ 120.236511][ T5985] tipc: Disabling bearer [ 121.261615][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.605723][ T6025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.610728][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.641014][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 122.831999][ T6050] tipc: Enabled bearer , priority 0 [ 122.833776][ T6050] device syzkaller0 entered promiscuous mode [ 122.842415][ T6050] tipc: Resetting bearer [ 122.850241][ T6049] tipc: Resetting bearer [ 122.897538][ T6049] tipc: Disabling bearer [ 124.313963][ T6072] binder: 6062:6072 ioctl c0306201 20000080 returned -14 [ 124.513968][ T6081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.627729][ T6084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.098053][ T6091] device syzkaller0 entered promiscuous mode [ 125.101596][ T6091] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 125.271837][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.278714][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 125.325711][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.328193][ T6096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.956982][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.958034][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.076078][ T6106] device syzkaller0 entered promiscuous mode [ 127.099508][ T6106] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 127.209269][ T6114] binder: 6105:6114 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 127.210705][ T6114] binder: 6105:6114 ioctl c0306201 20000080 returned -14 [ 127.640086][ T6120] device syzkaller0 entered promiscuous mode [ 128.204113][ T6131] binder: 6128:6131 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 128.205755][ T6131] binder: 6128:6131 ioctl c0306201 20000080 returned -14 [ 128.225028][ T6132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.467'. [ 128.235177][ T6132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.467'. [ 128.647949][ T6140] binder: 6126:6140 ioctl c0306201 20000080 returned -14 [ 128.980568][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 129.364484][ T6147] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 129.365626][ T6147] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.467761][ T6147] vhci_hcd vhci_hcd.0: Device attached [ 129.470295][ T6147] devtmpfs: Unknown parameter 'nr_bZocks' [ 129.736148][ T4775] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 129.856275][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'. [ 129.858144][ T4324] Bluetooth: hci3: hcon 0000000085199a86 sent 1 < count 7 [ 129.859654][ T4324] Bluetooth: hci3: hcon 0000000085199a86 sent 0 < count 64 [ 129.999201][ T6150] vhci_hcd: connection reset by peer [ 130.001151][ T9] vhci_hcd: stop threads [ 130.002160][ T9] vhci_hcd: release socket [ 130.003228][ T9] vhci_hcd: disconnect device [ 130.843048][ T6143] Set syz1 is full, maxelem 65536 reached [ 131.364966][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.369199][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.100999][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.104939][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.112471][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.113918][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.203493][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.503'. [ 132.232656][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.234119][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.657287][ T6240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.658737][ T6240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.282018][ T14] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 133.284740][ T14] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.425553][ T6251] fido_id[6251]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.512930][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 133.554968][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.577064][ T6255] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.579469][ T6255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.583348][ T6255] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.626080][ T6255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.385039][ T6268] binder: 6267:6268 ioctl 4018620d 0 returned -22 [ 134.390715][ T6268] binder: 6267:6268 ioctl c0306201 20000180 returned -14 [ 134.476055][ T4324] Bluetooth: hci4: command 0x0406 tx timeout [ 134.727815][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.739751][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.750851][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.754967][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.913085][ T4775] vhci_hcd: vhci_device speed not set [ 135.876384][ T6301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 135.878001][ T6301] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 135.895077][ T6302] loop2: detected capacity change from 0 to 7 [ 135.900258][ T5649] Dev loop2: unable to read RDB block 7 [ 135.901225][ T5649] loop2: unable to read partition table [ 135.902147][ T5649] loop2: partition table beyond EOD, truncated [ 135.928664][ T6302] Dev loop2: unable to read RDB block 7 [ 135.929576][ T6302] loop2: unable to read partition table [ 135.930539][ T6302] loop2: partition table beyond EOD, truncated [ 135.931457][ T6302] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.329345][ T3938] Dev loop2: unable to read RDB block 7 [ 136.331013][ T3938] loop2: unable to read partition table [ 136.332028][ T3938] loop2: partition table beyond EOD, truncated [ 136.421061][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.428892][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.986697][ T6320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.988269][ T6320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.213954][ T3938] Dev loop2: unable to read RDB block 7 [ 137.214977][ T3938] loop2: unable to read partition table [ 137.216056][ T3938] loop2: partition table beyond EOD, truncated [ 137.413135][ T6324] fuse: Bad value for 'fd' [ 137.753595][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.755074][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.146529][ T3938] Dev loop2: unable to read RDB block 7 [ 138.147500][ T3938] loop2: unable to read partition table [ 138.148446][ T3938] loop2: partition table beyond EOD, truncated [ 138.151532][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.157987][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.161165][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.162614][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.280742][ T6333] 9pnet_virtio: no channels available for device syz [ 138.298468][ T6335] process 'syz.4.537' launched '/dev/fd/-1/./file0/file0' with NULL argv: empty string added [ 138.839713][ T6343] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.841258][ T6343] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 142.318758][ T4324] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 142.320285][ T4324] Bluetooth: hci4: Injecting HCI hardware error event [ 142.321771][ T4324] Bluetooth: hci4: hardware error 0x00 [ 142.341495][ T6411] device batadv_slave_0 entered promiscuous mode [ 142.569695][ T4333] Bluetooth: hci3: link tx timeout [ 142.570704][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.572423][ T4333] Bluetooth: hci3: link tx timeout [ 142.573242][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.574631][ T4333] Bluetooth: hci3: link tx timeout [ 142.575454][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.577482][ T4333] Bluetooth: hci3: link tx timeout [ 142.578268][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.579465][ T4333] Bluetooth: hci3: link tx timeout [ 142.580237][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.581364][ T4333] Bluetooth: hci3: link tx timeout [ 142.582126][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.583485][ T4333] Bluetooth: hci3: link tx timeout [ 142.584221][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.585526][ T4333] Bluetooth: hci3: link tx timeout [ 142.586466][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.588277][ T4333] Bluetooth: hci3: link tx timeout [ 142.589054][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.590401][ T4333] Bluetooth: hci3: link tx timeout [ 142.591246][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.592510][ T4333] Bluetooth: hci3: link tx timeout [ 142.593333][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.594720][ T4333] Bluetooth: hci3: link tx timeout [ 142.595474][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.597154][ T4333] Bluetooth: hci3: link tx timeout [ 142.597938][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.599159][ T4333] Bluetooth: hci3: link tx timeout [ 142.599962][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.601319][ T4333] Bluetooth: hci3: link tx timeout [ 142.602152][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.603524][ T4333] Bluetooth: hci3: link tx timeout [ 142.604387][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.605804][ T4333] Bluetooth: hci3: link tx timeout [ 142.606849][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.608543][ T4333] Bluetooth: hci3: link tx timeout [ 142.609349][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.610651][ T4333] Bluetooth: hci3: link tx timeout [ 142.611412][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.612615][ T4333] Bluetooth: hci3: link tx timeout [ 142.613363][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.614587][ T4333] Bluetooth: hci3: link tx timeout [ 142.615334][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.616962][ T4333] Bluetooth: hci3: link tx timeout [ 142.617704][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.618922][ T4333] Bluetooth: hci3: link tx timeout [ 142.619717][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.621630][ T4333] Bluetooth: hci3: link tx timeout [ 142.622363][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.623506][ T4333] Bluetooth: hci3: link tx timeout [ 142.624296][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.625600][ T4333] Bluetooth: hci3: link tx timeout [ 142.626553][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.630671][ T4333] Bluetooth: hci3: link tx timeout [ 142.631425][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.632695][ T4333] Bluetooth: hci3: link tx timeout [ 142.633485][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.634749][ T4333] Bluetooth: hci3: link tx timeout [ 142.635596][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.637592][ T4333] Bluetooth: hci3: link tx timeout [ 142.638317][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.639606][ T4333] Bluetooth: hci3: link tx timeout [ 142.640371][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.641676][ T4333] Bluetooth: hci3: link tx timeout [ 142.642484][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.643713][ T4333] Bluetooth: hci3: link tx timeout [ 142.644521][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.645747][ T4333] Bluetooth: hci3: link tx timeout [ 142.646665][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.650450][ T4333] Bluetooth: hci3: link tx timeout [ 142.651245][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.652637][ T4333] Bluetooth: hci3: link tx timeout [ 142.653433][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.654617][ T4333] Bluetooth: hci3: link tx timeout [ 142.655321][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.656971][ T4333] Bluetooth: hci3: link tx timeout [ 142.657798][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.659140][ T4333] Bluetooth: hci3: link tx timeout [ 142.660027][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.661285][ T4333] Bluetooth: hci3: link tx timeout [ 142.662120][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.663456][ T4333] Bluetooth: hci3: link tx timeout [ 142.664243][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.665498][ T4333] Bluetooth: hci3: link tx timeout [ 142.666355][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.667906][ T4333] Bluetooth: hci3: link tx timeout [ 142.668692][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.669997][ T4333] Bluetooth: hci3: link tx timeout [ 142.670782][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.672133][ T4333] Bluetooth: hci3: link tx timeout [ 142.672907][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.674284][ T4333] Bluetooth: hci3: link tx timeout [ 142.675108][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.678983][ T4333] Bluetooth: hci3: link tx timeout [ 142.679755][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.681078][ T4333] Bluetooth: hci3: link tx timeout [ 142.681797][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.683062][ T4333] Bluetooth: hci3: link tx timeout [ 142.683759][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.684953][ T4333] Bluetooth: hci3: link tx timeout [ 142.685657][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.687725][ T4333] Bluetooth: hci3: link tx timeout [ 142.688428][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.689717][ T4333] Bluetooth: hci3: link tx timeout [ 142.690488][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.691783][ T4333] Bluetooth: hci3: link tx timeout [ 142.692505][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.693778][ T4333] Bluetooth: hci3: link tx timeout [ 142.694639][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.696459][ T4333] Bluetooth: hci3: link tx timeout [ 142.697212][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.700983][ T4333] Bluetooth: hci3: link tx timeout [ 142.701755][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.705148][ T4333] Bluetooth: hci3: link tx timeout [ 142.705992][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.707808][ T4333] Bluetooth: hci3: link tx timeout [ 142.708626][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.710070][ T4333] Bluetooth: hci3: link tx timeout [ 142.710825][ T4333] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.555966][ T4324] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 144.635968][ T4324] Bluetooth: hci3: command 0x0406 tx timeout [ 146.392558][ T6480] netlink: 256 bytes leftover after parsing attributes in process `syz.1.584'. [ 146.394043][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 146.402635][ T6480] netlink: 'syz.1.584': attribute type 27 has an invalid length. [ 146.434931][ T6480] mkiss: ax0: crc mode is auto. [ 146.778395][ T4329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.780386][ T4329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.781837][ T4329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.783660][ T4329] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.785644][ T4329] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.789855][ T4336] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.149180][ T6486] chnl_net:caif_netlink_parms(): no params data found [ 147.170286][ T6507] 9pnet_virtio: no channels available for device syz [ 147.174391][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.175741][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.177791][ T6486] device bridge_slave_0 entered promiscuous mode [ 147.180434][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.181794][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.183375][ T6486] device bridge_slave_1 entered promiscuous mode [ 147.229950][ T6486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.232432][ T6486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.239630][ T6486] team0: Port device team_slave_0 added [ 147.242200][ T6486] team0: Port device team_slave_1 added [ 147.248154][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.249968][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.253908][ T6486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.256810][ T6486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.258019][ T6486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.261799][ T6486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.366954][ T6486] device hsr_slave_0 entered promiscuous mode [ 147.396115][ T6486] device hsr_slave_1 entered promiscuous mode [ 147.435967][ T6486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.437248][ T6486] Cannot create hsr debugfs directory [ 147.471618][ T6486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.497596][ T6486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.515989][ T4333] Bluetooth: hci5: command 0x1003 tx timeout [ 147.517609][ T4324] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 147.537455][ T6486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.567930][ T6486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.669206][ T6522] tipc: Can't bind to reserved service type 0 [ 147.731556][ T6486] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.732814][ T6486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.734365][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.735520][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.787800][ T6486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.792272][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.801454][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.812220][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.828927][ T6486] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.849009][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.852753][ T4468] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.853954][ T4468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.861550][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.872537][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.873753][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.895067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.899997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.901848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.906697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.912228][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.914451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.917016][ T6536] ======================================================= [ 147.917016][ T6536] WARNING: The mand mount option has been deprecated and [ 147.917016][ T6536] and is ignored by this kernel. Remove the mand [ 147.917016][ T6536] option from the mount to silence this warning. [ 147.917016][ T6536] ======================================================= [ 147.929784][ T4551] tipc: Left network mode [ 148.055796][ T6486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.059391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.060737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.296890][ T6566] syz.3.601 uses obsolete (PF_INET,SOCK_PACKET) [ 148.335587][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.337506][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.409190][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.410770][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.413271][ T6486] device veth0_vlan entered promiscuous mode [ 148.476819][ T4324] Bluetooth: hci0: command 0x0406 tx timeout [ 148.477880][ T4324] Bluetooth: hci2: command 0x0406 tx timeout [ 148.573467][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.597969][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.654200][ T6598] block device autoloading is deprecated and will be removed. [ 148.664348][ T6486] device veth1_vlan entered promiscuous mode [ 148.674443][ T6486] device veth0_macvtap entered promiscuous mode [ 148.681045][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.682648][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.684113][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.685770][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.690184][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.728799][ T6486] device veth1_macvtap entered promiscuous mode [ 148.733106][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.734692][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.739590][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.746100][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.747694][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.749470][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.755741][ T6486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.758957][ T6486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.762703][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.764030][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.765521][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.796208][ T4336] Bluetooth: hci6: command 0x0409 tx timeout [ 148.815891][ T6486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.817364][ T6486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.818728][ T6486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.820243][ T6486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.856441][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.896451][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.907995][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.909114][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.960695][ T4468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.962150][ T4468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.964527][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.038709][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.040142][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.042418][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.155300][ T6625] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.585' sets config #1 [ 149.167354][ T6622] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 149.168499][ T6622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.174180][ T6622] vhci_hcd vhci_hcd.0: Device attached [ 149.446482][ T24] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 149.624589][ T6623] vhci_hcd: connection reset by peer [ 149.625672][ T4468] vhci_hcd: stop threads [ 149.626466][ T4468] vhci_hcd: release socket [ 149.630079][ T4468] vhci_hcd: disconnect device [ 149.942643][ T4551] device hsr_slave_0 left promiscuous mode [ 149.976950][ T4551] device hsr_slave_1 left promiscuous mode [ 150.056116][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.058586][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.060035][ T4551] device bridge_slave_1 left promiscuous mode [ 150.061467][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.100122][ T4551] device bridge_slave_0 left promiscuous mode [ 150.101183][ T4551] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.875987][ T4336] Bluetooth: hci6: command 0x041b tx timeout [ 151.572684][ T6595] delete_channel: no stack [ 151.707957][ T4551] team0 (unregistering): Port device team_slave_1 removed [ 151.867176][ T4551] team0 (unregistering): Port device team_slave_0 removed [ 152.046497][ T4551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.256521][ T4551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.956129][ T4336] Bluetooth: hci6: command 0x040f tx timeout [ 154.566020][ T24] vhci_hcd: vhci_device speed not set [ 154.627034][ T4551] bond0 (unregistering): Released all slaves [ 154.892166][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.893648][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.973941][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 155.036032][ T4336] Bluetooth: hci6: command 0x0419 tx timeout [ 155.800958][ T6728] 9pnet_virtio: no channels available for device syz [ 156.450391][ T4336] Bluetooth: hci3: hcon 0000000085199a86 sent 4 < count 7 [ 156.451577][ T4336] Bluetooth: hci3: hcon 0000000085199a86 sent 0 < count 64 [ 156.452778][ T4336] Bluetooth: hci3: link tx timeout [ 156.453595][ T4336] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.540691][ T6738] block nbd4: shutting down sockets [ 157.116129][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 157.171333][ T6781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.381504][ T6787] netlink: 64 bytes leftover after parsing attributes in process `syz.4.653'. [ 158.035239][ T6827] netlink: 76 bytes leftover after parsing attributes in process `syz.5.667'. [ 158.207794][ T6846] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 159.127343][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.179635][ T6864] bond0: (slave rose0): Enslaving as an active interface with an up link [ 159.221117][ T6869] netlink: 'syz.5.673': attribute type 10 has an invalid length. [ 159.261754][ T6869] team0: Device hsr_slave_0 failed to register rx_handler [ 159.363275][ T234] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 159.409056][ T6881] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 159.431702][ T6881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.476615][ T6881] device gretap1 entered promiscuous mode [ 159.538285][ T6885] netlink: 64 bytes leftover after parsing attributes in process `syz.2.679'. [ 159.840326][ T6904] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.977571][ T6904] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.077921][ T6904] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.207246][ T6904] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.212444][ T6922] capability: warning: `syz.2.685' uses deprecated v2 capabilities in a way that may be insecure [ 160.309260][ T6904] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.319081][ T6904] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.327451][ T6904] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.336124][ T6904] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.441429][ T6937] CUSE: unknown device info "ÿ" [ 160.442298][ T6937] CUSE: zero length info key specified [ 161.168431][ T7027] netlink: 'syz.4.707': attribute type 27 has an invalid length. [ 161.293992][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.299261][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.301244][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.302719][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.771117][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.787927][ T7027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.102389][ T7027] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.103784][ T7027] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.105165][ T7027] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.107332][ T7027] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.315755][ T7028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.317847][ T7028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.319528][ T7028] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.356579][ T7028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.347431][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.350860][ T7073] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.887806][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 164.396045][ T4336] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 164.398134][ T4336] Bluetooth: hci3: Injecting HCI hardware error event [ 164.399835][ T4324] Bluetooth: hci3: hardware error 0x00 [ 164.436147][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 164.683784][ T7116] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 165.048778][ T7118] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 165.054466][ T7118] device bond1 entered promiscuous mode [ 165.055479][ T7118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.063758][ T7118] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.066085][ T7118] bond1: (slave bond2): making interface the new active one [ 165.067265][ T7118] device bond2 entered promiscuous mode [ 165.068522][ T7118] bond1: (slave bond2): Enslaving as an active interface with an up link [ 165.071137][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 165.075330][ T7123] netlink: 7 bytes leftover after parsing attributes in process `syz.2.737'. [ 165.162460][ T7129] loop7: detected capacity change from 0 to 7 [ 165.170346][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.171864][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.173293][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.174653][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.176410][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.177851][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.181479][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.182851][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.185310][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.186774][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.188833][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.190256][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.194251][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.195717][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.197409][ T5649] ldm_validate_partition_table(): Disk read failed. [ 165.198997][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.200438][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.201971][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.203382][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.205001][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.206478][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.211071][ T5649] Dev loop7: unable to read RDB block 0 [ 165.212354][ T5649] loop7: unable to read partition table [ 165.214013][ T5649] loop7: partition table beyond EOD, truncated [ 165.236633][ T7129] ldm_validate_partition_table(): Disk read failed. [ 165.237901][ T7129] Dev loop7: unable to read RDB block 0 [ 165.238805][ T7129] loop7: unable to read partition table [ 165.239987][ T7129] loop7: partition table beyond EOD, truncated [ 165.244342][ T7129] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 165.519581][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.527082][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.532410][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.533938][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.540880][ T4336] Bluetooth: hci6: Unknown advertising packet type: 0x5f [ 165.714723][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.718336][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.772538][ T7160] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 166.228122][ T7177] netlink: 'syz.5.753': attribute type 10 has an invalid length. [ 166.250959][ T7177] device lo entered promiscuous mode [ 166.271242][ T7177] device tunl0 entered promiscuous mode [ 166.299220][ T7177] device gre0 entered promiscuous mode [ 166.319392][ T7177] device gretap0 entered promiscuous mode [ 166.325036][ T7177] device erspan0 entered promiscuous mode [ 166.353223][ T7177] device ip_vti0 entered promiscuous mode [ 166.356956][ T7177] device ip6_vti0 entered promiscuous mode [ 166.358383][ T7177] device sit0 entered promiscuous mode [ 166.360086][ T7177] device ip6tnl0 entered promiscuous mode [ 166.361534][ T7177] device ip6gre0 entered promiscuous mode [ 166.362908][ T7177] device syz_tun entered promiscuous mode [ 166.364824][ T7177] device ip6gretap0 entered promiscuous mode [ 166.367315][ T7177] device bridge0 entered promiscuous mode [ 166.368947][ T7177] device vcan0 entered promiscuous mode [ 166.370010][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.371496][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.372836][ T7177] device bond0 entered promiscuous mode [ 166.373843][ T7177] device bond_slave_0 entered promiscuous mode [ 166.375050][ T7177] device bond_slave_1 entered promiscuous mode [ 166.378471][ T7177] device team0 entered promiscuous mode [ 166.379538][ T7177] device team_slave_0 entered promiscuous mode [ 166.380869][ T7177] device team_slave_1 entered promiscuous mode [ 166.383864][ T7177] device dummy0 entered promiscuous mode [ 166.386857][ T7177] device nlmon0 entered promiscuous mode [ 166.426003][ T7177] device caif0 entered promiscuous mode [ 166.427103][ T7177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.635994][ T4324] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 166.636148][ T4336] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 166.638596][ T4336] Bluetooth: hci2: Injecting HCI hardware error event [ 166.640464][ T4336] Bluetooth: hci2: hardware error 0x00 [ 167.502904][ T4324] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 167.880030][ T7232] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 168.312025][ T3900] hid-generic 0005:15C2:5505.0006: unknown main item tag 0x0 [ 168.313199][ T3900] hid-generic 0005:15C2:5505.0006: unknown main item tag 0x0 [ 168.314321][ T3900] hid-generic 0005:15C2:5505.0006: item fetching failed at offset 2/3 [ 168.323509][ T3900] hid-generic: probe of 0005:15C2:5505.0006 failed with error -22 [ 168.876201][ T4336] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 169.596065][ T4336] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 169.597543][ T4336] Bluetooth: hci0: Injecting HCI hardware error event [ 169.599465][ T4324] Bluetooth: hci0: hardware error 0x00 [ 170.235443][ T7297] loop7: detected capacity change from 0 to 7 [ 170.257368][ C1] blk_print_req_error: 6 callbacks suppressed [ 170.257378][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.259809][ C1] buffer_io_error: 6 callbacks suppressed [ 170.259820][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.262455][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.263864][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.265446][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.266867][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.277313][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.278735][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.282512][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.284016][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.286321][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.287626][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.293730][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.295308][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.303323][ T7297] ldm_validate_partition_table(): Disk read failed. [ 170.337348][ T7297] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.338796][ T7297] Buffer I/O error on dev loop7, logical block 0, async page read [ 170.339911][ T7297] Dev loop7: unable to read RDB block 0 [ 170.340756][ T7297] loop7: unable to read partition table [ 170.360369][ T7297] loop7: partition table beyond EOD, truncated [ 170.361368][ T7297] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 170.782201][ T7323] lo speed is unknown, defaulting to 1000 [ 170.784586][ T7323] lo speed is unknown, defaulting to 1000 [ 170.786178][ T7323] lo speed is unknown, defaulting to 1000 [ 170.804464][ T7323] infiniband sz1: set down [ 170.805209][ T7323] infiniband sz1: added lo [ 170.808350][ T4775] lo speed is unknown, defaulting to 1000 [ 170.839557][ T7323] RDS/IB: sz1: added [ 170.840480][ T7323] smc: adding ib device sz1 with port count 1 [ 170.841451][ T7323] smc: ib device sz1 port 1 has pnetid [ 170.843808][ T7323] lo speed is unknown, defaulting to 1000 [ 170.853722][ T4775] lo speed is unknown, defaulting to 1000 [ 170.869007][ T7323] lo speed is unknown, defaulting to 1000 [ 170.887547][ T7323] lo speed is unknown, defaulting to 1000 [ 170.904637][ T7323] lo speed is unknown, defaulting to 1000 [ 170.928254][ T7323] lo speed is unknown, defaulting to 1000 [ 171.333451][ T7361] device bridge_slave_0 left promiscuous mode [ 171.339081][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.370095][ T7361] device bridge_slave_1 left promiscuous mode [ 171.371243][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.419591][ T7361] bond0: (slave bond_slave_0): Releasing backup interface [ 171.467998][ T7361] bond0: (slave bond_slave_1): Releasing backup interface [ 171.519838][ T7361] team0: Port device team_slave_0 removed [ 171.522030][ T7361] team0: Port device team_slave_1 removed [ 171.523154][ T7361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.524862][ T7361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.526988][ T7369] team0: Mode changed to "random" [ 171.528339][ T7378] tipc: Started in network mode [ 171.529156][ T7378] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 171.530389][ T7378] tipc: Enabled bearer , priority 0 [ 171.531427][ T7376] device vlan0 entered promiscuous mode [ 171.996084][ T4324] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 172.375430][ T7404] hub 9-0:1.0: USB hub found [ 172.393621][ T7404] hub 9-0:1.0: 8 ports detected [ 172.647819][ T4382] tipc: Node number set to 11578026 [ 172.928204][ T7420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.930379][ T7420] device bridge_slave_0 left promiscuous mode [ 172.931396][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.971216][ T7420] device bridge_slave_1 left promiscuous mode [ 172.972453][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.975484][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.978252][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.980807][ T4324] Bluetooth: hci6: Malformed LE Event: 0x0d [ 173.007500][ T7420] bond0: (slave bond_slave_0): Releasing backup interface [ 173.059548][ T7420] bond0: (slave bond_slave_1): Releasing backup interface [ 173.099886][ T7420] team0: Port device team_slave_0 removed [ 173.101871][ T7420] team0: Port device team_slave_1 removed [ 173.103313][ T7420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.104827][ T7420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.107559][ T7420] bond1: (slave bond2): Releasing backup interface [ 173.108684][ T7420] device bond2 left promiscuous mode [ 173.155418][ T7427] team0: Mode changed to "random" [ 173.158040][ T7430] device vlan0 entered promiscuous mode [ 173.168510][ T7433] tipc: Enabled bearer , priority 0 [ 173.169939][ T7435] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 173.739569][ T7476] lo speed is unknown, defaulting to 1000 [ 174.180970][ T112] tipc: Node number set to 294322602 [ 174.198010][ T7505] loop7: detected capacity change from 0 to 7 [ 174.200610][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.201896][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.203145][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.204529][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 174.209156][ T5649] ldm_validate_partition_table(): Disk read failed. [ 174.210619][ T5649] Dev loop7: unable to read RDB block 0 [ 174.211885][ T5649] loop7: unable to read partition table [ 174.212758][ T5649] loop7: partition table beyond EOD, truncated [ 174.284488][ T7506] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 174.285603][ T7506] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.308232][ T7506] vhci_hcd vhci_hcd.0: Device attached [ 174.326936][ T7505] ldm_validate_partition_table(): Disk read failed. [ 174.333339][ T7505] Dev loop7: unable to read RDB block 0 [ 174.346579][ T7505] loop7: unable to read partition table [ 174.347500][ T7505] loop7: partition table beyond EOD, truncated [ 174.374056][ T7508] vhci_hcd: connection closed [ 174.374931][ T4551] vhci_hcd: stop threads [ 174.386465][ T4551] vhci_hcd: release socket [ 174.387257][ T4551] vhci_hcd: disconnect device [ 174.406146][ T7505] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 175.160905][ T7553] netlink: 128 bytes leftover after parsing attributes in process `syz.5.831'. [ 175.189579][ T7552] lo speed is unknown, defaulting to 1000 [ 175.481339][ T7572] random: crng reseeded on system resumption [ 175.798888][ T7579] batman_adv: batadv0: Adding interface: dummy0 [ 175.799945][ T7579] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.810024][ T7579] batman_adv: batadv0: Interface activated: dummy0 [ 175.821018][ T7575] batadv0: mtu less than device minimum [ 175.823608][ T7575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.826772][ T7575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.829787][ T7575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.832702][ T7575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.835588][ T7575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.838592][ T7575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.841486][ T7575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.844445][ T7575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.847287][ T7575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.231097][ T7592] hub 9-0:1.0: USB hub found [ 176.234516][ T7592] hub 9-0:1.0: 8 ports detected [ 176.331235][ T7601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.333489][ T7601] device bridge_slave_0 left promiscuous mode [ 176.334698][ T7601] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.387109][ T7601] device bridge_slave_1 left promiscuous mode [ 176.388419][ T7601] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.429882][ T7601] bond0: (slave bond_slave_0): Releasing backup interface [ 176.467915][ T7601] bond0: (slave bond_slave_1): Releasing backup interface [ 176.509496][ T7601] team0: Port device team_slave_0 removed [ 176.512240][ T7601] team0: Port device team_slave_1 removed [ 176.513493][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.520089][ T7601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.523769][ T7604] team0: Mode changed to "random" [ 176.527792][ T7611] device vlan0 entered promiscuous mode [ 176.532473][ T7604] tipc: Started in network mode [ 176.533580][ T7604] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 176.534963][ T7604] tipc: Enabled bearer , priority 0 [ 176.739163][ T7619] netlink: 44 bytes leftover after parsing attributes in process `syz.5.845'. [ 177.257286][ T7617] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 177.258395][ T7617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.259507][ T7617] vhci_hcd vhci_hcd.0: Device attached [ 177.501394][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.847'. [ 177.526304][ T112] usb 6-1: new high-speed USB device number 2 using vhci_hcd [ 177.527573][ T14] tipc: Node number set to 11578026 [ 177.529158][ T7625] vhci_hcd: connection reset by peer [ 177.530235][ T4530] vhci_hcd: stop threads [ 177.530889][ T4530] vhci_hcd: release socket [ 177.531643][ T4530] vhci_hcd: disconnect device [ 177.608175][ T7650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.610060][ T7650] tipc: Resetting bearer [ 177.628907][ T7650] team0: Unable to change to the same mode the team is in [ 177.630524][ T7651] lo speed is unknown, defaulting to 1000 [ 177.681588][ T7655] netlink: 276 bytes leftover after parsing attributes in process `syz.1.856'. [ 177.720729][ T7657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.722892][ T7657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.073222][ T7662] hub 9-0:1.0: USB hub found [ 178.082690][ T7662] hub 9-0:1.0: 8 ports detected [ 178.891174][ T3900] kernel write not supported for file /vcsu (pid: 3900 comm: kworker/0:3) [ 178.980536][ T7679] device vlan0 entered promiscuous mode [ 178.995147][ T7679] team0: Port device vlan0 added [ 179.048510][ T7682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.050508][ T7682] tipc: Resetting bearer [ 179.130578][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.132940][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.134695][ T7687] batman_adv: batadv0: Adding interface: dummy0 [ 179.135736][ T7687] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.143339][ T7687] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 179.150646][ T7694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.152337][ T7694] tipc: Resetting bearer [ 179.191618][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.193199][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.894439][ T7711] virtio-fs: tag not found [ 179.968903][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.970463][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.049860][ T7730] netlink: 276 bytes leftover after parsing attributes in process `syz.3.887'. [ 180.260053][ T7745] /dev/loop2: Can't open blockdev [ 180.334658][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 181.462290][ T7763] netlink: 276 bytes leftover after parsing attributes in process `syz.4.901'. [ 181.809987][ T7792] device vlan0 entered promiscuous mode [ 182.635950][ T112] vhci_hcd: vhci_device speed not set [ 183.029560][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.034532][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.043208][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.049327][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.054587][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.065004][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.831168][ T7842] netlink: 'syz.3.931': attribute type 3 has an invalid length. [ 183.890944][ T7846] net_ratelimit: 10 callbacks suppressed [ 183.890953][ T7846] netlink: set zone limit has 8 unknown bytes [ 184.918356][ T7875] lo speed is unknown, defaulting to 1000 [ 184.919540][ T7875] lo speed is unknown, defaulting to 1000 [ 184.923027][ T7875] lo speed is unknown, defaulting to 1000 [ 184.928499][ T7875] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 184.938009][ T7875] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 185.050931][ T7875] lo speed is unknown, defaulting to 1000 [ 185.054256][ T7875] lo speed is unknown, defaulting to 1000 [ 185.056714][ T7875] lo speed is unknown, defaulting to 1000 [ 185.059453][ T7875] lo speed is unknown, defaulting to 1000 [ 185.061857][ T7875] lo speed is unknown, defaulting to 1000 [ 185.760321][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.762099][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.825880][ T7909] random: crng reseeded on system resumption [ 186.087144][ T7917] lo speed is unknown, defaulting to 1000 [ 186.106691][ T7917] lo speed is unknown, defaulting to 1000 [ 186.119732][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.954'. [ 186.123723][ T7917] device syzkaller1 entered promiscuous mode [ 187.356955][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.356999][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.395306][ T7962] tipc: Enabling of bearer rejected, failed to enable media [ 187.602193][ T7978] device syzkaller0 entered promiscuous mode [ 198.799263][ T7986] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 198.801591][ T7980] netlink: 'syz.4.981': attribute type 10 has an invalid length. [ 198.803612][ T7980] team0: Device hsr_slave_0 failed to register rx_handler [ 198.814489][ T7996] batman_adv: batadv0: Removing interface: dummy0 [ 198.815999][ T7996] device bridge_slave_0 left promiscuous mode [ 198.817026][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.857104][ T7996] device bridge_slave_1 left promiscuous mode [ 198.858160][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.890027][ T7996] bond0: (slave bond_slave_0): Releasing backup interface [ 198.917220][ T7996] bond0: (slave bond_slave_1): Releasing backup interface [ 198.958566][ T7996] team0: Port device team_slave_0 removed [ 198.960087][ T7996] team0: Port device team_slave_1 removed [ 198.961066][ T7996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.962579][ T7996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.965214][ T7998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.988303][ T8007] sp0: Synchronizing with TNC [ 199.093196][ T8036] netlink: 56 bytes leftover after parsing attributes in process `syz.4.995'. [ 199.302719][ T8058] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 199.309734][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 199.990014][ T8067] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1007'. [ 200.229187][ T8082] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 200.230582][ T8082] netlink: 'syz.2.1014': attribute type 2 has an invalid length. [ 200.233702][ T8082] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 200.235696][ T8082] ALSA: mixer_oss: invalid OSS volume 'Â' [ 200.237026][ T8082] ALSA: mixer_oss: invalid OSS volume '' [ 200.402832][ T8098] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1019'. [ 200.459304][ T8104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.461402][ T8104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.462572][ T8104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.464424][ T8104] device bridge_slave_0 left promiscuous mode [ 200.465564][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.537743][ T8104] device bridge_slave_1 left promiscuous mode [ 200.538807][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.556819][ T8109] binder: 8108:8109 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 200.558901][ T8109] binder: 8109 RLIMIT_NICE not set [ 200.587831][ T8104] bond0: (slave bond_slave_0): Releasing backup interface [ 200.636493][ T8104] device bond_slave_0 left promiscuous mode [ 200.640859][ T8104] bond0: (slave bond_slave_1): Releasing backup interface [ 200.657957][ T8104] device bond_slave_1 left promiscuous mode [ 200.661952][ T8104] device team_slave_0 left promiscuous mode [ 200.671325][ T8104] team0: Port device team_slave_0 removed [ 200.672609][ T8104] device team_slave_1 left promiscuous mode [ 200.679462][ T8104] team0: Port device team_slave_1 removed [ 200.681048][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.682317][ T8104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.684236][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.685494][ T8104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.689784][ T8104] team0: Port device vlan0 removed [ 200.694181][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 200.697186][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.698545][ T8107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.782513][ T8126] binder: 8125:8126 tried to acquire reference to desc 0, got 1 instead [ 200.784157][ T8126] binder: 8125:8126 got transaction with invalid handle, 2 [ 200.785275][ T8126] binder: 8126:8125 translate handle failed [ 200.789945][ T8126] binder: 8125:8126 transaction async to 8125:0 failed 177/29201/-22, size 72-24 line 3402 [ 200.791945][ T4375] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.823998][ T8132] binder: 8131:8132 unknown command 0 [ 200.825662][ T8132] binder: 8131:8132 ioctl c0306201 20000080 returned -22 [ 200.845522][ T8132] binder: 8131:8132 tried to acquire reference to desc 0, got 1 instead [ 200.847104][ T8132] binder_alloc: 8131: binder_alloc_buf size 4120 failed, no address space [ 200.849678][ T8132] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 200.851190][ T8132] binder: cannot allocate buffer: no space left [ 200.852450][ T8132] binder: 8131:8132 transaction call to 8131:0 failed 184/29201/-28, size 0-24 line 3239 [ 200.855604][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.074485][ T8145] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1033'. [ 201.141415][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.142544][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.143650][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.144687][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.145795][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.148471][ T8151] UHID_CREATE from different security context by process 642 (syz.4.1038), this is not allowed. [ 201.154017][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.155125][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.160649][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.161758][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.162897][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.163981][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.165200][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.178599][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.181684][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.186496][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.189547][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.192703][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.197004][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.200466][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.203609][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.207135][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.211957][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.215350][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.220355][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.223933][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.227557][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.231058][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.234520][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.238798][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.242778][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.246275][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.250881][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.254542][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.258990][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.262999][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.266248][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.269748][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.274258][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.277849][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.282587][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.286574][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.287778][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.288897][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.298790][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.299914][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.306882][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.308033][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.309124][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.310442][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.322443][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.323579][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.324900][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.326119][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.327159][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.328309][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.329433][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.330595][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.331743][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.336051][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.337337][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.338882][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.340505][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.341711][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.342959][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.346156][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.347589][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.348936][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.350329][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.352103][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.354047][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.355852][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.357363][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.359197][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.360706][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.361957][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.363714][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.365357][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.366641][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.368069][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.369411][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.370690][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.372351][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.373758][ T4382] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 201.380908][ T4382] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.03 Device [syz1] on syz1 [ 201.429655][ T8161] fido_id[8161]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.851827][ T4336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.853900][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.855600][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.858681][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.860338][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.861655][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.111825][ T8193] 9pnet_virtio: no channels available for device syz [ 202.186424][ T8172] lo speed is unknown, defaulting to 1000 [ 202.280301][ T8172] lo speed is unknown, defaulting to 1000 [ 203.267456][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 203.311633][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.312945][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.314420][ T8172] device bridge_slave_0 entered promiscuous mode [ 203.330854][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.332055][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.333580][ T8172] device bridge_slave_1 entered promiscuous mode [ 203.364921][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.509614][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.862327][ T8172] team0: Port device team_slave_0 added [ 203.864358][ T8172] team0: Port device team_slave_1 added [ 203.880665][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.881846][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.888828][ T8172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.891487][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.892616][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.904435][ T8172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.920802][ T4324] Bluetooth: hci1: command 0x0409 tx timeout [ 203.977159][ T8172] device hsr_slave_0 entered promiscuous mode [ 203.996954][ T8172] device hsr_slave_1 entered promiscuous mode [ 204.036212][ T8172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.037492][ T8172] Cannot create hsr debugfs directory [ 204.071768][ T8232] team0: Mode changed to "loadbalance" [ 204.072698][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1063'. [ 204.127009][ T8238] tipc: Enabled bearer , priority 0 [ 204.128470][ T8238] device syzkaller0 entered promiscuous mode [ 204.181694][ T8242] lo speed is unknown, defaulting to 1000 [ 204.184322][ T8172] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 204.279088][ T8238] tipc: Resetting bearer [ 204.282238][ T8237] tipc: Resetting bearer [ 204.349896][ T8237] tipc: Disabling bearer [ 204.351842][ T8242] lo speed is unknown, defaulting to 1000 [ 204.352093][ T8172] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 204.387202][ T8172] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 204.446074][ T8172] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.478876][ T8255] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1073'. [ 204.480788][ T8255] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1073'. [ 204.546247][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.549804][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.551434][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.553877][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.563266][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.564813][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.567296][ T4979] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.568494][ T4979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.570530][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.572143][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.573758][ T4979] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.574834][ T4979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.577844][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.579564][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.581507][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.583169][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.584893][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.587972][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.594422][ T8172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.597159][ T8172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.600699][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.602479][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.605175][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.608276][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.609883][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.623508][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.629121][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.807777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.810679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.814041][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.911218][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.912900][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.921443][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.923017][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.924861][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.929448][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.933934][ T8172] device veth0_vlan entered promiscuous mode [ 204.940576][ T8172] device veth1_vlan entered promiscuous mode [ 204.952183][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 204.953899][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 204.955502][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.963383][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.970836][ T8172] device veth0_macvtap entered promiscuous mode [ 204.974714][ T8172] device veth1_macvtap entered promiscuous mode [ 204.985678][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.989891][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.991372][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.993084][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.994703][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.020074][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.025447][ T8172] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.027593][ T8172] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.028995][ T8172] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.030423][ T8172] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.037780][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.039305][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.123164][ T4551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.131335][ T4551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.135863][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.149786][ T4530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.151236][ T4530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.153700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.214786][ T8292] team0: Mode "" not found [ 205.996487][ T4324] Bluetooth: hci1: command 0x041b tx timeout [ 206.544416][ T8362] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.547788][ T4990] Bluetooth: hci5: Frame reassembly failed (-84) [ 206.571162][ T8367] team0: No ports can be present during mode change [ 207.916100][ T4336] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 207.917731][ T4336] Bluetooth: hci6: Injecting HCI hardware error event [ 207.919735][ T4333] Bluetooth: hci6: hardware error 0x00 [ 207.946941][ T8415] team0: Mode changed to "loadbalance" [ 207.948170][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1128'. [ 208.556088][ T4336] Bluetooth: hci5: command 0x1003 tx timeout [ 208.558140][ T4324] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 209.699834][ T8439] device vlan0 entered promiscuous mode [ 209.864368][ T8453] team0: Mode changed to "loadbalance" [ 209.865287][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1145'. [ 209.954824][ T8467] netlink: 'syz.2.1150': attribute type 1 has an invalid length. [ 209.967775][ T8467] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 209.970261][ T8467] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 210.027281][ T8473] device gretap1 entered promiscuous mode [ 210.029459][ T8473] bond1: (slave gretap1): making interface the new active one [ 210.038291][ T8473] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 210.045411][ T8467] device macvlan2 entered promiscuous mode [ 210.047236][ T8467] device bond1 entered promiscuous mode [ 210.051128][ T8467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 210.112976][ T8467] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 210.155364][ T8467] device bond1 left promiscuous mode [ 210.176428][ T4333] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 210.784034][ T8494] team0: No ports can be present during mode change [ 210.860512][ T4333] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 210.862102][ T4333] Bluetooth: hci1: Injecting HCI hardware error event [ 210.864109][ T4324] Bluetooth: hci1: hardware error 0x00 [ 210.986339][ T8501] binder: 8500:8501 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 210.998241][ T8501] binder: 8501 RLIMIT_NICE not set [ 211.293441][ T8507] ------------[ cut here ]------------ [ 211.294625][ T8507] WARNING: CPU: 1 PID: 8507 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 211.296058][ T8507] Modules linked in: [ 211.296671][ T8507] CPU: 1 PID: 8507 Comm: syz.6.1164 Not tainted syzkaller #0 [ 211.297727][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 211.299242][ T8507] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 211.300366][ T8507] pc : hugetlb_split+0x234/0x29c [ 211.301121][ T8507] lr : hugetlb_split+0x234/0x29c [ 211.301785][ T8507] sp : ffff800021c774f0 [ 211.302366][ T8507] x29: ffff800021c774f0 x28: dfff800000000000 x27: ffff70000438eeb8 [ 211.303745][ T8507] x26: ffff0000c96c4798 x25: ffff8000150c0000 x24: 1ffff00002a180b0 [ 211.305091][ T8507] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 211.306370][ T8507] x20: 0000000020000000 x19: ffff0000c96c4798 x18: 0000000000000000 [ 211.307624][ T8507] x17: ffff8000087f3188 x16: ffff8000082d0e30 x15: 0000000000000002 [ 211.308914][ T8507] x14: 0000000011957b4c x13: 00000000e3015cc6 x12: 0000000000080000 [ 211.310121][ T8507] x11: 000000000000219c x10: ffff800025e8b000 x9 : ffff8000088884f4 [ 211.311370][ T8507] x8 : 000000000000219d x7 : 0000000000000000 x6 : 000000000000003f [ 211.312677][ T8507] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008888374 [ 211.313934][ T8507] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 211.315189][ T8507] Call trace: [ 211.315689][ T8507] hugetlb_split+0x234/0x29c [ 211.316397][ T8507] __vma_adjust+0x450/0x16c0 [ 211.317076][ T8507] __split_vma+0x324/0x448 [ 211.317735][ T8507] do_mas_align_munmap+0x2c8/0xeec [ 211.318493][ T8507] do_munmap+0x1c4/0x22c [ 211.319162][ T8507] mremap_to+0x1f8/0x440 [ 211.319779][ T8507] __arm64_sys_mremap+0x58c/0xe54 [ 211.320551][ T8507] invoke_syscall+0x98/0x2bc [ 211.321295][ T8507] el0_svc_common+0x138/0x258 [ 211.322031][ T8507] do_el0_svc+0x58/0x13c [ 211.322715][ T8507] el0_svc+0x58/0x138 [ 211.323340][ T8507] el0t_64_sync_handler+0x84/0xf0 [ 211.324067][ T8507] el0t_64_sync+0x18c/0x190 [ 211.324704][ T8507] irq event stamp: 16088 [ 211.325331][ T8507] hardirqs last enabled at (16087): [] kmem_cache_alloc_bulk+0x3d0/0x500 [ 211.326823][ T8507] hardirqs last disabled at (16088): [] el1_dbg+0x24/0x80 [ 211.328137][ T8507] softirqs last enabled at (16036): [] local_bh_enable+0x10/0x34 [ 211.329513][ T8507] softirqs last disabled at (16034): [] local_bh_disable+0x10/0x34 [ 211.330887][ T8507] ---[ end trace 0000000000000000 ]--- [ 211.331886][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.336283][ T8507] ------------[ cut here ]------------ [ 211.337126][ T8507] WARNING: CPU: 1 PID: 8507 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 211.338443][ T8507] Modules linked in: [ 211.339000][ T8507] CPU: 1 PID: 8507 Comm: syz.6.1164 Tainted: G W syzkaller #0 [ 211.340358][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 211.341954][ T8507] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 211.343160][ T8507] pc : hugetlb_split+0x234/0x29c [ 211.343961][ T8507] lr : hugetlb_split+0x234/0x29c [ 211.344737][ T8507] sp : ffff800021c774f0 [ 211.345422][ T8507] x29: ffff800021c774f0 x28: dfff800000000000 x27: ffff70000438eeb8 [ 211.346675][ T8507] x26: ffff0000c96c4798 x25: ffff8000150c0000 x24: 1ffff00002a180b0 [ 211.348055][ T8507] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 211.349392][ T8507] x20: 0000000020a00000 x19: ffff0000c96c4798 x18: 0000000000000000 [ 211.350679][ T8507] x17: ffff8000087f3188 x16: ffff8000082d0e30 x15: 0000000000000002 [ 211.351996][ T8507] x14: 0000000011957b4c x13: 00000000e3015cc6 x12: 0000000000080000 [ 211.353259][ T8507] x11: 000000000001a750 x10: ffff800025e8b000 x9 : ffff8000088884f4 [ 211.354601][ T8507] x8 : 000000000001a751 x7 : 0000000000000000 x6 : 000000000000003f [ 211.355946][ T8507] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008888374 [ 211.357300][ T8507] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 211.358609][ T8507] Call trace: [ 211.359104][ T8507] hugetlb_split+0x234/0x29c [ 211.359796][ T8507] __vma_adjust+0x45c/0x16c0 [ 211.360508][ T8507] __split_vma+0x324/0x448 [ 211.361140][ T8507] do_mas_align_munmap+0x2c8/0xeec [ 211.361906][ T8507] do_munmap+0x1c4/0x22c [ 211.362576][ T8507] mremap_to+0x1f8/0x440 [ 211.363212][ T8507] __arm64_sys_mremap+0x58c/0xe54 [ 211.364045][ T8507] invoke_syscall+0x98/0x2bc [ 211.364796][ T8507] el0_svc_common+0x138/0x258 [ 211.365487][ T8507] do_el0_svc+0x58/0x13c [ 211.366141][ T8507] el0_svc+0x58/0x138 [ 211.366813][ T8507] el0t_64_sync_handler+0x84/0xf0 [ 211.367591][ T8507] el0t_64_sync+0x18c/0x190 [ 211.368302][ T8507] irq event stamp: 16250 [ 211.368949][ T8507] hardirqs last enabled at (16249): [] exit_to_kernel_mode+0xcc/0xfc [ 211.370335][ T8507] hardirqs last disabled at (16250): [] el1_dbg+0x24/0x80 [ 211.371619][ T8507] softirqs last enabled at (16244): [] handle_softirqs+0xaf8/0xc6c [ 211.372973][ T8507] softirqs last disabled at (16091): [] __do_softirq+0x14/0x20 [ 211.374333][ T8507] ---[ end trace 0000000000000000 ]--- [ 211.375170][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.383420][ T8507] ------------[ cut here ]------------ [ 211.384319][ T8507] WARNING: CPU: 0 PID: 8507 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 211.385714][ T8507] Modules linked in: [ 211.386333][ T8507] CPU: 0 PID: 8507 Comm: syz.6.1164 Tainted: G W syzkaller #0 [ 211.387672][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 211.389203][ T8507] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 211.390446][ T8507] pc : hugetlb_split+0x234/0x29c [ 211.391212][ T8507] lr : hugetlb_split+0x234/0x29c [ 211.391999][ T8507] sp : ffff800021c77390 [ 211.392705][ T8507] x29: ffff800021c77390 x28: dfff800000000000 x27: ffff70000438ee8c [ 211.393977][ T8507] x26: ffff0000c96c4798 x25: ffff8000150c0000 x24: 1ffff00002a180b0 [ 211.395239][ T8507] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 211.396585][ T8507] x20: 0000000020600000 x19: ffff0000c96c4798 x18: 0000000000000000 [ 211.397948][ T8507] x17: ffff8000088016ac x16: ffff8000082d0e30 x15: 0000000000000002 [ 211.399172][ T8507] x14: 00000000ffff8000 x13: 000000008db3403c x12: 0000000000080000 [ 211.400535][ T8507] x11: 000000000003d641 x10: ffff800025e8b000 x9 : ffff8000088884f4 [ 211.401822][ T8507] x8 : 000000000003d642 x7 : 0000000000000000 x6 : 000000000000003f [ 211.403133][ T8507] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008888374 [ 211.404450][ T8507] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 211.405699][ T8507] Call trace: [ 211.406227][ T8507] hugetlb_split+0x234/0x29c [ 211.407009][ T8507] __vma_adjust+0x450/0x16c0 [ 211.407756][ T8507] __split_vma+0x324/0x448 [ 211.408444][ T8507] do_mas_align_munmap+0x5dc/0xeec [ 211.409230][ T8507] do_munmap+0x1c4/0x22c [ 211.409930][ T8507] move_vma+0x674/0x9e8 [ 211.410635][ T8507] mremap_to+0x3bc/0x440 [ 211.411285][ T8507] __arm64_sys_mremap+0x58c/0xe54 [ 211.412087][ T8507] invoke_syscall+0x98/0x2bc [ 211.412854][ T8507] el0_svc_common+0x138/0x258 [ 211.413607][ T8507] do_el0_svc+0x58/0x13c [ 211.414326][ T8507] el0_svc+0x58/0x138 [ 211.414969][ T8507] el0t_64_sync_handler+0x84/0xf0 [ 211.415799][ T8507] el0t_64_sync+0x18c/0x190 [ 211.416533][ T8507] irq event stamp: 16666 [ 211.417221][ T8507] hardirqs last enabled at (16665): [] kmem_cache_alloc_bulk+0x3d0/0x500 [ 211.418790][ T8507] hardirqs last disabled at (16666): [] el1_dbg+0x24/0x80 [ 211.420225][ T8507] softirqs last enabled at (16508): [] handle_softirqs+0xaf8/0xc6c [ 211.421861][ T8507] softirqs last disabled at (16253): [] __do_softirq+0x14/0x20 [ 211.423327][ T8507] ---[ end trace 0000000000000000 ]--- [ 211.425179][ T8507] ------------[ cut here ]------------ [ 211.426040][ T8507] WARNING: CPU: 0 PID: 8507 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c [ 211.427370][ T8507] Modules linked in: [ 211.427964][ T8507] CPU: 0 PID: 8507 Comm: syz.6.1164 Tainted: G W syzkaller #0 [ 211.429334][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 211.430880][ T8507] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 211.431999][ T8507] pc : hugetlb_split+0x234/0x29c [ 211.432713][ T8507] lr : hugetlb_split+0x234/0x29c [ 211.433453][ T8507] sp : ffff800021c77390 [ 211.434054][ T8507] x29: ffff800021c77390 x28: dfff800000000000 x27: ffff70000438ee8c [ 211.435234][ T8507] x26: ffff0000c96c4798 x25: ffff8000150c0000 x24: 1ffff00002a180b0 [ 211.436356][ T8507] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000 [ 211.437485][ T8507] x20: 0000000020a00000 x19: ffff0000c96c4798 x18: 0000000000000000 [ 211.438728][ T8507] x17: ffff8000088016ac x16: ffff8000082d0e30 x15: 0000000000000002 [ 211.439946][ T8507] x14: 00000000ffff8000 x13: 000000008db3403c x12: 0000000000080000 [ 211.441270][ T8507] x11: 00000000000544ae x10: ffff800025e8b000 x9 : ffff8000088884f4 [ 211.442563][ T8507] x8 : 00000000000544af x7 : 0000000000000000 x6 : 000000000000003f [ 211.443885][ T8507] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008888374 [ 211.445222][ T8507] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 211.446476][ T8507] Call trace: [ 211.446990][ T8507] hugetlb_split+0x234/0x29c [ 211.447680][ T8507] __vma_adjust+0x45c/0x16c0 [ 211.448470][ T8507] __split_vma+0x324/0x448 [ 211.449191][ T8507] do_mas_align_munmap+0x5dc/0xeec [ 211.449981][ T8507] do_munmap+0x1c4/0x22c [ 211.450640][ T8507] move_vma+0x674/0x9e8 [ 211.451300][ T8507] mremap_to+0x3bc/0x440 [ 211.451977][ T8507] __arm64_sys_mremap+0x58c/0xe54 [ 211.452732][ T8507] invoke_syscall+0x98/0x2bc [ 211.453516][ T8507] el0_svc_common+0x138/0x258 [ 211.454268][ T8507] do_el0_svc+0x58/0x13c [ 211.454947][ T8507] el0_svc+0x58/0x138 [ 211.455621][ T8507] el0t_64_sync_handler+0x84/0xf0 [ 211.456433][ T8507] el0t_64_sync+0x18c/0x190 [ 211.457142][ T8507] irq event stamp: 16810 [ 211.457879][ T8507] hardirqs last enabled at (16809): [] exit_to_kernel_mode+0xcc/0xfc [ 211.459492][ T8507] hardirqs last disabled at (16810): [] el1_dbg+0x24/0x80 [ 211.460957][ T8507] softirqs last enabled at (16804): [] handle_softirqs+0xaf8/0xc6c [ 211.462459][ T8507] softirqs last disabled at (16669): [] __do_softirq+0x14/0x20 [ 211.463985][ T8507] ---[ end trace 0000000000000000 ]--- [ 213.255173][ T4324] Bluetooth: hci1: Opcode 0x0c03 failed: -110