last executing test programs: 15.536075032s ago: executing program 2 (id=2015): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x40008000) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$P9_RUNLINKAT(r7, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), 0x0) 12.042944717s ago: executing program 2 (id=2020): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f00000000c0)={'batadv_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)=""/4083, 0xff3}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000003cc0)=""/4094, 0xffe}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000400)=""/113, 0x71}], 0x6}, 0x2000) 12.030535048s ago: executing program 0 (id=2021): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653ca10cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) 11.859988212s ago: executing program 1 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) capset(&(0x7f0000000180)={0x20080522}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLLLLLL', 0x7}) 11.859828521s ago: executing program 0 (id=2023): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4007, 0x0) read$msr(r3, &(0x7f0000000680)=""/102384, 0x18ff0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 11.859693141s ago: executing program 2 (id=2024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) capset(&(0x7f0000000180)={0x20080522}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x1000}) 10.890678265s ago: executing program 0 (id=2025): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)}}], 0x1, 0x4000000) write(r0, &(0x7f0000001f00)="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", 0x77d) 9.937749838s ago: executing program 1 (id=2026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 8.947889763s ago: executing program 2 (id=2027): socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r3, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}, 0x871}], 0x2, 0x20, 0x0) 6.744109226s ago: executing program 0 (id=2033): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4007, 0x0) read$msr(r3, &(0x7f0000000680)=""/102384, 0x18ff0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 5.705618141s ago: executing program 0 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) capset(&(0x7f0000000180)={0x20080522}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)='LLLLLLLLLLL', 0xb}) 5.704679182s ago: executing program 2 (id=2035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) capset(&(0x7f0000000180)={0x20080522}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x1000}) 4.629956968s ago: executing program 2 (id=2036): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x5}, {0x0, 0x4000000000004, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0xffffffff, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.52141663s ago: executing program 1 (id=2037): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x1000, 0x0, 0xfffffffe}, &(0x7f0000000380)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xb2, 0x0, r0}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ddd, 0x8000, 0x8000001, 0x3ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x100, 0xa, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21af, 0x10, 0xfffffffd, 0x902c7, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x4000, 0x1, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4fbda717049eee21, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) 4.1013583s ago: executing program 1 (id=2040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 3.916037065s ago: executing program 3 (id=2041): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}}], 0x1, 0x4000000) write(r0, &(0x7f0000001f00)="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", 0x77d) 3.850383956s ago: executing program 1 (id=2042): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4007, 0x0) read$msr(r3, &(0x7f0000000680)=""/102384, 0x18ff0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 3.736223999s ago: executing program 3 (id=2043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 2.809140972s ago: executing program 1 (id=2044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) capset(&(0x7f0000000180)={0x20080522}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r6, 0x0, &(0x7f00000a0000)}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x1000}) 1.592006272s ago: executing program 3 (id=2045): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x7, 0x56, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) 700.313844ms ago: executing program 0 (id=2046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 541.183277ms ago: executing program 3 (id=2047): getpid() setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 333.861932ms ago: executing program 3 (id=2048): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 0s ago: executing program 3 (id=2049): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703120000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 77.965333][ T5761] cgroup: Unknown subsys name 'net' [ 78.096390][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.895932][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.517867][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.527209][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.536674][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.544519][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.551065][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.552865][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.559489][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.567338][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.573913][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.588759][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.596142][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.597364][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.611188][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.611661][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.619702][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.635815][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.635905][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.650236][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.661869][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.670218][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.677778][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.677955][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.705999][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.724617][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.165424][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 82.244183][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 82.258400][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 82.332182][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.470468][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.477734][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.485579][ T5772] bridge_slave_0: entered allmulticast mode [ 82.495455][ T5772] bridge_slave_0: entered promiscuous mode [ 82.503809][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.511371][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.521250][ T5773] bridge_slave_0: entered allmulticast mode [ 82.528105][ T5773] bridge_slave_0: entered promiscuous mode [ 82.564713][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.571984][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.579598][ T5772] bridge_slave_1: entered allmulticast mode [ 82.586431][ T5772] bridge_slave_1: entered promiscuous mode [ 82.594478][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.601871][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.609204][ T5773] bridge_slave_1: entered allmulticast mode [ 82.616279][ T5773] bridge_slave_1: entered promiscuous mode [ 82.644724][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.652108][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.659488][ T5774] bridge_slave_0: entered allmulticast mode [ 82.666626][ T5774] bridge_slave_0: entered promiscuous mode [ 82.715131][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.722498][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.730188][ T5774] bridge_slave_1: entered allmulticast mode [ 82.737102][ T5774] bridge_slave_1: entered promiscuous mode [ 82.758167][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.767530][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.775450][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.783162][ T5776] bridge_slave_0: entered allmulticast mode [ 82.791259][ T5776] bridge_slave_0: entered promiscuous mode [ 82.809637][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.822407][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.833961][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.854555][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.864641][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.872540][ T5776] bridge_slave_1: entered allmulticast mode [ 82.880882][ T5776] bridge_slave_1: entered promiscuous mode [ 82.907562][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.937740][ T5772] team0: Port device team_slave_0 added [ 82.956185][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.977050][ T5772] team0: Port device team_slave_1 added [ 82.996100][ T5773] team0: Port device team_slave_0 added [ 83.015263][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.037306][ T5773] team0: Port device team_slave_1 added [ 83.067688][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.087887][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.095161][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.121775][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.146126][ T5774] team0: Port device team_slave_0 added [ 83.171881][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.179078][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.205936][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.217778][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.227601][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.256372][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.269639][ T5774] team0: Port device team_slave_1 added [ 83.276176][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.283472][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.312674][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.326658][ T5776] team0: Port device team_slave_0 added [ 83.372349][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.379625][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.406003][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.421451][ T5776] team0: Port device team_slave_1 added [ 83.451168][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.458173][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.484222][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.498300][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.505345][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.531880][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.565414][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.572468][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.598454][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.647326][ T5772] hsr_slave_0: entered promiscuous mode [ 83.653788][ T5772] hsr_slave_1: entered promiscuous mode [ 83.672123][ T5781] Bluetooth: hci1: command tx timeout [ 83.699172][ T5773] hsr_slave_0: entered promiscuous mode [ 83.706248][ T5773] hsr_slave_1: entered promiscuous mode [ 83.713164][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.721079][ T5773] Cannot create hsr debugfs directory [ 83.742759][ T5776] hsr_slave_0: entered promiscuous mode [ 83.748901][ T5781] Bluetooth: hci3: command tx timeout [ 83.749329][ T5777] Bluetooth: hci2: command tx timeout [ 83.754821][ T5781] Bluetooth: hci0: command tx timeout [ 83.766527][ T5776] hsr_slave_1: entered promiscuous mode [ 83.772997][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.781050][ T5776] Cannot create hsr debugfs directory [ 83.818440][ T5774] hsr_slave_0: entered promiscuous mode [ 83.825523][ T5774] hsr_slave_1: entered promiscuous mode [ 83.831892][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.839527][ T5774] Cannot create hsr debugfs directory [ 84.268379][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.286430][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.298059][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.323069][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.362659][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.380445][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.400976][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.411695][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.524153][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.534744][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.546560][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.557577][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.675207][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.687759][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.698350][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.723914][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.731929][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.785629][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.813154][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.841979][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.849358][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.864039][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.871456][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.912748][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.960217][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.984618][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.017417][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.024615][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.037683][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.044842][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.056133][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.063462][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.073810][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.080965][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.246747][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.344406][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.390234][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.397543][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.452855][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.460055][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.652559][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.748743][ T5781] Bluetooth: hci1: command tx timeout [ 85.816483][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.829371][ T5781] Bluetooth: hci0: command tx timeout [ 85.829429][ T51] Bluetooth: hci2: command tx timeout [ 85.834803][ T5781] Bluetooth: hci3: command tx timeout [ 85.867038][ T5772] veth0_vlan: entered promiscuous mode [ 85.900526][ T5772] veth1_vlan: entered promiscuous mode [ 85.969462][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.045758][ T5772] veth0_macvtap: entered promiscuous mode [ 86.058399][ T5772] veth1_macvtap: entered promiscuous mode [ 86.091336][ T5774] veth0_vlan: entered promiscuous mode [ 86.112016][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.126932][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.143972][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.153370][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.163613][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.174413][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.198213][ T5776] veth0_vlan: entered promiscuous mode [ 86.212329][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.227616][ T5774] veth1_vlan: entered promiscuous mode [ 86.242180][ T5776] veth1_vlan: entered promiscuous mode [ 86.394221][ T5776] veth0_macvtap: entered promiscuous mode [ 86.415388][ T5774] veth0_macvtap: entered promiscuous mode [ 86.443613][ T5776] veth1_macvtap: entered promiscuous mode [ 86.466926][ T5774] veth1_macvtap: entered promiscuous mode [ 86.480995][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.493789][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.515537][ T5773] veth0_vlan: entered promiscuous mode [ 86.524239][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.537187][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.551704][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.583350][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.597737][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.598010][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.608339][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.609845][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.664154][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.674916][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.685136][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.694872][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.717344][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.729466][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.746894][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.758138][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.772024][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.782970][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.794379][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.806793][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.817798][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.830196][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.850837][ T5773] veth1_vlan: entered promiscuous mode [ 86.882801][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.908807][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.917670][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.947378][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.879149][ T5781] Bluetooth: hci1: command tx timeout [ 87.908911][ T51] Bluetooth: hci2: command tx timeout [ 87.914392][ T51] Bluetooth: hci0: command tx timeout [ 87.920178][ T5781] Bluetooth: hci3: command tx timeout [ 88.003506][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.013963][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.210069][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.218083][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.301411][ T5773] veth0_macvtap: entered promiscuous mode [ 88.362395][ T5773] veth1_macvtap: entered promiscuous mode [ 88.375608][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.384807][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.408834][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.416254][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.530110][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.531135][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.538085][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.589053][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.619308][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.638516][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.648393][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.679182][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.721311][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.780216][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.808958][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.827261][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.855487][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.888127][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.898882][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.910648][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.961069][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.986473][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.995612][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.015645][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.159038][ T5816] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.169186][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.190481][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.923790][ T5866] sched: RT throttling activated [ 90.953063][ T5781] Bluetooth: hci1: command tx timeout [ 90.958653][ T5781] Bluetooth: hci3: command tx timeout [ 91.928627][ T5781] Bluetooth: hci0: command tx timeout [ 91.934096][ T5781] Bluetooth: hci2: command tx timeout [ 92.105359][ T5816] usb 4-1: device descriptor read/all, error -71 [ 92.168187][ T27] cfg80211: failed to load regulatory.db [ 92.214829][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.224336][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.356792][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.383209][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.468604][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.539208][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.550291][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.481442][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 95.518852][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 95.550167][ T27] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 95.576508][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.638063][ T27] usb 2-1: probing VID:PID(0424:012C) [ 96.505011][ T27] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 96.519760][ T27] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 96.526276][ T27] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 96.537167][ T27] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 96.551010][ T27] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 96.761203][ T27] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 97.098397][ T27] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 98.319235][ T27] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 98.353327][ T23] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 98.371105][ T27] usb 2-1: USB disconnect, device number 2 [ 98.381655][ T23] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 98.404418][ T23] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 100.278622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.701186][ T27] USB vub300 remote SDIO host controller[0] now disconnected [ 105.189611][ T174] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.401319][ T174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 105.439619][ T174] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 105.460478][ T174] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 105.483269][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.529761][ T174] usb 4-1: probing VID:PID(0424:012C) [ 105.557469][ T174] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 105.578669][ T174] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 105.585184][ T174] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 105.610411][ T174] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 105.616920][ T174] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 105.944428][ T174] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 106.241465][ T174] vub300: probe of 4-1:1.0 failed with error -32 [ 106.549355][ T174] usb 4-1: USB disconnect, device number 4 [ 111.270735][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'. [ 111.285433][ T6041] Bluetooth: MGMT ver 1.22 [ 112.268645][ T5815] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.480904][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 112.516395][ T5815] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 112.586058][ T5815] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 112.613954][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.681850][ T5815] usb 4-1: probing VID:PID(0424:012C) [ 112.731628][ T5815] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 112.765518][ T5815] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 112.828599][ T5815] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 112.869477][ T5815] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 112.920565][ T5815] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 113.176319][ T5815] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 113.403800][ T5815] vub300: probe of 4-1:1.0 failed with error -32 [ 113.437255][ T5815] usb 4-1: USB disconnect, device number 5 [ 116.579470][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 117.788675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 118.545162][ T6103] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.648883][ T790] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.961498][ T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 121.449041][ T790] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 121.459918][ T790] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 121.470440][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.529145][ T790] usb 3-1: probing VID:PID(0424:012C) [ 121.555065][ T790] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 121.565348][ T790] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 121.575919][ T790] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 121.595231][ T790] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 121.604490][ T790] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 121.924597][ T790] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 122.669804][ T790] vub300: probe of 3-1:1.0 failed with error -32 [ 122.745378][ T790] usb 3-1: USB disconnect, device number 2 [ 122.893895][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.81'. [ 128.400450][ T6203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 132.540649][ T6237] kAFS: No cell specified [ 133.139734][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.146244][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.409317][ T6250] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 133.918629][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 139.611859][ T6309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.113'. [ 144.489171][ T6348] jffs2: notice: (6348) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.665840][ T6352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.122'. [ 147.450395][ T6371] Zero length message leads to an empty skb [ 147.686476][ T6373] IPVS: set_ctl: invalid protocol: 60 172.20.20.27:20002 [ 151.339835][ T6397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'. [ 157.820147][ T6447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 165.585207][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'. [ 166.833431][ T6495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.142'. [ 171.972074][ T6529] capability: warning: `syz.2.161' uses deprecated v2 capabilities in a way that may be insecure [ 175.305957][ T6562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'. [ 178.958888][ T6583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'. [ 184.319756][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 190.609217][ T28] audit: type=1326 audit(1787735701.392:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.3.198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bbfb9e0d9 code=0x0 [ 190.763384][ T5907] IPVS: starting estimator thread 0... [ 190.878835][ T6665] IPVS: using max 31 ests per chain, 74400 per kthread [ 193.328695][ T6699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.355068][ T6699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.255751][ T6695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.556441][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.562886][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.618946][ T6707] process 'syz.2.208' launched './file0' with NULL argv: empty string added [ 194.808714][ T790] IPVS: starting estimator thread 0... [ 194.908921][ T6713] IPVS: using max 15 ests per chain, 36000 per kthread [ 200.628769][ T6753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.693377][ T6757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.838775][ T6753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.984433][ T5858] IPVS: starting estimator thread 0... [ 202.128658][ T6768] IPVS: using max 14 ests per chain, 33600 per kthread [ 206.951825][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 206.951987][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 206.966763][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 206.968618][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 214.959699][ T6891] netlink: 'syz.2.260': attribute type 2 has an invalid length. [ 216.131730][ T6915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.144511][ T6919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.361620][ T6910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.451521][ T790] wlan1: authenticate with 08:02:11:00:00:00 [ 216.830226][ T790] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 216.983629][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 217.109354][ T2946] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 217.229689][ T3493] wlan1: authentication with 08:02:11:00:00:00 timed out [ 222.989951][ T5777] Bluetooth: hci0: unexpected event for opcode 0x656c [ 225.088754][ T5777] Bluetooth: hci2: unexpected event for opcode 0x656c [ 226.849851][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.085510][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 228.195294][ T5777] Bluetooth: hci2: unexpected event for opcode 0x656c [ 228.782869][ T5777] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 229.288706][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.338009][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.388607][ T5780] wlan1: authenticate with 08:02:11:00:00:00 [ 229.397402][ T5780] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 229.494737][ T7081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.539173][ T6404] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 229.616173][ T7082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.568802][ T5777] Bluetooth: hci2: unexpected event for opcode 0x6540 [ 230.670520][ T7091] netlink: 68 bytes leftover after parsing attributes in process `syz.1.316'. [ 231.145494][ T49] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 231.154518][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 231.268905][ T2946] wlan1: authentication with 08:02:11:00:00:00 timed out [ 231.431938][ T7113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.444999][ T7113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.527910][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.046365][ T5777] Bluetooth: hci2: unexpected event for opcode 0x6540 [ 232.269991][ T7124] syz.2.328 uses obsolete (PF_INET,SOCK_PACKET) [ 232.563414][ T7126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.327'. [ 233.684671][ T5777] Bluetooth: hci3: unexpected event for opcode 0x6540 [ 233.913305][ T7146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.940314][ T5907] wlan1: authenticate with 08:02:11:00:00:00 [ 233.947789][ T5907] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 233.980215][ T12] wlan1: authenticated [ 233.980378][ T7146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.984683][ T5907] mac80211_hwsim hwsim9 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 234.039110][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 234.080125][ T6404] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 234.123543][ T6404] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 234.132849][ T7146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.165780][ T6404] wlan1: associated [ 234.298801][ T174] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 234.492841][ T174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.520168][ T174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.539472][ T174] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 234.548836][ T174] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 234.556862][ T174] usb 4-1: Manufacturer: syz [ 234.579494][ T174] usb 4-1: config 0 descriptor?? [ 235.185475][ T7170] netlink: 312 bytes leftover after parsing attributes in process `syz.0.346'. [ 235.624932][ T174] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5 [ 235.972025][ T174] input: syz Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input6 [ 238.930974][ T174] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input7 [ 238.979374][ T174] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input8 [ 238.994076][ T174] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 239.007259][ T174] usb 4-1: USB disconnect, device number 6 [ 239.238972][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 239.683448][ T7190] fido_id[7190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 242.639204][ T7239] netlink: 'syz.0.362': attribute type 2 has an invalid length. [ 243.262758][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 249.503069][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 251.212045][ T7309] : renamed from bond_slave_0 (while UP) [ 253.887481][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 254.682426][ T7330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.993672][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.000397][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.210873][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 257.810655][ T7344] trusted_key: encrypted_key: insufficient parameters specified [ 259.671877][ T7356] capability: warning: `syz.1.394' uses 32-bit capabilities (legacy support in use) [ 264.464261][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.229579][ T7429] netlink: 'syz.1.411': attribute type 2 has an invalid length. [ 270.827105][ T7441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.535947][ T7476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.611043][ T7479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.805385][ T7476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.766981][ T7499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.878582][ T174] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 290.162125][ T174] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 290.527032][ T174] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 290.551001][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.586406][ T174] usb 2-1: Product: syz [ 290.644128][ T174] usb 2-1: can't set config #1, error -71 [ 290.695112][ T174] usb 2-1: USB disconnect, device number 3 [ 291.840102][ T7591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.448'. [ 304.054787][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 304.456935][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 304.475407][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 304.484745][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.523689][ T9] usb 2-1: probing VID:PID(0424:012C) [ 304.549047][ T9] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 304.577337][ T9] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 304.600486][ T9] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 304.621120][ T9] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 304.652413][ T9] vub300: probe of 2-1:1.0 failed with error -22 [ 305.611878][ T7707] netlink: 'syz.3.478': attribute type 2 has an invalid length. [ 307.159199][ T9] usb 2-1: USB disconnect, device number 4 [ 307.290599][ T28] audit: type=1326 audit(1787735818.088:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 307.374507][ T28] audit: type=1326 audit(1787735818.118:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 307.428744][ T28] audit: type=1326 audit(1787735818.118:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 307.489680][ T28] audit: type=1326 audit(1787735818.128:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 307.538487][ T28] audit: type=1326 audit(1787735818.128:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 307.671926][ T28] audit: type=1326 audit(1787735818.128:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 307.766858][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.777226][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.877144][ T28] audit: type=1326 audit(1787735818.118:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 308.244433][ T28] audit: type=1326 audit(1787735818.128:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 308.246666][ T7737] block device autoloading is deprecated and will be removed. [ 308.285416][ T28] audit: type=1326 audit(1787735818.128:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 308.309938][ T28] audit: type=1326 audit(1787735818.128:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.481" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe9c359e0d9 code=0x7ffc0000 [ 310.851088][ T7766] netlink: 'syz.0.492': attribute type 2 has an invalid length. [ 313.511629][ T7811] syz.2.502[7811]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 313.525721][ T7811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.502'. [ 313.566405][ T7813] netlink: 'syz.0.503': attribute type 2 has an invalid length. [ 314.614410][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 318.026130][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.032632][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.835270][ T9] IPVS: starting estimator thread 0... [ 321.938841][ T7891] IPVS: using max 14 ests per chain, 33600 per kthread [ 322.623332][ T5780] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 323.083256][ T5780] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 323.101691][ T5780] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 323.121293][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.134325][ T7904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.531'. [ 323.237708][ T5780] usb 4-1: probing VID:PID(0424:012C) [ 323.272767][ T5780] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 323.301819][ T5780] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 323.322904][ T5780] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 323.336877][ T5780] usb 4-1: vub300 testing UNKNOWN EndPoint(3) 04 [ 323.344302][ T5780] usb 4-1: vub300 ignoring EndPoint(3) 04 [ 323.350598][ T5780] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 323.367358][ T5780] vub300: probe of 4-1:1.0 failed with error -22 [ 324.615015][ T9] usb 4-1: USB disconnect, device number 7 [ 328.428536][ T790] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 328.643581][ T790] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 328.668481][ T790] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 328.698826][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.724861][ T790] usb 1-1: probing VID:PID(0424:012C) [ 328.744819][ T790] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 328.758743][ T790] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 328.765241][ T790] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 328.778686][ T5858] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 328.798696][ T790] usb 1-1: vub300 testing UNKNOWN EndPoint(3) 04 [ 328.807520][ T790] usb 1-1: vub300 ignoring EndPoint(3) 04 [ 328.818571][ T790] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 328.860830][ T790] vub300: probe of 1-1:1.0 failed with error -22 [ 329.004411][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.038513][ T5858] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 329.048122][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.072516][ T5858] usb 3-1: config 0 descriptor?? [ 329.494845][ T5858] aquacomputer_d5next 0003:0C70:F00A.0002: collection stack underflow [ 329.509598][ T5858] aquacomputer_d5next 0003:0C70:F00A.0002: item 0 2 0 12 parsing failed [ 329.529356][ T5858] aquacomputer_d5next: probe of 0003:0C70:F00A.0002 failed with error -22 [ 329.709890][ T5858] usb 3-1: USB disconnect, device number 3 [ 329.970635][ T5858] usb 1-1: USB disconnect, device number 2 [ 338.166952][ T8027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.570'. [ 343.024773][ T8059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.215304][ T5815] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 366.790289][ T5815] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.805494][ T5815] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 366.815142][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.841453][ T5815] usb 2-1: config 0 descriptor?? [ 367.276021][ T5815] aquacomputer_d5next 0003:0C70:F00A.0003: collection stack underflow [ 367.300014][ T5815] aquacomputer_d5next 0003:0C70:F00A.0003: item 0 2 0 12 parsing failed [ 367.325811][ T5815] aquacomputer_d5next: probe of 0003:0C70:F00A.0003 failed with error -22 [ 367.471073][ T5858] usb 2-1: USB disconnect, device number 5 [ 370.617322][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 371.618634][ T174] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 371.810915][ T174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.837909][ T174] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 371.918242][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.333060][ T8262] ip_tables: iptables: counters copy to user failed while replacing table [ 372.765777][ T174] usb 3-1: config 0 descriptor?? [ 373.546133][ T174] usbhid 3-1:0.0: can't add hid device: -71 [ 373.557142][ T174] usbhid: probe of 3-1:0.0 failed with error -71 [ 373.575637][ T174] usb 3-1: USB disconnect, device number 4 [ 376.586310][ T8302] netlink: 'syz.0.657': attribute type 2 has an invalid length. [ 378.815276][ T8333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.887853][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.914472][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.253857][ T8332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.871895][ T8364] netlink: 32 bytes leftover after parsing attributes in process `syz.2.661'. [ 390.148846][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 390.579209][ T8409] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request [ 390.587164][ T8415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.653767][ T8415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.756334][ T8413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.380553][ T8422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.129128][ T8424] netlink: 'syz.1.682': attribute type 2 has an invalid length. [ 396.346313][ T8458] ip_tables: iptables: counters copy to user failed while replacing table [ 398.968795][ T8493] wlan1: authenticate with 08:02:11:00:00:00 [ 399.051763][ T8493] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 399.060404][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.519257][ T1328] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 399.538906][ T5816] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 399.592902][ T8503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.875074][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.916524][ T5816] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 399.930900][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.947690][ T5816] usb 1-1: config 0 descriptor?? [ 400.400510][ T5816] usbhid 1-1:0.0: can't add hid device: -71 [ 400.406600][ T5816] usbhid: probe of 1-1:0.0 failed with error -71 [ 401.133397][ T6403] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 401.369793][ T5816] usb 1-1: USB disconnect, device number 3 [ 401.420687][ T1328] wlan1: authentication with 08:02:11:00:00:00 timed out [ 401.759467][ T8540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.963023][ T8547] ip_tables: iptables: counters copy to user failed while replacing table [ 404.291882][ T8564] ip_tables: iptables: counters copy to user failed while replacing table [ 404.320746][ T5816] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 404.765400][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.884252][ T5816] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 404.978045][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.008313][ T5816] usb 4-1: config 0 descriptor?? [ 406.647628][ T8578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.790975][ T5816] usbhid 4-1:0.0: can't add hid device: -71 [ 406.797058][ T5816] usbhid: probe of 4-1:0.0 failed with error -71 [ 406.806107][ T5816] usb 4-1: USB disconnect, device number 8 [ 420.731782][ T8675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.789750][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.875595][ T8702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.008724][ T8708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.798509][ T8744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.831570][ T8744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.201097][ T8744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.833649][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.792'. [ 437.879496][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.801'. [ 437.932577][ T8824] 9pnet_fd: Insufficient options for proto=fd [ 440.323445][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.330053][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.018740][ T5858] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 441.148081][ T8879] netlink: 'syz.2.815': attribute type 3 has an invalid length. [ 441.194133][ T8883] 9pnet_fd: Insufficient options for proto=fd [ 441.263476][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.307614][ T5858] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 441.331784][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.366691][ T5858] usb 4-1: config 0 descriptor?? [ 442.741302][ T5858] usbhid 4-1:0.0: can't add hid device: -71 [ 442.763518][ T5858] usbhid: probe of 4-1:0.0 failed with error -71 [ 442.809599][ T5858] usb 4-1: USB disconnect, device number 9 [ 448.488466][ T8952] netlink: 'syz.1.826': attribute type 3 has an invalid length. [ 449.115959][ T5858] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 449.134486][ T8961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.829'. [ 450.734941][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.768537][ T5858] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 450.777670][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.811209][ T5858] usb 3-1: config 0 descriptor?? [ 450.935556][ T8967] ip_tables: iptables: counters copy to user failed while replacing table [ 451.241037][ T5858] usbhid 3-1:0.0: can't add hid device: -71 [ 451.257601][ T5858] usbhid: probe of 3-1:0.0 failed with error -71 [ 451.292409][ T5858] usb 3-1: USB disconnect, device number 5 [ 451.879536][ T8984] netlink: 'syz.0.838': attribute type 3 has an invalid length. [ 460.240649][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 494.721301][ T9310] netlink: 32 bytes leftover after parsing attributes in process `syz.1.897'. [ 498.788783][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 501.762568][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.774192][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.114637][ T9417] netlink: 32 bytes leftover after parsing attributes in process `syz.3.927'. [ 508.609858][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 508.649381][ T9439] bridge1: entered promiscuous mode [ 508.658799][ T9439] bridge1: entered allmulticast mode [ 537.738562][ T8] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 538.000424][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.015138][ T8] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 538.024852][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.140004][ T8] usb 3-1: config 0 descriptor?? [ 539.326291][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 541.418529][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 541.429701][ T8] usb 3-1: USB disconnect, device number 6 [ 541.800096][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 545.887851][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.994'. [ 554.519559][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 555.588376][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 563.814313][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.820977][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.214798][ T5816] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 568.328497][ T9845] bond1: Removing last ns target with arp_interval on [ 568.421381][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.385856][ T5816] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 569.418512][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.446709][ T5816] usb 4-1: config 0 descriptor?? [ 569.858312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 570.973004][ T5816] usbhid 4-1:0.0: can't add hid device: -71 [ 570.989700][ T5816] usbhid: probe of 4-1:0.0 failed with error -71 [ 571.028800][ T5816] usb 4-1: USB disconnect, device number 10 [ 573.579772][ T9901] xt_SECMARK: invalid mode: 2 [ 577.230304][ T9923] bridge1: left promiscuous mode [ 579.953757][ T9943] xt_SECMARK: invalid mode: 2 [ 588.849419][T10020] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1068'. [ 594.225909][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 599.359117][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 610.013919][T10164] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1101'. [ 614.641780][T10205] ======================================================= [ 614.641780][T10205] WARNING: The mand mount option has been deprecated and [ 614.641780][T10205] and is ignored by this kernel. Remove the mand [ 614.641780][T10205] option from the mount to silence this warning. [ 614.641780][T10205] ======================================================= [ 614.691608][T10205] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 616.612260][T10219] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1110'. [ 617.368993][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 619.935455][T10253] autofs4:pid:10253:autofs_fill_super: called with bogus options [ 624.631350][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.638002][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.607311][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 627.894192][T10328] xt_SECMARK: invalid mode: 2 [ 635.569826][T10384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1146'. [ 636.759678][T10399] netlink: 'syz.1.1145': attribute type 2 has an invalid length. [ 637.436086][T10407] 9pnet_fd: Insufficient options for proto=fd [ 638.009588][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.918521][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 641.942913][T10461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1156'. [ 641.973258][T10464] ip_tables: iptables: counters copy to user failed while replacing table [ 641.993415][T10461] bridge2: entered promiscuous mode [ 642.009472][T10461] bridge2: entered allmulticast mode [ 649.517775][T10549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.704779][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.726527][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.869824][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.343895][T10600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.067503][T10646] ip_tables: iptables: counters copy to user failed while replacing table [ 668.923467][T10720] ip_tables: iptables: counters copy to user failed while replacing table [ 676.337594][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 676.337674][ T28] audit: type=1800 audit(1787736187.134:26): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1232" name="bus" dev="ramfs" ino=19310 res=0 errno=0 [ 679.619547][T10779] xt_SECMARK: invalid mode: 2 [ 684.478494][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 686.549011][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.555577][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.913679][T10902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.559889][ T9731] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 708.470964][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 708.647668][T10959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.672070][T10962] warning: `syz.3.1292' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 718.978241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 725.509494][T11069] ip_tables: iptables: counters copy to user failed while replacing table [ 726.338140][T11071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.220567][ T28] audit: type=1326 audit(1787736239.024:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.0.1338" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57fa99e0d9 code=0x0 [ 732.554115][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.659272][T11121] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1348'. [ 734.847046][ T9731] Bluetooth: hci3: command 0x0406 tx timeout [ 737.935853][T11156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.254454][T11179] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1363'. [ 744.034278][T11203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.870819][T11214] xt_SECMARK: invalid mode: 2 [ 747.512949][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.519592][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.626554][T11243] batman_adv: batadv0: Adding interface: veth0 [ 750.638341][T11243] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.689469][T11243] batman_adv: batadv0: Interface activated: veth0 [ 750.719388][T11243] batman_adv: batadv0: Interface deactivated: veth0 [ 750.726098][T11243] batman_adv: batadv0: Removing interface: veth0 [ 750.758357][T11243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.778568][T11243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.819047][T11243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.826807][T11243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.236261][T11250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.141737][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 762.195059][T11319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.804380][T11365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.816117][T11368] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1420'. [ 771.147113][T11396] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1431'. [ 771.391688][T11401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.342879][T11431] xt_SECMARK: invalid mode: 2 [ 778.274928][T11454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.685144][T11467] xt_SECMARK: invalid mode: 2 [ 789.865546][T11544] xt_SECMARK: invalid mode: 2 [ 790.661323][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 793.266170][T11563] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 793.458789][T11563] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 796.110485][T11579] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 796.243971][T11581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.209119][T11595] CIFS: Attempting to mount //127.0.0.1/share [ 797.668469][ T9731] Bluetooth: hci3: command 0x0406 tx timeout [ 797.971944][T11595] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 798.010972][T11595] CIFS: VFS: cifs_mount failed w/return code = -512 [ 798.644730][T11617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.011679][T11627] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 799.641697][T11636] binder: 11632:11636 ioctl 4018620d 0 returned -22 [ 801.998441][T11653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1510'. [ 802.844334][T11655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.223122][T11663] xt_SECMARK: invalid mode: 2 [ 804.267176][T11670] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 807.758828][T11693] xt_SECMARK: invalid mode: 2 [ 808.671818][T11698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.627308][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.636406][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.780274][T11730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.176003][T11752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1541'. [ 817.008242][ T28] audit: type=1326 audit(1787736327.791:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.3.1548" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bbfb9e0d9 code=0x0 [ 822.041037][T11805] overlayfs: failed to clone lowerpath [ 822.557867][T11815] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1558'. [ 833.142454][T11890] xt_SECMARK: invalid mode: 2 [ 836.138304][T11911] nvme_fabrics: unknown parameter or missing value 'tranwport=rdma' in ctrl creation request [ 850.465171][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 851.372635][T12020] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1624'. [ 854.319518][ T9731] Bluetooth: hci3: command 0x0406 tx timeout [ 854.491999][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 855.332466][T12050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1630'. [ 862.902560][T12101] xt_SECMARK: invalid mode: 2 [ 870.847710][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.868443][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.674489][T12170] IPVS: set_ctl: invalid protocol: 60 172.20.20.27:20002 [ 880.614031][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 881.015224][T12233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.919511][T12239] syz.2.1688 (12239) used greatest stack depth: 18896 bytes left [ 892.200808][T12277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.642642][T12394] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1726'. [ 908.487377][T12410] MTD: Couldn't look up './dev/mtdblock0': -2 [ 910.998949][T12423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1738'. [ 914.650950][T12464] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1750'. [ 914.781809][T12463] bridge0: port 3(syz_tun) entered blocking state [ 914.810360][T12463] bridge0: port 3(syz_tun) entered disabled state [ 914.851580][T12463] syz_tun: entered allmulticast mode [ 914.943357][T12463] syz_tun: entered promiscuous mode [ 919.131997][T12508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1766'. [ 923.034334][T12539] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1775'. [ 928.547506][T12570] xt_SECMARK: invalid mode: 2 [ 931.833165][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.839805][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.413502][T12609] xt_SECMARK: invalid mode: 2 [ 934.996450][T12623] 9pnet_fd: Insufficient options for proto=fd [ 946.073389][T12656] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.098207][T12656] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.107892][T12656] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.117050][T12656] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.570049][T12715] CIFS: Attempting to mount //127.0.0.1/share [ 947.841005][T12715] CIFS: VFS: Error connecting to socket. Aborting operation. [ 947.889071][T12715] CIFS: VFS: cifs_mount failed w/return code = -4 [ 952.237822][T12761] netlink: 'syz.2.1833': attribute type 10 has an invalid length. [ 952.323889][T12761] veth0_vlan: left promiscuous mode [ 952.345378][T12761] veth0_vlan: entered promiscuous mode [ 952.366998][T12761] team0: Device veth0_vlan failed to register rx_handler [ 954.797868][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1857'. [ 969.700580][T12950] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1906'. [ 970.781412][T12961] Illegal XDP return value 4294967199 on prog (id 174) dev N/A, expect packet loss! [ 972.770979][T12957] Bluetooth: hci3: command 0x0406 tx timeout [ 973.381402][T12972] cgroup: fork rejected by pids controller in /syz3 [ 975.471838][T12955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.559696][T12955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.485582][T12955] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.499306][T12955] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.508424][T12955] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.517343][T12955] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.675019][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 980.686060][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 980.694452][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 980.709129][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 980.723634][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 980.732259][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 982.243568][ T6404] hsr_slave_0: left promiscuous mode [ 982.253890][ T6404] hsr_slave_1: left promiscuous mode [ 982.270972][ T6404] bridge_slave_1: left allmulticast mode [ 982.289036][ T6404] bridge_slave_1: left promiscuous mode [ 982.302756][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.342762][ T6404] bridge_slave_0: left allmulticast mode [ 982.358203][ T6404] bridge_slave_0: left promiscuous mode [ 982.369236][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.798750][T12957] Bluetooth: hci1: command tx timeout [ 982.838283][T13056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1938'. [ 984.405224][ T6404] team0 (unregistering): Port device team_slave_1 removed [ 984.488326][ T6404] team0 (unregistering): Port device team_slave_0 removed [ 984.550543][ T6404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.618314][ T6404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.628713][ T5907] infiniband syz5: ib_query_port failed (-19) [ 984.868670][T12957] Bluetooth: hci1: command tx timeout [ 985.060731][ T6404] bond0 (unregistering): Released all slaves [ 986.215506][T13034] chnl_net:caif_netlink_parms(): no params data found [ 986.353711][T13034] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.360478][T13096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1950'. [ 986.361470][T13034] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.377830][T13034] bridge_slave_0: entered allmulticast mode [ 986.385869][T13034] bridge_slave_0: entered promiscuous mode [ 986.396001][T13034] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.404576][T13034] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.422217][T13034] bridge_slave_1: entered allmulticast mode [ 986.430925][T13034] bridge_slave_1: entered promiscuous mode [ 986.480806][T13034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.522914][T13034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.571754][T13101] netlink: 'syz.2.1951': attribute type 10 has an invalid length. [ 986.585863][T13101] veth0_vlan: left promiscuous mode [ 987.514110][T12957] Bluetooth: hci1: command tx timeout [ 987.531780][T13101] veth0_vlan: entered promiscuous mode [ 987.541150][T13101] team0: Device veth0_vlan failed to register rx_handler [ 987.625444][ T6404] IPVS: stop unused estimator thread 0... [ 987.699235][T13034] team0: Port device team_slave_0 added [ 987.734416][T13034] team0: Port device team_slave_1 added [ 987.830925][T13034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.863099][T13034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.928203][T13034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.950863][T13034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.968174][T13034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.014837][T13034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.184394][T13034] hsr_slave_0: entered promiscuous mode [ 988.218711][T13034] hsr_slave_1: entered promiscuous mode [ 988.472771][T13122] xt_SECMARK: invalid mode: 2 [ 989.588975][T12957] Bluetooth: hci1: command tx timeout [ 990.082278][T13139] netlink: 'syz.0.1958': attribute type 4 has an invalid length. [ 990.138053][T13147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1960'. [ 991.338656][T13034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 991.382727][T13034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 991.429693][T13034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 991.468668][T13034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 991.564936][T12957] Bluetooth: hci2: Malformed LE Event: 0x1b [ 991.823065][T13034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.882280][T13034] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.015418][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.022684][ T6404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.098416][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.105647][ T6404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.018683][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.038637][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.655862][T13034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.931596][T13034] veth0_vlan: entered promiscuous mode [ 995.632618][T13034] veth1_vlan: entered promiscuous mode [ 998.311296][T13208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.410552][T13208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.350917][T13208] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.363726][T13208] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.374413][T13208] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.387389][T13208] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.627248][T13034] veth0_macvtap: entered promiscuous mode [ 999.668025][T13034] veth1_macvtap: entered promiscuous mode [ 999.754977][T13034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.775710][T13034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.801643][T13034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.789044][T13034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1000.818234][T13034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.839673][T13034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.864455][T13034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.893537][T13034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.903904][T13034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.926458][T13034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.114886][T12453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.143740][T12453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.272294][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.286853][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.138158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 1009.968437][T13340] netlink: 'syz.0.2002': attribute type 21 has an invalid length. [ 1010.818172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 1019.968233][T13409] netlink: 'syz.2.2020': attribute type 29 has an invalid length. [ 1019.982519][T13409] netlink: 'syz.2.2020': attribute type 29 has an invalid length. [ 1020.008432][T13409] netlink: 'syz.2.2020': attribute type 29 has an invalid length. [ 1023.716579][T13229] IPVS: starting estimator thread 0... [ 1023.818548][T13428] IPVS: using max 15 ests per chain, 36000 per kthread [ 1025.210579][T13444] bridge_slave_1: left allmulticast mode [ 1025.221709][T13444] bridge_slave_1: left promiscuous mode [ 1025.231144][T13444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.252048][T13444] bridge_slave_0: left allmulticast mode [ 1025.258178][T13444] bridge_slave_0: left promiscuous mode [ 1025.264057][T13444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.058565][T13488] netlink: 'syz.3.2049': attribute type 10 has an invalid length. [ 1032.066461][T13488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2049'. [ 1032.118876][T13488] nlmon0: entered promiscuous mode [ 1032.134024][T13488] nlmon0: entered allmulticast mode [ 1032.149661][T13488] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 1032.322622][ C0] ------------[ cut here ]------------ [ 1032.328514][ C0] WARNING: CPU: 0 PID: 13494 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 1032.338750][ C0] Modules linked in: [ 1032.342642][ C0] CPU: 0 PID: 13494 Comm: syz.1.2044 Not tainted syzkaller #0 [ 1032.350138][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1032.360208][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1032.366569][ C0] Code: f7 4c 89 ef e8 b0 c0 b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 bb de 79 f7 0f 0b e9 61 f8 ff ff e8 af de 79 f7 <0f> 0b e9 85 fb ff ff e8 a3 de 79 f7 48 c7 c7 20 c7 65 8e 4c 89 e6 [ 1032.386260][ C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246 [ 1032.392376][ C0] RAX: ffffffff8a0d93c1 RBX: dffffc0000000000 RCX: ffff88801f759e00 [ 1032.400384][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1032.408374][ C0] RBP: 0000000000000000 R08: ffff88801f759e00 R09: 0000000000000003 [ 1032.416600][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805b6e6440 [ 1032.424607][ C0] R13: ffff88805bda6424 R14: ffff88805b6e6930 R15: ffff88805bda6400 [ 1032.432616][ C0] FS: 00007fe9c44066c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1032.441559][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.448180][ C0] CR2: fffffffffffffe70 CR3: 000000005da16000 CR4: 00000000003506f0 [ 1032.456152][ C0] Call Trace: [ 1032.459505][ C0] [ 1032.462359][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1032.467956][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1032.473445][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1032.480261][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1032.485888][ C0] __iterate_interfaces+0x225/0x4c0 [ 1032.491123][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1032.497392][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1032.504636][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1032.510903][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1032.517940][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1032.523158][ C0] ? hw_scan_work+0xf10/0xf10 [ 1032.527858][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1032.533126][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1032.538263][ C0] ? read_tsc+0x9/0x20 [ 1032.542353][ C0] hrtimer_run_softirq+0x177/0x290 [ 1032.547465][ C0] handle_softirqs+0x27d/0x820 [ 1032.552254][ C0] ? read_tsc+0x9/0x20 [ 1032.556330][ C0] ? ktime_get+0x24b/0x280 [ 1032.560765][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1032.565528][ C0] ? do_softirq+0x1a0/0x1a0 [ 1032.570051][ C0] __irq_exit_rcu+0xd3/0x190 [ 1032.574640][ C0] ? irq_exit_rcu+0x20/0x20 [ 1032.579162][ C0] irq_exit_rcu+0x9/0x20 [ 1032.583399][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1032.589080][ C0] [ 1032.592010][ C0] [ 1032.594985][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1032.601059][ C0] RIP: 0010:charge_memcg+0x270/0x3b0 [ 1032.606365][ C0] Code: 89 df e8 b3 57 f8 ff 48 8b 33 48 83 fe ff 48 8b 7c 24 10 0f 84 25 01 00 00 48 c1 ee 3a e8 f8 1a 00 00 e8 03 4b a6 ff fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 48 b9 00 00 00 00 00 fc ff df 49 c7 44 [ 1032.625992][ C0] RSP: 0000:ffffc900051cede0 EFLAGS: 00000246 [ 1032.632084][ C0] RAX: 0000000000000000 RBX: ffffea00014a7ac0 RCX: 70e58557c6ddf400 [ 1032.640073][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3260 [ 1032.648041][ C0] RBP: ffffc900051cee90 R08: ffffffff911ef5af R09: 1ffffffff223deb5 [ 1032.656057][ C0] R10: dffffc0000000000 R11: fffffbfff223deb6 R12: 0000000000000001 [ 1032.664041][ C0] R13: 1ffff92000a39dc0 R14: 1ffffd4000294f58 R15: ffff888025f80950 [ 1032.672049][ C0] ? __mem_cgroup_charge+0x80/0x80 [ 1032.677179][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1032.682672][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1032.688242][ C0] __mem_cgroup_charge+0x25/0x80 [ 1032.693179][ C0] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1032.698762][ C0] ? xas_load+0x12b/0x140 [ 1032.703108][ C0] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1032.708279][ C0] shmem_get_folio_gfp+0x1037/0x2b40 [ 1032.713602][ C0] shmem_write_begin+0xf2/0x430 [ 1032.718475][ C0] generic_perform_write+0x2fe/0x5c0 [ 1032.723767][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 1032.729641][ C0] ? down_write+0x16e/0x200 [ 1032.734213][ C0] ? file_update_time+0x98/0x1a0 [ 1032.739182][ C0] shmem_file_write_iter+0xfb/0x120 [ 1032.744384][ C0] __kernel_write_iter+0x29f/0x6d0 [ 1032.749520][ C0] ? vfs_read+0x990/0x990 [ 1032.753856][ C0] ? get_dump_page+0x156/0x200 [ 1032.758663][ C0] ? __asan_memset+0x22/0x40 [ 1032.763268][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 1032.767979][ C0] dump_user_range+0x418/0x840 [ 1032.772764][ C0] ? dump_skip+0x40/0x40 [ 1032.777002][ C0] ? dump_emit+0x78/0xe0 [ 1032.781268][ C0] ? dump_emit+0xa6/0xe0 [ 1032.785520][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 1032.790740][ C0] elf_core_dump+0x320e/0x37c0 [ 1032.795521][ C0] ? load_elf_binary+0x2850/0x2850 [ 1032.800655][ C0] ? verify_lock_unused+0x140/0x140 [ 1032.805851][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1032.810889][ C0] ? mas_next_slot+0x94c/0x980 [ 1032.815693][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 1032.821168][ C0] ? 0xffffffffff600000 [ 1032.825345][ C0] do_coredump+0x1791/0x24a0 [ 1032.829987][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1032.835128][ C0] ? lock_chain_count+0x20/0x20 [ 1032.840038][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.845285][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1032.850507][ C0] get_signal+0x10da/0x1390 [ 1032.855021][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1032.860625][ C0] ? get_sigframe_size+0x20/0x20 [ 1032.865564][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1032.871574][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1032.877123][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1032.882510][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1032.888110][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 1032.893604][ C0] exc_page_fault+0x8c/0x100 [ 1032.898235][ C0] asm_exc_page_fault+0x26/0x30 [ 1032.903108][ C0] RIP: 0033:0x7fe9c359e0e1 [ 1032.907530][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1032.927426][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1032.933517][ C0] RAX: 0000000000000000 RBX: 00007fe9c3826090 RCX: 00007fe9c359e0d9 [ 1032.941512][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1032.949505][ C0] RBP: 00007fe9c3635024 R08: 0000000000000000 R09: 0000000000000000 [ 1032.957473][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1032.965458][ C0] R13: 00007fe9c3826128 R14: 00007fe9c3826090 R15: 00007ffffe7f5038 [ 1032.973467][ C0] [ 1032.976485][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1032.983757][ C0] CPU: 0 PID: 13494 Comm: syz.1.2044 Not tainted syzkaller #0 [ 1032.991208][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1033.001256][ C0] Call Trace: [ 1033.004536][ C0] [ 1033.007372][ C0] dump_stack_lvl+0x18c/0x250 [ 1033.012049][ C0] ? show_regs_print_info+0x20/0x20 [ 1033.017242][ C0] ? load_image+0x420/0x420 [ 1033.021753][ C0] panic+0x2ca/0x720 [ 1033.025656][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1033.030701][ C0] __warn+0x2e0/0x470 [ 1033.034682][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1033.040427][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1033.046143][ C0] report_bug+0x2be/0x4f0 [ 1033.050521][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1033.056238][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1033.061952][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 1033.067679][ C0] handle_bug+0xcf/0x120 [ 1033.071930][ C0] exc_invalid_op+0x1a/0x50 [ 1033.076427][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1033.081294][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1033.087721][ C0] Code: f7 4c 89 ef e8 b0 c0 b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 bb de 79 f7 0f 0b e9 61 f8 ff ff e8 af de 79 f7 <0f> 0b e9 85 fb ff ff e8 a3 de 79 f7 48 c7 c7 20 c7 65 8e 4c 89 e6 [ 1033.107321][ C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246 [ 1033.113383][ C0] RAX: ffffffff8a0d93c1 RBX: dffffc0000000000 RCX: ffff88801f759e00 [ 1033.121349][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.129314][ C0] RBP: 0000000000000000 R08: ffff88801f759e00 R09: 0000000000000003 [ 1033.137366][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805b6e6440 [ 1033.145357][ C0] R13: ffff88805bda6424 R14: ffff88805b6e6930 R15: ffff88805bda6400 [ 1033.153345][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1033.159067][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1033.164780][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1033.170332][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1033.175791][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1033.182558][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1033.188123][ C0] __iterate_interfaces+0x225/0x4c0 [ 1033.193336][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1033.199570][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1033.206757][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1033.212990][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1033.220013][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1033.225203][ C0] ? hw_scan_work+0xf10/0xf10 [ 1033.229875][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1033.235092][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1033.240282][ C0] ? read_tsc+0x9/0x20 [ 1033.244356][ C0] hrtimer_run_softirq+0x177/0x290 [ 1033.249464][ C0] handle_softirqs+0x27d/0x820 [ 1033.254220][ C0] ? read_tsc+0x9/0x20 [ 1033.258282][ C0] ? ktime_get+0x24b/0x280 [ 1033.262698][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1033.267454][ C0] ? do_softirq+0x1a0/0x1a0 [ 1033.271968][ C0] __irq_exit_rcu+0xd3/0x190 [ 1033.276549][ C0] ? irq_exit_rcu+0x20/0x20 [ 1033.281049][ C0] irq_exit_rcu+0x9/0x20 [ 1033.285281][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1033.290909][ C0] [ 1033.293836][ C0] [ 1033.296766][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1033.302745][ C0] RIP: 0010:charge_memcg+0x270/0x3b0 [ 1033.308027][ C0] Code: 89 df e8 b3 57 f8 ff 48 8b 33 48 83 fe ff 48 8b 7c 24 10 0f 84 25 01 00 00 48 c1 ee 3a e8 f8 1a 00 00 e8 03 4b a6 ff fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 48 b9 00 00 00 00 00 fc ff df 49 c7 44 [ 1033.327640][ C0] RSP: 0000:ffffc900051cede0 EFLAGS: 00000246 [ 1033.333701][ C0] RAX: 0000000000000000 RBX: ffffea00014a7ac0 RCX: 70e58557c6ddf400 [ 1033.341683][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3260 [ 1033.349650][ C0] RBP: ffffc900051cee90 R08: ffffffff911ef5af R09: 1ffffffff223deb5 [ 1033.357614][ C0] R10: dffffc0000000000 R11: fffffbfff223deb6 R12: 0000000000000001 [ 1033.365583][ C0] R13: 1ffff92000a39dc0 R14: 1ffffd4000294f58 R15: ffff888025f80950 [ 1033.373562][ C0] ? __mem_cgroup_charge+0x80/0x80 [ 1033.378674][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 1033.384128][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 1033.389666][ C0] __mem_cgroup_charge+0x25/0x80 [ 1033.394598][ C0] shmem_add_to_page_cache+0x8d3/0x1b80 [ 1033.400138][ C0] ? xas_load+0x12b/0x140 [ 1033.404481][ C0] ? shmem_alloc_folio+0x2a0/0x2a0 [ 1033.409610][ C0] shmem_get_folio_gfp+0x1037/0x2b40 [ 1033.414901][ C0] shmem_write_begin+0xf2/0x430 [ 1033.419750][ C0] generic_perform_write+0x2fe/0x5c0 [ 1033.425037][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 1033.430834][ C0] ? down_write+0x16e/0x200 [ 1033.435337][ C0] ? file_update_time+0x98/0x1a0 [ 1033.440272][ C0] shmem_file_write_iter+0xfb/0x120 [ 1033.445467][ C0] __kernel_write_iter+0x29f/0x6d0 [ 1033.450580][ C0] ? vfs_read+0x990/0x990 [ 1033.454904][ C0] ? get_dump_page+0x156/0x200 [ 1033.459666][ C0] ? __asan_memset+0x22/0x40 [ 1033.464252][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 1033.468927][ C0] dump_user_range+0x418/0x840 [ 1033.473693][ C0] ? dump_skip+0x40/0x40 [ 1033.477926][ C0] ? dump_emit+0x78/0xe0 [ 1033.482173][ C0] ? dump_emit+0xa6/0xe0 [ 1033.486405][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 1033.491340][ C0] elf_core_dump+0x320e/0x37c0 [ 1033.496109][ C0] ? load_elf_binary+0x2850/0x2850 [ 1033.501221][ C0] ? verify_lock_unused+0x140/0x140 [ 1033.506409][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1033.511428][ C0] ? mas_next_slot+0x94c/0x980 [ 1033.516205][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 1033.521659][ C0] ? 0xffffffffff600000 [ 1033.525819][ C0] do_coredump+0x1791/0x24a0 [ 1033.530412][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1033.535529][ C0] ? lock_chain_count+0x20/0x20 [ 1033.540376][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1033.545568][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1033.550785][ C0] get_signal+0x10da/0x1390 [ 1033.555321][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1033.560960][ C0] ? get_sigframe_size+0x20/0x20 [ 1033.565894][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1033.571874][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1033.577327][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1033.582609][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1033.588162][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 1033.593643][ C0] exc_page_fault+0x8c/0x100 [ 1033.598250][ C0] asm_exc_page_fault+0x26/0x30 [ 1033.603116][ C0] RIP: 0033:0x7fe9c359e0e1 [ 1033.607526][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1033.627124][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1033.633203][ C0] RAX: 0000000000000000 RBX: 00007fe9c3826090 RCX: 00007fe9c359e0d9 [ 1033.641170][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1033.649133][ C0] RBP: 00007fe9c3635024 R08: 0000000000000000 R09: 0000000000000000 [ 1033.657185][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1033.665148][ C0] R13: 00007fe9c3826128 R14: 00007fe9c3826090 R15: 00007ffffe7f5038 [ 1033.673122][ C0] [ 1033.676431][ C0] Kernel Offset: disabled [ 1033.680833][ C0] Rebooting in 86400 seconds..