last executing test programs: 12.726990023s ago: executing program 3 (id=4921): close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 12.281202514s ago: executing program 3 (id=4922): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="f78d9ca38fff48f39213be5216344841f9da62ecc16332f4730e2d8aaa4813689a372c773fc830730979b55900d3677f0536ebadd13ba66a3c3aaea770c0db61e5abb89b248b7fe64d24f7b7934c370be8a19209bd62f96e3e1d240c4cad6e018c90871b99ad6821034825", 0x6b}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb95569ce93491586f427bc01ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d437ceb7b2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee2238d3c22652f", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 12.157263817s ago: executing program 3 (id=4923): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0xa01) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r5, 0x800, 0x0) 11.203369911s ago: executing program 3 (id=4925): syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x4d, 0x82, 0xfa, 0x0, 0x77, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) 8.758298972s ago: executing program 3 (id=4930): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2}, 0x1c) 7.045438145s ago: executing program 0 (id=4935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x30}}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x5, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='2', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 6.895814809s ago: executing program 3 (id=4936): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='hfsplus\x00', 0x0, 0x0) 5.890549723s ago: executing program 1 (id=4937): unshare(0x2a020480) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x2) 5.757149297s ago: executing program 0 (id=4938): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.755871017s ago: executing program 1 (id=4939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffef3, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4004802}, 0xc, &(0x7f0000004400)={&(0x7f00000021c0)={0x2114, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40, 0x37}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x51}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x8, 0xeb]}]}, @NL80211_ATTR_CSA_IES={0x1a3c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0x59, 0x2a, [@ht={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0x6, 0x7, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2}, 0x800, 0x9, 0xb}}, @ssid={0x0, 0xa, @random="ee8a3318e8bcd60c4d25"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x37, 0x48}}, @prep={0x83, 0x1f, {{}, 0xf2, 0x4, @broadcast, 0x3, @void, 0x200, 0x1, @broadcast, 0x9}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_FTM_RESPONDER={0xe0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xdc, 0x3, "f0e217baf68fc197d0d26157a803c5a56b9f37742cd72974738c5dc6a4fd5a926e9b6292f79911cb3536317e017a9a8969872550b89701c8b2cb2e82e881a9c508a6e0b70eac9f68d786d16e0b30f6e6ae4606a6f193c7bf14267a569e88c2e565a6f694cb9fc2dec77fe49ee8945bbc7687869321d28a8e6d5b69b76c9fb132e9521cf3ec9bb447523bd80e0e23d64f01a4b7f9dcf558876d6f04cce0bfb8cebdb352ed161a20596cf9949a1b8e82977c4bf76163acd3cd5cc4c5fe22727c62bdd116a6d7d131c44008b3ddfb3eaab223cf6e2099107347"}]}, @NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x9}, 0x9, 0xab, @broadcast, 0x2, 0x9, 0x1000}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x105, 0x80, [@tim={0x5, 0xec, {0x10, 0x10, 0x81, "43e9dd16800d6201d323f60a62eeccdf92723ce7ea2a1fd4a8f2bbd22ce24e55071888eb7d1019fc5de8c0d67f3da44ef2c57869be3357e594441d47d75d5013e545ec46d7577103eebcc1987b806b32b52698b2f37610c8465e4210f47b05c8343aeeb76230385a966f41310fb08dd54a6b4df0478bafeea363ef9d82fd5fb49ae1490611d9cffedf7fc75e15b7cb7beb773abbb8b515240d3402811ad74ad3e176aae3d24bfae98c0cecada6944a7aa822f3fc1c87c6473e8bf2d567b8337d05d48c079764c47989afb9d1990f2ad0f9263cb92d303e34cf0d083bf867ae7fe59075aee2d8969c6e"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0xea, 0x2}}, @ibss={0x6, 0x2, 0x587f}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0xffffffffffffffff, 0x7}}]}, @NL80211_ATTR_BEACON_HEAD={0x293, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xb3}, @device_b, @device_b, @random="5d022a18ecd2", {0xb, 0xff8}}, 0x80000001, @random, 0x80, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @val={0x4, 0x6, {0x2, 0x0, 0x7, 0x6c}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0xaa, {0x5, 0x91, 0x4, "e1c9e58f05d4c846696e729f57c37cbd10405d12992ad2cfea9b8bd374b2a6e1493c487b3e9d5c9a91c3437534a0663ebcf0bf44f680fbb59b544906978418e9934694e85d5619387ef2cddc3cf6b34a689223ca252d5ed125f8fa3f3ff6563e40734628e563b17c6b58eb4beefea834cbbe758882f44bb2abf5689bddec9280815ae5489235f176a09f81b6cd74417165289c231d4cb8f3c09d1c0af7c9ae400194aad49dfc55"}}, @val={0x25, 0x3, {0x0, 0x28, 0x3}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x2d, 0xb3}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x7}}, @val={0x76, 0x6, {0xc0, 0x7, 0x2e, 0x5}}, [{0xdd, 0xca, "631e48931d8b2c0f9476282968873e69d7bfae488932b80d470b3ebf87a871bb013a148aec759bdef8acd7dfc8f24f8cdd060df0da8622bf530959fc6bda61f062edbfdce6b4ee551fbf82d101437ecfb99b86e4c7c24a74edd15a946151ff691d45a5e7c8a022a4cac2b81fd3f334a7bee9a467352257c270230e2bcf1380b0759a94c1b811f07548f6ab5a5eb970f502f8566c741228e01d8d1bfc5893d703e148576f328840c465266b42e20c5ee3af405bcc3ac85e8c974c07f382c033406d287e71c1a951e73320"}, {0xdd, 0x67, "32e3a01adc6d7180de453ac0601079bcc3ce22d4a4dbf38aeaa7de254475bb14972b6d620aeb798242d1ad01bfa959314f980cfe872de1660bf465794723812ccf2fa948c2efaf9766bf9d503bd9c92215251ef9bf251cdc47dafc7c09aa940b367296255e248c"}, {0xdd, 0x4a, "2be3cc751d493764efe3a083ca001be435587ddc28e7076535641494a02523fc6a94bc1c1d62c586f3045a01c4a0b7828f6b6dcc1030b59b0600a25e8e7b0f350a0220dcf09dc6c111e4"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x47, 0x7f, [@mic={0x8c, 0x10, {0xc97, "f06cf1d3012b", @short="a727c6b6a5bce401"}}, @supported_rates={0x1, 0x8, [{0x3}, {0x60}, {0x12, 0x1}, {0x16}, {0xb, 0x1}, {0xc}, {0x1}, {0x6c}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xeb, 0x2, @device_a, 0x0, @value=@broadcast, 0x4663, 0x8, @broadcast, 0x5}}]}], @beacon_params=[@NL80211_ATTR_IE={0x54, 0x2a, [@peer_mgmt={0x75, 0x6, {0x1, 0x8, @val=0x8, @void, @void}}, @random_vendor={0xdd, 0x46, "f568381c4354f14c5491198ae780bd2b12bb8d5ab54f77c2cc14f65d16b4e3fa52bec953aca8b12b513390e0bce685a4a12f5eb2b3a28af659c4c99aa92c53b8a1719d40152c"}]}, @NL80211_ATTR_IE={0x9c, 0x2a, [@chsw_timing={0x68, 0x4, {0x9, 0x2}}, @cf={0x4, 0x6, {0x6, 0x52, 0x8000, 0x7}}, @fast_bss_trans={0x37, 0x52, {0x6, 0x0, "4d82a67682bda63a1fa7b719b987b5a3", "384b0ebaebd5172a4dfd558bb7ef8925d5a5b80fd40e35d052d8ccf78fd163cb", "8bd5da01d33a9cde395ac43a384bd3efce12f3ee14153f16ab20983a1027edfa"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mic={0x8c, 0x18, {0xff9, "70a38840cc3b", @long="b74a89fc4f86ae6ad4a6e45913d6da4b"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf, 0x7c, 0xfb}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x2, 0x7c, 0xf}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x39, 0x80, [@dsss={0x3, 0x1, 0xe}, @prep={0x83, 0x1f, {{}, 0x7f, 0xa, @device_b, 0x7fffffff, @void, 0x8, 0x7fffffff, @broadcast}}, @mesh_chsw={0x76, 0x6, {0x2, 0x7f, 0x40, 0x4}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0xfc, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x56d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_a, @device_a, @from_mac, {0x1, 0x9}}, 0x2, @default, 0x1, @void, @val={0x1, 0x8, [{0x9}, {0x12, 0x1}, {0x24, 0x1}, {0x60}, {0x30, 0x1}, {0x9}, {0x6, 0x1}, {0x18}]}, @val={0x3, 0x1, 0x2}, @void, @void, @val={0x5, 0xa4, {0x6, 0x21, 0x5, "6733566b3c4c880ed1a7e01fdf471b42f3182ef26354d95056eeed9278ccb77aeb235c97d438ec8e137f72a75084f7cbeb65d5b3e93ac92df37cbf2f153bd31b7a9f809e50eb3d5be425dfe599adbb10a386786158eecde9621a479fdcd60e5acde14504354000a812ba4c07cdd8500e155212528da27007a227e93da25504c46dc49611de162121a6b6f433c26f5704e7dc1e17081b7d98bd68b0dd3f0f767cf0"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x4, 0x9d, 0x6}}, @val={0x2d, 0x1a, {0x1, 0x2, 0x6, 0x0, {0x8, 0x40, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x9}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xd3, "8fd579d7aec61154b4db89b426209132adb0c6391f91bda75c96278a0def2451fff72cf8e87b51e9c083439637a4348e068ead9d90d1b9747e256d0b68afb3e1f65924146940c66ec40ddab6f735266cf2fa492db1b0f753536f8263798870d60306a5aa28223a74dcbc4ea51473e8e4e0bb900a72f96e12e4c1759dab4553d74affa3dcb6cf9c976f50a6c6860645a6be25dad797cccfc43293c87017cf10993775d4a1489089254038bc6a8dda050f70dc7afb11fde060842c68eff570a3f6dfc7586077a1ee5ce9a41fb21b4d01b2110ce8"}, {0xdd, 0xa1, "509ccb332ad2164a3e8e39a65a5bbd0619d358aa8ab9c54296f46dbbaf08a2354199d81113bd70f97a5fa95c7fea92984658e24ce2e6223d7ea2d34852bf7b21f4f35b2c2750596def2e704e7b558394352f1ffb15524c66d6e2d9e3a824d95057b6985ea3c83057e6838e04adc2dbc3b96156bd87fe3678e623265d8d7b80a68c4f7d95b5bad5d67c41afe612781f1404d1a4aa5d6ff6f2552751ee290242fc5a"}, {0xdd, 0xdf, "3cc04c64f8dfafcc2165be5b34383fd83e35ccc08026f2c49f247a07bad9f2537585ac1fb301b761ab5238f0ba9dad94ad0f10f3a51ff3055719a67ed189ce52f209725bb2561d862e8c4e9ea051682654522d97c5a8ba4c8bee7255b70f7d905b14e5debc58b6f8e907c8a4e8cd34899bdaaf565ab40a2a58c2d6e1ac0d354203b8b1608bda0fcdb0b82843efce080bdd063a1f14e8657e536222b3438206071b434c77a2cd1424f4bd1935d23881813daf2826a1b9397b36dad080ba761506fbb55e3647abbe9238fca5fb856e38a4bb9d051401252115b037acbfdafa1e"}, {0xdd, 0xdc, "1c340e75f8a0343c4192fb412a0649dbda67092af276203209dcbc6067cb346a5e1a44541f7de7117d93e61bab4585736480f2fe6e5d69b13677d0b25dade4a6e480a2778017d9096541757fe7cd096dbbd28ca6fb018f5c0330430e0c2ff8279880caa92599af7f3ce1f2ad461cf7067c5a3f9311ae91a186bdb18413ddc4ff97806f0fa75e2941be0eec27602457e11a2b847b7e91cf81d398681a60fdfab2a9c0ef922adfcca1535f07ed45f2ac9092b670fcb68ac9c2b609a473fb71fbd377de16f3afbddfca03100f2d2725ba37904d2ab3dafdd5908a6ad19e"}, {0xdd, 0xb3, "54fa67b4db6094d7f4e1ea5412209fc0c0f7f52bb4666e9adb31e6955d804b622b967f73aa81a10043cff218bd4700f4fa729ad6e1bd4b5fb05d3585566d5256a349ca967a786dcba4c63e0cdc5c7c1e81d135fd1d38c8a2c162d4497e794f0eb5ca4a0481021c1f4474f0d9266fe5ab1a1fcaa3c8d40e9359aff290f2149c87df4437143b8d0e79ae710701e8b86a9fee19eda81c984f9bf27c9708f49c82dc446b743aef5f33144ffcbaf5f15c511391c018"}, {0xdd, 0x7a, "4783a44879e8df7ad5aa0301ce2d3bdc2ae408718e3616af0e0c0aa64fdfe39781f8721f24e8d54037fb1eec450d8e83e5171760565b0c9a4fc4286b3c87d13f3bac5220bb208cbd82399f154da6e0acc4049e3473370628068503aa541bbf05b856add58df789552358712183cf3a811627c31f20b59e695d52"}]}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@mic={0x8c, 0x10, {0x736, "711567eb06b2", @short="6e06d8ab017ec9ea"}}, @chsw_timing={0x68, 0x4, {0x8, 0x5c}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0xbc, {0xb, 0xc, [{{0x0, 0x1}, @broadcast, 0x8, @value, 0xd}, {{}, @device_b, 0x7, @void, 0x19}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x2e}, {{}, @device_a, 0x1, @void, 0x3e}, {{}, @device_b, 0x7, @void, 0x11}, {{}, @device_a, 0xfffffffd, @void, 0x3c}, {{}, @broadcast, 0x8000, @void, 0x6}, {{}, @device_a, 0xffff8000, @void, 0x39}, {{0x0, 0x1}, @device_a, 0xd5, @value=@device_b, 0x22}, {{}, @device_a, 0xfffffffa, @void, 0x30}, {{0x0, 0x1}, @broadcast, 0x10001, @value=@broadcast, 0x3}, {{0x0, 0x1}, @device_a, 0xb, @value=@broadcast, 0x18}]}}, @peer_mgmt={0x75, 0x6, {0x0, 0xe28, @void, @val=0x36, @void}}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x6, 0x0, {0x10001, 0xe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x3}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@supported_rates={0x1, 0x4, [{0x18}, {0xb, 0x1}, {0xc}, {0x3, 0x1}]}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x13e, 0x7f, [@fast_bss_trans={0x37, 0x129, {0x4, 0x9, "0dcecbacb0acbe89bb19768975b9ed1d", "be14c22aed5584ffab3151055fef5da08cfbef7628183812aa269829225211ab", "946d80e1f2ac0f30aa6be497aad4feef7aaf7738a62757a2504282e3a0acd5fd", [{0x4, 0x19, "a60d4107605c68ff389c2c51c31ea179b8f401720479b5cec7"}, {0x3, 0x11, "97211211d63dbc6b03b0fae6dbb4b9d276"}, {0x3, 0x27, "b2ef98cc07545c17f378384c0e97b98d4f30367753326247d0afbbcca4d3431382d1ea4aea5aee"}, {0x3, 0xf, "443647dc9ef664875432b97feaad04"}, {0x4, 0x21, "31ab94011452eb9f0ccc14aea966d2ebf376cf7e523112fa4e6a0cfaf1f2822655"}, {0x3}, {0x2, 0x15, "7a903640c0078b5bec753b4bb353f1f4208bbf73f1"}, {0x4, 0x8, "b759915463df72d1"}, {0x3, 0x27, "b03dfa6da6c4879cd963f8017ff93f311d8722b02917a727508d645279208ec3a9128b6667980b"}]}}, @chsw_timing={0x68, 0x4, {0x2, 0x2}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x5, 0x50}}]}, @NL80211_ATTR_FTM_RESPONDER={0xa0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x98, 0x2, "05b901299e2be7f4e31f90a94475022b1ec9d158cf47fae695c2b50f74e270337c06ed2df60a4e3371ec3034bdfc70620401da95d5a1eff2a23eaa68f20425943e8675edfc71e13430cbe012e76c698841129d336234f559b6883f30ca06a49b1df2074493a470ee0224d9b93e83a8619744a01541ae6aa2edf5a2b382c60c712a6a8af0cebf16813ce369af28a0c40066db89fd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0xfb, 0x2a, [@random_vendor={0xdd, 0x46, "e72b69523de3e9522452e0c90902e807f393fa5dfe3b0e203dff666fc2a9fc8014b90732d530a4c7758799df556966eff55cc63548cf01d3f68498599be0c41dd71cea8818b1"}, @dsss={0x3, 0x1, 0xa}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb5, 0x9}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @tim={0x5, 0x9e, {0x9, 0x6e, 0x4, "d9417afbd3a0a9e1dfe6a31b3bc54948273635bc719cba68e406d76745d5a0f139a1c0f23811ca8870cd5c2b1f8bbad15eac1d7e1cf4d2b7cdc9273a8ffe64dd272e8ef9cdd771f2f297e03d1bca0673f06d5eda0d2c46b4672d4e766f02a44c1954b1ffe8fae8dc21e0ba65ec48dd5ba1abc719a6b9058f49547d83c50843e68e03b26725bb73b070df32de728756c7792e9da515460054c876da"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x3, 0x5, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x622, 0x3, 0x4, 0x7, 0x81, 0x3, 0x4, 0xa]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x440, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x72, 0x3, "12b02c18392baf4f5ba32228e2bcf095245cfbce4eaf2975882ca4355eccee2c643ad17b21da6e8ee07419503bc3f0047a6cf7c49e06390cb7f471e543ab5f1bba7eb646cf35c5ab3a3a69b458c23f4baf35fe4760d83c47ee4da2ffc8afbdfc450ed9c097610bffbb0468fc40cb"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x74, 0x3, "61cf62dbe7c21c55571ff1b41a6a96503fe8f0855ee8e54d0315eb31cc5bc4c70a34082b44ec67c33ead340b04390ded329ed0592cff0754e1cd34024c41944b218f35eab65b42033318c8db9933333129e82fb97f49c6833c09ab35d1686930c059f705ac3522a3fc629ea9ec974840"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x55, 0x3, "aa5bd6bc4fb92db6ca18490ad5aab7a91007356daf23dc7cf521d715f41c3ca1e8e1d1dfaeb3492eb10d8817d718b6cb6d2cfca14533c1ce240c695335e8d9b57cec173a4bf272637eef96029f009a56b9"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x58, 0x2, "6085fdee698de9a7e3ff1dfdc8cc324d447d51b5817acd070b0ca7812700950cfbb9c0e71a3a9335aba89ce44fa05c0717729327faa51e40ff964fa6222dbe65c6550ca4381031210250e658b3a92e3576eb9eba"}, @NL80211_FTM_RESP_ATTR_LCI={0x101, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xb5, 0x2, "75e97ae5aceae51a4921d0404aa0fb83e1a875824049a2f89e872c28ac341c326b864734fecd2f94d00cd784244dc01a8f435ea23516358c70d3ae2f1287a96ebd29d3c24fd7f414490006459d73ffbd24558a2ce0fac058ebc383a925854c2e6b5303afd019644519a94c1b5b710fc6a7ebcc645e9c4558676a7623c69ac457b3f29d2e3de661a5945a107e2242ac717f503757e629397ad263bfb4b2a03893064b468600ac78a36737b5ef7da10c8ca7"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb1, 0x3, "736d89bff1c2f5b022d89bd6254ff182f5d6498567b493a95cb79d7393dfcd75c149646411b4431a3016dcc778ee22a17654e71a85941058efc0122bb73ccfacc52d9a392770f7249a0022ed5e1d3375df5c15b8dc783a8167e4c32df836616b5fe8512ddde7ccc7fc19eea42e432764dc8bd332d5c49083bc8e729dbac726c7d5b3110b6ed4cb70edd8f509b3afd94e45bd91d5ff166b3a539df2a0be600948d99d9bfd034158a4eb366287fb"}, @NL80211_FTM_RESP_ATTR_LCI={0x29, 0x2, "814d54520d6f021a0d42b60b7d861fe161702fb64c49ab2428813894187e314102f9a9e6b0"}]}, @NL80211_ATTR_FTM_RESPONDER={0xd0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xbd, 0x3, "cdf0a6f7242a0c762da34f893eacff3d579469dacb9f2436ec05cc37e4fa11302f7c7382dea851ebed3012059331dd9ff68a34715356332ce500a835a57029b05bea21eb548c97496d76b639465c24595e484b311919d53920ff8c9ba34815e205aeab259134438d12a8a1670d007ddca4338489fd10335b0a1c95183ffdbd1a0624ac35ce7156659b032be1648ec4acbaeadc5fdab980315a85aee95396b1b0964deff421241fecc7b4de09ff750ab53e7ab2154ebf014dbd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_PROBE_RESP={0x19d, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xfff]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x231, 0x80, [@fast_bss_trans={0x37, 0x137, {0x0, 0x9, "000c1b7929d98a476df5830205f48fed", "548d6539ae9aba01073d0ec8cb6e22367bf612dd437c9346f54f1cce0adc737e", "cafb06f6d33ed83ae9652266dc3ffd3fea12752366403eaca838816413afa838", [{0x2, 0x1f, "94a920041273924a1df6589cefc8f7c7736f636929280625fe1ab079aec57c"}, {0x4, 0x14, "e7312e8bb755c818341263612566bb9e2d58deb9"}, {0x4, 0x27, "9b3972f8a70f79820f86507f2844eb2cc641cf9bb5eca81018dabef7a0c433125bf4935fdc9d6d"}, {0x3, 0x12, "de2ef4bb9c577f0d06aa7d678f4256e4dd64"}, {0x1, 0xa, "3e74c04c13d15622ef80"}, {0x2, 0x25, "8d436d29bb3cf490524c6197b8e5dcb93a00e22f8990b3af276d616b92bf0026c3d025952e"}, {0x4, 0x13, "d7d3ab8ef687d135d053735c1708c32a7a7ef6"}, {0x3, 0x10, "c154b5900d93a03bb6e51c3d39e4d6ec"}, {0x4, 0x15, "35817c84bcd726200fefa0a646b2a610ad0c97c945"}]}}, @mic={0x8c, 0x10, {0xb23, "801c98bf66da", @short="7664bc40b3077830"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0xff, 0x2, @device_b, 0x7, 0xa, 0x6}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x11}}, @random={0x1, 0xc0, "8b93cb978a6bdd3d866d52b4a1c5d526ec4b5573fbf64d1ced6fc9184df76a98b36af15f2a0b57ccc93d300466e2dad1741b8a546f103f6086756b8038e811b91bbf2a362650508e7f1a4562440521fd5753cd337545b1f39812881ff213fb9f5ec0723040e4ce702ebae71de7a8ac691f422d73c3b86bb9bd0a27e9bf0f143789b99284a39543466b96b824f523a3f402e7e513734b9c3726e13896123477efd798a0c37bf8165bb562fb2bc57c9b976188dba75ae73bd9f860a808da8b0673"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xf, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x10, 0xb1, 0x3}}, @supported_rates={0x1, 0x3, [{0x16}, {0x9, 0x1}, {0x24}]}]}, @NL80211_ATTR_BEACON_TAIL={0x143, 0xf, [@channel_switch={0x25, 0x3, {0x1, 0xdc, 0x7}}, @random={0x4, 0xd, "31f397114fffcabdacacd30806"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x4, @broadcast, 0x45da7062, @value=@device_b, 0x6, 0x2e, @device_a, 0x7}}, @rann={0x7e, 0x15, {{0x1, 0x74}, 0x9, 0xf, @device_b, 0x1, 0x5, 0x3}}, @tim={0x5, 0xd2, {0x7, 0x40, 0xfb, "543e86983a86727e3596de1d3e41461b7df5d8c4555a412a7c0fc6b2a4d7878b10ea0e77567b8485d0aea668490237e2ab98d9d0455fc7652e50b79ca8711e61100d83f77a8ecd2294a09728b1e53179db4b0c3be1a11f9caa1599a956dde46f94e52ce02bae9a3a3b53445458f850e5f893ef02c63097fecf04ff19d4ab6395122e33a8d6ee4a338ba03f00c187e9c7cb4b16c719370228af2b31b0100582e64e1463c0debdfe8cb59cfdcaa9e3543151e72be365c8ed8fa9b952f5a1f483a8f011c11e0f38a0c0679557aec6aaa5"}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x3, 0xa5, 0x5}}, @erp={0x2a, 0x1}, @gcr_ga={0xbd, 0x6, @broadcast}]}]]}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x33}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_CSA_IES={0x638, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x3, 0x1, 0x1, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1ff, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x9, 0x0, 0x5]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x412, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @random="0d65cbfeb2c1", {0x5, 0x2}, @value=@ver_80211n={0x0, 0xc, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x8000000000000000, @random=0x7000, 0x1840, @void, @void, @val={0x3, 0x1, 0x78}, @val={0x4, 0x6, {0x0, 0x5, 0x6, 0x8}}, @void, @val={0x5, 0x4b, {0x0, 0x8f, 0x4, "8687988e52cafba2f190bca2846cfce0d1c3fc7c66f944f84a6f27f1594af594a34f621f917afe94df5369780003f5fb133f0574fa41f8ff53aa876569665b613ad8a5d3b8cff245"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x2, 0x74, 0x67}}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x0, 0x0, {0x0, 0x8, 0x0, 0x30a, 0x0, 0x0, 0x1}, 0x1, 0x5, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x9}}, @void, [{0xdd, 0x7d, "f0715e811644d064b09dcbbdd2ae36994a65ca489aea61c7861e73013869f70bb1af0241ebb924d7a96142a2e39c9ac855969dc392c742a24270bf4b290f3d5bebf5732ed49722252b1feafb0122d7cea31d0300b04dc4e499fb6ec83b1e5850b99468f47d1d785ff3fb24a4a0dcb40938010eb4de915c0865aa7f5fe4"}, {0xdd, 0xe9, "943213c060c13c99bc070261b4248467fac565569472452a80d4b2f54d3958f08ff9327e334f3f05e3f42cc64bab372cfce1f8e8eb3468bd68a09154fa8791dd6d37881366242b78d5f2383cbf1a377ddb8005fbe2443a6273a8adc69ffa6f321f974abf0030fcf9aef3a045aecae63046e0aace9c4747783ec1f67cacc79cbc1e4589b28339f16b8e8f5156817fd2128abb3b3a9f40b5a3324d47fb1030b76550d4ff624855436aa639e55794240204e7982b4b4e24e19fb39e138d392bd98cbe440d780e27d62c721b81482cc6b8225911b0458f99dc0959a8e38ecda18f50d5f4036cbff385a58d"}, {0xdd, 0xf3, "cfc8e3ae8820977bc0aea4fff7824def9f42cd45c6da867bb1be621f05e11178a3ddf1613f858c5eb6f4658cfcdc987d604804d7d073c6694b90858530f5cef4ed4d8c0278f56298da948917aab6adfbb99151090d3b78f408699ae1da61a92d183045e89a11c7fc5bdfec1c0ffec4214445270cc94b92ba7c8bd5e482185edc773f06aa971c3aa48627a567a63b954e1d19ea403a9346f24b0ad8730e67ae729bfe0a1f1cf56ec68d8482bbcf5c73b595975bd64832d41a797c4ae2758d9f8d282e39a4e839b081252c7665611595668e1eb28f956c6fb9557a6e41ba4ffa592f7e39c123ac8d17d817103145bb37351c8c90"}, {0xdd, 0xf7, "c68a60fd8da62466b53c033bdab6a03d9d5621bb0bc400b2c6dcc7d3955d8a628335e4854d613a24318c3a0b23db649e1842f461a590c42d3b87e138dc57b2b460f5d81991abe6d89aa03817a8f5d47376b60f751e809ebe0912469d4697e0e9e0b652f37d12cf5b4ed86d9b890a1bf056856472008c5ac18dd40a48d91baed127be9879a92312607846c8ac21d22ea1272cc2b656b9350eac16d03095a3c99b6ef4c62c885cd202e0f95446e622337c3126b3c84013a0bca8fa2cdb7756a509d4ebb8fc58ad079833cfcc1537564d2eb75eb3dfbe8b23543e879760593c33f9b0b122252559015b4431744ef86f403a0c009cf2ac03b1"}]}}, @NL80211_ATTR_IE={0x2f, 0x2a, [@ssid={0x0, 0xc, @random="51c9829ec19611b9b5ee9e1b"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x50, 0x0, 0x9b, 0x8}}, @cf={0x4, 0x6, {0x2e, 0x4, 0xff00, 0x6}}, @supported_rates={0x1, 0x2, [{0x4}, {0x36, 0x1}]}, @cf={0x4, 0x6, {0x3, 0x6, 0xc}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x9, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0x99, 0xf9}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0x5, 0x200, 0x8, 0x100, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x9, 0xc, 0x4, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x181, 0x7f, [@fast_bss_trans={0x37, 0x52, {0x8, 0x0, "7e8d41f77577d77fd85789cc60ee4f78", "888bb5328617d80f0113b12466a52beb574e7473eb95d48552fa344ca75110c4", "e96caf52227abe7a7c48a51f9951c55f3728b269ffed77da10e6659c6e61279d"}}, @challenge={0x10, 0x1, 0xc2}, @perr={0x84, 0x103, {0x9, 0x11, [{{}, @device_b, 0xff800, @void, 0x3a}, {{0x0, 0x1}, @device_a, 0x10001, @value=@device_b, 0x41}, {{}, @broadcast, 0x57}, {{}, @device_b, 0x200, @void, 0x33}, {{}, @broadcast, 0x8580, @void, 0x14}, {{0x0, 0x1}, @device_b, 0x1ff, @value, 0x24}, {{}, @device_b, 0x400, @void, 0x4}, {{}, @device_a, 0x8, @void, 0xb}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x15}, {{0x0, 0x1}, @device_b, 0x90, @value=@device_b, 0x3c}, {{}, @device_a, 0x6fc7, @void, 0x14}, {{}, @device_a, 0x5, @void, 0x34}, {{}, @device_b, 0xb9e, @void, 0x1}, {{0x0, 0x1}, @broadcast, 0x80, @value=@broadcast, 0x29}, {{}, @device_b, 0x4, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x7cf0, @value, 0x13}, {{}, @device_b, 0x1, @void, 0x23}]}}, @supported_rates={0x1, 0x5, [{0x60}, {0x1, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x16, 0x1}]}, @supported_rates={0x1, 0x6, [{0x16, 0x1}, {0x36, 0x1}, {0x16}, {0x20}, {0x30, 0x1}, {0x0, 0x1}]}, @chsw_timing={0x68, 0x4, {0x8f5, 0x1}}, @supported_rates={0x1, 0x4, [{0x45}, {0x60}, {0x18}, {0x48}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x24, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0x1a, 0xf, [@cf={0x4, 0x6, {0x6, 0xc, 0x5, 0x80}}, @chsw_timing={0x68, 0x4, {0xf62, 0x6}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]]}]}, 0x2114}, 0x1, 0x0, 0x0, 0x4}, 0x400c1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000002180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000300)) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) write$cgroup_subtree(r6, &(0x7f0000000180), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x4000080) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4884) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.745069797s ago: executing program 2 (id=4940): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)="3c5c2b3ecd45036a2762bb626c65640a", 0x10) 5.659800279s ago: executing program 0 (id=4941): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000000000181200", @ANYRES32=r1], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r6, 0xc02064cc, &(0x7f00000001c0)={0x0, 0x0, 0xd, 0xc812, 0x5}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380), 0x10b3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.339606912s ago: executing program 2 (id=4942): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x80000001, 0x0, 0x3009, 0x7fffffff, 0x7, {0x8, 0x401}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r7, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 4.03024182s ago: executing program 1 (id=4943): close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80800) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.305865938s ago: executing program 1 (id=4944): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2}, 0x1c) 3.305553238s ago: executing program 2 (id=4945): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r2, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r3, 0x0, 0x18, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e4", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) 3.245373489s ago: executing program 0 (id=4946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x30}}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x5, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='2', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.849402039s ago: executing program 1 (id=4947): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl(r0, 0x8914, &(0x7f00000000c0)='lapb0\x00'/16) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 2.141923477s ago: executing program 2 (id=4948): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000002d000701feffffff010000000a"], 0x14}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000) 2.081746829s ago: executing program 1 (id=4949): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb558492027148", 0x44}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e", 0xb9}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.973257781s ago: executing program 0 (id=4950): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)="3c5c2b3ecd45036a2762bb626c65640a", 0x10) 1.960067261s ago: executing program 2 (id=4951): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000000c0)="b11b6134dec3b03dc7e55de4c245a2103fcaf44b86cdffa16b5ba5450ca0a5fd1a8e788eca20cccc80d4f9579229cfa7cb7a", 0x32) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000006800), 0x0, 0x141, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7fc}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r4, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000022, 0x0) 161.397986ms ago: executing program 2 (id=4952): syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x4d, 0x82, 0xfa, 0x0, 0x77, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) 0s ago: executing program 0 (id=4953): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc0c0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100003, 0x24ff871999e0dde7, 0x1, 0xa, 0x8, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004140)="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", 0x2000, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f000000bb40)="729780eed4ba82c94845406bce302b9a094fcc0482015aee223398eb813faab529a79f0e4c7262a6a591bab33758261958c03032669bec1998cdf2c5ba7d60ddeed9901b3084392e9a2a6f9f8b0ab3990a7895fbe10176107a44485d0de1c103217305d712d7a9ba80149192dae0dc89a3bdab8550621d14bc60bc7efeddec66870d25319d88e2defef20ab8cd7c1775c06448f39d1643766c467bb789388dc0a58b4e4d2759780e53bc5a2abf48bc38664347c1138c3e1b96b24f4b64d5c3d17ad3e51e29903a6306894f2a84752a21c977f2ee7b798f131cca85ff64e3e31f004fb124ecee338da1201fbebb6a8425fb5eaeb1d3edb4d1bc6dd7d4b6c14747ebfa7874c7faa3ce56590857ac4f67ed0af22fcb4badd241b7070022f18e989109c1743ae73461ad6cc084ed880ef0fdfd018c48ebb90f6d94a178a17ad2348a43fae05ef98466bd551b2ff768b81382f244c6e3738e73a223e3e2222126056514847d4787e43898e3a468611d30c879051dd154c0205eb29346773e6bd7eda3fac5cfcacf91e64223f1773058b51484d7033b36ef957349f582fe70afff4814cb9203b7098ab549d7ee990949b74fcfb8bfc4c3eabab70dbf6a7dbbe5bf7bf3cf0afbf83d886fa5e4246dac41e423251ae393d3cb7173a932191749aefa56ee164db5059d4b1bd89e81f7fde28bc3014fdbe9d2237c67614096efeedb9e1c87835729c8798973f52287a74561b0188b1441be6f00aee0710341545e265f0c5a381e6ede639ba367c5a069d120afac113206611792f70416e0445b8fe705be1a4a983e4dbabc9f55941a8afe6ebf487c845d527ca627fd777e80277c6da5bf851972339a9df657bce7634eb1524cc00fb4e189ff48e1d35bcc7b90e9a1c8e6f121a52c1dc722c604434dfaae9691f145632bf73666bbab7e0f16b631adb992025e671f6bba29c40e7365218a7a6398528d608ee5b8809b2f8e204ba6eb0bbb7142be97d69a9475382250fc589cc1481eb17b8f4b5a5b9d2b06a0a36b8a2d4baa323f15305bae4f729c3dd1e4c6c67016525f40521ce1c1881f19388136704b698d9d29102c9c8aba1e9bc1ae3698d682caca193c55b7a50aa772d20c1b2481935ffa60e8003a12e7fb536bd9d35081d6d12a0ce958f2aec0314b9fceb403cfad60e42b4d05c584a636000217f96c2bb978f949113b6f8e5cc36bee40c0b6063476fdd11a774af653d187d8d3ccd492c978493e7e486f380fc3e885403febddcad1281b7034aa8f3f1c506819f892c6e4f2adee18d6d7905aa5bcee7481ca1c353f4389f1bacc79009a3f0e1fe9c03b8547244a93fa2ecbe7f1568742b180c8acd70aa715caf1187ed4f68269d6b385c18f141357f7f846087e998e672f896543e381455edd409dc01c7dd0fb219eb222ae6e7504c6cef745f49bad81e40eda3ba956174adcd12a9976b8228239853f0428516013cbe4aa49259b57a66db18ca58dc5c357c5c45d892f151e14f03e4a9b77f2cd2b5973e44500129d1ad32a3e98238630aa3573ca4c412948825978051e8849b64eca6d27c53d26eedeb515f3ae11a1c1c39bae65b1e36bb14ff0d9421b76356dd2c857bcfa9426e5fe32d82fcbe8e628a11aecd6fdaf2db9a5efebfd10d1323fad6738c16f8477df501eb6ac107c31faa8d5762c24742fba5d34ca47a19292c03018b844f781c1bb7bc4a94655f77abfe78951eab34a3f07da8e718f7c8d600af0f79d4ce4f964df2331bda5a666bb31db7abdfc8a56784725f920cec96edbb8ac1a89bfadd7d3af7eb5b4a11089cdda2f2d8add6baa152528e47c61689c383bcfca7701b8b9c25f0e8df5f782c3bf28faa8411ccc9a21f3f368b6d03e211c111db262f0642ad281a9423ce87cda8c2329daa9e68183d1f763e0444191f764d84c8bf6fcea667aaa7ef2a5e192bbb25ae3eb55284561ffd425778b98bd792ade167b41b90c23b677cc74726ca115d61e6e0cdb3eb74dffffb94eb3ae00f5f4cf8093c8ad07484ffb6da9be995ef4fc804573ecdff76f878ed9bc4970240ac643351863d2ef9063707b143afebe9e64ac377a0f0b167f5994874f5773be9f35f90757c161ae9bcf7f47c66c3c60a4a9d03e9b86dd6835627dd7b6f7a1985354d408b20b17a24645edc8f016550e0df7cc7379938959ece5f2993ef139e835d360d45df971cec13258d6a8ac293873444e06c0e3f5d5af3b2b36c113b68696d7171ff3ef499a652889237dcef9b3bf667bef5e4f230de2fbcea347f45e96eb5091e9f8d1efda1d3053db72bb80ebe70eafb51eb69073a289fde40432aa0ae31cc626c7959f4de1b8a542d7033125833c82a3dbd9cae82242ca670abe0ee493e30278e2f1213ecaea1ad3e48d4cd287259f05f45e15ef3091d155e6aedc22a8ab4b4bb29ab11d1d5e6643eeb0f881c6cb89dee47d15b65a41b36154565674f30c36758f3709a03c6558c7607e225ba4c7d713f42ebf10db54756f33c37c0e93e45738775cf562e015b29c8e62081dc94efda97ede2f8cd201a3219237b7e8a0ce28e52bbe8b0b1ba860b74285473063f4bbea2648adbb0dc90ce7483828b7997d3545a30dc8ef398e5f5cf367b91c42c8b291ddf079a013ad4e82444b97678f781395781dfdfae092798357e905e863c67fbf73d53c99f042583758d4231c2323de792c1f6e4a3501978bd9fbb56eca0c166e67e361396ed5ac0ef9a7415241955a3406cb3df4baa4eb0ca3f33be871b60cdc21c872a410c14efa17251e43365f722afcf0487b69db10c4fbc84197d4028f36a0dae0121cf283ddcf866d71aca4e2051f9e8a396cd10e27d3c1f86b4b127a4351ceee56a03c1fa77b0f7f175074476bdca136085fd7c21f2dcc21710a1429ca24565365e96fee6fe6fe8712e30c84150c51cdc0f0437cb75c91f5564c4d06a3f437d40a65af30b00eb544e6665dfc13ac88f6488b8d10d3538598cd616abbd0cc8176fd52b766155494ff0d7116d0649cf493c0e501753e989a5aa55f5beb8c290277e9dfd32bb87590d23abbc49bddb8e5a3fecb491901e3820d966072299f5d22f41d866037599e90824b45e22b0a5db17ec662f7f829dcf35b01b9bd84b88429d920f08847330102892738029f04ae11a38fd4639dc1b597100552e51490e08c63eb0567c015f7a5d325b49a2856cb3f27c1cbc1355be101acf1ae2f48bedeea86ad7c373918e6e1a58b4e4d8a5c34720db941ba0f0334c7e1063def7a3bc9f190679a312ca9cd09eeca1c5660db65d67471c350b2dd1fde804ede6deb699322082801a3a4d00eb206e96283c395dafdd81170bd77902e3011e9ad3e70f0416c98d19d00fc4397cf942cb1b8a2322cc1e357130453f4785db1c85b6ebf4f42cc8165c1882208755082fb738840174ab40d9291408a6e3ebcc1352f77afc22565a1b1c7d83062390c39a61495b7cdac25112eace5bd2ac057acc514f77408fad7519274b07a3d75735bea79cc52fdd58124b9b2690c9f1d06eaededb8c113d9ebaa93d22d9bf595d9b33428315f41af4fd798ed9cf29a11ac149e31ca09903a2d79969777cf2e022353ee8608634e891cdf41516844dd0b21ca16425a29ac25a7161d7b90b42629530b1766b019762c126dfa43abf527710fa1c2ccab8c00b646e99064462e82648c502df3c0730b071d5b74f910ca7791071d51fbddc61463c954784d8f64f29fae47615ef4a94d927774f8a95f202a0fb8419e41db83c7898026cdc6027339f3006f95d4df84cca1108d71a83e407f996ba6cf48792b354e1ebf7242c1f0982482a228922b8a5b4a1cae2d3fd8ab83e8d2da9b10d066834e232363e512fb12bfbf641edce55b11fd8d973693e9ef12d7cf18ba4665597cff4d6a048dde21812fef41a6b289967af97de975ddec2e7e77a27014a652d0bc63a46d5df924f6902a93f859805dd56741b9f4db8e90a0ac225d240dab0bc0e877633dcfc9999b45df95480318e25fd8bdc837ea8118526abe39585dfc7b40fa038ffe726103c0edcd4534555df5025840de08b45299a20f83107efe5c3b7f52f58dcad7ac3328b05937926c9f8539fb86708296335d9298ba81b48550d830733e23df0f2ad509ee34fe835df5a1b7e99efdf2ea1d79df9218734e4e03c04917efa9388e144d0e4f319f5409530b0e053226302f2fb9521fc8356b5066031cccc7e3ed4b2e3b1b42537cfe8b53b3029245317a36683907736f7188c08c9c359ede7ff359beb6f165635aca8c43867ca3310ddffc44184c5f3ef124701d614bbcdf9b2eb04d0d4f678bb14984aa5e1f7de275d21a42b64fb6e7d7590c50f465d03e924c688c08cd161f7d489edafe0896699b1cef38d638b94cca8336bcdaf639c3675c0a181c0ee843726e818e5bbcf04ada28eb0f539ed199e1e3652067853d85b9759f2c22c8a432d7fe0506bf89096ed5ce1c3ff01034d2234dd5c7c9315ea29c8efe27e883bbebc5981a356a4e5c86ab1d22ba20fd7bfdd6c14f0981a26d2f878e56314bfb431f68a0410f77cb50354a1e329fdfc4a0564ff14fe6191f72ce879f7dbe94acf2cd1096c9441050af433cdb96ab4e662bfb941b4067d77a8c136cfe4038dc73fa73df075ca01068d6af6bf09c97ff358bd0092a12056ebccac2f08022be34b070e2e01ab79ca8bd95d88ec86d89f9913739654c595410e16da005d9b82d3dc90e764bf535f1ac06635ed6c8e0517b1ba5e538388e04337a08e3d4a0aacd5a5768a88d7035bf5354efb6acdd39f6469b868bb38614d45f182094b837220f05e3c865923b64c2f6cec7f77995032fcdceea0257e4aa10c7a8016caca498b5db36f0ca1a2766b726a1ee26d9870f16795242f544239596766551ec841d7f267a0dcbc0312c1f450cd9e34c373ce0f0d35b7e549e67fc7c8ec9c1dd0022cb66c7901ed8e9bb90d52015a5e2511ed2db512d66738196e7a275838fd2234b056cb43c9a2a7ef210e21ec0188a05561cb9186f8b6dc22d0b1ce9285780e8fa05eaa64e672a24127d1e1473eef1f220b0db115479a54e3081bbb8748478c6d9f6a9a43be5b438f1a00c57a3279f1b3c41f134b13880fe0c82d1264be4e2522f879743e17effafc57b1580d6ab15c3d1e4c21aba9559cdfe8e970b0f348ae45d2b4646ae2737d4383173f3dcfa9566d279d95fbccba0be9e8c5928c60d5943e1220bfce3ee684bf5bfa8195d119d899bdd6eee9583ba4e51e340ad60645683e49f2c256196b463c6b2f15266af2c156f2cd3c44ba7ada4974c86cb495f9dc1d66902b9778d5653a36ebc06973896ac1c62bb76fc624125be8359067eb742714f45ba5e0c192c0c9ccc52f0d10a3aef4505256a303970ebcefc91848bf0a0185b8767b55c8ef40e033c82e8395da29e1b99e5ae47a4b61c73f9973e8642769070df448803218a3b1775910c67b8c0545d85440fd0367acf78587787e3b6939d5b741e652f2517875bac933afdfa4fd3eec786ccceb1872ac2cae9d14b989c95e59019738a9d7673849a3654a0e8c25252e624d87ee88c842e8c4155607d006f1fffb7a26e321796f490385f8b24e32224339e26a1c927a0d9faf2222241e63d336938c6563d102b841136949d161033bcdae6c8abec4a3a789a110973fa6863377f32b68cb139e8085a43549241d832c40636d1a37ae53bfdb435650703e43a44d23ef266c77d698c75aafaf5a591c98066be0da1025d4fa13342b742be8e586f6b7f3336f06b9c0a13086b67d827dcf94c5ac334b02d5c0b80ca4ba9175dc569816175cc1f8d72ac4819ace3699394624b3071ee76a32023baea159b39db0c5aca3a80a9fab56de05a7638a06ebbe9ba158c8df19ce745927895bb927de34ad9d86ed433f9d59aa8e1de5dc03c8bbc45c0a16dec2feba7f44053abd919af9c48fc8b60bd32207e253be3e47c00983cb1103468dbee302318c6b784446e7613a9bb767fa5a178ec1bef7ac9ce3704b821f583f25bb00a0eb91b1c46c927fb6e5f022195efe3c0826beb8eee0409613add11deee822d70d87562820961ec85b955d0031abf0bc5dbfaa6ce9377a48c8017b3c0d3752115ce4dcc230a5f4b287569ad8b20a4556524019286a8676ed3fd85422fcbdae39502e990df52cb0599fe46fb05d2508a04d0cac88762833fc37a2725f75dd80e454bf5064f976426dae2d91daa3d8a1a8240ed75abbc1fd629201180346aba1ae6836972df02284086177121cae91ce6abeb811460ce19351cfee3be87b578ea1549933f1f659f37cdfb9c8a48a48f776b031c864cba639a6e0c218d0b5c96380299d69dc2c79b0f9df4b0cf76638df2768bcfac00b57f944265db308845302ccc3bb604c0c6626acde9483b680e8fd2248fa9f070bd2f8b7a4d5583db9f7d7b68ef0ead40ef6b0478803a94b34d2099c36469aec20e2d450ea9edf3f7a4e3e6ac9ed5edc8f0d45de2c0e94f791611864c99e08461c0206f7fe4505075370cee90debf139cf9a3cfd20b7cb7f9bc7c13cc9e5c2ce57194a3375d057ccca94c35c50285002d8e656779084c66185e255578d1c19f00453df5f05b49982b4b3fe86a24732f2ced7aad2f998c90b36b5b25b6f09772dd47da501d7f63cbe4ff994942b66c4c6009e676fa857f443454d4065cc292acec02ce32cb3046ccfb371b32988ebd069be8f43fa6c9d75b0db5574ca5e2f34dd5623657f9570a3d5c6700753808046467923262de1b3e4904bc3e06c7741c95628003ee2713aae9a9553d7b7919cffc9c49d7de27c34ae0e399d19dfa8e2af292bdef044029916efd8e3b51bcdc2a2032067da459b86563739c465cd2c78d4fb79628d81503b66d42d5c61c9506b5fcca2ae81bdedee771e6641bcd71fcca4e01a102040aaf1c5ba67beaedeb4100df35475e195d8d2e08978cb41110bfa85393a433f2e791bb0d3a8e803a24c59ee4aa5f91666b5908d4b8cfa0a50d6cb7f9d7945c4dabb4dbbb5c8e4ff0289f8176c4a94c744f637b689d35899e1a0d7ff3aee448a9f022ab77a20d63195151c8e1445029a815a54df10a86529e73850368c3bbbe1e5fb74a0cc6c7cf3dcf0e54d350fea3bd6e6b79d526784dab61b91d643381c74e61c1dac5fe7da6544f5ab33bfa01b8d0e9c39df38d38cca97e959f1cb600e446ea4850553c7ad1d437d02becba2ecc8df8f1f807d28b81b1dd8c882bd5b19abf0934e8eea8a3c9129789cc4e161901f6c15e3f1e7cd2a7eaab3ef725b9f9b662693362c31063e084bc80a90a3d6da57b844444d0a8c714ad5155efc2ed638c6dc34a8025ad7a7361b0e6ad7143680215b2d1e035234b14cdd3044900a4cbcf104bbcaa7e0cc5bd3083cd7f54f37a632e59276cd578d9a11b8e85cc66e7584c84d154e04811ea6b4ea09f0dac82144bc2b23d88c3d6c763dbeb12f1c927814619035e3e783c4a6ebdc2e6b430563d68eeb7ec48fe7721ed862d6680321a2a4fc13dd2365ed4c0c28f62cd067d6d19f7c2d4e1060f1ad3830316e207a03ec93483003090992aa96b65383b9c3b04ab3f8a0fc2a45e0b93c676b62a1e014ff085c6e5022f556ed200b9bae1f1f0be081478db477dedaae7aa9087b41f2ecf190728096c47e874b94d21037b3a946f90d7dd26b313465ce201da12e7723cc72c71e6a416b3415fe418d18a7c7522c86b07e52528aef3c1f4d746283e3564086c401819683f230aea67aad48801132b8ce6aeef332d90e328932e2c4e1b81f5f57f6ede7582135062c68d5d8e6402ae4672aa11005d78d5c6fb7c0e49f3a150b60633536d4ac351560288a089f69c29b8e8b1730c33f747ddef7b297ae08cc4b28a13a293a8a58cc6111526afdc45db679f9f24b83bd4945d5fdc9ce2c0b462b6c3e8e48058a91c7dedd555dfc44bf067714a294d219a1f7d47deea3ca35ff6c3ca9f425ace6b26dbd196850afe6e00f2adf3315fd756cdbb7e6173d84624718657763ab50d7c6b513cf9eb3bef1a3087e9f1eba75fd5204163cbb6a397f19453d6c226770950c02db638ab3dd32d6a94ba69d89d1d85cde095f65d13a84bd4632a111a0e1757978a066ed0f58c4b7e096202765887bbf5b2d513e8ccaeba0de1ef50e151f63ef4c3ac50aed65858ee9b7004b322462ada651018e24d5152663ab335f592250af24827ac62bcba360953cbb80534a36e0e6623d68cea899b67f8c8336e1d8a40bd050d7348a9ced30728e1e33b0f69207e2ee2a09af215c49e28eb71f405014dbf00ac007caa8e43c8ae7975266d442f707f59d8e847a8ebcd378075a867c65ee48d3a0ac59e6cf99d5fb1828b8b58458c1362fffd063c19994fb4eac668beab17904be12f7956b33e69482c5741c5274fef5553dcf2db2de3640be9227c41897e8ba69b0753de9c9dd3dee685cbd515e487a46d63c93f231def5b9f6c08f28c58ce9a50d84e036654e8db055897fbc13f411a8d23ef245c6585316b6ebd40fc7543d3d98e23601d4be5bf1503f5985221f59ebe37211220855f82151a6664a50ef3379b95586f1abd6e20d85ea385e6feca8e50ea9820c3a3496be5204558ad597610f85f8efeb4274da7b8669cae6d6850343ac1642ac4c98697bf59be22b98345bc3f2ffff4c30a10d2fc71517dd614bb7cbb496f4bdff9cee1cce3703095857307f962dee3d1a3b6e9f482dc5e0e3bd4096385a52a31ac277354153330e50b9e2888aed94b188038eed8a3013d5209766ce8c3f02eb86a02522dacafeae2a53dc4aa32a03ecb9555ae343744176007c66a90d7aab3d560677220405336fbf0b61e297761383f16cbe38dfe445ec048d62f0e281e7374ecab5e16bb661366137b3b06c8120954e34e771d13cd93613dd90f8a7d2615f47122a8e58c0d465880d82d49fc0b4e7db53fc95bb338ec3186a4e994ae3da4437de87f3ae675fb1d7105385f4677e49ecc054ce13ea8004e5f2f89f9c40d480b95169e880a5cdaa23114a1e3101abc18603a8a4ae29fe8fd1f945e9f8d80515bfebd45c88f965b701f3c67df7704a65432c587e70186df3ffca94994e4ec7a4aca6be957120d1c1b134947520c5379315a8d0bae647e54af13ed3ec37bc49ee9406ba9e2dea44efd52b576e8925233f766e378789bf0df5b61fe16acf1db8b0c0316cb579cfda2fcee41d02f2f44a4503511e9feab9998c20f53b51b2fb47ad18ecab6aaf6bcef755093b75f887ed2b2de35d7b657808e635668ce17f8a440ecb9ee37999a545711ede47416de5cc2b2c84f082db161222ae0244591133b2f6c6d11de3563a5c444ff20f5c2e2b1a3f82c59edd8d2e2373a5e8c935b4e6bd34924fe71ba9f7fa476913309171d242b94f1552ca27da2affc97cfd3d905233b4278e250a4b14645f7f0562ff3f7fc9b0fc91f96a36c147d5a3aae8c527897c7499e9daba82c5a3438b50da1a822e2a0a198712450f3c07a856c488309b6371842b8f14d656c8738d8f4d02d6ec27088a8f913681a335b7b63b8cf70c057dd312dc648b05ce9cb8664ce69f8798bd4ad2ec2ec0a4d34fa0cded0f8a555d55a765078a866ff31dc7ea46138db63f47accfb097da359ab340ff9ecbd7b7b4fb6363cb430628366426234a11a1201b73670d64168226fddb1b55ed857754cc19131231a3b704980e75d13e0fe4dbdf24b7a4538519fdd79c1660c1b2f2f1de0562690a38b6fa93ee5494ab59a925c6e57bfb6979b1c848732e0e14fa1bd863e32199cb6993ab8afc4fb2fd5c519cfe554a1f182413d03dc9d78cb9cdaebde309b4018f7485a7d186732ee5f730dd3c95c35944eea7fe9502da894683e0665b66bed36b836fa2eadce63ac990e2b9423734f787d423b2f055584586c526fbaef14cb87663fdbf7b18fcc9b9f20afe7c4fe3264f34d2fb2e2c80b820e18fedc65051f779aab431c5a51161f27184ab1a94e8cd0de8457ca7e868b9292a0fb562892640c66b36081fefa3161ae62a50ecd83ad9d202ca8fd74459dc433b7c704dc424373ec0cbfbe6d80ada49fa887a49166e2663503391ce219aa6c6696197c716d1d090feefb96996937b7a0d38eb79cb30805c57b42c729cd499fb384b18a00af4479a5cf35b6d9df44cec6c4b79be201e4e2ecbec7ec1ad2efdb531a562c0a14c00e026076a1a9a0e277eb919cce90d4946d71e4212c604fa1917bf2cf5b3e9da65a92bfa41e68f4a33ac77156238ae1ffdf8be4d878d05ccafa7c6de730b85eb5c85bcde6ec764a4d74af9c4567b78a2394a6fde2480c2ee906492b72277f8c47d1029ef65c0c1701c090afc021bf06a7b7e9befb37ddd5d68368ab2101e9c29144c22ceac451b65e7f62bf0ebdc7b03b5e20cfce94dd7a5dea311f22fdecffb074e5d18892c9faa96c2e2c3152d88a71055ff75af4b9795f7e9c44fe5cfe08b65b0f9b026af860be0ba442fa0ef73e682786b248a7caa86224741b4ede6dd3efbc3527fea8098c01eabac68669c1708586e1c83f13688e3d1c263b10792d1424ff1d5d0748d378e5d0daa1d749788559f95fa23ef0630fadfea71aaf7d24b66437f9e18d6012a99a572b0d4f3db3fe543ef5ae442c5049d6f2db85f79456a47eb579c69c883ccc8c9fc0953ccc845950370999d0c38aee15e94e9a7a7603f8a21add007afbaf3e1d497a56ff3c83b42096bb81874689b5ab69ff9615778dac3c5feee3eca8054081709194404574383b0e86fd5cef19d50fcad2d17afed19237a29dfbc77f24a915fd0ae006e7fb1e63a3c114836b5ad47db8842c099658f8010bb0a314b545d0998796e7f6a8ab8ad895e0666680f083f250aca09922a15c4acfdae73447a2fc0a1186192a1c611b7010e9de2573eda75134a281ca62ac04e47193a187ac931532ddc5aedfa2df0f7a59025679e9627ee44c66f31e49b6958e69e85b38d75a9ac64dd135d24c302cbb29b23ba9b72d5b494ddcdd984fecf777f90d2a651d0c94179cb69220d9953a866a7440b2b75a2ba8e0ba17c247e045685398803b79646c66017bea690a4a976514fffe2ddb4b51d0983c49b23dd9290eb255609ff03b2cef73da55baa0588c8cc843c75bbd05d03bfddd79c5f9a42a0097dc6dead23a674abe6718393188f526dea08043d4ae0db05e287d07857343f06542b77190825c950d68454ec89cffafebc9acdaf18a1c540132b8e8df6b3cce9ac2ca2ab8374f035510bb5e60d2ddba6a9ea87b11c100e73c30a917161b128f56e17270ef6d97138060d3d4a3ec1d0a4369ed954125f394cf22c30bdeaa966b89f405c1724a208a898f600115871fbc151b30020380bdbf3a6920143f2020e9f151b1e3b3442f460313624759c0727d59c24d3ecdac49b03ed7c70b4deeb93aa4c77c89862f40fb828192603bcc3a3fc8f5d6709e89116b0d1c2b678dc1aece5ff68d5e3f84e6a9fba68b87653c2e680461998df039121fcaf8d2e91045d742058fe04f978a926ffb931a464952f4620a31ac3074c14f509859e18f3c2a2b1003df1b7bf313cb572ab528b98b3a93d9abe6c9fefa452ec594a47ebcdb75d95f9dceb655df310c8ce69573fd5d18a64b55", 0x2000, &(0x7f0000006640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000007b40)="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", 0x2000, 0x0) sendmsg$kcm(r0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) kernel console output (not intermixed with test programs): ocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input11 [ 1076.984174][T13283] Bluetooth: hci3: unexpected event for opcode 0x00d0 [ 1076.992343][T15350] program syz.0.2769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1078.218226][T15367] 9pnet_fd: p9_fd_create_tcp (15367): problem binding to privport [ 1078.781960][T15372] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13329] was attempted by ""[15372] [ 1079.583450][ T5785] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1081.478639][T15396] program syz.2.2780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1081.850591][T15408] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1081.981510][T15412] 9pnet_fd: p9_fd_create_tcp (15412): problem binding to privport [ 1082.747913][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1083.033659][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1083.046451][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.056864][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1083.072668][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1083.083171][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.091241][ T8] usb 3-1: Product: syz [ 1083.739991][ T8] usb 3-1: Manufacturer: syz [ 1083.745139][ T8] usb 3-1: SerialNumber: syz [ 1084.006492][ T8] usb 3-1: 0:2 : does not exist [ 1084.028682][ T8] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1084.120388][T15426] block nbd1: NBD_DISCONNECT [ 1084.792004][ T8] usb 3-1: USB disconnect, device number 12 [ 1085.828607][T15363] udevd[15363]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1085.965115][T15435] program syz.0.2793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1086.419993][T15446] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13329] was attempted by ""[15446] [ 1088.010638][T15460] block nbd0: NBD_DISCONNECT [ 1088.803310][T15464] program syz.3.2802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1089.250016][T15481] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14033] was attempted by ""[15481] [ 1091.175161][T15491] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1091.518594][T15494] program syz.1.2813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1091.754491][T15498] block nbd2: NBD_DISCONNECT [ 1093.772615][T15518] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13728] was attempted by ""[15518] [ 1095.682737][T15535] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1098.447942][T15559] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14033] was attempted by ""[15559] [ 1099.209531][T15570] netem: change failed [ 1100.463114][T15580] tipc: Started in network mode [ 1100.474993][T15580] tipc: Node identity 7f000001, cluster identity 4711 [ 1100.528105][T15580] tipc: New replicast peer: 127.0.0.2 [ 1100.543956][T15580] tipc: Enabled bearer , priority 10 [ 1100.557536][T15586] tipc: Disabling bearer [ 1100.811380][T15592] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14033] was attempted by ""[15592] [ 1103.849247][ T5785] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 1104.946674][T15627] 9pnet_fd: p9_fd_create_tcp (15627): problem connecting socket to 127.0.0.1 [ 1105.050556][T15629] fuse: Unknown parameter 'group_i00000000000000000000' [ 1108.742041][T15659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1110.506969][T15682] program syz.2.2868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1110.854876][T15688] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1111.231052][T15695] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13329] was attempted by ""[15695] [ 1112.024088][T15703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1112.616931][T15715] program syz.3.2879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1114.831190][T15740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1114.945715][T15743] program syz.3.2889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1115.159153][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'. [ 1116.231501][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.241460][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.583677][T15762] block nbd1: NBD_DISCONNECT [ 1117.521581][T15775] program syz.1.2898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1117.639975][T15783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1119.229390][T15800] block nbd1: NBD_DISCONNECT [ 1119.695460][T15809] program syz.2.2910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1120.049911][T15814] 9pnet_fd: p9_fd_create_tcp (15814): problem connecting socket to 127.0.0.1 [ 1123.016807][T15842] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13728] was attempted by ""[15842] [ 1123.314463][T15844] block nbd0: NBD_DISCONNECT [ 1123.655920][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2923'. [ 1128.726882][T15887] 9pnet_fd: p9_fd_create_tcp (15887): problem connecting socket to 127.0.0.1 [ 1132.934458][T15942] fuse: Bad value for 'fd' [ 1134.870191][T15972] fuse: Bad value for 'fd' [ 1137.060982][T16007] fuse: Bad value for 'fd' [ 1138.459026][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2979'. [ 1138.513420][T16026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1138.559128][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2978'. [ 1139.528028][T13283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1139.538193][T13283] CPU: 0 PID: 13283 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1139.545868][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1139.555949][T13283] Workqueue: hci3 hci_rx_work [ 1139.560803][T13283] Call Trace: [ 1139.564147][T13283] [ 1139.567146][T13283] dump_stack_lvl+0x18c/0x250 [ 1139.571956][T13283] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1139.577732][T13283] ? show_regs_print_info+0x20/0x20 [ 1139.582944][T13283] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1139.588631][T13283] sysfs_create_dir_ns+0x26e/0x2a0 [ 1139.593814][T13283] ? __lock_acquire+0x7d80/0x7d80 [ 1139.598905][T13283] ? sysfs_warn_dup+0xa0/0xa0 [ 1139.603622][T13283] ? do_raw_spin_unlock+0x121/0x230 [ 1139.608880][T13283] kobject_add_internal+0x617/0xc90 [ 1139.614255][T13283] kobject_add+0x164/0x240 [ 1139.618716][T13283] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1139.624398][T13283] ? kobject_init+0x1d0/0x1d0 [ 1139.629138][T13283] device_add+0x3fa/0xc40 [ 1139.633546][T13283] hci_conn_add_sysfs+0xd5/0x1e0 [ 1139.638596][T13283] le_conn_complete_evt+0xe9f/0x1480 [ 1139.643969][T13283] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1139.650271][T13283] ? lockdep_hardirqs_on+0x98/0x150 [ 1139.655513][T13283] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1139.661188][T13283] ? hci_le_meta_evt+0x4d/0x560 [ 1139.666060][T13283] ? skb_pull_data+0xf0/0x1f0 [ 1139.670825][T13283] hci_le_conn_complete_evt+0x187/0x440 [ 1139.676397][T13283] ? hci_remote_host_features_evt+0x150/0x150 [ 1139.682481][T13283] hci_event_packet+0x7b4/0x1280 [ 1139.687445][T13283] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1139.693106][T13283] ? bis_list+0x290/0x290 [ 1139.697459][T13283] ? kcov_remote_start+0x1b5/0x7e0 [ 1139.702617][T13283] ? hci_send_to_monitor+0xd7/0x4f0 [ 1139.707839][T13283] hci_rx_work+0x43a/0xd60 [ 1139.712301][T13283] ? process_scheduled_works+0x975/0x1600 [ 1139.718103][T13283] process_scheduled_works+0xa60/0x1600 [ 1139.723718][T13283] ? worker_attach_to_pool+0x370/0x370 [ 1139.729208][T13283] ? assign_work+0x3cc/0x5d0 [ 1139.733831][T13283] worker_thread+0xa5e/0xfe0 [ 1139.738448][T13283] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1139.744466][T13283] ? _raw_spin_unlock+0x40/0x40 [ 1139.749427][T13283] ? __kthread_parkme+0x71/0x1c0 [ 1139.754394][T13283] kthread+0x2fa/0x390 [ 1139.758480][T13283] ? pr_cont_work+0x550/0x550 [ 1139.763179][T13283] ? kthread_blkcg+0xd0/0xd0 [ 1139.767785][T13283] ret_from_fork+0x48/0x80 [ 1139.772263][T13283] ? kthread_blkcg+0xd0/0xd0 [ 1139.776895][T13283] ret_from_fork_asm+0x11/0x20 [ 1139.781709][T13283] [ 1139.793818][T13283] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1139.808787][T13283] Bluetooth: hci3: failed to register connection device [ 1139.818304][T16040] fuse: Bad value for 'fd' [ 1141.302599][ T5833] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1141.396665][T16071] fuse: Bad value for 'fd' [ 1141.514490][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1141.527522][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1141.555355][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 25977, setting to 1024 [ 1141.952567][T13283] Bluetooth: hci3: command 0x0406 tx timeout [ 1141.973417][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1142.462302][ T5833] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1142.509257][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.533550][ T5833] usb 4-1: Product: syz [ 1142.540017][ T5833] usb 4-1: Manufacturer: syz [ 1142.769882][ T5833] usb 4-1: SerialNumber: syz [ 1142.778159][ T5833] usb 4-1: config 0 descriptor?? [ 1142.810764][T16056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1142.983666][ T5833] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1143.493958][T16056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.533011][T16056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.623384][ T5833] scsi host1: usb-storage 4-1:0.0 [ 1143.637952][ T5833] usb 4-1: USB disconnect, device number 7 [ 1145.068588][T16115] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1148.281161][T16162] fuse: Invalid rootmode [ 1149.142184][T16175] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1153.343929][T16222] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1157.760795][T16264] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1160.727929][T16298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1161.713863][T16306] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1163.750202][T16332] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1163.763987][T11848] Bluetooth: hci1: Frame reassembly failed (-84) [ 1164.895568][T16344] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1165.782769][T13283] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1169.653231][ T1201] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1169.835478][ T1201] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1170.945504][ T1201] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1171.739842][T16387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1171.970131][ T1201] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1171.982708][ T1201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.990740][ T1201] usb 2-1: Product: syz [ 1171.998274][ T1201] usb 2-1: Manufacturer: syz [ 1172.002982][ T1201] usb 2-1: SerialNumber: syz [ 1173.615928][ T1201] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1173.638777][ T1201] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1173.654419][ T1201] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1173.667053][ T1201] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1173.708670][T16411] autofs4:pid:16411:autofs_fill_super: called with bogus options [ 1173.716531][ T1201] usb 2-1: USB disconnect, device number 14 [ 1173.870749][T16382] udevd[16382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1176.218074][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1177.546535][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.558919][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.591070][T16470] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1181.457430][ T5785] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 1183.810610][T16514] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1184.915382][T16527] fuse: Unknown parameter 'user_i00000000000000000000' [ 1186.705348][ T5785] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 1189.127093][T16555] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1190.404148][T16564] program syz.1.3142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1193.384816][T16588] 9pnet_fd: p9_fd_create_tcp (16588): problem connecting socket to 127.0.0.1 [ 1195.734226][T16598] fuse: Unknown parameter 'user_id00000000000000000000' [ 1199.035076][T16627] 9pnet_fd: p9_fd_create_tcp (16627): problem connecting socket to 127.0.0.1 [ 1200.425448][T16635] fuse: Unknown parameter 'user_id00000000000000000000' [ 1204.559531][T16669] 9pnet_fd: p9_fd_create_tcp (16669): problem connecting socket to 127.0.0.1 [ 1205.521338][T16674] fuse: Unknown parameter 'user_id00000000000000000000' [ 1209.498826][T16716] 9pnet_fd: p9_fd_create_tcp (16716): problem binding to privport [ 1214.625646][T16750] 9pnet_fd: p9_fd_create_tcp (16750): problem binding to privport [ 1219.129669][T16791] 9pnet_fd: p9_fd_create_tcp (16791): problem binding to privport [ 1224.632652][ T173] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1224.842676][ T173] usb 3-1: Using ep0 maxpacket: 16 [ 1224.856170][ T173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.875432][ T173] usb 3-1: config 0 has no interfaces? [ 1224.888507][ T173] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1224.909035][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.932730][ T173] usb 3-1: config 0 descriptor?? [ 1225.149653][T16820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.178136][T16820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.208650][ T5813] usb 3-1: USB disconnect, device number 13 [ 1225.559979][T16829] 9pnet_fd: p9_fd_create_tcp (16829): problem binding to privport [ 1230.837182][T16869] 9pnet_fd: p9_fd_create_tcp (16869): problem binding to privport [ 1234.748459][T16900] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1239.173846][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.180194][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.414386][T16942] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1241.648115][T16946] block nbd0: NBD_DISCONNECT [ 1242.835603][ T5785] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1243.162783][T16956] program syz.0.3243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1244.628245][T16975] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1246.876115][T16984] fuse: Unknown parameter '0x0000000000000004' [ 1246.947678][T16986] block nbd3: NBD_DISCONNECT [ 1247.448135][T13283] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 1250.426701][T17010] block nbd0: NBD_DISCONNECT [ 1252.440785][T17019] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1252.737011][T17026] fuse: Unknown parameter 'fd0x0000000000000004' [ 1252.866022][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1255.243509][T17053] block nbd3: NBD_DISCONNECT [ 1256.512079][T17060] fuse: Unknown parameter 'fd0x0000000000000004' [ 1256.632940][T17063] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1260.861171][T17096] fuse: Unknown parameter 'fd0x0000000000000004' [ 1261.122760][T17098] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1266.418702][T17110] block nbd0: NBD_DISCONNECT [ 1267.453122][T17144] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1274.871917][T17193] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1275.018431][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1278.828934][ T23] IPVS: starting estimator thread 0... [ 1279.612065][T17225] IPVS: using max 35 ests per chain, 84000 per kthread [ 1279.689439][T17224] block nbd2: NBD_DISCONNECT [ 1282.125665][T17241] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1288.284009][T17284] fuse: Bad value for 'fd' [ 1288.405485][T17284] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1290.879246][T13283] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 1293.288135][T17313] block nbd0: NBD_DISCONNECT [ 1296.487122][T17347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1296.960606][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3348'. [ 1300.425090][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.431446][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.620569][T17415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.632196][T17415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.667635][T17447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1311.956378][T17460] block nbd1: NBD_DISCONNECT [ 1319.189285][T17514] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1321.922724][ T173] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1322.811906][ T173] usb 2-1: config 254 has an invalid interface number: 114 but max is 0 [ 1322.829601][ T173] usb 2-1: config 254 has no interface number 0 [ 1323.730535][ T173] usb 2-1: config 254 interface 114 has no altsetting 0 [ 1324.594221][ T173] usb 2-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=5d.1c [ 1324.604096][ T173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.612301][ T173] usb 2-1: Product: syz [ 1324.616895][ T173] usb 2-1: Manufacturer: syz [ 1324.622590][ T173] usb 2-1: SerialNumber: syz [ 1324.728583][ T173] usb 2-1: can't set config #254, error -71 [ 1324.758962][ T173] usb 2-1: USB disconnect, device number 15 [ 1324.998598][T17563] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1325.940037][T17572] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13329] was attempted by ""[17572] [ 1327.236713][T17588] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1329.222717][T13283] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1329.619180][T17607] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1330.675884][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1331.353558][T17624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3432'. [ 1334.077778][T17489] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1334.316939][T17489] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.418418][T17489] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1334.501436][T17489] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1334.594873][T17489] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1334.714011][T17489] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1334.790693][T17489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.105905][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 1335.794257][T17489] gud 4-1:1.0: No supported pixel formats found [ 1335.801864][T17489] gud: probe of 4-1:1.0 failed with error -22 [ 1335.963823][T17670] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1338.056248][ T5813] usb 4-1: USB disconnect, device number 8 [ 1340.572570][T17699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1342.643030][T17489] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1342.962838][T17489] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1343.341056][T17489] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1343.563791][T17489] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1343.628623][T17489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.704733][T17489] usb 3-1: Product: syz [ 1343.747971][T17489] usb 3-1: Manufacturer: syz [ 1343.760206][T17489] usb 3-1: SerialNumber: syz [ 1343.977328][T17587] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 1344.845821][T17489] usb 3-1: config 0 descriptor?? [ 1344.851824][T17717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1344.860278][T17717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1345.191158][T17489] dm9601: probe of 3-1:0.0 failed with error -71 [ 1345.371880][T17489] usb 3-1: USB disconnect, device number 14 [ 1345.407796][T17746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1346.113697][T17753] Bluetooth: MGMT ver 1.22 [ 1346.439557][T17759] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14033] was attempted by ""[17759] [ 1348.365948][T17776] kAFS: Can only specify source 'none' with -o dyn [ 1348.492724][T17778] input: syz1 as /devices/virtual/input/input12 [ 1350.514905][T17792] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14370] was attempted by ""[17792] [ 1350.538024][T17792] 9pnet_fd: Insufficient options for proto=fd [ 1352.364131][T17804] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1354.272213][T17826] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[13728] was attempted by ""[17826] [ 1354.296415][T17826] 9pnet_fd: Insufficient options for proto=fd [ 1354.977541][T17833] block nbd1: NBD_DISCONNECT [ 1359.712378][T17868] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14370] was attempted by ""[17868] [ 1359.739188][T17868] 9pnet_fd: Insufficient options for proto=fd [ 1361.869768][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.877304][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.102882][T17885] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1362.390470][ T9088] Bluetooth: hci1: Frame reassembly failed (-84) [ 1363.393630][T17894] block nbd3: NBD_DISCONNECT [ 1364.104220][T17587] Bluetooth: hci1: command 0x1003 tx timeout [ 1364.112682][T13283] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1369.969412][T17945] block nbd2: NBD_DISCONNECT [ 1370.990520][T17955] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1373.811875][T17975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1377.691836][T17998] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1384.251831][T18066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1385.961349][T18083] block nbd1: NBD_DISCONNECT [ 1386.064373][T18085] kAFS: Can only specify source 'none' with -o dyn [ 1386.124853][T18087] input: syz1 as /devices/virtual/input/input13 [ 1388.921198][T18113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3578'. [ 1389.146967][T18115] block nbd3: NBD_DISCONNECT [ 1390.873873][T18127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1392.134347][T18144] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1392.359481][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3593'. [ 1392.378773][T18148] ip6gre1: entered promiscuous mode [ 1392.385396][T18148] ip6gre1: entered allmulticast mode [ 1394.904397][T18177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1394.923240][T18179] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1396.317729][T18210] netlink: 'syz.1.3613': attribute type 2 has an invalid length. [ 1396.625069][T18216] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1398.277043][T18230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1399.352461][ T1147] Bluetooth: hci1: Frame reassembly failed (-84) [ 1401.382699][T17587] Bluetooth: hci1: command 0x1003 tx timeout [ 1401.389817][T13283] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1404.045179][T18287] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1404.970545][ T9088] Bluetooth: hci1: Frame reassembly failed (-84) [ 1406.985184][T17587] Bluetooth: hci1: command 0x1003 tx timeout [ 1407.165600][T13283] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1412.038644][T18367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1412.803032][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1414.231222][T18392] block nbd2: NBD_DISCONNECT [ 1416.932950][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1417.928835][T18449] block nbd0: NBD_DISCONNECT [ 1421.874520][T18481] block nbd3: NBD_DISCONNECT [ 1423.316176][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.323468][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.345497][T18524] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1425.382877][T18526] block nbd2: NBD_DISCONNECT [ 1427.159393][T18548] kAFS: Can only specify source 'none' with -o dyn [ 1427.836066][T18552] input: syz1 as /devices/virtual/input/input14 [ 1427.842572][T18552] input: failed to attach handler leds to device input14, error: -6 [ 1429.380531][T18565] block nbd3: NBD_DISCONNECT [ 1434.542360][T18597] block nbd2: NBD_DISCONNECT [ 1459.457444][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'. [ 1463.333684][T18796] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1474.500180][T18876] binder: 18873:18876 ioctl 4018620d 0 returned -22 [ 1476.883174][T18902] kAFS: Can only specify source 'none' with -o dyn [ 1477.623975][T18905] input: syz1 as /devices/virtual/input/input15 [ 1477.996433][T18857] udevd[18857]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1481.456508][T18937] binder: 18936:18937 ioctl 4018620d 0 returned -22 [ 1481.843158][T18941] kAFS: Can only specify source 'none' with -o dyn [ 1481.914323][T18942] input: syz1 as /devices/virtual/input/input17 [ 1485.085609][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.102591][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.051767][T18965] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.069656][T18965] binder: 18964:18965 ioctl 4018620d 200000001000 returned -16 [ 1490.190809][T19002] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[14033] was attempted by ""[19002] [ 1492.696422][T19008] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1503.747481][T19104] block nbd0: NBD_DISCONNECT [ 1511.182884][T19137] block nbd0: NBD_DISCONNECT [ 1518.014851][T19173] netlink: 'syz.2.3905': attribute type 1 has an invalid length. [ 1518.075529][T19173] netlink: 'syz.2.3905': attribute type 2 has an invalid length. [ 1519.422605][ T5761] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1520.082892][ T5761] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1520.143512][ T5761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1520.249755][ T5761] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1520.329161][ T5761] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1521.517433][ T5761] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1521.530563][ T5761] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1521.626936][ T5761] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 1521.672591][ T5761] usb 4-1: can't read configurations, error -71 [ 1527.978699][T19236] syz.1.3919[19236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1527.978992][T19236] syz.1.3919[19236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1532.437397][T19269] tipc: Started in network mode [ 1532.453978][T19269] tipc: Node identity 4, cluster identity 4711 [ 1532.460221][T19269] tipc: Node number set to 4 [ 1533.805593][T19272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3926'. [ 1541.664908][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1546.187695][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.194323][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.485437][T19398] zswap: compressor w not available [ 1562.666251][T19455] block nbd0: NBD_DISCONNECT [ 1563.525886][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1568.924956][T19511] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1581.862939][T19597] binder: 19596:19597 ioctl 4018620d 0 returned -22 [ 1589.916970][T19678] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 1606.738609][T19815] tipc: Started in network mode [ 1606.753399][T19815] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 1606.763763][T19815] tipc: Enabling of bearer rejected, failed to enable media [ 1607.953380][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.959693][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.615395][T19857] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1618.163463][T19908] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1619.925862][T13283] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 1620.783503][T19927] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1622.912955][T19948] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1624.657593][T19967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.670400][T19967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.566228][T20011] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1631.572888][T20011] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1631.647121][T20011] vhci_hcd vhci_hcd.0: Device attached [ 1631.773224][T20019] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 1631.779785][T20019] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1631.791039][T20019] vhci_hcd vhci_hcd.0: Device attached [ 1631.809075][T20025] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 1631.815611][T20025] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1632.142654][ T5761] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1632.197649][T20025] vhci_hcd vhci_hcd.0: Device attached [ 1632.692936][T20027] vhci_hcd: connection closed [ 1632.715229][T20021] vhci_hcd: connection closed [ 1632.720227][T20012] vhci_hcd: connection reset by peer [ 1632.726562][ T9096] vhci_hcd: stop threads [ 1632.801685][ T9096] vhci_hcd: release socket [ 1632.807030][ T9096] vhci_hcd: disconnect device [ 1632.811981][ T9096] vhci_hcd: stop threads [ 1632.818327][ T9096] vhci_hcd: release socket [ 1632.838274][ T9096] vhci_hcd: disconnect device [ 1632.866040][ T9096] vhci_hcd: stop threads [ 1632.882600][ T9096] vhci_hcd: release socket [ 1632.896734][ T9096] vhci_hcd: disconnect device [ 1637.624963][ T5761] vhci_hcd: vhci_device speed not set [ 1645.147500][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1645.849904][T20126] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1649.964783][T20162] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1650.769207][T20172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.887752][T20172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.615689][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1653.791902][T20197] sg_write: data in/out 896512/136 bytes for SCSI command 0x0-- guessing data in; [ 1653.791902][T20197] program syz.0.4193 not setting count and/or reply_len properly [ 1654.301666][T20202] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1654.334622][T20203] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1654.703951][T20212] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1655.891464][T20220] device-mapper: ioctl: Invalid ioctl structure: name mypo, dev f800 [ 1657.596499][T17587] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 1658.133233][T20238] Bluetooth: hci0: unsupported parameter 255 [ 1658.139288][T20238] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1658.469569][T20242] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1659.743362][T20253] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1662.636572][T20279] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1667.177764][T20313] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1667.504280][T20315] Bluetooth: hci0: unsupported parameter 255 [ 1667.510331][T20315] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1668.524601][T20323] Bluetooth: hci0: unsupported parameter 255 [ 1668.530649][T20323] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1668.565958][T20327] sg_write: data in/out 241152/136 bytes for SCSI command 0x0-- guessing data in; [ 1668.565958][T20327] program syz.1.4229 not setting count and/or reply_len properly [ 1669.147768][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.154436][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.922690][T20333] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 1669.989059][T20343] kAFS: Can only specify source 'none' with -o dyn [ 1670.066880][T20346] input: syz1 as /devices/virtual/input/input18 [ 1670.206982][T20348] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1671.092101][T20356] Bluetooth: hci0: unsupported parameter 255 [ 1671.169097][T20356] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1673.358037][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1674.061697][T20382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1679.161017][T20404] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1679.378881][T20408] Bluetooth: hci0: unsupported parameter 255 [ 1679.385079][T20408] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1682.118475][T13283] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 1683.093543][T20436] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1684.595052][T20451] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1685.644689][T13283] Bluetooth: hci2: ACL packet for unknown connection handle 3439 [ 1686.514671][T20474] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1687.698534][T20486] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1689.983984][T20505] sg_write: data in/out 830976/136 bytes for SCSI command 0x0-- guessing data in; [ 1689.983984][T20505] program syz.2.4280 not setting count and/or reply_len properly [ 1690.568915][T20508] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1694.066703][T20531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1696.878473][T20554] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1699.599456][T20577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1701.197812][T20598] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 1701.208506][T20599] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1705.036434][T20624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1707.995642][ T5777] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1708.057042][ T5777] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1709.264088][T20646] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1709.920456][T20665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.503170][T20675] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1711.558886][T20676] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1718.553380][T20748] sg_write: data in/out 634368/136 bytes for SCSI command 0x0-- guessing data in; [ 1718.553380][T20748] program syz.0.4356 not setting count and/or reply_len properly [ 1722.080541][T20796] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1722.502931][T20801] kAFS: Can only specify source 'none' with -o dyn [ 1723.226911][T20801] input: syz1 as /devices/virtual/input/input19 [ 1723.355646][T20803] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 1723.355646][T20803] program syz.0.4369 not setting count and/or reply_len properly [ 1729.759258][T20836] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1729.951234][T20839] kAFS: Can only specify source 'none' with -o dyn [ 1729.972081][T20839] input: syz1 as /devices/virtual/input/input20 [ 1731.294010][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.301108][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.528574][T20873] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1733.566271][T20875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.580826][T20875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.643697][T20878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4391'. [ 1735.923287][T20914] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1736.269789][T20924] kAFS: Can only specify source 'none' with -o dyn [ 1736.285779][T20924] input: syz1 as /devices/virtual/input/input21 [ 1739.321940][T20961] kAFS: Can only specify source 'none' with -o dyn [ 1739.335362][T20961] input: syz1 as /devices/virtual/input/input22 [ 1739.879268][ T5782] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1740.631642][ T5782] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.657979][ T5782] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1740.883501][ T5782] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1740.895986][ T5782] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1740.913932][ T5782] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1741.301622][T20982] hpfs: Bad magic ... probably not HPFS [ 1741.313256][T20982] hpfs: Bad magic ... probably not HPFS [ 1741.333080][ T5782] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1741.342458][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.351123][ T5782] usb 4-1: Product: syz [ 1741.356359][ T5782] usb 4-1: Manufacturer: syz [ 1742.685541][ T5782] usb 4-1: SerialNumber: syz [ 1742.824889][ T5782] usb 4-1: can't set config #1, error -71 [ 1742.839488][ T5782] usb 4-1: USB disconnect, device number 11 [ 1743.039107][T21003] input: syz1 as /devices/virtual/input/input23 [ 1743.236463][T21002] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1745.009487][T21017] syz.1.4432 (21017) used greatest stack depth: 17288 bytes left [ 1747.231704][T21037] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1752.335695][T21074] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1754.741408][T21091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1755.649893][T21105] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1759.488871][T21140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1759.603022][T21145] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1759.633418][ T5777] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1760.852725][ T5777] usb 3-1: Using ep0 maxpacket: 16 [ 1760.869852][ T5777] usb 3-1: config 0 has no interfaces? [ 1761.561659][ T5777] usb 3-1: string descriptor 0 read error: -71 [ 1761.582161][ T5777] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1761.592018][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1761.609551][ T5777] usb 3-1: config 0 descriptor?? [ 1761.615125][ T5777] usb 3-1: can't set config #0, error -71 [ 1761.623347][ T5777] usb 3-1: USB disconnect, device number 15 [ 1762.699777][T21173] tipc: Started in network mode [ 1762.706019][T21173] tipc: Node identity 4, cluster identity 4711 [ 1762.712408][T21173] tipc: Node number set to 4 [ 1763.868615][T21179] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1765.872435][T21197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4486'. [ 1765.958728][T21197] FAULT_INJECTION: forcing a failure. [ 1765.958728][T21197] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1765.984923][T21197] CPU: 1 PID: 21197 Comm: syz.3.4486 Not tainted syzkaller #0 [ 1765.992440][T21197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1766.002527][T21197] Call Trace: [ 1766.005812][T21197] [ 1766.008746][T21197] dump_stack_lvl+0x18c/0x250 [ 1766.013472][T21197] ? show_regs_print_info+0x20/0x20 [ 1766.018705][T21197] ? load_image+0x420/0x420 [ 1766.023281][T21197] ? __might_fault+0xaa/0x120 [ 1766.028019][T21197] ? __lock_acquire+0x7d80/0x7d80 [ 1766.033077][T21197] should_fail_ex+0x394/0x4c0 [ 1766.037837][T21197] _copy_from_user+0x2f/0xe0 [ 1766.042460][T21197] __sys_bpf+0x23e/0x890 [ 1766.046772][T21197] ? bpf_link_show_fdinfo+0x390/0x390 [ 1766.052200][T21197] ? lock_chain_count+0x20/0x20 [ 1766.057106][T21197] __x64_sys_bpf+0x7c/0x90 [ 1766.061587][T21197] do_syscall_64+0x55/0xb0 [ 1766.066032][T21197] ? clear_bhb_loop+0x40/0x90 [ 1766.070740][T21197] ? clear_bhb_loop+0x40/0x90 [ 1766.075448][T21197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1766.081385][T21197] RIP: 0033:0x7f2fe359e0d9 [ 1766.085838][T21197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.105639][T21197] RSP: 002b:00007f2fe4464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1766.114177][T21197] RAX: ffffffffffffffda RBX: 00007f2fe3826090 RCX: 00007f2fe359e0d9 [ 1766.122206][T21197] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1766.130210][T21197] RBP: 00007f2fe3635024 R08: 0000000000000000 R09: 0000000000000000 [ 1766.138207][T21197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1766.146207][T21197] R13: 00007f2fe3826128 R14: 00007f2fe3826090 R15: 00007ffd52920eb8 [ 1766.154218][T21197] [ 1766.709291][T21211] tipc: Cannot configure node identity twice [ 1770.237919][T21232] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1770.824321][T21235] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1772.978327][T21248] binder: BINDER_SET_CONTEXT_MGR already set [ 1773.022685][T21248] binder: 21246:21248 ioctl 4018620d 200000000040 returned -16 [ 1774.433968][T21260] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1775.297104][T21268] tipc: Cannot configure node identity twice [ 1776.106785][T21273] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1786.269913][T21337] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1787.915658][T21355] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1789.857751][T21371] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1792.284487][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.292048][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.418236][T21422] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1799.533058][T21442] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1801.198350][T21471] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1804.153140][T21499] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 1806.051505][T21512] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1809.134449][T21533] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1810.135594][T21541] sg_write: data in/out 765440/136 bytes for SCSI command 0x0-- guessing data in; [ 1810.135594][T21541] program syz.0.4595 not setting count and/or reply_len properly [ 1810.310668][T21545] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1810.603170][T21549] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1812.734788][T21577] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1812.812273][T21582] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1812.904495][T21584] sg_write: data in/out 765440/136 bytes for SCSI command 0x0-- guessing data in; [ 1812.904495][T21584] program syz.1.4607 not setting count and/or reply_len properly [ 1816.991377][T21613] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1818.993450][T21627] sg_write: data in/out 765440/136 bytes for SCSI command 0x0-- guessing data in; [ 1818.993450][T21627] program syz.0.4622 not setting count and/or reply_len properly [ 1819.230448][T21628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1819.934270][T17587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1819.954307][T17587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1819.963951][T17587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1819.972281][T17587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1819.980762][T17587] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1819.992259][T17587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1820.300116][T21641] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1821.260262][T21632] chnl_net:caif_netlink_parms(): no params data found [ 1821.414627][T21654] kAFS: Can only specify source 'none' with -o dyn [ 1821.439382][T21654] input: syz1 as /devices/virtual/input/input24 [ 1821.559573][T21632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.577499][T21632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.595634][T21632] bridge_slave_0: entered allmulticast mode [ 1821.613404][T21632] bridge_slave_0: entered promiscuous mode [ 1821.632323][T21632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.642622][T21632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.660409][T21632] bridge_slave_1: entered allmulticast mode [ 1821.684238][T21632] bridge_slave_1: entered promiscuous mode [ 1821.788256][T21632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1821.801950][T21632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1821.893599][T21663] sg_write: data in/out 765440/136 bytes for SCSI command 0x0-- guessing data in; [ 1821.893599][T21663] program syz.0.4631 not setting count and/or reply_len properly [ 1822.114368][T17587] Bluetooth: hci1: command tx timeout [ 1822.314173][T21632] team0: Port device team_slave_0 added [ 1822.430582][T21632] team0: Port device team_slave_1 added [ 1822.533558][T21632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.766783][T21632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1823.802581][T21632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.839182][T21632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.859660][T21632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1823.902293][T21632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1824.033181][T21632] hsr_slave_0: entered promiscuous mode [ 1824.040106][T21632] hsr_slave_1: entered promiscuous mode [ 1824.055616][T21632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1824.078272][T21632] Cannot create hsr debugfs directory [ 1824.187032][T17587] Bluetooth: hci1: command tx timeout [ 1826.270514][T17587] Bluetooth: hci1: command tx timeout [ 1826.341881][T21632] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.440275][T21686] sg_write: data in/out 765440/136 bytes for SCSI command 0x0-- guessing data in; [ 1826.440275][T21686] program syz.2.4640 not setting count and/or reply_len properly [ 1827.106194][T21632] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.371726][T17587] Bluetooth: hci1: command tx timeout [ 1828.501244][T21692] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1828.510759][T21632] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.949867][T21698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1829.295904][T21632] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.988789][T21632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1830.009849][T21632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1830.034523][T21632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1830.058529][T21632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1830.259361][T21632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.307252][T21632] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.400715][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.407942][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1831.283835][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.291071][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1831.351786][T21632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1832.679394][T21632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1832.776844][T21632] veth0_vlan: entered promiscuous mode [ 1832.835364][T21632] veth1_vlan: entered promiscuous mode [ 1832.904107][T21632] veth0_macvtap: entered promiscuous mode [ 1832.925175][T21632] veth1_macvtap: entered promiscuous mode [ 1832.974773][T21632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1833.757513][T21632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1833.811133][T21632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1833.822885][T21632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1833.833184][T21632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1833.878008][T21632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1833.903662][T21632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1833.928225][T21632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1833.963090][T21632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1834.007166][T21632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.303984][T21632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.342831][T21632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.355498][T21632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.365656][T21632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.382631][T21632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.402627][T21632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1835.438529][T21632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.464598][T21632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.516474][T21632] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.542927][T21632] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.551702][T21632] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.593732][T21632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.790520][ T9088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.829705][ T9088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1835.895761][T21737] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1835.910907][T21572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.935323][T21572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.160857][T21741] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1840.462149][T21769] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1841.444289][T21777] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1850.688158][T21835] dummy0: entered promiscuous mode [ 1850.737604][T21834] dummy0: left promiscuous mode [ 1852.245333][T21845] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1852.332865][T21848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4686'. [ 1852.397180][T21847] nbd0: detected capacity change from 0 to 63 [ 1852.415198][T20470] block nbd0: Receive control failed (result -32) [ 1852.457814][T21180] block nbd0: Dead connection, failed to find a fallback [ 1852.465513][T21180] block nbd0: shutting down sockets [ 1852.471251][T21180] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1852.483675][T21180] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1852.585691][ T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1852.594936][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1852.603341][ T55] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1852.611120][ T55] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1852.623095][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1852.632185][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1852.640616][ T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1852.650055][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1852.658206][ T55] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1852.666338][ T55] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1852.674615][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1852.683988][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1852.691972][ T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1852.701632][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1852.954398][T21180] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1852.968053][T21180] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1852.982950][T21180] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1852.993868][T21180] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1853.026551][T21851] ldm_validate_partition_table(): Disk read failed. [ 1854.444813][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.451143][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.486634][T21851] Dev nbd0: unable to read RDB block 0 [ 1854.550850][T21851] nbd0: unable to read partition table [ 1854.594356][T21851] ldm_validate_partition_table(): Disk read failed. [ 1854.628937][T21851] Dev nbd0: unable to read RDB block 0 [ 1854.645389][T21851] nbd0: unable to read partition table [ 1854.734344][T21865] nbd1: detected capacity change from 0 to 63 [ 1854.779522][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4690'. [ 1854.799341][T21869] FAULT_INJECTION: forcing a failure. [ 1854.799341][T21869] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1854.818179][T21869] CPU: 1 PID: 21869 Comm: syz.2.4690 Not tainted syzkaller #0 [ 1854.825870][T21869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1854.836044][T21869] Call Trace: [ 1854.839351][T21869] [ 1854.842299][T21869] dump_stack_lvl+0x18c/0x250 [ 1854.847015][T21869] ? show_regs_print_info+0x20/0x20 [ 1854.852240][T21869] ? load_image+0x420/0x420 [ 1854.856786][T21869] should_fail_ex+0x394/0x4c0 [ 1854.861502][T21869] get_futex_key+0x136/0x1030 [ 1854.866210][T21869] ? verify_lock_unused+0x140/0x140 [ 1854.871452][T21869] ? futex_setup_timer+0xc0/0xc0 [ 1854.876424][T21869] futex_wait_setup+0xbc/0x270 [ 1854.881212][T21869] ? futex_wait_multiple+0x920/0x920 [ 1854.886531][T21869] futex_wait+0x1bc/0x5c0 [ 1854.890901][T21869] ? futex_setup_timer+0xc0/0xc0 [ 1854.895878][T21869] ? futex_wait_setup+0x270/0x270 [ 1854.900952][T21869] ? file_end_write+0x159/0x250 [ 1854.905865][T21869] ? vfs_write+0x5de/0x9a0 [ 1854.910839][T21869] do_futex+0x2ff/0x3e0 [ 1854.915033][T21869] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1854.920968][T21869] __se_sys_futex+0x3a9/0x440 [ 1854.925666][T21869] ? __x64_sys_futex+0xf0/0xf0 [ 1854.930456][T21869] ? __x64_sys_futex+0x21/0xf0 [ 1854.935234][T21869] do_syscall_64+0x55/0xb0 [ 1854.939646][T21869] ? clear_bhb_loop+0x40/0x90 [ 1854.944323][T21869] ? clear_bhb_loop+0x40/0x90 [ 1854.949008][T21869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1854.954910][T21869] RIP: 0033:0x7fe85739e0d9 [ 1854.959341][T21869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1854.978960][T21869] RSP: 002b:00007fe8582860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1854.987386][T21869] RAX: ffffffffffffffda RBX: 00007fe857626098 RCX: 00007fe85739e0d9 [ 1854.995393][T21869] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe857626098 [ 1855.003377][T21869] RBP: 00007fe857626090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.011345][T21869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1855.019319][T21869] R13: 00007fe857626128 R14: 00007ffcf3453750 R15: 00007ffcf3453838 [ 1855.027296][T21869] [ 1855.095004][T20470] block nbd1: Receive control failed (result -32) [ 1855.113811][ T55] block nbd1: Dead connection, failed to find a fallback [ 1855.120979][ T55] block nbd1: shutting down sockets [ 1855.141237][T21851] ldm_validate_partition_table(): Disk read failed. [ 1855.181130][T21851] Dev nbd1: unable to read RDB block 0 [ 1855.222426][T21851] nbd1: unable to read partition table [ 1855.308470][T21851] ldm_validate_partition_table(): Disk read failed. [ 1855.389281][T21851] Dev nbd1: unable to read RDB block 0 [ 1855.434559][T21851] nbd1: unable to read partition table [ 1855.838272][T21879] nbd2: detected capacity change from 0 to 63 [ 1855.912011][T21879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4696'. [ 1856.019558][T21882] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1856.072781][T20470] block nbd2: Receive control failed (result -104) [ 1857.243235][ T28] audit: type=1800 audit(1786077491.671:323): pid=21894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4699" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1857.593125][T21905] nbd3: detected capacity change from 0 to 63 [ 1857.628341][T21905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4702'. [ 1857.655909][T21905] FAULT_INJECTION: forcing a failure. [ 1857.655909][T21905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1857.689568][T21905] CPU: 0 PID: 21905 Comm: syz.0.4702 Not tainted syzkaller #0 [ 1857.697089][T21905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1857.707171][T21905] Call Trace: [ 1857.710483][T21905] [ 1857.713436][T21905] dump_stack_lvl+0x18c/0x250 [ 1857.718162][T21905] ? show_regs_print_info+0x20/0x20 [ 1857.723402][T21905] ? load_image+0x420/0x420 [ 1857.728032][T21905] ? __might_fault+0xaa/0x120 [ 1857.732752][T21905] ? __lock_acquire+0x7d80/0x7d80 [ 1857.737819][T21905] should_fail_ex+0x394/0x4c0 [ 1857.737855][T21905] _copy_from_user+0x2f/0xe0 [ 1857.737878][T21905] __sys_bpf+0x23e/0x890 [ 1857.737903][T21905] ? bpf_link_show_fdinfo+0x390/0x390 [ 1857.757252][T21905] ? lock_chain_count+0x20/0x20 [ 1857.757286][T21905] __x64_sys_bpf+0x7c/0x90 [ 1857.757304][T21905] do_syscall_64+0x55/0xb0 [ 1857.757321][T21905] ? clear_bhb_loop+0x40/0x90 [ 1857.757338][T21905] ? clear_bhb_loop+0x40/0x90 [ 1857.757354][T21905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1857.757371][T21905] RIP: 0033:0x7fb73219e0d9 [ 1857.757385][T21905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1857.757398][T21905] RSP: 002b:00007fb73311e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1857.757414][T21905] RAX: ffffffffffffffda RBX: 00007fb732425fa0 RCX: 00007fb73219e0d9 [ 1857.757425][T21905] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1857.757433][T21905] RBP: 00007fb732235024 R08: 0000000000000000 R09: 0000000000000000 [ 1857.757442][T21905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1857.757451][T21905] R13: 00007fb732426038 R14: 00007fb732425fa0 R15: 00007fff669deea8 [ 1857.757471][T21905] [ 1857.921136][T20470] block nbd3: Receive control failed (result -104) [ 1858.476662][T21915] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1861.757413][T21958] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1865.129927][T21990] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1865.248527][T21991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4727'. [ 1866.388371][T22004] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1866.397309][T22004] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1866.405959][T22004] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1867.631246][T22025] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1870.321087][T17587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1870.336364][T17587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1870.345539][T17587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1870.355898][T17587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1870.365291][T17587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1870.373218][T17587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1872.356915][T22041] chnl_net:caif_netlink_parms(): no params data found [ 1872.422854][T17587] Bluetooth: hci2: command tx timeout [ 1873.925252][T22041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.979413][T22041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.986899][T22041] bridge_slave_0: entered allmulticast mode [ 1874.003879][T22041] bridge_slave_0: entered promiscuous mode [ 1874.060681][T22041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.092905][T22041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1874.100173][T22041] bridge_slave_1: entered allmulticast mode [ 1874.124226][T22041] bridge_slave_1: entered promiscuous mode [ 1874.902726][T17587] Bluetooth: hci2: command tx timeout [ 1874.956288][T22041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1875.015251][T22041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1875.157309][T22041] team0: Port device team_slave_0 added [ 1875.195807][T22041] team0: Port device team_slave_1 added [ 1875.273858][T22041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1875.280846][T22041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1875.342865][T22041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1875.374861][T22041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1875.381847][T22041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1875.447561][T22041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1875.542408][T22073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1875.569363][T22041] hsr_slave_0: entered promiscuous mode [ 1875.603094][T22041] hsr_slave_1: entered promiscuous mode [ 1875.622632][T22041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1875.630265][T22041] Cannot create hsr debugfs directory [ 1878.112648][T17587] Bluetooth: hci2: command tx timeout [ 1878.161392][T22089] nbd4: detected capacity change from 0 to 63 [ 1878.181530][T22041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.193952][T17587] block nbd4: Receive control failed (result -104) [ 1878.226836][T22085] nbd5: detected capacity change from 0 to 63 [ 1878.238579][T22093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4760'. [ 1878.251327][T17587] block nbd5: Receive control failed (result -104) [ 1878.389608][T22041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.568354][T22041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.749369][T22041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.124436][T22041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1879.147240][T22041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1879.191613][T22041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1879.217395][T22041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1880.275062][T17587] Bluetooth: hci2: command tx timeout [ 1880.306093][T22041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1880.434028][T22041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1880.487323][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1880.494491][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1880.533993][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1880.541150][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.252245][T22041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1883.379329][T22041] veth0_vlan: entered promiscuous mode [ 1883.535779][T22041] veth1_vlan: entered promiscuous mode [ 1884.254173][T22041] veth0_macvtap: entered promiscuous mode [ 1884.271141][T22041] veth1_macvtap: entered promiscuous mode [ 1884.363288][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.407993][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.422218][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.432929][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.638617][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.686758][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.699012][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.712087][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.724453][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1884.737160][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1884.903703][T22041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1884.918893][T22134] nbd6: detected capacity change from 0 to 63 [ 1885.087689][T17587] block nbd6: Receive control failed (result -104) [ 1885.185706][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1885.232036][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.105335][ T55] block nbd2: Possible stuck request ffff8880221c0000: control (read@0,4096B). Runtime 30 seconds [ 1886.112779][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1886.127206][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.164150][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1886.199752][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.236036][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1886.262375][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.266409][T22145] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1886.289222][T22041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1886.319183][T22041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1886.351245][T22041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1886.414825][T22041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.442708][T22041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.451453][T22041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.467630][T22041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1887.850888][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4771'. [ 1887.915302][ T9096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1887.961365][T21180] block nbd3: Possible stuck request ffff888022220000: control (read@0,1024B). Runtime 30 seconds [ 1887.973853][T21180] block nbd3: Possible stuck request ffff888022220200: control (read@1024,1024B). Runtime 30 seconds [ 1887.985109][T21180] block nbd3: Possible stuck request ffff888022220400: control (read@2048,1024B). Runtime 30 seconds [ 1887.993053][ T9096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1887.996014][T21180] block nbd3: Possible stuck request ffff888022220600: control (read@3072,1024B). Runtime 30 seconds [ 1888.079430][ T9096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1888.103683][ T9096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1891.673181][T22176] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1891.954215][T22180] kAFS: Can only specify source 'none' with -o dyn [ 1892.027600][T22182] input: syz1 as /devices/virtual/input/input25 [ 1894.285138][T20470] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1894.303924][T22191] nbd7: detected capacity change from 0 to 63 [ 1894.329224][T13283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1894.338336][T13283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1894.349506][T13283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1894.358224][T13283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1894.368060][T13283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1894.402779][T22194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4789'. [ 1894.464442][T22191] FAULT_INJECTION: forcing a failure. [ 1894.464442][T22191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1894.542993][T22191] CPU: 1 PID: 22191 Comm: syz.3.4789 Not tainted syzkaller #0 [ 1894.550511][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1894.560590][T22191] Call Trace: [ 1894.563892][T22191] [ 1894.566838][T22191] dump_stack_lvl+0x18c/0x250 [ 1894.571548][T22191] ? show_regs_print_info+0x20/0x20 [ 1894.576770][T22191] ? load_image+0x420/0x420 [ 1894.581308][T22191] ? __might_fault+0xaa/0x120 [ 1894.586009][T22191] ? __lock_acquire+0x7d80/0x7d80 [ 1894.591061][T22191] should_fail_ex+0x394/0x4c0 [ 1894.595770][T22191] _copy_from_user+0x2f/0xe0 [ 1894.600392][T22191] __sys_bpf+0x23e/0x890 [ 1894.604661][T22191] ? bpf_link_show_fdinfo+0x390/0x390 [ 1894.610046][T22191] ? lock_chain_count+0x20/0x20 [ 1894.614904][T22191] __x64_sys_bpf+0x7c/0x90 [ 1894.619332][T22191] do_syscall_64+0x55/0xb0 [ 1894.623746][T22191] ? clear_bhb_loop+0x40/0x90 [ 1894.628448][T22191] ? clear_bhb_loop+0x40/0x90 [ 1894.633121][T22191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1894.639009][T22191] RIP: 0033:0x7ff18419e0d9 [ 1894.643426][T22191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1894.663037][T22191] RSP: 002b:00007ff1850e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1894.671482][T22191] RAX: ffffffffffffffda RBX: 00007ff184425fa0 RCX: 00007ff18419e0d9 [ 1894.679458][T22191] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1894.687438][T22191] RBP: 00007ff184235024 R08: 0000000000000000 R09: 0000000000000000 [ 1894.695427][T22191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1894.703455][T22191] R13: 00007ff184426038 R14: 00007ff184425fa0 R15: 00007ffe1e70b538 [ 1894.711442][T22191] [ 1894.736582][T20470] block nbd7: Receive control failed (result -104) [ 1894.874079][T22198] nbd8: detected capacity change from 0 to 63 [ 1894.910073][T20470] block nbd8: Receive control failed (result -104) [ 1895.161210][T22209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1895.161329][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1895.161442][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1895.161542][T22209] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1895.161564][T22209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1895.229598][T22192] chnl_net:caif_netlink_parms(): no params data found [ 1895.890493][T22212] Bluetooth: hci0: invalid length 0, exp 2 for type 24 [ 1896.001060][T22192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.001236][T22192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.001466][T22192] bridge_slave_0: entered allmulticast mode [ 1896.005791][T22192] bridge_slave_0: entered promiscuous mode [ 1896.008608][T22192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.008760][T22192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.008905][T22192] bridge_slave_1: entered allmulticast mode [ 1896.010188][T22192] bridge_slave_1: entered promiscuous mode [ 1896.045731][T22192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1896.100784][T22192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1896.149049][T22192] team0: Port device team_slave_0 added [ 1896.166962][T22223] kAFS: Can only specify source 'none' with -o dyn [ 1896.241816][T22226] input: syz1 as /devices/virtual/input/input26 [ 1896.422656][T20470] Bluetooth: hci3: command tx timeout [ 1896.436740][T22192] team0: Port device team_slave_1 added [ 1897.054134][T22192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1897.061124][T22192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1897.103584][T22192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1897.117361][T22192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1897.124667][T22192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1897.151023][T22192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1898.489843][T22192] hsr_slave_0: entered promiscuous mode [ 1898.503067][T20470] Bluetooth: hci3: command tx timeout [ 1898.520719][T22192] hsr_slave_1: entered promiscuous mode [ 1898.534840][T22192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1898.542447][T22192] Cannot create hsr debugfs directory [ 1898.574288][T22239] nbd9: detected capacity change from 0 to 63 [ 1898.603427][T22241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4799'. [ 1898.614307][T20470] block nbd9: Receive control failed (result -104) [ 1898.634327][T22240] nbd10: detected capacity change from 0 to 63 [ 1898.660347][T22241] FAULT_INJECTION: forcing a failure. [ 1898.660347][T22241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1898.711374][T22241] CPU: 1 PID: 22241 Comm: syz.1.4799 Not tainted syzkaller #0 [ 1898.718909][T22241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1898.729019][T22241] Call Trace: [ 1898.732308][T22241] [ 1898.735253][T22241] dump_stack_lvl+0x18c/0x250 [ 1898.739954][T22241] ? show_regs_print_info+0x20/0x20 [ 1898.745171][T22241] ? load_image+0x420/0x420 [ 1898.749704][T22241] ? __might_fault+0xaa/0x120 [ 1898.754407][T22241] ? __lock_acquire+0x7d80/0x7d80 [ 1898.759466][T22241] should_fail_ex+0x394/0x4c0 [ 1898.764180][T22241] _copy_from_user+0x2f/0xe0 [ 1898.768808][T22241] __sys_bpf+0x23e/0x890 [ 1898.773175][T22241] ? bpf_link_show_fdinfo+0x390/0x390 [ 1898.778592][T22241] ? lock_chain_count+0x20/0x20 [ 1898.783487][T22241] __x64_sys_bpf+0x7c/0x90 [ 1898.787930][T22241] do_syscall_64+0x55/0xb0 [ 1898.792368][T22241] ? clear_bhb_loop+0x40/0x90 [ 1898.797071][T22241] ? clear_bhb_loop+0x40/0x90 [ 1898.801780][T22241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1898.807703][T22241] RIP: 0033:0x7fd61eb9e0d9 [ 1898.812140][T22241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.831774][T22241] RSP: 002b:00007fd61f9fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1898.840220][T22241] RAX: ffffffffffffffda RBX: 00007fd61ee26090 RCX: 00007fd61eb9e0d9 [ 1898.848226][T22241] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1898.856224][T22241] RBP: 00007fd61ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 1898.864224][T22241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1898.872218][T22241] R13: 00007fd61ee26128 R14: 00007fd61ee26090 R15: 00007ffc1dcf6678 [ 1898.880236][T22241] [ 1898.912915][T20470] block nbd10: Receive control failed (result -104) [ 1898.950486][T22244] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 1899.019609][T22192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.221065][T22192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.432784][T22192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.172108][T22252] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1900.208761][T22252] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1900.247952][T22252] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1900.364384][T22192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.386418][T22257] kAFS: Can only specify source 'none' with -o dyn [ 1900.582610][T20470] Bluetooth: hci3: command tx timeout [ 1902.662741][T20470] Bluetooth: hci3: command tx timeout [ 1902.677474][T22192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1902.694219][T22192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1902.712289][T22192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1902.724781][T22192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1902.814589][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1902.849798][T22192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1902.889521][T22192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1902.921362][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.928588][ T9096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1902.960641][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.963843][T22272] nbd11: detected capacity change from 0 to 63 [ 1902.967824][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1903.024433][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1903.036052][T22272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4810'. [ 1903.042929][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1903.063017][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 1903.066206][T22272] FAULT_INJECTION: forcing a failure. [ 1903.066206][T22272] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1903.082379][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.095793][T22272] CPU: 0 PID: 22272 Comm: syz.3.4810 Not tainted syzkaller #0 [ 1903.103290][T22272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1903.113370][T22272] Call Trace: [ 1903.116673][T22272] [ 1903.119627][T22272] dump_stack_lvl+0x18c/0x250 [ 1903.124342][T22272] ? show_regs_print_info+0x20/0x20 [ 1903.129605][T22272] ? load_image+0x420/0x420 [ 1903.134162][T22272] should_fail_ex+0x394/0x4c0 [ 1903.138875][T22272] get_futex_key+0x136/0x1030 [ 1903.143578][T22272] ? verify_lock_unused+0x140/0x140 [ 1903.148811][T22272] ? futex_setup_timer+0xc0/0xc0 [ 1903.153802][T22272] futex_wait_setup+0xbc/0x270 [ 1903.158589][T22272] ? futex_wait_multiple+0x920/0x920 [ 1903.163883][T22272] futex_wait+0x1bc/0x5c0 [ 1903.168211][T22272] ? futex_setup_timer+0xc0/0xc0 [ 1903.173145][T22272] ? futex_wait_setup+0x270/0x270 [ 1903.178174][T22272] ? file_end_write+0x159/0x250 [ 1903.183020][T22272] ? vfs_write+0x5de/0x9a0 [ 1903.187440][T22272] do_futex+0x2ff/0x3e0 [ 1903.191594][T22272] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1903.197502][T22272] __se_sys_futex+0x3a9/0x440 [ 1903.202221][T22272] ? __x64_sys_futex+0xf0/0xf0 [ 1903.206990][T22272] ? __x64_sys_futex+0x21/0xf0 [ 1903.211757][T22272] do_syscall_64+0x55/0xb0 [ 1903.216171][T22272] ? clear_bhb_loop+0x40/0x90 [ 1903.220841][T22272] ? clear_bhb_loop+0x40/0x90 [ 1903.225512][T22272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1903.231398][T22272] RIP: 0033:0x7ff18419e0d9 [ 1903.235810][T22272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.255418][T22272] RSP: 002b:00007ff1850e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1903.263833][T22272] RAX: ffffffffffffffda RBX: 00007ff184425fa8 RCX: 00007ff18419e0d9 [ 1903.271799][T22272] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff184425fa8 [ 1903.279763][T22272] RBP: 00007ff184425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1903.287726][T22272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1903.295690][T22272] R13: 00007ff184426038 R14: 00007ffe1e70b450 R15: 00007ffe1e70b538 [ 1903.303670][T22272] [ 1903.321967][T20470] block nbd11: Receive control failed (result -104) [ 1903.691749][T22192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1903.723453][ T8] gud 2-1:1.0: No supported pixel formats found [ 1903.729763][ T8] gud: probe of 2-1:1.0 failed with error -22 [ 1903.771340][T22281] can: request_module (can-proto-0) failed. [ 1903.866572][T22192] veth0_vlan: entered promiscuous mode [ 1903.889343][T22192] veth1_vlan: entered promiscuous mode [ 1903.930530][ T8] usb 2-1: USB disconnect, device number 16 [ 1903.978634][T22192] veth0_macvtap: entered promiscuous mode [ 1904.009603][T22192] veth1_macvtap: entered promiscuous mode [ 1904.067024][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1904.082916][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.115665][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1904.161060][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.177626][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1904.200012][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.221786][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1904.252093][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.262108][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1904.282637][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.310593][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1904.321400][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.344886][T22192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1904.365961][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.376926][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.431387][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.559453][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.658955][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.763970][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1904.871826][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1904.965083][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1905.067714][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1905.173485][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1905.232581][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1905.270393][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1905.314526][T22192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1905.351587][T22294] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1905.410218][T22294] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1905.420484][T22192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.434257][T22294] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1905.443857][T22192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.463961][T22192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.510643][T22192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1905.698187][T22301] kAFS: Can only specify source 'none' with -o dyn [ 1906.488730][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1906.534721][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1906.687263][ T9096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1906.710501][ T9096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.134004][T22309] nbd12: detected capacity change from 0 to 63 [ 1908.160985][T22309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4818'. [ 1909.410896][T19729] block nbd4: Possible stuck request ffff888022258000: control (read@0,1024B). Runtime 30 seconds [ 1909.421716][T21180] block nbd5: Possible stuck request ffff8880222c8000: control (read@0,1024B). Runtime 30 seconds [ 1909.422109][T19729] block nbd4: Possible stuck request ffff888022258200: control (read@1024,1024B). Runtime 30 seconds [ 1909.432431][T21180] block nbd5: Possible stuck request ffff8880222c8200: control (read@1024,1024B). Runtime 30 seconds [ 1909.444996][T19729] block nbd4: Possible stuck request ffff888022258400: control (read@2048,1024B). Runtime 30 seconds [ 1909.455954][T21180] block nbd5: Possible stuck request ffff8880222c8400: control (read@2048,1024B). Runtime 30 seconds [ 1909.466721][T19729] block nbd4: Possible stuck request ffff888022258600: control (read@3072,1024B). Runtime 30 seconds [ 1909.483588][T22309] FAULT_INJECTION: forcing a failure. [ 1909.483588][T22309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1909.491705][T21180] block nbd5: Possible stuck request ffff8880222c8600: control (read@3072,1024B). Runtime 30 seconds [ 1909.577634][T22309] CPU: 0 PID: 22309 Comm: syz.1.4818 Not tainted syzkaller #0 [ 1909.585164][T22309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1909.595302][T22309] Call Trace: [ 1909.598606][T22309] [ 1909.601553][T22309] dump_stack_lvl+0x18c/0x250 [ 1909.606273][T22309] ? show_regs_print_info+0x20/0x20 [ 1909.611499][T22309] ? load_image+0x420/0x420 [ 1909.616036][T22309] ? __might_fault+0xaa/0x120 [ 1909.620737][T22309] ? __lock_acquire+0x7d80/0x7d80 [ 1909.625792][T22309] should_fail_ex+0x394/0x4c0 [ 1909.630589][T22309] _copy_from_user+0x2f/0xe0 [ 1909.635212][T22309] __sys_bpf+0x23e/0x890 [ 1909.639480][T22309] ? bpf_link_show_fdinfo+0x390/0x390 [ 1909.644979][T22309] ? lock_chain_count+0x20/0x20 [ 1909.649867][T22309] __x64_sys_bpf+0x7c/0x90 [ 1909.654308][T22309] do_syscall_64+0x55/0xb0 [ 1909.658742][T22309] ? clear_bhb_loop+0x40/0x90 [ 1909.663887][T22309] ? clear_bhb_loop+0x40/0x90 [ 1909.668588][T22309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1909.674671][T22309] RIP: 0033:0x7fd61eb9e0d9 [ 1909.679102][T22309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1909.698738][T22309] RSP: 002b:00007fd61fa1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1909.707194][T22309] RAX: ffffffffffffffda RBX: 00007fd61ee25fa0 RCX: 00007fd61eb9e0d9 [ 1909.715194][T22309] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1909.723207][T22309] RBP: 00007fd61ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 1909.731205][T22309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1909.739197][T22309] R13: 00007fd61ee26038 R14: 00007fd61ee25fa0 R15: 00007ffc1dcf6678 [ 1909.747211][T22309] [ 1910.985016][T20470] block nbd12: Receive control failed (result -104) [ 1911.237311][T22319] can: request_module (can-proto-0) failed. [ 1911.505053][T22324] Bluetooth: hci0: unsupported parameter 255 [ 1911.519120][T22324] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1913.750056][T22343] kAFS: Can only specify source 'none' with -o dyn [ 1915.984524][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.990869][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.052774][T21180] block nbd6: Possible stuck request ffff888022330000: control (read@0,1024B). Runtime 30 seconds [ 1916.064475][T21180] block nbd6: Possible stuck request ffff888022330200: control (read@1024,1024B). Runtime 30 seconds [ 1916.075638][T21180] block nbd6: Possible stuck request ffff888022330400: control (read@2048,1024B). Runtime 30 seconds [ 1916.086731][T21180] block nbd6: Possible stuck request ffff888022330600: control (read@3072,1024B). Runtime 30 seconds [ 1916.718414][T22354] can: request_module (can-proto-0) failed. [ 1916.755533][T19729] block nbd2: Possible stuck request ffff8880221c0000: control (read@0,4096B). Runtime 60 seconds [ 1917.016360][T22361] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1918.363837][ T5142] udevd[5142]: worker [21899] /devices/virtual/block/nbd3 is taking a long time [ 1918.400135][ T5142] udevd[5142]: worker [21851] /devices/virtual/block/nbd2 is taking a long time [ 1918.421577][T21180] block nbd3: Possible stuck request ffff888022220000: control (read@0,1024B). Runtime 60 seconds [ 1918.432392][T21180] block nbd3: Possible stuck request ffff888022220200: control (read@1024,1024B). Runtime 60 seconds [ 1918.444633][T21180] block nbd3: Possible stuck request ffff888022220400: control (read@2048,1024B). Runtime 60 seconds [ 1918.457090][T21180] block nbd3: Possible stuck request ffff888022220600: control (read@3072,1024B). Runtime 60 seconds [ 1922.159460][T22401] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1923.784606][T22409] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1924.561055][T21180] block nbd7: Possible stuck request ffff888022398000: control (read@0,4096B). Runtime 30 seconds [ 1925.257416][T21180] block nbd8: Possible stuck request ffff888022808000: control (read@0,4096B). Runtime 30 seconds [ 1927.200082][T22431] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1928.934739][T21180] block nbd9: Possible stuck request ffff888022820000: control (read@0,4096B). Runtime 30 seconds [ 1928.935762][T18754] block nbd10: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 30 seconds [ 1931.611842][T22461] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1932.685833][T22465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1933.392940][T19729] block nbd11: Possible stuck request ffff888022898000: control (read@0,4096B). Runtime 30 seconds [ 1934.455253][T22476] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1937.088182][T22493] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1937.592275][T22506] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1938.761602][ T5142] udevd[5142]: worker [22043] /devices/virtual/block/nbd4 is taking a long time [ 1938.771037][T18754] block nbd12: Possible stuck request ffff888022930000: control (read@0,4096B). Runtime 30 seconds [ 1938.982733][ T5142] udevd[5142]: worker [21952] /devices/virtual/block/nbd5 is taking a long time [ 1940.900975][T19729] block nbd4: Possible stuck request ffff888022258000: control (read@0,1024B). Runtime 60 seconds [ 1940.912241][T19729] block nbd4: Possible stuck request ffff888022258200: control (read@1024,1024B). Runtime 60 seconds [ 1940.923638][T19729] block nbd4: Possible stuck request ffff888022258400: control (read@2048,1024B). Runtime 60 seconds [ 1940.934830][T19729] block nbd4: Possible stuck request ffff888022258600: control (read@3072,1024B). Runtime 60 seconds [ 1940.975581][T18754] block nbd5: Possible stuck request ffff8880222c8000: control (read@0,1024B). Runtime 60 seconds [ 1940.994545][T18754] block nbd5: Possible stuck request ffff8880222c8200: control (read@1024,1024B). Runtime 60 seconds [ 1941.005534][T18754] block nbd5: Possible stuck request ffff8880222c8400: control (read@2048,1024B). Runtime 60 seconds [ 1941.016513][T18754] block nbd5: Possible stuck request ffff8880222c8600: control (read@3072,1024B). Runtime 60 seconds [ 1942.991034][T13283] Bluetooth: hci1: command 0x0406 tx timeout [ 1945.000716][T22574] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1945.992717][ T5142] udevd[5142]: worker [21948] /devices/virtual/block/nbd6 is taking a long time [ 1946.183755][T18754] block nbd6: Possible stuck request ffff888022330000: control (read@0,1024B). Runtime 60 seconds [ 1946.194748][T18754] block nbd6: Possible stuck request ffff888022330200: control (read@1024,1024B). Runtime 60 seconds [ 1946.206948][T18754] block nbd6: Possible stuck request ffff888022330400: control (read@2048,1024B). Runtime 60 seconds [ 1946.218123][T18754] block nbd6: Possible stuck request ffff888022330600: control (read@3072,1024B). Runtime 60 seconds [ 1947.643673][T19729] block nbd2: Possible stuck request ffff8880221c0000: control (read@0,4096B). Runtime 90 seconds [ 1947.947462][T22603] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 1948.175854][T22607] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1948.760819][T18754] block nbd3: Possible stuck request ffff888022220000: control (read@0,1024B). Runtime 90 seconds [ 1948.772727][T18754] block nbd3: Possible stuck request ffff888022220200: control (read@1024,1024B). Runtime 90 seconds [ 1948.783852][T18754] block nbd3: Possible stuck request ffff888022220400: control (read@2048,1024B). Runtime 90 seconds [ 1948.794830][T18754] block nbd3: Possible stuck request ffff888022220600: control (read@3072,1024B). Runtime 90 seconds [ 1952.423345][T22637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4907'. [ 1952.444565][T22637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4907'. [ 1952.603238][T22639] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1955.893594][T21180] block nbd8: Possible stuck request ffff888022808000: control (read@0,4096B). Runtime 60 seconds [ 1955.904995][T18754] block nbd7: Possible stuck request ffff888022398000: control (read@0,4096B). Runtime 60 seconds [ 1956.180967][T22670] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1956.707234][T22678] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1959.119590][ T5142] udevd[5142]: worker [22206] /devices/virtual/block/nbd9 is taking a long time [ 1959.138067][T18754] block nbd9: Possible stuck request ffff888022820000: control (read@0,4096B). Runtime 60 seconds [ 1959.149154][T21180] block nbd10: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 60 seconds [ 1959.182201][ T5142] udevd[5142]: worker [22232] /devices/virtual/block/nbd10 is taking a long time [ 1959.192457][ T5142] udevd[5142]: worker [22150] /devices/virtual/block/nbd7 is taking a long time [ 1959.210927][ T5142] udevd[5142]: worker [22196] /devices/virtual/block/nbd8 is taking a long time [ 1960.161133][T22702] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1962.174310][T22719] nbd13: detected capacity change from 0 to 63 [ 1962.400584][T22726] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1962.409501][T22726] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1962.418102][T22726] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1962.580247][T22719] FAULT_INJECTION: forcing a failure. [ 1962.580247][T22719] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1962.741634][T22719] CPU: 1 PID: 22719 Comm: syz.0.4935 Not tainted syzkaller #0 [ 1962.749162][T22719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1962.759254][T22719] Call Trace: [ 1962.762562][T22719] [ 1962.765511][T22719] dump_stack_lvl+0x18c/0x250 [ 1962.770229][T22719] ? show_regs_print_info+0x20/0x20 [ 1962.775455][T22719] ? load_image+0x420/0x420 [ 1962.780094][T22719] should_fail_ex+0x394/0x4c0 [ 1962.784849][T22719] get_futex_key+0x136/0x1030 [ 1962.789559][T22719] ? futex_setup_timer+0xc0/0xc0 [ 1962.794518][T22719] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1962.800174][T22719] ? preempt_schedule+0xc0/0xd0 [ 1962.805058][T22719] futex_wait_setup+0xbc/0x270 [ 1962.809872][T22719] ? futex_wait_multiple+0x920/0x920 [ 1962.815185][T22719] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1962.821112][T22719] ? _raw_spin_unlock+0x40/0x40 [ 1962.827005][T22719] futex_wait+0x1bc/0x5c0 [ 1962.831548][T22719] ? futex_wait_setup+0x270/0x270 [ 1962.836628][T22719] do_futex+0x2ff/0x3e0 [ 1962.840815][T22719] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1962.846749][T22719] __se_sys_futex+0x3a9/0x440 [ 1962.851505][T22719] ? __x64_sys_futex+0xf0/0xf0 [ 1962.856322][T22719] ? __x64_sys_futex+0x21/0xf0 [ 1962.861217][T22719] do_syscall_64+0x55/0xb0 [ 1962.865673][T22719] ? clear_bhb_loop+0x40/0x90 [ 1962.870376][T22719] ? clear_bhb_loop+0x40/0x90 [ 1962.875077][T22719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1962.881007][T22719] RIP: 0033:0x7f06e379e0d9 [ 1962.885489][T22719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1962.905212][T22719] RSP: 002b:00007f06e45d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1962.913657][T22719] RAX: ffffffffffffffda RBX: 00007f06e3a25fa8 RCX: 00007f06e379e0d9 [ 1962.921643][T22719] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06e3a25fa8 [ 1962.929628][T22719] RBP: 00007f06e3a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1962.937613][T22719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1962.945596][T22719] R13: 00007f06e3a26038 R14: 00007ffef92cc0c0 R15: 00007ffef92cc1a8 [ 1962.953598][T22719] [ 1963.135920][T13283] block nbd13: Receive control failed (result -104) [ 1963.318467][T22734] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1963.472501][T19729] block nbd11: Possible stuck request ffff888022898000: control (read@0,4096B). Runtime 60 seconds [ 1964.371796][T22740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1965.624919][T22750] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 1965.885866][T22757] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1965.894812][T22757] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1965.903928][T22757] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1966.050934][T22756] nbd14: detected capacity change from 0 to 63 [ 1966.264603][T22756] FAULT_INJECTION: forcing a failure. [ 1966.264603][T22756] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1966.404803][T22756] CPU: 0 PID: 22756 Comm: syz.0.4946 Not tainted syzkaller #0 [ 1966.412333][T22756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1966.422409][T22756] Call Trace: [ 1966.425704][T22756] [ 1966.428651][T22756] dump_stack_lvl+0x18c/0x250 [ 1966.433392][T22756] ? show_regs_print_info+0x20/0x20 [ 1966.438611][T22756] ? load_image+0x420/0x420 [ 1966.443151][T22756] should_fail_ex+0x394/0x4c0 [ 1966.447860][T22756] get_futex_key+0x136/0x1030 [ 1966.452564][T22756] ? futex_setup_timer+0xc0/0xc0 [ 1966.457518][T22756] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1966.463169][T22756] ? preempt_schedule+0xc0/0xd0 [ 1966.468043][T22756] futex_wait_setup+0xbc/0x270 [ 1966.472830][T22756] ? futex_wait_multiple+0x920/0x920 [ 1966.478136][T22756] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1966.484060][T22756] ? _raw_spin_unlock+0x40/0x40 [ 1966.488949][T22756] futex_wait+0x1bc/0x5c0 [ 1966.493315][T22756] ? futex_wait_setup+0x270/0x270 [ 1966.498389][T22756] ? file_end_write+0x159/0x250 [ 1966.503266][T22756] ? vfs_write+0x5de/0x9a0 [ 1966.507714][T22756] do_futex+0x2ff/0x3e0 [ 1966.511893][T22756] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1966.517817][T22756] __se_sys_futex+0x3a9/0x440 [ 1966.522519][T22756] ? __x64_sys_futex+0xf0/0xf0 [ 1966.527308][T22756] ? __x64_sys_futex+0x21/0xf0 [ 1966.532094][T22756] do_syscall_64+0x55/0xb0 [ 1966.536527][T22756] ? clear_bhb_loop+0x40/0x90 [ 1966.541227][T22756] ? clear_bhb_loop+0x40/0x90 [ 1966.545926][T22756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1966.551835][T22756] RIP: 0033:0x7f06e379e0d9 [ 1966.556268][T22756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1966.575898][T22756] RSP: 002b:00007f06e45d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1966.584338][T22756] RAX: ffffffffffffffda RBX: 00007f06e3a25fa8 RCX: 00007f06e379e0d9 [ 1966.592328][T22756] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06e3a25fa8 [ 1966.600402][T22756] RBP: 00007f06e3a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1966.608394][T22756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1966.616382][T22756] R13: 00007f06e3a26038 R14: 00007ffef92cc0c0 R15: 00007ffef92cc1a8 [ 1966.624390][T22756] [ 1966.852845][T13283] block nbd14: Receive control failed (result -32) [ 1969.366270][T18754] block nbd12: Possible stuck request ffff888022930000: control (read@0,4096B). Runtime 60 seconds [ 1971.284293][T19729] block nbd4: Possible stuck request ffff888022258000: control (read@0,1024B). Runtime 90 seconds [ 1971.296872][T19729] block nbd4: Possible stuck request ffff888022258200: control (read@1024,1024B). Runtime 90 seconds [ 1971.309685][T19729] block nbd4: Possible stuck request ffff888022258400: control (read@2048,1024B). Runtime 90 seconds [ 1971.320889][T19729] block nbd4: Possible stuck request ffff888022258600: control (read@3072,1024B). Runtime 90 seconds [ 1971.342178][T18754] block nbd5: Possible stuck request ffff8880222c8000: control (read@0,1024B). Runtime 90 seconds [ 1971.353301][T18754] block nbd5: Possible stuck request ffff8880222c8200: control (read@1024,1024B). Runtime 90 seconds [ 1971.364295][T18754] block nbd5: Possible stuck request ffff8880222c8400: control (read@2048,1024B). Runtime 90 seconds [ 1971.375310][T18754] block nbd5: Possible stuck request ffff8880222c8600: control (read@3072,1024B). Runtime 90 seconds [ 1972.988739][ T5142] udevd[5142]: worker [22290] /devices/virtual/block/nbd12 is taking a long time [ 1973.012696][ T5142] udevd[5142]: worker [22183] /devices/virtual/block/nbd11 is taking a long time [ 1973.647249][T22836] sg_write: data in/out 699904/136 bytes for SCSI command 0x0-- guessing data in; [ 1973.647249][T22836] program syz.0.4958 not setting count and/or reply_len properly [ 1973.702561][T22834] nbd15: detected capacity change from 0 to 63 [ 1973.723683][T22837] FAULT_INJECTION: forcing a failure. [ 1973.723683][T22837] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1973.773922][T22837] CPU: 0 PID: 22837 Comm: syz.1.4959 Not tainted syzkaller #0 [ 1973.781435][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1973.791516][T22837] Call Trace: [ 1973.794816][T22837] [ 1973.797769][T22837] dump_stack_lvl+0x18c/0x250 [ 1973.802473][T22837] ? show_regs_print_info+0x20/0x20 [ 1973.807691][T22837] ? load_image+0x420/0x420 [ 1973.812231][T22837] ? rcu_read_lock_sched_held+0x8a/0x110 [ 1973.817888][T22837] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 1973.822690][T13283] block nbd15: Receive control failed (result -32) [ 1973.824046][T22837] should_fail_ex+0x394/0x4c0 [ 1973.824085][T22837] get_futex_key+0x136/0x1030 [ 1973.824112][T22837] ? futex_setup_timer+0xc0/0xc0 [ 1973.845341][T22837] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1973.851347][T22837] ? __lock_acquire+0x7d80/0x7d80 [ 1973.856398][T22837] ? lock_chain_count+0x20/0x20 [ 1973.861289][T22837] futex_wait_setup+0xbc/0x270 [ 1973.866077][T22837] ? futex_wait_multiple+0x920/0x920 [ 1973.871361][T22837] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1973.877276][T22837] ? _raw_spin_unlock+0x40/0x40 [ 1973.882147][T22837] futex_wait+0x1bc/0x5c0 [ 1973.886478][T22837] ? futex_wait_setup+0x270/0x270 [ 1973.891509][T22837] ? file_end_write+0x159/0x250 [ 1973.896383][T22837] ? vfs_write+0x5de/0x9a0 [ 1973.900816][T22837] do_futex+0x2ff/0x3e0 [ 1973.904984][T22837] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1973.910892][T22837] __se_sys_futex+0x3a9/0x440 [ 1973.915579][T22837] ? __x64_sys_futex+0xf0/0xf0 [ 1973.920341][T22837] ? __x64_sys_futex+0x21/0xf0 [ 1973.925111][T22837] do_syscall_64+0x55/0xb0 [ 1973.929522][T22837] ? clear_bhb_loop+0x40/0x90 [ 1973.934198][T22837] ? clear_bhb_loop+0x40/0x90 [ 1973.938893][T22837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1973.944795][T22837] RIP: 0033:0x7fd61eb9e0d9 [ 1973.949233][T22837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1973.968855][T22837] RSP: 002b:00007fd61f9fe0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1973.977285][T22837] RAX: ffffffffffffffda RBX: 00007fd61ee26098 RCX: 00007fd61eb9e0d9 [ 1973.985254][T22837] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd61ee26098 [ 1973.993220][T22837] RBP: 00007fd61ee26090 R08: 0000000000000000 R09: 0000000000000000 [ 1974.001186][T22837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1974.009153][T22837] R13: 00007fd61ee26128 R14: 00007ffc1dcf6590 R15: 00007ffc1dcf6678 [ 1974.017151][T22837] [ 1976.266742][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.274562][T18754] block nbd6: Possible stuck request ffff888022330000: control (read@0,1024B). Runtime 90 seconds [ 1976.285759][T18754] block nbd6: Possible stuck request ffff888022330200: control (read@1024,1024B). Runtime 90 seconds [ 1976.292662][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.297026][T18754] block nbd6: Possible stuck request ffff888022330400: control (read@2048,1024B). Runtime 90 seconds [ 1976.315492][T18754] block nbd6: Possible stuck request ffff888022330600: control (read@3072,1024B). Runtime 90 seconds [ 1978.183176][T19729] block nbd2: Possible stuck request ffff8880221c0000: control (read@0,4096B). Runtime 120 seconds [ 1978.825056][T18754] block nbd3: Possible stuck request ffff888022220000: control (read@0,1024B). Runtime 120 seconds [ 1978.835855][T18754] block nbd3: Possible stuck request ffff888022220200: control (read@1024,1024B). Runtime 120 seconds [ 1978.846900][T18754] block nbd3: Possible stuck request ffff888022220400: control (read@2048,1024B). Runtime 120 seconds [ 1978.857912][T18754] block nbd3: Possible stuck request ffff888022220600: control (read@3072,1024B). Runtime 120 seconds [ 1986.507054][T11513] block nbd7: Possible stuck request ffff888022398000: control (read@0,4096B). Runtime 90 seconds [ 1986.517898][T18754] block nbd8: Possible stuck request ffff888022808000: control (read@0,4096B). Runtime 90 seconds [ 1989.703008][T11513] block nbd9: Possible stuck request ffff888022820000: control (read@0,4096B). Runtime 90 seconds [ 1989.713751][T18754] block nbd10: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 90 seconds [ 1992.906967][T18754] block nbd13: Possible stuck request ffff888022998000: control (read@0,4096B). Runtime 30 seconds [ 1993.543296][T19729] block nbd11: Possible stuck request ffff888022898000: control (read@0,4096B). Runtime 90 seconds [ 1993.703033][T20470] Bluetooth: hci2: command 0x0406 tx timeout [ 1999.943577][T18754] block nbd12: Possible stuck request ffff888022930000: control (read@0,4096B). Runtime 90 seconds [ 2001.863816][T19729] block nbd4: Possible stuck request ffff888022258000: control (read@0,1024B). Runtime 120 seconds [ 2001.874969][T18754] block nbd5: Possible stuck request ffff8880222c8000: control (read@0,1024B). Runtime 120 seconds [ 2001.875161][T19729] block nbd4: Possible stuck request ffff888022258200: control (read@1024,1024B). Runtime 120 seconds [ 2001.885853][T18754] block nbd5: Possible stuck request ffff8880222c8200: control (read@1024,1024B). Runtime 120 seconds [ 2001.902624][T19729] block nbd4: Possible stuck request ffff888022258400: control (read@2048,1024B). Runtime 120 seconds [ 2001.907724][T18754] block nbd5: Possible stuck request ffff8880222c8400: control (read@2048,1024B). Runtime 120 seconds [ 2001.920099][T19729] block nbd4: Possible stuck request ffff888022258600: control (read@3072,1024B). Runtime 120 seconds [ 2001.931225][T18754] block nbd5: Possible stuck request ffff8880222c8600: control (read@3072,1024B). Runtime 120 seconds [ 2006.343338][T18754] block nbd6: Possible stuck request ffff888022330000: control (read@0,1024B). Runtime 120 seconds [ 2006.354527][T18754] block nbd6: Possible stuck request ffff888022330200: control (read@1024,1024B). Runtime 120 seconds [ 2006.365636][T18754] block nbd6: Possible stuck request ffff888022330400: control (read@2048,1024B). Runtime 120 seconds [ 2006.376749][T18754] block nbd6: Possible stuck request ffff888022330600: control (read@3072,1024B). Runtime 120 seconds [ 2008.262870][T19729] block nbd2: Possible stuck request ffff8880221c0000: control (read@0,4096B). Runtime 150 seconds [ 2008.913456][T18754] block nbd3: Possible stuck request ffff888022220000: control (read@0,1024B). Runtime 150 seconds [ 2008.924305][T18754] block nbd3: Possible stuck request ffff888022220200: control (read@1024,1024B). Runtime 150 seconds [ 2008.935426][T18754] block nbd3: Possible stuck request ffff888022220400: control (read@2048,1024B). Runtime 150 seconds [ 2008.946978][T18754] block nbd3: Possible stuck request ffff888022220600: control (read@3072,1024B). Runtime 150 seconds [ 2016.585079][T11513] block nbd8: Possible stuck request ffff888022808000: control (read@0,4096B). Runtime 120 seconds [ 2016.596157][T18754] block nbd7: Possible stuck request ffff888022398000: control (read@0,4096B). Runtime 120 seconds [ 2019.302688][T20470] Bluetooth: hci3: command 0x0406 tx timeout [ 2019.782912][T11513] block nbd10: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 120 seconds [ 2019.793991][T18754] block nbd9: Possible stuck request ffff888022820000: control (read@0,4096B). Runtime 120 seconds [ 2022.331900][ T5142] udevd[5142]: worker [22270] /devices/virtual/block/nbd13 is taking a long time [ 2022.983656][T18754] block nbd13: Possible stuck request ffff888022998000: control (read@0,4096B). Runtime 60 seconds [ 2023.622835][T19729] block nbd11: Possible stuck request ffff888022898000: control (read@0,4096B). Runtime 120 seconds [ 2030.028590][T18754] block nbd12: Possible stuck request ffff888022930000: control (read@0,4096B). Runtime 120 seconds [ 2031.943410][T18754] block nbd5: Possible stuck request ffff8880222c8000: control (read@0,1024B). Runtime 150 seconds [ 2031.943433][T19729] block nbd4: Possible stuck request ffff888022258000: control (read@0,1024B). Runtime 150 seconds [ 2031.962610][T18754] block nbd5: Possible stuck request ffff8880222c8200: control (read@1024,1024B). Runtime 150 seconds [ 2031.964967][T19729] block nbd4: Possible stuck request ffff888022258200: control (read@1024,1024B). Runtime 150 seconds [ 2031.976070][T18754] block nbd5: Possible stuck request ffff8880222c8400: control (read@2048,1024B). Runtime 150 seconds [ 2031.987165][T19729] block nbd4: Possible stuck request ffff888022258400: control (read@2048,1024B). Runtime 150 seconds [ 2032.009036][T19729] block nbd4: Possible stuck request ffff888022258600: control (read@3072,1024B). Runtime 150 seconds [ 2032.027012][T18754] block nbd5: Possible stuck request ffff8880222c8600: control (read@3072,1024B). Runtime 150 seconds [ 2036.432926][T18754] block nbd6: Possible stuck request ffff888022330000: control (read@0,1024B). Runtime 150 seconds [ 2036.443922][T18754] block nbd6: Possible stuck request ffff888022330200: control (read@1024,1024B). Runtime 150 seconds [ 2036.454987][T18754] block nbd6: Possible stuck request ffff888022330400: control (read@2048,1024B). Runtime 150 seconds [ 2036.465994][T18754] block nbd6: Possible stuck request ffff888022330600: control (read@3072,1024B). Runtime 150 seconds [ 2037.387536][ T5142] udevd[5142]: worker [21851] /devices/virtual/block/nbd2 timeout; kill it [ 2037.397923][ T5142] udevd[5142]: seq 16305 '/devices/virtual/block/nbd2' killed [ 2037.708288][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.714866][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.342838][T19729] block nbd2: Possible stuck request ffff8880221c0000: control (read@0,4096B). Runtime 180 seconds [ 2038.987920][T18754] block nbd3: Possible stuck request ffff888022220000: control (read@0,1024B). Runtime 180 seconds [ 2038.998818][T18754] block nbd3: Possible stuck request ffff888022220200: control (read@1024,1024B). Runtime 180 seconds [ 2039.009865][T18754] block nbd3: Possible stuck request ffff888022220400: control (read@2048,1024B). Runtime 180 seconds [ 2039.020948][T18754] block nbd3: Possible stuck request ffff888022220600: control (read@3072,1024B). Runtime 180 seconds [ 2040.411371][ T5142] udevd[5142]: worker [21899] /devices/virtual/block/nbd3 timeout; kill it [ 2040.424357][ T5142] udevd[5142]: seq 16308 '/devices/virtual/block/nbd3' killed [ 2046.676533][T11513] block nbd7: Possible stuck request ffff888022398000: control (read@0,4096B). Runtime 150 seconds [ 2046.687462][T18754] block nbd8: Possible stuck request ffff888022808000: control (read@0,4096B). Runtime 150 seconds [ 2049.863496][T11513] block nbd9: Possible stuck request ffff888022820000: control (read@0,4096B). Runtime 150 seconds [ 2049.874369][T18754] block nbd10: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 150 seconds [ 2053.067503][T18754] block nbd13: Possible stuck request ffff888022998000: control (read@0,4096B). Runtime 90 seconds [ 2053.702867][T19729] block nbd11: Possible stuck request ffff888022898000: control (read@0,4096B). Runtime 150 seconds [ 2058.473054][ T5142] udevd[5142]: worker [22043] /devices/virtual/block/nbd4 timeout; kill it [ 2058.482376][ T5142] udevd[5142]: seq 16640 '/devices/virtual/block/nbd4' killed [ 2058.491854][ T5142] udevd[5142]: worker [21952] /devices/virtual/block/nbd5 timeout; kill it [ 2058.500715][ T5142] udevd[5142]: seq 16644 '/devices/virtual/block/nbd5' killed [ 2060.116751][T18754] block nbd12: Possible stuck request ffff888022930000: control (read@0,4096B). Runtime 150 seconds [ 2062.023057][T19729] block nbd4: Possible stuck request ffff888022258000: control (read@0,1024B). Runtime 180 seconds [ 2062.034144][T19729] block nbd4: Possible stuck request ffff888022258200: control (read@1024,1024B). Runtime 180 seconds [ 2062.034189][T18754] block nbd5: Possible stuck request ffff8880222c8000: control (read@0,1024B). Runtime 180 seconds [ 2062.045725][T19729] block nbd4: Possible stuck request ffff888022258400: control (read@2048,1024B). Runtime 180 seconds [ 2062.056026][T18754] block nbd5: Possible stuck request ffff8880222c8200: control (read@1024,1024B). Runtime 180 seconds [ 2062.068694][T19729] block nbd4: Possible stuck request ffff888022258600: control (read@3072,1024B). Runtime 180 seconds [ 2062.082590][T18754] block nbd5: Possible stuck request ffff8880222c8400: control (read@2048,1024B). Runtime 180 seconds [ 2062.112944][T18754] block nbd5: Possible stuck request ffff8880222c8600: control (read@3072,1024B). Runtime 180 seconds [ 2066.503134][T18754] block nbd6: Possible stuck request ffff888022330000: control (read@0,1024B). Runtime 180 seconds [ 2066.514109][T18754] block nbd6: Possible stuck request ffff888022330200: control (read@1024,1024B). Runtime 180 seconds [ 2066.526532][T18754] block nbd6: Possible stuck request ffff888022330400: control (read@2048,1024B). Runtime 180 seconds [ 2066.537618][T18754] block nbd6: Possible stuck request ffff888022330600: control (read@3072,1024B). Runtime 180 seconds [ 2067.532246][ T5142] udevd[5142]: worker [21948] /devices/virtual/block/nbd6 timeout; kill it [ 2067.543642][ T5142] udevd[5142]: seq 16674 '/devices/virtual/block/nbd6' killed [ 2068.423977][T19729] block nbd2: Possible stuck request ffff8880221c0000: control (read@0,4096B). Runtime 210 seconds [ 2069.062982][T18754] block nbd3: Possible stuck request ffff888022220000: control (read@0,1024B). Runtime 210 seconds [ 2069.073761][T18754] block nbd3: Possible stuck request ffff888022220200: control (read@1024,1024B). Runtime 210 seconds [ 2069.086190][T18754] block nbd3: Possible stuck request ffff888022220400: control (read@2048,1024B). Runtime 210 seconds [ 2069.102573][T18754] block nbd3: Possible stuck request ffff888022220600: control (read@3072,1024B). Runtime 210 seconds [ 2076.577870][ T5142] udevd[5142]: worker [22150] /devices/virtual/block/nbd7 timeout; kill it [ 2076.587316][ T5142] udevd[5142]: seq 16699 '/devices/virtual/block/nbd7' killed [ 2076.596765][ T5142] udevd[5142]: worker [22196] /devices/virtual/block/nbd8 timeout; kill it [ 2076.606961][ T5142] udevd[5142]: seq 16744 '/devices/virtual/block/nbd8' killed [ 2076.742968][T11513] block nbd8: Possible stuck request ffff888022808000: control (read@0,4096B). Runtime 180 seconds [ 2076.753949][T18754] block nbd7: Possible stuck request ffff888022398000: control (read@0,4096B). Runtime 180 seconds [ 2079.619916][ T5142] udevd[5142]: worker [22206] /devices/virtual/block/nbd9 timeout; kill it [ 2079.630070][ T5142] udevd[5142]: seq 16952 '/devices/virtual/block/nbd9' killed [ 2079.641963][ T5142] udevd[5142]: worker [22232] /devices/virtual/block/nbd10 timeout; kill it [ 2079.651066][ T5142] udevd[5142]: seq 16953 '/devices/virtual/block/nbd10' killed [ 2079.942992][T11513] block nbd9: Possible stuck request ffff888022820000: control (read@0,4096B). Runtime 180 seconds [ 2079.953891][T18754] block nbd10: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 180 seconds [ 2083.143090][T18754] block nbd13: Possible stuck request ffff888022998000: control (read@0,4096B). Runtime 120 seconds [ 2083.783839][T19729] block nbd11: Possible stuck request ffff888022898000: control (read@0,4096B). Runtime 180 seconds [ 2085.676080][ T5142] udevd[5142]: worker [22183] /devices/virtual/block/nbd11 timeout; kill it [ 2085.687352][ T5142] udevd[5142]: seq 17070 '/devices/virtual/block/nbd11' killed [ 2088.701104][ T5142] udevd[5142]: worker [22290] /devices/virtual/block/nbd12 timeout; kill it [ 2088.710487][ T5142] udevd[5142]: seq 17099 '/devices/virtual/block/nbd12' killed [ 2090.195079][T18754] block nbd12: Possible stuck request ffff888022930000: control (read@0,4096B). Runtime 180 seconds [ 2092.103510][T18754] block nbd5: Possible stuck request ffff8880222c8000: control (read@0,1024B). Runtime 210 seconds [ 2092.112741][T19729] block nbd4: Possible stuck request ffff888022258000: control (read@0,1024B). Runtime 210 seconds [ 2092.122626][T18754] block nbd5: Possible stuck request ffff8880222c8200: control (read@1024,1024B). Runtime 210 seconds [ 2092.126568][T19729] block nbd4: Possible stuck request ffff888022258200: control (read@1024,1024B). Runtime 210 seconds [ 2092.137405][T18754] block nbd5: Possible stuck request ffff8880222c8400: control (read@2048,1024B). Runtime 210 seconds [ 2092.148431][T19729] block nbd4: Possible stuck request ffff888022258400: control (read@2048,1024B). Runtime 210 seconds [ 2092.170493][T19729] block nbd4: Possible stuck request ffff888022258600: control (read@3072,1024B). Runtime 210 seconds [ 2092.184308][T18754] block nbd5: Possible stuck request ffff8880222c8600: control (read@3072,1024B). Runtime 210 seconds [ 2096.593574][T18754] block nbd6: Possible stuck request ffff888022330000: control (read@0,1024B). Runtime 210 seconds [ 2096.604458][T18754] block nbd6: Possible stuck request ffff888022330200: control (read@1024,1024B). Runtime 210 seconds [ 2096.615536][T18754] block nbd6: Possible stuck request ffff888022330400: control (read@2048,1024B). Runtime 210 seconds [ 2096.626570][T18754] block nbd6: Possible stuck request ffff888022330600: control (read@3072,1024B). Runtime 210 seconds [ 2098.512873][T19729] block nbd2: Possible stuck request ffff8880221c0000: control (read@0,4096B). Runtime 240 seconds [ 2099.156434][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.162917][T18754] block nbd3: Possible stuck request ffff888022220000: control (read@0,1024B). Runtime 240 seconds [ 2099.172694][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.173764][T18754] block nbd3: Possible stuck request ffff888022220200: control (read@1024,1024B). Runtime 240 seconds [ 2099.193072][T18754] block nbd3: Possible stuck request ffff888022220400: control (read@2048,1024B). Runtime 240 seconds [ 2099.204182][T18754] block nbd3: Possible stuck request ffff888022220600: control (read@3072,1024B). Runtime 240 seconds [ 2106.823253][T11513] block nbd8: Possible stuck request ffff888022808000: control (read@0,4096B). Runtime 210 seconds [ 2106.834068][T18754] block nbd7: Possible stuck request ffff888022398000: control (read@0,4096B). Runtime 210 seconds [ 2110.027454][T11513] block nbd10: Possible stuck request ffff888022858000: control (read@0,4096B). Runtime 210 seconds [ 2110.038457][T18754] block nbd9: Possible stuck request ffff888022820000: control (read@0,4096B). Runtime 210 seconds [ 2113.225895][T18754] block nbd13: Possible stuck request ffff888022998000: control (read@0,4096B). Runtime 150 seconds [ 2113.863104][T19729] block nbd11: Possible stuck request ffff888022898000: control (read@0,4096B). Runtime 210 seconds [ 2119.634295][ T29] INFO: task syz.3.4936:22728 blocked for more than 143 seconds. [ 2119.642081][ T29] Not tainted syzkaller #0 [ 2119.647098][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2119.656065][ T29] task:syz.3.4936 state:D stack:26928 pid:22728 ppid:21632 flags:0x00004006 [ 2119.665374][ T29] Call Trace: [ 2119.668743][ T29] [ 2119.673557][ T29] __schedule+0x15ae/0x4660 [ 2119.678147][ T29] ? asan.module_dtor+0x20/0x20 [ 2119.683424][ T29] ? __mutex_lock+0x66e/0xc80 [ 2119.688129][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 2119.693966][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2119.700169][ T29] schedule+0xbd/0x170 [ 2119.704306][ T29] schedule_preempt_disabled+0x13/0x20 [ 2119.709805][ T29] __mutex_lock+0x673/0xc80 [ 2119.714539][ T29] ? __mutex_lock+0x4d2/0xc80 [ 2119.719249][ T29] ? blkdev_get_by_dev+0x11b/0x610 [ 2119.724468][ T29] ? mutex_lock_nested+0x20/0x20 [ 2119.729425][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 2119.734864][ T29] ? iput+0x33f/0x900 [ 2119.738921][ T29] ? ilookup+0x1c4/0x200 [ 2119.743240][ T29] ? disk_block_events+0xa7/0x120 [ 2119.748280][ T29] ? blkdev_get_by_dev+0x100/0x610 [ 2119.753503][ T29] blkdev_get_by_dev+0x11b/0x610 [ 2119.758476][ T29] bdev_open_by_dev+0x77/0x100 [ 2119.763343][ T29] setup_bdev_super+0x59/0x660 [ 2119.768126][ T29] mount_bdev+0x1ce/0x2c0 [ 2119.772446][ T29] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2119.779484][ T29] ? hfsplus_mount+0x40/0x40 [ 2119.784441][ T29] ? get_tree_bdev+0x520/0x520 [ 2119.789425][ T29] legacy_get_tree+0xea/0x180 [ 2119.794185][ T29] ? hfsplus_mark_mdb_dirty+0x1c0/0x1c0 [ 2119.799752][ T29] vfs_get_tree+0x8c/0x280 [ 2119.804259][ T29] do_new_mount+0x24a/0xa40 [ 2119.808785][ T29] __se_sys_mount+0x2e7/0x3d0 [ 2119.813614][ T29] ? __x64_sys_mount+0xc0/0xc0 [ 2119.818405][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 2119.823783][ T29] ? __x64_sys_mount+0x20/0xc0 [ 2119.828580][ T29] do_syscall_64+0x55/0xb0 [ 2119.833061][ T29] ? clear_bhb_loop+0x40/0x90 [ 2119.837764][ T29] ? clear_bhb_loop+0x40/0x90 [ 2119.842455][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2119.848399][ T29] RIP: 0033:0x7ff18419e0d9 [ 2119.852916][ T29] RSP: 002b:00007ff1850e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2119.861350][ T29] RAX: ffffffffffffffda RBX: 00007ff184425fa0 RCX: 00007ff18419e0d9 [ 2119.869406][ T29] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 2119.878749][ T29] RBP: 00007ff184235024 R08: 0000000000000000 R09: 0000000000000000 [ 2119.886890][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2119.895057][ T29] R13: 00007ff184426038 R14: 00007ff184425fa0 R15: 00007ffe1e70b538 [ 2119.903272][ T29] [ 2119.906336][ T29] [ 2119.906336][ T29] Showing all locks held in the system: [ 2119.914162][ T29] 1 lock held by khungtaskd/29: [ 2119.919028][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2119.928990][ T29] 2 locks held by getty/5528: [ 2119.933889][ T29] #0: ffff88814c7fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2119.943750][ T29] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 2119.953938][ T29] 5 locks held by kworker/u4:1/11848: [ 2119.959334][ T29] 1 lock held by udevd/21851: [ 2119.964054][ T29] #0: ffff88802214b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2119.974132][ T29] 1 lock held by udevd/21899: [ 2119.979978][ T29] #0: ffff8881413084c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2119.990261][ T29] 1 lock held by udevd/21948: [ 2119.995056][ T29] #0: ffff8880222884c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.005151][ T29] 1 lock held by udevd/21952: [ 2120.009836][ T29] #0: ffff88802212b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.019951][ T29] 1 lock held by udevd/22043: [ 2120.024699][ T29] #0: ffff8880221634c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.034839][ T29] 1 lock held by udevd/22150: [ 2120.039530][ T29] #0: ffff88802228d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.049820][ T29] 1 lock held by udevd/22183: [ 2120.054599][ T29] #0: ffff8880223db4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.064733][ T29] 1 lock held by udevd/22196: [ 2120.069421][ T29] #0: ffff8881413184c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.079496][ T29] 1 lock held by udevd/22206: [ 2120.085434][ T29] #0: ffff88802238a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.095600][ T29] 1 lock held by udevd/22232: [ 2120.100287][ T29] #0: ffff88802238f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.110714][ T29] 1 lock held by udevd/22270: [ 2120.115498][ T29] #0: ffff8880228f54c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.125910][ T29] 1 lock held by udevd/22290: [ 2120.130615][ T29] #0: ffff8880228f04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.140745][ T29] 5 locks held by kworker/u4:4/22533: [ 2120.146262][ T29] 1 lock held by syz.3.4936/22728: [ 2120.151412][ T29] #0: ffff8881413084c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2120.161805][ T29] [ 2120.170030][ T29] ============================================= [ 2120.170030][ T29] [ 2120.178566][ T29] NMI backtrace for cpu 0 [ 2120.182914][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2120.190148][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2120.200395][ T29] Call Trace: [ 2120.203677][ T29] [ 2120.206614][ T29] dump_stack_lvl+0x18c/0x250 [ 2120.211302][ T29] ? __wake_up_klogd+0xd9/0x100 [ 2120.216148][ T29] ? show_regs_print_info+0x20/0x20 [ 2120.221339][ T29] ? load_image+0x420/0x420 [ 2120.225842][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2120.230775][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2120.236928][ T29] ? load_image+0x420/0x420 [ 2120.241423][ T29] ? wq_watchdog_touch+0xef/0x170 [ 2120.246457][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2120.252523][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2120.258531][ T29] watchdog+0xf59/0xfa0 [ 2120.262698][ T29] ? watchdog+0x1e1/0xfa0 [ 2120.267051][ T29] kthread+0x2fa/0x390 [ 2120.271149][ T29] ? hungtask_pm_notify+0x50/0x50 [ 2120.276185][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2120.280774][ T29] ret_from_fork+0x48/0x80 [ 2120.285199][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2120.289806][ T29] ret_from_fork_asm+0x11/0x20 [ 2120.294579][ T29] [ 2120.299126][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2120.304672][ C1] NMI backtrace for cpu 1 [ 2120.304682][ C1] CPU: 1 PID: 1147 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 2120.304697][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2120.304707][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 2120.304811][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x60/0xe0 [ 2120.304833][ C1] Code: a4 00 00 00 41 57 41 56 41 54 53 48 8d 4c 09 01 48 8b 54 24 20 65 4c 8b 05 ad 41 7c 7e 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 <4e> 8b 54 ce 10 65 44 8b 1d 9b 41 7c 7e 41 81 e3 00 01 ff 00 74 13 [ 2120.304845][ C1] RSP: 0018:ffffc90004a97130 EFLAGS: 00000202 [ 2120.304857][ C1] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000003 [ 2120.304867][ C1] RDX: ffffffff813bab18 RSI: ffffffff8cfa05c0 RDI: 0000000000000005 [ 2120.304877][ C1] RBP: ffffc90004a97278 R08: ffff888024005a00 R09: 0000000000000004 [ 2120.304887][ C1] R10: 0000000000000005 R11: 0000000000000000 R12: ffffffff8f1109e2 [ 2120.304897][ C1] R13: ffffc90004a97228 R14: 0000000000000005 R15: dffffc0000000000 [ 2120.304908][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2120.304920][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2120.304930][ C1] CR2: 000055f89fe72168 CR3: 0000000031220000 CR4: 00000000003506e0 [ 2120.304944][ C1] Call Trace: [ 2120.304949][ C1] [ 2120.304956][ C1] unwind_next_frame+0x748/0x2990 [ 2120.304978][ C1] ? kthread+0x2fa/0x390 [ 2120.304993][ C1] ? kthread+0x2fa/0x390 [ 2120.305016][ C1] ? stack_trace_save+0x100/0x100 [ 2120.305034][ C1] arch_stack_walk+0x144/0x190 [ 2120.305052][ C1] ? kthread+0x2fa/0x390 [ 2120.305068][ C1] stack_trace_save+0xaa/0x100 [ 2120.305092][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 2120.305108][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2120.305128][ C1] ? lock_chain_count+0x20/0x20 [ 2120.305145][ C1] kasan_set_track+0x4e/0x70 [ 2120.305162][ C1] ? kasan_set_track+0x4e/0x70 [ 2120.305177][ C1] ? __kasan_kmalloc+0x8f/0xa0 [ 2120.305193][ C1] ? __kmalloc+0xb7/0x240 [ 2120.305212][ C1] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 2120.305264][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 [ 2120.305307][ C1] ? ieee80211_iface_work+0x730/0xc90 [ 2120.305324][ C1] ? cfg80211_wiphy_work+0x228/0x260 [ 2120.305339][ C1] ? process_scheduled_works+0xa60/0x1600 [ 2120.305358][ C1] ? worker_thread+0xa5e/0xfe0 [ 2120.305375][ C1] ? kthread+0x2fa/0x390 [ 2120.305407][ C1] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 2120.305424][ C1] __kasan_kmalloc+0x8f/0xa0 [ 2120.305441][ C1] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 2120.305456][ C1] __kmalloc+0xb7/0x240 [ 2120.305478][ C1] ieee802_11_parse_elems_full+0xb9/0x20c0 [ 2120.305495][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2120.305512][ C1] ? rcu_is_watching+0x15/0xb0 [ 2120.305531][ C1] ? trace_contention_end+0x39/0xe0 [ 2120.305546][ C1] ? __mutex_lock+0x30d/0xc80 [ 2120.305568][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x123/0x2dc0 [ 2120.305585][ C1] ? mutex_lock_nested+0x20/0x20 [ 2120.305605][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 2120.305626][ C1] ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 [ 2120.305644][ C1] ? verify_lock_unused+0x140/0x140 [ 2120.305662][ C1] ? verify_lock_unused+0x140/0x140 [ 2120.305684][ C1] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 2120.305705][ C1] ? mark_lock+0x94/0x320 [ 2120.305723][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2120.305740][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 2120.305756][ C1] ? lock_chain_count+0x20/0x20 [ 2120.305771][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2120.305796][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2120.305817][ C1] ? skb_dequeue+0x124/0x160 [ 2120.305838][ C1] ieee80211_iface_work+0x730/0xc90 [ 2120.305860][ C1] cfg80211_wiphy_work+0x228/0x260 [ 2120.305881][ C1] ? process_scheduled_works+0x975/0x1600 [ 2120.305901][ C1] process_scheduled_works+0xa60/0x1600 [ 2120.305932][ C1] ? worker_attach_to_pool+0x370/0x370 [ 2120.305953][ C1] ? assign_work+0x3cc/0x5d0 [ 2120.305974][ C1] worker_thread+0xa5e/0xfe0 [ 2120.306003][ C1] kthread+0x2fa/0x390 [ 2120.306017][ C1] ? pr_cont_work+0x550/0x550 [ 2120.306034][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2120.306049][ C1] ret_from_fork+0x48/0x80 [ 2120.306067][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2120.306086][ C1] ret_from_fork_asm+0x11/0x20 [ 2120.306112][ C1] [ 2120.306942][T18754] block nbd12: Possible stuck request ffff888022930000: control (read@0,4096B). Runtime 210 seconds [ 2120.307008][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2120.307018][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2120.307035][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2120.307045][ T29] Call Trace: [ 2120.307052][ T29] [ 2120.307059][ T29] dump_stack_lvl+0x18c/0x250 [ 2120.307084][ T29] ? show_regs_print_info+0x20/0x20 [ 2120.307102][ T29] ? load_image+0x420/0x420 [ 2120.307134][ T29] panic+0x2ca/0x720 [ 2120.307159][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2120.307179][ T29] ? nmi_backtrace_stall_check+0x41e/0x430 [ 2120.307205][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2120.307229][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2120.307255][ T29] watchdog+0xf98/0xfa0 [ 2120.307278][ T29] ? watchdog+0x1e1/0xfa0 [ 2120.307303][ T29] kthread+0x2fa/0x390 [ 2120.307319][ T29] ? hungtask_pm_notify+0x50/0x50 [ 2120.307341][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2120.307358][ T29] ret_from_fork+0x48/0x80 [ 2120.307377][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2120.307393][ T29] ret_from_fork_asm+0x11/0x20 [ 2120.307425][ T29] [ 2120.311407][ T29] Kernel Offset: disabled