last executing test programs: 3m11.654873007s ago: executing program 4 (id=2997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 3m10.499304581s ago: executing program 4 (id=2999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb60d7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x40000000}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000820fff00000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@\x00'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 3m9.22279582s ago: executing program 4 (id=3001): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x4a9, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffff00, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 3m8.835725213s ago: executing program 4 (id=3004): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m8.681640602s ago: executing program 4 (id=3006): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x8000) 3m8.332828409s ago: executing program 4 (id=3007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={r7, 0x0, 0xffffffffffffffff}) r9 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r8}) close_range(r3, 0xffffffffffffffff, 0x0) 2m37.167023423s ago: executing program 1 (id=3150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fchdir(0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="ff6cf25c6b0bbbb0c617cca63d8643919262614822cde45da5014b88ba348469eca6c6212b37832cc21fc65bda06023f70920e4687857b649e9efeeadcfe8077e80c108025e4", 0x46, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 2m35.722993315s ago: executing program 1 (id=3153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic', 0x3) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) 2m32.265843582s ago: executing program 1 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x2040005}, 0x40000) 2m32.035797108s ago: executing program 1 (id=3165): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$eJzs3T1oO2UcB/DfXZJ/34JWBRHFFxARLZS6CSLoolAQKSKCChURJ2mFanFrnFwcdFbp5FLEzeooLsVF6Fq1Q0UQsThYHHSIXC6RmCZaL82l/+TzgfTuubsnv0vJ97mH0lwCmFqLEfFYRFQiYikiahGRdB9wT/5YbDd35w7WI5rNZ35NWsfl7Vyn30JENCLi4YhqZ9/2/gsnvx89ef+7b9bu+3j/+bkSXlqld8PpyfFTZx89/c5nqw9tp+1t9fay+3Vcottv7LOxmkTcPIJiV0VSHfcZcBFrb336bRaSWyLi3lb+a5G2I/ve1rWvavHgh4P6vv/L4R1lnitw+ZrNWnYNbDSBqZO25sBJuhwR+XqaLi/nc/jvKvPpa5tbbyy9ulnZeKV71Chj+g6MSj3i+IkvZj5f6Mn/T5U8/8DkyvL/7Nre99n62bm/lAET6c58keV/6aWdB0L+YerIP0yG+QJ95B8mQr1gJ/mH613B7BbI/60/Hj5arBhwpVww/z+XeU5AOcz/YYLVOiuNvrvlH6bXhfPvX31h4nTy79IP06f7+g8ATJfmzLg/gQyMy7jHHwAAAAAAAAAAAAAAAAAA4LzduYP1ziMiKaXm1x9EnD4eEdXe+tH6YoO0tZxt/Zz/LckO+1uSd2u7Vqj+i3cPc/bD+2T0n76u9rRnuxs3/DDy+v/qm7tG87xv/7M58A6WOxsRjezglWr1/Psvab//irvpP/bXXh6ywP/Um+pHniuj6uDf4p97ZdQfbPUo4sts/FnpN/6kcVtr2X/8qXffYrmg1/8Y8gkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAozV8BAAD///BWbAI=") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2248260, 0x0, 0x0, 0x0, &(0x7f00000007c0)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142) creat(&(0x7f0000000180)='./file0\x00', 0x40) creat(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m30.661708685s ago: executing program 1 (id=3169): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r3, r1, 0xb, 0x20}, 0x20) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 2m30.274705715s ago: executing program 2 (id=3171): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000700)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m29.373524378s ago: executing program 1 (id=3174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="2703020059021400060000", 0xb}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c620", 0x1b}, {0x0}], 0x3}, 0x0) 2m26.94502207s ago: executing program 2 (id=3183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000300)="b81b010f00d09a81008500baf80c66b8c0991f8c66efbafc0cedf30fc7b20f00ba2000b004ee0f01c26766c7442400000000006766c74424025d4700006766c744240600000000670f011424f3d93b64640f086766c7442400030000006766c7442402b2a600006766c744240600000000670f011424", 0x76}], 0x1, 0x1, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000280)={0x40, 0x0, 0xf5, 0xfffffff7, 0x17, "83b0dd81a633403f7454af765b1dd555ea6b5f"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0x5, 0x9c, '\x00', 0x1bd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m25.415725882s ago: executing program 2 (id=3185): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) sendto$inet6(r0, &(0x7f0000000580)="fb6c", 0xc3ff, 0x4008804, 0x0, 0x0) close(0x3) 2m25.337302322s ago: executing program 2 (id=3186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x25, 0xffffffffffffffff) io_uring_setup(0x4d3f, &(0x7f0000000140)={0x0, 0xb18d, 0x8, 0x3, 0x105}) 2m25.051406276s ago: executing program 3 (id=3187): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x20000884) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 2m23.988127538s ago: executing program 2 (id=3188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m23.423437826s ago: executing program 2 (id=3189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc841}, 0x8004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYBLOB="080004"], 0x4c}}, 0x0) 2m23.33861156s ago: executing program 3 (id=3190): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, '2p'}, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) 2m20.147403185s ago: executing program 3 (id=3196): unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m19.900318758s ago: executing program 3 (id=3198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m18.667909834s ago: executing program 3 (id=3201): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000004700)=""/4137, 0x1029}, {&(0x7f0000001880)=""/134, 0x86}], 0x3, 0x0, 0x0, 0x8000000}, 0x20) 2m17.717248739s ago: executing program 3 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) connect(r0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0xf8, 0x9e, 0xde}, 0x80) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x4048010) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r2, 0x7, 0x4, 0x1000}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r5, 0x1, 0x1f, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd26, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004046}, 0x4000000) 2m14.199937496s ago: executing program 32 (id=3174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="2703020059021400060000", 0xb}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c620", 0x1b}, {0x0}], 0x3}, 0x0) 2m8.320917425s ago: executing program 33 (id=3189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc841}, 0x8004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYBLOB="080004"], 0x4c}}, 0x0) 2m1.855721401s ago: executing program 34 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) connect(r0, &(0x7f00000006c0)=@isdn={0x22, 0x0, 0xf8, 0x9e, 0xde}, 0x80) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x4048010) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r2, 0x7, 0x4, 0x1000}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r5, 0x1, 0x1f, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd26, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004046}, 0x4000000) 9.746548911s ago: executing program 5 (id=3371): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x2, '2p'}, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) 7.644455477s ago: executing program 0 (id=3375): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x84, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xfffffffffffffffb, @random=0xf, 0x11002, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x6, 0x7, 0x9, 0x8000}}, @val={0x6, 0x2, 0xc}, @void, @val={0x25, 0x3, {0x0, 0x74, 0x21}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0x6c, 0x8}}, @val={0x2d, 0x1a, {0x2000, 0x2, 0x7, 0x0, {0x8, 0x2, 0x0, 0x6, 0x0, 0x1, 0x1}, 0x8, 0x7, 0x10}}, @void, @void, @void}}]}, 0x84}}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.056812584s ago: executing program 0 (id=3376): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 6.807325121s ago: executing program 0 (id=3377): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) 5.982646835s ago: executing program 5 (id=3378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x164) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2185091, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.862391529s ago: executing program 0 (id=3379): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x400000293c, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x9, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(r2, 0x0, r1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r3, 0x1) timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @thr={&(0x7f0000000040)="33154f01ca61b3a4c87c38ca", &(0x7f0000000800)="780adb417ef901fe76e15461c5f75f5d163b4346c5b9678a4389409452fa851afe4f4843f4fe5364d6b2e6b880d95f8601889ecd6b6ef6ccb853e77904bbe3a7470b7f5bd33d1ea1b19f91905b66e5bc7811697b791e2ef02519f3519ce151509f2a6aecdfd7928f8448727d42dd25b8ba13f0779fc661a14fe059d671660caa827867887a94b1fcd3f28bfb08a5b11e5b8564d55613d548431c63b7fa4d00a1afa74f33ba89f509e1c98f2f5884d8fd1cc239922509605f34bc0d497ee2da2beb97775b08e3f043e315"}}, &(0x7f0000000940)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f000000950000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.602425218s ago: executing program 5 (id=3380): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 4.32190515s ago: executing program 5 (id=3381): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x10) fsopen(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x20, 0x1, 0x1, 0x8, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000200)) 3.637150244s ago: executing program 0 (id=3382): syz_open_dev$usbfs(0x0, 0x75, 0x109301) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x5) unshare(0x20000400) r3 = io_uring_setup(0x4469, &(0x7f00000000c0)={0x0, 0x9810, 0x400, 0x1004000, 0x1f2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) socket$tipc(0x1e, 0x5, 0x0) 2.620272627s ago: executing program 5 (id=3383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r3, 0xb) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x02\x00\x00\x00\x96\x0e\x00\x00\x00\x00\x13p', 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmctl$SHM_UNLOCK(r3, 0xc) 1.595313ms ago: executing program 5 (id=3384): r0 = socket(0xa, 0x3, 0x87) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r3}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 0s ago: executing program 0 (id=3385): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000140)=[{r0, 0x40}, {r1, 0xa180}, {r2, 0x110}], 0x3, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) kernel console output (not intermixed with test programs): [ 727.267878][ T10] usb 4-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 727.267902][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.267920][ T10] usb 4-1: Product: syz [ 727.267931][ T10] usb 4-1: Manufacturer: syz [ 727.267943][ T10] usb 4-1: SerialNumber: syz [ 727.394061][ T5889] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 727.394192][ T5889] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 727.394348][ T5889] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 727.395393][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 728.505184][ T10] usb 4-1: USB disconnect, device number 15 [ 728.591674][T12526] udevd[12526]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.908667][T12555] overlayfs: failed to clone lowerpath [ 728.944336][T12555] overlayfs: missing 'lowerdir' [ 729.009306][T12564] fuse: fd is not a fuse device [ 729.513491][T12584] fuse: fd is not a fuse device [ 729.516559][T12584] overlayfs: failed to clone upperpath [ 729.783594][T12596] fuse: Bad value for 'fd' [ 729.784682][T12596] overlayfs: failed to clone lowerpath [ 729.967203][T12585] Process accounting resumed [ 731.542464][ T5889] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 731.692465][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 731.694652][ T5889] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 731.694674][ T5889] usb 4-1: config 0 has no interface number 0 [ 731.697410][ T5889] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 731.697435][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.697451][ T5889] usb 4-1: Product: syz [ 731.697463][ T5889] usb 4-1: Manufacturer: syz [ 731.697475][ T5889] usb 4-1: SerialNumber: syz [ 731.791460][ T5889] usb 4-1: config 0 descriptor?? [ 732.322168][T12630] loop0: detected capacity change from 0 to 32768 [ 732.623337][ T5889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 732.623363][ T5889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 732.625531][ T5889] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 732.626038][ T5889] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 732.665714][ T5889] usb 4-1: USB disconnect, device number 16 [ 732.900715][T12630] ERROR: (device loop0): dbDiscardAG: -EIO [ 732.900715][T12630] [ 734.132431][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 734.223521][T12677] overlayfs: failed to clone upperpath [ 734.452772][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 734.603545][ T10] usb 4-1: config 184 has an invalid interface number: 203 but max is 0 [ 734.603598][ T10] usb 4-1: config 184 has no interface number 0 [ 734.603978][ T10] usb 4-1: config 184 interface 203 altsetting 6 bulk endpoint 0xE has invalid maxpacket 1024 [ 734.604059][ T10] usb 4-1: config 184 interface 203 has no altsetting 0 [ 735.103122][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=1f.b1 [ 735.103149][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.103165][ T10] usb 4-1: Product: syz [ 735.103175][ T10] usb 4-1: Manufacturer: syz [ 735.103187][ T10] usb 4-1: SerialNumber: syz [ 735.166357][T12666] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 735.403217][ T10] ftdi_sio 4-1:184.203: FTDI USB Serial Device converter detected [ 735.407123][ T10] ftdi_sio ttyUSB0: unknown device type: 0x1fb1 [ 735.430300][ T10] usb 4-1: USB disconnect, device number 17 [ 735.444850][ T10] ftdi_sio 4-1:184.203: device disconnected [ 735.561692][T12693] fuse: fd is not a fuse device [ 736.763823][T12749] binder: 12748:12749 ioctl c0306201 2000000001c0 returned -22 [ 737.437273][T12784] loop3: detected capacity change from 0 to 64 [ 737.650499][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.650513][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.651552][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.651562][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.692499][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.692514][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.693316][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.693326][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.696094][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.696103][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.696637][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.696645][T12784] hfs: request for non-existent node 131072 in B*Tree [ 737.697196][T12784] hfs: request for non-existent node 12 in B*Tree [ 737.697204][T12784] hfs: request for non-existent node 12 in B*Tree [ 737.865755][T12794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2286'. [ 738.246883][T12812] loop0: detected capacity change from 0 to 64 [ 738.379894][T12812] hfs: request for non-existent node 131072 in B*Tree [ 738.379905][T12812] hfs: request for non-existent node 131072 in B*Tree [ 738.381286][T12812] hfs: request for non-existent node 131072 in B*Tree [ 738.381299][T12812] hfs: request for non-existent node 131072 in B*Tree [ 738.473682][T12818] hfs: request for non-existent node 131072 in B*Tree [ 738.473702][T12818] hfs: request for non-existent node 131072 in B*Tree [ 738.476559][T12818] hfs: request for non-existent node 131072 in B*Tree [ 738.476574][T12818] hfs: request for non-existent node 131072 in B*Tree [ 738.480091][T12818] hfs: request for non-existent node 131072 in B*Tree [ 738.480105][T12818] hfs: request for non-existent node 131072 in B*Tree [ 738.532385][T12812] hfs: request for non-existent node 131072 in B*Tree [ 738.532403][T12812] hfs: request for non-existent node 131072 in B*Tree [ 739.349269][T12823] can0: slcan on ttynull. [ 739.414245][T12829] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 739.414261][T12829] overlayfs: missing 'lowerdir' [ 739.441635][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2301'. [ 739.539213][T12835] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2303'. [ 739.539238][T12835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2303'. [ 740.028613][T12822] can0 (unregistered): slcan off ttynull. [ 740.392364][ T5634] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 740.544561][ T5634] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 740.544668][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.593391][ T5634] usb 1-1: config 0 descriptor?? [ 741.234665][ T5634] usb 1-1: Cannot set autoneg [ 741.236674][ T5634] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 741.312688][ T5634] usb 1-1: USB disconnect, device number 5 [ 741.462160][T12897] GUP no longer grows the stack in syz.2.2328 (12897): 200000005000-200000008000 (200000004000) [ 741.462337][T12897] CPU: 1 UID: 0 PID: 12897 Comm: syz.2.2328 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 741.462356][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.462372][T12897] Call Trace: [ 741.462379][T12897] [ 741.462390][T12897] dump_stack_lvl+0xe8/0x150 [ 741.462418][T12897] fixup_user_fault+0x637/0x6f0 [ 741.462451][T12897] fault_in_user_writeable+0x71/0xd0 [ 741.462473][T12897] futex_lock_pi+0x816/0xb10 [ 741.462506][T12897] ? __pfx_futex_lock_pi+0x10/0x10 [ 741.462550][T12897] ? futex_private_hash_put+0x13b/0x170 [ 741.462575][T12897] ? __pfx_futex_wake_mark+0x10/0x10 [ 741.462613][T12897] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 741.462646][T12897] do_futex+0x292/0x420 [ 741.462672][T12897] ? __pfx_do_futex+0x10/0x10 [ 741.462693][T12897] ? __vm_munmap+0x2e6/0x3d0 [ 741.462721][T12897] __se_sys_futex+0x3a8/0x450 [ 741.462747][T12897] ? __pfx___se_sys_futex+0x10/0x10 [ 741.462768][T12897] ? rcu_is_watching+0x15/0xb0 [ 741.462795][T12897] ? __x64_sys_futex+0x21/0xf0 [ 741.462816][T12897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.462835][T12897] do_syscall_64+0x15f/0x560 [ 741.462853][T12897] ? trace_irq_disable+0x3b/0x140 [ 741.462871][T12897] ? clear_bhb_loop+0x40/0x90 [ 741.462900][T12897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.462918][T12897] RIP: 0033:0x7f193426ce59 [ 741.462939][T12897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.462953][T12897] RSP: 002b:00007f19324be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 741.462972][T12897] RAX: ffffffffffffffda RBX: 00007f19344e5fa0 RCX: 00007f193426ce59 [ 741.462985][T12897] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 741.462997][T12897] RBP: 00007f1934302d6f R08: 0000000000000000 R09: 0000000000000001 [ 741.463008][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.463018][T12897] R13: 00007f19344e6038 R14: 00007f19344e5fa0 R15: 00007fff094bf4f8 [ 741.463047][T12897] [ 744.747135][T12963] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 745.083168][T12976] netlink: 'syz.2.2357': attribute type 11 has an invalid length. [ 746.811506][T12997] 9pnet_virtio: no channels available for device syz [ 746.982027][T13005] fuse: fd is not a fuse device [ 747.077654][T13010] fuse: fd is not a fuse device [ 747.149117][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.149214][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.156108][T13014] loop0: detected capacity change from 0 to 64 [ 747.259696][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.259716][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.260539][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.260553][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.300868][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.300887][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.301857][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.301869][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.305977][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.305990][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.308248][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.308261][T13014] hfs: request for non-existent node 131072 in B*Tree [ 747.501320][T12985] loop3: detected capacity change from 0 to 32768 [ 747.529762][T13023] 9pnet_virtio: no channels available for device syz [ 747.695700][T12985] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 747.904203][T13019] syz.2.2374 (13019) used greatest stack depth: 16992 bytes left [ 747.995760][T12985] XFS (loop3): Ending clean mount [ 748.075496][T13039] syzkaller0: entered promiscuous mode [ 748.075521][T13039] syzkaller0: entered allmulticast mode [ 748.177421][T13049] 9pnet_virtio: no channels available for device syz [ 748.670407][ T5627] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 749.560424][T13101] fuse: fd is not a fuse device [ 749.847885][T13109] sch_tbf: burst 15 is lower than device veth0 mtu (1514) ! [ 750.101289][T13120] loop3: detected capacity change from 0 to 64 [ 750.188083][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.188100][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.198407][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.198423][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.270758][T13116] batman_adv: batadv0: Adding interface: dummy0 [ 750.270775][T13116] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.270828][T13116] batman_adv: batadv0: Interface activated: dummy0 [ 750.298199][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.298218][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.348591][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.348605][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.353273][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.353288][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.354035][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.354047][T13120] hfs: request for non-existent node 131072 in B*Tree [ 750.463695][T13124] batadv0: mtu less than device minimum [ 750.494906][T13124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 750.528299][T13124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 750.546574][T13124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 750.550492][T13124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 750.563667][T13124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 750.570293][T13124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 750.605076][T13124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 750.609093][T13124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 750.625637][T13124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 751.590380][T13162] 9pnet_virtio: no channels available for device syz [ 752.984735][T13182] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 752.986260][T13182] bridge0: entered allmulticast mode [ 753.501535][ T60] block nbd0: Receive control failed (result -32) [ 753.810725][T12526] block nbd0: shutting down sockets [ 754.031659][T13220] loop0: detected capacity change from 0 to 64 [ 754.083770][T13220] hfs: request for non-existent node 131072 in B*Tree [ 754.083782][T13220] hfs: request for non-existent node 131072 in B*Tree [ 754.084324][T13220] hfs: request for non-existent node 131072 in B*Tree [ 754.084333][T13220] hfs: request for non-existent node 131072 in B*Tree [ 754.096474][T13220] hfs: request for non-existent node 131072 in B*Tree [ 754.096490][T13220] hfs: request for non-existent node 131072 in B*Tree [ 754.125014][T13220] hfs: request for non-existent node 131072 in B*Tree [ 754.125032][T13220] hfs: request for non-existent node 131072 in B*Tree [ 754.318725][T13220] hfs: request for non-existent node 131072 in B*Tree [ 754.318737][T13220] hfs: request for non-existent node 131072 in B*Tree [ 755.178541][T13220] hfs: request for non-existent node 131072 in B*Tree [ 755.178561][T13220] hfs: request for non-existent node 131072 in B*Tree [ 755.693530][T13233] fuse: fd is not a fuse device [ 755.733224][T13226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.812898][T13226] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.942574][T13226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.651575][T13226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.696880][T13226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.774014][T13226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 756.774029][T13226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.904345][T13226] veth1_vlan: left promiscuous mode [ 756.925708][T13226] veth0_vlan: left promiscuous mode [ 756.927141][T13226] veth0_vlan: entered promiscuous mode [ 756.931466][T13226] veth1_vlan: entered promiscuous mode [ 757.007987][T13226] veth1_macvtap: left promiscuous mode [ 757.033299][T13226] veth0_macvtap: left promiscuous mode [ 757.035172][T13226] veth0_macvtap: entered promiscuous mode [ 757.073162][T13226] veth1_macvtap: entered promiscuous mode [ 757.086231][T13226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 757.121314][T13226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.133636][T13226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 757.186036][T13226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 757.272376][T13226] 8021q: adding VLAN 0 to HW filter on device bond2 [ 757.393123][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.393280][ T70] bridge0: port 1(bridge_slave_0) entered listening state [ 757.430256][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.430983][ T70] bridge0: port 2(bridge_slave_1) entered listening state [ 757.451894][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'. [ 757.451913][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2466'. [ 757.902706][ T2281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.768121][ T60] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 758.904177][ T2281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.146781][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'. [ 759.459259][ T2281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.506521][T13307] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 759.543118][T13307] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.562587][T13307] bridge0: entered allmulticast mode [ 759.591995][ T2281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.637455][ T57] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 759.963387][T13326] loop0: detected capacity change from 0 to 64 [ 760.107920][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.121337][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.146551][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.146573][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.156520][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.156538][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.157369][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.157382][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.163226][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.163239][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.165831][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.165844][T13326] hfs: request for non-existent node 131072 in B*Tree [ 760.238467][T13330] binder: 13329:13330 ioctl c0306201 200000000080 returned -14 [ 760.337460][T13335] tipc: Started in network mode [ 760.337477][T13335] tipc: Node identity 2007ff, cluster identity 4711 [ 760.337489][T13335] tipc: Node number set to 2099199 [ 760.354271][T13330] binder: 13329:13330 ioctl c0306201 2000000003c0 returned -14 [ 760.857621][T13354] 9pnet_virtio: no channels available for device syz [ 760.967898][ T5721] IPVS: starting estimator thread 0... [ 761.072925][T13357] IPVS: using max 12 ests per chain, 28800 per kthread [ 761.108875][T13359] 9pnet_virtio: no channels available for device syz [ 761.123918][ T5916] IPVS: starting estimator thread 0... [ 761.225110][T13361] IPVS: using max 16 ests per chain, 38400 per kthread [ 761.463494][T13369] loop3: detected capacity change from 0 to 64 [ 761.585450][T13369] hfs: request for non-existent node 131072 in B*Tree [ 761.585467][T13369] hfs: request for non-existent node 131072 in B*Tree [ 762.382825][T13369] hfs: request for non-existent node 131072 in B*Tree [ 762.382844][T13369] hfs: request for non-existent node 131072 in B*Tree [ 762.402316][T13376] hfs: request for non-existent node 131072 in B*Tree [ 762.402334][T13376] hfs: request for non-existent node 131072 in B*Tree [ 762.475242][T13369] hfs: request for non-existent node 131072 in B*Tree [ 762.475258][T13369] hfs: request for non-existent node 131072 in B*Tree [ 762.476247][T13369] hfs: request for non-existent node 131072 in B*Tree [ 762.476261][T13369] hfs: request for non-existent node 131072 in B*Tree [ 762.491249][T13369] hfs: request for non-existent node 131072 in B*Tree [ 762.491266][T13369] hfs: request for non-existent node 131072 in B*Tree [ 762.630656][T13381] netlink: 'syz.1.2508': attribute type 11 has an invalid length. [ 762.759913][T13387] fuse: fd is not a fuse device [ 763.995631][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 764.470894][ T5916] IPVS: starting estimator thread 0... [ 764.522495][T13433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2527'. [ 764.551388][T13433] ip6gre1: entered promiscuous mode [ 764.551473][T13433] ip6gre1: entered allmulticast mode [ 764.582455][T13432] IPVS: using max 9 ests per chain, 21600 per kthread [ 764.602654][T13428] loop3: detected capacity change from 0 to 512 [ 764.603558][T13428] EXT4-fs: Ignoring removed orlov option [ 764.609880][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'. [ 764.609898][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2530'. [ 764.696236][T13428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.696380][T13428] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 764.785301][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.272650][T13491] Driver unsupported XDP return value 0 on prog (id 259) dev N/A, expect packet loss! [ 769.712310][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 769.952361][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 769.954317][ T5889] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 769.954365][ T5889] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 769.954384][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 769.954405][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.954417][ T5889] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.954438][ T5889] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 769.954448][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.804432][ T5889] usb 1-1: usb_control_msg returned -32 [ 770.804479][ T5889] usbtmc 1-1:16.0: can't read capabilities [ 772.112526][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 772.176064][T13523] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 772.584174][T13530] loop3: detected capacity change from 0 to 4096 [ 772.668616][T13530] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 772.745914][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 772.747139][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 773.129847][ T5916] usb 1-1: USB disconnect, device number 6 [ 774.809252][T13555] loop0: detected capacity change from 0 to 64 [ 774.897936][T13555] hfs: request for non-existent node 131072 in B*Tree [ 774.897954][T13555] hfs: request for non-existent node 131072 in B*Tree [ 774.926166][T13555] hfs: request for non-existent node 131072 in B*Tree [ 774.926184][T13555] hfs: request for non-existent node 131072 in B*Tree [ 776.534914][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'. [ 776.534934][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2576'. [ 777.671196][T13574] loop0: detected capacity change from 0 to 64 [ 777.826969][T13574] hfs: request for non-existent node 131072 in B*Tree [ 777.826987][T13574] hfs: request for non-existent node 131072 in B*Tree [ 779.889318][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2588'. [ 779.889347][T13597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2588'. [ 780.641070][T13598] syz.1.2587(13598): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 780.730498][T13601] sctp: [Deprecated]: syz.4.2589 (pid 13601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 780.730498][T13601] Use struct sctp_sack_info instead [ 782.418650][T13627] loop3: detected capacity change from 0 to 64 [ 782.494576][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2599'. [ 783.487725][T13627] hfs: request for non-existent node 131072 in B*Tree [ 783.487743][T13627] hfs: request for non-existent node 131072 in B*Tree [ 783.511338][T13627] hfs: request for non-existent node 131072 in B*Tree [ 783.511354][T13627] hfs: request for non-existent node 131072 in B*Tree [ 784.883261][T13639] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2602'. [ 785.160303][T13645] sctp: [Deprecated]: syz.0.2604 (pid 13645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 785.160303][T13645] Use struct sctp_sack_info instead [ 785.399703][T13656] loop3: detected capacity change from 0 to 64 [ 786.719359][T13656] hfs: request for non-existent node 131072 in B*Tree [ 786.719377][T13656] hfs: request for non-existent node 131072 in B*Tree [ 786.932385][ T5621] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 787.154051][ T5621] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.154075][ T5621] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 787.161208][ T5621] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 787.161234][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.161251][ T5621] usb 1-1: Product: syz [ 787.161262][ T5621] usb 1-1: Manufacturer: syz [ 787.161274][ T5621] usb 1-1: SerialNumber: syz [ 787.466655][ T5621] usb 1-1: cannot find UAC_HEADER [ 787.563026][ T5621] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 787.612777][T12526] udevd[12526]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.224693][T13661] loop0: detected capacity change from 0 to 512 [ 788.270429][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.270476][ C1] bridge0: topology change detected, propagating [ 788.291417][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.291466][ C1] bridge0: topology change detected, propagating [ 788.497988][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 788.552762][T13661] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2611: inode has both inline data and extents flags [ 788.552794][T13661] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 788.554412][T13661] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2611: couldn't read orphan inode 15 (err -117) [ 788.554434][T13661] loop0: lost filesystem error report for type 5 error -117 [ 788.556225][T13661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.601933][ T10] usb 1-1: USB disconnect, device number 7 [ 789.138988][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.232691][T13703] loop3: detected capacity change from 0 to 64 [ 789.266930][T13703] hfs: request for non-existent node 131072 in B*Tree [ 789.266947][T13703] hfs: request for non-existent node 131072 in B*Tree [ 796.072419][ T5621] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 796.080525][T13769] loop0: detected capacity change from 0 to 64 [ 796.184592][T13769] hfs: request for non-existent node 131072 in B*Tree [ 796.184605][T13769] hfs: request for non-existent node 131072 in B*Tree [ 796.413149][ T5621] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 796.413175][ T5621] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 796.413192][ T5621] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 796.413238][ T5621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 796.413260][ T5621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 796.428515][ T5621] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 796.428543][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 796.428556][ T5621] usb 4-1: Product: syz [ 796.428567][ T5621] usb 4-1: Manufacturer: syz [ 797.353400][ T5621] cdc_wdm 4-1:1.0: skipping garbage [ 797.353419][ T5621] cdc_wdm 4-1:1.0: skipping garbage [ 797.416111][ T5621] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 797.416187][ T5621] cdc_wdm 4-1:1.0: Unknown control protocol [ 798.881775][ T5916] usb 4-1: USB disconnect, device number 18 [ 801.932360][ T37] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 802.216356][ T37] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 802.216394][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.216411][ T37] usb 1-1: Product: syz [ 802.216423][ T37] usb 1-1: Manufacturer: syz [ 802.216435][ T37] usb 1-1: SerialNumber: syz [ 802.224320][ T37] usb 1-1: config 0 descriptor?? [ 802.623541][ T37] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 803.905154][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2700'. [ 804.931315][ T37] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 804.974632][ T37] usb 1-1: USB disconnect, device number 8 [ 806.588511][ T4933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 806.672124][ T4933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 806.697254][ T4933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 806.714575][ T4933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 806.716829][ T4933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 808.283428][T13855] syz_tun (unregistering): left allmulticast mode [ 808.614774][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.614998][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.969193][ T60] Bluetooth: hci5: command tx timeout [ 809.337619][T13989] netlink: 'syz.4.2736': attribute type 11 has an invalid length. [ 809.900484][T13992] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 809.900513][T13992] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 810.987078][ T60] Bluetooth: hci5: command tx timeout [ 812.259331][T14016] loop3: detected capacity change from 0 to 64 [ 812.377515][T14016] hfs: request for non-existent node 131072 in B*Tree [ 812.377533][T14016] hfs: request for non-existent node 131072 in B*Tree [ 812.378403][T14016] hfs: request for non-existent node 131072 in B*Tree [ 812.378417][T14016] hfs: request for non-existent node 131072 in B*Tree [ 812.409859][T14016] hfs: request for non-existent node 131072 in B*Tree [ 812.409875][T14016] hfs: request for non-existent node 131072 in B*Tree [ 812.460747][T14016] hfs: request for non-existent node 131072 in B*Tree [ 812.460766][T14016] hfs: request for non-existent node 131072 in B*Tree [ 813.086812][ T60] Bluetooth: hci5: command tx timeout [ 814.613418][ T5604] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 814.775229][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 814.775260][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.776799][ T5604] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 814.776824][ T5604] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 814.776842][ T5604] usb 4-1: Manufacturer: syz [ 814.849813][ T5604] usb 4-1: config 0 descriptor?? [ 815.105855][T14041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.107334][T14041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.193531][ T60] Bluetooth: hci5: command tx timeout [ 815.321644][T13935] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.322048][T13935] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.336837][T13935] bridge_slave_0: entered allmulticast mode [ 815.340218][T13935] bridge_slave_0: entered promiscuous mode [ 815.395949][T13935] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.404918][T13935] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.405212][T13935] bridge_slave_1: entered allmulticast mode [ 815.481535][T13935] bridge_slave_1: entered promiscuous mode [ 815.574745][ T5604] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 815.574796][ T5604] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 815.574821][ T5604] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 815.574845][ T5604] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 815.574869][ T5604] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 815.878786][T13935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.938826][T13935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.082909][T13935] team0: Port device team_slave_0 added [ 816.087414][T13935] team0: Port device team_slave_1 added [ 816.230716][T13935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.230733][T13935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.230757][T13935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.251175][ T5604] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 816.337463][T13935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.337479][T13935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.337502][T13935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.406903][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 816.406921][ T38] audit: type=1326 audit(1779301950.209:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 816.452136][ T38] audit: type=1326 audit(1779301950.219:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 816.457376][ T5604] usb 4-1: USB disconnect, device number 19 [ 816.460605][ T38] audit: type=1326 audit(1779301950.269:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 816.460890][ T38] audit: type=1326 audit(1779301950.269:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 816.461335][ T38] audit: type=1326 audit(1779301950.269:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 816.461583][ T38] audit: type=1326 audit(1779301950.269:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 816.598270][ T38] audit: type=1326 audit(1779301950.269:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 816.598667][ T38] audit: type=1326 audit(1779301950.409:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 816.600840][ T38] audit: type=1326 audit(1779301950.409:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 816.601114][ T38] audit: type=1326 audit(1779301950.409:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.3.2766" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15169bce59 code=0x7ffc0000 [ 817.192426][T14087] fido_id[14087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 818.176345][T13935] hsr_slave_0: entered promiscuous mode [ 818.178238][T13935] hsr_slave_1: entered promiscuous mode [ 818.179696][T13935] debugfs: 'hsr0' already exists in 'hsr' [ 818.179718][T13935] Cannot create hsr debugfs directory [ 818.273787][ T4933] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 820.055676][ T4933] Bluetooth: hci5: command 0x0405 tx timeout [ 820.116281][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 820.447805][T13935] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.023262][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 822.071253][T13935] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.342415][ T60] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 822.342582][ T60] Bluetooth: hci3: Injecting HCI hardware error event [ 822.345347][ T60] Bluetooth: hci3: hardware error 0x00 [ 822.507419][ T5721] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 822.706406][ T5721] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 822.706433][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.706449][ T5721] usb 4-1: Product: syz [ 822.706460][ T5721] usb 4-1: Manufacturer: syz [ 822.706471][ T5721] usb 4-1: SerialNumber: syz [ 822.717427][ T5721] usb 4-1: config 0 descriptor?? [ 822.766977][T13935] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.089714][ T5721] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 825.508950][ T60] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 825.625915][ T5721] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 826.202977][T13935] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.267334][ T37] usb 4-1: USB disconnect, device number 20 [ 830.459147][T13935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 831.036189][T13935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 831.462616][T13935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 832.197010][T13935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 832.211043][T13935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 832.260191][T13935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 832.276082][T13935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 832.318032][T13935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.555996][T13935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.586425][T13935] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.608151][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.608387][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.948837][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.948989][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.031209][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2816'. [ 833.370257][T14245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.777901][T14264] batman_adv: batadv0: Interface deactivated: dummy0 [ 833.889459][ T70] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.892250][ T70] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.892293][ T70] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.892324][ T70] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.399934][T13935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.710255][T14304] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 835.710649][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'. [ 836.819001][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2838'. [ 836.819023][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2838'. [ 837.300160][T14331] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2843'. [ 838.132665][T13935] veth0_vlan: entered promiscuous mode [ 838.275443][T13935] veth1_vlan: entered promiscuous mode [ 838.338763][T13935] veth0_macvtap: entered promiscuous mode [ 838.355909][T13935] veth1_macvtap: entered promiscuous mode [ 838.398200][T13935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.413531][T13935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.451069][ T1554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.461566][ T1554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.480929][ T1554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.483058][ T1554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.843394][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2847'. [ 840.909597][T14367] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2856'. [ 842.712090][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2859'. [ 842.736816][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2860'. [ 842.738436][T13287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.738452][T13287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.943082][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.943100][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.096762][T14386] bridge0: port 3(vlan2) entered blocking state [ 843.097119][T14386] bridge0: port 3(vlan2) entered disabled state [ 843.097433][T14386] vlan2: entered allmulticast mode [ 843.097448][T14386] geneve0: entered allmulticast mode [ 843.100139][T14386] vlan2: entered promiscuous mode [ 843.101750][T14386] geneve0: entered promiscuous mode [ 846.116938][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'. [ 846.202642][ T823] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 846.376991][ T823] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 846.377045][ T823] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 846.377067][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.421182][ T823] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 846.458664][T14419] syz_tun (unregistering): left allmulticast mode [ 848.292090][ T823] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 848.292104][ T823] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 848.316103][ T823] usb 4-1: USB disconnect, device number 21 [ 849.800712][ T4933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 850.078117][ T4933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 850.112480][ T4933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 850.121026][ T4933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 850.128300][ T4933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 853.408937][ T4933] Bluetooth: hci0: command tx timeout [ 855.408123][T14501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'. [ 855.408147][T14501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'. [ 855.408160][T14501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'. [ 855.466578][ T60] Bluetooth: hci0: command tx timeout [ 855.494045][ T60] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 855.783987][T14443] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.785824][T14443] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.786090][T14443] bridge_slave_0: entered allmulticast mode [ 855.814933][T14443] bridge_slave_0: entered promiscuous mode [ 855.835386][T14443] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.835720][T14443] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.835969][T14443] bridge_slave_1: entered allmulticast mode [ 855.838959][T14443] bridge_slave_1: entered promiscuous mode [ 855.933096][T14443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.938716][T14443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.016515][T14443] team0: Port device team_slave_0 added [ 856.028241][T14443] team0: Port device team_slave_1 added [ 856.079832][T14443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.079848][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.079872][T14443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.155835][T14443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.155850][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.155870][T14443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.296470][ T60] Bluetooth: hci0: command tx timeout [ 858.747246][T14047] IPVS: starting estimator thread 0... [ 858.818161][T14538] loop3: detected capacity change from 0 to 4096 [ 858.834503][T14539] IPVS: using max 10 ests per chain, 24000 per kthread [ 858.999238][T14541] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.004093][T14541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.076549][T14443] hsr_slave_0: entered promiscuous mode [ 859.079107][T14443] hsr_slave_1: entered promiscuous mode [ 859.096598][T14443] debugfs: 'hsr0' already exists in 'hsr' [ 859.096617][T14443] Cannot create hsr debugfs directory [ 859.252348][ T5721] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 859.426609][ T5721] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 859.426641][ T5721] usb 2-1: config 0 interface 0 has no altsetting 0 [ 859.426670][ T5721] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 859.426691][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.467892][ T5721] usb 2-1: config 0 descriptor?? [ 859.542376][ T4933] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 859.568621][ T4933] Bluetooth: hci5: Injecting HCI hardware error event [ 859.591827][ T4933] Bluetooth: hci5: hardware error 0x00 [ 859.927585][ T5721] zeroplus 0003:0C12:0005.0002: unknown main item tag 0x0 [ 859.927615][ T5721] zeroplus 0003:0C12:0005.0002: unknown main item tag 0x0 [ 859.927633][ T5721] zeroplus 0003:0C12:0005.0002: unknown main item tag 0x0 [ 859.927648][ T5721] zeroplus 0003:0C12:0005.0002: unknown main item tag 0x0 [ 859.927661][ T5721] zeroplus 0003:0C12:0005.0002: unknown main item tag 0x0 [ 859.927676][ T5721] zeroplus 0003:0C12:0005.0002: unknown main item tag 0x0 [ 859.927723][ T5721] zeroplus 0003:0C12:0005.0002: unbalanced collection at end of report description [ 859.939440][ T5721] zeroplus 0003:0C12:0005.0002: parse failed [ 859.939506][ T5721] zeroplus 0003:0C12:0005.0002: probe with driver zeroplus failed with error -22 [ 860.113548][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 860.113579][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 860.129483][ T5721] usb 2-1: USB disconnect, device number 6 [ 860.344585][ T60] Bluetooth: hci0: command tx timeout [ 860.647504][ T10] IPVS: starting estimator thread 0... [ 860.762392][T14566] IPVS: using max 10 ests per chain, 24000 per kthread [ 860.950195][T14573] netlink: 'syz.4.2925': attribute type 4 has an invalid length. [ 860.980006][T14573] netlink: 'syz.4.2925': attribute type 4 has an invalid length. [ 861.972088][ T4933] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 863.253318][T14603] lo speed is unknown, defaulting to 1000 [ 863.253635][T14603] lo speed is unknown, defaulting to 1000 [ 863.256668][T14603] lo speed is unknown, defaulting to 1000 [ 863.259652][T14603] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 863.259672][T14603] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 863.259693][T14603] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 863.264355][T14603] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 863.271275][T14603] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 863.306344][T14603] lo speed is unknown, defaulting to 1000 [ 863.308974][T14603] lo speed is unknown, defaulting to 1000 [ 863.310583][T14603] lo speed is unknown, defaulting to 1000 [ 863.314957][T14603] lo speed is unknown, defaulting to 1000 [ 863.316553][T14603] lo speed is unknown, defaulting to 1000 [ 863.318222][T14603] lo speed is unknown, defaulting to 1000 [ 863.319848][T14603] lo speed is unknown, defaulting to 1000 [ 863.321499][T14603] lo speed is unknown, defaulting to 1000 [ 866.045292][T14047] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 866.235944][T14047] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.235970][T14047] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 866.264326][T14047] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 866.264366][T14047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.264383][T14047] usb 4-1: Product: syz [ 866.264395][T14047] usb 4-1: Manufacturer: syz [ 866.264407][T14047] usb 4-1: SerialNumber: syz [ 866.331953][T14047] usb 4-1: cannot find UAC_HEADER [ 866.466346][T14047] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 866.517225][T14190] udevd[14190]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.539694][ T10] usb 4-1: USB disconnect, device number 22 [ 867.103708][T14443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 868.154953][T14443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.332501][T14443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 868.674565][T14663] Invalid ELF header magic: != ELF [ 869.351090][T14443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.481769][T14443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 869.550852][T14443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.585044][T14443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 869.637085][T14443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.757748][T14671] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 869.758171][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.801467][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.809378][T14675] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2955'. [ 869.827041][T14671] bridge0: entered allmulticast mode [ 870.030454][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.030541][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.286882][T14443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.659689][T14443] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.817680][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.817937][ T1554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.014951][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.015057][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.443993][T14710] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 874.417024][T14745] loop1: detected capacity change from 0 to 256 [ 874.534509][ T38] kauditd_printk_skb: 16 callbacks suppressed [ 874.534528][ T38] audit: type=1800 audit(1779302008.289:213): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2983" name="file2" dev="loop1" ino=1048615 res=0 errno=0 [ 874.807780][T14443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.880526][ T10] IPVS: starting estimator thread 0... [ 874.963016][T14751] IPVS: using max 9 ests per chain, 21600 per kthread [ 875.015866][T14736] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2980'. [ 875.103121][T14756] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 875.125247][T14758] fuse: fd is not a fuse device [ 875.264358][T14443] veth0_vlan: entered promiscuous mode [ 875.320187][T14443] veth1_vlan: entered promiscuous mode [ 875.420283][T14443] veth0_macvtap: entered promiscuous mode [ 876.194697][T14443] veth1_macvtap: entered promiscuous mode [ 876.363425][T14773] loop1: detected capacity change from 0 to 1024 [ 876.379412][T14443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.436698][T14443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.466833][T14410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.489222][T14410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.504855][T14410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.527719][T14410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.115116][T14773] hfsplus: failed to load extents file [ 878.437736][T14798] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2999'. [ 879.465943][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.465961][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.816262][ T2281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.816275][ T2281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.016102][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3005'. [ 881.557914][T14839] overlayfs: missing 'lowerdir' [ 882.510083][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 882.590514][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 882.596662][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 882.600215][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 882.600863][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 883.807010][T14871] loop2: detected capacity change from 0 to 4096 [ 884.039178][T14298] syz_tun (unregistering): left allmulticast mode [ 884.069135][T14871] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 884.622892][T14908] trusted_key: syz.0.3029 sent an empty control message without MSG_MORE. [ 884.669237][ T4933] Bluetooth: hci2: command tx timeout [ 884.905563][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3035'. [ 885.869983][ T1554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.526647][T14842] lo speed is unknown, defaulting to 1000 [ 886.745426][ T4933] Bluetooth: hci2: command tx timeout [ 887.232887][ T1554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.158217][ T1554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.852475][ T4933] Bluetooth: hci2: command tx timeout [ 888.968749][ T1554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.122404][T14664] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 889.296106][T14664] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 889.296135][T14664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.296152][T14664] usb 3-1: Product: syz [ 889.296164][T14664] usb 3-1: Manufacturer: syz [ 889.296176][T14664] usb 3-1: SerialNumber: syz [ 890.055342][T14664] usb 3-1: config 0 descriptor?? [ 890.284823][T15022] loop3: detected capacity change from 0 to 64 [ 890.322704][T14664] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 890.351769][T15022] hfs: request for non-existent node 131072 in B*Tree [ 890.351785][T15022] hfs: request for non-existent node 131072 in B*Tree [ 890.356720][T15022] hfs: request for non-existent node 131072 in B*Tree [ 890.356735][T15022] hfs: request for non-existent node 131072 in B*Tree [ 890.512674][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 890.551795][T15028] loop1: detected capacity change from 0 to 764 [ 890.909217][ T4933] Bluetooth: hci2: command tx timeout [ 891.258544][T15022] hfs: request for non-existent node 131072 in B*Tree [ 891.258563][T15022] hfs: request for non-existent node 131072 in B*Tree [ 891.327678][T15030] hfs: request for non-existent node 131072 in B*Tree [ 891.327696][T15030] hfs: request for non-existent node 131072 in B*Tree [ 891.407965][T14664] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 891.481942][T15022] hfs: request for non-existent node 131072 in B*Tree [ 891.481960][T15022] hfs: request for non-existent node 131072 in B*Tree [ 891.498445][T15022] hfs: request for non-existent node 131072 in B*Tree [ 891.498462][T15022] hfs: request for non-existent node 131072 in B*Tree [ 891.500434][T15022] hfs: request for non-existent node 12 in B*Tree [ 891.500448][T15022] hfs: request for non-existent node 12 in B*Tree [ 891.759477][T15028] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 892.569088][ T5604] usb 3-1: USB disconnect, device number 3 [ 892.723584][T15066] netlink: 'syz.1.3080': attribute type 10 has an invalid length. [ 893.096410][T15066] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.183601][T15066] bond0: (slave team0): Enslaving as an active interface with an up link [ 893.992805][ T1554] bridge_slave_1: left allmulticast mode [ 893.993039][ T1554] bridge_slave_1: left promiscuous mode [ 894.042558][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.274138][ T1554] bridge_slave_0: left allmulticast mode [ 894.274162][ T1554] bridge_slave_0: left promiscuous mode [ 894.337514][ T1554] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.704745][ T1554] dvmrp6: left allmulticast mode [ 894.712400][ T5889] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 894.877172][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 894.877205][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.877239][ T5889] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 894.877262][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.923224][T14664] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 894.948202][ T5889] usb 2-1: config 0 descriptor?? [ 895.106544][T14664] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 895.106572][T14664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.106584][T14664] usb 4-1: Product: syz [ 895.106592][T14664] usb 4-1: Manufacturer: syz [ 895.106598][T14664] usb 4-1: SerialNumber: syz [ 895.118300][T14664] usb 4-1: config 0 descriptor?? [ 895.310264][T15122] loop2: detected capacity change from 0 to 2048 [ 895.407231][ T5889] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 895.407266][ T5889] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 895.407289][ T5889] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 895.407312][ T5889] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 895.407334][ T5889] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 895.407357][ T5889] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 895.407380][ T5889] isku 0003:1E7D:319C.0003: unknown main item tag 0x0 [ 895.411521][ T5889] isku 0003:1E7D:319C.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 895.447656][T14664] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 895.890982][T15122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.091983][T14664] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 896.252848][ T5889] usb 2-1: USB disconnect, device number 7 [ 896.359322][T14443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.346051][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 897.347246][T14842] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.347489][T14842] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.347746][T14842] bridge_slave_0: entered allmulticast mode [ 897.397012][T14842] bridge_slave_0: entered promiscuous mode [ 897.421345][T14842] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.421576][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.421868][T14842] bridge_slave_1: entered allmulticast mode [ 897.434641][T14842] bridge_slave_1: entered promiscuous mode [ 897.562506][T14842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.568897][T14842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.805273][ T5604] usb 4-1: USB disconnect, device number 23 [ 897.888829][ T1554] tipc: Left network mode [ 897.993025][T14842] team0: Port device team_slave_0 added [ 898.000572][T14842] team0: Port device team_slave_1 added [ 898.335798][T14842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.335814][T14842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.335837][T14842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.345788][T14842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.345804][T14842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.345827][T14842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.781742][T15172] loop3: detected capacity change from 0 to 512 [ 899.664456][T15172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.330284][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.410386][T15181] loop1: detected capacity change from 0 to 32768 [ 900.662889][ T5604] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 900.784803][T15181] jfs_strtoUCS: char2uni returned -22. [ 900.784819][T15181] charset = cp950, char = 0xd4 [ 900.908777][ T5604] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 900.908804][ T5604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.908822][ T5604] usb 3-1: Product: syz [ 900.908834][ T5604] usb 3-1: Manufacturer: syz [ 900.908846][ T5604] usb 3-1: SerialNumber: syz [ 900.945515][ T5604] usb 3-1: config 0 descriptor?? [ 901.262083][ T5604] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 901.453309][T14842] hsr_slave_0: entered promiscuous mode [ 901.456183][T14842] hsr_slave_1: entered promiscuous mode [ 901.457759][T14842] debugfs: 'hsr0' already exists in 'hsr' [ 901.457782][T14842] Cannot create hsr debugfs directory [ 902.637958][ T5604] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 904.220824][ T5621] usb 3-1: USB disconnect, device number 4 [ 905.206237][T15240] Invalid ELF header magic: != ELF [ 906.050214][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 906.174474][T15247] loop2: detected capacity change from 0 to 1024 [ 906.211874][T15247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 906.309625][T15247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.512339][ T1554] hsr_slave_0: left promiscuous mode [ 906.560194][ T1554] hsr_slave_1: left promiscuous mode [ 906.561457][ T1554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.561544][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.763631][ T1554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.763656][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.043684][T14443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.152545][ T1554] veth1_macvtap: left promiscuous mode [ 908.152832][ T1554] veth0_macvtap: left promiscuous mode [ 908.157787][ T1554] veth1_vlan: left promiscuous mode [ 908.164196][ T1554] veth0_vlan: left promiscuous mode [ 908.242310][ T5604] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 908.399803][ T5604] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 908.399833][ T5604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.399851][ T5604] usb 2-1: Product: syz [ 908.399863][ T5604] usb 2-1: Manufacturer: syz [ 908.399874][ T5604] usb 2-1: SerialNumber: syz [ 908.444092][ T5604] usb 2-1: config 0 descriptor?? [ 908.490587][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3142'. [ 908.669145][ T5604] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 910.073657][ T5604] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 911.199080][T14047] usb 2-1: USB disconnect, device number 8 [ 915.523168][ T1554] team0 (unregistering): Port device team_slave_1 removed [ 915.562974][ T1554] team0 (unregistering): Port device team_slave_0 removed [ 916.074229][T15272] bridge0: entered allmulticast mode [ 916.281025][T15337] macsec1: entered promiscuous mode [ 916.281046][T15337] bridge0: entered promiscuous mode [ 916.281349][T15337] macsec1: entered allmulticast mode [ 916.281361][T15337] bridge0: entered allmulticast mode [ 917.251834][T15337] bridge0: left allmulticast mode [ 917.265161][T15350] loop1: detected capacity change from 0 to 128 [ 917.284235][T15350] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 917.344741][T15350] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 917.359975][T15350] ext2 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.723961][ T5604] bridge0: left promiscuous mode [ 917.807092][T13935] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 918.444585][T14664] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 918.617138][T14664] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 918.617167][T14664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.617185][T14664] usb 3-1: Product: syz [ 918.617197][T14664] usb 3-1: Manufacturer: syz [ 918.617208][T14664] usb 3-1: SerialNumber: syz [ 918.629790][T14664] usb 3-1: config 0 descriptor?? [ 918.919189][T14664] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 920.274880][T14664] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 921.407570][T10813] usb 3-1: USB disconnect, device number 5 [ 922.717362][T15405] syzkaller0: entered promiscuous mode [ 922.717400][T15405] syzkaller0: entered allmulticast mode [ 924.629457][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'. [ 924.997193][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'. [ 925.754325][ T5721] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 925.894258][ T5721] usb 4-1: device descriptor read/64, error -71 [ 926.152344][ T5721] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 926.339394][ T5721] usb 4-1: device descriptor read/64, error -71 [ 926.828526][ T5721] usb usb4-port1: attempt power cycle [ 927.302976][ T5721] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 928.301178][ T5721] usb 4-1: device descriptor read/8, error -71 [ 928.564575][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 928.564598][T15467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 930.085393][T15482] fuse: fd is not a fuse device [ 931.467639][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.467711][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.577641][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 935.625957][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 935.631348][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 935.670895][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 935.684470][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 937.862597][ T60] Bluetooth: hci4: command tx timeout [ 937.930869][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 937.930884][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 939.942791][ T60] Bluetooth: hci4: command tx timeout [ 940.248906][ T4933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 940.258253][ T4933] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 940.270295][ T4933] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 940.320359][ T4933] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 940.320997][ T4933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 941.797230][ T4933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 941.801181][ T4933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 941.810804][ T4933] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 941.837856][ T4933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 941.838579][ T4933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 942.032413][ T60] Bluetooth: hci4: command tx timeout [ 942.627559][ T60] Bluetooth: hci6: command tx timeout [ 944.042944][ T60] Bluetooth: hci7: command tx timeout [ 944.111630][ T60] Bluetooth: hci4: command tx timeout [ 944.675177][ T60] Bluetooth: hci6: command tx timeout [ 946.102459][ T60] Bluetooth: hci7: command tx timeout [ 946.741813][ T4933] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 946.770336][T13265] Bluetooth: hci6: command tx timeout [ 946.774618][T15546] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 946.823631][T15546] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 946.836019][T15546] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 946.836682][T15546] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 948.756945][ T60] Bluetooth: hci7: command tx timeout [ 948.800267][T15562] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3224'. [ 948.822979][ T60] Bluetooth: hci6: command tx timeout [ 948.903323][ T60] Bluetooth: hci8: command tx timeout [ 949.291674][T15571] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3225'. [ 949.689287][T15486] syz_tun (unregistering): left allmulticast mode [ 949.785871][ T1554] IPVS: stop unused estimator thread 0... [ 950.314654][T15533] lo speed is unknown, defaulting to 1000 [ 950.356160][T15509] lo speed is unknown, defaulting to 1000 [ 950.421668][T15538] lo speed is unknown, defaulting to 1000 [ 950.834907][ T60] Bluetooth: hci7: command tx timeout [ 951.019601][ T60] Bluetooth: hci8: command tx timeout [ 951.334656][T15606] sctp: [Deprecated]: syz.0.3228 (pid 15606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 951.334656][T15606] Use struct sctp_sack_info instead [ 951.667090][ T1554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.974293][T15609] netlink: 'syz.0.3229': attribute type 16 has an invalid length. [ 951.974314][T15609] netlink: 'syz.0.3229': attribute type 17 has an invalid length. [ 952.120156][T15609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.121638][T15609] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.130736][T15609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.392890][T15609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.398649][T15609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 952.398663][T15609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 952.406794][T15609] veth1_vlan: left promiscuous mode [ 952.408767][T15609] veth0_vlan: left promiscuous mode [ 952.410423][T15609] veth0_vlan: entered promiscuous mode [ 952.416577][T15609] veth1_vlan: entered promiscuous mode [ 952.425978][T15609] veth1_macvtap: left promiscuous mode [ 952.427914][T15609] veth0_macvtap: left promiscuous mode [ 952.429696][T15609] veth0_macvtap: entered promiscuous mode [ 952.431525][T15609] veth1_macvtap: entered promiscuous mode [ 952.444748][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 952.446473][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 952.448085][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 952.450546][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.469203][T15609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 952.471196][T15609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 952.556076][T14664] lo speed is unknown, defaulting to 1000 [ 952.561755][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.561888][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.565789][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.565945][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.600983][T14664] syz2: Port: 1 Link ACTIVE [ 953.062530][ T60] Bluetooth: hci8: command tx timeout [ 953.590242][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.633611][T15543] lo speed is unknown, defaulting to 1000 [ 953.766238][T15617] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3231'. [ 953.803532][ T1554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.988301][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.119114][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.210082][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.386717][ T1554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.589896][T15642] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3232'. [ 954.769822][ T1554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.158154][ T60] Bluetooth: hci8: command tx timeout [ 957.011349][T15509] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.012762][T15509] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.013026][T15509] bridge_slave_0: entered allmulticast mode [ 957.019571][T15509] bridge_slave_0: entered promiscuous mode [ 957.024245][T15533] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.024475][T15533] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.024704][T15533] bridge_slave_0: entered allmulticast mode [ 957.027643][T15533] bridge_slave_0: entered promiscuous mode [ 957.355612][ T1554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.409097][T15509] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.409340][T15509] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.409646][T15509] bridge_slave_1: entered allmulticast mode [ 957.414512][T15509] bridge_slave_1: entered promiscuous mode [ 957.427806][T15533] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.428038][T15533] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.428273][T15533] bridge_slave_1: entered allmulticast mode [ 957.431413][T15533] bridge_slave_1: entered promiscuous mode [ 957.483910][T15538] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.484140][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.484418][T15538] bridge_slave_0: entered allmulticast mode [ 957.524722][T15538] bridge_slave_0: entered promiscuous mode [ 957.737597][T15538] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.737846][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.738531][T15538] bridge_slave_1: entered allmulticast mode [ 957.741643][T15538] bridge_slave_1: entered promiscuous mode [ 957.864382][T15509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.109768][ T1554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.149248][T15533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.191836][T15509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.215078][T15533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.238406][T15538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.294900][T15538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.551378][ T1554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.607255][T15509] team0: Port device team_slave_0 added [ 958.611069][T15533] team0: Port device team_slave_0 added [ 958.627791][T15543] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.627982][T15543] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.628162][T15543] bridge_slave_0: entered allmulticast mode [ 958.631342][T15543] bridge_slave_0: entered promiscuous mode [ 958.936994][T15509] team0: Port device team_slave_1 added [ 958.941567][T15533] team0: Port device team_slave_1 added [ 958.957880][T15543] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.958194][T15543] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.958488][T15543] bridge_slave_1: entered allmulticast mode [ 958.961936][T15543] bridge_slave_1: entered promiscuous mode [ 958.978132][T15538] team0: Port device team_slave_0 added [ 959.064217][T15538] team0: Port device team_slave_1 added [ 960.065281][ T1554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.415294][T10813] kernel read not supported for file [fscontext] (pid: 10813 comm: kworker/1:0) [ 961.002400][T15509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.002411][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.002425][T15509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.004085][T15533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.004094][T15533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.004108][T15533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.036495][T15543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.176830][T15509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.176845][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.176868][T15509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.250640][T15533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.250655][T15533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.250679][T15533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.257256][T15543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.259364][T15538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.259375][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.259399][T15538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.317717][T15538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.317732][T15538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.317755][T15538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.384333][T15543] team0: Port device team_slave_0 added [ 962.019149][ T38] audit: type=1326 audit(1779302095.379:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15751 comm="syz.0.3241" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f274d54ce59 code=0x0 [ 962.420634][T15543] team0: Port device team_slave_1 added [ 962.499523][T15765] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3242'. [ 962.499923][T15765] unsupported nlmsg_type 40 [ 962.626669][T15509] hsr_slave_0: entered promiscuous mode [ 962.628489][T15509] hsr_slave_1: entered promiscuous mode [ 962.643818][T15509] debugfs: 'hsr0' already exists in 'hsr' [ 962.643842][T15509] Cannot create hsr debugfs directory [ 962.674846][T15533] hsr_slave_0: entered promiscuous mode [ 962.678035][T15533] hsr_slave_1: entered promiscuous mode [ 962.679629][T15533] debugfs: 'hsr0' already exists in 'hsr' [ 962.679650][T15533] Cannot create hsr debugfs directory [ 962.775341][T15543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.775358][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.775380][T15543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.799378][T15538] hsr_slave_0: entered promiscuous mode [ 962.805576][T15538] hsr_slave_1: entered promiscuous mode [ 962.808043][T15538] debugfs: 'hsr0' already exists in 'hsr' [ 962.808064][T15538] Cannot create hsr debugfs directory [ 962.827519][T15543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.827533][T15543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.827557][T15543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.041780][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 963.327222][T15543] hsr_slave_0: entered promiscuous mode [ 963.329078][T15543] hsr_slave_1: entered promiscuous mode [ 963.330619][T15543] debugfs: 'hsr0' already exists in 'hsr' [ 963.330639][T15543] Cannot create hsr debugfs directory [ 964.578805][T15779] pimreg: entered allmulticast mode [ 965.900269][ T1554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.436192][ T1554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.803286][ T1554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.183783][T15509] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 968.865600][T15509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 969.009555][T15509] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 969.078774][T15509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 969.307305][ T1554] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.356479][T15509] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 969.400912][T15509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 969.556114][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 969.557479][T15509] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 969.580338][T15509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 969.962837][T15533] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 969.996567][T15533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 970.045455][T15840] netlink: 'syz.0.3258': attribute type 10 has an invalid length. [ 970.072264][T15533] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 970.115523][T15533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 970.163051][T15533] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 970.300819][T15533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 970.623696][T15533] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 970.674507][T15533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 970.970194][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 971.544696][ T1554] vlan2: left allmulticast mode [ 971.544711][ T1554] geneve0: left allmulticast mode [ 971.544730][ T1554] vlan2: left promiscuous mode [ 971.544736][ T1554] geneve0: left promiscuous mode [ 971.544996][ T1554] bridge0: port 3(vlan2) entered disabled state [ 972.425234][ T1554] bridge_slave_1: left allmulticast mode [ 972.425266][ T1554] bridge_slave_1: left promiscuous mode [ 972.425525][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.564461][ T1554] bridge_slave_0: left allmulticast mode [ 972.564484][ T1554] bridge_slave_0: left promiscuous mode [ 972.564678][ T1554] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.668896][ T1554] dvmrp6: left allmulticast mode [ 972.679526][ T1554] pimreg3: left allmulticast mode [ 972.762513][ T1554] bridge_slave_1: left allmulticast mode [ 972.762591][ T1554] bridge_slave_1: left promiscuous mode [ 972.762763][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.893152][ T1554] bridge_slave_0: left allmulticast mode [ 972.893175][ T1554] bridge_slave_0: left promiscuous mode [ 972.893341][ T1554] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.092689][ T1554] bridge_slave_1: left allmulticast mode [ 973.092714][ T1554] bridge_slave_1: left promiscuous mode [ 973.092878][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.193485][ T1554] bridge_slave_0: left allmulticast mode [ 973.193508][ T1554] bridge_slave_0: left promiscuous mode [ 973.193666][ T1554] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.455663][ T1554] bridge_slave_1: left allmulticast mode [ 973.455697][ T1554] bridge_slave_1: left promiscuous mode [ 973.456012][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.593818][ T1554] bridge_slave_0: left allmulticast mode [ 973.593841][ T1554] bridge_slave_0: left promiscuous mode [ 973.594003][ T1554] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.696537][ T1554] dvmrp6: left allmulticast mode [ 975.123745][ T1554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.203046][ T1554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.253264][ T1554] bond0 (unregistering): Released all slaves [ 975.842758][ T1554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.924255][ T1554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.945224][ T1554] bond0 (unregistering): Released all slaves [ 976.673037][ T1554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.752976][ T1554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.814052][ T1554] bond0 (unregistering): (slave team0): Releasing backup interface [ 976.854459][ T1554] bond0 (unregistering): Released all slaves [ 977.422936][ T1554] bond2 (unregistering): (slave bridge1): Releasing active interface [ 977.673217][ T1554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.715008][ T1554] bond0 (unregistering): Released all slaves [ 977.721225][ T1554] bond1 (unregistering): Released all slaves [ 977.738027][ T1554] bond2 (unregistering): Released all slaves [ 977.780915][T15538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 977.797620][T15538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.826754][T15538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 977.994317][T15538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 978.020849][T15538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 978.131689][T15538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.148917][T15538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 978.213833][T15538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 979.796524][T15910] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3270'. [ 980.011643][T15509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.196457][T15543] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 980.285986][T15543] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 981.587559][T15543] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 981.681303][T15543] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 981.698889][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 981.708398][T15543] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 981.774590][T15543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 983.019829][T15509] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.312804][T15543] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 983.636550][T15942] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3277'. [ 983.735572][T15543] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 984.036809][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.037327][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.107996][T15820] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.108206][T15820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.497871][T15956] netlink: 'syz.0.3279': attribute type 21 has an invalid length. [ 985.243743][T15956] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3279'. [ 985.386553][T15533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.087884][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 986.287884][T15533] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.335508][T15538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.364328][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.364554][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.467012][T14410] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.467238][T14410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.654593][ T5721] kernel read not supported for file [fscontext] (pid: 5721 comm: kworker/1:5) [ 987.600043][T15983] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3284'. [ 988.695938][T15538] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.930733][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.930961][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.490798][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.490918][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.642165][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 989.716233][T15543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.277841][T15543] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.361234][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.370891][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.943073][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.948169][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.988057][T15509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.352262][ T1554] hsr_slave_0: left promiscuous mode [ 991.393652][ T1554] hsr_slave_1: left promiscuous mode [ 991.394866][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.433274][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.632344][ T1554] hsr_slave_0: left promiscuous mode [ 991.672411][ T1554] hsr_slave_1: left promiscuous mode [ 991.673499][ T1554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.673521][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.693436][ T1554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.693459][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.852291][ T1554] hsr_slave_0: left promiscuous mode [ 991.872254][ T1554] hsr_slave_1: left promiscuous mode [ 991.873333][ T1554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.873363][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.924297][ T1554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.924322][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.062469][ T1554] hsr_slave_0: left promiscuous mode [ 992.102416][ T1554] hsr_slave_1: left promiscuous mode [ 992.103434][ T1554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.103457][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.126252][ T1554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.126277][ T1554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.305606][ T1554] veth1_macvtap: left promiscuous mode [ 992.305706][ T1554] veth0_macvtap: left promiscuous mode [ 992.305989][ T1554] veth1_vlan: left promiscuous mode [ 992.326348][ T1554] veth0_vlan: left promiscuous mode [ 992.452623][ T1554] veth1_macvtap: left promiscuous mode [ 992.452682][ T1554] veth0_macvtap: left promiscuous mode [ 992.482250][ T1554] veth1_vlan: left promiscuous mode [ 992.482509][ T1554] veth0_vlan: left promiscuous mode [ 992.602357][ T1554] veth1_macvtap: left promiscuous mode [ 992.602435][ T1554] veth0_macvtap: left promiscuous mode [ 992.602979][ T1554] veth1_vlan: left promiscuous mode [ 992.603167][ T1554] veth0_vlan: left promiscuous mode [ 992.909117][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.615713][ T5721] kernel read not supported for file [fscontext] (pid: 5721 comm: kworker/1:5) [ 994.687847][T16056] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3291'. [ 994.700388][T15546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 994.744832][T15546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 994.747655][T15546] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 994.765782][T15546] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 994.773414][T15546] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 995.385479][T16061] trusted_key: encrypted_key: insufficient parameters specified [ 995.484604][ T1554] team0 (unregistering): Port device team_slave_1 removed [ 995.523566][ T1554] team0 (unregistering): Port device team_slave_0 removed [ 996.143266][ T1554] team0 (unregistering): Port device team_slave_1 removed [ 996.203562][ T1554] team0 (unregistering): Port device team_slave_0 removed [ 996.773370][ T1554] team0 (unregistering): Port device team_slave_1 removed [ 996.822854][ T1554] team0 (unregistering): Port device team_slave_0 removed [ 996.839654][T15546] Bluetooth: hci0: command tx timeout [ 997.573100][ T1554] team0 (unregistering): Port device team_slave_1 removed [ 997.622679][ T1554] team0 (unregistering): Port device team_slave_0 removed [ 997.860383][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 998.916217][T15546] Bluetooth: hci0: command tx timeout [ 999.786373][T15533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.888006][T16054] lo speed is unknown, defaulting to 1000 [ 999.891724][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1000.360555][T15538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.991630][T15546] Bluetooth: hci0: command tx timeout [ 1001.505043][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1001.560335][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1001.579824][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1001.659233][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1001.661649][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1002.062879][T15543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.293800][T15546] Bluetooth: hci0: command tx timeout [ 1003.827723][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1003.888529][T13265] Bluetooth: hci2: command tx timeout [ 1003.949603][T13265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1003.951266][T13265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1003.968913][T13265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1004.015634][T13265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1005.145934][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1005.982194][T15546] Bluetooth: hci2: command tx timeout [ 1006.572668][T15546] Bluetooth: hci3: command tx timeout [ 1007.124006][T16188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1007.823952][T16124] lo speed is unknown, defaulting to 1000 [ 1008.026354][T15546] Bluetooth: hci2: command tx timeout [ 1008.047768][T13265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1008.123686][T13265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1008.141131][T13265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1008.161379][T13265] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1008.163015][T13265] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1009.213368][T16146] lo speed is unknown, defaulting to 1000 [ 1009.228508][T15546] Bluetooth: hci3: command tx timeout [ 1009.286971][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1009.297283][T16054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.297568][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.297838][T16054] bridge_slave_0: entered allmulticast mode [ 1009.304723][T16054] bridge_slave_0: entered promiscuous mode [ 1009.366431][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.368642][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.368824][T16054] bridge_slave_1: entered allmulticast mode [ 1009.374985][T16054] bridge_slave_1: entered promiscuous mode [ 1009.705922][T16054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.501664][T15546] Bluetooth: hci2: command tx timeout [ 1010.512327][T15546] Bluetooth: hci4: command tx timeout [ 1010.576451][T16054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.928118][T16054] team0: Port device team_slave_0 added [ 1010.969197][T16240] netlink: 'syz.0.3309': attribute type 11 has an invalid length. [ 1010.969216][T16240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1010.975185][T16054] team0: Port device team_slave_1 added [ 1011.078567][T16202] lo speed is unknown, defaulting to 1000 [ 1011.218631][T16054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.218644][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.218669][T16054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.231852][T16054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.231866][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.231889][T16054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.314995][T15546] Bluetooth: hci3: command tx timeout [ 1012.610039][T15546] Bluetooth: hci4: command tx timeout [ 1012.811063][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1012.829473][T16054] hsr_slave_0: entered promiscuous mode [ 1012.831436][T16054] hsr_slave_1: entered promiscuous mode [ 1013.411241][T13265] Bluetooth: hci3: command tx timeout [ 1013.963570][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.963923][T16124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.964177][T16124] bridge_slave_0: entered allmulticast mode [ 1013.967351][T16124] bridge_slave_0: entered promiscuous mode [ 1014.067513][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.067782][T16124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.068050][T16124] bridge_slave_1: entered allmulticast mode [ 1014.071335][T16124] bridge_slave_1: entered promiscuous mode [ 1014.702754][T13265] Bluetooth: hci4: command tx timeout [ 1015.008987][T16124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.157741][T16124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.824714][ T1554] IPVS: stop unused estimator thread 0... [ 1015.827070][ T1554] IPVS: stop unused estimator thread 0... [ 1015.830442][ T1554] IPVS: stop unused estimator thread 0... [ 1016.039480][T16124] team0: Port device team_slave_0 added [ 1016.040986][T16146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.041302][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.041546][T16146] bridge_slave_0: entered allmulticast mode [ 1016.045381][T16146] bridge_slave_0: entered promiscuous mode [ 1016.092508][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'. [ 1016.095167][T16146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.095379][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.095572][T16146] bridge_slave_1: entered allmulticast mode [ 1016.100305][T16146] bridge_slave_1: entered promiscuous mode [ 1016.136341][T16124] team0: Port device team_slave_1 added [ 1016.260219][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1016.445634][T16146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.461226][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.461241][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.461265][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.527860][T16146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.528855][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.528863][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.528876][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.745863][T13265] Bluetooth: hci4: command tx timeout [ 1017.507052][T16146] team0: Port device team_slave_0 added [ 1017.939018][T16146] team0: Port device team_slave_1 added [ 1020.247523][T16124] hsr_slave_0: entered promiscuous mode [ 1020.251685][T16124] hsr_slave_1: entered promiscuous mode [ 1020.259269][T16124] debugfs: 'hsr0' already exists in 'hsr' [ 1020.259292][T16124] Cannot create hsr debugfs directory [ 1020.307120][T16202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.307443][T16202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.307715][T16202] bridge_slave_0: entered allmulticast mode [ 1020.310818][T16202] bridge_slave_0: entered promiscuous mode [ 1020.357282][T16146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.357292][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.357306][T16146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.366115][T16202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.366347][T16202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.366643][T16202] bridge_slave_1: entered allmulticast mode [ 1020.376511][T16202] bridge_slave_1: entered promiscuous mode [ 1020.453788][T16146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.453804][T16146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.453829][T16146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.617322][ T38] audit: type=1326 audit(1779302154.429:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1020.617372][ T38] audit: type=1326 audit(1779302154.429:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1020.617408][ T38] audit: type=1326 audit(1779302154.429:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1020.617444][ T38] audit: type=1326 audit(1779302154.429:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1020.617480][ T38] audit: type=1326 audit(1779302154.429:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1020.617513][ T38] audit: type=1326 audit(1779302154.429:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1020.619911][ T38] audit: type=1326 audit(1779302154.429:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1020.624867][ T38] audit: type=1326 audit(1779302154.439:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1020.624912][ T38] audit: type=1326 audit(1779302154.439:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1020.624947][ T38] audit: type=1326 audit(1779302154.439:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16371 comm="syz.0.3321" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f274d54ce59 code=0x7ffc0000 [ 1021.816856][T16202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.879640][T16202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.289843][T16146] hsr_slave_0: entered promiscuous mode [ 1023.291716][T16146] hsr_slave_1: entered promiscuous mode [ 1023.294417][T16146] debugfs: 'hsr0' already exists in 'hsr' [ 1023.294440][T16146] Cannot create hsr debugfs directory [ 1023.528239][T16202] team0: Port device team_slave_0 added [ 1023.602636][T16202] team0: Port device team_slave_1 added [ 1023.909158][T16202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.909174][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.909194][T16202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.208132][T16202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.208151][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.208171][T16202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.724572][T16435] orangefs_mount: mount request failed with -4 [ 1024.943486][T16202] hsr_slave_0: entered promiscuous mode [ 1024.944739][T16202] hsr_slave_1: entered promiscuous mode [ 1024.945677][T16202] debugfs: 'hsr0' already exists in 'hsr' [ 1024.945698][T16202] Cannot create hsr debugfs directory [ 1025.158418][T16054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1025.185787][T16054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.260185][T16054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1025.347571][T16054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.200746][T16054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1028.197171][T16054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.456564][T16054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1028.503455][T16054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.530023][T16459] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3335'. [ 1032.298385][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1032.310817][T16054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.439133][T16054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.706753][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.706889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.732538][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.732722][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.822390][T15820] bridge_slave_1: left allmulticast mode [ 1033.822424][T15820] bridge_slave_1: left promiscuous mode [ 1033.822705][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.803048][T15820] bridge_slave_0: left allmulticast mode [ 1034.803069][T15820] bridge_slave_0: left promiscuous mode [ 1034.803235][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.062498][T15820] bridge_slave_1: left allmulticast mode [ 1035.062532][T15820] bridge_slave_1: left promiscuous mode [ 1035.062786][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.203256][T15820] bridge_slave_0: left allmulticast mode [ 1035.203280][T15820] bridge_slave_0: left promiscuous mode [ 1035.203446][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.422449][T15820] bridge_slave_1: left allmulticast mode [ 1035.422481][T15820] bridge_slave_1: left promiscuous mode [ 1035.422715][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.523758][T15820] bridge_slave_0: left allmulticast mode [ 1035.523793][T15820] bridge_slave_0: left promiscuous mode [ 1035.524056][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.762723][T15820] bridge_slave_1: left allmulticast mode [ 1035.762747][T15820] bridge_slave_1: left promiscuous mode [ 1035.762950][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.893113][T15820] bridge_slave_0: left allmulticast mode [ 1035.893136][T15820] bridge_slave_0: left promiscuous mode [ 1035.893301][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.092321][T15820] bridge_slave_1: left allmulticast mode [ 1036.092345][T15820] bridge_slave_1: left promiscuous mode [ 1036.092504][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.193647][T15820] bridge_slave_0: left allmulticast mode [ 1036.193680][T15820] bridge_slave_0: left promiscuous mode [ 1036.193857][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.224028][T15820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.282882][T15820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.304204][T15820] bond0 (unregistering): Released all slaves [ 1037.892798][T15820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.972909][T15820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.994265][T15820] bond0 (unregistering): Released all slaves [ 1038.542787][T15820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.622836][T15820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.644215][T15820] bond0 (unregistering): Released all slaves [ 1039.233012][T15820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.313310][T15820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.334103][T15820] bond0 (unregistering): Released all slaves [ 1039.583096][T15820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.683084][T15820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.744736][T15820] bond0 (unregistering): Released all slaves [ 1039.772571][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1041.152343][T16054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.937429][T16054] veth0_vlan: entered promiscuous mode [ 1041.983886][T16054] veth1_vlan: entered promiscuous mode [ 1042.499571][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1042.736390][T16054] veth0_macvtap: entered promiscuous mode [ 1042.809603][T16054] veth1_macvtap: entered promiscuous mode [ 1043.019579][T16054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.085376][T16054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.158159][ T1448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.158384][ T1448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.158418][ T1448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.158447][ T1448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.040463][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1045.382907][T15820] hsr_slave_0: left promiscuous mode [ 1045.545152][T15820] hsr_slave_1: left promiscuous mode [ 1045.547282][T15820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.573316][T15820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.562214][T15820] hsr_slave_0: left promiscuous mode [ 1047.602197][T15820] hsr_slave_1: left promiscuous mode [ 1047.602885][T15820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.623069][T15820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.782306][T15820] hsr_slave_0: left promiscuous mode [ 1047.802349][T15820] hsr_slave_1: left promiscuous mode [ 1047.803416][T15820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.843773][T15820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.982279][T15820] hsr_slave_0: left promiscuous mode [ 1048.002359][T15820] hsr_slave_1: left promiscuous mode [ 1048.003397][T15820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.042834][T15820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.202255][T15820] hsr_slave_0: left promiscuous mode [ 1048.242288][T15820] hsr_slave_1: left promiscuous mode [ 1048.243278][T15820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.263063][T15820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.902635][T15820] team0 (unregistering): Port device team_slave_1 removed [ 1048.954131][T15820] team0 (unregistering): Port device team_slave_0 removed [ 1049.302655][T15820] team0 (unregistering): Port device team_slave_1 removed [ 1049.343136][T15820] team0 (unregistering): Port device team_slave_0 removed [ 1049.693384][T15820] team0 (unregistering): Port device team_slave_1 removed [ 1049.712798][T15820] team0 (unregistering): Port device team_slave_0 removed [ 1050.083353][T15820] team0 (unregistering): Port device team_slave_1 removed [ 1050.105657][T15820] team0 (unregistering): Port device team_slave_0 removed [ 1050.472747][T15820] team0 (unregistering): Port device team_slave_1 removed [ 1050.497521][T15820] team0 (unregistering): Port device team_slave_0 removed [ 1050.837445][ T1554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.837476][ T1554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.885459][ T1406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.885475][ T1406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.369619][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.955989][T16729] netlink: 'syz.0.3369': attribute type 10 has an invalid length. [ 1058.606563][T15952] IPVS: starting estimator thread 0... [ 1058.692342][T16735] IPVS: using max 11 ests per chain, 26400 per kthread [ 1058.747359][T16124] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1058.873575][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1058.927111][T16124] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1058.945445][ T5721] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1059.077380][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1059.098700][T16124] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1059.114515][ T5721] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1059.114545][ T5721] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1059.114595][ T5721] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1059.116531][ T5721] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1059.116554][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1059.116572][ T5721] usb 6-1: Product: syz [ 1059.116585][ T5721] usb 6-1: Manufacturer: syz [ 1059.170328][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1059.171499][T16124] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1059.228721][ T5721] cdc_wdm 6-1:1.0: skipping garbage [ 1059.228757][ T5721] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1059.344522][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1059.393452][T15114] usb 6-1: USB disconnect, device number 2 [ 1060.203616][ T5889] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1060.315702][T16146] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1060.374719][T16146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1060.400056][ T5889] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1060.400082][ T5889] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1060.400125][ T5889] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1060.407045][ T5889] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1060.407072][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1060.407089][ T5889] usb 6-1: Product: syz [ 1060.407100][ T5889] usb 6-1: Manufacturer: syz [ 1060.427514][ T5889] cdc_wdm 6-1:1.0: skipping garbage [ 1060.427549][ T5889] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1060.464727][T16124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.465175][T16146] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1060.568977][T16146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1060.597551][T16146] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1060.757488][T15546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1060.801064][T15546] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1060.835970][T15546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1060.849899][T15546] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1060.850637][T15546] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1061.139671][T16146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1061.284836][T16146] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1061.390971][T16146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.362253][ T5916] usb 6-1: USB disconnect, device number 3 [ 1063.254484][T13265] Bluetooth: hci5: command tx timeout [ 1063.935782][T15546] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1064.020157][T15546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1064.039649][T15546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1064.058229][T15546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1064.150429][T15546] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1065.547996][T15546] Bluetooth: hci5: command tx timeout [ 1065.565638][T16202] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1065.626879][T16202] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1065.698413][T16202] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1066.772909][T15546] Bluetooth: hci2: command tx timeout [ 1068.108736][T16202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1068.174896][T15546] Bluetooth: hci5: command tx timeout [ 1068.437557][T16202] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1068.660480][T16202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1068.822273][T13265] Bluetooth: hci2: command tx timeout [ 1068.932660][T16867] ================================================================== [ 1068.932675][T16867] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 1068.932702][T16867] Read of size 8 at addr ffff88803b813560 by task syz.0.3385/16867 [ 1068.932716][T16867] [ 1068.932729][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.0.3385 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1068.932766][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1068.932777][T16867] Call Trace: [ 1068.932784][T16867] [ 1068.932792][T16867] dump_stack_lvl+0xe8/0x150 [ 1068.932815][T16867] print_address_description+0x55/0x1e0 [ 1068.932836][T16867] ? reverse_path_check_proc+0x5b/0x240 [ 1068.932853][T16867] print_report+0x58/0x70 [ 1068.932870][T16867] kasan_report+0x117/0x150 [ 1068.932887][T16867] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1068.932907][T16867] ? reverse_path_check_proc+0x5b/0x240 [ 1068.932927][T16867] ? ep_insert+0xbbb/0x1820 [ 1068.932941][T16867] reverse_path_check_proc+0x5b/0x240 [ 1068.932961][T16867] ? ep_insert+0xbbb/0x1820 [ 1068.932975][T16867] ep_insert+0xc6c/0x1820 [ 1068.932996][T16867] ? __pfx_ep_insert+0x10/0x10 [ 1068.933013][T16867] ? lockdep_hardirqs_on+0x7a/0x110 [ 1068.933031][T16867] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1068.933049][T16867] ? mutex_lock_nested+0x152/0x1d0 [ 1068.933068][T16867] ? do_epoll_ctl_file+0xc69/0xed0 [ 1068.933092][T16867] do_epoll_ctl_file+0x8bb/0xed0 [ 1068.933112][T16867] ? do_epoll_ctl_file+0xac3/0xed0 [ 1068.933133][T16867] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1068.933153][T16867] ? __fget_files+0x3a6/0x420 [ 1068.933171][T16867] ? __fget_files+0x2a/0x420 [ 1068.933190][T16867] __se_sys_epoll_ctl+0x14e/0x210 [ 1068.933206][T16867] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1068.933222][T16867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.933239][T16867] do_syscall_64+0x15f/0x560 [ 1068.933255][T16867] ? trace_irq_disable+0x3b/0x140 [ 1068.933271][T16867] ? clear_bhb_loop+0x40/0x90 [ 1068.933289][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.933305][T16867] RIP: 0033:0x7f274d54ce59 [ 1068.933320][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.933335][T16867] RSP: 002b:00007f274b785028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1068.933354][T16867] RAX: ffffffffffffffda RBX: 00007f274d7c6090 RCX: 00007f274d54ce59 [ 1068.933368][T16867] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 1068.933379][T16867] RBP: 00007f274d5e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1068.933389][T16867] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 1068.933405][T16867] R13: 00007f274d7c6128 R14: 00007f274d7c6090 R15: 00007ffd72b3f398 [ 1068.933425][T16867] [ 1068.933432][T16867] [ 1068.933436][T16867] Allocated by task 16865: [ 1068.933444][T16867] kasan_save_track+0x3e/0x80 [ 1068.933468][T16867] __kasan_slab_alloc+0x6c/0x80 [ 1068.933483][T16867] kmem_cache_alloc_noprof+0x33b/0x680 [ 1068.933495][T16867] ep_insert+0x512/0x1820 [ 1068.933509][T16867] do_epoll_ctl_file+0x8bb/0xed0 [ 1068.933530][T16867] __se_sys_epoll_ctl+0x14e/0x210 [ 1068.933544][T16867] do_syscall_64+0x15f/0x560 [ 1068.933561][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.933575][T16867] [ 1068.933579][T16867] Freed by task 16865: [ 1068.933588][T16867] kasan_save_track+0x3e/0x80 [ 1068.933610][T16867] kasan_save_free_info+0x46/0x50 [ 1068.933628][T16867] __kasan_slab_free+0x5c/0x80 [ 1068.933643][T16867] kmem_cache_free+0x187/0x6c0 [ 1068.933660][T16867] eventpoll_release_file+0xc2/0x240 [ 1068.933683][T16867] __fput+0x83c/0xa70 [ 1068.933705][T16867] task_work_run+0x1d9/0x270 [ 1068.933724][T16867] exit_to_user_mode_loop+0xf3/0x4d0 [ 1068.933740][T16867] do_syscall_64+0x33e/0x560 [ 1068.933766][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.933783][T16867] [ 1068.933787][T16867] The buggy address belongs to the object at ffff88803b813560 [ 1068.933787][T16867] which belongs to the cache ep_head of size 16 [ 1068.933804][T16867] The buggy address is located 0 bytes inside of [ 1068.933804][T16867] freed 16-byte region [ffff88803b813560, ffff88803b813570) [ 1068.933824][T16867] [ 1068.933828][T16867] The buggy address belongs to the physical page: [ 1068.933849][T16867] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b813680 pfn:0x3b813 [ 1068.933870][T16867] memcg:ffff888035462801 [ 1068.933877][T16867] flags: 0x80000000000200(workingset|node=0|zone=1) [ 1068.933895][T16867] page_type: f5(slab) [ 1068.933910][T16867] raw: 0080000000000200 ffff88814041dc80 ffffea0000df0cd0 ffff888020a8ff88 [ 1068.933923][T16867] raw: ffff88803b813680 0000000800800071 00000000f5000000 ffff888035462801 [ 1068.933931][T16867] page dumped because: kasan: bad access detected [ 1068.933939][T16867] page_owner tracks the page as allocated [ 1068.933945][T16867] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4988, tgid 4988 (udevd), ts 35609756766, free_ts 35606705090 [ 1068.933973][T16867] post_alloc_hook+0x1f9/0x250 [ 1068.933995][T16867] get_page_from_freelist+0x265c/0x26e0 [ 1068.934011][T16867] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1068.934026][T16867] allocate_slab+0x74/0x5e0 [ 1068.934046][T16867] refill_objects+0x33c/0x3d0 [ 1068.934065][T16867] __pcs_replace_empty_main+0x373/0x720 [ 1068.934085][T16867] kmem_cache_alloc_noprof+0x433/0x680 [ 1068.934099][T16867] ep_insert+0x512/0x1820 [ 1068.934117][T16867] do_epoll_ctl_file+0x8bb/0xed0 [ 1068.934144][T16867] __se_sys_epoll_ctl+0x14e/0x210 [ 1068.934157][T16867] do_syscall_64+0x15f/0x560 [ 1068.934174][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.934190][T16867] page last free pid 4985 tgid 4985 stack trace: [ 1068.934204][T16867] __free_frozen_pages+0x10af/0x1190 [ 1068.934220][T16867] __slab_free+0x252/0x2a0 [ 1068.934233][T16867] qlist_free_all+0x99/0x100 [ 1068.934257][T16867] kasan_quarantine_reduce+0x148/0x160 [ 1068.934281][T16867] __kasan_slab_alloc+0x22/0x80 [ 1068.934294][T16867] kmem_cache_alloc_noprof+0x33b/0x680 [ 1068.934307][T16867] do_getname+0x2e/0x250 [ 1068.934322][T16867] do_sys_openat2+0xcc/0x200 [ 1068.934341][T16867] __x64_sys_openat+0x138/0x170 [ 1068.934377][T16867] do_syscall_64+0x15f/0x560 [ 1068.934392][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.934409][T16867] [ 1068.934414][T16867] Memory state around the buggy address: [ 1068.934423][T16867] ffff88803b813400: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1068.934435][T16867] ffff88803b813480: fa fb fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc [ 1068.934448][T16867] >ffff88803b813500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1068.934458][T16867] ^ [ 1068.934469][T16867] ffff88803b813580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1068.934481][T16867] ffff88803b813600: fa fb fc fc 00 00 fc fc 00 00 fc fc fa fb fc fc [ 1068.934488][T16867] ================================================================== [ 1068.935753][T16867] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1068.935775][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.0.3385 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1068.935800][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1068.935811][T16867] Call Trace: [ 1068.935819][T16867] [ 1068.935826][T16867] vpanic+0x56c/0xa60 [ 1068.935853][T16867] ? __pfx_vpanic+0x10/0x10 [ 1068.935880][T16867] panic+0xc5/0xd0 [ 1068.935900][T16867] ? __pfx_panic+0x10/0x10 [ 1068.935922][T16867] ? preempt_schedule_thunk+0x16/0x40 [ 1068.935946][T16867] ? preempt_schedule_thunk+0x16/0x40 [ 1068.935964][T16867] ? reverse_path_check_proc+0x5b/0x240 [ 1068.935982][T16867] check_panic_on_warn+0x89/0xb0 [ 1068.936004][T16867] ? reverse_path_check_proc+0x5b/0x240 [ 1068.936023][T16867] end_report+0x73/0x170 [ 1068.936040][T16867] ? reverse_path_check_proc+0x5b/0x240 [ 1068.936057][T16867] kasan_report+0x128/0x150 [ 1068.936074][T16867] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1068.936094][T16867] ? reverse_path_check_proc+0x5b/0x240 [ 1068.936114][T16867] ? ep_insert+0xbbb/0x1820 [ 1068.936129][T16867] reverse_path_check_proc+0x5b/0x240 [ 1068.936150][T16867] ? ep_insert+0xbbb/0x1820 [ 1068.936165][T16867] ep_insert+0xc6c/0x1820 [ 1068.936187][T16867] ? __pfx_ep_insert+0x10/0x10 [ 1068.936207][T16867] ? lockdep_hardirqs_on+0x7a/0x110 [ 1068.936225][T16867] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1068.936244][T16867] ? mutex_lock_nested+0x152/0x1d0 [ 1068.936266][T16867] ? do_epoll_ctl_file+0xc69/0xed0 [ 1068.936291][T16867] do_epoll_ctl_file+0x8bb/0xed0 [ 1068.936315][T16867] ? do_epoll_ctl_file+0xac3/0xed0 [ 1068.936341][T16867] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1068.936367][T16867] ? __fget_files+0x3a6/0x420 [ 1068.936389][T16867] ? __fget_files+0x2a/0x420 [ 1068.936417][T16867] __se_sys_epoll_ctl+0x14e/0x210 [ 1068.936436][T16867] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1068.936456][T16867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.936474][T16867] do_syscall_64+0x15f/0x560 [ 1068.936496][T16867] ? trace_irq_disable+0x3b/0x140 [ 1068.936512][T16867] ? clear_bhb_loop+0x40/0x90 [ 1068.936531][T16867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.936548][T16867] RIP: 0033:0x7f274d54ce59 [ 1068.936564][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.936579][T16867] RSP: 002b:00007f274b785028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1068.936596][T16867] RAX: ffffffffffffffda RBX: 00007f274d7c6090 RCX: 00007f274d54ce59 [ 1068.936609][T16867] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 1068.936620][T16867] RBP: 00007f274d5e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1068.936631][T16867] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000000 [ 1068.936643][T16867] R13: 00007f274d7c6128 R14: 00007f274d7c6090 R15: 00007ffd72b3f398 [ 1068.936663][T16867] [ 1068.936973][T16867] Kernel Offset: disabled