last executing test programs: 33.996281761s ago: executing program 4 (id=784): pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1e, 0xc, 0x715, 0x8000000000000000, 0x0, 0x82000000000000, 0x800, 0xa13}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x7, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x8, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000100000, 0x7, 0x1, 0x8, 0x1, 0x2, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x2b90, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x8, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7ffffffd, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x99, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x10000a, 0x5b}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 33.005838672s ago: executing program 4 (id=791): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) socket$inet(0x2, 0x80001, 0x84) io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x0, 0x1, 0x1c2, 0x0, r0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 32.612476514s ago: executing program 4 (id=794): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x1, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x1) 31.471520883s ago: executing program 4 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 31.185317279s ago: executing program 4 (id=810): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 28.139789631s ago: executing program 4 (id=827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000500)={0x2, 0xfc, 0x9b, &(0x7f0000000440)=""/155}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.33959453s ago: executing program 32 (id=827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000500)={0x2, 0xfc, 0x9b, &(0x7f0000000440)=""/155}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.619085842s ago: executing program 2 (id=914): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) 9.152332757s ago: executing program 0 (id=915): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x32}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) 8.795924829s ago: executing program 0 (id=917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x1000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR=']']}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 8.077504379s ago: executing program 2 (id=918): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 7.804611645s ago: executing program 2 (id=921): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc810}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.599251318s ago: executing program 0 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0800080004000600000014000000460a0fc000660012"], 0xfce) 5.72709551s ago: executing program 1 (id=929): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 5.371351466s ago: executing program 1 (id=930): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003100)={0x2020}, 0x2020) 4.966645862s ago: executing program 1 (id=931): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) shutdown(r1, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4.651479379s ago: executing program 1 (id=933): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x3, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') unshare(0x22020400) pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 4.319083073s ago: executing program 1 (id=934): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) 3.497857097s ago: executing program 2 (id=935): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/201, 0xc9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800006, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000003c0)={&(0x7f0000b6e000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) 3.200665672s ago: executing program 3 (id=936): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000000)={0x0, 0x3ff, 0xfffffff8}, 0x0) 3.054512557s ago: executing program 3 (id=937): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x24000084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e6900850000001900000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 2.813252661s ago: executing program 3 (id=938): pipe2(&(0x7f0000000040), 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.673836717s ago: executing program 0 (id=939): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x5, 0x1a4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 2.50239411s ago: executing program 3 (id=940): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r2, &(0x7f0000000180)="69672505bde5d1853a384e3deec6fcb4391f745d0f1a05d500feffffff7090ba2b6d59c8958d6f1500000000c4677b000900fd280000000000000000f8bf54da3319d7eab320576869d6e662fa34cab1b609bdce8d2d27eadc25ec244636d818544480d3d1247e40a0bf84a388be1d334d80f9695625f841681eaa116a93170646ddfa660bde88120fe77cbf64c06e6669e5bb1db32113c0e94252f1a285b81c71f67202bf649b07aca6ff4e95d6bc128ad2bc609e1d5c", 0xb7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) 2.188669875s ago: executing program 3 (id=941): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0xff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmsg$unix(r1, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000035c0)=""/74, 0x4a}], 0x1}, 0x101) recvmmsg$unix(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/186}, {&(0x7f00000006c0)=""/248}]}}], 0x4000000000002dd, 0x10100, 0x0) 1.859340865s ago: executing program 2 (id=942): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000700000401"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.412667188s ago: executing program 2 (id=943): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x3, 0x3b, 0x73, 0x20, 0x2294, 0x425a, 0xed40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0xf8, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0xfb, 0x0, 0x3e, 0x52, 0xf7, 0xa6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.314927637s ago: executing program 0 (id=944): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) vmsplice(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)="16", 0x1}, {0x0}], 0x2, 0x5) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0xc) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000002c0)) close_range(r0, 0xffffffffffffffff, 0x0) 1.223367008s ago: executing program 1 (id=945): pipe2(0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.047937564s ago: executing program 3 (id=946): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 0s ago: executing program 0 (id=947): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x7}]}}, 0x0, 0x42, 0x0, 0x0, 0x5}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x200000000000003, 0x300) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 85.802326][ T5575] cgroup: Unknown subsys name 'net' [ 86.035220][ T5575] cgroup: Unknown subsys name 'cpuset' [ 86.079288][ T5575] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.116006][ T31] cfg80211: failed to load regulatory.db [ 88.128244][ T5575] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.624484][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.636562][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.637394][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.641695][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.645339][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.648152][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.670124][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.673375][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.679778][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.686735][ T4902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.775172][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.783518][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.785723][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.796376][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.800187][ T5590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.883935][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.893522][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.894920][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.897647][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.903372][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.925565][ T5590] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.932307][ T5590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.933357][ T5590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.934527][ T5590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.935291][ T5590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.760516][ T5590] Bluetooth: hci1: command tx timeout [ 92.838479][ T5590] Bluetooth: hci0: command tx timeout [ 92.918497][ T5590] Bluetooth: hci2: command tx timeout [ 93.008464][ T5590] Bluetooth: hci4: command tx timeout [ 93.079881][ T5590] Bluetooth: hci3: command tx timeout [ 93.601775][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.601918][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.602469][ T5588] bridge_slave_0: entered allmulticast mode [ 93.604730][ T5588] bridge_slave_0: entered promiscuous mode [ 93.633430][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.633557][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.633707][ T5589] bridge_slave_0: entered allmulticast mode [ 93.636580][ T5589] bridge_slave_0: entered promiscuous mode [ 93.655425][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.655547][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.656034][ T5593] bridge_slave_0: entered allmulticast mode [ 93.660662][ T5593] bridge_slave_0: entered promiscuous mode [ 93.676702][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.676824][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.677366][ T5588] bridge_slave_1: entered allmulticast mode [ 93.691181][ T5588] bridge_slave_1: entered promiscuous mode [ 93.719108][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.719273][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.719444][ T5589] bridge_slave_1: entered allmulticast mode [ 93.721896][ T5589] bridge_slave_1: entered promiscuous mode [ 93.758808][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.758911][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.759043][ T5593] bridge_slave_1: entered allmulticast mode [ 93.760677][ T5593] bridge_slave_1: entered promiscuous mode [ 93.778982][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.779107][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.779270][ T5599] bridge_slave_0: entered allmulticast mode [ 93.782518][ T5599] bridge_slave_0: entered promiscuous mode [ 93.855236][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.855374][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.855542][ T5599] bridge_slave_1: entered allmulticast mode [ 93.857539][ T5599] bridge_slave_1: entered promiscuous mode [ 93.914860][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.936024][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.936285][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.936425][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.936598][ T5597] bridge_slave_0: entered allmulticast mode [ 93.939863][ T5597] bridge_slave_0: entered promiscuous mode [ 93.953798][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.961296][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.986353][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.988956][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.989078][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.989242][ T5597] bridge_slave_1: entered allmulticast mode [ 93.992991][ T5597] bridge_slave_1: entered promiscuous mode [ 94.003181][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.033396][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.094299][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.141429][ T5588] team0: Port device team_slave_0 added [ 94.166248][ T5589] team0: Port device team_slave_0 added [ 94.177344][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.180740][ T5593] team0: Port device team_slave_0 added [ 94.184644][ T5588] team0: Port device team_slave_1 added [ 94.209107][ T5589] team0: Port device team_slave_1 added [ 94.210940][ T5593] team0: Port device team_slave_1 added [ 94.231603][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.233525][ T5599] team0: Port device team_slave_0 added [ 94.296992][ T5599] team0: Port device team_slave_1 added [ 94.332386][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.332399][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.332415][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.381763][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.381789][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.381813][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.384218][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.384230][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.384253][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.387580][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.387596][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.387619][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.394895][ T5597] team0: Port device team_slave_0 added [ 94.421000][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.421025][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.421049][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.444510][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.444527][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.444552][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.455243][ T5597] team0: Port device team_slave_1 added [ 94.456188][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.456201][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.456226][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.521899][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.521916][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.521941][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.592831][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.592848][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.592872][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.664974][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.664991][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.665016][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.684824][ T5588] hsr_slave_0: entered promiscuous mode [ 94.686375][ T5588] hsr_slave_1: entered promiscuous mode [ 94.783564][ T5593] hsr_slave_0: entered promiscuous mode [ 94.784983][ T5593] hsr_slave_1: entered promiscuous mode [ 94.786865][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 94.786965][ T5593] Cannot create hsr debugfs directory [ 94.799672][ T5589] hsr_slave_0: entered promiscuous mode [ 94.801034][ T5589] hsr_slave_1: entered promiscuous mode [ 94.802078][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 94.802100][ T5589] Cannot create hsr debugfs directory [ 94.848627][ T5590] Bluetooth: hci1: command tx timeout [ 94.862939][ T5599] hsr_slave_0: entered promiscuous mode [ 94.864408][ T5599] hsr_slave_1: entered promiscuous mode [ 94.866416][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 94.866442][ T5599] Cannot create hsr debugfs directory [ 94.919085][ T5590] Bluetooth: hci0: command tx timeout [ 94.998513][ T5590] Bluetooth: hci2: command tx timeout [ 95.078673][ T5590] Bluetooth: hci4: command tx timeout [ 95.158810][ T5590] Bluetooth: hci3: command tx timeout [ 95.495915][ T5597] hsr_slave_0: entered promiscuous mode [ 95.496851][ T5597] hsr_slave_1: entered promiscuous mode [ 95.497422][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 95.497443][ T5597] Cannot create hsr debugfs directory [ 96.183797][ T5588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.241076][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.256365][ T5588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.293456][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.297501][ T5588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.314634][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.335291][ T5588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.351192][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.506537][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.533723][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.538687][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.565267][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.569209][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.591889][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.623458][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.655025][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.825050][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.862186][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.879347][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.903040][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.918747][ T5590] Bluetooth: hci1: command tx timeout [ 96.919410][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.973159][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.994495][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.008573][ T5590] Bluetooth: hci0: command tx timeout [ 97.027161][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.089465][ T5590] Bluetooth: hci2: command tx timeout [ 97.163111][ T5590] Bluetooth: hci4: command tx timeout [ 97.226120][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.238663][ T5590] Bluetooth: hci3: command tx timeout [ 97.261853][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.267235][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.292802][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.302694][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.331761][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.344584][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.372321][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.423459][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.575195][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.575545][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.614568][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.631460][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.671606][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.675363][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.724650][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.736855][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.763707][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.780733][ T3399] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.781480][ T3399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.816818][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.851022][ T2200] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.851122][ T2200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.955909][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.006865][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.007022][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.044001][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.063640][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.063756][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.173151][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.259624][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.261180][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.339536][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.364451][ T2226] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.364573][ T2226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.522797][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.622209][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.622415][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.660305][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.704415][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.704583][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.832017][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.933351][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.933520][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.000138][ T5590] Bluetooth: hci1: command tx timeout [ 99.039485][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.039619][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.081048][ T5590] Bluetooth: hci0: command tx timeout [ 99.158461][ T5590] Bluetooth: hci2: command tx timeout [ 99.238552][ T5590] Bluetooth: hci4: command tx timeout [ 99.319451][ T5590] Bluetooth: hci3: command tx timeout [ 99.681794][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.905697][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.107274][ T5588] veth0_vlan: entered promiscuous mode [ 100.229735][ T5588] veth1_vlan: entered promiscuous mode [ 100.581145][ T5588] veth0_macvtap: entered promiscuous mode [ 100.642389][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.665044][ T5588] veth1_macvtap: entered promiscuous mode [ 100.910971][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.968095][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.993087][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.196514][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.206932][ T5589] veth0_vlan: entered promiscuous mode [ 101.222732][ T5593] veth0_vlan: entered promiscuous mode [ 101.363070][ T5589] veth1_vlan: entered promiscuous mode [ 101.387746][ T5593] veth1_vlan: entered promiscuous mode [ 101.532765][ T5599] veth0_vlan: entered promiscuous mode [ 101.589044][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.589066][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.681906][ T5599] veth1_vlan: entered promiscuous mode [ 101.730670][ T5589] veth0_macvtap: entered promiscuous mode [ 101.734413][ T5597] veth0_vlan: entered promiscuous mode [ 101.736144][ T5593] veth0_macvtap: entered promiscuous mode [ 101.772484][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.772507][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.777515][ T5589] veth1_macvtap: entered promiscuous mode [ 101.806912][ T5593] veth1_macvtap: entered promiscuous mode [ 101.839791][ T5597] veth1_vlan: entered promiscuous mode [ 101.917010][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.937879][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.966819][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.983437][ T5599] veth0_macvtap: entered promiscuous mode [ 101.996692][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.021190][ T5599] veth1_macvtap: entered promiscuous mode [ 102.190825][ T5597] veth0_macvtap: entered promiscuous mode [ 102.400604][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.401235][ T5597] veth1_macvtap: entered promiscuous mode [ 102.737082][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.059120][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.076487][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.076510][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.147532][ T5788] syz.3.8 (5788) used greatest stack depth: 19320 bytes left [ 103.185882][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.443286][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.443310][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.713082][ T5719] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.762513][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.762536][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.918794][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.918816][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.950024][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 103.967550][ T5719] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 104.024313][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.024342][ T5719] usb 4-1: Product: syz [ 104.024356][ T5719] usb 4-1: Manufacturer: syz [ 104.024370][ T5719] usb 4-1: SerialNumber: syz [ 104.074471][ T5719] usb 4-1: config 0 descriptor?? [ 104.135584][ T5719] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 104.492988][ T1392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.493013][ T1392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.539583][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.542453][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.542924][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.644385][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.644410][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.999193][ T3399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.999230][ T3399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.999479][ T3399] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.040598][ T5719] gspca_ov534_9: reg_w failed -71 [ 105.284208][ T1392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.284232][ T1392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.389192][ T5719] gspca_ov534_9: Unknown sensor 0000 [ 105.389302][ T5719] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 105.438869][ T1016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.439449][ T1016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.442478][ T1016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.442707][ T1016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.443107][ T1016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.443410][ T1016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.444285][ T1016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.444646][ T1016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.521185][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.521235][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.521275][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.521312][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.521350][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.585599][ T5719] usb 4-1: USB disconnect, device number 2 [ 105.739316][ T1053] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.792887][ T1016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.169963][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.266005][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 106.466830][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.355118][ T5817] netlink: 100 bytes leftover after parsing attributes in process `syz.2.14'. [ 107.356871][ T5818] capability: warning: `syz.0.15' uses deprecated v2 capabilities in a way that may be insecure [ 107.850503][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 107.853712][ T5829] netlink: 'syz.4.19': attribute type 12 has an invalid length. [ 107.853736][ T5829] netlink: 'syz.4.19': attribute type 29 has an invalid length. [ 107.853749][ T5829] netlink: 148 bytes leftover after parsing attributes in process `syz.4.19'. [ 107.853768][ T5829] netlink: 51 bytes leftover after parsing attributes in process `syz.4.19'. [ 107.856343][ T5828] bridge_slave_1: left allmulticast mode [ 107.856377][ T5828] bridge_slave_1: left promiscuous mode [ 107.856675][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.277053][ T5828] bridge_slave_0: left allmulticast mode [ 108.277090][ T5828] bridge_slave_0: left promiscuous mode [ 108.277380][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.636467][ T5861] netlink: 156 bytes leftover after parsing attributes in process `syz.2.34'. [ 109.708277][ T5853] syz.4.29 (5853) used greatest stack depth: 18912 bytes left [ 109.959257][ T5867] process 'syz.3.36' launched '/dev/fd/4' with NULL argv: empty string added [ 110.905229][ T5885] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.821675][ T5922] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd [ 113.527899][ T37] audit: type=1400 audit(1786492863.703:2): lsm=SMACK fn=smack_file_ioctl action=denied subject="_" object="l" requested=w pid=5934 comm="syz.0.65" path="/11/file1" dev="tmpfs" ino=75 [ 115.047589][ T5771] IPVS: starting estimator thread 0... [ 115.148585][ T5969] IPVS: using max 8 ests per chain, 19200 per kthread [ 115.170730][ T5971] hugetlbfs: Bad value for 'size' [ 116.354962][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 116.789246][ T5699] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.968483][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 116.969644][ T5699] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 117.007542][ T6015] capability: warning: `syz.2.98' uses 32-bit capabilities (legacy support in use) [ 117.029386][ T5699] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 117.029416][ T5699] usb 2-1: config 0 has no interface number 0 [ 117.029466][ T5699] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 117.029491][ T5699] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 117.075140][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.075171][ T5699] usb 2-1: Product: syz [ 117.075186][ T5699] usb 2-1: Manufacturer: syz [ 117.075201][ T5699] usb 2-1: SerialNumber: syz [ 117.127037][ T5699] usb 2-1: config 0 descriptor?? [ 117.130038][ T6003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.133576][ T6003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.485194][ T6003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.485316][ T6003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.727332][ T5699] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 117.977306][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.105'. [ 118.148624][ T5699] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 118.149389][ T5699] asix 2-1:0.34: probe with driver asix failed with error -71 [ 118.219534][ T5699] usb 2-1: USB disconnect, device number 2 [ 118.798087][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 119.586896][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 119.784656][ T6076] C: renamed from veth1_to_team (while UP) [ 119.941309][ T6076] netlink: 'syz.3.128': attribute type 2 has an invalid length. [ 119.941334][ T6076] netlink: 116 bytes leftover after parsing attributes in process `syz.3.128'. [ 119.946970][ T6076] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 120.477466][ T6094] program syz.0.135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.653923][ T6125] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.151'. [ 122.311830][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 123.472482][ T6155] Zero length message leads to an empty skb [ 123.527448][ T6165] erspan0: entered promiscuous mode [ 123.866238][ T37] audit: type=1326 audit(1786492874.073:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6177 comm="syz.0.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a2c3e0d9 code=0x7ffc0000 [ 123.894546][ T37] audit: type=1326 audit(1786492874.083:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6177 comm="syz.0.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a2c3e0d9 code=0x7ffc0000 [ 123.894898][ T37] audit: type=1326 audit(1786492874.113:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6177 comm="syz.0.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f63a2c3e0d9 code=0x7ffc0000 [ 123.895200][ T37] audit: type=1326 audit(1786492874.113:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6177 comm="syz.0.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a2c3e0d9 code=0x7ffc0000 [ 123.895490][ T37] audit: type=1326 audit(1786492874.113:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6177 comm="syz.0.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a2c3e0d9 code=0x7ffc0000 [ 123.896428][ T37] audit: type=1326 audit(1786492874.113:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6177 comm="syz.0.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f63a2c3e0d9 code=0x7ffc0000 [ 123.896767][ T37] audit: type=1326 audit(1786492874.113:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6177 comm="syz.0.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a2c3e0d9 code=0x7ffc0000 [ 123.897073][ T37] audit: type=1326 audit(1786492874.113:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6177 comm="syz.0.173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a2c3e0d9 code=0x7ffc0000 [ 124.129991][ T5577] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.328505][ T5577] usb 3-1: Using ep0 maxpacket: 16 [ 124.329920][ T5577] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.331716][ T5577] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.331771][ T5577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.331799][ T5577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.331820][ T5577] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.331842][ T5577] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.333815][ T5577] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.333841][ T5577] usb 3-1: Manufacturer: syz [ 124.348041][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 124.406027][ T5577] usb 3-1: config 0 descriptor?? [ 124.410647][ T6192] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 124.862027][ T6202] mmap: syz.1.183 (6202) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.929753][ T5577] rc_core: IR keymap rc-hauppauge not found [ 124.929778][ T5577] Registered IR keymap rc-empty [ 124.930369][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 124.960365][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.207893][ T5577] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 125.335975][ T5577] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 125.678499][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.709105][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.729411][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.748658][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.781571][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.808546][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.832042][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.875456][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.893065][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 125.909423][ T5577] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 126.074354][ T5577] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 126.074381][ T5577] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 126.230389][ T5577] usb 3-1: USB disconnect, device number 2 [ 129.090207][ T6302] warning: `syz.2.222' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.425272][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.228'. [ 129.587186][ T6318] ======================================================= [ 129.587186][ T6318] WARNING: The mand mount option has been deprecated and [ 129.587186][ T6318] and is ignored by this kernel. Remove the mand [ 129.587186][ T6318] option from the mount to silence this warning. [ 129.587186][ T6318] ======================================================= [ 130.480991][ T6337] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 131.167946][ T6357] program syz.4.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.508735][ T6367] syz.4.250 uses obsolete (PF_INET,SOCK_PACKET) [ 132.192736][ T37] audit: type=1326 audit(1786492882.403:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6380 comm="syz.1.256" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96bf6e0d9 code=0x7ffc0000 [ 132.312413][ T6378] ovs-system: entered promiscuous mode [ 132.401491][ T6387] netlink: 'syz.0.259': attribute type 11 has an invalid length. [ 132.785557][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 133.170573][ T5577] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.182301][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.182395][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.448576][ T5577] usb 5-1: Using ep0 maxpacket: 32 [ 133.450051][ T5577] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 133.451332][ T5577] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.647803][ T5577] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 133.875729][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 134.534432][ T5577] gspca_nw80x: reg_w err -71 [ 134.534522][ T5577] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 134.609993][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 134.610098][ T6435] bridge_slave_1: left allmulticast mode [ 134.610129][ T6435] bridge_slave_1: left promiscuous mode [ 134.612850][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.633041][ T5577] usb 5-1: USB disconnect, device number 2 [ 134.854592][ T6435] bridge_slave_0: left allmulticast mode [ 134.854633][ T6435] bridge_slave_0: left promiscuous mode [ 134.854906][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.726931][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 137.991916][ T6520] veth3: entered allmulticast mode [ 138.218571][ T5577] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.381733][ T5577] usb 2-1: Using ep0 maxpacket: 16 [ 138.382538][ T5577] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 138.386464][ T5577] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.386490][ T5577] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.431909][ T5577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.431937][ T5577] usb 2-1: Product: syz [ 138.431951][ T5577] usb 2-1: Manufacturer: syz [ 138.431965][ T5577] usb 2-1: SerialNumber: syz [ 138.713475][ T5577] usb 2-1: 0:2 : does not exist [ 138.762340][ T6537] batadv_slave_1: entered promiscuous mode [ 138.793551][ T5577] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 138.797752][ T6536] batadv_slave_1: left promiscuous mode [ 138.864766][ T6539] netlink: 'syz.4.325': attribute type 8 has an invalid length. [ 138.864788][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.325'. [ 138.938075][ T6543] netlink: 64 bytes leftover after parsing attributes in process `syz.2.327'. [ 139.452505][ T37] audit: type=1326 audit(1786492889.663:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.1.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96bf6e0d9 code=0x7ffc0000 [ 139.493515][ T37] audit: type=1326 audit(1786492889.673:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.1.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96bf6e0d9 code=0x7ffc0000 [ 139.493577][ T37] audit: type=1326 audit(1786492889.713:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.1.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7ff96bf6e0d9 code=0x7ffc0000 [ 139.493625][ T37] audit: type=1326 audit(1786492889.713:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.1.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96bf6e0d9 code=0x7ffc0000 [ 139.493670][ T37] audit: type=1326 audit(1786492889.713:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.1.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96bf6e0d9 code=0x7ffc0000 [ 139.493713][ T37] audit: type=1326 audit(1786492889.713:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.1.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7ff96bf6e0d9 code=0x7ffc0000 [ 139.493768][ T37] audit: type=1326 audit(1786492889.713:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.1.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96bf6e0d9 code=0x7ffc0000 [ 139.493814][ T37] audit: type=1326 audit(1786492889.713:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.1.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96bf6e0d9 code=0x7ffc0000 [ 139.874874][ T5577] usb 2-1: USB disconnect, device number 3 [ 140.205717][ T36] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.248236][ T6571] netlink: 'syz.0.338': attribute type 16 has an invalid length. [ 140.248259][ T6571] netlink: 'syz.0.338': attribute type 25 has an invalid length. [ 140.261508][ T6571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.338'. [ 140.348429][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 140.349454][ T36] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 140.351236][ T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 140.355582][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.355612][ T36] usb 4-1: Product: syz [ 140.355627][ T36] usb 4-1: Manufacturer: syz [ 140.355643][ T36] usb 4-1: SerialNumber: syz [ 141.063847][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.346179][ T6581] IPVS: Scheduler module ip_vs_sip not found [ 141.541960][ T36] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 141.690096][ T36] usb 4-1: USB disconnect, device number 3 [ 142.694209][ T6621] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 143.953140][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.368'. [ 143.953172][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.368'. [ 144.022421][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.368'. [ 144.022452][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.368'. [ 144.167216][ T5319] kernel read not supported for file /vcs (pid: 5319 comm: kworker/1:3) [ 146.273725][ T6707] loop5: detected capacity change from 0 to 4095 [ 146.631142][ T5601] Buffer I/O error on dev loop5, logical block 511, async page read [ 148.223717][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.413'. [ 148.248978][ T6750] netlink: 'syz.1.413': attribute type 9 has an invalid length. [ 148.249000][ T6750] netlink: 7 bytes leftover after parsing attributes in process `syz.1.413'. [ 148.887400][ T6763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.340233][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 149.755565][ T6776] team1: entered promiscuous mode [ 149.757739][ T6776] team1: entered allmulticast mode [ 149.775531][ T6776] 8021q: adding VLAN 0 to HW filter on device team1 [ 149.859992][ T5752] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.098396][ T5752] usb 4-1: Using ep0 maxpacket: 32 [ 150.117068][ T5752] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 150.144271][ T5752] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 150.144308][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 150.144334][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 150.144358][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 150.144385][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 150.172525][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.172569][ T5752] usb 4-1: Product: syz [ 150.172583][ T5752] usb 4-1: Manufacturer: syz [ 150.172596][ T5752] usb 4-1: SerialNumber: syz [ 150.303817][ T5752] usb 4-1: config 0 descriptor?? [ 150.782747][ T5752] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 150.782784][ T5752] input input6: Device does not respond to id packet M [ 150.783239][ T5752] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 150.783268][ T5752] input input6: Device does not respond to id packet P [ 150.790232][ T5752] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 150.790284][ T5752] input input6: Device does not respond to id packet B [ 150.791376][ T5752] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 150.791420][ T5752] input input6: Device does not respond to id packet N [ 150.793398][ T5752] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 150.793875][ T5752] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 150.794333][ T5752] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 150.794844][ T5752] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 151.065742][ T5752] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 151.362002][ T5752] usb 4-1: USB disconnect, device number 4 [ 151.831450][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 152.174503][ T6828] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 152.429343][ T37] audit: type=1326 audit(1786492902.643:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.429402][ T37] audit: type=1326 audit(1786492902.653:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.429449][ T37] audit: type=1326 audit(1786492902.653:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.429496][ T37] audit: type=1326 audit(1786492902.653:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.431791][ T37] audit: type=1326 audit(1786492902.653:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.431844][ T37] audit: type=1326 audit(1786492902.653:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.432053][ T37] audit: type=1326 audit(1786492902.653:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.433674][ T37] audit: type=1326 audit(1786492902.653:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.433730][ T37] audit: type=1326 audit(1786492902.653:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.434485][ T37] audit: type=1326 audit(1786492902.653:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6834 comm="syz.4.452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 152.853581][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 153.476971][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 153.942952][ T6872] netlink: 'syz.0.468': attribute type 4 has an invalid length. [ 154.249988][ T6887] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 155.060083][ T5752] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 155.301765][ T5752] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 155.303616][ T5752] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 155.303644][ T5752] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 155.307207][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.307236][ T5752] usb 5-1: Product: syz [ 155.307251][ T5752] usb 5-1: Manufacturer: syz [ 155.307264][ T5752] usb 5-1: SerialNumber: syz [ 155.401235][ T5752] usb 5-1: config 0 descriptor?? [ 155.479770][ T5752] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 156.170543][ T5699] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 156.322222][ T5699] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 156.323894][ T5699] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.323922][ T5699] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.323942][ T5699] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.323991][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 156.380282][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.380309][ T5699] usb 2-1: Product: syz [ 156.380323][ T5699] usb 2-1: Manufacturer: syz [ 156.497270][ T5699] cdc_wdm 2-1:1.0: skipping garbage [ 156.497292][ T5699] cdc_wdm 2-1:1.0: skipping garbage [ 156.513983][ T5752] usb 5-1: USB disconnect, device number 3 [ 156.772376][ T5699] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 156.772400][ T5699] cdc_wdm 2-1:1.0: Unknown control protocol [ 156.794111][ T6949] netlink: 'syz.2.504': attribute type 12 has an invalid length. [ 156.794135][ T6949] netlink: 'syz.2.504': attribute type 29 has an invalid length. [ 156.794149][ T6949] netlink: 148 bytes leftover after parsing attributes in process `syz.2.504'. [ 156.794169][ T6949] netlink: 'syz.2.504': attribute type 3 has an invalid length. [ 156.794183][ T6949] netlink: 'syz.2.504': attribute type 2 has an invalid length. [ 156.794196][ T6949] netlink: 35 bytes leftover after parsing attributes in process `syz.2.504'. [ 156.956862][ T9] usb 2-1: USB disconnect, device number 4 [ 157.184394][ T6957] netlink: 'syz.2.507': attribute type 10 has an invalid length. [ 157.184419][ T6957] netlink: 152 bytes leftover after parsing attributes in process `syz.2.507'. [ 158.117175][ T6976] CIFS: Attempting to mount //127.0.0.1/share [ 158.553984][ T6983] loop8: detected capacity change from 0 to 8 [ 158.910836][ T6983] Dev loop8: unable to read RDB block 8 [ 158.910893][ T6983] loop8: unable to read partition table [ 158.911171][ T6983] loop8: partition table beyond EOD, truncated [ 158.911223][ T6983] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 158.974234][ T6976] CIFS: VFS: Error connecting to socket. Aborting operation. [ 158.974368][ T6976] CIFS: VFS: cifs_mount failed w/return code = -4 [ 159.653053][ T5590] Bluetooth: hci4: adv larger than maximum supported [ 159.653072][ T5590] Bluetooth: hci4: Malformed LE Event: 0x0d [ 161.676627][ T7074] netlink: 'syz.4.556': attribute type 6 has an invalid length. [ 162.429918][ T5590] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 162.429946][ T5590] CPU: 1 UID: 0 PID: 5590 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.429972][ T5590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.429986][ T5590] Workqueue: hci0 hci_rx_work [ 162.430018][ T5590] Call Trace: [ 162.430025][ T5590] [ 162.430034][ T5590] dump_stack_lvl+0xe8/0x150 [ 162.430069][ T5590] sysfs_create_dir_ns+0x271/0x2a0 [ 162.430096][ T5590] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 162.430125][ T5590] ? rt_spin_unlock+0x163/0x200 [ 162.430153][ T5590] kobject_add_internal+0x62c/0xce0 [ 162.430186][ T5590] kobject_add+0x163/0x240 [ 162.430206][ T5590] ? rt_spin_unlock+0x157/0x200 [ 162.430234][ T5590] ? __pfx_kobject_add+0x10/0x10 [ 162.430265][ T5590] ? get_device_parent+0x370/0x3a0 [ 162.430295][ T5590] device_add+0x3fa/0xb80 [ 162.430324][ T5590] hci_conn_add_sysfs+0xd5/0x210 [ 162.430352][ T5590] le_conn_complete_evt+0xfef/0x1580 [ 162.430383][ T5590] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 162.430415][ T5590] ? lockdep_hardirqs_on+0x7a/0x110 [ 162.430444][ T5590] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 162.430474][ T5590] ? rt_mutex_slowunlock+0x219/0x460 [ 162.430508][ T5590] ? skb_pull_data+0xf0/0x200 [ 162.430542][ T5590] hci_le_conn_complete_evt+0x187/0x470 [ 162.430591][ T5590] hci_event_packet+0x67a/0xf10 [ 162.430627][ T5590] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 162.430659][ T5590] ? __pfx_hci_event_packet+0x10/0x10 [ 162.430688][ T5590] ? rt_spin_unlock+0x157/0x200 [ 162.430723][ T5590] ? hci_send_to_monitor+0xe2/0x590 [ 162.430749][ T5590] hci_rx_work+0x3ee/0x1020 [ 162.430787][ T5590] ? process_scheduled_works+0xa20/0x14e0 [ 162.430813][ T5590] process_scheduled_works+0xa8e/0x14e0 [ 162.430863][ T5590] ? __pfx_process_scheduled_works+0x10/0x10 [ 162.430897][ T5590] ? assign_work+0x3cf/0x5d0 [ 162.430924][ T5590] worker_thread+0xa47/0xfb0 [ 162.430980][ T5590] kthread+0x388/0x470 [ 162.431008][ T5590] ? __pfx_worker_thread+0x10/0x10 [ 162.431032][ T5590] ? __pfx_kthread+0x10/0x10 [ 162.431064][ T5590] ret_from_fork+0x514/0xb70 [ 162.431096][ T5590] ? __pfx_ret_from_fork+0x10/0x10 [ 162.431126][ T5590] ? __switch_to+0xc89/0x1420 [ 162.431157][ T5590] ? __pfx_kthread+0x10/0x10 [ 162.431189][ T5590] ret_from_fork_asm+0x1a/0x30 [ 162.431239][ T5590] [ 162.431366][ T5590] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 162.431411][ T5590] Bluetooth: hci0: failed to register connection device [ 162.771982][ T7102] trusted_key: syz.4.569 sent an empty control message without MSG_MORE. [ 162.890397][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 162.890416][ T37] audit: type=1400 audit(1786492913.103:39): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7106 comm="syz.0.570" src=65532 dest=20002 netif=wpan0 [ 163.018440][ T5319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 163.093091][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'. [ 163.097810][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'. [ 163.098202][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'. [ 163.201544][ T5319] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 163.206779][ T5319] usb 3-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 163.206833][ T5319] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 163.206862][ T5319] usb 3-1: config 1 interface 0 has no altsetting 0 [ 163.242780][ T5319] usb 3-1: string descriptor 0 read error: -22 [ 163.242947][ T5319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.749269][ T5319] logitech 0003:046D:C626.0001: unknown main item tag 0x2 [ 163.749316][ T5319] logitech 0003:046D:C626.0001: unexpected long global item [ 163.752996][ T5319] logitech 0003:046D:C626.0001: parse failed [ 163.753113][ T5319] logitech 0003:046D:C626.0001: probe with driver logitech failed with error -22 [ 163.947768][ T5319] usb 3-1: USB disconnect, device number 3 [ 164.365206][ T7135] device-mapper: ioctl: Unable to rename non-existent device, to uuid §<ÐA[ [ 164.590705][ T5319] IPVS: starting estimator thread 0... [ 164.651258][ T5594] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 164.651286][ T5594] CPU: 1 UID: 0 PID: 5594 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 164.651310][ T5594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.651324][ T5594] Workqueue: hci2 hci_rx_work [ 164.651359][ T5594] Call Trace: [ 164.651368][ T5594] [ 164.651377][ T5594] dump_stack_lvl+0xe8/0x150 [ 164.651413][ T5594] sysfs_create_dir_ns+0x271/0x2a0 [ 164.651439][ T5594] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 164.651467][ T5594] ? rt_spin_unlock+0x163/0x200 [ 164.651496][ T5594] kobject_add_internal+0x62c/0xce0 [ 164.651527][ T5594] kobject_add+0x163/0x240 [ 164.651546][ T5594] ? rt_spin_unlock+0x157/0x200 [ 164.651574][ T5594] ? __pfx_kobject_add+0x10/0x10 [ 164.651602][ T5594] ? get_device_parent+0x370/0x3a0 [ 164.651634][ T5594] device_add+0x3fa/0xb80 [ 164.651664][ T5594] hci_conn_add_sysfs+0xd5/0x210 [ 164.651698][ T5594] le_conn_complete_evt+0xfef/0x1580 [ 164.651732][ T5594] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 164.651767][ T5594] ? lockdep_hardirqs_on+0x7a/0x110 [ 164.651799][ T5594] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.651831][ T5594] ? rt_mutex_slowunlock+0x219/0x460 [ 164.651857][ T5594] ? skb_pull_data+0xf0/0x200 [ 164.651894][ T5594] hci_le_conn_complete_evt+0x187/0x470 [ 164.651939][ T5594] hci_event_packet+0x67a/0xf10 [ 164.651977][ T5594] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 164.652017][ T5594] ? __pfx_hci_event_packet+0x10/0x10 [ 164.652052][ T5594] ? rt_spin_unlock+0x157/0x200 [ 164.652089][ T5594] ? hci_send_to_monitor+0xe2/0x590 [ 164.652116][ T5594] hci_rx_work+0x3ee/0x1020 [ 164.652157][ T5594] ? process_scheduled_works+0xa20/0x14e0 [ 164.652183][ T5594] process_scheduled_works+0xa8e/0x14e0 [ 164.652243][ T5594] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.652277][ T5594] ? assign_work+0x3cf/0x5d0 [ 164.652309][ T5594] worker_thread+0xa47/0xfb0 [ 164.652368][ T5594] kthread+0x388/0x470 [ 164.652402][ T5594] ? __pfx_worker_thread+0x10/0x10 [ 164.652426][ T5594] ? __pfx_kthread+0x10/0x10 [ 164.652459][ T5594] ret_from_fork+0x514/0xb70 [ 164.652495][ T5594] ? __pfx_ret_from_fork+0x10/0x10 [ 164.652528][ T5594] ? __switch_to+0xc89/0x1420 [ 164.652560][ T5594] ? __pfx_kthread+0x10/0x10 [ 164.652594][ T5594] ret_from_fork_asm+0x1a/0x30 [ 164.652648][ T5594] [ 164.652767][ T5594] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 164.652810][ T5594] Bluetooth: hci2: failed to register connection device [ 164.720728][ T7141] IPVS: using max 8 ests per chain, 19200 per kthread [ 166.259659][ T7178] CIFS: Attempting to mount //127.0.0.1/share [ 166.583578][ T7185] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 167.234128][ T7178] CIFS: VFS: cifs_mount failed w/return code = -112 [ 167.650207][ T5319] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.800973][ T7214] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.822296][ T5319] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 167.861530][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.861561][ T5319] usb 4-1: Product: syz [ 167.861576][ T5319] usb 4-1: Manufacturer: syz [ 167.861591][ T5319] usb 4-1: SerialNumber: syz [ 168.186468][ T5319] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.186530][ T5319] usb 4-1: MIDIStreaming interface descriptor not found [ 168.973602][ T5319] usb 4-1: USB disconnect, device number 5 [ 169.906482][ T7248] CIFS: Attempting to mount //127.0.0.1/share [ 170.323355][ T5587] udevd[5587]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.932545][ T7248] CIFS: VFS: cifs_mount failed w/return code = -512 [ 172.907086][ T7301] vivid-004: disconnect [ 173.043134][ T5699] vivid-004: reconnect [ 173.348546][ T7294] ceph: No mds server is up or the cluster is laggy [ 173.777278][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 173.777309][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 175.212403][ T7344] input: syz0 as /devices/virtual/input/input7 [ 175.561238][ T5601] udevd[5601]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 177.648534][ T7380] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 179.810037][ T7439] syz.4.699 (7439) used greatest stack depth: 18080 bytes left [ 180.322132][ T7458] syz.1.706: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 180.322579][ T7458] CPU: 1 UID: 0 PID: 7458 Comm: syz.1.706 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.322605][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.322619][ T7458] Call Trace: [ 180.322627][ T7458] [ 180.322636][ T7458] dump_stack_lvl+0xe8/0x150 [ 180.322677][ T7458] warn_alloc+0x24c/0x270 [ 180.322698][ T7458] ? lockdep_hardirqs_on+0x7a/0x110 [ 180.322730][ T7458] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 180.322766][ T7458] ? __pfx_warn_alloc+0x10/0x10 [ 180.322791][ T7458] ? kasan_save_track+0x4f/0x80 [ 180.322826][ T7458] ? xskq_create+0x56/0x170 [ 180.322854][ T7458] ? xsk_init_queue+0x8a/0xe0 [ 180.322879][ T7458] ? xsk_setsockopt+0x52a/0x960 [ 180.322903][ T7458] ? do_sock_setsockopt+0x17c/0x1b0 [ 180.322939][ T7458] ? __x64_sys_setsockopt+0x143/0x1b0 [ 180.322962][ T7458] ? do_syscall_64+0x174/0x580 [ 180.322988][ T7458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.323019][ T7458] __vmalloc_node_range_noprof+0x12c/0x1730 [ 180.323092][ T7458] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.323138][ T7458] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 180.323165][ T7458] vmalloc_user_noprof+0xad/0xe0 [ 180.323200][ T7458] ? xskq_create+0xbf/0x170 [ 180.323226][ T7458] xskq_create+0xbf/0x170 [ 180.323258][ T7458] xsk_init_queue+0x8a/0xe0 [ 180.323289][ T7458] xsk_setsockopt+0x52a/0x960 [ 180.323315][ T7458] ? __fget_files+0x2a/0x420 [ 180.323339][ T7458] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.323380][ T7458] ? __fget_files+0x2a/0x420 [ 180.323400][ T7458] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 180.323428][ T7458] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.323457][ T7458] do_sock_setsockopt+0x17c/0x1b0 [ 180.323488][ T7458] __x64_sys_setsockopt+0x143/0x1b0 [ 180.323517][ T7458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.323542][ T7458] do_syscall_64+0x174/0x580 [ 180.323573][ T7458] ? trace_irq_disable+0x3b/0x140 [ 180.323607][ T7458] ? clear_bhb_loop+0x70/0xc0 [ 180.323635][ T7458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.323657][ T7458] RIP: 0033:0x7ff96bf6e0d9 [ 180.323679][ T7458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.323697][ T7458] RSP: 002b:00007ff96a1a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.323720][ T7458] RAX: ffffffffffffffda RBX: 00007ff96c1f6090 RCX: 00007ff96bf6e0d9 [ 180.323736][ T7458] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 180.323750][ T7458] RBP: 00007ff96c005024 R08: 0000000000000029 R09: 0000000000000000 [ 180.323763][ T7458] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.323777][ T7458] R13: 00007ff96c1f6128 R14: 00007ff96c1f6090 R15: 00007ffcf8d94418 [ 180.323813][ T7458] [ 180.351924][ T7458] Mem-Info: [ 180.351940][ T7458] active_anon:184 inactive_anon:6127 isolated_anon:0 [ 180.351940][ T7458] active_file:5410 inactive_file:37784 isolated_file:0 [ 180.351940][ T7458] unevictable:0 dirty:249 writeback:0 [ 180.351940][ T7458] slab_reclaimable:11362 slab_unreclaimable:101115 [ 180.351940][ T7458] mapped:29935 shmem:531 pagetables:1214 [ 180.351940][ T7458] sec_pagetables:0 bounce:0 [ 180.351940][ T7458] kernel_misc_reclaimable:0 [ 180.351940][ T7458] free:1332597 free_pcp:4502 free_cma:0 [ 180.351994][ T7458] Node 0 active_anon:736kB inactive_anon:24508kB active_file:21448kB inactive_file:151136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119740kB dirty:996kB writeback:0kB shmem:2124kB kernel_stack:13112kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.352043][ T7458] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 180.352089][ T7458] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.352148][ T7458] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 180.352185][ T7458] Node 0 DMA32 free:1378268kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:736kB inactive_anon:24508kB active_file:21448kB inactive_file:151136kB unevictable:0kB writepending:996kB zspages:0kB present:3129332kB managed:2560652kB mlocked:0kB bounce:0kB free_pcp:18000kB local_pcp:5264kB free_cma:0kB [ 180.352262][ T7458] lowmem_reserve[]: 0 0 1 1 1 [ 180.352296][ T7458] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1856kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 180.352350][ T7458] lowmem_reserve[]: 0 0 0 0 0 [ 180.352383][ T7458] Node 1 Normal free:3936760kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.352441][ T7458] lowmem_reserve[]: 0 0 0 0 0 [ 180.352475][ T7458] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.352956][ T7458] Node 0 DMA32: 213*4kB (UME) 1123*8kB (UME) 309*16kB (UME) 13*32kB (UME) 26*64kB (UM) 14*128kB (UM) 9*256kB (UM) 13*512kB (ME) 9*1024kB (M) 7*2048kB (ME) 324*4096kB (UM) = 1378268kB [ 180.353119][ T7458] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 180.353218][ T7458] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 15*16kB (UM) 9*32kB (UM) 3*64kB (UM) 6*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3936760kB [ 180.353378][ T7458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.353394][ T7458] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.353410][ T7458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.353425][ T7458] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.353439][ T7458] 43728 total pagecache pages [ 180.353447][ T7458] 7 pages in swap cache [ 180.353453][ T7458] Free swap = 124968kB [ 180.353460][ T7458] Total swap = 124996kB [ 180.353468][ T7458] 2097051 pages RAM [ 180.353475][ T7458] 0 pages HighMem/MovableOnly [ 180.353481][ T7458] 424809 pages reserved [ 180.353488][ T7458] 0 pages cma reserved [ 181.023682][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 181.682466][ T7471] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.170893][ T5699] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.328450][ T5699] usb 4-1: Using ep0 maxpacket: 8 [ 182.330427][ T5699] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.358011][ T5699] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 182.358072][ T5699] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.358095][ T5699] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.358121][ T5699] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.358144][ T5699] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.358189][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.420764][ T37] audit: type=1326 audit(1786492932.643:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 182.420816][ T37] audit: type=1326 audit(1786492932.643:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 182.420856][ T37] audit: type=1326 audit(1786492932.643:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 182.420892][ T37] audit: type=1326 audit(1786492932.643:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f37d074e0d9 code=0x7ffc0000 [ 182.471228][ T37] audit: type=1326 audit(1786492932.693:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37d070e90e code=0x7ffc0000 [ 182.472656][ T37] audit: type=1326 audit(1786492932.693:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37d070e90e code=0x7ffc0000 [ 182.474285][ T37] audit: type=1326 audit(1786492932.693:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37d070e90e code=0x7ffc0000 [ 182.475679][ T37] audit: type=1326 audit(1786492932.693:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37d070e90e code=0x7ffc0000 [ 182.476929][ T37] audit: type=1326 audit(1786492932.693:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37d070e90e code=0x7ffc0000 [ 182.479489][ T37] audit: type=1326 audit(1786492932.703:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7493 comm="syz.4.720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37d070e90e code=0x7ffc0000 [ 182.979008][ T5699] usb 4-1: usb_control_msg returned -32 [ 182.979064][ T5699] usbtmc 4-1:16.0: can't read capabilities [ 183.990040][ T7518] netlink: 'syz.1.729': attribute type 1 has an invalid length. [ 184.252761][ T7518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.275378][ T7522] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 184.581814][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 184.778901][ T7533] bond2: entered allmulticast mode [ 184.845692][ T7537] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 184.858156][ T7537] bond2: (slave vti0): Error -95 calling set_mac_address [ 185.047656][ T5319] usb 4-1: USB disconnect, device number 6 [ 185.718701][ T5590] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.159027][ T7563] netlink: 'syz.0.747': attribute type 4 has an invalid length. [ 186.232207][ T7568] netlink: 'syz.0.747': attribute type 4 has an invalid length. [ 186.541623][ T7575] gfs2: gfs2 mount does not exist [ 187.706857][ T7612] syz_tun: entered allmulticast mode [ 187.716078][ T7612] syz_tun: left allmulticast mode [ 189.335418][ T37] kauditd_printk_skb: 70 callbacks suppressed [ 189.335439][ T37] audit: type=1326 audit(1786492939.543:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 189.335508][ T37] audit: type=1326 audit(1786492939.553:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 189.335554][ T37] audit: type=1326 audit(1786492939.553:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 189.335598][ T37] audit: type=1326 audit(1786492939.553:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 189.335641][ T37] audit: type=1326 audit(1786492939.553:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 189.376829][ T37] audit: type=1326 audit(1786492939.553:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 189.376902][ T37] audit: type=1326 audit(1786492939.563:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 189.376949][ T37] audit: type=1326 audit(1786492939.563:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 189.376995][ T37] audit: type=1326 audit(1786492939.563:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 189.377040][ T37] audit: type=1326 audit(1786492939.563:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7659 comm="syz.2.773" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb858e0d9 code=0x7ffc0000 [ 192.625630][ T36] kernel read not supported for file /vcs (pid: 36 comm: kworker/1:1) [ 193.908576][ T36] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 194.081479][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 194.083254][ T36] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 194.096941][ T36] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 194.096998][ T36] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.097022][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 194.097045][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 194.101375][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.101399][ T36] usb 2-1: Product: syz [ 194.101413][ T36] usb 2-1: Manufacturer: syz [ 194.101427][ T36] usb 2-1: SerialNumber: syz [ 194.180714][ T36] usb 2-1: config 0 descriptor?? [ 194.212722][ T7764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.452079][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.452766][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.517528][ T36] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 194.675283][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.675570][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.800042][ T36] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 195.057597][ C1] powermate: config urb returned -71 [ 195.062258][ C1] powermate: config urb returned -71 [ 195.062465][ C1] powermate: config urb returned -71 [ 195.062691][ C1] powermate: config urb returned -71 [ 195.511616][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 195.586947][ T36] usb 2-1: USB disconnect, device number 5 [ 197.984163][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.066053][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.075609][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.091835][ T5594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.093298][ T5594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.333694][ T1053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.888975][ T7836] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 199.026737][ T7840] loop4: detected capacity change from 0 to 7 [ 199.040671][ T7840] Dev loop4: unable to read RDB block 7 [ 199.040703][ T7840] loop4: unable to read partition table [ 199.040919][ T7840] loop4: partition table beyond EOD, truncated [ 199.040934][ T7840] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.449645][ T7836] bond1: entered promiscuous mode [ 199.450971][ T7836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.146398][ T1053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.367454][ T5590] Bluetooth: hci2: command tx timeout [ 201.675116][ T1053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.787177][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 201.787207][ T7889] bridge: RTM_NEWNEIGH with invalid ether address [ 201.787544][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 201.787561][ T7890] bridge: RTM_NEWNEIGH with invalid ether address [ 202.440282][ T5590] Bluetooth: hci2: command tx timeout [ 202.645431][ T1053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.518514][ T5590] Bluetooth: hci2: command tx timeout [ 205.690834][ T1053] bridge_slave_1: left allmulticast mode [ 205.691028][ T1053] bridge_slave_1: left promiscuous mode [ 205.700463][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 205.751446][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.881881][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 205.897104][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 205.912988][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.913023][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.913073][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.999130][ T9] usb 1-1: config 0 descriptor?? [ 206.282244][ T1053] bridge_slave_0: left allmulticast mode [ 206.282283][ T1053] bridge_slave_0: left promiscuous mode [ 206.320892][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.475154][ T9] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 206.602346][ T5590] Bluetooth: hci2: command tx timeout [ 206.895592][ T7966] netlink: 'syz.3.874': attribute type 4 has an invalid length. [ 206.953465][ T7967] netlink: 'syz.3.874': attribute type 4 has an invalid length. [ 207.029126][ T9] usb 1-1: USB disconnect, device number 2 [ 208.339278][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.447998][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.502657][ T1053] bond0 (unregistering): Released all slaves [ 209.155992][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 209.156078][ T37] audit: type=1800 audit(1786492959.333:143): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.873" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 209.306719][ T7962] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 209.306797][ T7962] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 209.306817][ T7962] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 209.598426][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 209.751369][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 209.752624][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 209.752651][ T10] usb 4-1: config 0 has no interface number 0 [ 209.752699][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 209.797789][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.797818][ T10] usb 4-1: Product: syz [ 209.797831][ T10] usb 4-1: Manufacturer: syz [ 209.797846][ T10] usb 4-1: SerialNumber: syz [ 210.053329][ T10] usb 4-1: config 0 descriptor?? [ 210.298096][ T8008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.551138][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.551278][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.551522][ T7827] bridge_slave_0: entered allmulticast mode [ 210.564980][ T7827] bridge_slave_0: entered promiscuous mode [ 210.605626][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.605771][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.606032][ T7827] bridge_slave_1: entered allmulticast mode [ 210.642627][ T7827] bridge_slave_1: entered promiscuous mode [ 210.931814][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 211.292356][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.322185][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.395622][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 211.395656][ T10] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 211.395976][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 211.484908][ T10] usb 4-1: USB disconnect, device number 7 [ 211.738761][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 213.265330][ T5248] 8021q: adding VLAN 0 to HW filter on device eth1 [ 213.286619][ T7827] team0: Port device team_slave_0 added [ 213.300941][ T7827] team0: Port device team_slave_1 added [ 213.809691][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.809709][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.809737][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.918559][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.918576][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.918601][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.355445][ T8077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.512087][ T7827] hsr_slave_0: entered promiscuous mode [ 214.513700][ T7827] hsr_slave_1: entered promiscuous mode [ 214.514933][ T7827] debugfs: 'hsr0' already exists in 'hsr' [ 214.514959][ T7827] Cannot create hsr debugfs directory [ 216.897069][ T8127] netlink: 'syz.3.920': attribute type 15 has an invalid length. [ 216.897097][ T8127] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.920'. [ 217.095004][ T5248] 8021q: adding VLAN 0 to HW filter on device eth2 [ 217.239714][ T5590] Bluetooth: hci1: command 0x0406 tx timeout [ 217.271712][ T5594] Bluetooth: hci3: command 0x0406 tx timeout [ 217.428673][ T1053] hsr_slave_0: left promiscuous mode [ 217.495376][ T1053] hsr_slave_1: left promiscuous mode [ 217.496773][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.552501][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.594312][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.594343][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.066590][ T1053] veth1_macvtap: left promiscuous mode [ 218.066991][ T1053] veth0_macvtap: left promiscuous mode [ 218.067344][ T1053] veth1_vlan: left promiscuous mode [ 218.067760][ T1053] veth0_vlan: left promiscuous mode [ 220.550419][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 220.787610][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 220.878576][ T5577] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 221.060845][ T5577] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 221.062942][ T5577] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.062970][ T5577] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.063000][ T5577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.123366][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 221.123402][ T8133] netlink: 'syz.2.921': attribute type 5 has an invalid length. [ 221.123427][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.921'. [ 221.247922][ T8166] tipc: Started in network mode [ 221.247944][ T8166] tipc: Node identity 4, cluster identity 4711 [ 221.247956][ T8166] tipc: Node number set to 4 [ 221.619627][ T9] usb 2-1: USB disconnect, device number 6 [ 223.568476][ T5577] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 223.774651][ T5577] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 223.782435][ T5577] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 223.782465][ T5577] usb 3-1: config 0 has no interface number 0 [ 223.782533][ T5577] usb 3-1: config 0 interface 41 has no altsetting 0 [ 223.822608][ T5577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.822637][ T5577] usb 3-1: Product: syz [ 223.822653][ T5577] usb 3-1: Manufacturer: syz [ 223.822667][ T5577] usb 3-1: SerialNumber: syz [ 223.864073][ T5577] usb 3-1: config 0 descriptor?? [ 224.581956][ T5577] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 224.648873][ T5577] ================================================================== [ 224.648889][ T5577] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 224.648929][ T5577] Read of size 8 at addr ffffc9000ef23008 by task kworker/1:4/5577 [ 224.648946][ T5577] [ 224.648960][ T5577] CPU: 1 UID: 0 PID: 5577 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 224.649001][ T5577] Tainted: [L]=SOFTLOCKUP [ 224.649008][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.649022][ T5577] Workqueue: usb_hub_wq hub_event [ 224.649045][ T5577] Call Trace: [ 224.649053][ T5577] [ 224.649062][ T5577] dump_stack_lvl+0xe8/0x150 [ 224.649091][ T5577] print_address_description+0x55/0x1e0 [ 224.649119][ T5577] ? __list_add_valid_or_report+0x4e/0x130 [ 224.649149][ T5577] print_report+0x58/0x70 [ 224.649176][ T5577] kasan_report+0x117/0x150 [ 224.649200][ T5577] ? __list_add_valid_or_report+0x4e/0x130 [ 224.649234][ T5577] __list_add_valid_or_report+0x4e/0x130 [ 224.649278][ T5577] kcov_remote_stop+0x457/0x680 [ 224.649310][ T5577] hub_event+0x4789/0x4cf0 [ 224.649353][ T5577] ? __pfx_hub_event+0x10/0x10 [ 224.649373][ T5577] ? process_scheduled_works+0xa20/0x14e0 [ 224.649400][ T5577] ? rcu_is_watching+0x15/0xb0 [ 224.649424][ T5577] ? process_scheduled_works+0xa20/0x14e0 [ 224.649446][ T5577] process_scheduled_works+0xa8e/0x14e0 [ 224.649482][ T5577] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.649508][ T5577] ? assign_work+0x3cf/0x5d0 [ 224.649532][ T5577] worker_thread+0xa47/0xfb0 [ 224.649560][ T5577] ? __kthread_parkme+0x71/0x1f0 [ 224.649588][ T5577] kthread+0x388/0x470 [ 224.649614][ T5577] ? __pfx_worker_thread+0x10/0x10 [ 224.649636][ T5577] ? __pfx_kthread+0x10/0x10 [ 224.649665][ T5577] ret_from_fork+0x514/0xb70 [ 224.649697][ T5577] ? __pfx_ret_from_fork+0x10/0x10 [ 224.649731][ T5577] ? __switch_to+0xc89/0x1420 [ 224.649758][ T5577] ? __pfx_kthread+0x10/0x10 [ 224.649786][ T5577] ret_from_fork_asm+0x1a/0x30 [ 224.649826][ T5577] [ 224.649833][ T5577] [ 224.649839][ T5577] The buggy address belongs to a vmalloc virtual mapping [ 224.649858][ T5577] Memory state around the buggy address: [ 224.649869][ T5577] ffffc9000ef22f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 224.649883][ T5577] ffffc9000ef22f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 224.649897][ T5577] >ffffc9000ef23000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 224.649907][ T5577] ^ [ 224.649918][ T5577] ffffc9000ef23080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 224.649930][ T5577] ffffc9000ef23100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 224.649940][ T5577] ================================================================== [ 224.652416][ T5577] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 224.652439][ T5577] CPU: 1 UID: 0 PID: 5577 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 224.652469][ T5577] Tainted: [L]=SOFTLOCKUP [ 224.652477][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.652489][ T5577] Workqueue: usb_hub_wq hub_event [ 224.652514][ T5577] Call Trace: [ 224.652521][ T5577] [ 224.652530][ T5577] vpanic+0x56c/0xa60 [ 224.652563][ T5577] ? __pfx_vpanic+0x10/0x10 [ 224.652594][ T5577] ? __pfx___schedule+0x10/0x10 [ 224.652623][ T5577] panic+0xc5/0xd0 [ 224.652652][ T5577] ? __pfx_panic+0x10/0x10 [ 224.652682][ T5577] ? preempt_schedule_thunk+0x16/0x40 [ 224.652708][ T5577] ? __list_add_valid_or_report+0x4e/0x130 [ 224.652738][ T5577] check_panic_on_warn+0x89/0xb0 [ 224.652769][ T5577] ? __list_add_valid_or_report+0x4e/0x130 [ 224.652796][ T5577] end_report+0x73/0x170 [ 224.652818][ T5577] ? __list_add_valid_or_report+0x4e/0x130 [ 224.652845][ T5577] kasan_report+0x128/0x150 [ 224.652868][ T5577] ? __list_add_valid_or_report+0x4e/0x130 [ 224.652902][ T5577] __list_add_valid_or_report+0x4e/0x130 [ 224.652935][ T5577] kcov_remote_stop+0x457/0x680 [ 224.652968][ T5577] hub_event+0x4789/0x4cf0 [ 224.653010][ T5577] ? __pfx_hub_event+0x10/0x10 [ 224.653029][ T5577] ? process_scheduled_works+0xa20/0x14e0 [ 224.653055][ T5577] ? rcu_is_watching+0x15/0xb0 [ 224.653081][ T5577] ? process_scheduled_works+0xa20/0x14e0 [ 224.653103][ T5577] process_scheduled_works+0xa8e/0x14e0 [ 224.653139][ T5577] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.653165][ T5577] ? assign_work+0x3cf/0x5d0 [ 224.653189][ T5577] worker_thread+0xa47/0xfb0 [ 224.653218][ T5577] ? __kthread_parkme+0x71/0x1f0 [ 224.653247][ T5577] kthread+0x388/0x470 [ 224.653286][ T5577] ? __pfx_worker_thread+0x10/0x10 [ 224.653308][ T5577] ? __pfx_kthread+0x10/0x10 [ 224.653335][ T5577] ret_from_fork+0x514/0xb70 [ 224.653367][ T5577] ? __pfx_ret_from_fork+0x10/0x10 [ 224.653396][ T5577] ? __switch_to+0xc89/0x1420 [ 224.653423][ T5577] ? __pfx_kthread+0x10/0x10 [ 224.653451][ T5577] ret_from_fork_asm+0x1a/0x30 [ 224.653488][ T5577] [ 224.653832][ T5577] Kernel Offset: disabled