last executing test programs: 2m44.314591906s ago: executing program 2 (id=9675): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r0, 0x0, 0x0) read(r0, &(0x7f0000000100), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl(r1, 0xc138fd00, 0x0) 2m44.054832562s ago: executing program 2 (id=9677): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9360, 0x0) 2m43.129640126s ago: executing program 1 (id=9684): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m42.882842689s ago: executing program 2 (id=9686): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000300)={0x10, 0x0, 0xffffffff, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2m42.721704483s ago: executing program 2 (id=9687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000086) 2m42.528067144s ago: executing program 2 (id=9688): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e23, @local}], 0x10) 2m40.895591755s ago: executing program 1 (id=9693): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) 2m39.997448259s ago: executing program 1 (id=9698): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x01000000 2000000000 -', 0x17) 2m39.779213249s ago: executing program 1 (id=9700): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xff, 0x0, 0x0, 0xfc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1}, &(0x7f0000000200)=0x8) 2m39.767114359s ago: executing program 2 (id=9701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 2m39.583129597s ago: executing program 1 (id=9703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000086) 2m39.47332855s ago: executing program 1 (id=9705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e701007cdaddb4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079c", 0xf}], 0x2) 2m37.962774247s ago: executing program 0 (id=9713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000000030801020000000000000000020000021c000480080002400000000008000240000000030800024000000009050003002100000005000300840000003c000480080007400040046a0800034000000004080006400000002808000240000000090800014000000000080002400000000808000140000000030500030006"], 0xa8}, 0x1, 0x0, 0x0, 0x44010}, 0x200c0c4) 2m37.92038417s ago: executing program 0 (id=9714): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04004100000010"]) 2m37.809653999s ago: executing program 0 (id=9715): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@private=0xa010102, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f49}, {{@in6=@private1, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2cd6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x3c}, 0x2, @in6=@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) 2m37.702734608s ago: executing program 0 (id=9716): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, 0x84) 2m37.702542414s ago: executing program 0 (id=9717): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 2m36.638492794s ago: executing program 0 (id=9718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000018c0)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@dccp_packet={0x5, 0x6, '\x00', 0x10, 0x21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x6, 0x1, "641688", 0x89, "3166de"}}}}}}, 0x46) 2m22.949062511s ago: executing program 32 (id=9705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e701007cdaddb4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079c", 0xf}], 0x2) 2m22.872797399s ago: executing program 33 (id=9701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 2m20.31618361s ago: executing program 34 (id=9718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000018c0)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@dccp_packet={0x5, 0x6, '\x00', 0x10, 0x21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x6, 0x1, "641688", 0x89, "3166de"}}}}}}, 0x46) 1m47.168680693s ago: executing program 3 (id=9727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m47.022429608s ago: executing program 3 (id=9728): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0x1, 0x6, 0x43}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x5c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x26}}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "b47233e19f10929b698cc6876071b37f37d06232afe3700d", "0dcc0f9b4038187fd0ea9a12d6db7ed3b59a831af9887dc7a7eb90392c61dd8f"}}}}, 0x6a) 1m45.932721136s ago: executing program 3 (id=9729): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000400)="0123456789", 0xa) read(r2, &(0x7f0000000500), 0xa) 1m45.571808959s ago: executing program 3 (id=9730): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x5, 0x200}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m43.506858431s ago: executing program 3 (id=9731): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0184d08, &(0x7f0000000a00)) 1m42.959252763s ago: executing program 3 (id=9732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e701007cdaddb4b47380c988cafb", 0x2b}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7", 0x1b}], 0x2) 1m42.387290506s ago: executing program 5 (id=9720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000086) 1m42.220639657s ago: executing program 5 (id=9733): r0 = epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 1m42.078121052s ago: executing program 5 (id=9734): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m41.990508203s ago: executing program 5 (id=9735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100a7000000fddbdf250300000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000880) 1m41.896608915s ago: executing program 5 (id=9736): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008840) 1m41.813298976s ago: executing program 5 (id=9737): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, 0x1e) 1m26.399444193s ago: executing program 35 (id=9732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e701007cdaddb4b47380c988cafb", 0x2b}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7", 0x1b}], 0x2) 1m25.317157539s ago: executing program 36 (id=9737): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, 0x1e) 6.504386075s ago: executing program 7 (id=10027): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="0100a7000000fddbdf250300000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000880) 6.388575428s ago: executing program 7 (id=10028): getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/141, 0x8d) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc343, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xf, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x14d2a089015fdced) 4.445348971s ago: executing program 4 (id=10037): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 4.007194672s ago: executing program 6 (id=10039): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x1, 0x8}]}, 0x80}, 0x1, 0x7}, 0x4008800) 3.876566728s ago: executing program 6 (id=10040): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.3627598s ago: executing program 4 (id=10041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x6a) 3.201718132s ago: executing program 8 (id=10043): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='^', 0x1) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) listen(0xffffffffffffffff, 0x0) 3.012477183s ago: executing program 7 (id=10044): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000100)) connect$packet(r0, &(0x7f0000000180)={0x11, 0x7, 0x0, 0x1, 0x53, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x81, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}], 0x30}}], 0x2, 0x54876) 2.736359228s ago: executing program 4 (id=10045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="0100a7000000fddbdf250300000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000880) 2.686761528s ago: executing program 7 (id=10046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="f081550000a000000f00000f001e48b8feb65a0d000000000f23d00f21f835200000000f2343f6f8f6f82e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c3410f18dbf80cb8c087678eef66bac60fc72a45c194710a000000058a3bc4827dbcae009008f2", 0x6f}], 0x1, 0x28, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000140)=[@cr4={0x1, 0x40be6}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.514235945s ago: executing program 4 (id=10047): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2.250478582s ago: executing program 8 (id=10048): listen(0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x0, r0, 0x2a14b56) timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x80001) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) read$FUSE(r2, &(0x7f0000003080)={0x2020}, 0x2020) socket$inet(0x2, 0x6, 0x9) 2.046644558s ago: executing program 6 (id=10049): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="640f0177f6802c05f30f1a5feb6626650f236c660f38811c6736673685e167d736660f3825a20000f30f1eef0f01df", 0x2f}], 0x1, 0x57, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x13, 0xcb, 0x6, 0x0, 0xe, 0x6, 0xf4}, {0x2, 0x50000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x8, 0x0, 0x3}, {0x41000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x9000, 0x9, 0x10, 0x80, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9, 0x1}, {0x26000, 0xffff1000, 0xd, 0x7, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x74, 0x8, 0x0, 0x2, 0x1c, 0xe, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x7, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa5, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0xeeee0000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.381829165s ago: executing program 6 (id=10050): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd}) 1.30466116s ago: executing program 7 (id=10051): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101202) ioctl$UI_DEV_DESTROY(r0, 0x5502) read(r1, 0x0, 0x0) 1.094659397s ago: executing program 8 (id=10052): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)}], 0x1}, 0x2400c81d) sendmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000a40)="0d2c37aac0a817380230f89a36e47d7ea57f8e71de8bc4153f29b1e03f2f1af1ac246457409d68449d90dd65b0987f405c712e4eadf58153d0a263098dfd8364f4d19328cf494b4aac1d4b8458cc4877e167b0ad05850e25810537c4518d230aae9b83dad34fe415cdc586b64a444146047c36d9818e08cbab142cf065407db278c41c254205fc113470e49ee94bc4ac277d77faa95d3dbe433d01046db59d9f0c4f24e282a60a856d1768499e523610e1d5dba1f2507bc542d4ce2201f3c14cf7ae1cfb6f4219c2641a0b26c5f09541ef589ea1d5f446e57747ae2a61510c6badcdbb81a0c709c138a8a4f8fa32e832db71c89e52b0aaf22ec15cfc32682dcc5a0d64e8c26b33c0569f94ca7d872780f934463ec01ec05ff49dc75bf0979530554411f9a3869e52febdf2315fddedf47c684ba5064ca7f0d17d4d82780d0a88c79ab2b951d4680ca637fe7bcfb41cc0ef8653038510d87fca1b63d0a708088a0f2c94b92ba36fd13f124f6c1e021953cb1a19443836dac97008501350ef1f3baf9b8895f0a3777bb4783121bf44afec8308f19c42b8ddb7929a1aec1580ee6afbf696748da956dd0e2a8cb7c9626868bfc26175fca605555be5c81b9ba3fb7713282fa02a8f300c7c30093cb2502e19b96ca98689e644675450c400dc21d93f70519c583f23b4e82d2c7c7a244b92797281a6d4db01d78e4341ce05ed1f4fa38e3c93002f310bcb046cdb6a5207d6ce9f19bc44e8d505724d86054bb593091a40c86c0abe357935da738e7fa7849aa0b7e5350c1f3381e7744c4be3d3aa250c96b84f4f85dfb3f372b48a7d7ac84f7ea9a493860449654ed82e0333cdaa4829ed273113ab9d49dbb0c3b69ab52487ae0a9d9e7345f0b9aefaf1f28f9b38f3c6772f7159e1a17b785a4d6d01acd0307baddee9368b71f7471e1881be1e42a8a3be1730c0e68e0389d4dd1e72b95ef8d0d1aba39bf99bcfd7e345eedd44ec6c1604439d34c5e0bbd31ae29c135fdde900f34a01b02f325adb20a8206e7c2f02a6ddd691eb8b85f878d839efad4ca1ce01bce84b45b57ce1f7262f31e92fc1ea9ec89764287be58645a6ac8a6c58242f31786ade8551aaf64ea0d28fdc5d1453cd7dbc142b870197698c58adca3b4bd5f873df6941fe051af07c889defd1b4f0476d7367d6d429f4b99018454615bcdc007d5f56a20030d1e2b4cfb1bce6a794aa8c0d8d55f13809bbee6df881baf52b425e3365f1316cfc3e78771ea6314a55dcf21b9641fae342b76bec23516d882c702fc2d578a689924cf5a7d0e60fb759f8165f973a0af37e9d7f1d9450723b03982a111ab6d1be0d", 0x3b7}], 0x1}}], 0x1, 0x8040) 948.671168ms ago: executing program 6 (id=10053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x6a) 740.873976ms ago: executing program 4 (id=10054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/109, 0x6d}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) close(0x3) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="776cc98b5ea757a85a633793379b763a26d52aa7bd351820", 0x0, 0x18) 521.003438ms ago: executing program 8 (id=10055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="0100a7000000fddbdf250300000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000880) 402.862511ms ago: executing program 4 (id=10056): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='^', 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 362.493464ms ago: executing program 8 (id=10057): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/170, 0xaa) 346.672812ms ago: executing program 7 (id=10058): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="640f0177f6802c05f30f1a5feb6626650f236c660f38811c6736673685e167d736660f3825a20000f30f1eef0f01df", 0x2f}], 0x1, 0x57, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x13, 0xcb, 0x6, 0x0, 0xe, 0x6, 0xf4}, {0x2, 0x50000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x8, 0x0, 0x3}, {0x41000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x9000, 0x9, 0x10, 0x80, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9, 0x1}, {0x26000, 0xffff1000, 0xd, 0x7, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x74, 0x8, 0x0, 0x2, 0x1c, 0xe, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x7, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa5, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0xeeee0000, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 186.719753ms ago: executing program 8 (id=10059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="f081550000a000000f00000f001e48b8feb65a0d000000000f23d00f21f835200000000f2343f6f8f6f82e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c3410f18dbf80cb8c087678eef66bac60fc72a45c194710a000000058a3bc4827dbcae009008f2", 0x6f}], 0x1, 0x28, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000140)=[@cr4={0x1, 0x40be6}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=10060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x28, r5, 0x62c21a4ade68aba1, 0xf0bd23, 0xfffffffd, {{0x32}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x1000076}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x2400c880) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.2.5222'. [ 530.225110][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5222'. [ 531.079450][T18950] fuse: fd is not a fuse device [ 531.266897][T18958] fuse: fd is not a fuse device [ 531.412429][T18963] fuse: fd is not a fuse device [ 531.839082][T18981] fuse: fd is not a fuse device [ 532.514151][T19005] fuse: fd is not a fuse device [ 532.590483][T19010] fuse: fd is not a fuse device [ 532.693877][T19016] fuse: fd is not a fuse device [ 532.876660][T19030] fuse: fd is not a fuse device [ 532.978514][T19036] fuse: fd is not a fuse device [ 533.174553][T19045] overlayfs: failed to clone upperpath [ 533.262008][T19051] fuse: fd is not a fuse device [ 534.136544][T19084] overlayfs: failed to clone upperpath [ 534.312202][T19096] overlayfs: failed to clone upperpath [ 534.890020][T19102] fuse: fd is not a fuse device [ 536.320043][T19167] fuse: fd is not a fuse device [ 537.554173][T19189] fuse: fd is not a fuse device [ 538.256900][T19207] fuse: fd is not a fuse device [ 549.498169][T19569] fuse: fd is not a fuse device [ 550.109309][T19579] fuse: fd is not a fuse device [ 550.291851][T19587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.722027][T19598] fuse: fd is not a fuse device [ 551.128003][T19607] fuse: fd is not a fuse device [ 551.466576][T19625] fuse: fd is not a fuse device [ 551.568154][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5483'. [ 551.929823][T19645] fuse: fd is not a fuse device [ 553.571926][T19717] fuse: fd is not a fuse device [ 554.399504][T19727] fuse: fd is not a fuse device [ 554.581060][T19741] fuse: fd is not a fuse device [ 556.007302][T19777] fuse: fd is not a fuse device [ 562.489650][T19900] tc_dump_action: action bad kind [ 565.187338][T10052] tipc: Subscription rejected, illegal request [ 568.513431][T20116] netlink: 'syz.2.5658': attribute type 4 has an invalid length. [ 568.592510][ T9] lo speed is unknown, defaulting to 1000 [ 568.592603][ T9] syz2: Port: 1 Link DOWN [ 568.592713][ T9] lo speed is unknown, defaulting to 1000 [ 568.631666][T20115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.120403][ T2536] tipc: Subscription rejected, illegal request [ 571.652336][T20178] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5674'. [ 571.956805][T20178] bridge0: port 3(syz_tun) entered blocking state [ 571.957112][T20178] bridge0: port 3(syz_tun) entered disabled state [ 571.957342][T20178] syz_tun: entered allmulticast mode [ 572.016782][T20178] syz_tun: entered promiscuous mode [ 572.030962][T20178] bridge0: port 3(syz_tun) entered blocking state [ 572.031111][T20178] bridge0: port 3(syz_tun) entered forwarding state [ 572.538318][T10052] tipc: Subscription rejected, illegal request [ 573.370006][T20219] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5690'. [ 573.616868][T20219] bridge0: port 3(syz_tun) entered blocking state [ 573.618821][T20219] bridge0: port 3(syz_tun) entered disabled state [ 573.619080][T20219] syz_tun: entered allmulticast mode [ 573.640593][T20219] syz_tun: entered promiscuous mode [ 573.647548][T20219] bridge0: port 3(syz_tun) entered blocking state [ 573.647693][T20219] bridge0: port 3(syz_tun) entered forwarding state [ 577.173195][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 579.344130][T20331] netlink: 'syz.0.5740': attribute type 4 has an invalid length. [ 580.344242][T20339] dvmrp0: entered allmulticast mode [ 580.652322][T20347] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5747'. [ 583.679847][T20467] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 584.171325][T20497] netlink: 'syz.3.5823': attribute type 27 has an invalid length. [ 584.393513][T20511] openvswitch: netlink: Message has 1 unknown bytes. [ 584.393546][T20511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.986248][T20551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.031107][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5848'. [ 585.556590][T20573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5858'. [ 586.047456][ T38] audit: type=1800 audit(1785217284.890:61): pid=20607 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.5872" name="nullb0" dev="tmpfs" ino=7618 res=0 errno=0 [ 586.138212][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5876'. [ 586.645758][T20644] scsi_nl_rcv_msg: discarding partial skb [ 588.119449][ T2537] kworker/u8:23 (2537) used greatest stack depth: 14936 bytes left [ 593.681123][T20867] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5999'. [ 593.682298][T20862] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5999'. [ 595.023494][T20912] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6020'. [ 595.041546][T20907] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6020'. [ 597.600166][T20990] SET target dimension over the limit! [ 599.021288][T21031] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6082'. [ 599.036568][T21031] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6082'. [ 601.093039][T21144] tipc: Enabled bearer , priority 10 [ 602.158351][ T5611] tipc: Node number set to 3145728 [ 602.592489][T21221] overlayfs: failed to clone lowerpath [ 602.599367][T21224] 9p: Bad value for 'rfdno' [ 603.356416][T21274] fuse: fd is not a fuse device [ 605.235461][T21397] overlayfs: failed to clone upperpath [ 605.904502][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6284'. [ 605.916032][ T38] audit: type=1800 audit(1785217303.476:62): pid=21444 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.6285" name="nullb0" dev="tmpfs" ino=3726 res=0 errno=0 [ 610.539482][T21729] Set syz1 is full, maxelem 65536 reached [ 611.688262][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6459'. [ 612.428305][T21859] fuse: fd is not a fuse device [ 616.840190][T22111] overlayfs: failed to clone lowerpath [ 618.911774][T22188] SET target dimension over the limit! [ 621.036451][T22249] fuse: fd is not a fuse device [ 621.600897][ T38] audit: type=1326 audit(1785217318.143:63): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22268 comm="syz.0.6675" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f094a5dde99 code=0x0 [ 624.026499][T22397] GUP no longer grows the stack in syz.0.6725 (22397): 200000007000-200000008000 (200000004000) [ 624.026561][T22397] CPU: 1 UID: 0 PID: 22397 Comm: syz.0.6725 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 624.026583][T22397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 624.026602][T22397] Call Trace: [ 624.026686][T22397] [ 624.026758][T22397] dump_stack_lvl+0xe8/0x150 [ 624.026841][T22397] fixup_user_fault+0x637/0x6f0 [ 624.026871][T22397] fault_in_user_writeable+0x71/0xd0 [ 624.026893][T22397] futex_lock_pi+0x7bc/0xac0 [ 624.026930][T22397] ? __pfx_futex_lock_pi+0x10/0x10 [ 624.027004][T22397] ? futex_private_hash_put+0x14e/0x180 [ 624.027027][T22397] ? __pfx_futex_wake_mark+0x10/0x10 [ 624.027071][T22397] ? userfaultfd_unmap_complete+0x292/0x310 [ 624.027096][T22397] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 624.027125][T22397] do_futex+0x330/0x4e0 [ 624.027152][T22397] ? __pfx_do_futex+0x10/0x10 [ 624.027175][T22397] ? __vm_munmap+0x2fe/0x3e0 [ 624.027202][T22397] __se_sys_futex+0x3a8/0x450 [ 624.027231][T22397] ? __pfx___se_sys_futex+0x10/0x10 [ 624.027251][T22397] ? rcu_is_watching+0x15/0xb0 [ 624.027281][T22397] ? __x64_sys_futex+0x21/0xf0 [ 624.027306][T22397] do_syscall_64+0x17b/0x530 [ 624.027325][T22397] ? irqentry_exit+0x10f/0x8f0 [ 624.027342][T22397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.027362][T22397] ? clear_bhb_loop+0x40/0x90 [ 624.027385][T22397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.027412][T22397] RIP: 0033:0x7f094a5dde99 [ 624.027476][T22397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.027522][T22397] RSP: 002b:00007f0948836028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 624.027571][T22397] RAX: ffffffffffffffda RBX: 00007f094a865fa0 RCX: 00007f094a5dde99 [ 624.027585][T22397] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 624.027597][T22397] RBP: 00007f094a673eaf R08: 0000000000000000 R09: 0000000000000082 [ 624.027609][T22397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.027621][T22397] R13: 00007f094a866038 R14: 00007f094a865fa0 R15: 00007ffe5ff95a78 [ 624.027652][T22397] [ 625.589925][T22459] fuse: fd is not a fuse device [ 626.038383][T22487] fuse: fd is not a fuse device [ 629.273572][T22618] fuse: fd is not a fuse device [ 630.265326][T22683] fuse: fd is not a fuse device [ 630.442011][T22695] fuse: fd is not a fuse device [ 630.611592][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6859'. [ 634.083930][T22817] fuse: fd is not a fuse device [ 634.888558][T22853] fuse: fd is not a fuse device [ 635.210934][T22874] blktrace: Concurrent blktraces are not allowed on loop2 [ 635.469388][T22889] fuse: fd is not a fuse device [ 636.702587][T22947] fuse: fd is not a fuse device [ 637.311963][T22979] fuse: fd is not a fuse device [ 637.312672][T22979] Invalid source name [ 637.312681][T22979] UBIFS error (pid: 22979): cannot open "./file0", error -22 [ 638.214309][ T38] audit: type=1326 audit(1785217333.680:64): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23024 comm="syz.2.6990" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f514df0de99 code=0x0 [ 638.555635][T23044] fuse: fd is not a fuse device [ 639.774425][T23090] ªªªªªª: renamed from vlan0 [ 640.052475][T23102] fuse: fd is not a fuse device [ 641.363402][T23159] fuse: fd is not a fuse device [ 641.666353][T23178] fuse: fd is not a fuse device [ 642.859524][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.088976][T23231] fuse: fd is not a fuse device [ 643.180964][T23239] fuse: fd is not a fuse device [ 643.611939][ T5714] Process accounting resumed [ 643.880005][T23278] fuse: fd is not a fuse device [ 643.886399][T23278] overlayfs: failed to resolve './cgroup': -2 [ 645.049396][T23345] fuse: fd is not a fuse device [ 645.062229][T23345] overlayfs: failed to clone upperpath [ 646.544573][T23398] fuse: fd is not a fuse device [ 647.010972][T23428] fuse: fd is not a fuse device [ 647.085795][T23433] fuse: fd is not a fuse device [ 649.015049][T23535] overlayfs: failed to clone upperpath [ 649.087223][T23541] fuse: fd is not a fuse device [ 649.692043][T23574] fuse: fd is not a fuse device [ 650.310883][T23598] overlayfs: failed to clone upperpath [ 651.410443][T23660] overlayfs: failed to clone upperpath [ 651.670597][T23666] overlayfs: failed to clone upperpath [ 652.325415][T23690] overlayfs: failed to clone upperpath [ 652.774245][ T823] libceph: connect (2)0.0.0.0:6789 error -22 [ 652.774438][ T823] libceph: ceph_tcp_connect failed: -22 [ 652.774455][ T823] libceph: mon0 (2)0.0.0.0:6789 connect error [ 652.789290][ T823] libceph: connect (2)0.0.0.0:6789 error -22 [ 652.789483][ T823] libceph: ceph_tcp_connect failed: -22 [ 652.789497][ T823] libceph: mon0 (2)0.0.0.0:6789 connect error [ 653.063841][ T823] libceph: connect (2)0.0.0.0:6789 error -22 [ 653.064027][ T823] libceph: ceph_tcp_connect failed: -22 [ 653.064043][ T823] libceph: mon0 (2)0.0.0.0:6789 connect error [ 653.087486][T23717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.150592][T23719] overlayfs: failed to clone upperpath [ 653.318298][T23723] overlayfs: failed to clone upperpath [ 653.440473][T23726] VFS: Mount too revealing [ 653.580907][T23702] ceph: No mds server is up or the cluster is laggy [ 653.611477][ T823] libceph: connect (2)0.0.0.0:6789 error -22 [ 653.611662][ T823] libceph: ceph_tcp_connect failed: -22 [ 653.611676][ T823] libceph: mon0 (2)0.0.0.0:6789 connect error [ 654.408807][ T5713] Process accounting resumed [ 654.580047][T23757] overlayfs: failed to resolve './cgroup': -2 [ 654.848224][T23766] fuse: fd is not a fuse device [ 655.695510][ T5611] libceph: mon0 (2)127.0.0.1:12345 socket error on write [ 655.698424][ T5611] libceph: mon0 (2)127.0.0.1:12345 socket error on write [ 655.986187][ T5611] libceph: mon0 (2)127.0.0.1:12345 socket error on write [ 656.559001][T23812] ceph: No mds server is up or the cluster is laggy [ 656.578342][ T5611] libceph: mon0 (2)127.0.0.1:12345 socket error on write [ 657.442350][T23876] fuse: fd is not a fuse device [ 657.555851][T23885] overlayfs: failed to clone upperpath [ 657.683162][T23892] fuse: fd is not a fuse device [ 657.812737][T23900] fuse: fd is not a fuse device [ 658.040474][T23914] fuse: fd is not a fuse device [ 658.164593][T23922] fuse: fd is not a fuse device [ 658.338330][T23934] fuse: fd is not a fuse device [ 658.497289][T23942] fuse: fd is not a fuse device [ 658.789751][T23950] overlayfs: failed to clone upperpath [ 658.880359][T23953] fuse: fd is not a fuse device [ 658.940324][T23958] fuse: fd is not a fuse device [ 659.038938][T23964] overlayfs: failed to clone upperpath [ 659.787216][T24007] fuse: fd is not a fuse device [ 659.791284][T24008] fuse: fd is not a fuse device [ 659.857560][T24010] overlayfs: failed to clone lowerpath [ 659.889078][T24010] overlayfs: failed to clone lowerpath [ 661.225707][T24066] fuse: fd is not a fuse device [ 661.438388][T24082] fuse: fd is not a fuse device [ 661.795789][T24103] fuse: fd is not a fuse device [ 661.872925][T24106] fuse: fd is not a fuse device [ 662.018306][T24117] fuse: fd is not a fuse device [ 662.304950][T24137] fuse: fd is not a fuse device [ 662.471044][T24147] fuse: fd is not a fuse device [ 662.620363][T24155] overlayfs: failed to clone upperpath [ 662.634208][T24157] fuse: fd is not a fuse device [ 663.290034][T24195] fuse: fd is not a fuse device [ 663.535858][T24202] fuse: fd is not a fuse device [ 663.640828][T24209] fuse: fd is not a fuse device [ 663.822906][T24222] fuse: fd is not a fuse device [ 663.859422][T24224] fuse: fd is not a fuse device [ 663.900610][T24226] fuse: fd is not a fuse device [ 664.510796][T24248] fuse: fd is not a fuse device [ 664.594637][T24250] fuse: fd is not a fuse device [ 664.704100][T24258] fuse: fd is not a fuse device [ 664.898365][T24269] fuse: fd is not a fuse device [ 665.048855][T24274] fuse: fd is not a fuse device [ 665.133382][T24277] fuse: fd is not a fuse device [ 665.361802][T24288] fuse: fd is not a fuse device [ 665.871555][T24304] fuse: fd is not a fuse device [ 666.019093][T24308] fuse: fd is not a fuse device [ 667.589885][T24349] fuse: fd is not a fuse device [ 667.773096][T24355] overlayfs: failed to clone upperpath [ 667.907033][T24357] fuse: fd is not a fuse device [ 668.154461][T24366] fuse: fd is not a fuse device [ 668.335332][T24374] fuse: fd is not a fuse device [ 668.443995][T24378] fuse: fd is not a fuse device [ 669.504906][T24413] fuse: fd is not a fuse device [ 669.590644][T24419] fuse: fd is not a fuse device [ 669.868489][T24431] fuse: fd is not a fuse device [ 670.445473][T24442] blktrace: Concurrent blktraces are not allowed on loop0 [ 673.857285][T24570] overlayfs: failed to clone upperpath [ 674.086766][ T38] audit: type=1326 audit(1785217367.242:65): auid=4294967295 uid=3138655487 gid=0 ses=4294967295 pid=24581 comm="syz.0.7646" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f094a5dde99 code=0x0 [ 674.142128][T24583] overlayfs: missing 'lowerdir' [ 674.773498][T24608] fuse: fd is not a fuse device [ 674.796255][T24610] 9p: Bad value for 'rfdno' [ 675.063745][T24621] fuse: fd is not a fuse device [ 675.296470][T24633] fuse: fd is not a fuse device [ 675.370827][T24635] fuse: fd is not a fuse device [ 675.887462][T24649] fuse: fd is not a fuse device [ 676.029255][T24659] overlayfs: failed to clone upperpath [ 676.403163][T24681] fuse: fd is not a fuse device [ 676.410053][T24682] fuse: fd is not a fuse device [ 676.846326][T24707] fuse: fd is not a fuse device [ 677.091128][T24721] fuse: fd is not a fuse device [ 677.261532][T24730] fuse: fd is not a fuse device [ 677.279582][T24733] fuse: fd is not a fuse device [ 677.561239][T24750] fuse: fd is not a fuse device [ 677.656919][T24756] fuse: fd is not a fuse device [ 677.793529][T24764] fuse: fd is not a fuse device [ 678.127315][T24773] fuse: fd is not a fuse device [ 678.281374][T24783] fuse: fd is not a fuse device [ 678.364823][T24787] fuse: fd is not a fuse device [ 679.083307][T24809] overlayfs: failed to clone upperpath [ 679.586134][T24819] overlayfs: failed to resolve './cgroup': -2 [ 679.846383][T24827] fuse: fd is not a fuse device [ 680.145936][T24845] fuse: fd is not a fuse device [ 680.151375][T24847] fuse: fd is not a fuse device [ 680.209898][T24849] overlayfs: failed to clone lowerpath [ 680.243902][T24849] overlayfs: failed to clone lowerpath [ 680.619683][T24862] fuse: fd is not a fuse device [ 680.675595][T24864] fuse: fd is not a fuse device [ 680.732521][T24868] fuse: fd is not a fuse device [ 680.819943][T24874] fuse: fd is not a fuse device [ 681.005696][T24886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7783'. [ 681.119589][T24892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7786'. [ 681.119613][T24892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7786'. [ 682.251672][T24919] fuse: fd is not a fuse device [ 682.444468][T24933] fuse: fd is not a fuse device [ 682.480421][T24935] fuse: fd is not a fuse device [ 682.611168][T24944] fuse: fd is not a fuse device [ 682.890922][T24959] fuse: fd is not a fuse device [ 682.985968][T24965] overlayfs: failed to clone upperpath [ 683.561741][T24984] fuse: fd is not a fuse device [ 683.752738][T24996] overlayfs: failed to clone upperpath [ 683.853435][T25001] fuse: fd is not a fuse device [ 684.076448][T25008] fuse: fd is not a fuse device [ 684.352490][T25026] fuse: fd is not a fuse device [ 684.496228][T25029] overlayfs: failed to clone upperpath [ 684.652117][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7849'. [ 684.672045][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7849'. [ 684.857778][T25045] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 684.919185][T25054] fuse: fd is not a fuse device [ 685.702943][T25075] fuse: fd is not a fuse device [ 685.736600][T25077] fuse: fd is not a fuse device [ 685.962282][T25089] fuse: fd is not a fuse device [ 687.383466][T25135] overlayfs: failed to clone lowerpath [ 687.471881][T25138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.487738][T25137] overlayfs: failed to clone lowerpath [ 688.454693][T25174] overlayfs: failed to clone lowerpath [ 688.484158][T25174] overlayfs: failed to clone lowerpath [ 690.292335][T25240] fuse: fd is not a fuse device [ 690.457304][T25250] fuse: fd is not a fuse device [ 690.580939][T25258] fuse: fd is not a fuse device [ 691.169948][T25270] fuse: fd is not a fuse device [ 691.262180][T25273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.527534][T25281] fuse: fd is not a fuse device [ 692.772919][T25326] fuse: fd is not a fuse device [ 693.020703][T25339] fuse: fd is not a fuse device [ 693.087689][T25343] fuse: fd is not a fuse device [ 693.638293][T25362] fuse: fd is not a fuse device [ 699.926810][T25557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.481636][ T5611] IPVS: starting estimator thread 0... [ 700.573551][T25580] IPVS: using max 9 ests per chain, 21600 per kthread [ 700.719267][T25592] IPv6: syztnl0: Disabled Multicast RS [ 701.164146][T25608] netlink: 'syz.2.8069': attribute type 4 has an invalid length. [ 701.180526][T25606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.478523][T25621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8074'. [ 702.370798][T25651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8082'. [ 703.622014][T25676] overlayfs: missing 'lowerdir' [ 705.207896][T25692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8099'. [ 705.651026][T25711] overlayfs: missing 'lowerdir' [ 705.789059][T25713] netlink: 'syz.3.8109': attribute type 2 has an invalid length. [ 705.789082][T25713] netlink: 'syz.3.8109': attribute type 2 has an invalid length. [ 707.698538][T25828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8130'. [ 708.436811][T25867] netlink: 'syz.2.8147': attribute type 13 has an invalid length. [ 708.436832][T25867] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8147'. [ 708.534635][T25867] erspan0: refused to change device tx_queue_len [ 708.534657][T25867] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 708.541870][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 708.865429][T25887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8156'. [ 709.064066][ T5611] IPVS: starting estimator thread 0... [ 709.157293][T25893] IPVS: using max 9 ests per chain, 21600 per kthread [ 709.666026][T25931] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8175'. [ 710.073952][T25961] netlink: 'syz.1.8186': attribute type 12 has an invalid length. [ 710.101552][T25961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8186'. [ 710.105199][T25961] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8186'. [ 711.620311][ T38] audit: type=1326 audit(1785217658.353:66): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26005 comm="syz.1.8204" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e4610de99 code=0x0 [ 711.789976][T26009] @0Ù: renamed from virt_wifi0 [ 713.432760][T26036] 9p: Bad value for 'rfdno' [ 713.433835][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8216'. [ 715.381733][T26085] netlink: 'syz.2.8234': attribute type 5 has an invalid length. [ 716.798931][T26138] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8256'. [ 718.519497][T26239] key id 00000000 not found [ 719.204158][T26239] lo speed is unknown, defaulting to 1000 [ 719.774188][T26264] overlayfs: failed to clone lowerpath [ 720.548000][T26284] openvswitch: netlink: Actions may not be safe on all matching packets [ 721.456034][ T38] audit: type=1326 audit(1785217667.577:67): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26312 comm="syz.2.8298" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f514df0de99 code=0x0 [ 723.126808][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8313'. [ 723.325052][ T38] audit: type=1326 audit(1785217669.327:68): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26362 comm="syz.3.8318" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba69c0de99 code=0x0 [ 723.622725][T26371] netlink: 'syz.1.8322': attribute type 10 has an invalid length. [ 723.622767][T26371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.622858][T26371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.701413][T26371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.701441][T26371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.699967][ T38] audit: type=1326 audit(1785217670.609:69): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=26397 comm="syz.2.8333" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f514df0de99 code=0x0 [ 727.488193][T26474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8361'. [ 727.488420][T26472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8361'. [ 727.973517][T26484] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8365'. [ 728.435439][T26491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8368'. [ 728.798835][T26510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8377'. [ 729.469969][T26535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8386'. [ 730.477746][T26571] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 730.477934][T26571] overlayfs: failed to set xattr on upper [ 730.477943][T26571] overlayfs: ...falling back to redirect_dir=nofollow. [ 730.477951][T26571] overlayfs: ...falling back to index=off. [ 730.477958][T26571] overlayfs: ...falling back to uuid=null. [ 730.524650][T26569] overlayfs: missing 'lowerdir' [ 731.008757][T26592] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20003 [ 731.011146][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8412'. [ 731.240693][T26590] devpts: Unknown parameter '@' [ 731.419509][T26605] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8417'. [ 731.419524][T26605] tipc: Invalid UDP bearer configuration [ 731.419545][T26605] tipc: Enabling of bearer rejected, failed to enable media [ 731.624778][T26618] openvswitch: netlink: Flow key attr not present in new flow. [ 731.624785][T26617] openvswitch: netlink: Flow key attr not present in new flow. [ 733.008823][T26667] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 733.008853][T26667] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 733.008865][T26667] CIFS mount error: No usable UNC path provided in device string! [ 733.008865][T26667] [ 733.009036][T26667] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 733.077838][T26667] pimreg2: entered allmulticast mode [ 733.741440][T26688] tipc: New replicast peer: 255.255.255.255 [ 733.760186][T26688] tipc: Enabled bearer , priority 10 [ 733.949035][T26699] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8455'. [ 739.286014][T26851] tmpfs: Bad value for 'mpol' [ 739.652965][T26863] batadv_slave_0: entered promiscuous mode [ 739.671476][T26862] batadv_slave_0: left promiscuous mode [ 739.780276][T26869] netlink: 'syz.2.8514': attribute type 4 has an invalid length. [ 739.780292][T26869] netlink: 'syz.2.8514': attribute type 5 has an invalid length. [ 739.780298][T26869] netlink: 'syz.2.8514': attribute type 1 has an invalid length. [ 739.780305][T26869] netlink: 3625 bytes leftover after parsing attributes in process `syz.2.8514'. [ 739.890800][T26871] overlayfs: missing 'lowerdir' [ 740.348062][T26894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8524'. [ 740.896053][T26922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8529'. [ 741.047428][T26928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8532'. [ 741.241678][T26938] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 741.316356][T26941] netlink: 'syz.2.8535': attribute type 3 has an invalid length. [ 741.544119][T26950] netlink: 'syz.2.8539': attribute type 2 has an invalid length. [ 741.544537][T26951] netlink: 'syz.2.8539': attribute type 2 has an invalid length. [ 741.786657][T26956] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8541'. [ 741.882091][T26960] overlayfs: failed to clone lowerpath [ 741.953554][T26964] overlayfs: failed to clone lowerpath [ 742.151271][T26974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8548'. [ 742.310168][T26980] raw_sendmsg: syz.3.8549 forgot to set AF_INET. Fix it! [ 742.642966][T26988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.281024][ T38] audit: type=1326 audit(1785217687.999:70): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27115 comm="syz.3.8562" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba69c0de99 code=0x0 [ 743.616402][T27132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8569'. [ 743.731752][T27139] dvmrp12: entered allmulticast mode [ 745.276186][T27184] netlink: 'syz.2.8589': attribute type 4 has an invalid length. [ 745.276201][T27184] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8589'. [ 745.331870][T27184] netlink: 'syz.2.8589': attribute type 21 has an invalid length. [ 746.183535][ T38] audit: type=1800 audit(1785217690.694:71): pid=27201 uid=0 auid=4294967295 ses=4294967295 op=set_data cause=unavailable-hash-algorithm comm="syz.2.8595" name="/newroot/dev/kvm" dev="tmpfs" ino=1318 res=0 errno=0 [ 746.693596][T27233] netlink: 'syz.1.8605': attribute type 2 has an invalid length. [ 746.735992][T27235] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20003 [ 747.607834][T27272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8619'. [ 747.608311][T27271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8619'. [ 748.006751][T27284] VFS: Mount too revealing [ 748.081052][T27292] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 748.457503][T27310] netlink: 1476 bytes leftover after parsing attributes in process `syz.3.8635'. [ 749.028594][T27336] netlink: 'syz.3.8642': attribute type 29 has an invalid length. [ 749.865321][T27357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8650'. [ 749.865364][T27357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8650'. [ 750.878838][T27400] sctp: [Deprecated]: syz.2.8675 (pid 27400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 750.878838][T27400] Use struct sctp_sack_info instead [ 752.528894][T27479] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 753.512309][T27527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8718'. [ 756.500823][T27640] 9p: Bad value for 'rfdno' [ 756.503224][T27640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8757'. [ 757.315207][T27670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8766'. [ 759.344975][T27761] overlayfs: missing 'lowerdir' [ 760.973152][T27829] overlayfs: missing 'lowerdir' [ 764.231819][T27925] overlayfs: missing 'lowerdir' [ 765.406398][T27963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8859'. [ 765.588021][T27966] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8860'. [ 766.442620][T28014] netlink: 'syz.2.8883': attribute type 2 has an invalid length. [ 766.442644][T28014] netlink: 'syz.2.8883': attribute type 2 has an invalid length. [ 766.959993][T28034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8890'. [ 767.013116][T28036] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 767.460328][T28061] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8901'. [ 767.590533][T28063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8902'. [ 767.914745][T28069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8903'. [ 768.980065][T28110] netlink: 822 bytes leftover after parsing attributes in process `syz.2.8921'. [ 769.692991][T28137] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8934'. [ 769.704824][T28137] netlink: 'syz.0.8934': attribute type 83 has an invalid length. [ 769.713251][T28138] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8934'. [ 769.884738][T28146] netlink: 'syz.3.8937': attribute type 10 has an invalid length. [ 769.884761][T28146] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8937'. [ 770.281254][T28164] sctp: [Deprecated]: syz.3.8943 (pid 28164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.281254][T28164] Use struct sctp_sack_info instead [ 770.503371][T28178] Process accounting resumed [ 771.404137][T28257] : renamed from bridge_slave_0 (while UP) [ 771.676457][T28274] __nla_validate_parse: 1 callbacks suppressed [ 771.676545][T28274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8975'. [ 774.026401][T28374] macvlan1: entered promiscuous mode [ 774.076784][T28377] macvlan1: left promiscuous mode [ 774.155881][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 774.785173][T28408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9023'. [ 775.619099][T28421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9027'. [ 775.965977][T28435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9033'. [ 777.314235][T28459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9041'. [ 777.508450][T28473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9045'. [ 778.045374][T28479] tipc: New replicast peer: 255.255.255.255 [ 778.097517][T28479] tipc: Enabled bearer , priority 10 [ 778.385123][T28494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.549437][T28508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9059'. [ 779.108691][ T822] tipc: Node number set to 16385 [ 779.923585][T28566] netlink: 'syz.1.9085': attribute type 62 has an invalid length. [ 780.101341][T28578] 9p: Could not find request transport: t [ 780.331298][T28588] overlayfs: missing 'lowerdir' [ 780.601577][T28613] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5605] was attempted by ""[28613] [ 781.569637][T28663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9123'. [ 783.017451][T28715] netlink: 'syz.3.9141': attribute type 62 has an invalid length. [ 784.794318][T28779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9166'. [ 785.153474][T28799] IPVS: set_ctl: invalid protocol: 60 172.30.1.4:20000 [ 786.161399][T28843] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9191'. [ 786.841443][ T38] audit: type=1326 audit(1785217984.780:72): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=28874 comm="syz.2.9204" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f514df0de99 code=0x0 [ 787.596705][T28914] netdevsim netdevsim1: Firmware load for './cgroup/../file0/file0' refused, path contains '..' component [ 787.831441][T28928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9224'. [ 788.283226][T28950] sctp: [Deprecated]: syz.0.9229 (pid 28950) Use of int in max_burst socket option. [ 788.283226][T28950] Use struct sctp_assoc_value instead [ 788.697008][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 788.741014][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 788.742828][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 788.870506][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 788.881028][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 791.020462][T28240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.084169][T28953] lo speed is unknown, defaulting to 1000 [ 791.161044][ T4918] Bluetooth: hci4: command tx timeout [ 791.312606][T28240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.670120][T28240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.039258][T28240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.184231][T28953] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.184480][T28953] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.184639][T28953] bridge_slave_0: entered allmulticast mode [ 792.188084][T28953] bridge_slave_0: entered promiscuous mode [ 792.211260][T28953] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.213232][T28953] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.213502][T28953] bridge_slave_1: entered allmulticast mode [ 792.216755][T28953] bridge_slave_1: entered promiscuous mode [ 792.275350][T28953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.281392][T28953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.359330][T28953] team0: Port device team_slave_0 added [ 792.364125][T28953] team0: Port device team_slave_1 added [ 792.476784][T28953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.476800][T28953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.476836][T28953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.480637][T28953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.480651][T28953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.480672][T28953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.705560][T28953] hsr_slave_0: entered promiscuous mode [ 792.706900][T28953] hsr_slave_1: entered promiscuous mode [ 792.707877][T28953] debugfs: 'hsr0' already exists in 'hsr' [ 792.707901][T28953] Cannot create hsr debugfs directory [ 793.020561][T28240] bridge_slave_1: left allmulticast mode [ 793.020878][T28240] bridge_slave_1: left promiscuous mode [ 793.039681][T28240] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.211054][T28240] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.383398][ T4918] Bluetooth: hci4: command tx timeout [ 794.206826][T28240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.276172][T28240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.301924][T28240] bond0 (unregistering): Released all slaves [ 794.349159][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 794.657550][T28240] tipc: Disabling bearer [ 794.722802][T28240] tipc: Left network mode [ 795.611143][ T4918] Bluetooth: hci4: command tx timeout [ 795.800139][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 797.829845][ T4918] Bluetooth: hci4: command tx timeout [ 799.224510][T29107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9242'. [ 799.224534][T29107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9242'. [ 799.739559][ T38] audit: type=1326 audit(1785217996.853:73): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=29116 comm="syz.2.9245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f514df0de99 code=0x0 [ 800.211798][T28240] hsr_slave_0: left promiscuous mode [ 800.253781][T28240] hsr_slave_1: left promiscuous mode [ 800.427499][T28240] veth1_macvtap: left promiscuous mode [ 800.429444][T28240] veth0_macvtap: left promiscuous mode [ 800.429832][T28240] veth1_vlan: left promiscuous mode [ 802.263142][T28240] team0 (unregistering): Port device team_slave_1 removed [ 802.305764][T28240] team0 (unregistering): Port device team_slave_0 removed [ 802.469484][T28240] smc: removing net device lo with user defined pnetid SYZ0 [ 802.774187][T28953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 802.827429][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 802.828508][T28953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 802.873281][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 802.878301][T28953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 803.011779][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 803.030400][T28953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 803.176267][T28953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 803.315886][T29186] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 803.853618][T28953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.974541][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9273'. [ 803.982409][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9273'. [ 804.040383][T28953] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.064633][T28239] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.064782][T28239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.088568][T28239] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.088712][T28239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.222582][T28240] IPVS: stop unused estimator thread 0... [ 804.788901][T28953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.906912][T29219] dvmrp24: entered allmulticast mode [ 805.017896][T28953] veth0_vlan: entered promiscuous mode [ 805.048325][T28953] veth1_vlan: entered promiscuous mode [ 805.092292][T28953] veth0_macvtap: entered promiscuous mode [ 805.111098][T28953] veth1_macvtap: entered promiscuous mode [ 805.162596][T28953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.195285][T28953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.296009][T28239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.296067][T28239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.296101][T28239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.296134][T28239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.658325][T29242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9283'. [ 805.936562][T29242] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 805.937073][T29242] tipc: Enabled bearer , priority 10 [ 806.725631][T28239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.725651][T28239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.908078][T29262] sctp: [Deprecated]: syz.3.9288 (pid 29262) Use of int in max_burst socket option. [ 806.908078][T29262] Use struct sctp_assoc_value instead [ 806.909000][T28239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.909017][T28239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.134197][ T5714] tipc: Node number set to 16385 [ 807.154204][T29265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9230'. [ 807.154227][T29265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9230'. [ 807.837701][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 807.880629][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 807.896914][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 807.947586][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 807.979282][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.813557][T29298] netlink: 1307 bytes leftover after parsing attributes in process `syz.3.9298'. [ 809.068947][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 809.097879][T11322] bridge0: port 3(syz_tun) entered disabled state [ 809.200791][T11322] syz_tun (unregistering): left allmulticast mode [ 809.200815][T11322] syz_tun (unregistering): left promiscuous mode [ 809.200896][T11322] bridge0: port 3(syz_tun) entered disabled state [ 809.231598][ T9] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 809.231627][ T9] usb 2-1: config 0 has no interface number 0 [ 809.231701][ T9] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 809.231729][ T9] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 809.233840][ T9] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 809.233869][ T9] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 809.233888][ T9] usb 2-1: Manufacturer: syz [ 809.233902][ T9] usb 2-1: SerialNumber: syz [ 809.319534][ T9] usb 2-1: config 0 descriptor?? [ 810.039957][ T9] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input7 [ 810.237129][ T9] usb 2-1: USB disconnect, device number 18 [ 810.316643][T29321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9307'. [ 810.322550][ T4918] Bluetooth: hci1: command tx timeout [ 810.509703][T28238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.864368][T29338] netlink: 'syz.2.9312': attribute type 10 has an invalid length. [ 810.864388][T29338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9312'. [ 810.969984][T29342] netlink: 'syz.1.9314': attribute type 1 has an invalid length. [ 810.969998][T29342] netlink: 'syz.1.9314': attribute type 4 has an invalid length. [ 810.970005][T29342] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9314'. [ 811.023469][T28238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.101914][T29338] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 811.265757][T29348] netlink: 'syz.3.9318': attribute type 29 has an invalid length. [ 811.319875][T29350] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9317'. [ 811.572164][T28238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.613706][T29354] veth0_macvtap: entered allmulticast mode [ 811.615964][T29269] lo speed is unknown, defaulting to 1000 [ 811.749802][T29362] vlan0: entered allmulticast mode [ 811.749826][T29362] veth0_vlan: entered allmulticast mode [ 812.142870][T28238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.243987][ T5714] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 812.402538][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 812.405640][ T5714] usb 2-1: unable to get BOS descriptor or descriptor too short [ 812.409524][ T5714] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 812.409652][ T5714] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 812.409678][ T5714] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 812.414797][ T5714] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.414825][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.414843][ T5714] usb 2-1: Product: syz [ 812.414857][ T5714] usb 2-1: Manufacturer: syz [ 812.414879][ T5714] usb 2-1: SerialNumber: syz [ 812.457069][ T4918] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 812.457432][ T4918] Bluetooth: hci4: Injecting HCI hardware error event [ 812.460810][ T5618] Bluetooth: hci4: hardware error 0x00 [ 812.495707][ T5714] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 812.495752][ T5714] cdc_ncm 2-1:1.0: bind() failure [ 812.518154][ T5714] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 812.518211][ T5714] cdc_ncm 2-1:1.1: bind() failure [ 812.542312][ T4918] Bluetooth: hci1: command tx timeout [ 812.696760][T27915] usb 2-1: USB disconnect, device number 19 [ 813.052788][T29269] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.053100][T29269] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.053310][T29269] bridge_slave_0: entered allmulticast mode [ 813.079658][T29269] bridge_slave_0: entered promiscuous mode [ 813.267362][T29269] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.267590][T29269] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.283136][T29269] bridge_slave_1: entered allmulticast mode [ 813.300234][T29269] bridge_slave_1: entered promiscuous mode [ 813.456753][T29269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.479662][T29269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.655479][ T4931] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 813.666956][T28238] bridge_slave_1: left allmulticast mode [ 813.666989][T28238] bridge_slave_1: left promiscuous mode [ 813.667262][T28238] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.815434][T28238] bridge_slave_0: left allmulticast mode [ 813.815458][T28238] bridge_slave_0: left promiscuous mode [ 813.815641][T28238] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.866249][ T4931] usb 2-1: Using ep0 maxpacket: 32 [ 813.868312][ T4931] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 813.868338][ T4931] usb 2-1: config 0 has no interface number 0 [ 813.870542][ T4931] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 813.870568][ T4931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.870586][ T4931] usb 2-1: Product: syz [ 813.870596][ T4931] usb 2-1: Manufacturer: syz [ 813.870603][ T4931] usb 2-1: SerialNumber: syz [ 813.928744][ T4931] usb 2-1: config 0 descriptor?? [ 813.998377][T28238] dvmrp0: left allmulticast mode [ 813.999123][T28238] dvmrp8: left allmulticast mode [ 814.381531][ T4931] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 814.381562][ T4931] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 814.753807][ T4918] Bluetooth: hci1: command tx timeout [ 815.011032][T28238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.053703][T28238] bond_slave_0: left promiscuous mode [ 815.097807][ T5618] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 815.098721][T28238] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 815.121230][T28238] @0Ù: left promiscuous mode [ 815.123426][T28238] bond0 (unregistering): Released all slaves [ 815.318098][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 815.424377][T29269] team0: Port device team_slave_0 added [ 815.436700][T29269] team0: Port device team_slave_1 added [ 815.554937][T28238] tipc: Disabling bearer [ 815.555080][T28238] tipc: Left network mode [ 815.591290][T29269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.591309][T29269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.591336][T29269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.596134][T29269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.596150][T29269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.596177][T29269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.197206][T29269] hsr_slave_0: entered promiscuous mode [ 816.218420][T29269] hsr_slave_1: entered promiscuous mode [ 816.224882][T29269] debugfs: 'hsr0' already exists in 'hsr' [ 816.224909][T29269] Cannot create hsr debugfs directory [ 816.986196][ T5618] Bluetooth: hci1: command tx timeout [ 816.986572][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 817.987088][ T4931] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 817.987401][ T4931] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 818.046695][ T4931] usb 2-1: USB disconnect, device number 20 [ 819.018785][T29255] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 819.048856][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 819.199703][T29255] usb 2-1: Using ep0 maxpacket: 32 [ 819.270458][T29255] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 819.270485][T29255] usb 2-1: config 0 has no interface number 0 [ 819.328914][T29255] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 819.328944][T29255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.328963][T29255] usb 2-1: Product: syz [ 819.328976][T29255] usb 2-1: Manufacturer: syz [ 819.328986][T29255] usb 2-1: SerialNumber: syz [ 819.332172][T29255] usb 2-1: config 0 descriptor?? [ 819.829385][T29255] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 819.829405][T29255] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 822.207970][T29510] 9pnet_fd: p9_fd_create_unix (29510): problem connecting socket: ./file0: -111 [ 823.574512][T29255] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000024: -71 [ 823.574801][T29255] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 823.693688][T29255] usb 2-1: USB disconnect, device number 21 [ 824.136920][T28238] hsr_slave_0: left promiscuous mode [ 824.178924][T28238] hsr_slave_1: left promiscuous mode [ 824.202063][T28238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.202301][T28238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.320991][T28238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.321018][T28238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.503359][T28238] veth1_macvtap: left promiscuous mode [ 824.512096][T28238] veth0_macvtap: left promiscuous mode [ 824.512778][T28238] veth1_vlan: left promiscuous mode [ 825.401632][T28240] smc: removing ib device syz0 [ 825.624594][T29596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9391'. [ 826.187994][T28238] team0 (unregistering): Port device team_slave_1 removed [ 826.252219][T28238] team0 (unregistering): Port device team_slave_0 removed [ 826.419005][T28239] smc: removing ib device syz1 [ 826.696939][T29255] syz1: Port: 1 Link DOWN [ 826.823394][T29589] kthread_run failed with err -4 [ 827.909528][T28239] smbdirect: ib_dev[syz1] removed [ 827.986975][T28240] smbdirect: ib_dev[syz0] removed [ 830.925598][T29269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 831.077700][T29269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 831.125534][T29269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 831.259373][T29269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 831.288544][T29269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 831.344335][T29269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 832.858683][T29269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.900270][T29269] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.000780][T29269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 833.000801][T29269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 834.036383][T28222] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.036601][T28222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.065177][T28222] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.065341][T28222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.040666][T28238] IPVS: stop unused estimator thread 0... [ 835.628241][T29754] lo speed is unknown, defaulting to 1000 [ 836.260149][T29269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.061655][T29269] veth0_vlan: entered promiscuous mode [ 837.109003][T29269] veth1_vlan: entered promiscuous mode [ 837.309286][T29789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9450'. [ 837.309400][T29789] netlink: 620 bytes leftover after parsing attributes in process `syz.3.9450'. [ 837.309416][T29789] netlink: 124 bytes leftover after parsing attributes in process `syz.3.9450'. [ 837.594241][T29269] veth0_macvtap: entered promiscuous mode [ 837.658183][T29269] veth1_macvtap: entered promiscuous mode [ 837.906398][T29269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.941425][T29269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.790770][T28233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.790791][T28233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.802782][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 840.329439][T28233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.329459][T28233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.469319][ T4918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 841.527179][ T4918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 841.536487][ T4918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 841.554429][ T4918] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 841.556779][ T4918] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 843.162861][T29897] netlink: 'syz.1.9490': attribute type 1 has an invalid length. [ 843.731822][T15020] bridge0: port 3(syz_tun) entered disabled state [ 843.766249][T29923] program syz.1.9500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 843.886142][T15020] syz_tun (unregistering): left allmulticast mode [ 843.886176][T15020] syz_tun (unregistering): left promiscuous mode [ 843.888321][T15020] bridge0: port 3(syz_tun) entered disabled state [ 843.905014][ T5618] Bluetooth: hci3: command tx timeout [ 844.240519][T29868] lo speed is unknown, defaulting to 1000 [ 844.318831][T29940] Need at least one configuration in g1. [ 844.371591][T29940] udc usbip-vudc.0: failed to start g1: -22 [ 844.371622][T29940] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 844.611275][T29940] UDC core: g1: couldn't find an available UDC or it's busy [ 845.138440][T29955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9512'. [ 845.687735][T29868] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.687909][T29868] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.688063][T29868] bridge_slave_0: entered allmulticast mode [ 845.690216][T29868] bridge_slave_0: entered promiscuous mode [ 845.733095][T29868] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.733331][T29868] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.733509][T29868] bridge_slave_1: entered allmulticast mode [ 845.737132][T29868] bridge_slave_1: entered promiscuous mode [ 845.798380][T29868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.830187][T29868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.892273][T29868] team0: Port device team_slave_0 added [ 845.899984][T29868] team0: Port device team_slave_1 added [ 845.924616][T29979] netlink: 264 bytes leftover after parsing attributes in process `syz.1.9521'. [ 845.981153][T29868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.981171][T29868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.981195][T29868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.985832][T29868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.985847][T29868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.985873][T29868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.125375][ T5618] Bluetooth: hci3: command tx timeout [ 846.206367][T29868] hsr_slave_0: entered promiscuous mode [ 846.244787][T29868] hsr_slave_1: entered promiscuous mode [ 848.346465][ T5618] Bluetooth: hci3: command tx timeout [ 848.937871][T29868] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.094695][ T5265] veth0_vlan: left promiscuous mode [ 849.249158][T30058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9550'. [ 850.160785][T29868] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.569710][ T5618] Bluetooth: hci3: command tx timeout [ 851.139002][T29868] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.949599][T29868] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.855094][ T38] audit: type=1326 audit(1785218046.559:74): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba69c0de99 code=0x7ffc0000 [ 852.880887][ T38] audit: type=1326 audit(1785218046.596:75): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba69c0de99 code=0x7ffc0000 [ 852.880934][ T38] audit: type=1326 audit(1785218046.596:76): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba69c0de99 code=0x7ffc0000 [ 852.933963][ T38] audit: type=1326 audit(1785218046.643:77): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba69c0de99 code=0x7ffc0000 [ 852.961349][ T38] audit: type=1326 audit(1785218046.662:78): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba69c0de99 code=0x7ffc0000 [ 852.961397][ T38] audit: type=1326 audit(1785218046.662:79): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba69c0dc02 code=0x7ffc0000 [ 853.325334][T30143] program syz.0.9577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.540820][T29868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 853.582111][ T38] audit: type=1326 audit(1785218047.242:80): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fba69c0dc97 code=0x7ffc0000 [ 853.582338][ T38] audit: type=1326 audit(1785218047.251:81): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fba69bcab91 code=0x7ffc0000 [ 853.582762][ T38] audit: type=1326 audit(1785218047.251:82): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fba69c0ec89 code=0x7ffc0000 [ 853.591255][ T38] audit: type=1326 audit(1785218047.251:83): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30138 comm="syz.3.9575" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fba69bcabfb code=0x7ffc0000 [ 853.594701][T30146] syz.3.9575 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 853.904373][T29868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.905837][T29868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 854.072387][T29868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 854.097188][T29868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 854.556501][T29868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 854.573733][T29868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 854.614222][T29868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 855.111661][T29868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.203369][T29868] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.248618][T28240] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.249637][T28240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.306582][T28239] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.306771][T28239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.764487][T30015] Set syz1 is full, maxelem 65536 reached [ 856.793326][T30216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9599'. [ 856.828068][T29868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.688753][T29868] veth0_vlan: entered promiscuous mode [ 857.799200][T29868] veth1_vlan: entered promiscuous mode [ 858.077797][T29868] veth0_macvtap: entered promiscuous mode [ 858.098074][T29868] veth1_macvtap: entered promiscuous mode [ 858.148765][T29868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.212808][T29868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.248100][T10055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.248978][T10055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.279053][T10055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.280930][T10055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.289616][T30257] netlink: 'syz.0.9616': attribute type 2 has an invalid length. [ 859.570849][T30270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9621'. [ 859.951576][T10055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.951595][T10055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.275901][T28233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.275921][T28233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.703491][ T4918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 861.742419][ T4918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 861.764672][ T4918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 861.766146][ T4918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 861.797171][ T4918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 862.429337][T30329] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9640'. [ 863.130345][ T5714] kernel read not supported for file /vcsa (pid: 5714 comm: kworker/0:5) [ 863.329465][T30311] lo speed is unknown, defaulting to 1000 [ 864.167320][ T5618] Bluetooth: hci0: command tx timeout [ 864.194947][T30376] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9650'. [ 864.199003][T30376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9650'. [ 864.479582][T28238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.382227][T28238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.386015][ T5618] Bluetooth: hci0: command tx timeout [ 866.485197][ T5714] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 866.597876][ T5714] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 866.683059][T28238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.857509][T30435] fido_id[30435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 867.473403][T28238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.611132][ T5618] Bluetooth: hci0: command tx timeout [ 869.424563][T30311] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.424888][T30311] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.425197][T30311] bridge_slave_0: entered allmulticast mode [ 869.432756][T30311] bridge_slave_0: entered promiscuous mode [ 869.449208][T30311] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.449525][T30311] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.449825][T30311] bridge_slave_1: entered allmulticast mode [ 869.469224][T30311] bridge_slave_1: entered promiscuous mode [ 870.002491][T30311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.036183][T30311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.433774][T30311] team0: Port device team_slave_0 added [ 870.444432][T30501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9696'. [ 870.479458][T30311] team0: Port device team_slave_1 added [ 870.827594][ T5618] Bluetooth: hci0: command tx timeout [ 871.380892][T30530] loop6: detected capacity change from 0 to 7 [ 871.514741][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 871.807238][T29756] Flush: task=udevd[29756] dev=loop6 state=2 [ 871.967563][T29756] Teardown: task=udevd[29756] dev=loop6 state=2 [ 872.612887][T28238] team0: Port device geneve1 removed [ 872.699091][T30556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9713'. [ 872.843996][T28238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.924243][T28238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.987489][T28238] bond0 (unregistering): Released all slaves [ 873.235933][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 873.258739][T30520] syzkaller1: entered promiscuous mode [ 873.258765][T30520] syzkaller1: entered allmulticast mode [ 873.558819][T30534] syzkaller0: entered promiscuous mode [ 873.558837][T30534] syzkaller0: entered allmulticast mode [ 888.118180][ T4918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 888.249133][ T4918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 888.254725][ T4918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 888.327009][T28957] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 888.331299][ T4918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 888.372893][ T4918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 888.483360][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 888.523548][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 888.525629][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 888.526319][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 890.549607][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 890.656774][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 890.658276][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 890.674438][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 890.677934][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 890.750949][ T5618] Bluetooth: hci2: command tx timeout [ 890.942504][ T5618] Bluetooth: hci5: command tx timeout [ 893.004242][ T5618] Bluetooth: hci2: command tx timeout [ 893.083617][ T5618] Bluetooth: hci6: command tx timeout [ 893.151683][ T5618] Bluetooth: hci5: command tx timeout [ 893.298453][T28238] tipc: Disabling bearer [ 893.362023][T28238] tipc: Left network mode [ 893.363426][T30311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.363452][T30311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.363466][T30311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.428062][T30311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.428078][T30311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.428101][T30311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.190791][ T5618] Bluetooth: hci2: command tx timeout [ 895.215241][T30311] hsr_slave_0: entered promiscuous mode [ 895.217468][T30311] hsr_slave_1: entered promiscuous mode [ 895.219123][T30311] debugfs: 'hsr0' already exists in 'hsr' [ 895.219144][T30311] Cannot create hsr debugfs directory [ 895.277799][ T5618] Bluetooth: hci6: command tx timeout [ 895.408951][ T5618] Bluetooth: hci5: command tx timeout [ 896.560615][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 896.704489][T30575] lo speed is unknown, defaulting to 1000 [ 897.162723][T30585] lo speed is unknown, defaulting to 1000 [ 897.411425][ T5618] Bluetooth: hci2: command tx timeout [ 897.496966][ T5618] Bluetooth: hci6: command tx timeout [ 897.587338][ T5618] Bluetooth: hci5: command tx timeout [ 897.922353][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 897.949700][T30573] lo speed is unknown, defaulting to 1000 [ 899.014277][T28238] hsr_slave_0: left promiscuous mode [ 899.056996][T28238] hsr_slave_1: left promiscuous mode [ 899.058094][T28238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.058111][T28238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.100801][T28238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.100828][T28238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.186528][T28238] veth1_macvtap: left promiscuous mode [ 899.186592][T28238] veth0_macvtap: left promiscuous mode [ 899.195374][T28238] veth1_vlan: left promiscuous mode [ 899.730221][ T5618] Bluetooth: hci6: command tx timeout [ 900.083359][T28238] team0 (unregistering): Port device team_slave_1 removed [ 900.125983][T28238] team0 (unregistering): Port device team_slave_0 removed [ 902.206548][T30575] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.206729][T30575] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.206918][T30575] bridge_slave_0: entered allmulticast mode [ 902.222414][T30575] bridge_slave_0: entered promiscuous mode [ 902.263861][T30575] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.264033][T30575] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.264211][T30575] bridge_slave_1: entered allmulticast mode [ 902.267774][T30575] bridge_slave_1: entered promiscuous mode [ 902.622516][T30575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.839021][T30575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.138065][T28238] IPVS: stop unused estimator thread 0... [ 903.218315][T30575] team0: Port device team_slave_0 added [ 903.261225][T30585] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.261456][T30585] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.261624][T30585] bridge_slave_0: entered allmulticast mode [ 903.288205][T30585] bridge_slave_0: entered promiscuous mode [ 903.298353][T30575] team0: Port device team_slave_1 added [ 903.325275][T30585] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.325599][T30585] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.325886][T30585] bridge_slave_1: entered allmulticast mode [ 903.329194][T30585] bridge_slave_1: entered promiscuous mode [ 903.738736][T30575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.738753][T30575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.738778][T30575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.774240][T30311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 903.834379][T30311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 903.861493][T30585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.864887][T30575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.864903][T30575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.864928][T30575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.941906][T30311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 903.988173][T30311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 904.000556][T30585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.530713][T28238] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.639983][T30311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 904.693291][T30311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 904.801391][T30311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 904.853599][T30311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 904.884623][T30573] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.884827][T30573] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.885005][T30573] bridge_slave_0: entered allmulticast mode [ 904.888486][T30573] bridge_slave_0: entered promiscuous mode [ 904.963902][T30585] team0: Port device team_slave_0 added [ 905.220092][T28238] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.283538][T30573] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.283836][T30573] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.284146][T30573] bridge_slave_1: entered allmulticast mode [ 905.297528][T30573] bridge_slave_1: entered promiscuous mode [ 905.348802][T30585] team0: Port device team_slave_1 added [ 905.465161][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.524373][T30575] hsr_slave_0: entered promiscuous mode [ 905.525754][T30575] hsr_slave_1: entered promiscuous mode [ 905.526742][T30575] debugfs: 'hsr0' already exists in 'hsr' [ 905.526765][T30575] Cannot create hsr debugfs directory [ 905.887138][T28238] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.956498][T30573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.959733][T30585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.959748][T30585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.959773][T30585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.051689][T30573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.091814][T30585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.091831][T30585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.091856][T30585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.528839][T28238] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.594138][T30573] team0: Port device team_slave_0 added [ 906.771028][T30573] team0: Port device team_slave_1 added [ 907.003458][T30585] hsr_slave_0: entered promiscuous mode [ 907.004737][T30585] hsr_slave_1: entered promiscuous mode [ 907.005717][T30585] debugfs: 'hsr0' already exists in 'hsr' [ 907.005742][T30585] Cannot create hsr debugfs directory [ 907.021150][T30573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.021166][T30573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.021191][T30573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.064437][T30573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.064452][T30573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.064478][T30573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.396846][T30573] hsr_slave_0: entered promiscuous mode [ 907.398253][T30573] hsr_slave_1: entered promiscuous mode [ 907.399255][T30573] debugfs: 'hsr0' already exists in 'hsr' [ 907.399277][T30573] Cannot create hsr debugfs directory [ 908.214507][T28238] bridge_slave_1: left allmulticast mode [ 908.214530][T28238] bridge_slave_1: left promiscuous mode [ 908.214732][T28238] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.357064][T28238] bridge_slave_0: left allmulticast mode [ 908.357088][T28238] bridge_slave_0: left promiscuous mode [ 908.357259][T28238] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.620586][T28238] bridge_slave_1: left allmulticast mode [ 908.620622][T28238] bridge_slave_1: left promiscuous mode [ 908.621004][T28238] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.749719][T28238] bridge_slave_0: left allmulticast mode [ 908.749745][T28238] bridge_slave_0: left promiscuous mode [ 908.754550][T28238] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.753572][T28238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.817212][T28238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.840409][T28238] bond0 (unregistering): Released all slaves [ 910.500996][T28238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.565491][T28238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.587909][T28238] bond0 (unregistering): Released all slaves [ 910.848396][T30575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 910.914521][T30575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.987361][T30575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 911.053333][T30575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 911.079404][T30575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 911.159963][T30575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 911.181176][T30575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 911.241866][T30575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 911.589342][T30311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.963881][T30585] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 912.023931][T30585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.039181][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 912.045486][T30585] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 912.090350][T30585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 912.184066][T30585] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 912.213514][T30585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 912.218878][T30585] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 912.259223][T30585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 912.767581][T30311] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.889150][T28237] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.889284][T28237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.308116][T30573] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 913.350416][T30573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 913.378122][T30573] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 913.415261][T30573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.493420][T28222] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.493566][T28222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.512591][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 913.512835][T30573] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 913.539058][T30573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.542853][T30573] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 913.584956][T30573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 914.346706][T30575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.716427][T30575] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.793610][T28237] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.793857][T28237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.843877][T30585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.974444][T28237] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.974708][T28237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.206841][T30585] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.383603][T28238] hsr_slave_0: left promiscuous mode [ 915.426341][T28238] hsr_slave_1: left promiscuous mode [ 915.427481][T28238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.427499][T28238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.448888][T28238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.448915][T28238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.628604][T28238] hsr_slave_0: left promiscuous mode [ 915.661285][T28238] hsr_slave_1: left promiscuous mode [ 915.662365][T28238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.662381][T28238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.686047][T28238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.686073][T28238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.795440][T28238] veth1_macvtap: left promiscuous mode [ 915.795505][T28238] veth0_macvtap: left promiscuous mode [ 915.795671][T28238] veth1_vlan: left promiscuous mode [ 915.795901][T28238] veth0_vlan: left promiscuous mode [ 915.918124][T28238] veth1_macvtap: left promiscuous mode [ 915.918189][T28238] veth0_macvtap: left promiscuous mode [ 915.918350][T28238] veth1_vlan: left promiscuous mode [ 915.918463][T28238] veth0_vlan: left promiscuous mode [ 916.922777][T28238] team0 (unregistering): Port device team_slave_1 removed [ 916.965543][T28238] team0 (unregistering): Port device team_slave_0 removed [ 917.595718][T28238] team0 (unregistering): Port device team_slave_1 removed [ 917.638753][T28238] team0 (unregistering): Port device team_slave_0 removed [ 917.861962][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 917.919562][T30573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.922701][T28222] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.922794][T28222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.981339][T28222] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.004083][T28222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.148803][T30573] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.316546][T10055] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.316789][T10055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.453727][T28225] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.453948][T28225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.861871][T30311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.696868][T30311] veth0_vlan: entered promiscuous mode [ 919.840231][T30311] veth1_vlan: entered promiscuous mode [ 920.025709][T30575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.027815][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4 [ 920.262021][T30311] veth0_macvtap: entered promiscuous mode [ 920.390906][T30311] veth1_macvtap: entered promiscuous mode [ 920.563952][T30311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.722602][T30311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.946665][T28233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.958906][T30585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.999299][T28233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.031186][T28233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.035567][T28233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.789139][T30573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.459847][T28233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.459867][T28233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.596459][T30575] veth0_vlan: entered promiscuous mode [ 922.622687][T28231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.622707][T28231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.707094][T30575] veth1_vlan: entered promiscuous mode [ 922.724361][T30585] veth0_vlan: entered promiscuous mode [ 922.797068][T30585] veth1_vlan: entered promiscuous mode [ 922.968095][T30573] veth0_vlan: entered promiscuous mode [ 923.060875][T30573] veth1_vlan: entered promiscuous mode [ 923.067112][T30575] veth0_macvtap: entered promiscuous mode [ 923.117383][T30575] veth1_macvtap: entered promiscuous mode [ 923.193242][T30970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9724'. [ 923.193291][T30970] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9724'. [ 923.290909][T30585] veth0_macvtap: entered promiscuous mode [ 923.326508][T30585] veth1_macvtap: entered promiscuous mode [ 923.382267][T30575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.438057][T30575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.447446][T30573] veth0_macvtap: entered promiscuous mode [ 923.477964][T30573] veth1_macvtap: entered promiscuous mode [ 923.483058][T28233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.510518][T28233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.543782][T30585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.555232][T28233] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.574185][T28233] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.665566][T30585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.097968][T28229] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.134723][T28229] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.160197][T30573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.161841][T28229] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.260964][T28229] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.668869][T30573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.159289][T28225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.198006][T28234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.273388][T28234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.647814][T28234] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.677790][T28234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.677808][T28234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.871651][T28229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.871671][T28229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.234698][T28238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.234719][T28238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.571446][T28234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.571466][T28234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.808968][T28231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.808987][T28231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.879952][T28234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.879974][T28234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.045230][T31000] tipc: Started in network mode [ 928.045257][T31000] tipc: Node identity d653304838c4, cluster identity 4711 [ 928.045658][T31000] tipc: Enabled bearer , priority 0 [ 928.171565][T31000] syzkaller0: entered promiscuous mode [ 928.171584][T31000] syzkaller0: entered allmulticast mode [ 928.172446][T31000] tipc: Resetting bearer [ 928.371615][T30999] tipc: Resetting bearer [ 944.422216][T30319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 944.486820][T30319] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 944.488274][T30319] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 944.508439][T30319] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 944.509286][T30319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 945.555272][T30319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 945.644851][T30319] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 945.647166][T30319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 945.648382][T30319] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 945.649331][T30319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 946.920038][ T5618] Bluetooth: hci1: command tx timeout [ 948.187319][ T5618] Bluetooth: hci3: command tx timeout [ 948.371817][T30999] tipc: Disabling bearer [ 948.581609][T31014] bond0: entered promiscuous mode [ 948.581634][T31014] bond_slave_0: entered promiscuous mode [ 948.581868][T31014] bond_slave_1: entered promiscuous mode [ 948.587005][T29254] tipc: Node number set to 4002885704 [ 949.126383][ T5618] Bluetooth: hci1: command tx timeout [ 950.414322][ T5618] Bluetooth: hci3: command tx timeout [ 950.477132][T31023] lo speed is unknown, defaulting to 1000 [ 951.360681][ T5618] Bluetooth: hci1: command tx timeout [ 951.989330][T31017] lo speed is unknown, defaulting to 1000 [ 952.631750][ T5618] Bluetooth: hci3: command tx timeout [ 952.703671][T31094] MTRR 1 not used [ 953.543644][T28229] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.585868][ T5618] Bluetooth: hci1: command tx timeout [ 953.876622][T28222] Bluetooth: hci0: Frame reassembly failed (-84) [ 953.911133][T28239] Bluetooth: hci0: Frame reassembly failed (-84) [ 954.714101][T28229] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.865849][T30319] Bluetooth: hci3: command tx timeout [ 955.308270][T28229] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.671925][T28229] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.967252][T30319] Bluetooth: hci0: command 0x1003 tx timeout [ 956.003114][ T5618] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 956.691843][T31023] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.692209][T31023] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.692485][T31023] bridge_slave_0: entered allmulticast mode [ 956.696718][T31023] bridge_slave_0: entered promiscuous mode [ 956.746504][T31023] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.746768][T31023] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.747044][T31023] bridge_slave_1: entered allmulticast mode [ 956.750052][T31023] bridge_slave_1: entered promiscuous mode [ 956.757283][T31017] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.757608][T31017] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.757895][T31017] bridge_slave_0: entered allmulticast mode [ 956.785598][T31017] bridge_slave_0: entered promiscuous mode [ 957.022803][T31017] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.022995][T31017] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.023182][T31017] bridge_slave_1: entered allmulticast mode [ 957.057556][T31017] bridge_slave_1: entered promiscuous mode [ 957.264443][T31023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.492971][T31169] lo speed is unknown, defaulting to 1000 [ 957.522254][T31023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.559578][T31017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.605289][T31017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.733096][T31023] team0: Port device team_slave_0 added [ 957.768092][T31023] team0: Port device team_slave_1 added [ 957.846522][T28229] bridge_slave_1: left allmulticast mode [ 957.846559][T28229] bridge_slave_1: left promiscuous mode [ 957.850821][T28229] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.976624][T28229] bridge_slave_0: left allmulticast mode [ 957.976649][T28229] bridge_slave_0: left promiscuous mode [ 957.976852][T28229] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.872377][T28229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.914024][T28229] bond_slave_0: left promiscuous mode [ 958.936917][T28229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.978152][T28229] bond_slave_1: left promiscuous mode [ 958.980160][T28229] bond0 (unregistering): Released all slaves [ 959.002874][T31017] team0: Port device team_slave_0 added [ 959.302730][T31017] team0: Port device team_slave_1 added [ 959.379792][T31023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.379803][T31023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.379817][T31023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.417945][T31023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.417982][T31023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.418008][T31023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.503986][T31017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.504003][T31017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.504028][T31017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.537581][T31017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.537599][T31017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.537625][T31017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.164603][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 960.281451][T31023] hsr_slave_0: entered promiscuous mode [ 960.283933][T31023] hsr_slave_1: entered promiscuous mode [ 960.462584][T31017] hsr_slave_0: entered promiscuous mode [ 960.483198][T31017] hsr_slave_1: entered promiscuous mode [ 960.493182][T31017] debugfs: 'hsr0' already exists in 'hsr' [ 960.493209][T31017] Cannot create hsr debugfs directory [ 962.450533][T28229] hsr_slave_0: left promiscuous mode [ 962.497926][T28229] hsr_slave_1: left promiscuous mode [ 962.500798][T28229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.500818][T28229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.546107][T28229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.546134][T28229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.644944][T28229] veth1_macvtap: left promiscuous mode [ 962.645009][T28229] veth0_macvtap: left promiscuous mode [ 962.645187][T28229] veth1_vlan: left promiscuous mode [ 962.645301][T28229] veth0_vlan: left promiscuous mode [ 962.805821][T31229] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 962.805846][T31229] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 962.843789][T31229] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 962.843810][T31229] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 962.865664][T31230] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 962.865699][T31230] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 962.885683][T31230] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 962.885718][T31230] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 962.913816][T31229] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 962.913850][T31229] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 962.914274][T31229] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 962.914298][T31229] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 963.765330][T28229] team0 (unregistering): Port device team_slave_1 removed [ 963.807884][T28229] team0 (unregistering): Port device team_slave_0 removed [ 964.014971][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 964.341692][T30319] Bluetooth: hci0: command 0x1003 tx timeout [ 964.344330][ T5618] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 965.069101][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7 [ 965.710781][T31261] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 965.710811][T31261] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 965.725034][T31261] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 965.725067][T31261] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 965.729172][T31261] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 965.729204][T31261] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 965.732914][T31261] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 965.732941][T31261] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 965.801754][T31261] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 965.801789][T31261] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 965.802267][T31261] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 965.802296][T31261] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 965.872994][T31023] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 966.049730][T31023] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 966.229018][T31023] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 966.634282][T31023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 966.674914][T31023] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 966.806584][T31023] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 967.671580][T31023] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 967.761679][T31023] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 967.764802][ T5265] 8021q: adding VLAN 0 to HW filter on device eth8 [ 968.699786][T31310] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 968.699821][T31310] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 968.700299][T31310] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 968.700329][T31310] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 968.792544][T31310] lvs 5-0:1.0: Bind LVS driver with SS root Hub only [ 968.792581][T31310] lvs 5-0:1.0: probe with driver lvs failed with error -22 [ 968.793061][T31310] lvs 8-0:1.0: Bind LVS driver with SS root Hub only [ 968.796019][T31310] lvs 8-0:1.0: probe with driver lvs failed with error -22 [ 968.996728][T28229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.486552][T28229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.525986][T31017] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 969.569827][T31017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 969.582399][T31017] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 969.617792][T31017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 969.633456][T31017] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 969.689306][T31017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 969.892976][T28229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.950298][T31017] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 970.007467][T31017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 970.270554][T28229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.534757][T31023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.580998][T31023] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.610607][T31017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.631523][T10055] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.631743][T10055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.675458][T28239] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.675591][T28239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.750497][T31017] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.802686][T28234] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.802841][T28234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.871983][T28222] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.872125][T28222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.096606][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 971.116556][T28229] bridge_slave_1: left allmulticast mode [ 971.116581][T28229] bridge_slave_1: left promiscuous mode [ 971.116768][T28229] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.266348][T28229] bridge_slave_0: left allmulticast mode [ 971.266373][T28229] bridge_slave_0: left promiscuous mode [ 971.266546][T28229] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.159532][T31327] binder_alloc: 31326: binder_alloc_buf, no vma [ 972.160440][T31327] binder: 31326:31327 ioctl c0306201 0 returned -14 [ 972.391778][T28229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.495109][T28229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.583244][T28229] bond0 (unregistering): Released all slaves [ 972.876323][T28229] tipc: Left network mode [ 974.682100][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 976.484850][T31023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.546120][T31017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.769682][ T5265] 8021q: adding VLAN 0 to HW filter on device eth10 [ 976.811137][T31001] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 977.089206][T31001] usb 7-1: Using ep0 maxpacket: 16 [ 977.098747][T31001] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 977.098775][T31001] usb 7-1: config 0 has no interface number 0 [ 977.098814][T31001] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 977.098836][T31001] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 977.147747][T31001] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 977.147776][T31001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.147794][T31001] usb 7-1: Product: syz [ 977.147807][T31001] usb 7-1: Manufacturer: syz [ 977.147821][T31001] usb 7-1: SerialNumber: syz [ 977.474357][T31001] usb 7-1: config 0 descriptor?? [ 977.475368][T31414] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 977.475558][T31414] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 977.695431][T31435] binder: 31434:31435 unknown command 0 [ 977.695451][T31435] binder: 31434:31435 ioctl c0306201 200000001040 returned -22 [ 977.713925][T31414] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 977.714176][T31414] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 977.939104][T31001] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 977.939397][T31001] asix 7-1:0.34: probe with driver asix failed with error -32 [ 978.166689][T31001] usb 7-1: USB disconnect, device number 2 [ 978.289143][T28229] hsr_slave_0: left promiscuous mode [ 978.329278][T28229] hsr_slave_1: left promiscuous mode [ 978.334208][T28229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.334236][T28229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.372377][T28229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.372403][T28229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.484315][T28229] veth1_macvtap: left promiscuous mode [ 978.484418][T28229] veth0_macvtap: left promiscuous mode [ 978.491962][T28229] veth1_vlan: left promiscuous mode [ 978.492165][T28229] veth0_vlan: left promiscuous mode [ 979.461757][T28229] team0 (unregistering): Port device team_slave_1 removed [ 979.525913][T28229] team0 (unregistering): Port device team_slave_0 removed [ 979.805006][ T5265] 8021q: adding VLAN 0 to HW filter on device eth11 [ 980.360482][T31023] veth0_vlan: entered promiscuous mode [ 980.550916][T31023] veth1_vlan: entered promiscuous mode [ 980.588712][T31017] veth0_vlan: entered promiscuous mode [ 980.739578][T31017] veth1_vlan: entered promiscuous mode [ 980.976121][T31023] veth0_macvtap: entered promiscuous mode [ 981.052200][T31023] veth1_macvtap: entered promiscuous mode [ 981.121830][T31017] veth0_macvtap: entered promiscuous mode [ 981.208429][T31017] veth1_macvtap: entered promiscuous mode [ 981.311764][T31023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.456617][T31017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.466068][T31023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.531432][T31017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.582584][T10055] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.629485][T10055] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.661324][T10055] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.690772][T10055] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.691843][T10055] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.743350][T10055] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.783445][T10055] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.871960][T10055] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.593534][ T5265] 8021q: adding VLAN 0 to HW filter on device eth12 [ 984.342938][T28239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.342958][T28239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.944491][T31528] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 985.475089][T28229] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.652267][T28238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.652285][T28238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.762966][T28222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.762980][T28222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.920545][T28240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.920565][T28240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.700917][T28229] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.269804][T28229] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.028604][T28229] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.402192][T29254] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 990.606332][T29254] usb 9-1: Using ep0 maxpacket: 8 [ 990.611019][T29254] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.611045][T29254] usb 9-1: config 0 has no interfaces? [ 990.611073][T29254] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 990.611095][T29254] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.642114][T29254] usb 9-1: config 0 descriptor?? [ 991.519093][T30841] usb 9-1: USB disconnect, device number 2 [ 992.188797][T28229] bridge_slave_1: left allmulticast mode [ 992.188831][T28229] bridge_slave_1: left promiscuous mode [ 992.315023][T28229] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.490000][T28229] bridge_slave_0: left allmulticast mode [ 992.490025][T28229] bridge_slave_0: left promiscuous mode [ 992.490199][T28229] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.819810][T28229] bridge_slave_1: left allmulticast mode [ 992.819846][T28229] bridge_slave_1: left promiscuous mode [ 992.820094][T28229] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.999905][T28229] bridge_slave_0: left allmulticast mode [ 992.999929][T28229] bridge_slave_0: left promiscuous mode [ 993.000119][T28229] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.166152][T28229] dvmrp0: left allmulticast mode [ 993.166305][T28229] dvmrp12: left allmulticast mode [ 993.166440][T28229] dvmrp24: left allmulticast mode [ 993.166935][T28229] pimreg2: left allmulticast mode [ 993.906780][T29254] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 994.120586][T29254] usb 9-1: Using ep0 maxpacket: 8 [ 994.141615][T29254] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.141773][T29254] usb 9-1: config 0 has no interfaces? [ 994.141793][T29254] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 994.141805][T29254] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.178183][T29254] usb 9-1: config 0 descriptor?? [ 994.430844][T28229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.517002][T28229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.560609][T28229] bond0 (unregistering): Released all slaves [ 995.221991][T28229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.290921][T28229] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 995.331227][T28229] bond0 (unregistering): Released all slaves [ 995.406165][ T37] usb 9-1: USB disconnect, device number 3 [ 996.089649][T28229] tipc: Disabling bearer [ 996.257672][T28229] tipc: Disabling bearer [ 996.257819][T28229] tipc: Left network mode [ 996.724925][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 996.725026][ T38] audit: type=1800 audit(1785218181.216:97): pid=31747 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.8.9878" name="file1" dev="tmpfs" ino=53 res=0 errno=0 [ 997.445983][T31764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9883'. [ 998.108676][ T5265] 8021q: adding VLAN 0 to HW filter on device eth13 [ 999.429634][ T5265] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1001.426926][T31843] kvm: user requested TSC rate below hardware speed [ 1001.994802][T31865] netlink: 679 bytes leftover after parsing attributes in process `syz.8.9908'. [ 1002.148953][ T5265] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1003.241827][ T5265] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1003.252027][T31901] dummy_hcd dummy_hcd.0: remove, state 4 [ 1003.314964][T31901] usb usb1: USB disconnect, device number 1 [ 1004.100375][T31001] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1004.137160][T31917] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9921'. [ 1004.413165][T31001] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.413220][T31001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1004.413235][T31001] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.413255][T31001] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1004.413267][T31001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.638597][T31001] usb 9-1: config 0 descriptor?? [ 1005.020509][T31901] dummy_hcd dummy_hcd.0: stopped [ 1005.020535][T31901] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1005.271603][T31001] hid-picolcd 0003:04D8:F002.0003: invalid report_size 2135893289 [ 1005.271629][T31001] hid-picolcd 0003:04D8:F002.0003: item 0 4 1 7 parsing failed [ 1005.273733][T31001] hid-picolcd 0003:04D8:F002.0003: device report parse failed [ 1005.273854][T31001] hid-picolcd 0003:04D8:F002.0003: probe with driver hid-picolcd failed with error -22 [ 1005.612102][T31001] usb 9-1: USB disconnect, device number 4 [ 1006.111573][T28229] hsr_slave_0: left promiscuous mode [ 1006.153101][T28229] hsr_slave_1: left promiscuous mode [ 1006.157533][T28229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.157562][T28229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.250544][T28229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.250571][T28229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.408083][T27915] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1006.408631][T28229] hsr_slave_0: left promiscuous mode [ 1006.455012][T28229] hsr_slave_1: left promiscuous mode [ 1006.460322][T28229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.460350][T28229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.495978][T28229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.496004][T28229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.571337][T27915] usb 7-1: Using ep0 maxpacket: 32 [ 1006.620982][T27915] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1006.638683][T27915] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1006.638714][T27915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.638734][T27915] usb 7-1: Product: syz [ 1006.638747][T27915] usb 7-1: Manufacturer: syz [ 1006.638761][T27915] usb 7-1: SerialNumber: syz [ 1006.976633][T28229] veth1_macvtap: left promiscuous mode [ 1006.989665][T28229] veth0_macvtap: left promiscuous mode [ 1007.034873][T28229] veth1_vlan: left promiscuous mode [ 1007.034961][T28229] veth0_vlan: left promiscuous mode [ 1007.364711][T28229] veth1_macvtap: left promiscuous mode [ 1007.365019][T28229] veth1_vlan: left promiscuous mode [ 1007.365221][T28229] veth0_vlan: left promiscuous mode [ 1007.409387][T27915] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1007.481343][T27915] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1010.160530][T27915] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1010.178603][T27915] usb 7-1: USB disconnect, device number 3 [ 1010.365307][T32018] udevd[32018]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1010.513053][T28229] team0 (unregistering): Port device team_slave_1 removed [ 1010.607765][T28229] team0 (unregistering): Port device team_slave_0 removed [ 1011.686884][T28229] team0 (unregistering): Port device team_slave_1 removed [ 1011.730172][T28229] team0 (unregistering): Port device team_slave_0 removed [ 1011.906849][T28233] smc: removing ib device syz2 [ 1011.921980][T32028] kvm: apic: phys broadcast and lowest prio [ 1012.072595][T32012] syzkaller1: entered promiscuous mode [ 1012.072620][T32012] syzkaller1: entered allmulticast mode [ 1012.122903][T28233] smbdirect: ib_dev[syz2] removed [ 1012.596744][T30841] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1012.821299][T30841] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.821327][T30841] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1012.822692][T30841] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1012.822718][T30841] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1012.822737][T30841] usb 9-1: SerialNumber: syz [ 1013.173751][T30841] usb 9-1: 0:2 : does not exist [ 1014.287939][T32056] input: syz0 as /devices/virtual/input/input8 [ 1015.494071][T30841] usb 9-1: USB disconnect, device number 5 [ 1017.402830][ T5612] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1017.676687][ T5612] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1017.677871][ T5612] usb 7-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 1017.677946][ T5612] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1017.677984][ T5612] usb 7-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1017.678009][ T5612] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x8D has an invalid bInterval 154, changing to 7 [ 1017.678033][ T5612] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x8D has invalid maxpacket 1779, setting to 1024 [ 1017.687550][ T5612] usb 7-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1017.687580][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.687599][ T5612] usb 7-1: Product: syz [ 1017.687612][ T5612] usb 7-1: Manufacturer: syz [ 1017.687625][ T5612] usb 7-1: SerialNumber: syz [ 1018.627793][T28229] IPVS: stop unused estimator thread 0... [ 1018.910916][T32163] netlink: 'syz.6.9985': attribute type 39 has an invalid length. [ 1018.911044][T32163] macvlan1: entered promiscuous mode [ 1018.911265][T32163] macvlan1: entered allmulticast mode [ 1018.911279][T32163] veth1_vlan: entered allmulticast mode [ 1019.047919][T32166] netlink: 'syz.8.9986': attribute type 4 has an invalid length. [ 1019.047940][T32166] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9986'. [ 1019.223024][ T5612] usb 7-1: USB disconnect, device number 4 [ 1019.609774][T32185] netlink: 'syz.8.9994': attribute type 39 has an invalid length. [ 1019.620102][T32185] macvlan1: entered promiscuous mode [ 1019.620340][T32185] macvlan1: entered allmulticast mode [ 1019.620355][T32185] veth1_vlan: entered allmulticast mode [ 1020.750183][T32019] udevd[32019]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.945170][T32219] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10004'. [ 1020.994988][ T5612] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1021.157544][ T5612] usb 7-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 1021.157576][ T5612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.171760][ T5612] usb 7-1: config 0 descriptor?? [ 1021.430554][T32234] netlink: 260 bytes leftover after parsing attributes in process `syz.7.10006'. [ 1021.937890][ T5612] usb 7-1: string descriptor 0 read error: -71 [ 1021.938853][ T5612] uclogic 0003:256C:006E.0004: failed retrieving string descriptor #200: -71 [ 1021.938961][ T5612] uclogic 0003:256C:006E.0004: failed retrieving pen parameters: -71 [ 1021.938979][ T5612] uclogic 0003:256C:006E.0004: failed probing pen v2 parameters: -71 [ 1021.939058][ T5612] uclogic 0003:256C:006E.0004: failed probing parameters: -71 [ 1021.939167][ T5612] uclogic 0003:256C:006E.0004: probe with driver uclogic failed with error -71 [ 1021.953485][ T5612] usb 7-1: USB disconnect, device number 5 [ 1022.158320][T32251] bridge0: entered promiscuous mode [ 1022.159024][T32250] bridge0: left promiscuous mode [ 1022.565024][T28957] Bluetooth: hci6: command 0x0406 tx timeout [ 1022.565065][T28957] Bluetooth: hci2: command 0x0406 tx timeout [ 1025.216098][T32350] input: syz0 as /devices/virtual/input/input9 [ 1027.046069][ T5713] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1027.222266][ T5713] usb 7-1: Using ep0 maxpacket: 32 [ 1027.226139][ T5713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.226171][ T5713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.226210][ T5713] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1027.226232][ T5713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.289477][ T5713] usb 7-1: config 0 descriptor?? [ 1027.312717][ T5713] hub 7-1:0.0: USB hub found [ 1027.521998][ T5713] hub 7-1:0.0: 1 port detected [ 1027.984323][ T5713] usb 7-1: USB disconnect, device number 6 [ 1028.747987][T32415] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1029.719982][T32428] input: syz1 as /devices/virtual/input/input10 [ 1030.446063][T32459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1031.077584][T32473] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1031.077773][T32473] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1031.077844][T32473] CPU: 1 UID: 0 PID: 32473 Comm: syz.6.10060 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1031.077865][T32473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1031.077875][T32473] RIP: 0010:dummy_set_selfpowered+0xbe/0x160 [ 1031.077905][T32473] Code: 8d 34 c6 49 81 c6 c8 07 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2c 63 f8 fa 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 13 63 f8 fa 41 be 00 14 00 00 4d [ 1031.077920][T32473] RSP: 0018:ffffc90006067780 EFLAGS: 00010246 [ 1031.077936][T32473] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888034d51f40 [ 1031.077948][T32473] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 1031.077957][T32473] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1031.077967][T32473] R10: dffffc0000000000 R11: ffffffff873996b0 R12: dffffc0000000000 [ 1031.077979][T32473] R13: ffff888021694528 R14: ffff8880269dd408 R15: 0000000000000000 [ 1031.077991][T32473] FS: 00007fcacb2d46c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 1031.078005][T32473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1031.078016][T32473] CR2: 000000110c37655a CR3: 000000005a720000 CR4: 00000000003526f0 [ 1031.078030][T32473] Call Trace: [ 1031.078036][T32473] [ 1031.078043][T32473] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 1031.078067][T32473] usb_gadget_set_selfpowered+0x75/0x260 [ 1031.078090][T32473] composite_dev_prepare+0x2fa/0x320 [ 1031.078113][T32473] configfs_composite_bind+0xa5/0x1410 [ 1031.078136][T32473] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1031.078165][T32473] gadget_bind_driver+0x2ca/0x9e0 [ 1031.078180][T32473] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1031.078197][T32473] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1031.078212][T32473] really_probe+0x254/0xae0 [ 1031.078233][T32473] __driver_probe_device+0x1e8/0x360 [ 1031.078252][T32473] driver_probe_device+0x4f/0x240 [ 1031.078272][T32473] __driver_attach+0x339/0x600 [ 1031.078290][T32473] bus_for_each_dev+0x23e/0x2c0 [ 1031.078313][T32473] ? __pfx___driver_attach+0x10/0x10 [ 1031.078330][T32473] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1031.078354][T32473] ? rt_spin_unlock+0x163/0x200 [ 1031.078376][T32473] bus_add_driver+0x348/0x670 [ 1031.078400][T32473] driver_register+0x23a/0x320 [ 1031.078420][T32473] usb_gadget_register_driver_owner+0xf9/0x270 [ 1031.078446][T32473] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1031.078462][T32473] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1031.078478][T32473] configfs_write_iter+0x33a/0x430 [ 1031.078497][T32473] vfs_write+0x61e/0xbb0 [ 1031.078516][T32473] ? __pfx_vfs_write+0x10/0x10 [ 1031.078533][T32473] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1031.078548][T32473] ? lockdep_hardirqs_on+0x7a/0x110 [ 1031.078563][T32473] ? mutex_lock_nested+0x152/0x1d0 [ 1031.078582][T32473] ? fdget_pos+0x252/0x320 [ 1031.078599][T32473] ksys_write+0x156/0x270 [ 1031.078617][T32473] ? __pfx_ksys_write+0x10/0x10 [ 1031.078637][T32473] do_syscall_64+0x17b/0x530 [ 1031.078652][T32473] ? irqentry_exit+0x10f/0x8f0 [ 1031.078672][T32473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.078688][T32473] ? clear_bhb_loop+0x40/0x90 [ 1031.078704][T32473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.078719][T32473] RIP: 0033:0x7fcacd0bde99 [ 1031.078734][T32473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.078746][T32473] RSP: 002b:00007fcacb2d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1031.078763][T32473] RAX: ffffffffffffffda RBX: 00007fcacd346180 RCX: 00007fcacd0bde99 [ 1031.078775][T32473] RDX: 000000000000000c RSI: 0000200000000680 RDI: 0000000000000005 [ 1031.078784][T32473] RBP: 00007fcacd153eaf R08: 0000000000000000 R09: 0000000000000000 [ 1031.078794][T32473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.078804][T32473] R13: 00007fcacd346218 R14: 00007fcacd346180 R15: 00007ffeb3f4a7d8 [ 1031.078821][T32473] [ 1031.078831][T32473] Modules linked in: [ 1031.078864][T32473] ---[ end trace 0000000000000000 ]--- [ 1031.078904][T32473] RIP: 0010:dummy_set_selfpowered+0xbe/0x160 [ 1031.078945][T32473] Code: 8d 34 c6 49 81 c6 c8 07 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2c 63 f8 fa 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 13 63 f8 fa 41 be 00 14 00 00 4d [ 1031.078974][T32473] RSP: 0018:ffffc90006067780 EFLAGS: 00010246 [ 1031.079013][T32473] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888034d51f40 [ 1031.079037][T32473] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 1031.079061][T32473] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1031.079084][T32473] R10: dffffc0000000000 R11: ffffffff873996b0 R12: dffffc0000000000 [ 1031.079110][T32473] R13: ffff888021694528 R14: ffff8880269dd408 R15: 0000000000000000 [ 1031.079137][T32473] FS: 00007fcacb2d46c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 1031.079172][T32473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1031.079199][T32473] CR2: 000000110c37655a CR3: 000000005a720000 CR4: 00000000003526f0 [ 1031.079264][T32473] Kernel panic - not syncing: Fatal exception [ 1031.079516][T32473] Kernel Offset: disabled