last executing test programs: 6m33.529588391s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48080, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000140)={0x100000001}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl(r0, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") 6m31.665021576s ago: executing program 0 (id=20): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x509840, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 6m23.151427098s ago: executing program 0 (id=39): fcntl$getown(0xffffffffffffffff, 0x9) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x5, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004fff7ffff000000000300"], 0x0, 0x56}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x68}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6m22.9883918s ago: executing program 32 (id=39): fcntl$getown(0xffffffffffffffff, 0x9) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x5, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004fff7ffff000000000300"], 0x0, 0x56}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x68}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5m51.943851295s ago: executing program 4 (id=76): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x1}, 0x2) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002a80)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005", @ANYRES16=0x0, @ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) 5m50.657162192s ago: executing program 4 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1fe) 5m46.830283504s ago: executing program 4 (id=80): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0xefff, 0x488401) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x37, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1', 0x1) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200), 0x400) r2 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) getegid() 5m45.965755078s ago: executing program 4 (id=84): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000004480)={0x2020}, 0x2020) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x50, 0x0, 0x5, 0xd6}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 5m43.43173998s ago: executing program 4 (id=87): openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 5m41.525178762s ago: executing program 4 (id=89): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x8800) r1 = syz_open_dev$vim2m(&(0x7f0000000400), 0xb04e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314752, 0x2, @discrete={0x2, 0x40}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="0004040000000000fc230b000000080000000000ffffffffffff"], 0x28) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x3, 0x6, 0x7, 0x400, 0x4, 0x540100, r3}) r4 = socket(0x2, 0x2, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./proc/thread-self/fail-nth\x00', 0x8a402, 0xc) read$FUSE(r7, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi4\x00', 0x400, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4000000) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a0012e2440102800200121f", 0x2e}], 0x1}, 0x0) 5m26.204107779s ago: executing program 33 (id=89): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x8800) r1 = syz_open_dev$vim2m(&(0x7f0000000400), 0xb04e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x30314752, 0x2, @discrete={0x2, 0x40}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="0004040000000000fc230b000000080000000000ffffffffffff"], 0x28) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x3, 0x6, 0x7, 0x400, 0x4, 0x540100, r3}) r4 = socket(0x2, 0x2, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) syz_open_procfs$namespace(0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./proc/thread-self/fail-nth\x00', 0x8a402, 0xc) read$FUSE(r7, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi4\x00', 0x400, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4000000) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a0012e2440102800200121f", 0x2e}], 0x1}, 0x0) 10.444946975s ago: executing program 3 (id=822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) file_getattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d69740000001400028008000140800000010800024000000001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r3}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffffff, 0x0, 0x4000, 0x194) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 9.386882399s ago: executing program 3 (id=828): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000106a04270000000000000109022400010000100109040000fe0300020009218200fc0122280009058103ff03010308bbeb63dac93f25fd400a25ebfdd98eb13a6eb365f4371a1ecbee5cce86b6da11eeaedd1ce63112498f941a8ab2f5"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x8, 0x28, {0x28, 0x8, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.899725516s ago: executing program 5 (id=837): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 6.749827369s ago: executing program 5 (id=839): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x141081) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r4 = io_uring_setup(0x34cf, &(0x7f0000000440)={0x0, 0x1539, 0x0, 0x1, 0x0, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=r4, @ANYBLOB="e20000000000000000000000000000000006", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) write$sndseq(r0, &(0x7f0000001080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x46, 0x1}, {0xf}, @raw8={"80a9d4ba7408faaebe04c3c6"}}, {0x5, 0xf, 0xfd, 0xfe, @time={0x9, 0x9}, {0x3}, {0xfe, 0x1}, @quote={{0xf, 0x25}, 0x4}}], 0x38) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffffff000) getsockopt$llc_int(r5, 0x10c, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 6.459784477s ago: executing program 3 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="0c0099"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.295894419s ago: executing program 6 (id=841): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x203, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xb}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x336, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r2, 0x4040099d}}, 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r4, 0x11, 0xd, 0x0, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000680)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r2, r0}}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x20000000ebff, 0x13, 0x0, r6}}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x51, 0x6e, &(0x7f00000002c0)="b43b46eaaf9a585a047e15c3f26fc74dc6fcf9044a907cdd510b8782c51c3234dd59fcdea66197de83def17cd0556ea738dcdb805036577f5d6833ff813aed9cbbf9529b053f8ca0c3db2237a7a8d1aab3", &(0x7f0000000380)=""/110, 0x5, 0x0, 0x7b, 0x9, &(0x7f0000000400)="661b61bb8bba2b46cecb67c916a15bc9cbc862fa6a1533bce4c27aac3e6fb4b7e5d3608f96358b423102c38b82e50a34578bc03921afece88ee906410d8209c179d216b8f7da4bc1be177e19076ce330be17fae6d86a8500c6423ed0e9b26a9c6e3124177a7b6b6feb7864016cef12b38b7b04d93010584dcefba1", &(0x7f0000000480)="fc013f14b4cf93de28", 0x3, 0x0, 0x8001}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800110001000000140003"], 0x50}}, 0x0) socket$inet(0x2, 0x2, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) 5.993430576s ago: executing program 1 (id=842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xfff2}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) file_getattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d69740000001400028008000140800000010800024000000001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r3}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f00000002c0)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 5.810437641s ago: executing program 5 (id=843): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r0 = eventfd(0x5) fcntl$lock(r0, 0x25, &(0x7f0000000000)) 5.577791751s ago: executing program 5 (id=844): syz_usb_connect$uac1(0x0, 0x72, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000280)={[{@name={'name', 0x3d, '\x052\xbej\xe9\x8e&\xd9\xe2\xef\xbf\xd6\xf21W\x13\xe9\xabhQ\x17X\xc6\xaa\xb5\x83\xa3\t\x12\xdf\x80a\xf0\x03\xc3\xea\xc3C\xc4&\xbf\xbe\x8a9\xf7\xa4\xd667\xf1\xa1\xedXd\x8b{\xaa@(\xb8\xd7G\x17\xf8\xe1\xeb\xa4\xadK\x16\x80gq\xac\xb3\xa4\x91\b%*:\xfc\xab\xb0Oo\x9a\xfe\xcbCbP\xc4\xcf>\x9b^J\x83\xd3\xe9\xa6\xa9\xf9\b\x87\x1f\xb3\xb8\x9c;%\xc6l\x94\xd6.(+R\xbe\x9f$?\x91\xdf\x9d\xfd\xab\xbfg\xc3uH\b1\x05'}}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x1a, 0x103, 0x70bd25, 0xfffffffc, {0xf, 0x7c, 0x3f}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x5}]}, @typed={0x8, 0xb8, 0x0, 0x0, @fd=r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x22048044) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) 5.576049191s ago: executing program 3 (id=846): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610000000000010902190001010080fa0904000001ff00000007050202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="40011e0000004d61501d0100000000000000000050000000500000005000000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f00000010c0)={0x0, 0x11, 0x19, "317389769838825d8e130b7452ccff10a2dbea614e9de00701"}, 0x0, 0x0, 0x0, 0x0}) 4.255508096s ago: executing program 1 (id=848): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x75ea, 0x800004, 0x1}) 4.118204688s ago: executing program 1 (id=850): r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 3.75895849s ago: executing program 6 (id=851): socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x23}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80380, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104a3010000ff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280"], 0x50}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r4, 0x5}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r5, r3}}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x2c020400) 3.031011778s ago: executing program 2 (id=852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x10000000}, 0xc) 2.576570781s ago: executing program 2 (id=853): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000ffff26bd7000f0dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040088800000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 2.359616614s ago: executing program 2 (id=854): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x49241) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240)="3f69cabbc771", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) 2.331729625s ago: executing program 5 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xfff2}, {0x2}}}, 0x24}}, 0x0) file_getattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d69740000001400028008000140800000010800024000000001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r3}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffffff, 0x0, 0x4000, 0x194) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 2.090787367s ago: executing program 6 (id=856): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r0, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0x1d}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084) 2.061072887s ago: executing program 2 (id=857): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000780)={r1, 0x0, 0x16}, &(0x7f00000007c0)=ANY=[], 0x0, 0x0) 2.001505911s ago: executing program 6 (id=858): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x20, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x8004) 1.865852255s ago: executing program 2 (id=859): socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x23}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80380, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104a3010000ff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280"], 0x50}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r5, 0x5}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r6, r4}}, 0x18) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x8, 0x6, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x100, 0x0, @in={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x23}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}]}, 0x30}, 0x1, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) unshare(0x2c020400) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) 1.847726699s ago: executing program 3 (id=860): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) 1.84616577s ago: executing program 6 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c00)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xfff2}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) file_getattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffffff, 0x0, 0x4000, 0x194) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 1.603443501s ago: executing program 3 (id=862): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 1.549287446s ago: executing program 1 (id=863): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x80, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x201}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.478629197s ago: executing program 1 (id=864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974"], 0xdc}}, 0x0) 1.280854383s ago: executing program 1 (id=865): syz_usb_connect$uac1(0x0, 0x72, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000280)={[{@name={'name', 0x3d, '\x052\xbej\xe9\x8e&\xd9\xe2\xef\xbf\xd6\xf21W\x13\xe9\xabhQ\x17X\xc6\xaa\xb5\x83\xa3\t\x12\xdf\x80a\xf0\x03\xc3\xea\xc3C\xc4&\xbf\xbe\x8a9\xf7\xa4\xd667\xf1\xa1\xedXd\x8b{\xaa@(\xb8\xd7G\x17\xf8\xe1\xeb\xa4\xadK\x16\x80gq\xac\xb3\xa4\x91\b%*:\xfc\xab\xb0Oo\x9a\xfe\xcbCbP\xc4\xcf>\x9b^J\x83\xd3\xe9\xa6\xa9\xf9\b\x87\x1f\xb3\xb8\x9c;%\xc6l\x94\xd6.(+R\xbe\x9f$?\x91\xdf\x9d\xfd\xab\xbfg\xc3uH\b1\x05'}}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x1a, 0x103, 0x70bd25, 0xfffffffc, {0xf, 0x7c, 0x3f}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x5}]}, @typed={0x8, 0xb8, 0x0, 0x0, @fd=r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x22048044) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, 0x0, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) 1.065003721s ago: executing program 5 (id=866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001540)='t', 0x1) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 75.187946ms ago: executing program 6 (id=867): socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x23}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80380, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104a3010000ff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280"], 0x50}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r4, 0x5}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f00000001c0), r5, r3}}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x2c020400) 0s ago: executing program 2 (id=868): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) landlock_create_ruleset(&(0x7f0000000000)={0x58a5, 0x2, 0x3, 0x290e, 0x0, 0x3}, 0x30, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) kernel console output (not intermixed with test programs): sabled state [ 84.100336][ T5585] bridge_slave_1: entered allmulticast mode [ 84.129695][ T5585] bridge_slave_1: entered promiscuous mode [ 84.135553][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.135670][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.135814][ T5583] bridge_slave_1: entered allmulticast mode [ 84.139001][ T5583] bridge_slave_1: entered promiscuous mode [ 84.140585][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.140755][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.140898][ T5580] bridge_slave_1: entered allmulticast mode [ 84.147142][ T5580] bridge_slave_1: entered promiscuous mode [ 84.168621][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.168736][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.169212][ T5581] bridge_slave_0: entered allmulticast mode [ 84.171990][ T5581] bridge_slave_0: entered promiscuous mode [ 84.271528][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.271644][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.272148][ T5581] bridge_slave_1: entered allmulticast mode [ 84.275616][ T5581] bridge_slave_1: entered promiscuous mode [ 84.326568][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.386855][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.391327][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.405901][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.411232][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.436291][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.438401][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.440359][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.468681][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.523875][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.567637][ T5584] team0: Port device team_slave_0 added [ 84.583322][ T5585] team0: Port device team_slave_0 added [ 84.586470][ T5583] team0: Port device team_slave_0 added [ 84.590050][ T5580] team0: Port device team_slave_0 added [ 84.598645][ T5584] team0: Port device team_slave_1 added [ 84.615710][ T5583] team0: Port device team_slave_1 added [ 84.617449][ T5585] team0: Port device team_slave_1 added [ 84.619244][ T5580] team0: Port device team_slave_1 added [ 84.643077][ T5581] team0: Port device team_slave_0 added [ 84.693334][ T5581] team0: Port device team_slave_1 added [ 84.732963][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.732973][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.732990][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.762895][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.762911][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.762933][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.769012][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.769027][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.769050][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.772163][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.772176][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.772200][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.773463][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.773474][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.773497][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.801042][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.801057][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.801088][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.802685][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.802696][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.802719][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.858318][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.858332][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.858370][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.862479][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.862493][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.862516][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.924183][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.924205][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.924227][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.137652][ T5584] hsr_slave_0: entered promiscuous mode [ 85.139258][ T5584] hsr_slave_1: entered promiscuous mode [ 85.151611][ T5585] hsr_slave_0: entered promiscuous mode [ 85.153245][ T5585] hsr_slave_1: entered promiscuous mode [ 85.155140][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 85.155261][ T5585] Cannot create hsr debugfs directory [ 85.206871][ T5583] hsr_slave_0: entered promiscuous mode [ 85.208066][ T5583] hsr_slave_1: entered promiscuous mode [ 85.209421][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 85.209443][ T5583] Cannot create hsr debugfs directory [ 85.243178][ T5580] hsr_slave_0: entered promiscuous mode [ 85.244847][ T5580] hsr_slave_1: entered promiscuous mode [ 85.245736][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 85.245757][ T5580] Cannot create hsr debugfs directory [ 85.262363][ T5581] hsr_slave_0: entered promiscuous mode [ 85.264202][ T5581] hsr_slave_1: entered promiscuous mode [ 85.265104][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 85.265126][ T5581] Cannot create hsr debugfs directory [ 85.443765][ T60] Bluetooth: hci4: command tx timeout [ 85.523735][ T60] Bluetooth: hci3: command tx timeout [ 85.613770][ T60] Bluetooth: hci0: command tx timeout [ 85.613795][ T4898] Bluetooth: hci2: command tx timeout [ 85.613803][ T60] Bluetooth: hci1: command tx timeout [ 86.434780][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.476632][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.488092][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.512005][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.515936][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.558242][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.580236][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.617450][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.713403][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.737047][ T9] cfg80211: failed to load regulatory.db [ 86.759084][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.772952][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.797703][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.819360][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.846945][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.868495][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.910385][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.052051][ T5580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.076900][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.085332][ T5580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.116715][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.121174][ T5580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.166595][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.198281][ T5580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.227598][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.344520][ T5584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.390117][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.398681][ T5584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.437408][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.440763][ T5584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.468201][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.491035][ T5584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.516399][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.524383][ T60] Bluetooth: hci4: command tx timeout [ 87.578067][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.604954][ T60] Bluetooth: hci3: command tx timeout [ 87.662797][ T5581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.683656][ T60] Bluetooth: hci0: command tx timeout [ 87.694190][ T60] Bluetooth: hci1: command tx timeout [ 87.694222][ T60] Bluetooth: hci2: command tx timeout [ 87.715172][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.735018][ T5581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.767615][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.772276][ T5581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.790187][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.798236][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.812323][ T5581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.836877][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.842198][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.888716][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.889450][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.938103][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.938267][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.995291][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.041559][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.041751][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.080279][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.080377][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.114074][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.211938][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.265679][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.265872][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.289485][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.343627][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.346780][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.460877][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.492190][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.529549][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.529960][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.571517][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.579970][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.678364][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.778765][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.778982][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.885898][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.886024][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.322542][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.603946][ T5587] Bluetooth: hci4: command tx timeout [ 89.685329][ T5587] Bluetooth: hci3: command tx timeout [ 89.763712][ T5587] Bluetooth: hci2: command tx timeout [ 89.763742][ T5587] Bluetooth: hci1: command tx timeout [ 89.763763][ T5587] Bluetooth: hci0: command tx timeout [ 89.807971][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.852430][ T5585] veth0_vlan: entered promiscuous mode [ 89.951972][ T5585] veth1_vlan: entered promiscuous mode [ 90.024091][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.305410][ T5583] veth0_vlan: entered promiscuous mode [ 90.363503][ T5585] veth0_macvtap: entered promiscuous mode [ 90.385633][ T5583] veth1_vlan: entered promiscuous mode [ 90.410962][ T5585] veth1_macvtap: entered promiscuous mode [ 90.482000][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.518036][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.560142][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.603654][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.630074][ T5583] veth0_macvtap: entered promiscuous mode [ 90.686809][ T5583] veth1_macvtap: entered promiscuous mode [ 90.952910][ T5581] veth0_vlan: entered promiscuous mode [ 90.966857][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.011432][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.023424][ T5580] veth0_vlan: entered promiscuous mode [ 91.080206][ T5581] veth1_vlan: entered promiscuous mode [ 91.087050][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.087075][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.164304][ T5584] veth0_vlan: entered promiscuous mode [ 91.168163][ T5580] veth1_vlan: entered promiscuous mode [ 91.293762][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.293780][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.327204][ T5584] veth1_vlan: entered promiscuous mode [ 91.631900][ T5581] veth0_macvtap: entered promiscuous mode [ 91.681897][ T5581] veth1_macvtap: entered promiscuous mode [ 91.702532][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.702550][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.713140][ T5580] veth0_macvtap: entered promiscuous mode [ 91.782690][ T5580] veth1_macvtap: entered promiscuous mode [ 91.854547][ T5584] veth0_macvtap: entered promiscuous mode [ 91.871028][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.885906][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.885944][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.921497][ T5584] veth1_macvtap: entered promiscuous mode [ 92.008890][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.068318][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.181685][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.225207][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.432957][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.517995][ T36] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.768307][ T36] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 92.882745][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.882770][ T36] usb 3-1: Product: syz [ 92.882782][ T36] usb 3-1: Manufacturer: syz [ 92.882795][ T36] usb 3-1: SerialNumber: syz [ 92.966285][ T36] usb 3-1: config 0 descriptor?? [ 93.062972][ T36] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 93.062998][ T36] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 93.063099][ T36] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 93.262287][ T5785] jffs2: notice: (5785) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 93.294884][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.294904][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.401526][ T36] usb 3-1: USB disconnect, device number 2 [ 93.889127][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.889147][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.196594][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.196613][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.251613][ T5794] overlay: ./file0 is not a directory [ 96.033646][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.033677][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.122370][ T5801] jffs2: notice: (5801) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.181999][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.182016][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.547335][ T164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.547599][ T164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.548111][ T164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.641301][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.641317][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.995909][ T5829] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 98.033765][ T164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.037497][ T5797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.165224][ T1023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.206216][ T1023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.206637][ T1023] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.249496][ T1023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.285230][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.285695][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.287364][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.289002][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.289170][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.289571][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.289888][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.290316][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.291388][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.291767][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.424802][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.620272][ T5828] syz.2.14 (5828) used greatest stack depth: 19072 bytes left [ 100.453556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.957115][ T5866] ======================================================= [ 102.957115][ T5866] WARNING: The mand mount option has been deprecated and [ 102.957115][ T5866] and is ignored by this kernel. Remove the mand [ 102.957115][ T5866] option from the mount to silence this warning. [ 102.957115][ T5866] ======================================================= [ 111.337587][ T60] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 114.029007][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.058604][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.072290][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.090853][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.096080][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.606302][ T1169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.891555][ T5924] syz.4.41 (5924) used greatest stack depth: 18912 bytes left [ 116.763564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.773565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.783560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.793561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.803580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.813566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.823563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.833576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.843574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.869375][ T5587] Bluetooth: hci3: command tx timeout [ 118.884505][ T5587] Bluetooth: hci3: command tx timeout [ 119.411591][ T5982] netlink: 'syz.2.49': attribute type 13 has an invalid length. [ 120.374757][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 120.384895][ T5974] vlan2: entered promiscuous mode [ 120.384916][ T5974] hsr0: entered promiscuous mode [ 120.385420][ T5974] vlan2: entered allmulticast mode [ 120.385434][ T5974] hsr0: entered allmulticast mode [ 120.385445][ T5974] hsr_slave_0: entered allmulticast mode [ 120.385466][ T5974] hsr_slave_1: entered allmulticast mode [ 121.133951][ T5587] Bluetooth: hci3: command tx timeout [ 122.479235][ T1169] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.219954][ T5587] Bluetooth: hci3: command tx timeout [ 128.931097][ T5987] hsr_slave_0: left promiscuous mode [ 129.031890][ T5987] hsr_slave_1: left promiscuous mode [ 131.726727][ T6025] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.831052][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.831143][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.876921][ T5587] Bluetooth: hci4: Unknown advertising packet type: 0x18 [ 134.876945][ T5587] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 134.876963][ T5587] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 134.876984][ T5587] Bluetooth: hci4: Malformed LE Event: 0x0d [ 134.887932][ T1169] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.452357][ T6053] process 'syz.2.67' launched './file2' with NULL argv: empty string added [ 139.391456][ T6072] trusted_key: encrypted_key: key user:syz not found [ 140.512074][ T1169] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.890894][ T5244] veth1_vlan: left promiscuous mode [ 155.241595][ T6156] netlink: 'syz.4.89': attribute type 10 has an invalid length. [ 155.515429][ T1169] bridge_slave_1: left allmulticast mode [ 155.537630][ T1169] bridge_slave_1: left promiscuous mode [ 155.565729][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.860916][ T1169] bridge_slave_0: left allmulticast mode [ 155.860962][ T1169] bridge_slave_0: left promiscuous mode [ 155.885559][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.135731][ T6176] mmap: syz.3.90 (6176) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.277594][ T6188] sctp: [Deprecated]: syz.2.94 (pid 6188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.277594][ T6188] Use struct sctp_sack_info instead [ 167.443906][ T6196] binder: 6195:6196 ioctl c0306201 0 returned -14 [ 169.785980][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.810500][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.836197][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.863362][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.886430][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.890874][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.069681][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.119566][ T1169] bond0 (unregistering): Released all slaves [ 172.091024][ T5587] Bluetooth: hci5: command tx timeout [ 173.888313][ T6262] jffs2: notice: (6262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 174.165042][ T5587] Bluetooth: hci5: command tx timeout [ 174.271152][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.305352][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.308045][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.323906][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.337046][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.807151][ T6290] device-mapper: ioctl: name not supplied when creating device [ 176.084061][ T6297] MTD: Couldn't look up './dev/mtdblock0': -2 [ 176.291697][ T60] Bluetooth: hci5: command tx timeout [ 176.565934][ T60] Bluetooth: hci6: command tx timeout [ 177.358317][ T6306] capability: warning: `syz.2.119' uses 32-bit capabilities (legacy support in use) [ 178.324658][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 178.336357][ T60] Bluetooth: hci5: command tx timeout [ 178.551466][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 178.556469][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.556520][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 178.557767][ T31] usb 4-1: config 6 interface 0 has no altsetting 0 [ 178.560858][ T31] usb 4-1: string descriptor 0 read error: -22 [ 178.561010][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.662474][ T60] Bluetooth: hci6: command tx timeout [ 181.284265][ T5244] 8021q: adding VLAN 0 to HW filter on device eth1 [ 181.370830][ T60] Bluetooth: hci6: command tx timeout [ 182.037590][ T31] usb 4-1: can't set config #6, error -71 [ 182.112993][ T6324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.198481][ T31] usb 4-1: USB disconnect, device number 2 [ 183.478162][ T60] Bluetooth: hci6: command tx timeout [ 183.541680][ T5589] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 183.701433][ T5589] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 183.702885][ T5589] usb 2-1: config 255 has an invalid interface number: 97 but max is 0 [ 183.702909][ T5589] usb 2-1: config 255 has no interface number 0 [ 183.702953][ T5589] usb 2-1: config 255 interface 97 has no altsetting 0 [ 183.705551][ T5589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.705575][ T5589] usb 2-1: Product: syz [ 183.705594][ T5589] usb 2-1: Manufacturer: syz [ 183.705606][ T5589] usb 2-1: SerialNumber: syz [ 183.756198][ T6338] MTD: Couldn't look up './dev/mtdblock0': -2 [ 186.291991][ T6361] unsupported nlmsg_type 40 [ 187.482086][ T5589] rndis_host 2-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 187.838017][ T6374] device-mapper: ioctl: name not supplied when creating device [ 188.419686][ T5589] usb 2-1: USB disconnect, device number 2 [ 189.584840][ T6383] binder: 6379:6383 ioctl 4018620d 0 returned -22 [ 189.772059][ T6383] binder: 6379:6383 ioctl c0306201 0 returned -14 [ 190.191799][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 190.191842][ T6388] netlink: 348 bytes leftover after parsing attributes in process `syz.1.134'. [ 190.191910][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 190.191942][ T6388] netlink: 348 bytes leftover after parsing attributes in process `syz.1.134'. [ 190.194031][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 191.227619][ T6398] sctp: [Deprecated]: syz.2.135 (pid 6398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.227619][ T6398] Use struct sctp_sack_info instead [ 192.755501][ T1169] hsr_slave_0: left promiscuous mode [ 193.445844][ T1169] hsr_slave_1: left promiscuous mode [ 193.447352][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.447455][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.701019][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.701045][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.797724][ T1169] veth1_macvtap: left promiscuous mode [ 193.798054][ T1169] veth0_macvtap: left promiscuous mode [ 193.798345][ T1169] veth1_vlan: left promiscuous mode [ 193.798700][ T1169] veth0_vlan: left promiscuous mode [ 194.656547][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.656616][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.369482][ T6444] netlink: 44 bytes leftover after parsing attributes in process `syz.2.144'. [ 199.180023][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 199.226279][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 201.155679][ T5244] 8021q: adding VLAN 0 to HW filter on device eth2 [ 202.717148][ T5589] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 203.525282][ T5589] usb 2-1: not running at top speed; connect to a high speed hub [ 203.525322][ T5589] usb 2-1: New USB device found, idVendor=0000, idProduct=d970, bcdDevice= 1.00 [ 203.553258][ T5589] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.553283][ T5589] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 203.553333][ T5589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.685240][ T5589] uvcvideo 2-1:1.0: Found UVC 1.00 device (0000:d970) [ 203.818652][ T5589] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 1: 0 (exp. 1). [ 203.818715][ T5589] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 205.644731][ T6319] usb 2-1: USB disconnect, device number 3 [ 206.719718][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.719899][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.720083][ T6225] bridge_slave_0: entered allmulticast mode [ 206.755108][ T6225] bridge_slave_0: entered promiscuous mode [ 206.792372][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.792495][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.792709][ T6225] bridge_slave_1: entered allmulticast mode [ 206.819200][ T6225] bridge_slave_1: entered promiscuous mode [ 207.321385][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.363965][ T5595] Bluetooth: hci1: command 0x0406 tx timeout [ 207.445650][ T5595] Bluetooth: hci2: command 0x0406 tx timeout [ 207.445775][ T5595] Bluetooth: hci4: command 0x0406 tx timeout [ 207.454205][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.177670][ T6504] Zero length message leads to an empty skb [ 208.279904][ T6225] team0: Port device team_slave_0 added [ 209.273457][ T6225] team0: Port device team_slave_1 added [ 209.470463][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.470629][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.470868][ T6272] bridge_slave_0: entered allmulticast mode [ 209.501123][ T6272] bridge_slave_0: entered promiscuous mode [ 209.532377][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.532392][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.532415][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.533188][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.533335][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.533514][ T6272] bridge_slave_1: entered allmulticast mode [ 209.605891][ T6272] bridge_slave_1: entered promiscuous mode [ 209.623314][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.623329][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.623353][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.768135][ T6272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.936650][ T6272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.090136][ T6536] sctp: [Deprecated]: syz.2.154 (pid 6536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.090136][ T6536] Use struct sctp_sack_info instead [ 210.132028][ T6536] sctp: [Deprecated]: syz.2.154 (pid 6536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.132028][ T6536] Use struct sctp_sack_info instead [ 210.307381][ T1169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.397720][ T5244] 8021q: adding VLAN 0 to HW filter on device eth3 [ 210.594671][ T6225] hsr_slave_0: entered promiscuous mode [ 210.596543][ T6225] hsr_slave_1: entered promiscuous mode [ 210.640183][ T6272] team0: Port device team_slave_0 added [ 210.680317][ T6272] team0: Port device team_slave_1 added [ 211.018839][ T1169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.552866][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.552883][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.552906][ T6272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.587075][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.587090][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.587115][ T6272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.777995][ T1169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.539884][ T6569] netlink: 'syz.2.160': attribute type 2 has an invalid length. [ 218.222249][ T1169] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.100150][ T6272] hsr_slave_0: entered promiscuous mode [ 219.101478][ T6272] hsr_slave_1: entered promiscuous mode [ 219.102540][ T6272] debugfs: 'hsr0' already exists in 'hsr' [ 219.102562][ T6272] Cannot create hsr debugfs directory [ 219.128770][ T5244] 8021q: adding VLAN 0 to HW filter on device eth4 [ 220.438072][ T6225] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.470665][ T6607] netlink: 'syz.2.168': attribute type 24 has an invalid length. [ 220.557403][ T6225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.583370][ T6225] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.698834][ T6225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.418600][ T1169] bridge_slave_1: left allmulticast mode [ 222.418623][ T1169] bridge_slave_1: left promiscuous mode [ 222.418837][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.962889][ T37] audit: type=1326 audit(1787428992.086:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 223.202607][ T37] audit: type=1326 audit(1787428992.096:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 223.202987][ T37] audit: type=1326 audit(1787428992.096:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcd51ebe90e code=0x7ffc0000 [ 223.761327][ T37] audit: type=1326 audit(1787428992.106:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 223.761382][ T37] audit: type=1326 audit(1787428992.106:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 223.761430][ T37] audit: type=1326 audit(1787428992.106:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 223.761468][ T37] audit: type=1326 audit(1787428992.106:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 223.761505][ T37] audit: type=1326 audit(1787428992.116:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 223.761542][ T37] audit: type=1326 audit(1787428992.116:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 223.761579][ T37] audit: type=1326 audit(1787428992.116:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.170" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 223.951053][ T1169] bridge_slave_0: left allmulticast mode [ 223.951087][ T1169] bridge_slave_0: left promiscuous mode [ 223.951341][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.678797][ T1169] bond0 (unregistering): Released all slaves [ 228.660049][ T4898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.697421][ T4898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.703836][ T4898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.705459][ T4898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.719167][ T4898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.119606][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.175967][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.217560][ T1169] bond0 (unregistering): Released all slaves [ 229.327962][ T6225] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.370182][ T6225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.867818][ T4898] Bluetooth: hci0: command tx timeout [ 232.220267][ T6684] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.181'. [ 232.962622][ T6696] Set syz1 is full, maxelem 256 reached [ 233.309199][ T6667] IPVS: starting estimator thread 0... [ 233.553630][ T4898] Bluetooth: hci0: command tx timeout [ 233.603781][ T6697] IPVS: using max 10 ests per chain, 24000 per kthread [ 235.014264][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.048170][ T5587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.052102][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.145753][ T5587] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.147637][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.609212][ T4898] Bluetooth: hci0: command tx timeout [ 236.745930][ T6730] sctp: [Deprecated]: syz.3.189 (pid 6730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.745930][ T6730] Use struct sctp_sack_info instead [ 238.164364][ T5587] Bluetooth: hci0: command tx timeout [ 238.274554][ T5587] Bluetooth: hci3: command tx timeout [ 240.375358][ T5587] Bluetooth: hci3: command tx timeout [ 241.011525][ T6765] overlayfs: failed to resolve './cgroup': -2 [ 242.076915][ T6772] netlink: 72 bytes leftover after parsing attributes in process `syz.2.197'. [ 242.084704][ T6773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.114250][ T6773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.201837][ T5587] Bluetooth: hci3: command tx timeout [ 244.389415][ T6783] sctp: [Deprecated]: syz.2.199 (pid 6783) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.389415][ T6783] Use struct sctp_sack_info instead [ 244.431971][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.484176][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.509309][ T6770] bridge0: entered allmulticast mode [ 244.784787][ T6788] bridge_slave_1: left allmulticast mode [ 244.784959][ T6788] bridge_slave_1: left promiscuous mode [ 244.823627][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.204125][ T5587] Bluetooth: hci3: command tx timeout [ 249.388740][ T6788] bridge_slave_0: left allmulticast mode [ 249.388776][ T6788] bridge_slave_0: left promiscuous mode [ 249.389006][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.079268][ T5244] 8021q: adding VLAN 0 to HW filter on device eth5 [ 256.153300][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.153370][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.861660][ T6851] 9p: Bad value for 'wfdno' [ 261.099957][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.099985][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.225615][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.225643][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.382099][ T1169] veth1_macvtap: left promiscuous mode [ 262.382214][ T1169] veth0_macvtap: left promiscuous mode [ 262.396963][ T1169] veth1_vlan: left promiscuous mode [ 262.397171][ T1169] veth0_vlan: left promiscuous mode [ 266.523347][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 266.589621][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 268.688444][ T5718] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 270.409117][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 270.410499][ T5718] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 270.412755][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 270.412787][ T5718] usb 2-1: can't read configurations, error -71 [ 270.523672][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 272.260872][ T6920] sctp: [Deprecated]: syz.2.222 (pid 6920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.260872][ T6920] Use struct sctp_sack_info instead [ 276.550159][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 276.810836][ T6952] sctp: [Deprecated]: syz.2.227 (pid 6952) Use of int in max_burst socket option deprecated. [ 276.810836][ T6952] Use struct sctp_assoc_value instead [ 278.211023][ T5244] 8021q: adding VLAN 0 to HW filter on device eth6 [ 278.464738][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.464860][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.465029][ T6639] bridge_slave_0: entered allmulticast mode [ 278.469652][ T6639] bridge_slave_0: entered promiscuous mode [ 278.512009][ T6639] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.522966][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.523175][ T6639] bridge_slave_1: entered allmulticast mode [ 278.539833][ T6639] bridge_slave_1: entered promiscuous mode [ 278.784958][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 279.211622][ T6639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.299804][ T6639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.784987][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.785199][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.785383][ T6709] bridge_slave_0: entered allmulticast mode [ 280.454691][ T6709] bridge_slave_0: entered promiscuous mode [ 280.462685][ T6639] team0: Port device team_slave_0 added [ 280.497088][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.497212][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.497418][ T6709] bridge_slave_1: entered allmulticast mode [ 280.503411][ T6709] bridge_slave_1: entered promiscuous mode [ 280.512898][ T6639] team0: Port device team_slave_1 added [ 280.523692][ T13] IPVS: starting estimator thread 0... [ 280.976879][ T6982] IPVS: using max 8 ests per chain, 19200 per kthread [ 281.023678][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 281.153668][ T10] usb 2-1: device descriptor read/64, error -71 [ 281.159273][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.159289][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.159310][ T6639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.171108][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.173064][ T6639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.173076][ T6639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.173099][ T6639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.184581][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.308782][ T6709] team0: Port device team_slave_0 added [ 281.401787][ T6709] team0: Port device team_slave_1 added [ 281.443675][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 281.777494][ T6639] hsr_slave_0: entered promiscuous mode [ 281.778695][ T6639] hsr_slave_1: entered promiscuous mode [ 281.779680][ T6639] debugfs: 'hsr0' already exists in 'hsr' [ 281.779703][ T6639] Cannot create hsr debugfs directory [ 281.788696][ T10] usb 2-1: device descriptor read/64, error -71 [ 282.358759][ T10] usb usb2-port1: attempt power cycle [ 282.669482][ T7001] jffs2: notice: (7001) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 282.764385][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.764401][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.764425][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.929339][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.929355][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.929380][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.306062][ T7027] fuse: Unknown parameter ' ' [ 288.368440][ T7048] input: syz0 as /devices/virtual/input/input5 [ 289.704564][ T6709] hsr_slave_0: entered promiscuous mode [ 289.715124][ T6709] hsr_slave_1: entered promiscuous mode [ 289.719351][ T6709] debugfs: 'hsr0' already exists in 'hsr' [ 289.719377][ T6709] Cannot create hsr debugfs directory [ 289.766348][ T5244] 8021q: adding VLAN 0 to HW filter on device eth7 [ 289.842819][ T4898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 289.921494][ T4898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.983381][ T4898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.027766][ T4898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.099712][ T4898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.917606][ T4898] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.989343][ T4898] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.008423][ T4898] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.010952][ T4898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.020283][ T4898] Bluetooth: hci5: command tx timeout [ 294.043935][ T4898] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 296.620817][ T7101] overlayfs: failed lookup in lower (newroot/74, name='file0', err=-40): overlapping layers [ 297.163613][ T4898] Bluetooth: hci5: command tx timeout [ 297.163683][ T4898] Bluetooth: hci6: command tx timeout [ 297.522232][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 297.523084][ T4898] Bluetooth: hci4: Malformed LE Event: 0x1d [ 299.419864][ T4898] Bluetooth: hci6: command tx timeout [ 299.419897][ T4898] Bluetooth: hci5: command tx timeout [ 302.010232][ T5587] Bluetooth: hci5: command tx timeout [ 302.010267][ T5587] Bluetooth: hci6: command tx timeout [ 304.779452][ T4898] Bluetooth: hci6: command tx timeout [ 306.786647][ T7157] overlayfs: failed to clone upperpath [ 306.831107][ T5244] 8021q: adding VLAN 0 to HW filter on device eth8 [ 307.823727][ T5720] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 307.974455][ T5720] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.981201][ T5720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.981225][ T5720] usb 4-1: config 0 has no interfaces? [ 308.016069][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.016096][ T5720] usb 4-1: Product: syz [ 308.016110][ T5720] usb 4-1: Manufacturer: syz [ 308.045244][ T5720] usb 4-1: config 0 descriptor?? [ 309.278000][ T5720] usb 4-1: USB disconnect, device number 4 [ 316.755383][ T7250] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 317.142782][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.142844][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.495268][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.497118][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.497335][ T7057] bridge_slave_0: entered allmulticast mode [ 321.533140][ T7057] bridge_slave_0: entered promiscuous mode [ 321.643402][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.658059][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.658262][ T7057] bridge_slave_1: entered allmulticast mode [ 321.689069][ T7057] bridge_slave_1: entered promiscuous mode [ 322.019235][ T7294] device-mapper: ioctl: name not supplied when creating device [ 323.843981][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.844173][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.844383][ T7071] bridge_slave_0: entered allmulticast mode [ 323.935815][ T7071] bridge_slave_0: entered promiscuous mode [ 323.978156][ T7057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.978754][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.978975][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.979146][ T7071] bridge_slave_1: entered allmulticast mode [ 323.986983][ T7071] bridge_slave_1: entered promiscuous mode [ 324.122998][ T7057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.263156][ T7319] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 326.612964][ T7322] jffs2: notice: (7322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 326.915856][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 326.915894][ T37] audit: type=1326 audit(1787429096.156:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7325 comm="syz.2.286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43b6c8e0d9 code=0x0 [ 327.925369][ T7071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.247957][ T7346] syz.1.290 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 329.590920][ T7057] team0: Port device team_slave_0 added [ 329.641088][ T7071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.658616][ T7057] team0: Port device team_slave_1 added [ 329.753706][ T5720] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 330.172298][ T7364] netlink: 68 bytes leftover after parsing attributes in process `syz.2.293'. [ 330.289319][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 331.153308][ T37] audit: type=1326 audit(1787429100.396:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7339 comm="syz.1.290" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd51efe0d9 code=0x0 [ 331.189111][ T7071] team0: Port device team_slave_0 added [ 331.200869][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.200882][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.200901][ T7057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.346464][ T7071] team0: Port device team_slave_1 added [ 331.405664][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.405676][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.405689][ T7057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.028866][ T7373] cgroup: Name too long [ 332.124419][ T1169] bridge_slave_1: left allmulticast mode [ 332.124455][ T1169] bridge_slave_1: left promiscuous mode [ 332.124706][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.347238][ T1169] bridge_slave_0: left allmulticast mode [ 333.347262][ T1169] bridge_slave_0: left promiscuous mode [ 333.347608][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.566397][ T5720] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.566448][ T5720] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.570697][ T5720] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 333.570731][ T5720] usb 2-1: can't read configurations, error -71 [ 333.727055][ T1169] bridge_slave_1: left allmulticast mode [ 333.727087][ T1169] bridge_slave_1: left promiscuous mode [ 333.727390][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.044558][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 335.197872][ T10] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 335.205421][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.205478][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.205520][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.299180][ T1169] bridge_slave_0: left allmulticast mode [ 335.299205][ T1169] bridge_slave_0: left promiscuous mode [ 335.299363][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.450886][ T10] option 4-1:1.0: GSM modem (1-port) converter detected [ 335.567863][ T10] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 335.909969][ T7391] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 336.724444][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.784439][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.825124][ T1169] bond0 (unregistering): Released all slaves [ 337.055787][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.134261][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.195555][ T1169] bond0 (unregistering): Released all slaves [ 337.644474][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.644488][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.644513][ T7071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.694578][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.694595][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.694620][ T7071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.883816][ T5592] usb 4-1: USB disconnect, device number 5 [ 337.963899][ T7057] hsr_slave_0: entered promiscuous mode [ 337.965948][ T7057] hsr_slave_1: entered promiscuous mode [ 337.966854][ T7057] debugfs: 'hsr0' already exists in 'hsr' [ 337.966876][ T7057] Cannot create hsr debugfs directory [ 338.182737][ T5592] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 338.395210][ T7395] netlink: 'syz.2.299': attribute type 61 has an invalid length. [ 338.493237][ T5592] option 4-1:1.0: device disconnected [ 339.236140][ T7414] syz.3.300 (7414): drop_caches: 2 [ 339.371482][ T7071] hsr_slave_0: entered promiscuous mode [ 339.372513][ T7071] hsr_slave_1: entered promiscuous mode [ 339.373241][ T7071] debugfs: 'hsr0' already exists in 'hsr' [ 339.373260][ T7071] Cannot create hsr debugfs directory [ 341.013749][ T1169] hsr_slave_0: left promiscuous mode [ 341.063872][ T1169] hsr_slave_1: left promiscuous mode [ 341.064862][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.584843][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.081156][ T164] IPVS: starting estimator thread 0... [ 345.153762][ T1169] hsr_slave_0: left promiscuous mode [ 345.169417][ T7444] IPVS: using max 8 ests per chain, 19200 per kthread [ 345.193768][ T1169] hsr_slave_1: left promiscuous mode [ 345.195177][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.244670][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.688467][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 345.774238][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 346.311112][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 346.364396][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 346.490871][ T7448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.305'. [ 346.490888][ T7448] openvswitch: netlink: Flow actions attr not present in new flow. [ 348.905416][ T7462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'. [ 349.196303][ T7467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'. [ 350.122376][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.725514][ T7480] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 351.497751][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 352.324136][ T5587] Bluetooth: hci4: command 0x0406 tx timeout [ 352.409337][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 352.441961][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 352.466127][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 352.528132][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.417611][ T4898] Bluetooth: hci4: command 0x0406 tx timeout [ 354.811159][ T4898] Bluetooth: hci0: command tx timeout [ 356.162591][ T7521] Invalid ELF header magic: != ELF [ 356.947171][ T5587] Bluetooth: hci0: command tx timeout [ 357.531027][ T4898] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.727583][ T7532] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 358.439992][ T4898] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 358.466696][ T4898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 358.470884][ T4898] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 358.471744][ T4898] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.993717][ T5587] Bluetooth: hci0: command tx timeout [ 360.250896][ T7546] evm: overlay not supported [ 361.015806][ T37] audit: type=1804 audit(1787429130.246:18): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.319" name="/newroot/73/file0/file1" dev="overlay" ino=424 res=1 errno=0 [ 361.025535][ T5587] Bluetooth: hci3: command tx timeout [ 361.305644][ T5587] Bluetooth: hci0: command tx timeout [ 362.060249][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 362.869371][ T7562] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 363.050753][ T5587] Bluetooth: hci3: command tx timeout [ 365.258314][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'. [ 365.258345][ T7581] netlink: 'syz.1.326': attribute type 30 has an invalid length. [ 366.045508][ T5587] Bluetooth: hci3: command tx timeout [ 366.196427][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.212928][ T67] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.213485][ T6244] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.214161][ T6244] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.849928][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 367.850041][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 367.856390][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 367.859339][ T7599] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 367.859373][ T7599] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 367.859411][ T7599] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 367.866261][ T7599] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 367.882594][ T7599] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 368.083938][ T4898] Bluetooth: hci3: command tx timeout [ 368.090614][ T1169] bridge_slave_1: left allmulticast mode [ 368.090645][ T1169] bridge_slave_1: left promiscuous mode [ 368.090910][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.184997][ T1169] bridge_slave_0: left allmulticast mode [ 368.185030][ T1169] bridge_slave_0: left promiscuous mode [ 368.185296][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.548928][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 369.787923][ T1169] bridge_slave_1: left allmulticast mode [ 369.787958][ T1169] bridge_slave_1: left promiscuous mode [ 369.788200][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.915370][ T1169] bridge_slave_0: left allmulticast mode [ 369.915403][ T1169] bridge_slave_0: left promiscuous mode [ 369.915655][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.557839][ T1169] bridge_slave_1: left allmulticast mode [ 371.557871][ T1169] bridge_slave_1: left promiscuous mode [ 371.558158][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.755378][ T1169] bridge_slave_0: left allmulticast mode [ 371.755412][ T1169] bridge_slave_0: left promiscuous mode [ 371.755667][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.961713][ T4898] Bluetooth: hci2: unexpected cc 0x0c25 length: 1 < 3 [ 372.242626][ T7624] jffs2: notice: (7624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 372.376210][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.504376][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.606189][ T1169] bond0 (unregistering): Released all slaves [ 373.245038][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.645240][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.706306][ T1169] bond0 (unregistering): Released all slaves [ 373.905947][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.964262][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.015508][ T1169] bond0 (unregistering): Released all slaves [ 374.043814][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 374.047629][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 374.049086][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 374.050510][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 374.051897][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 374.053307][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 374.056629][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 374.058567][ T7599] wlan0 speed is unknown, defaulting to 1000 [ 374.171049][ T7640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'. [ 374.171072][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 374.485866][ T7529] wlan0 speed is unknown, defaulting to 1000 [ 376.640305][ T7655] befs: (nullb0): No write support. Marking filesystem read-only [ 377.749858][ T7655] befs: (nullb0): invalid magic header [ 378.585367][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.585434][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.450950][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 380.450984][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 380.605588][ T5597] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 380.800711][ T5597] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 380.818648][ T5597] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.818706][ T5597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.158465][ T5597] usb 2-1: config 0 descriptor?? [ 381.350860][ T5597] pwc: Askey VC010 type 2 USB webcam detected. [ 381.467874][ T5597] pwc: send_video_command error -71 [ 381.467899][ T5597] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 381.467985][ T5597] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 381.518146][ T5597] usb 2-1: USB disconnect, device number 11 [ 384.728392][ T7702] vivid-000: ================= START STATUS ================= [ 385.081802][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 385.656898][ T7706] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 385.660161][ T7706] block (null): Could not allocate knbd recv work queue. [ 385.698157][ T7702] vivid-000: Test Pattern: 75% Colorbar [ 385.698197][ T7702] vivid-000: Fill Percentage of Frame: 100 [ 385.698208][ T7702] vivid-000: Horizontal Movement: No Movement [ 385.698217][ T7702] vivid-000: Vertical Movement: No Movement [ 385.698225][ T7702] vivid-000: OSD Text Mode: All [ 385.698234][ T7702] vivid-000: Show Border: false [ 385.698242][ T7702] vivid-000: Show Square: false [ 385.698251][ T7702] vivid-000: Sensor Flipped Horizontally: false [ 385.698259][ T7702] vivid-000: Sensor Flipped Vertically: false [ 385.698268][ T7702] vivid-000: Insert SAV Code in Image: false [ 385.698277][ T7702] vivid-000: Insert EAV Code in Image: false [ 385.698285][ T7702] vivid-000: Insert Video Guard Band: false [ 385.698294][ T7702] vivid-000: Reduced Framerate: false [ 385.698302][ T7702] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 385.698311][ T7702] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 385.698321][ T7702] vivid-000: Enable Capture Cropping: true [ 385.698329][ T7702] vivid-000: Enable Capture Composing: true [ 385.698337][ T7702] vivid-000: Enable Capture Scaler: true [ 385.698345][ T7702] vivid-000: Timestamp Source: End of Frame [ 385.698353][ T7702] vivid-000: Colorspace: sRGB [ 385.698361][ T7702] vivid-000: Transfer Function: Default [ 385.698369][ T7702] vivid-000: Y'CbCr Encoding: Default [ 385.698377][ T7702] vivid-000: HSV Encoding: Hue 0-179 [ 385.698385][ T7702] vivid-000: Quantization: Default [ 385.698393][ T7702] vivid-000: Apply Alpha To Red Only: false [ 385.698402][ T7702] vivid-000: Standard Aspect Ratio: 4x3 [ 385.698416][ T7702] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 385.698438][ T7702] vivid-000: DV Timings: 640x480p59 inactive [ 385.698457][ T7702] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 385.698474][ T7702] vivid-000: Maximum EDID Blocks: 2 [ 385.698490][ T7702] vivid-000: Limited RGB Range (16-235): false [ 385.698506][ T7702] vivid-000: Rx RGB Quantization Range: Automatic [ 385.698524][ T7702] vivid-000: Power Present: 0x00000001 [ 385.698546][ T7702] tpg source WxH: 320x240 (Y'CbCr) [ 385.698553][ T7702] tpg field: 1 [ 385.698556][ T7702] tpg crop: (0,0)/320x240 [ 385.698563][ T7702] tpg compose: (0,0)/320x240 [ 385.698569][ T7702] tpg colorspace: 8 [ 385.698572][ T7702] tpg transfer function: 0/0 [ 385.698577][ T7702] tpg Y'CbCr encoding: 0/0 [ 385.698581][ T7702] tpg quantization: 0/0 [ 385.698586][ T7702] tpg RGB range: 0/2 [ 385.698590][ T7702] vivid-000: ================== END STATUS ================== [ 386.093836][ T7706] nbd: failed to add new device [ 386.543202][ T7729] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 386.643700][ T1169] hsr_slave_0: left promiscuous mode [ 386.646266][ T7721] input: syz0 as /devices/virtual/input/input7 [ 386.704112][ T1169] hsr_slave_1: left promiscuous mode [ 386.741245][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.764627][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.032597][ T1169] hsr_slave_0: left promiscuous mode [ 387.086354][ T1169] hsr_slave_1: left promiscuous mode [ 387.087547][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.197798][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.244976][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 387.325578][ T1169] hsr_slave_0: left promiscuous mode [ 387.363747][ T1169] hsr_slave_1: left promiscuous mode [ 387.364908][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.407131][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 387.407184][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 387.409133][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.409183][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 387.409207][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 36 [ 387.440652][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.440668][ T9] usb 4-1: Product: syz [ 387.440675][ T9] usb 4-1: Manufacturer: syz [ 387.440682][ T9] usb 4-1: SerialNumber: syz [ 387.489467][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.508236][ T9] usb 4-1: config 0 descriptor?? [ 387.509185][ T7741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 387.509298][ T7741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 387.577337][ C0] usb 4-1: NFC: Urb failure (status -71) [ 387.580017][ C0] usb 4-1: NFC: Urb failure (status -71) [ 387.659604][ T9] usb 4-1: NFC: Unable to get FW version [ 387.729174][ T9] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -71 [ 387.819564][ T9] usb 4-1: USB disconnect, device number 6 [ 390.035715][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 391.590052][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 391.897345][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 391.981064][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 392.354426][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 392.412211][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 392.571320][ T7761] wlan0 speed is unknown, defaulting to 1000 [ 392.820803][ T5244] 8021q: adding VLAN 0 to HW filter on device eth13 [ 392.821021][ T7757] warning: `syz.1.364' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 393.185737][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.185919][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.186064][ T7529] bridge_slave_0: entered allmulticast mode [ 393.188497][ T7529] bridge_slave_0: entered promiscuous mode [ 393.315209][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.316862][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.317060][ T7529] bridge_slave_1: entered allmulticast mode [ 393.367740][ T7529] bridge_slave_1: entered promiscuous mode [ 393.388252][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.388373][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.388989][ T7492] bridge_slave_0: entered allmulticast mode [ 393.392439][ T7492] bridge_slave_0: entered promiscuous mode [ 393.639359][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.639575][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.697792][ T7492] bridge_slave_1: entered allmulticast mode [ 393.704744][ T7492] bridge_slave_1: entered promiscuous mode [ 393.748523][ T7529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.845857][ T7529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.863412][ T7492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.902551][ T7492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.214034][ T7529] team0: Port device team_slave_0 added [ 395.251470][ T7529] team0: Port device team_slave_1 added [ 395.298895][ T7492] team0: Port device team_slave_0 added [ 395.363380][ T7492] team0: Port device team_slave_1 added [ 395.374554][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.374568][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.374592][ T7529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.448743][ T7529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.448758][ T7529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.448784][ T7529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.615946][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.615967][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.615988][ T7492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.741194][ T7492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.741209][ T7492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.741230][ T7492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.151121][ T7529] hsr_slave_0: entered promiscuous mode [ 396.159975][ T7529] hsr_slave_1: entered promiscuous mode [ 396.588560][ T7492] hsr_slave_0: entered promiscuous mode [ 396.590344][ T7492] hsr_slave_1: entered promiscuous mode [ 396.591108][ T7492] debugfs: 'hsr0' already exists in 'hsr' [ 396.591129][ T7492] Cannot create hsr debugfs directory [ 397.467183][ T7847] netlink: ct_mark mask cannot be 0 [ 397.467215][ T7847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.542463][ T5244] 8021q: adding VLAN 0 to HW filter on device eth14 [ 398.722818][ T7876] sctp: [Deprecated]: syz.2.403 (pid 7876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.722818][ T7876] Use struct sctp_sack_info instead [ 398.894021][ T1169] bridge_slave_1: left allmulticast mode [ 398.894057][ T1169] bridge_slave_1: left promiscuous mode [ 398.894314][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.071839][ T1169] bridge_slave_0: left allmulticast mode [ 399.071873][ T1169] bridge_slave_0: left promiscuous mode [ 399.072136][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.605379][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.704977][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.795195][ T1169] bond0 (unregistering): Released all slaves [ 399.847208][ T5244] 8021q: adding VLAN 0 to HW filter on device eth15 [ 399.941614][ T7529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.088580][ T7529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.140921][ T7529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.219858][ T7529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.721632][ T7529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 400.763219][ T7529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.922218][ T7930] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 400.996793][ T7930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 401.001640][ T7529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 401.129935][ T7529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.288145][ T1169] hsr_slave_0: left promiscuous mode [ 401.365325][ T1169] hsr_slave_1: left promiscuous mode [ 401.366543][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.411033][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.446063][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 402.526748][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 403.513375][ T8037] cgroup: Name too long [ 405.857643][ T7529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.506183][ T7529] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.669451][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.669653][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.868103][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.909918][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.630729][ T8125] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 411.433320][ T5587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.483448][ T5587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.492066][ T5587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.527456][ T5587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.528238][ T5587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.937241][ T8162] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 411.937540][ T8162] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 411.981284][ T8162] udc dummy_udc.0: failed to start g1: -22 [ 411.981312][ T8162] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 412.022182][ T8162] UDC core: g1: couldn't find an available UDC or it's busy [ 412.593777][ T6666] bridge_slave_1: left allmulticast mode [ 412.593811][ T6666] bridge_slave_1: left promiscuous mode [ 412.594052][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.713456][ T8194] netlink: 44 bytes leftover after parsing attributes in process `syz.1.473'. [ 412.785769][ T6666] bridge_slave_0: left allmulticast mode [ 412.785791][ T6666] bridge_slave_0: left promiscuous mode [ 412.785959][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.358727][ T8216] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 413.358757][ T8216] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 413.358889][ T8216] udc dummy_udc.0: failed to start g1: -22 [ 413.358909][ T8216] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 413.381940][ T8216] UDC core: g1: couldn't find an available UDC or it's busy [ 413.484337][ T6666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.609583][ T6666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.683756][ T4898] Bluetooth: hci5: command tx timeout [ 413.700713][ T6666] bond0 (unregistering): Released all slaves [ 414.431905][ T6666] hsr_slave_0: left promiscuous mode [ 414.458739][ T37] audit: type=1326 audit(1787429951.708:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.1.485" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 414.467364][ T37] audit: type=1326 audit(1787429951.708:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.1.485" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 414.467409][ T37] audit: type=1326 audit(1787429951.718:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.1.485" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 414.467631][ T37] audit: type=1326 audit(1787429951.718:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.1.485" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 414.467890][ T37] audit: type=1326 audit(1787429951.718:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.1.485" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 414.468151][ T37] audit: type=1326 audit(1787429951.718:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.1.485" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 414.468821][ T37] audit: type=1326 audit(1787429951.718:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.1.485" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 414.468862][ T37] audit: type=1326 audit(1787429951.718:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8236 comm="syz.1.485" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 414.584131][ T6666] hsr_slave_1: left promiscuous mode [ 414.585279][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.686729][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.743453][ T8244] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 414.743481][ T8244] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 414.751294][ T8244] udc dummy_udc.0: failed to start g1: -22 [ 414.751323][ T8244] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 414.808039][ T8244] UDC core: g1: couldn't find an available UDC or it's busy [ 414.837531][ T5587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.842318][ T5587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.877131][ T5587] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.967704][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.969057][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.117887][ T8248] sctp: [Deprecated]: syz.2.486 (pid 8248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.117887][ T8248] Use struct sctp_sack_info instead [ 415.424675][ T8255] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 415.424706][ T8255] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 415.424877][ T8255] udc dummy_udc.0: failed to start g1: -22 [ 415.424907][ T8255] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 415.473058][ T8255] UDC core: g1: couldn't find an available UDC or it's busy [ 415.667224][ T8260] netlink: 'syz.2.490': attribute type 16 has an invalid length. [ 415.667245][ T8260] netlink: 'syz.2.490': attribute type 17 has an invalid length. [ 415.714398][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 415.763763][ T5587] Bluetooth: hci5: command tx timeout [ 415.774869][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 415.838754][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 416.490469][ T8260] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 416.490791][ T8260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.661728][ T8155] wlan0 speed is unknown, defaulting to 1000 [ 417.051799][ T8288] sctp: [Deprecated]: syz.3.499 (pid 8288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.051799][ T8288] Use struct sctp_sack_info instead [ 417.110160][ T8246] wlan0 speed is unknown, defaulting to 1000 [ 417.213509][ T5587] Bluetooth: hci0: command tx timeout [ 417.682351][ T8311] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 417.682392][ T8311] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 417.682524][ T8311] udc dummy_udc.0: failed to start g1: -22 [ 417.682545][ T8311] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 417.734881][ T8311] UDC core: g1: couldn't find an available UDC or it's busy [ 417.843763][ T5587] Bluetooth: hci5: command tx timeout [ 418.462873][ T8338] sctp: [Deprecated]: syz.2.515 (pid 8338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.462873][ T8338] Use struct sctp_sack_info instead [ 419.109227][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.109427][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.110015][ T8155] bridge_slave_0: entered allmulticast mode [ 419.121312][ T8155] bridge_slave_0: entered promiscuous mode [ 419.125690][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.125901][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.126078][ T8155] bridge_slave_1: entered allmulticast mode [ 419.128522][ T8155] bridge_slave_1: entered promiscuous mode [ 419.283749][ T5587] Bluetooth: hci0: command tx timeout [ 419.554811][ T8357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 419.554846][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 419.846418][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.867575][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.923738][ T5587] Bluetooth: hci5: command tx timeout [ 420.111346][ T8367] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 420.111366][ T8367] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 420.111479][ T8367] udc dummy_udc.0: failed to start g1: -22 [ 420.111491][ T8367] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 420.135047][ T8367] UDC core: g1: couldn't find an available UDC or it's busy [ 420.180523][ T8155] team0: Port device team_slave_0 added [ 420.669465][ T8155] team0: Port device team_slave_1 added [ 421.281354][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.281370][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.281395][ T8155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.363731][ T5587] Bluetooth: hci0: command tx timeout [ 421.584867][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.533'. [ 421.584891][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 421.592281][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 421.592304][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 421.976515][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.976531][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.976556][ T8155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.036911][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.037115][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.037325][ T8246] bridge_slave_0: entered allmulticast mode [ 422.040347][ T8246] bridge_slave_0: entered promiscuous mode [ 422.159278][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.159416][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.159607][ T8246] bridge_slave_1: entered allmulticast mode [ 422.171252][ T8246] bridge_slave_1: entered promiscuous mode [ 422.552448][ T8401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.535'. [ 422.607214][ T8246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.687634][ T8246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.727309][ T8155] hsr_slave_0: entered promiscuous mode [ 422.731312][ T8155] hsr_slave_1: entered promiscuous mode [ 422.731852][ T8155] debugfs: 'hsr0' already exists in 'hsr' [ 422.731874][ T8155] Cannot create hsr debugfs directory [ 422.993836][ T8246] team0: Port device team_slave_0 added [ 423.396709][ T8427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.545'. [ 423.396732][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 423.418786][ T8246] team0: Port device team_slave_1 added [ 423.443653][ T5587] Bluetooth: hci0: command tx timeout [ 424.359178][ T8444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 426.608459][ T5589] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 426.727998][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.728239][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.728277][ T8246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.943888][ T5589] usb 4-1: Using ep0 maxpacket: 32 [ 426.967500][ T5589] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 427.385717][ T5589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.385742][ T5589] usb 4-1: Product: syz [ 427.385853][ T5589] usb 4-1: Manufacturer: syz [ 427.385868][ T5589] usb 4-1: SerialNumber: syz [ 427.425030][ T8246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.425044][ T8246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.425069][ T8246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.531149][ T5589] usb 4-1: config 0 descriptor?? [ 427.740595][ T8460] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 427.740625][ T8460] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 427.740759][ T8460] udc dummy_udc.0: failed to start g1: -22 [ 427.740779][ T8460] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 427.772051][ T8460] UDC core: g1: couldn't find an available UDC or it's busy [ 427.926100][ T8246] hsr_slave_0: entered promiscuous mode [ 427.927406][ T8246] hsr_slave_1: entered promiscuous mode [ 427.928323][ T8246] debugfs: 'hsr0' already exists in 'hsr' [ 427.928346][ T8246] Cannot create hsr debugfs directory [ 427.999319][ T5589] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a [ 427.999348][ T5589] airspy 4-1:0.0: Could not detect board [ 427.999457][ T5589] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 428.044476][ T5589] usb 4-1: USB disconnect, device number 7 [ 428.094693][ T6666] bridge_slave_1: left allmulticast mode [ 428.094724][ T6666] bridge_slave_1: left promiscuous mode [ 428.094994][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.274811][ T6666] bridge_slave_0: left allmulticast mode [ 428.274835][ T6666] bridge_slave_0: left promiscuous mode [ 428.275010][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.094291][ T6666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.175733][ T6666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.198565][ T6666] bond0 (unregistering): Released all slaves [ 429.418640][ T8481] __nla_validate_parse: 1 callbacks suppressed [ 429.418659][ T8481] netlink: 148 bytes leftover after parsing attributes in process `syz.1.562'. [ 429.852026][ T8495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.569'. [ 430.215231][ T6666] hsr_slave_0: left promiscuous mode [ 430.253874][ T6666] hsr_slave_1: left promiscuous mode [ 430.255973][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.308117][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.084422][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 431.124822][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 431.395267][ T8514] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 432.036371][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.586'. [ 432.036394][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 432.182524][ T8155] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.397521][ T8155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.568812][ T8155] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 432.737499][ T8155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.336291][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 433.542196][ T8155] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.598373][ T8155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.609788][ T8155] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.721768][ T8155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.846866][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 434.105257][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.597'. [ 434.105281][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 434.442747][ T8593] syz.3.594 (8593) used greatest stack depth: 17968 bytes left [ 438.421880][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 438.572026][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.619772][ T8647] sctp: [Deprecated]: syz.2.610 (pid 8647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.619772][ T8647] Use struct sctp_sack_info instead [ 439.809135][ T8155] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.852871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.854589][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.964135][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.964259][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.007815][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.007869][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.216350][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.3.614'. [ 440.216380][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 441.725441][ T8687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.620'. [ 442.907591][ T8706] sctp: [Deprecated]: syz.2.622 (pid 8706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.907591][ T8706] Use struct sctp_sack_info instead [ 443.159671][ T8246] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.212294][ T8246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.241706][ T8246] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 443.305444][ T8246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.307879][ T8246] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 443.394498][ T8721] sctp: [Deprecated]: syz.1.626 (pid 8721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.394498][ T8721] Use struct sctp_sack_info instead [ 443.398174][ T8246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.407583][ T8246] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 443.459197][ T8246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.598769][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.627'. [ 443.598792][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 444.929150][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.628'. [ 444.929171][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 444.986763][ T8155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.125700][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.217830][ T8246] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.292406][ T8754] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.631'. [ 445.322871][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.329500][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.402272][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.402403][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.217647][ T8776] sctp: [Deprecated]: syz.2.636 (pid 8776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.217647][ T8776] Use struct sctp_sack_info instead [ 446.274201][ T8155] veth0_vlan: entered promiscuous mode [ 446.340348][ T8155] veth1_vlan: entered promiscuous mode [ 446.376363][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.639'. [ 446.376385][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 449.679485][ T8155] veth0_macvtap: entered promiscuous mode [ 449.717478][ T8155] veth1_macvtap: entered promiscuous mode [ 449.876016][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.932393][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.923867][ T1169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.510139][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.511721][ T164] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.691507][ T8246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.744418][ T164] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.830601][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.830621][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.334841][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.334861][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.675871][ T37] audit: type=1326 audit(1787429991.928:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8874 comm="syz.1.658" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 454.675915][ T37] audit: type=1326 audit(1787429991.928:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8874 comm="syz.1.658" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 454.741987][ T37] audit: type=1326 audit(1787429991.988:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8874 comm="syz.1.658" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 454.742033][ T37] audit: type=1326 audit(1787429991.988:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8874 comm="syz.1.658" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 454.746863][ T37] audit: type=1326 audit(1787429991.998:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8874 comm="syz.1.658" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 454.746907][ T37] audit: type=1326 audit(1787429991.998:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8874 comm="syz.1.658" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 454.746944][ T37] audit: type=1326 audit(1787429991.998:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8874 comm="syz.1.658" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 454.760168][ T37] audit: type=1326 audit(1787429992.008:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8874 comm="syz.1.658" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 454.760211][ T37] audit: type=1326 audit(1787429992.008:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8874 comm="syz.1.658" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd51efe0d9 code=0x7ffc0000 [ 455.034996][ T8246] veth0_vlan: entered promiscuous mode [ 455.054388][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.660'. [ 455.054418][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 456.041623][ T8246] veth1_vlan: entered promiscuous mode [ 456.433081][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 456.452643][ T8899] netlink: 80 bytes leftover after parsing attributes in process `syz.2.664'. [ 456.469478][ T8899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.505127][ T8246] veth0_macvtap: entered promiscuous mode [ 456.775806][ T8246] veth1_macvtap: entered promiscuous mode [ 457.273946][ T5587] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 457.274376][ T5587] Bluetooth: hci2: Injecting HCI hardware error event [ 457.282126][ T5587] Bluetooth: hci2: hardware error 0x00 [ 457.344195][ T8909] cgroup: Name too long [ 457.967926][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.009280][ T8246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.080875][ T144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.227215][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'. [ 458.227238][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 458.405496][ T8926] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 458.405517][ T8926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.296056][ T8934] vhci_hcd: connection closed [ 459.833325][ T8926] vhci_hcd vhci_hcd.0: Device attached [ 459.845813][ T5587] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 460.044023][ T1178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.181259][ T67] vhci_hcd vhci_hcd.6: stop threads [ 460.223995][ T67] vhci_hcd vhci_hcd.6: release socket [ 460.328270][ T67] vhci_hcd vhci_hcd.6: disconnect device [ 461.509816][ T5811] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.593720][ T144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.178866][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.178885][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.260399][ T8952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.680'. [ 462.347115][ T6666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.347133][ T6666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.791517][ T8974] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 462.791548][ T8974] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 462.791681][ T8974] udc dummy_udc.0: failed to start g1: -22 [ 462.791701][ T8974] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 462.792865][ T8974] UDC core: g1: couldn't find an available UDC or it's busy [ 466.591215][ T9022] sctp: [Deprecated]: syz.2.700 (pid 9022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 466.591215][ T9022] Use struct sctp_sack_info instead [ 468.322301][ T6319] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 468.533811][ T6319] usb 2-1: Using ep0 maxpacket: 8 [ 468.534826][ T6319] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 468.539697][ T6319] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 468.542076][ T6319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.542098][ T6319] usb 2-1: Product: syz [ 468.542110][ T6319] usb 2-1: Manufacturer: syz [ 468.542123][ T6319] usb 2-1: SerialNumber: syz [ 468.712997][ T9033] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 468.713028][ T9033] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 468.713178][ T9033] udc dummy_udc.0: failed to start g1: -22 [ 468.713199][ T9033] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 468.849070][ T9033] UDC core: g1: couldn't find an available UDC or it's busy [ 468.901421][ T6319] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 468.923223][ T6319] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 468.923248][ T6319] usb 2-1: 2:1 : invalid channels 0 [ 468.939693][ T6319] usb 2-1: unit 6 not found! [ 469.109444][ T6319] usb 2-1: USB disconnect, device number 12 [ 469.412175][ T9018] udevd[9018]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.652201][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.716'. [ 469.652224][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 471.047691][ T9079] jffs2: notice: (9079) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 471.393071][ T9088] netlink: 128 bytes leftover after parsing attributes in process `syz.2.726'. [ 471.525602][ T9088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.112701][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.6.736'. [ 472.112725][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'. [ 473.061027][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.183810][ T200] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 475.493089][ T9158] ip6gre1: entered promiscuous mode [ 475.493113][ T9158] ip6gre1: entered allmulticast mode [ 475.533930][ T200] usb 6-1: Using ep0 maxpacket: 32 [ 475.536627][ T200] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 475.538782][ T200] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 475.538808][ T200] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 475.538853][ T200] usb 6-1: config 0 interface 0 has no altsetting 0 [ 475.588208][ T200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.588233][ T200] usb 6-1: Product: syz [ 475.588246][ T200] usb 6-1: Manufacturer: syz [ 475.588259][ T200] usb 6-1: SerialNumber: syz [ 475.639774][ T200] usb 6-1: config 0 descriptor?? [ 475.746157][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.759'. [ 475.746196][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 475.791919][ T9164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.758'. [ 475.791943][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 476.151943][ T9170] sctp: [Deprecated]: syz.3.757 (pid 9170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 476.151943][ T9170] Use struct sctp_sack_info instead [ 476.239950][ T200] gs_usb 6-1:0.0: Couldn't send data format (err=-71) [ 476.239978][ T200] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 476.349127][ T200] usb 6-1: USB disconnect, device number 2 [ 477.196795][ T9191] IPv6: NLM_F_CREATE should be specified when creating new route [ 477.253196][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.767'. [ 477.253221][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 478.032401][ T9218] sctp: [Deprecated]: syz.5.774 (pid 9218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.032401][ T9218] Use struct sctp_sack_info instead [ 478.120810][ T9220] openvswitch: netlink: Actions may not be safe on all matching packets [ 479.004545][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.792'. [ 479.004567][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 479.098381][ T9251] sctp: [Deprecated]: syz.1.789 (pid 9251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.098381][ T9251] Use struct sctp_sack_info instead [ 480.344660][ T9273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.798'. [ 480.344694][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 481.437446][ T9289] sctp: [Deprecated]: syz.6.801 (pid 9289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.437446][ T9289] Use struct sctp_sack_info instead [ 481.503453][ T9293] sctp: [Deprecated]: syz.3.802 (pid 9293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.503453][ T9293] Use struct sctp_sack_info instead [ 481.504589][ T9291] netlink: 16 bytes leftover after parsing attributes in process `syz.5.804'. [ 481.751682][ T9299] sctp: [Deprecated]: syz.2.805 (pid 9299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.751682][ T9299] Use struct sctp_sack_info instead [ 482.377030][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz.5.812'. [ 482.377064][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 483.393817][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 483.448285][ T1257] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 483.538426][ T9340] sctp: [Deprecated]: syz.3.822 (pid 9340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.538426][ T9340] Use struct sctp_sack_info instead [ 483.579264][ T5587] Bluetooth: hci0: unknown advertising packet type: 0x32 [ 483.579296][ T5587] Bluetooth: hci0: Dropping invalid advertising data [ 483.579369][ T5587] Bluetooth: hci0: Malformed LE Event: 0x02 [ 483.583174][ T9] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 483.631681][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 483.631718][ T9] usb 6-1: can't read configurations, error -71 [ 483.670269][ T1257] usb 7-1: Using ep0 maxpacket: 32 [ 483.689084][ T1257] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 483.693068][ T1257] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 483.693093][ T1257] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 483.693123][ T1257] usb 7-1: config 0 interface 0 has no altsetting 0 [ 483.702491][ T1257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.702516][ T1257] usb 7-1: Product: syz [ 483.702530][ T1257] usb 7-1: Manufacturer: syz [ 483.702543][ T1257] usb 7-1: SerialNumber: syz [ 483.823818][ T1257] usb 7-1: config 0 descriptor?? [ 483.979488][ T9352] cgroup: Name too long [ 484.222083][ T1257] gs_usb 7-1:0.0: Couldn't send data format (err=-71) [ 484.222126][ T1257] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 484.259392][ T1257] usb 7-1: USB disconnect, device number 2 [ 484.339908][ T9354] sctp: [Deprecated]: syz.1.825 (pid 9354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.339908][ T9354] Use struct sctp_sack_info instead [ 484.516208][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.5.829'. [ 484.516231][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.829'. [ 484.683981][ T6319] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 485.414320][ T6319] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 485.417513][ T6319] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 485.417546][ T6319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 485.417559][ T6319] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 485.417581][ T6319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.517520][ T6319] usb 4-1: config 0 descriptor?? [ 485.518289][ T9360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 485.875126][ T9373] netlink: 20 bytes leftover after parsing attributes in process `syz.6.833'. [ 485.875149][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.833'. [ 487.034217][ T6319] cherry 0003:046A:0027.0001: ignoring exceeding usage max [ 487.422448][ T9389] sctp: [Deprecated]: syz.2.838 (pid 9389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.422448][ T9389] Use struct sctp_sack_info instead [ 487.491993][ T9390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.840'. [ 487.535770][ T6319] cherry 0003:046A:0027.0001: hidraw0: USB HID v0.82 Device [HID 046a:0027] on usb-dummy_hcd.3-1/input0 [ 487.589917][ T9391] udevd[9391]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 487.644245][ T6319] usb 4-1: USB disconnect, device number 8 [ 488.033256][ T9396] sctp: [Deprecated]: syz.1.842 (pid 9396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.033256][ T9396] Use struct sctp_sack_info instead [ 488.073876][ T5597] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 488.223672][ T5597] usb 7-1: Using ep0 maxpacket: 32 [ 488.223983][ T9404] cgroup: Name too long [ 488.224362][ T5597] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 488.227667][ T5597] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 488.227691][ T5597] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 488.227714][ T5597] usb 7-1: config 0 interface 0 has no altsetting 0 [ 488.358643][ T5597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.358673][ T5597] usb 7-1: Product: syz [ 488.358687][ T5597] usb 7-1: Manufacturer: syz [ 488.358701][ T5597] usb 7-1: SerialNumber: syz [ 488.409257][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.845'. [ 488.409291][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 488.460294][ T5597] usb 7-1: config 0 descriptor?? [ 489.358029][ T5597] gs_usb 7-1:0.0: Couldn't send data format (err=-71) [ 489.358067][ T5597] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 489.497821][ T5597] usb 7-1: USB disconnect, device number 3 [ 489.529831][ T9411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 489.529852][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 489.693878][ T6319] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 489.846471][ T6319] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 489.848064][ T6319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 489.848090][ T6319] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 489.848127][ T6319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.974254][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 490.067835][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.6.851'. [ 490.067858][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.851'. [ 490.147300][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 490.165061][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.165300][ T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 490.165322][ T9] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 490.214905][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.214931][ T9] usb 2-1: Product: syz [ 490.214945][ T9] usb 2-1: Manufacturer: syz [ 490.214959][ T9] usb 2-1: SerialNumber: syz [ 491.294828][ T6319] gud 4-1:1.0: Failed to add properties (error=-71) [ 491.294870][ T6319] gud 4-1:1.0: probe with driver gud failed with error -71 [ 491.469539][ T9] usb 2-1: unable to init card! (ret=-110) [ 491.470393][ T9] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 491.558266][ T9427] capability: warning: `syz.2.854' uses deprecated v2 capabilities in a way that may be insecure [ 491.623948][ T5597] usb 2-1: USB disconnect, device number 13 [ 491.810168][ T6319] usb 4-1: USB disconnect, device number 9 [ 491.832276][ T9435] sctp: [Deprecated]: syz.5.855 (pid 9435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.832276][ T9435] Use struct sctp_sack_info instead [ 492.045212][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.859'. [ 492.045235][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 492.317690][ T9452] netlink: 80 bytes leftover after parsing attributes in process `syz.1.864'. [ 492.423708][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 492.540545][ T9454] cgroup: Name too long [ 492.684907][ T9] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 492.688910][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.688939][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 492.688964][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 493.588735][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.588762][ T9] usb 4-1: Product: syz [ 493.588776][ T9] usb 4-1: Manufacturer: syz [ 493.588789][ T9] usb 4-1: SerialNumber: syz [ 493.639641][ T9] usb 4-1: config 0 descriptor?? [ 493.675338][ T9] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 493.797570][ T9462] __nla_validate_parse: 1 callbacks suppressed [ 493.797582][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.6.867'. [ 493.797599][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.867'. [ 494.089790][ T1169] ------------[ cut here ]------------ [ 494.089804][ T1169] in_task() && kcov_mode_enabled(mode) [ 494.089823][ T1169] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5d6/0x710, CPU#1: kworker/u8:10/1169 [ 494.089876][ T1169] Modules linked in: [ 494.089920][ T1169] CPU: 1 UID: 0 PID: 1169 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 494.089949][ T1169] Tainted: [L]=SOFTLOCKUP [ 494.089956][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.089970][ T1169] Workqueue: events_unbound cfg80211_wiphy_work [ 494.089999][ T1169] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 494.090024][ T1169] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f1 f8 02 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 dc b8 8a 09 89 c0 48 c7 c7 c0 52 a3 [ 494.090042][ T1169] RSP: 0018:ffffc90005f379d8 EFLAGS: 00010202 [ 494.090060][ T1169] RAX: 0000000000000000 RBX: ffff888028a11f00 RCX: 8000000000000001 [ 494.090075][ T1169] RDX: 0000000000000000 RSI: ffffffff8bcbc060 RDI: ffffffff8bcbc020 [ 494.090089][ T1169] RBP: ffff88804039dc80 R08: ffffffff8b52ee52 R09: 0000000000000000 [ 494.090104][ T1169] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 494.090118][ T1169] R13: ffff88804bccdef8 R14: 0000000000000000 R15: ffff88804bd71180 [ 494.090133][ T1169] FS: 0000000000000000(0000) GS:ffff888125cf4000(0000) knlGS:0000000000000000 [ 494.090150][ T1169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.090165][ T1169] CR2: 0000000000000000 CR3: 000000003cb2c000 CR4: 00000000003526f0 [ 494.090186][ T1169] Call Trace: [ 494.090194][ T1169] [ 494.090207][ T1169] ieee80211_iface_work+0x20c/0x1010 [ 494.090263][ T1169] cfg80211_wiphy_work+0x29e/0x420 [ 494.090288][ T1169] ? process_scheduled_works+0x97a/0x1630 [ 494.090316][ T1169] process_scheduled_works+0xc3d/0x1630 [ 494.090377][ T1169] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.090421][ T1169] ? assign_work+0x3cf/0x5d0 [ 494.090452][ T1169] worker_thread+0xa47/0xfb0 [ 494.090511][ T1169] kthread+0x38b/0x470 [ 494.090542][ T1169] ? __pfx_worker_thread+0x10/0x10 [ 494.090565][ T1169] ? __pfx_kthread+0x10/0x10 [ 494.090594][ T1169] ret_from_fork+0x514/0xb70 [ 494.090646][ T1169] ? __pfx_ret_from_fork+0x10/0x10 [ 494.090681][ T1169] ? __switch_to+0xc89/0x1420 [ 494.090711][ T1169] ? __pfx_kthread+0x10/0x10 [ 494.090743][ T1169] ret_from_fork_asm+0x1a/0x30 [ 494.090782][ T1169] [ 494.090802][ T1169] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 494.090819][ T1169] CPU: 1 UID: 0 PID: 1169 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 494.090848][ T1169] Tainted: [L]=SOFTLOCKUP [ 494.090855][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.090868][ T1169] Workqueue: events_unbound cfg80211_wiphy_work [ 494.090888][ T1169] Call Trace: [ 494.090902][ T1169] [ 494.090910][ T1169] vpanic+0x56d/0xa60 [ 494.090930][ T1169] ? __pfx__printk+0x10/0x10 [ 494.090953][ T1169] ? __pfx_vpanic+0x10/0x10 [ 494.090982][ T1169] ? is_bpf_text_address+0x292/0x2b0 [ 494.091008][ T1169] ? is_bpf_text_address+0x26/0x2b0 [ 494.091043][ T1169] panic+0xc5/0xd0 [ 494.091073][ T1169] ? __pfx_panic+0x10/0x10 [ 494.091114][ T1169] ? ret_from_fork_asm+0x1a/0x30 [ 494.091139][ T1169] __warn+0x315/0x4c0 [ 494.091155][ T1169] ? kcov_remote_start+0x5d6/0x710 [ 494.091179][ T1169] ? kcov_remote_start+0x5d6/0x710 [ 494.091198][ T1169] __report_bug+0x276/0x570 [ 494.091229][ T1169] ? kcov_remote_start+0x5d6/0x710 [ 494.091251][ T1169] ? __pfx___report_bug+0x10/0x10 [ 494.091274][ T1169] ? irqentry_exit+0x218/0x910 [ 494.091307][ T1169] ? kcov_remote_start+0x5d8/0x710 [ 494.091324][ T1169] ? kcov_remote_start+0x5d6/0x710 [ 494.091348][ T1169] ? kcov_remote_start+0x5d6/0x710 [ 494.091367][ T1169] report_bug+0x16b/0x220 [ 494.091394][ T1169] ? kcov_remote_start+0x5d6/0x710 [ 494.091411][ T1169] ? kcov_remote_start+0x5d8/0x710 [ 494.091430][ T1169] handle_bug+0x9c/0x200 [ 494.091460][ T1169] exc_invalid_op+0x1a/0x50 [ 494.091488][ T1169] asm_exc_invalid_op+0x1a/0x20 [ 494.091508][ T1169] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 494.091528][ T1169] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f1 f8 02 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 dc b8 8a 09 89 c0 48 c7 c7 c0 52 a3 [ 494.091545][ T1169] RSP: 0018:ffffc90005f379d8 EFLAGS: 00010202 [ 494.091562][ T1169] RAX: 0000000000000000 RBX: ffff888028a11f00 RCX: 8000000000000001 [ 494.091576][ T1169] RDX: 0000000000000000 RSI: ffffffff8bcbc060 RDI: ffffffff8bcbc020 [ 494.091589][ T1169] RBP: ffff88804039dc80 R08: ffffffff8b52ee52 R09: 0000000000000000 [ 494.091603][ T1169] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 494.091618][ T1169] R13: ffff88804bccdef8 R14: 0000000000000000 R15: ffff88804bd71180 [ 494.091639][ T1169] ? rt_spin_lock+0x1e2/0x400 [ 494.091668][ T1169] ? kcov_remote_start+0xeb/0x710 [ 494.091691][ T1169] ieee80211_iface_work+0x20c/0x1010 [ 494.091733][ T1169] cfg80211_wiphy_work+0x29e/0x420 [ 494.091757][ T1169] ? process_scheduled_works+0x97a/0x1630 [ 494.091782][ T1169] process_scheduled_works+0xc3d/0x1630 [ 494.091842][ T1169] ? __pfx_process_scheduled_works+0x10/0x10 [ 494.091875][ T1169] ? assign_work+0x3cf/0x5d0 [ 494.091912][ T1169] worker_thread+0xa47/0xfb0 [ 494.091970][ T1169] kthread+0x38b/0x470 [ 494.092000][ T1169] ? __pfx_worker_thread+0x10/0x10 [ 494.092023][ T1169] ? __pfx_kthread+0x10/0x10 [ 494.092054][ T1169] ret_from_fork+0x514/0xb70 [ 494.092087][ T1169] ? __pfx_ret_from_fork+0x10/0x10 [ 494.092116][ T1169] ? __switch_to+0xc89/0x1420 [ 494.092145][ T1169] ? __pfx_kthread+0x10/0x10 [ 494.092176][ T1169] ret_from_fork_asm+0x1a/0x30 [ 494.092214][ T1169] [ 494.092510][ T1169] Kernel Offset: disabled