last executing test programs: 17m25.508285019s ago: executing program 2 (id=246): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) 17m22.241266644s ago: executing program 2 (id=250): r0 = socket$netlink(0x10, 0x3, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) 17m22.240306328s ago: executing program 4 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) bind$bt_hci(r3, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r4, &(0x7f0000004440)={0x2020}, 0x2020) 17m19.298641556s ago: executing program 2 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf}}, './file0\x00'}) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000100)={r3}) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000001c0)=0x1) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r7, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x3, 0x7fff, 0x8001, 0x8, 0x2, 0x8]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x50811}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0) 17m18.833423278s ago: executing program 4 (id=256): setuid(0xee01) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x80003, 0xff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_create1(0x0) 17m11.654283042s ago: executing program 2 (id=265): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x6f95bac5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 17m11.502976238s ago: executing program 4 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000540)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, [{0xe, 0x0, 'GI'}]}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000e000000005000000000000000000", @ANYRES32=r4, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="01000000010000000400"/28], 0x50) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) ioprio_get$uid(0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000500)={0x8, 0x0, 0x7f87, 0x3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) 17m10.240346455s ago: executing program 4 (id=269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x2, 0x98c6}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x2, 0xad}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x6, 0x1]}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}, 0x0) 17m9.998658027s ago: executing program 2 (id=271): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x6, {{0xa, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e21, 0x2000, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x20) symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(0xffffffffffffffff, &(0x7f0000000000)="5a000300010003", 0x7) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r3, 0x0) 17m7.096098094s ago: executing program 4 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x961a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 17m6.174182756s ago: executing program 2 (id=276): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x102, 0x166) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000100)={"4cf36a628ca84ddd2961bd42a3b25f1e2273a95c6ff8aa046bd8aca774d0a64b", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xf, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x40000026, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x201, 0x0, 0x4, 0x5, 0x8, 0x800080eb, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x5, 0x47, 0x8020, 0x4, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x6, 0x9], [0x7, 0xa, 0x0, 0x7, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x14, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000808, 0x2, 0x6d03, 0x5, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x1, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x128, 0x4, 0x2000001, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x1000, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x7, 0x1000006, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x80101, 0x10003, 0x2, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x2, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r2, r3, 0x0) poll(0x0, 0x0, 0x1ff8) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) 17m4.895603004s ago: executing program 4 (id=278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 16m50.107772989s ago: executing program 32 (id=276): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x102, 0x166) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000100)={"4cf36a628ca84ddd2961bd42a3b25f1e2273a95c6ff8aa046bd8aca774d0a64b", r4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xf, 0xb, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x5, 0x4, 0x10007e, 0x20000006, 0x53, 0x6, 0x10001, 0x80005, 0x102, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x2, 0x2, 0x7, 0x4, 0x200ffff, 0x40000026, 0xd, 0x53b7, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x201, 0x0, 0x4, 0x5, 0x8, 0x800080eb, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x2, 0x4, 0x9, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0xd, 0x9, 0x80000130, 0x8004, 0x8001, 0xfffffff3, 0x2, 0xfffffff7, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x2, 0xffff, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f2f, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x7, 0x6, 0x8, 0x9, 0x5, 0x47, 0x8020, 0x4, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x200, 0x101, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x6, 0x9], [0x7, 0xa, 0x0, 0x7, 0xfffffffe, 0x100, 0x8d2, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x14, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000808, 0x2, 0x6d03, 0x5, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x1, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x128, 0x4, 0x2000001, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x1000, 0x80aaed, 0x4, 0x24], [0x9, 0x840bb33, 0x7ffffffd, 0xb, 0x5, 0x100093a, 0x7, 0x1000006, 0x1, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x80101, 0x10003, 0x2, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x8, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x4, 0x1000, 0x7, 0xaf, 0x8, 0x400, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0x1000a1f, 0xffffffff, 0x7, 0x2, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc2, 0x200, 0xffff2441, 0xf7f]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r2, r3, 0x0) poll(0x0, 0x0, 0x1ff8) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) 16m49.018265972s ago: executing program 33 (id=278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 18.906551697s ago: executing program 3 (id=2224): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x6, {{0xa, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e21, 0x2000, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x20) symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(r2, &(0x7f0000000000)="5a000300010003", 0x7) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r3, 0x0) 17.730214871s ago: executing program 3 (id=2226): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="201504000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x20, 0x15, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 17.51708333s ago: executing program 1 (id=2227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x75e61b87a316174b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) shutdown(0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000300)={0x1f, @none, 0x5}, 0xa) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff010000000000000000"], 0xac}}, 0x0) gettid() sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, r5, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 15.260455564s ago: executing program 0 (id=2228): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x100000, 0x1800, 0x1}, 0x20) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x3d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r5) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 10.666952877s ago: executing program 1 (id=2229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) close(r2) 10.3407208s ago: executing program 1 (id=2231): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, 0x0, 0x10000) recvmsg(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000680)=""/19, 0x13}, {&(0x7f0000000a80)=""/251, 0xfb}, {&(0x7f0000000b80)=""/19, 0x13}, {&(0x7f0000000e80)=""/138, 0x8a}, {&(0x7f0000001d00)=""/4096, 0x1013}], 0x5}, 0x22) 10.039392237s ago: executing program 5 (id=2232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x0, 0x0, 0x0) 9.461578616s ago: executing program 5 (id=2233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x64159223755480d7, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe}, {0x1, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40448c0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 8.670563768s ago: executing program 3 (id=2234): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000280)='zonefs\x00', 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000080)={0x1, [[0x7fff], [0xfffffff8, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x7, 0xfffffffd], [0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]], '\x00', [{0x0, 0xd}, {}, {0x0, 0x2}, {}, {0x4}], '\x00', 0x102}) recvmsg$unix(r2, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) close(0xffffffffffffffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x400000000000004, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0x2000000]}) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8.050014724s ago: executing program 1 (id=2235): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x9, 0xd18, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) 8.022498403s ago: executing program 5 (id=2236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1ff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5e0}, [@IFLA_MTU={0x8, 0x4, 0x5e0}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 7.693652631s ago: executing program 0 (id=2237): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108e600000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x30000009}) epoll_wait(r4, 0x0, 0x0, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x440c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x60040000) 7.146627649s ago: executing program 3 (id=2238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x75e61b87a316174b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) shutdown(0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000300)={0x1f, @none, 0x5}, 0xa) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff010000000000000000"], 0xac}}, 0x0) gettid() sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, r5, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000054) 6.415074446s ago: executing program 5 (id=2239): sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x3}, 0x80, 0x0}, 0x40011) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0xa8031, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000000000000"]) 6.406331753s ago: executing program 0 (id=2240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) close(r2) 3.307477625s ago: executing program 0 (id=2241): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @sliced={0x3a, [0x4, 0xd, 0xb82e, 0x9, 0x8, 0x5, 0x7, 0x8, 0x7fff, 0x3, 0x3, 0x40, 0x8, 0x6, 0x4, 0x6, 0x3, 0xfffc, 0xffff, 0x64, 0x1, 0x3, 0x7fff, 0xa, 0x43, 0x6, 0x0, 0x4, 0x9, 0x7, 0x3, 0x4, 0x6, 0xc, 0x7, 0x3, 0x1, 0x1, 0x4, 0x8, 0x4, 0x2, 0x8000, 0x8, 0x800, 0x1, 0x0, 0x81], 0x7fb}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 1.4586055s ago: executing program 3 (id=2242): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0xfc}}, 0x4004050) r1 = socket(0x2, 0x3, 0x7f) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) 1.206779834s ago: executing program 0 (id=2243): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.16148583s ago: executing program 1 (id=2244): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0x3479, &(0x7f0000000400)={0x0, 0x8800595d, 0x0, 0x20002, 0x1002053, 0x0, r0}, &(0x7f0000000740)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x110a}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) 1.098552415s ago: executing program 3 (id=2245): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) recvmsg(r0, 0x0, 0x22) 798.245041ms ago: executing program 0 (id=2246): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(0x0, 0x80) syz_emit_ethernet(0x32, &(0x7f0000000080)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x5, 0x2, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[{0x0, 0x1, 0x6, 0xa}, {0x1, 0x2, 0x8, 0xf}, {0x5, 0x2, 0x4}, {0x0, 0x1, 0x1, 0x9}, {0x2, 0x1, 0x2, 0x1}, {0x4, 0x2, 0xd, 0x1}], 0x10, 0x6}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x7000000, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4000000) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d240500000500000000000000", @ANYBLOB], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffe}, 0x50) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xdd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd9, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x921}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x7, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x22, &(0x7f00000000c0)={0x5, 0xf, 0x22, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x4, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xf, 0x20, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x8, 0x6f, 0x9, 0x8}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x401}}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpgid(0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) read(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) 725.649573ms ago: executing program 1 (id=2247): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 258.297935ms ago: executing program 5 (id=2248): r0 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key$fscrypt_provisioning(&(0x7f0000000100), 0x0, &(0x7f0000000180)={0x2, 0x0, @a}, 0x48, r0) r1 = request_key(&(0x7f0000000280)='rxrpc\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='%\x00', r0) r2 = request_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='abcdefghijklmnop', r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) keyctl$get_persistent(0x16, r4, r0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000440)='veno', 0x4) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x20) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, 0x0, 0x0) request_key(0x0, &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='keyring\x00', r2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000005c0)={0x0, 0x2, 0x10}, &(0x7f0000000600)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000640)=@assoc_value={r6, 0x7}, 0x8) r7 = accept$unix(r5, 0x0, &(0x7f0000000700)) shutdown(r7, 0x1) ioctl$DVB_DVR_DMX_REQBUFS(r3, 0xc0086f3c, 0x0) keyctl$dh_compute(0x17, &(0x7f00000007c0)={r1, r2, r2}, &(0x7f0000000800)=""/4096, 0x1000, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000001880)="3b0121db4eac5c7b82f54be8529df92c178ddbb02c369eb2926368d5d37aafdff909ff1393f22618218b4abfcf61e21748c43fc0ef3a9078942bc3cb718c143a5542f5589a07da542a9b3e2c361e9591daec5461adecbc02581ac34ccc6069a0f0d9e096bd9c1cc8461eaf57ea5005dbe6390a8d000d7bcd51bd7297b1417025eb8bc167f1778f7278aa5663daead821ad3cb13ac84c0a3eadb34752314a0587110472f915ce5675863d32ec5d0c7363514f3e1515052d3571c6fef28b", 0xbd) ioctl$TIOCSETD(r3, 0x5423, 0x0) 0s ago: executing program 5 (id=2249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1ff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): emoving interface: batadv_slave_0 [ 789.735809][ T3368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.836407][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 790.634610][ T3368] team0 (unregistering): Port device team_slave_1 removed [ 790.838130][ T3368] team0 (unregistering): Port device team_slave_0 removed [ 792.606818][T10584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.734659][ T5595] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 792.822638][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.822736][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.822867][T10400] bridge_slave_0: entered allmulticast mode [ 792.828585][T10400] bridge_slave_0: entered promiscuous mode [ 792.885769][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.885854][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.885993][T10400] bridge_slave_1: entered allmulticast mode [ 792.887993][T10400] bridge_slave_1: entered promiscuous mode [ 792.894406][ T5595] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 792.895361][ T5595] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.895395][ T5595] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 792.895424][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.026311][ T5595] net1080 2-1:1.0: probe with driver net1080 failed with error -22 [ 793.422567][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.535180][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.649208][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.649297][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.649453][T10381] bridge_slave_0: entered allmulticast mode [ 793.663460][T10381] bridge_slave_0: entered promiscuous mode [ 793.822849][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.822938][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.823059][T10381] bridge_slave_1: entered allmulticast mode [ 793.835753][T10381] bridge_slave_1: entered promiscuous mode [ 793.854020][T10400] team0: Port device team_slave_0 added [ 793.913350][T10400] team0: Port device team_slave_1 added [ 794.033713][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 794.193816][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 794.197596][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 794.198623][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 794.198662][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.198679][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 794.198697][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 794.198714][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.198743][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.512356][ T10] usb 1-1: usb_control_msg returned -32 [ 794.512395][ T10] usbtmc 1-1:16.0: can't read capabilities [ 795.332272][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 795.350135][T10381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.401091][T10381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.577581][ T10] usb 2-1: USB disconnect, device number 13 [ 795.883752][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.883767][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.883788][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.021302][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.021318][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.021339][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.103279][T10381] team0: Port device team_slave_0 added [ 796.157798][T10640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.356690][T10381] team0: Port device team_slave_1 added [ 796.583375][T10400] hsr_slave_0: entered promiscuous mode [ 796.585927][T10400] hsr_slave_1: entered promiscuous mode [ 796.587657][T10381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.587668][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.587687][T10381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.596256][T10381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.596269][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.596290][T10381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.919171][ T5704] usb 1-1: USB disconnect, device number 12 [ 797.607691][T10381] hsr_slave_0: entered promiscuous mode [ 797.628011][T10381] hsr_slave_1: entered promiscuous mode [ 797.644019][T10381] debugfs: 'hsr0' already exists in 'hsr' [ 797.644039][T10381] Cannot create hsr debugfs directory [ 797.856879][ T5704] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 798.004209][ T5704] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 798.005161][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.005197][ T5704] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 798.005227][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.073253][ T5704] net1080 1-1:1.0: probe with driver net1080 failed with error -22 [ 798.927181][T10692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.210363][ T5249] 8021q: adding VLAN 0 to HW filter on device eth10 [ 799.480190][ T3368] bridge_slave_1: left allmulticast mode [ 799.480219][ T3368] bridge_slave_1: left promiscuous mode [ 799.480396][ T3368] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.482873][ T3368] bridge_slave_0: left allmulticast mode [ 799.482898][ T3368] bridge_slave_0: left promiscuous mode [ 799.483118][ T3368] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.870592][ T3368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.874393][ T3368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.877641][ T3368] bond0 (unregistering): Released all slaves [ 800.099623][ T3368] hsr_slave_0: left promiscuous mode [ 800.100726][ T3368] hsr_slave_1: left promiscuous mode [ 800.101648][ T3368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.102381][ T3368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.372623][T10707] 9p: Bad value for 'rfdno' [ 800.596237][ T5595] usb 1-1: USB disconnect, device number 13 [ 801.173380][T10723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.218578][ T3368] team0 (unregistering): Port device team_slave_1 removed [ 801.265815][ T3368] team0 (unregistering): Port device team_slave_0 removed [ 802.317058][T10738] 9pnet_fd: Insufficient options for proto=fd [ 802.786593][T10746] fuse: Bad value for 'group_id' [ 802.786609][T10746] fuse: Bad value for 'group_id' [ 802.814060][ T5595] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 802.964353][ T5595] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 802.976372][ T5595] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.976413][ T5595] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 802.976444][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.053151][ T5595] net1080 2-1:1.0: probe with driver net1080 failed with error -22 [ 803.122605][T10751] jffs2: notice: (10751) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 805.651573][T10787] 9p: Bad value for 'rfdno' [ 805.993324][T10793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.022716][ T5704] usb 2-1: USB disconnect, device number 14 [ 806.408467][ T5249] 8021q: adding VLAN 0 to HW filter on device eth11 [ 806.566248][ T37] kauditd_printk_skb: 20 callbacks suppressed [ 806.566292][ T37] audit: type=1800 audit(2000000362.030:69): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1165" name="ipv4_port" dev="configfs" ino=26871 res=0 errno=0 [ 806.571916][ T37] audit: type=1800 audit(2000000362.040:70): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1165" name="num" dev="configfs" ino=26872 res=0 errno=0 [ 806.587641][ T37] audit: type=1800 audit(2000000362.060:71): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1165" name="ipv4_address" dev="configfs" ino=26873 res=0 errno=0 [ 806.622027][ T37] audit: type=1800 audit(2000000362.090:72): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1165" name="num" dev="configfs" ino=26874 res=0 errno=0 [ 806.633932][ T37] audit: type=1800 audit(2000000362.110:73): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1165" name="local" dev="configfs" ino=26875 res=0 errno=0 [ 808.362710][ T37] audit: type=1800 audit(2000000363.830:74): pid=10839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1174" name="ipv4_port" dev="configfs" ino=27011 res=0 errno=0 [ 808.381538][ T37] audit: type=1800 audit(2000000363.850:75): pid=10839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1174" name="num" dev="configfs" ino=27012 res=0 errno=0 [ 808.466593][ T37] audit: type=1800 audit(2000000363.940:76): pid=10839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1174" name="ipv4_address" dev="configfs" ino=27013 res=0 errno=0 [ 808.472184][ T37] audit: type=1800 audit(2000000363.940:77): pid=10839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1174" name="num" dev="configfs" ino=27015 res=0 errno=0 [ 808.536030][ T37] audit: type=1800 audit(2000000364.000:78): pid=10839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1174" name="local" dev="configfs" ino=27016 res=0 errno=0 [ 813.218088][T10854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.441029][T10856] jffs2: notice: (10856) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 813.670536][T10856] tipc: Started in network mode [ 813.670565][T10856] tipc: Node identity ac14140f, cluster identity 4711 [ 813.752407][T10856] tipc: New replicast peer: 255.255.255.255 [ 813.846711][T10856] tipc: Enabled bearer , priority 10 [ 813.906314][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.906365][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.690103][T10400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 814.720476][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 814.725316][T10400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 814.904673][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.914296][T10888] fuse: fd is not a fuse device [ 814.920613][ T5704] tipc: Node number set to 2886997007 [ 815.959273][T10400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 817.968137][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.928905][T10400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 819.881787][T10400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.271343][T10383] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 821.291173][T10934] fuse: fd is not a fuse device [ 826.341113][T10383] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 826.341333][T10383] Bluetooth: hci4: Injecting HCI hardware error event [ 826.347112][T10383] Bluetooth: hci4: hardware error 0x00 [ 826.555245][T10381] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 826.716172][T10381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 826.748503][T10381] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 826.903077][T10381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 826.924200][T10381] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 826.983768][T10381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 826.985231][T10954] 9pnet_fd: Insufficient options for proto=fd [ 826.992402][T10381] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 827.072422][T10381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.288855][T10400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.734159][T10383] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 830.862686][T10400] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.837622][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.856619][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.836810][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.843396][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.222937][T11011] 9p: Bad value for 'rfdno' [ 834.789854][ T4902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 834.828011][ T4902] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 834.830445][ T4902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 834.832864][ T4902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 834.841254][ T4902] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 835.356862][T11027] fuse: fd is not a fuse device [ 837.193296][ T4902] Bluetooth: hci5: command tx timeout [ 839.516116][T10383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 840.543388][T10383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 840.689892][T10383] Bluetooth: hci5: command tx timeout [ 840.691721][T10383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 840.699126][T10383] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 840.699690][T10383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 842.263055][T11062] 9p: Bad value for 'rfdno' [ 842.705064][ T4902] Bluetooth: hci5: command tx timeout [ 842.867755][ T4902] Bluetooth: hci0: command tx timeout [ 849.035743][ T4902] Bluetooth: hci5: command tx timeout [ 849.035773][ T4902] Bluetooth: hci0: command tx timeout [ 853.040930][T10383] Bluetooth: hci0: command tx timeout [ 853.199001][T11107] 9p: Bad value for 'rfdno' [ 854.151139][T11118] fuse: fd is not a fuse device [ 859.130832][ T4902] Bluetooth: hci0: command tx timeout [ 859.905696][T11141] 9p: Bad value for 'rfdno' [ 859.945061][ T3410] bridge_slave_1: left allmulticast mode [ 859.945091][ T3410] bridge_slave_1: left promiscuous mode [ 859.945412][ T3410] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.948027][ T3410] bridge_slave_0: left allmulticast mode [ 859.948051][ T3410] bridge_slave_0: left promiscuous mode [ 859.948217][ T3410] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.562968][ T3410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.580496][ T3410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.663651][ T3410] bond0 (unregistering): Released all slaves [ 860.851620][T11138] syzkaller0: entered promiscuous mode [ 860.851643][T11138] syzkaller0: entered allmulticast mode [ 860.872576][T11142] tipc: Started in network mode [ 860.872602][T11142] tipc: Node identity de8748cd2dcb, cluster identity 4711 [ 860.872896][T11142] tipc: Enabled bearer , priority 0 [ 860.882782][T11148] tipc: Resetting bearer [ 860.913310][T11148] syzkaller0: tun_net_xmit 90 [ 861.013857][ C0] syzkaller0: tun_net_xmit 90 [ 861.052416][T11144] tipc: Resetting bearer [ 861.300110][T11144] tipc: Disabling bearer [ 861.477803][ T3410] hsr_slave_0: left promiscuous mode [ 861.478507][ T3410] hsr_slave_1: left promiscuous mode [ 861.480252][ T3410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.496541][ T3410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.877244][ T3410] team0 (unregistering): Port device team_slave_1 removed [ 862.943286][ T3410] team0 (unregistering): Port device team_slave_0 removed [ 864.450550][T11016] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.450651][T11016] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.450807][T11016] bridge_slave_0: entered allmulticast mode [ 864.452881][T11016] bridge_slave_0: entered promiscuous mode [ 864.473438][T11016] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.473642][T11016] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.473788][T11016] bridge_slave_1: entered allmulticast mode [ 864.479174][T11016] bridge_slave_1: entered promiscuous mode [ 865.036057][T11016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.160802][T11016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.628316][T11016] team0: Port device team_slave_0 added [ 865.750181][T11016] team0: Port device team_slave_1 added [ 866.016571][T11039] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.016660][T11039] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.016768][T11039] bridge_slave_0: entered allmulticast mode [ 866.018701][T11039] bridge_slave_0: entered promiscuous mode [ 866.255489][T11039] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.255579][T11039] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.255733][T11039] bridge_slave_1: entered allmulticast mode [ 866.268150][T11039] bridge_slave_1: entered promiscuous mode [ 866.283306][T11016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.283321][T11016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.283342][T11016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.369198][T11016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.369213][T11016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.369235][T11016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.665250][T11039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.695707][T11039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.698166][T11016] hsr_slave_0: entered promiscuous mode [ 868.714908][T11016] hsr_slave_1: entered promiscuous mode [ 868.721037][T11016] debugfs: 'hsr0' already exists in 'hsr' [ 868.721059][T11016] Cannot create hsr debugfs directory [ 868.728798][T11039] team0: Port device team_slave_0 added [ 868.731633][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 868.833306][T11039] team0: Port device team_slave_1 added [ 869.023693][T10383] Bluetooth: hci1: command 0x1003 tx timeout [ 869.024000][ T4902] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 869.505198][T11039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.505213][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.505235][T11039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.635257][T11039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.635272][T11039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.635294][T11039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.729236][T11278] FAULT_INJECTION: forcing a failure. [ 871.729236][T11278] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 871.729270][T11278] CPU: 0 UID: 0 PID: 11278 Comm: syz.0.1280 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 871.729296][T11278] Tainted: [L]=SOFTLOCKUP [ 871.729302][T11278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.729313][T11278] Call Trace: [ 871.729319][T11278] [ 871.729326][T11278] dump_stack_lvl+0xe8/0x150 [ 871.729361][T11278] should_fail_ex+0x46b/0x600 [ 871.729385][T11278] _copy_to_user+0x31/0xb0 [ 871.729420][T11278] ucma_create_id+0x2d5/0x370 [ 871.729513][T11278] ? __pfx_ucma_create_id+0x10/0x10 [ 871.729551][T11278] ucma_write+0x257/0x2f0 [ 871.729578][T11278] ? __pfx_ucma_write+0x10/0x10 [ 871.729602][T11278] ? security_file_permission+0x75/0x260 [ 871.729622][T11278] ? rw_verify_area+0x209/0x4d0 [ 871.729642][T11278] ? __pfx_ucma_write+0x10/0x10 [ 871.729666][T11278] vfs_write+0x29f/0xbb0 [ 871.729690][T11278] ? __pfx_vfs_write+0x10/0x10 [ 871.729709][T11278] ? __fget_files+0x2a/0x420 [ 871.729727][T11278] ? __fget_files+0x2a/0x420 [ 871.729742][T11278] ? __fget_files+0x3a8/0x420 [ 871.729757][T11278] ? __fget_files+0x2a/0x420 [ 871.729779][T11278] ksys_write+0x156/0x270 [ 871.729798][T11278] ? __pfx_ksys_write+0x10/0x10 [ 871.729824][T11278] do_syscall_64+0x166/0x520 [ 871.729845][T11278] ? trace_irq_disable+0x3b/0x140 [ 871.729867][T11278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.729885][T11278] ? clear_bhb_loop+0x70/0xc0 [ 871.729905][T11278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.729921][T11278] RIP: 0033:0x7fdb3330e159 [ 871.729939][T11278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.729954][T11278] RSP: 002b:00007fdb31566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 871.729973][T11278] RAX: ffffffffffffffda RBX: 00007fdb33595fa0 RCX: 00007fdb3330e159 [ 871.729985][T11278] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000003 [ 871.729996][T11278] RBP: 00007fdb333a5024 R08: 0000000000000000 R09: 0000000000000000 [ 871.730006][T11278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.730016][T11278] R13: 00007fdb33596038 R14: 00007fdb33595fa0 R15: 00007ffc70cd5c88 [ 871.730040][T11278] [ 871.807801][T11039] hsr_slave_0: entered promiscuous mode [ 871.812307][T11039] hsr_slave_1: entered promiscuous mode [ 871.823337][T11039] debugfs: 'hsr0' already exists in 'hsr' [ 871.823360][T11039] Cannot create hsr debugfs directory [ 875.345815][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.345869][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.889665][ T5249] 8021q: adding VLAN 0 to HW filter on device eth10 [ 877.597040][ T3410] bridge_slave_1: left allmulticast mode [ 877.597069][ T3410] bridge_slave_1: left promiscuous mode [ 877.597369][ T3410] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.639892][ T3410] bridge_slave_0: left allmulticast mode [ 877.639922][ T3410] bridge_slave_0: left promiscuous mode [ 877.640134][ T3410] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.291578][ T3410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.298560][ T3410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.301135][ T3410] bond0 (unregistering): Released all slaves [ 885.217964][ T3410] hsr_slave_0: left promiscuous mode [ 885.223094][ T3410] hsr_slave_1: left promiscuous mode [ 885.225785][ T3410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.230976][ T3410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.379528][T11394] overlayfs: failed to clone upperpath [ 885.631960][T11400] fuse: Unknown parameter 'group_i00000000000000000000' [ 886.755627][ T3410] team0 (unregistering): Port device team_slave_1 removed [ 886.830523][ T3410] team0 (unregistering): Port device team_slave_0 removed [ 887.902873][T11418] fuse: fd is not a fuse device [ 890.507770][T11452] fuse: Bad value for 'fd' [ 890.678428][T11454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1338'. [ 892.281092][T11477] FAULT_INJECTION: forcing a failure. [ 892.281092][T11477] name failslab, interval 1, probability 0, space 0, times 0 [ 892.281126][T11477] CPU: 0 UID: 0 PID: 11477 Comm: syz.0.1343 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 892.281150][T11477] Tainted: [L]=SOFTLOCKUP [ 892.281156][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 892.281166][T11477] Call Trace: [ 892.281173][T11477] [ 892.281180][T11477] dump_stack_lvl+0xe8/0x150 [ 892.281211][T11477] should_fail_ex+0x46b/0x600 [ 892.281232][T11477] ? bpf_fs_alloc_inode+0x2c/0x120 [ 892.281253][T11477] should_failslab+0xa8/0x100 [ 892.281280][T11477] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 892.281302][T11477] ? __raw_spin_lock_init+0x45/0x100 [ 892.281320][T11477] ? bpf_fs_alloc_inode+0x2c/0x120 [ 892.281342][T11477] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 892.281360][T11477] bpf_fs_alloc_inode+0x2c/0x120 [ 892.281378][T11477] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 892.281394][T11477] alloc_inode+0x6a/0x1b0 [ 892.281421][T11477] new_inode+0x1f/0x170 [ 892.281440][T11477] bpf_fill_super+0x1e9/0xce0 [ 892.281462][T11477] ? __pfx_set_anon_super_fc+0x10/0x10 [ 892.281482][T11477] ? __pfx_bpf_fill_super+0x10/0x10 [ 892.281508][T11477] ? rcu_is_watching+0x16/0xb0 [ 892.281532][T11477] ? cap_capable+0x123/0x460 [ 892.281549][T11477] ? __pfx_bpf_fill_super+0x10/0x10 [ 892.281570][T11477] get_tree_nodev+0xbb/0x150 [ 892.281598][T11477] vfs_get_tree+0x92/0x2a0 [ 892.281619][T11477] vfs_cmd_create+0xa2/0x200 [ 892.281646][T11477] __se_sys_fsconfig+0x6bf/0x810 [ 892.281674][T11477] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 892.281700][T11477] ? rcu_is_watching+0x16/0xb0 [ 892.281730][T11477] ? __x64_sys_fsconfig+0x20/0xc0 [ 892.281755][T11477] do_syscall_64+0x166/0x520 [ 892.281775][T11477] ? trace_irq_disable+0x3b/0x140 [ 892.281795][T11477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.281812][T11477] ? clear_bhb_loop+0x70/0xc0 [ 892.281832][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.281856][T11477] RIP: 0033:0x7fdb3330e159 [ 892.281871][T11477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.281886][T11477] RSP: 002b:00007fdb31566028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 892.281904][T11477] RAX: ffffffffffffffda RBX: 00007fdb33595fa0 RCX: 00007fdb3330e159 [ 892.281916][T11477] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 892.281926][T11477] RBP: 00007fdb333a5024 R08: 0000000000000000 R09: 0000000000000000 [ 892.281937][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.281947][T11477] R13: 00007fdb33596038 R14: 00007fdb33595fa0 R15: 00007ffc70cd5c88 [ 892.281972][T11477] [ 892.488442][T11479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1344'. [ 893.299846][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1349'. [ 894.292301][T11511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1350'. [ 896.525199][T10383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 896.605027][T10383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 896.609579][T10383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 896.610356][T10383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 896.611635][T10383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 897.901085][T10383] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 897.937267][T10383] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 897.943189][T10383] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 897.963195][T10383] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 897.977865][T10383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 898.705373][ T4902] Bluetooth: hci1: command tx timeout [ 900.112973][T11587] fuse: Unknown parameter 'group_id00000000000000000000' [ 900.149440][ T4902] Bluetooth: hci5: command tx timeout [ 900.341638][T11594] binder: 11592:11594 ioctl c0306201 0 returned -14 [ 900.784483][ T4902] Bluetooth: hci1: command tx timeout [ 902.118488][T11631] fuse: fd is not a fuse device [ 902.227982][ T4902] Bluetooth: hci5: command tx timeout [ 902.865373][ T4902] Bluetooth: hci1: command tx timeout [ 904.303637][ T4902] Bluetooth: hci5: command tx timeout [ 904.521660][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 904.553277][ T48] IPVS: starting estimator thread 0... [ 904.639370][T11672] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 904.704288][T11670] IPVS: using max 11 ests per chain, 26400 per kthread [ 904.836585][T11664] FAULT_INJECTION: forcing a failure. [ 904.836585][T11664] name failslab, interval 1, probability 0, space 0, times 0 [ 904.836619][T11664] CPU: 0 UID: 0 PID: 11664 Comm: syz.0.1380 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 904.836642][T11664] Tainted: [L]=SOFTLOCKUP [ 904.836649][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 904.836658][T11664] Call Trace: [ 904.836665][T11664] [ 904.836673][T11664] dump_stack_lvl+0xe8/0x150 [ 904.836703][T11664] should_fail_ex+0x46b/0x600 [ 904.836728][T11664] should_failslab+0xa8/0x100 [ 904.836753][T11664] ? do_getname+0x2e/0x250 [ 904.836777][T11664] kmem_cache_alloc_noprof+0x9e/0x690 [ 904.836799][T11664] ? do_getname+0x2e/0x250 [ 904.836828][T11664] do_getname+0x2e/0x250 [ 904.836850][T11664] ? getname_flags+0x11/0x20 [ 904.836879][T11664] do_sys_openat2+0xcc/0x200 [ 904.836903][T11664] ? __se_sys_futex+0x3a8/0x450 [ 904.836954][T11664] ? __pfx_do_sys_openat2+0x10/0x10 [ 904.836983][T11664] ? rcu_is_watching+0x16/0xb0 [ 904.837011][T11664] __x64_sys_openat+0x138/0x170 [ 904.837047][T11664] do_syscall_64+0x166/0x520 [ 904.837066][T11664] ? trace_irq_disable+0x3b/0x140 [ 904.837088][T11664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.837105][T11664] ? clear_bhb_loop+0x70/0xc0 [ 904.837125][T11664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.837142][T11664] RIP: 0033:0x7fdb332ce98e [ 904.837157][T11664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 904.837171][T11664] RSP: 002b:00007fdb31544ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 904.837189][T11664] RAX: ffffffffffffffda RBX: 00007fdb315456c0 RCX: 00007fdb332ce98e [ 904.837201][T11664] RDX: 0000000000000002 RSI: 00007fdb31544f90 RDI: ffffffffffffff9c [ 904.837212][T11664] RBP: 00007fdb333a5024 R08: 0000000000000000 R09: 0000000000000000 [ 904.837223][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.837233][T11664] R13: 00007fdb33596128 R14: 00007fdb33596090 R15: 00007ffc70cd5c88 [ 904.837258][T11664] [ 904.946764][ T4902] Bluetooth: hci1: command tx timeout [ 905.162445][ T3343] bridge_slave_1: left allmulticast mode [ 905.162475][ T3343] bridge_slave_1: left promiscuous mode [ 905.162665][ T3343] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.183184][ T3343] bridge_slave_0: left allmulticast mode [ 905.183214][ T3343] bridge_slave_0: left promiscuous mode [ 905.183412][ T3343] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.220533][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 905.757982][ T3343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 905.783544][ T3343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.801412][ T3343] bond0 (unregistering): Released all slaves [ 905.861052][T11677] lo: entered promiscuous mode [ 905.861416][T11677] tunl0: entered promiscuous mode [ 905.861734][T11677] gre0: entered promiscuous mode [ 905.862034][T11677] gretap0: entered promiscuous mode [ 905.863325][T11677] erspan0: entered promiscuous mode [ 905.867392][T11677] ip_vti0: entered promiscuous mode [ 905.867717][T11677] ip6_vti0: entered promiscuous mode [ 905.868003][T11677] sit0: entered promiscuous mode [ 905.875235][T11677] ip6tnl0: entered promiscuous mode [ 905.875549][T11677] ip6gre0: entered promiscuous mode [ 905.875857][T11677] syz_tun: entered promiscuous mode [ 905.876182][T11677] ip6gretap0: entered promiscuous mode [ 905.876476][T11677] bridge0: entered promiscuous mode [ 905.888039][T11677] vcan0: entered promiscuous mode [ 905.888862][T11677] bond0: entered promiscuous mode [ 905.914297][T11677] bond_slave_0: entered promiscuous mode [ 905.914551][T11677] bond_slave_1: entered promiscuous mode [ 905.915516][T11677] team0: entered promiscuous mode [ 905.915529][T11677] team_slave_0: entered promiscuous mode [ 905.915667][T11677] team_slave_1: entered promiscuous mode [ 905.925365][T11677] dummy0: entered promiscuous mode [ 905.925708][T11677] nlmon0: entered promiscuous mode [ 905.926056][T11677] batadv0: entered promiscuous mode [ 905.934417][T11677] vxcan0: entered promiscuous mode [ 905.934779][T11677] vxcan1: entered promiscuous mode [ 905.935148][T11677] veth0: entered promiscuous mode [ 905.935485][T11677] veth1: entered promiscuous mode [ 905.942024][T11677] wg0: entered promiscuous mode [ 905.942397][T11677] wg1: entered promiscuous mode [ 905.942730][T11677] wg2: entered promiscuous mode [ 905.943072][T11677] veth0_to_bridge: entered promiscuous mode [ 905.986435][T11677] veth1_to_bridge: entered promiscuous mode [ 905.998332][T11677] veth0_to_bond: entered promiscuous mode [ 905.999321][T11677] veth1_to_bond: entered promiscuous mode [ 906.011293][T11677] veth0_to_team: entered promiscuous mode [ 906.011827][T11677] veth1_to_team: entered promiscuous mode [ 906.012291][T11677] veth0_to_batadv: entered promiscuous mode [ 906.014283][T11677] batadv_slave_0: entered promiscuous mode [ 906.014623][T11677] veth1_to_batadv: entered promiscuous mode [ 906.014962][T11677] batadv_slave_1: entered promiscuous mode [ 906.015302][T11677] xfrm0: entered promiscuous mode [ 906.029309][T11677] veth0_to_hsr: entered promiscuous mode [ 906.029985][T11677] veth1_to_hsr: entered promiscuous mode [ 906.339430][ T3343] hsr_slave_0: left promiscuous mode [ 906.340108][ T3343] hsr_slave_1: left promiscuous mode [ 906.340942][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.341518][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.412155][ T4902] Bluetooth: hci5: command tx timeout [ 906.434234][T11694] fuse: Bad value for 'user_id' [ 906.434251][T11694] fuse: Bad value for 'user_id' [ 907.443114][ T3343] team0 (unregistering): Port device team_slave_1 removed [ 907.519493][ T3343] team0 (unregistering): Port device team_slave_0 removed [ 909.443686][T11538] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.443776][T11538] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.443918][T11538] bridge_slave_0: entered allmulticast mode [ 909.445974][T11538] bridge_slave_0: entered promiscuous mode [ 909.558283][T11538] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.558373][T11538] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.558524][T11538] bridge_slave_1: entered allmulticast mode [ 909.564593][T11538] bridge_slave_1: entered promiscuous mode [ 909.788925][T11562] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.789015][T11562] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.789167][T11562] bridge_slave_0: entered allmulticast mode [ 909.796522][T11562] bridge_slave_0: entered promiscuous mode [ 909.943810][T11562] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.943909][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.944063][T11562] bridge_slave_1: entered allmulticast mode [ 909.952463][T11562] bridge_slave_1: entered promiscuous mode [ 910.033094][T11538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.143105][T11745] fuse: Bad value for 'user_id' [ 910.143122][T11745] fuse: Bad value for 'user_id' [ 910.179087][T11538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.494461][T11562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.636780][T11562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.657020][T11538] team0: Port device team_slave_0 added [ 910.794269][T11538] team0: Port device team_slave_1 added [ 912.155557][T11562] team0: Port device team_slave_0 added [ 912.250163][T11562] team0: Port device team_slave_1 added [ 912.250760][T11538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.250771][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.250792][T11538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.341007][T11538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.341023][T11538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.341044][T11538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.572732][T11562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.572748][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.572769][T11562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.643978][T11562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.644000][T11562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.644022][T11562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.907029][T11538] hsr_slave_0: entered promiscuous mode [ 912.910340][T11538] hsr_slave_1: entered promiscuous mode [ 912.912507][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 913.261541][T11783] fuse: Bad value for 'fd' [ 913.763554][ T1505] IPVS: starting estimator thread 0... [ 913.785960][T11562] hsr_slave_0: entered promiscuous mode [ 913.787843][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 913.788795][T11562] hsr_slave_1: entered promiscuous mode [ 913.790731][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 913.796936][T11562] debugfs: 'hsr0' already exists in 'hsr' [ 913.796956][T11562] Cannot create hsr debugfs directory [ 913.798132][T11796] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 914.164615][T11795] IPVS: using max 11 ests per chain, 26400 per kthread [ 914.633743][ T5595] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 914.784298][ T5595] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 914.786930][ T5595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.093416][ T4902] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 915.426356][ T5595] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, d2:2a:b7:51:15:12 [ 917.446860][ T5595] usb 1-1: USB disconnect, device number 14 [ 917.544869][ T5595] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 918.226917][T11845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.354336][ T5249] 8021q: adding VLAN 0 to HW filter on device eth10 [ 920.727660][ T3343] bridge_slave_1: left allmulticast mode [ 920.727690][ T3343] bridge_slave_1: left promiscuous mode [ 920.727880][ T3343] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.748443][ T3343] bridge_slave_0: left allmulticast mode [ 920.748471][ T3343] bridge_slave_0: left promiscuous mode [ 920.748654][ T3343] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.280329][ T3343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.286218][ T3343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.296868][ T3343] bond0 (unregistering): Released all slaves [ 922.925823][ T3343] hsr_slave_0: left promiscuous mode [ 922.926438][ T3343] hsr_slave_1: left promiscuous mode [ 922.927388][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.944252][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.626804][T11899] hub 8-0:1.0: USB hub found [ 927.633128][T11899] hub 8-0:1.0: 1 port detected [ 933.821751][ T3343] team0 (unregistering): Port device team_slave_1 removed [ 933.929191][ T3343] team0 (unregistering): Port device team_slave_0 removed [ 936.795320][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.795375][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.123594][ T5704] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 939.274349][ T5704] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 939.278423][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.122379][ T5704] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 6e:ca:0d:f9:a6:00 [ 946.256575][T12033] hub 8-0:1.0: USB hub found [ 946.258706][T12033] hub 8-0:1.0: 1 port detected [ 946.499787][ T10] usb 1-1: USB disconnect, device number 15 [ 946.502526][ T10] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 956.078994][T12105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.793893][T10383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 962.844101][T10383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 962.847278][T10383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 962.848611][T10383] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 962.849206][T10383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 963.644521][T10383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 963.691912][T10383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 963.693142][T10383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 963.700382][T10383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 963.705914][T10383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 963.873274][ T37] audit: type=1326 audit(2000000519.340:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12159 comm="syz.1.1494" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd2c22e159 code=0x0 [ 964.857647][T12179] binder: 12178:12179 ioctl 4018620d 0 returned -22 [ 965.109729][T10383] Bluetooth: hci0: command tx timeout [ 969.717896][T10383] Bluetooth: hci1: command tx timeout [ 969.718442][T10383] Bluetooth: hci0: command tx timeout [ 971.750934][ T4902] Bluetooth: hci0: command tx timeout [ 971.750968][ T4902] Bluetooth: hci1: command tx timeout [ 971.783108][T12223] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1507'. [ 972.033211][T12228] binder: 12227:12228 ioctl 4018620d 0 returned -22 [ 976.722092][T10383] Bluetooth: hci1: command tx timeout [ 976.722123][T10383] Bluetooth: hci0: command tx timeout [ 978.784244][ T4902] Bluetooth: hci1: command tx timeout [ 979.143615][ T1942] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 979.294339][ T1942] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 979.295437][ T1942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.878768][ T1942] net1080 2-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, ce:39:0d:53:47:d3 [ 989.999175][ T5704] usb 2-1: USB disconnect, device number 16 [ 990.002025][ T5704] net1080 2-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 991.378350][ T37] audit: type=1800 audit(2000000546.850:80): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1528" name="ipv4_address" dev="configfs" ino=32991 res=0 errno=0 [ 991.380785][ T37] audit: type=1800 audit(2000000546.850:81): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1528" name="ipv4_port" dev="configfs" ino=32992 res=0 errno=0 [ 991.381357][ T37] audit: type=1800 audit(2000000546.850:82): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1528" name="num" dev="configfs" ino=32993 res=0 errno=0 [ 991.456796][ T37] audit: type=1800 audit(2000000546.930:83): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1528" name="ipv4_address" dev="configfs" ino=32994 res=0 errno=0 [ 996.251068][ T3334] bridge_slave_1: left allmulticast mode [ 996.251116][ T3334] bridge_slave_1: left promiscuous mode [ 996.251318][ T3334] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.263980][ T3334] bridge_slave_0: left allmulticast mode [ 996.264009][ T3334] bridge_slave_0: left promiscuous mode [ 996.265119][ T3334] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.571021][T12354] fuse: Bad value for 'fd' [ 996.742952][ T3334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.738158][ T3334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.747510][ T3334] bond0 (unregistering): Released all slaves [ 998.245679][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.245733][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.527344][ T3334] hsr_slave_0: left promiscuous mode [ 1000.527985][ T3334] hsr_slave_1: left promiscuous mode [ 1000.528702][ T3334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.529277][ T3334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.239119][T12385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1543'. [ 1003.726620][ T3334] team0 (unregistering): Port device team_slave_1 removed [ 1003.759624][ T3334] team0 (unregistering): Port device team_slave_0 removed [ 1008.264551][T12142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.264718][T12142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.268562][T12142] bridge_slave_0: entered allmulticast mode [ 1008.274720][T12142] bridge_slave_0: entered promiscuous mode [ 1008.615376][T12142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.615466][T12142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.615621][T12142] bridge_slave_1: entered allmulticast mode [ 1008.623316][T12142] bridge_slave_1: entered promiscuous mode [ 1008.727814][T12417] hub 8-0:1.0: USB hub found [ 1008.988426][T12417] hub 8-0:1.0: 1 port detected [ 1009.928413][T12142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.983343][T12142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.921523][T12142] team0: Port device team_slave_0 added [ 1010.938421][T12142] team0: Port device team_slave_1 added [ 1010.974590][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.974705][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.974909][T12158] bridge_slave_0: entered allmulticast mode [ 1010.982480][T12158] bridge_slave_0: entered promiscuous mode [ 1011.249448][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.249539][T12158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.249687][T12158] bridge_slave_1: entered allmulticast mode [ 1011.266366][T12158] bridge_slave_1: entered promiscuous mode [ 1011.494575][T12142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.494591][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.494611][T12142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.497349][T12142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.497365][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.505089][T12142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.069246][T12158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.077896][T12158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.437335][T12158] team0: Port device team_slave_0 added [ 1020.046595][T12158] team0: Port device team_slave_1 added [ 1020.213563][T12158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.213579][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.213599][T12158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.233327][T12158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.233342][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.233363][T12158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.828502][T12483] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1567'. [ 1022.359012][T10383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1022.395343][T10383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1022.399391][T10383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1022.401439][T10383] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1022.404067][T10383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1022.578543][T12158] hsr_slave_0: entered promiscuous mode [ 1022.584374][T12158] hsr_slave_1: entered promiscuous mode [ 1022.860519][T12514] hub 8-0:1.0: USB hub found [ 1023.017007][T12514] hub 8-0:1.0: 1 port detected [ 1028.997198][ T4902] Bluetooth: hci0: command tx timeout [ 1029.290868][ T4902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1029.350210][ T4902] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1029.357414][ T4902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1029.368252][ T4902] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1029.380029][ T4902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1030.799089][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1031.023690][ T4902] Bluetooth: hci0: command tx timeout [ 1031.634823][ T4902] Bluetooth: hci1: command tx timeout [ 1033.103590][ T4902] Bluetooth: hci0: command tx timeout [ 1033.373606][ T3334] bridge_slave_1: left allmulticast mode [ 1033.373637][ T3334] bridge_slave_1: left promiscuous mode [ 1033.373840][ T3334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.383250][ T3334] bridge_slave_0: left allmulticast mode [ 1033.383280][ T3334] bridge_slave_0: left promiscuous mode [ 1033.384179][ T3334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.736994][ T4902] Bluetooth: hci1: command tx timeout [ 1035.022869][ T3334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.209048][ T4902] Bluetooth: hci0: command tx timeout [ 1035.235831][ T3334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.599721][ T3334] bond0 (unregistering): Released all slaves [ 1035.749215][ T4902] Bluetooth: hci1: command tx timeout [ 1035.806555][ T3334] hsr_slave_0: left promiscuous mode [ 1035.814567][ T3334] hsr_slave_1: left promiscuous mode [ 1035.815526][ T3334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.950910][ T3334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.821001][T12621] hub 8-0:1.0: USB hub found [ 1037.824102][ T4902] Bluetooth: hci1: command tx timeout [ 1037.830624][ T3334] team0 (unregistering): Port device team_slave_1 removed [ 1037.846378][T12621] hub 8-0:1.0: 1 port detected [ 1037.892461][ T3334] team0 (unregistering): Port device team_slave_0 removed [ 1038.479629][ T5249] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1040.527798][ T12] bridge_slave_1: left allmulticast mode [ 1040.527828][ T12] bridge_slave_1: left promiscuous mode [ 1040.528035][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.531341][ T12] bridge_slave_0: left allmulticast mode [ 1040.531367][ T12] bridge_slave_0: left promiscuous mode [ 1040.531547][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.630385][ T12] bridge_slave_1: left allmulticast mode [ 1040.630418][ T12] bridge_slave_1: left promiscuous mode [ 1040.630744][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.773174][ T12] bridge_slave_0: left allmulticast mode [ 1040.773204][ T12] bridge_slave_0: left promiscuous mode [ 1040.773528][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.958431][T12662] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1604'. [ 1041.996446][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.023759][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.051242][ T12] bond0 (unregistering): Released all slaves [ 1043.131639][T12688] netlink: 'syz.0.1610': attribute type 29 has an invalid length. [ 1043.313299][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.331407][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.343925][ T12] bond0 (unregistering): Released all slaves [ 1043.347363][T12692] netlink: 'syz.3.1611': attribute type 23 has an invalid length. [ 1043.386370][ T5249] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1043.416337][T12689] netlink: 'syz.0.1610': attribute type 29 has an invalid length. [ 1043.608676][T12690] netlink: 'syz.0.1610': attribute type 29 has an invalid length. [ 1044.337422][ T12] hsr_slave_0: left promiscuous mode [ 1044.340371][ T12] hsr_slave_1: left promiscuous mode [ 1044.341214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.430627][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.442222][T12702] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1614'. [ 1044.451159][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.472264][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.984874][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1045.062500][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1046.524727][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1046.586329][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1047.736200][ T5249] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1047.875239][T12503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.875329][T12503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.875471][T12503] bridge_slave_0: entered allmulticast mode [ 1047.881423][T12503] bridge_slave_0: entered promiscuous mode [ 1047.897109][T12503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.897197][T12503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.897343][T12503] bridge_slave_1: entered allmulticast mode [ 1047.906648][T12503] bridge_slave_1: entered promiscuous mode [ 1048.138173][T12739] lo: entered promiscuous mode [ 1048.138564][T12739] tunl0: entered promiscuous mode [ 1048.138917][T12739] gre0: entered promiscuous mode [ 1048.139195][T12739] gretap0: entered promiscuous mode [ 1048.139528][T12739] erspan0: entered promiscuous mode [ 1048.139836][T12739] ip_vti0: entered promiscuous mode [ 1048.140163][T12739] ip6_vti0: entered promiscuous mode [ 1048.140437][T12739] sit0: entered promiscuous mode [ 1048.150513][T12739] ip6tnl0: entered promiscuous mode [ 1048.153781][T12739] ip6gre0: entered promiscuous mode [ 1048.161130][T12739] syz_tun: entered promiscuous mode [ 1048.161472][T12739] ip6gretap0: entered promiscuous mode [ 1048.161855][T12739] bridge0: entered promiscuous mode [ 1048.162178][T12739] vcan0: entered promiscuous mode [ 1048.169996][T12739] bond0: entered promiscuous mode [ 1048.170016][T12739] bond_slave_0: entered promiscuous mode [ 1048.170249][T12739] bond_slave_1: entered promiscuous mode [ 1048.172649][T12741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.182609][T12739] team0: entered promiscuous mode [ 1048.182630][T12739] team_slave_0: entered promiscuous mode [ 1048.182778][T12739] team_slave_1: entered promiscuous mode [ 1048.183322][T12739] dummy0: entered promiscuous mode [ 1048.202149][T12739] nlmon0: entered promiscuous mode [ 1048.202628][T12739] batadv0: entered promiscuous mode [ 1048.202982][T12739] vxcan0: entered promiscuous mode [ 1048.212093][T12739] vxcan1: entered promiscuous mode [ 1048.212553][T12739] veth0: entered promiscuous mode [ 1048.212895][T12739] veth1: entered promiscuous mode [ 1048.213226][T12739] wg0: entered promiscuous mode [ 1048.217575][T12739] wg1: entered promiscuous mode [ 1048.218001][T12739] wg2: entered promiscuous mode [ 1048.218333][T12739] veth0_to_bridge: entered promiscuous mode [ 1048.226876][T12739] veth1_to_bridge: entered promiscuous mode [ 1048.227639][T12739] veth0_to_bond: entered promiscuous mode [ 1048.230672][T12739] veth1_to_bond: entered promiscuous mode [ 1048.231215][T12739] veth0_to_team: entered promiscuous mode [ 1048.241337][T12739] veth1_to_team: entered promiscuous mode [ 1048.249703][T12739] veth0_to_batadv: entered promiscuous mode [ 1048.250250][T12739] batadv_slave_0: entered promiscuous mode [ 1048.250647][T12739] veth1_to_batadv: entered promiscuous mode [ 1048.296600][T12739] batadv_slave_1: entered promiscuous mode [ 1048.296935][T12739] xfrm0: entered promiscuous mode [ 1048.297265][T12739] veth0_to_hsr: entered promiscuous mode [ 1048.297937][T12739] veth1_to_hsr: entered promiscuous mode [ 1048.313070][T12503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.410141][T12503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.430083][ T37] audit: type=1800 audit(2000000603.900:84): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1623" name="ipv4_address" dev="configfs" ino=34305 res=0 errno=0 [ 1048.445769][ T37] audit: type=1800 audit(2000000603.920:85): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1623" name="num" dev="configfs" ino=34310 res=0 errno=0 [ 1048.467276][ T37] audit: type=1800 audit(2000000603.940:86): pid=12744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1623" name="ipv4_address" dev="configfs" ino=34311 res=0 errno=0 [ 1048.572581][T12748] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1624'. [ 1048.837085][T12503] team0: Port device team_slave_0 added [ 1048.869342][T12503] team0: Port device team_slave_1 added [ 1049.309632][T12503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.309648][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.309668][T12503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.311555][T12503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.311567][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.311588][T12503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.014133][T12532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.014222][T12532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.014373][T12532] bridge_slave_0: entered allmulticast mode [ 1050.022042][T12532] bridge_slave_0: entered promiscuous mode [ 1050.066317][T12532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.066423][T12532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.066540][T12532] bridge_slave_1: entered allmulticast mode [ 1050.112213][T12532] bridge_slave_1: entered promiscuous mode [ 1050.558520][T12503] hsr_slave_0: entered promiscuous mode [ 1050.563092][T12503] hsr_slave_1: entered promiscuous mode [ 1050.581242][T12532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.601628][T12532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.080716][T12532] team0: Port device team_slave_0 added [ 1051.101681][ T37] audit: type=1800 audit(2000000606.570:87): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1633" name="ipv4_address" dev="configfs" ino=34514 res=0 errno=0 [ 1051.110957][ T37] audit: type=1800 audit(2000000606.580:88): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1633" name="num" dev="configfs" ino=34515 res=0 errno=0 [ 1051.120734][ T37] audit: type=1800 audit(2000000606.590:89): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1633" name="ipv4_address" dev="configfs" ino=34516 res=0 errno=0 [ 1051.129340][T12532] team0: Port device team_slave_1 added [ 1051.241752][T12788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1634'. [ 1051.241822][T12788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1634'. [ 1051.530175][T12788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1634'. [ 1051.530267][T12788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1634'. [ 1051.773050][T12532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.773066][T12532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.773087][T12532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.820211][T12532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.820226][T12532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.820247][T12532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.905585][ T5249] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1051.963855][T12801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.428430][T12532] hsr_slave_0: entered promiscuous mode [ 1052.429351][T12532] hsr_slave_1: entered promiscuous mode [ 1052.431610][T12532] debugfs: 'hsr0' already exists in 'hsr' [ 1052.431630][T12532] Cannot create hsr debugfs directory [ 1058.238721][ T37] audit: type=1800 audit(2000000613.710:90): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1643" name="ipv4_address" dev="configfs" ino=34654 res=0 errno=0 [ 1058.260148][ T37] audit: type=1800 audit(2000000613.730:91): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1643" name="num" dev="configfs" ino=34655 res=0 errno=0 [ 1058.307305][ T37] audit: type=1800 audit(2000000613.780:92): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1643" name="ipv4_address" dev="configfs" ino=34656 res=0 errno=0 [ 1058.892283][T12839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1647'. [ 1058.892350][T12839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1647'. [ 1059.666790][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.666843][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.140292][ T5249] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1065.231771][ T37] audit: type=1800 audit(2000000620.700:93): pid=12870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1654" name="num" dev="configfs" ino=34814 res=0 errno=0 [ 1065.263121][ T37] audit: type=1800 audit(2000000620.730:94): pid=12870 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1654" name="ipv4_address" dev="configfs" ino=34816 res=0 errno=0 [ 1071.223260][ T5249] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1071.989301][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1667'. [ 1078.082003][ T37] audit: type=1800 audit(2000000633.550:95): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1673" name="num" dev="configfs" ino=34978 res=0 errno=0 [ 1078.092567][ T37] audit: type=1800 audit(2000000633.560:96): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1673" name="ipv4_address" dev="configfs" ino=34979 res=0 errno=0 [ 1078.892063][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1678'. [ 1084.260287][T10383] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1084.283243][T10383] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1084.286895][T10383] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1084.289110][T10383] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1084.299538][T10383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1086.368607][T10383] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1086.387510][T11043] Bluetooth: hci5: command tx timeout [ 1086.426851][T10383] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1086.439271][T10383] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1086.442891][T10383] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1086.445058][T10383] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1088.464363][ T4902] Bluetooth: hci5: command tx timeout [ 1088.544488][ T4902] Bluetooth: hci6: command tx timeout [ 1089.005653][ T37] audit: type=1800 audit(2000000644.480:97): pid=13044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1692" name="ipv4_address" dev="configfs" ino=35297 res=0 errno=0 [ 1089.012961][ T37] audit: type=1800 audit(2000000644.480:98): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1692" name="num" dev="configfs" ino=35298 res=0 errno=0 [ 1089.030604][ T37] audit: type=1800 audit(2000000644.500:99): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1692" name="ipv4_address" dev="configfs" ino=35299 res=0 errno=0 [ 1090.678000][ T4902] Bluetooth: hci5: command tx timeout [ 1090.678027][ T4902] Bluetooth: hci6: command tx timeout [ 1091.060729][T13076] hub 8-0:1.0: USB hub found [ 1091.060995][T13076] hub 8-0:1.0: 1 port detected [ 1091.721490][ T3343] bridge_slave_1: left allmulticast mode [ 1091.721524][ T3343] bridge_slave_1: left promiscuous mode [ 1091.721726][ T3343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.750882][ T3343] bridge_slave_0: left allmulticast mode [ 1091.750912][ T3343] bridge_slave_0: left promiscuous mode [ 1091.751103][ T3343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.969271][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 1092.515578][ T3343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.626754][ T3343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.694122][ T3343] bond0 (unregistering): Released all slaves [ 1092.703543][T10383] Bluetooth: hci6: command tx timeout [ 1092.703585][T10383] Bluetooth: hci5: command tx timeout [ 1093.114643][T13124] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1719'. [ 1093.327373][T13124] bridge_slave_0: left allmulticast mode [ 1093.327579][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.328696][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'. [ 1093.351243][T13124] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1093.528647][ T37] audit: type=1326 audit(2000000649.000:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13116 comm="syz.1.1717" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd2c22e159 code=0x7fc00000 [ 1093.834066][ T3343] hsr_slave_0: left promiscuous mode [ 1093.848765][ T3343] hsr_slave_1: left promiscuous mode [ 1093.851222][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.860682][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.786199][ T4902] Bluetooth: hci6: command tx timeout [ 1094.848551][ T3343] team0 (unregistering): Port device team_slave_1 removed [ 1094.940142][ T3343] team0 (unregistering): Port device team_slave_0 removed [ 1095.201643][T13164] netlink: 'syz.3.1729': attribute type 7 has an invalid length. [ 1095.201670][T13164] netlink: 'syz.3.1729': attribute type 8 has an invalid length. [ 1097.710286][T13202] kAFS: unable to lookup cell 'syz0' [ 1098.192032][T12969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.192122][T12969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.192273][T12969] bridge_slave_0: entered allmulticast mode [ 1098.202054][T12969] bridge_slave_0: entered promiscuous mode [ 1098.222728][T12969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.222817][T12969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.222971][T12969] bridge_slave_1: entered allmulticast mode [ 1098.247421][T12969] bridge_slave_1: entered promiscuous mode [ 1099.445340][T12969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.639182][T12969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1101.738231][T13274] hub 8-0:1.0: USB hub found [ 1101.738606][T13274] hub 8-0:1.0: 1 port detected [ 1102.430764][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1758'. [ 1103.341936][T13285] syz_tun (unregistering): left allmulticast mode [ 1103.460909][T12969] team0: Port device team_slave_0 added [ 1103.506410][T12969] team0: Port device team_slave_1 added [ 1103.889091][T13001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.889196][T13001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.889321][T13001] bridge_slave_0: entered allmulticast mode [ 1103.891192][T13001] bridge_slave_0: entered promiscuous mode [ 1103.904330][T12969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.904345][T12969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.904365][T12969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.122305][T13001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.122438][T13001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.122811][T13001] bridge_slave_1: entered allmulticast mode [ 1104.132997][T13001] bridge_slave_1: entered promiscuous mode [ 1104.148972][T12969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.148987][T12969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.149008][T12969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.618239][T13001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.965407][T13001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.137040][T12969] hsr_slave_0: entered promiscuous mode [ 1105.144038][T12969] hsr_slave_1: entered promiscuous mode [ 1105.146578][T12969] debugfs: 'hsr0' already exists in 'hsr' [ 1105.146602][T12969] Cannot create hsr debugfs directory [ 1105.235150][T13001] team0: Port device team_slave_0 added [ 1105.253198][T13001] team0: Port device team_slave_1 added [ 1105.724065][T13001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.724082][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.724103][T13001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.781621][T13001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.781636][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.781657][T13001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.912462][T13324] CIFS: Attempting to mount //127.0.0.1/share [ 1106.969575][T13324] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1106.969763][T13324] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1107.490887][T13340] hub 8-0:1.0: USB hub found [ 1107.491238][T13340] hub 8-0:1.0: 1 port detected [ 1108.652755][T13001] hsr_slave_0: entered promiscuous mode [ 1108.657467][T13001] hsr_slave_1: entered promiscuous mode [ 1108.661216][T13001] debugfs: 'hsr0' already exists in 'hsr' [ 1108.661237][T13001] Cannot create hsr debugfs directory [ 1110.330492][ T3343] bridge_slave_1: left allmulticast mode [ 1110.330524][ T3343] bridge_slave_1: left promiscuous mode [ 1110.330724][ T3343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.489333][ T3343] bridge_slave_0: left allmulticast mode [ 1110.489364][ T3343] bridge_slave_0: left promiscuous mode [ 1110.489638][ T3343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.015538][ T3343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.046872][ T3343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.067368][ T3343] bond0 (unregistering): Released all slaves [ 1112.367616][ T3343] hsr_slave_0: left promiscuous mode [ 1112.368256][ T3343] hsr_slave_1: left promiscuous mode [ 1112.368974][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.369547][ T3343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.112461][ T3343] team0 (unregistering): Port device team_slave_1 removed [ 1113.189363][ T3343] team0 (unregistering): Port device team_slave_0 removed [ 1117.241405][T13463] kAFS: unable to lookup cell 'syz0' [ 1119.525530][ T37] audit: type=1800 audit(2000000675.000:101): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1811" name="num" dev="configfs" ino=36883 res=0 errno=0 [ 1119.557899][ T37] audit: type=1800 audit(2000000675.030:102): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1811" name="ipv4_port" dev="configfs" ino=36886 res=0 errno=0 [ 1119.569893][ T37] audit: type=1800 audit(2000000675.040:103): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1811" name="num" dev="configfs" ino=36887 res=0 errno=0 [ 1121.113236][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.113291][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.533759][T12969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1124.293316][T12969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1124.339063][T12969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1124.460544][T12969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1125.167298][T12969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1125.192428][T12969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1125.194485][T13551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1125.201464][T12969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1125.261110][T12969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1126.052030][T13561] trusted_key: encrypted_key: insufficient parameters specified [ 1126.928687][T13571] netlink: 'syz.3.1835': attribute type 7 has an invalid length. [ 1126.928705][T13571] netlink: 'syz.3.1835': attribute type 8 has an invalid length. [ 1126.928715][T13571] netlink: 'syz.3.1835': attribute type 15 has an invalid length. [ 1127.245078][T13573] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1836'. [ 1127.476236][T13001] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1127.508366][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1127.897159][T13001] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1128.031492][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1128.071737][T13001] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1128.244484][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1128.281247][T13001] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1128.300827][T13001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1129.748802][T12969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.851702][T13606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.938469][T13609] fuse: Unknown parameter 'group_i00000000000000000000' [ 1130.007477][T12969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.103148][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.104117][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.137843][ T1505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.169809][ T1505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.298223][T13001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.602271][T13001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.677869][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.677965][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.741708][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.741806][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.100481][T13623] Config c/1 of g_uac2 needs at least one function. [ 1132.241190][T13623] udc usbip-vudc.0: failed to start g_uac2: -22 [ 1132.241216][T13623] configfs-gadget.g_uac2 gadget.32: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 1132.397965][ T4902] Bluetooth: hci6: command tx timeout [ 1132.669205][T13623] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 1132.735381][T13652] lo: entered promiscuous mode [ 1132.761921][T13652] tunl0: entered promiscuous mode [ 1132.778166][T13652] gre0: entered promiscuous mode [ 1132.915563][T13652] gretap0: entered promiscuous mode [ 1132.978819][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 1133.036835][T13652] erspan0: entered promiscuous mode [ 1133.179244][T13652] ip_vti0: entered promiscuous mode [ 1133.196570][T13652] ip6_vti0: entered promiscuous mode [ 1133.250489][T13652] sit0: entered promiscuous mode [ 1133.276913][T13652] ip6tnl0: entered promiscuous mode [ 1133.308699][T13652] ip6gre0: entered promiscuous mode [ 1133.388202][T13652] syz_tun: entered promiscuous mode [ 1133.565969][T13652] ip6gretap0: entered promiscuous mode [ 1133.647114][T13652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.647379][T13652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.649043][T13652] bridge0: entered promiscuous mode [ 1133.754371][T13667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1134.557766][T12969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.763686][T13702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'. [ 1135.844876][T13001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.850148][T13703] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1864'. [ 1139.753346][T12969] veth0_vlan: entered promiscuous mode [ 1140.762455][T12969] veth1_vlan: entered promiscuous mode [ 1141.865909][T12969] veth0_macvtap: entered promiscuous mode [ 1141.988925][T12969] veth1_macvtap: entered promiscuous mode [ 1143.059167][T12969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.062641][T13001] veth0_vlan: entered promiscuous mode [ 1143.124179][T12969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.352009][T13001] veth1_vlan: entered promiscuous mode [ 1144.216823][ T1013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.239181][T13001] veth0_macvtap: entered promiscuous mode [ 1144.309988][T13001] veth1_macvtap: entered promiscuous mode [ 1144.617375][T13001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1144.723183][T13001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.093805][ T3343] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.164655][ T3334] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.164696][ T3334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.164724][ T3334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.164751][ T3334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.164778][ T3334] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.164806][ T3334] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.884714][ T4902] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1146.641502][T10383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1146.682198][T10383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1146.689488][T10383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1146.691471][T10383] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1146.697558][T10383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1147.402403][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 1148.628919][T10383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1148.809841][T13791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1148.820347][T13791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1148.832721][T13791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1148.839606][T13791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1148.867793][ T4902] Bluetooth: hci0: command tx timeout [ 1149.096626][T13794] hub 8-0:1.0: USB hub found [ 1149.096860][T13794] hub 8-0:1.0: 1 port detected [ 1149.914717][T13806] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1891'. [ 1150.177407][ T1013] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.084507][T13791] Bluetooth: hci0: command tx timeout [ 1151.084564][T13791] Bluetooth: hci1: command tx timeout [ 1152.284793][ T1013] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.680933][T13839] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1901'. [ 1153.055200][ T5704] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1153.103807][ T4902] Bluetooth: hci1: command tx timeout [ 1153.103837][ T4902] Bluetooth: hci0: command tx timeout [ 1153.156329][ T1013] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.224256][ T5704] usb 1-1: New USB device found, idVendor=056a, idProduct=009a, bcdDevice= 0.00 [ 1153.225278][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1153.225317][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.259276][ T5704] usb 1-1: config 0 descriptor?? [ 1153.872960][ T5704] wacom 0003:056A:009A.0004: unknown main item tag 0x3 [ 1153.872990][ T5704] wacom 0003:056A:009A.0004: unknown main item tag 0x0 [ 1153.873011][ T5704] wacom 0003:056A:009A.0004: collection stack underflow [ 1153.873029][ T5704] wacom 0003:056A:009A.0004: item 0 4 0 12 parsing failed [ 1153.875438][ T5704] wacom 0003:056A:009A.0004: parse failed [ 1153.875542][ T5704] wacom 0003:056A:009A.0004: probe with driver wacom failed with error -22 [ 1154.005964][ T5704] usb 1-1: USB disconnect, device number 16 [ 1154.266315][ T1013] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.394945][T13855] netlink: 'syz.1.1905': attribute type 39 has an invalid length. [ 1159.319483][T13864] hub 8-0:1.0: USB hub found [ 1159.322263][T13864] hub 8-0:1.0: 1 port detected [ 1159.332233][T13791] Bluetooth: hci0: command tx timeout [ 1159.332261][T13791] Bluetooth: hci1: command tx timeout [ 1159.675579][T13876] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1911'. [ 1163.420893][T13791] Bluetooth: hci1: command tx timeout [ 1166.746423][ T1013] bridge_slave_1: left allmulticast mode [ 1166.746455][ T1013] bridge_slave_1: left promiscuous mode [ 1166.746672][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.769069][ T1013] bridge_slave_0: left allmulticast mode [ 1166.769099][ T1013] bridge_slave_0: left promiscuous mode [ 1166.813512][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.017445][T13915] jffs2: notice: (13915) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1167.959151][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 1168.286036][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.292535][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.298329][ T1013] bond0 (unregistering): Released all slaves [ 1170.578938][ T1013] hsr_slave_0: left promiscuous mode [ 1172.573190][ T1013] hsr_slave_1: left promiscuous mode [ 1172.574172][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.574193][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.161603][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.161628][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.606975][ T1013] veth1_macvtap: left promiscuous mode [ 1173.607029][ T1013] veth0_macvtap: left promiscuous mode [ 1173.607149][ T1013] veth1_vlan: left promiscuous mode [ 1173.607469][ T1013] veth0_vlan: left promiscuous mode [ 1174.693575][ T5704] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1174.696685][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1941'. [ 1174.844207][ T5704] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1174.875823][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.992850][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 1175.058496][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 1175.133545][ C0] dln2 1-1:1.0: size mismatch: handle 1 cmd 30 echo 0 size 14 actual 8 [ 1175.232205][ T5704] dln2 1-1:1.0: USB write failed: -110 [ 1175.260278][ T5704] dln2 1-1:1.0: failed to initialize hardware [ 1175.293115][ T5704] dln2 1-1:1.0: probe with driver dln2 failed with error -110 [ 1175.359153][ T5704] usb 1-1: USB disconnect, device number 17 [ 1176.130779][T13971] jffs2: notice: (13971) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1176.479950][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.480039][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.480177][T13763] bridge_slave_0: entered allmulticast mode [ 1176.494393][T13763] bridge_slave_0: entered promiscuous mode [ 1176.623000][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.623090][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.623241][T13763] bridge_slave_1: entered allmulticast mode [ 1176.627307][T13763] bridge_slave_1: entered promiscuous mode [ 1177.112624][T13763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.280716][T13763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.668770][T13780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.668861][T13780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.668973][T13780] bridge_slave_0: entered allmulticast mode [ 1177.680450][T13780] bridge_slave_0: entered promiscuous mode [ 1177.773775][T13763] team0: Port device team_slave_0 added [ 1177.774700][T13780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.774785][T13780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.774908][T13780] bridge_slave_1: entered allmulticast mode [ 1177.789948][T13780] bridge_slave_1: entered promiscuous mode [ 1177.807183][T13763] team0: Port device team_slave_1 added [ 1177.960513][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 1178.217360][T13780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.739530][ T1013] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.159820][T13763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.159835][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.159856][T13763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.176586][T13780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.183047][ T5249] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1180.187777][T13763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.187791][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.187813][T13763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.473497][T13780] team0: Port device team_slave_0 added [ 1180.542722][T13780] team0: Port device team_slave_1 added [ 1180.824504][ T1013] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.211599][T13763] hsr_slave_0: entered promiscuous mode [ 1181.219891][T13763] hsr_slave_1: entered promiscuous mode [ 1181.335371][T13780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.335386][T13780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.335440][T13780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.009889][ T1013] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.111473][T13780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.111488][T13780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.111508][T13780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.449309][T14032] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1955'. [ 1182.553651][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.553703][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.200099][ T1013] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.772575][T13780] hsr_slave_0: entered promiscuous mode [ 1183.815140][T13780] hsr_slave_1: entered promiscuous mode [ 1183.818564][T13780] debugfs: 'hsr0' already exists in 'hsr' [ 1183.818588][T13780] Cannot create hsr debugfs directory [ 1184.211360][T14054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1184.857004][ T5249] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1185.393879][T14067] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1964'. [ 1185.896903][T13791] block nbd0: Receive control failed (result -32) [ 1186.314116][T14072] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1186.693713][T14072] bond1 (unregistering): Released all slaves [ 1187.536064][T14088] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1970'. [ 1188.313817][T14098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.475816][ T37] audit: type=1800 audit(2000000743.950:104): pid=14103 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1973" name="zone_nr_conv" dev="configfs" ino=39460 res=0 errno=0 [ 1192.698460][T14130] netlink: 'syz.3.1980': attribute type 7 has an invalid length. [ 1192.698478][T14130] netlink: 'syz.3.1980': attribute type 8 has an invalid length. [ 1193.551797][ T1013] bridge_slave_1: left allmulticast mode [ 1193.551828][ T1013] bridge_slave_1: left promiscuous mode [ 1193.552035][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.585859][ T1013] bridge_slave_0: left allmulticast mode [ 1193.585891][ T1013] bridge_slave_0: left promiscuous mode [ 1193.604844][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.303558][ T1942] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1194.484246][ T1942] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 1194.485279][ T1942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.116856][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.120384][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.125234][ T1013] bond0 (unregistering): Released all slaves [ 1195.153303][ T5249] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1195.364996][ T1942] net1080 2-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 3e:41:46:d6:b7:a6 [ 1196.558945][T14177] netlink: 'syz.0.1995': attribute type 7 has an invalid length. [ 1196.558965][T14177] netlink: 'syz.0.1995': attribute type 8 has an invalid length. [ 1196.757675][ T1013] hsr_slave_0: left promiscuous mode [ 1196.776601][ T1013] hsr_slave_1: left promiscuous mode [ 1196.777612][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.777633][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.790591][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.790615][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.581907][T14188] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1997'. [ 1197.667454][ T5783] usb 2-1: USB disconnect, device number 17 [ 1197.670621][ T5783] net1080 2-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 1197.894871][ T1013] veth1_macvtap: left promiscuous mode [ 1197.894924][ T1013] veth0_macvtap: left promiscuous mode [ 1197.895042][ T1013] veth1_vlan: left promiscuous mode [ 1197.895150][ T1013] veth0_vlan: left promiscuous mode [ 1198.628164][T14208] FAULT_INJECTION: forcing a failure. [ 1198.628164][T14208] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.628220][T14208] CPU: 0 UID: 0 PID: 14208 Comm: syz.1.2002 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1198.628243][T14208] Tainted: [L]=SOFTLOCKUP [ 1198.628262][T14208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1198.628283][T14208] Call Trace: [ 1198.628291][T14208] [ 1198.628299][T14208] dump_stack_lvl+0xe8/0x150 [ 1198.628370][T14208] should_fail_ex+0x46b/0x600 [ 1198.628407][T14208] should_failslab+0xa8/0x100 [ 1198.628449][T14208] __kmalloc_cache_noprof+0xa1/0x680 [ 1198.628502][T14208] ? sctp_association_new+0x89/0x25d0 [ 1198.628581][T14208] ? sctp_association_new+0x89/0x25d0 [ 1198.628604][T14208] sctp_association_new+0x89/0x25d0 [ 1198.628642][T14208] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1198.628682][T14208] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1198.628703][T14208] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1198.628738][T14208] ? lockdep_hardirqs_on+0x7b/0x110 [ 1198.628775][T14208] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1198.628802][T14208] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1198.628831][T14208] sctp_sendmsg+0x1506/0x2a50 [ 1198.628876][T14208] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1198.628890][T14208] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 1198.628913][T14208] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1198.628936][T14208] ? __lock_acquire+0x6df/0x2e40 [ 1198.628970][T14208] ? __lock_acquire+0x6df/0x2e40 [ 1198.628994][T14208] ? sock_rps_record_flow+0x19/0x350 [ 1198.629061][T14208] ? inet_sendmsg+0x298/0x320 [ 1198.629087][T14208] ? __pfx_inet_sendmsg+0x10/0x10 [ 1198.629110][T14208] sock_sendmsg_nosec+0x10e/0x180 [ 1198.629185][T14208] ____sys_sendmsg+0x565/0x870 [ 1198.629232][T14208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1198.629274][T14208] ? import_iovec+0x73/0xa0 [ 1198.629303][T14208] ___sys_sendmsg+0x2a5/0x360 [ 1198.629326][T14208] ? __lock_acquire+0x6df/0x2e40 [ 1198.629351][T14208] ? __pfx____sys_sendmsg+0x10/0x10 [ 1198.629377][T14208] ? futex_wait+0x2a2/0x390 [ 1198.629424][T14208] ? __fget_files+0x2a/0x420 [ 1198.629445][T14208] ? __fget_files+0x3a8/0x420 [ 1198.629469][T14208] __x64_sys_sendmsg+0x1b7/0x290 [ 1198.629494][T14208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1198.629534][T14208] do_syscall_64+0x166/0x520 [ 1198.629553][T14208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.629581][T14208] ? clear_bhb_loop+0x70/0xc0 [ 1198.629601][T14208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.629618][T14208] RIP: 0033:0x7efd2c22e159 [ 1198.629634][T14208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.629649][T14208] RSP: 002b:00007efd2a486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.629667][T14208] RAX: ffffffffffffffda RBX: 00007efd2c4b5fa0 RCX: 00007efd2c22e159 [ 1198.629680][T14208] RDX: 00000000240488c6 RSI: 0000200000000140 RDI: 0000000000000005 [ 1198.629691][T14208] RBP: 00007efd2c2c5024 R08: 0000000000000000 R09: 0000000000000000 [ 1198.629702][T14208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.629712][T14208] R13: 00007efd2c4b6038 R14: 00007efd2c4b5fa0 R15: 00007ffd97efffa8 [ 1198.629737][T14208] [ 1199.260784][T14219] netlink: 'syz.1.2005': attribute type 7 has an invalid length. [ 1199.260803][T14219] netlink: 'syz.1.2005': attribute type 8 has an invalid length. [ 1199.617087][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 1199.659548][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 1200.296396][ T5249] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1201.091102][T14237] fuse: fd is not a fuse device [ 1205.210290][T14287] fuse: fd is not a fuse device [ 1206.562685][ T5249] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1208.140595][ T4902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1208.189577][ T4902] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1208.192681][ T4902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1208.199973][ T4902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1208.213221][ T4902] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1210.316481][T13791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1210.349968][T13791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1210.356447][T13791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1210.376954][T13791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1210.385822][T11043] Bluetooth: hci5: command tx timeout [ 1210.395059][T13791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1211.336195][T14359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2035'. [ 1211.529740][T14369] input: syz1 as /devices/virtual/input/input15 [ 1212.073493][T14373] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2037'. [ 1212.362383][T14381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2039'. [ 1212.466409][T13791] Bluetooth: hci5: command tx timeout [ 1212.543606][T13791] Bluetooth: hci6: command tx timeout [ 1214.403230][T14412] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2048'. [ 1214.408827][T14409] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2047'. [ 1214.543558][T13791] Bluetooth: hci5: command tx timeout [ 1214.626230][T13791] Bluetooth: hci6: command tx timeout [ 1216.623420][T13791] Bluetooth: hci5: command tx timeout [ 1216.705376][T13791] Bluetooth: hci6: command tx timeout [ 1218.662287][T14477] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2062'. [ 1218.783604][T13791] Bluetooth: hci6: command tx timeout [ 1219.205868][T13791] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1219.712565][T14498] CIFS: Attempting to mount //127.0.0.1/share [ 1219.788977][T14500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2071'. [ 1219.817133][T14322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.819390][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.819553][T14322] bridge_slave_0: entered allmulticast mode [ 1219.826195][T14322] bridge_slave_0: entered promiscuous mode [ 1219.843115][ T13] bridge_slave_1: left allmulticast mode [ 1219.843146][ T13] bridge_slave_1: left promiscuous mode [ 1219.843496][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.851728][ T13] bridge_slave_0: left allmulticast mode [ 1219.851758][ T13] bridge_slave_0: left promiscuous mode [ 1219.851938][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.152339][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.160503][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.165243][ T13] bond0 (unregistering): Released all slaves [ 1220.185048][T14322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.185161][T14322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.187601][T14322] bridge_slave_1: entered allmulticast mode [ 1220.195720][T14322] bridge_slave_1: entered promiscuous mode [ 1220.463175][ T13] hsr_slave_0: left promiscuous mode [ 1220.470324][ T13] hsr_slave_1: left promiscuous mode [ 1220.471193][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.478519][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.502200][T14498] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1220.502240][T14498] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1220.978154][T13791] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1221.431630][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1221.627266][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1221.769574][T14524] loop1: detected capacity change from 0 to 204800 [ 1222.336352][T14531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2080'. [ 1222.904671][T14322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1223.039410][T14322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1223.265164][T13791] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1223.265357][T13791] Bluetooth: hci3: Injecting HCI hardware error event [ 1223.266064][T13791] Bluetooth: hci3: hardware error 0x00 [ 1223.545495][T14322] team0: Port device team_slave_0 added [ 1223.680464][T14322] team0: Port device team_slave_1 added [ 1223.909345][T14524] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1224.250758][T14322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.250774][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.250794][T14322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.266552][T14354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.266646][T14354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.266799][T14354] bridge_slave_0: entered allmulticast mode [ 1224.275998][T14354] bridge_slave_0: entered promiscuous mode [ 1224.288562][T14322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.288585][T14322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.288606][T14322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.467498][T14354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.467604][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.467750][T14354] bridge_slave_1: entered allmulticast mode [ 1224.469794][T14354] bridge_slave_1: entered promiscuous mode [ 1224.975497][T14354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.004667][T14322] hsr_slave_0: entered promiscuous mode [ 1225.010017][T14322] hsr_slave_1: entered promiscuous mode [ 1225.027818][ T4902] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1225.028004][ T4902] Bluetooth: hci2: Injecting HCI hardware error event [ 1225.038797][ T4902] Bluetooth: hci2: hardware error 0x00 [ 1225.057688][T14354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.513145][T14354] team0: Port device team_slave_0 added [ 1225.588902][T14354] team0: Port device team_slave_1 added [ 1225.668921][T13791] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1226.780806][ T5249] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1227.095255][T14354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.095271][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.095291][T14354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.173050][T14354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.173065][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.173086][T14354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.343973][ T4902] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1228.182914][T14354] hsr_slave_0: entered promiscuous mode [ 1228.189694][T14354] hsr_slave_1: entered promiscuous mode [ 1228.192284][T14354] debugfs: 'hsr0' already exists in 'hsr' [ 1228.192305][T14354] Cannot create hsr debugfs directory [ 1233.885398][T14693] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2114'. [ 1234.903502][ T13] bridge_slave_1: left allmulticast mode [ 1234.903532][ T13] bridge_slave_1: left promiscuous mode [ 1234.903738][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.088433][ T13] bridge_slave_0: left allmulticast mode [ 1235.088465][ T13] bridge_slave_0: left promiscuous mode [ 1235.088685][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.589255][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.597649][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.603249][ T13] bond0 (unregistering): Released all slaves [ 1236.109820][T14729] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2123'. [ 1237.010170][T14746] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2127'. [ 1237.097505][ T13] hsr_slave_0: left promiscuous mode [ 1237.107937][ T13] hsr_slave_1: left promiscuous mode [ 1237.108796][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.119962][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.575860][T14753] fuse: Unknown parameter 'fd0x0000000000000004' [ 1237.877479][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1237.900994][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1238.563596][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 1238.605686][T14764] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2133'. [ 1238.910201][T14765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 1238.950809][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 1239.627895][T14783] fuse: fd is not a fuse device [ 1241.040454][T14803] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2145'. [ 1243.056104][T14835] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2152'. [ 1243.503006][T14322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1243.557417][T14322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1243.571770][T14322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1243.798984][T14322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1243.826918][T14322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1243.986515][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.986567][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.171740][T14322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1244.181858][T14322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1244.285320][T14322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1246.187603][T14890] loop1: detected capacity change from 0 to 204800 [ 1247.000605][T14354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1247.092408][T14354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1247.097705][T14354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1247.134922][T14354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1247.208021][T14354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1247.350153][T14354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1247.363684][T14354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1247.449588][T14354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1247.535194][T14322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.692513][T14901] FAULT_INJECTION: forcing a failure. [ 1247.692513][T14901] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.692546][T14901] CPU: 0 UID: 0 PID: 14901 Comm: syz.1.2168 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1247.692570][T14901] Tainted: [L]=SOFTLOCKUP [ 1247.692576][T14901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1247.692586][T14901] Call Trace: [ 1247.692593][T14901] [ 1247.692608][T14901] dump_stack_lvl+0xe8/0x150 [ 1247.692645][T14901] should_fail_ex+0x46b/0x600 [ 1247.692694][T14901] should_failslab+0xa8/0x100 [ 1247.692722][T14901] ? __send_signal_locked+0x22c/0xeb0 [ 1247.692743][T14901] kmem_cache_alloc_noprof+0x9e/0x690 [ 1247.692765][T14901] ? __send_signal_locked+0x22c/0xeb0 [ 1247.692783][T14901] ? sig_get_ucounts+0x3e4/0x450 [ 1247.692806][T14901] __send_signal_locked+0x22c/0xeb0 [ 1247.692830][T14901] send_signal_locked+0x138/0x9e0 [ 1247.692853][T14901] ? __pfx_send_signal_locked+0x10/0x10 [ 1247.692870][T14901] ? rt_spin_lock+0x2d0/0x400 [ 1247.692899][T14901] ? __pfx_rt_spin_lock+0x10/0x10 [ 1247.692932][T14901] force_sig_info_to_task+0x31d/0x4b0 [ 1247.692957][T14901] force_sig_fault+0xf0/0x150 [ 1247.692979][T14901] ? __pfx_force_sig_fault+0x10/0x10 [ 1247.693004][T14901] ? __bad_area_nosemaphore+0x31e/0x6a0 [ 1247.693060][T14901] exc_page_fault+0x6a/0xc0 [ 1247.693079][T14901] asm_exc_page_fault+0x26/0x30 [ 1247.693098][T14901] RIP: 0033:0x7efd2c2172df [ 1247.693114][T14901] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79 [ 1247.693128][T14901] RSP: 002b:00007efd2a485bd8 EFLAGS: 00010283 [ 1247.693144][T14901] RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000000 [ 1247.693155][T14901] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007efd2a485c00 [ 1247.693166][T14901] RBP: 00007efd2a485c00 R08: 0000000000000000 R09: 0000000000000000 [ 1247.693176][T14901] R10: 0000000000000000 R11: 0000000000000000 R12: cccccccccccccccd [ 1247.693187][T14901] R13: 00007efd2c4b6038 R14: 00007efd2c4b5fa0 R15: 00007ffd97efffa8 [ 1247.693214][T14901] [ 1247.774296][T14901] input: syz1 as /devices/virtual/input/input16 [ 1247.817477][T14322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.872460][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.885174][T13826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.011737][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.020123][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.800295][T14354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.150692][T14914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 1249.163217][T14354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.323207][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.327061][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.361588][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.405487][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.814401][ T5704] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1249.964142][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 1249.965794][ T5704] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1249.966777][ T5704] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1249.966939][ T5704] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1249.966962][ T5704] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1249.966981][ T5704] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1249.967001][ T5704] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1249.967020][ T5704] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1249.967051][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.588133][ T5704] usb 2-1: GET_CAPABILITIES returned 0 [ 1250.588171][ T5704] usbtmc 2-1:16.0: can't read capabilities [ 1251.018665][ T1942] usb 2-1: USB disconnect, device number 18 [ 1251.246551][T14922] usbtmc: can not find device for minor 0 [ 1251.700221][T14322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.466537][T14965] fuse: Bad value for 'fd' [ 1252.590714][T14354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.739266][T14968] md: could not open device unknown-block(7,1). [ 1253.531667][T14322] veth0_vlan: entered promiscuous mode [ 1253.698962][T14322] veth1_vlan: entered promiscuous mode [ 1254.018468][T14322] veth0_macvtap: entered promiscuous mode [ 1254.162174][T14322] veth1_macvtap: entered promiscuous mode [ 1254.497879][T14322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.552924][T14354] veth0_vlan: entered promiscuous mode [ 1254.573214][T14322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.710293][T14354] veth1_vlan: entered promiscuous mode [ 1255.057277][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.358831][T14354] veth0_macvtap: entered promiscuous mode [ 1255.465891][T14354] veth1_macvtap: entered promiscuous mode [ 1255.885550][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.885569][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.966063][T14354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.984190][ T3368] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.984576][ T3368] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.984902][ T3368] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.083932][T14354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.428559][T13826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.428578][T13826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.482213][T15007] netlink: 'syz.0.2196': attribute type 6 has an invalid length. [ 1257.203563][ T3368] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.203702][ T3368] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.203830][ T3368] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.204186][ T3368] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.419376][ T1460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.419395][ T1460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.829065][T13791] Bluetooth: hci6: command 0x0405 tx timeout [ 1264.508514][ T3410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.508533][ T3410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.941267][T15042] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2211'. [ 1271.667015][T15056] netlink: 'syz.5.2205': attribute type 29 has an invalid length. [ 1271.683910][T15056] netlink: 'syz.5.2205': attribute type 29 has an invalid length. [ 1272.760245][ T4902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1272.804766][ T4902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1272.831630][ T4902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1272.832785][ T4902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1272.842284][ T4902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1281.432864][T13791] Bluetooth: hci0: command tx timeout [ 1282.478687][T15107] netlink: 'syz.1.2231': attribute type 29 has an invalid length. [ 1283.506996][T13791] Bluetooth: hci0: command tx timeout [ 1283.946384][ T1460] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.482528][T15120] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2228'. [ 1284.488665][T15119] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2228'. [ 1284.960999][T15132] lo: entered promiscuous mode [ 1284.987055][T15132] tunl0: entered promiscuous mode [ 1285.073431][T15132] gre0: entered promiscuous mode [ 1285.456889][T15132] gretap0: entered promiscuous mode [ 1285.829444][T13791] Bluetooth: hci0: command tx timeout [ 1285.850559][T15132] erspan0: entered promiscuous mode [ 1285.854056][T15132] ip_vti0: entered promiscuous mode [ 1285.856191][T15132] ip6_vti0: entered promiscuous mode [ 1285.858973][T15132] sit0: entered promiscuous mode [ 1285.863179][T15132] ip6tnl0: entered promiscuous mode [ 1285.865831][T15132] ip6gre0: entered promiscuous mode [ 1285.878069][T15132] syz_tun: entered promiscuous mode [ 1285.887780][T15132] ip6gretap0: entered promiscuous mode [ 1285.892001][T15132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.898638][T15132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.899520][T15132] bridge0: entered promiscuous mode [ 1290.805021][T13791] Bluetooth: hci0: command tx timeout [ 1290.837943][ T1460] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.062148][T15140] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1291.062182][T15140] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1291.062207][T15140] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1291.702382][T15163] netlink: 'syz.3.2245': attribute type 29 has an invalid length. [ 1292.076884][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 1292.091503][ T1460] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.220846][T15165] netlink: 'syz.3.2245': attribute type 29 has an invalid length. [ 1292.345151][ T1942] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1292.476376][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1292.495774][ T1942] usb 2-1: Using ep0 maxpacket: 16 [ 1292.499971][ T1942] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1292.507328][ T1942] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1292.507350][ T1942] usb 2-1: config 0 has no interface number 0 [ 1292.507384][ T1942] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1292.509010][ T1942] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1292.509030][ T1942] usb 2-1: Product: syz [ 1292.509041][ T1942] usb 2-1: SerialNumber: syz [ 1292.542839][ T1942] usb 2-1: config 0 descriptor?? [ 1292.555058][ T1942] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 1292.612989][ T1942] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input17 [ 1292.628676][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1292.632214][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.632235][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.633190][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1292.633208][ T10] usb 1-1: SerialNumber: syz [ 1292.974093][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1292.974139][ C0] ------------[ cut here ]------------ [ 1292.974146][ C0] URB ffff8880394d7700 submitted while active [ 1292.974160][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: ktimers/0/16 [ 1308.437600][ C0] Modules linked in: [ 1308.441520][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1308.452763][ C0] Tainted: [L]=SOFTLOCKUP [ 1308.457110][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1308.467194][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1308.472672][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 39 b1 4e fb 49 83 3e 00 74 40 e8 ce f8 e2 fa 48 8d 3d 37 ea da 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 f8 e2 fa eb 05 e8 ac f8 [ 1308.492316][ C0] RSP: 0018:ffffc90000157798 EFLAGS: 00010283 [ 1308.498420][ C0] RAX: ffffffff86e380f2 RBX: ffff8880394d7700 RCX: 0000000000040000 [ 1308.506505][ C0] RDX: ffffc90003334000 RSI: ffff8880394d7700 RDI: ffffffff8fbe6b30 [ 1308.514541][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000100 [ 1308.522872][ C0] R10: 0000000000000000 R11: ffffffff8e1c3ac0 R12: ffff8880346bc942 [ 1308.530885][ C0] R13: ffff88803a716bc4 R14: ffff8880394d7708 R15: 0000000000000820 [ 1308.538992][ C0] FS: 0000000000000000(0000) GS:ffff888125bd4000(0000) knlGS:0000000000000000 [ 1308.547954][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1308.554650][ C0] CR2: 000000110c34958c CR3: 000000005dd7c000 CR4: 00000000003526f0 [ 1308.562629][ C0] Call Trace: [ 1308.565946][ C0] [ 1308.568905][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1308.574774][ C0] ? ___ratelimit+0x584/0x8e0 [ 1308.579529][ C0] cm109_urb_irq_callback+0x6f1/0xc90 [ 1308.585022][ C0] ? kcov_remote_start+0x55f/0x730 [ 1308.590161][ C0] __usb_hcd_giveback_urb+0x3bc/0x5f0 [ 1308.595582][ C0] dummy_timer+0xaac/0x4d50 [ 1308.600187][ C0] ? __lock_acquire+0x6df/0x2e40 [ 1308.605170][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 1308.610780][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1308.616191][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1308.621409][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1308.626385][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1308.632205][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1308.637178][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 1308.642552][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 1308.647755][ C0] handle_softirqs+0x1da/0x6d0 [ 1308.652560][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1308.657661][ C0] run_ktimerd+0x6a/0x100 [ 1308.662038][ C0] smpboot_thread_fn+0x565/0xa70 [ 1308.667036][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1308.672086][ C0] kthread+0x38b/0x470 [ 1308.676241][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1308.681734][ C0] ? __pfx_kthread+0x10/0x10 [ 1308.686371][ C0] ret_from_fork+0x514/0xb70 [ 1308.691008][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1308.696345][ C0] ? __switch_to+0xc89/0x1420 [ 1308.701088][ C0] ? __pfx_kthread+0x10/0x10 [ 1308.705766][ C0] ret_from_fork_asm+0x1a/0x30 [ 1308.710652][ C0] [ 1308.713737][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1308.721207][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1308.732457][ C0] Tainted: [L]=SOFTLOCKUP [ 1308.736975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1308.747043][ C0] Call Trace: [ 1308.750352][ C0] [ 1308.753292][ C0] vpanic+0x56d/0xa60 [ 1308.757318][ C0] ? __pfx__printk+0x10/0x10 [ 1308.761949][ C0] ? __pfx_vpanic+0x10/0x10 [ 1308.766566][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1308.772176][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1308.777499][ C0] panic+0xc5/0xd0 [ 1308.781247][ C0] ? __pfx_panic+0x10/0x10 [ 1308.785683][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1308.790642][ C0] __warn+0x315/0x4c0 [ 1308.794629][ C0] ? usb_submit_urb+0x79/0x18b0 [ 1308.799518][ C0] ? usb_submit_urb+0x79/0x18b0 [ 1308.804385][ C0] __report_bug+0x276/0x570 [ 1308.808970][ C0] ? usb_submit_urb+0x79/0x18b0 [ 1308.813831][ C0] ? __pfx___report_bug+0x10/0x10 [ 1308.818872][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1308.823907][ C0] report_bug_entry+0x19b/0x290 [ 1308.828779][ C0] ? usb_submit_urb+0x7c/0x18b0 [ 1308.833645][ C0] ? usb_submit_urb+0x81/0x18b0 [ 1308.838516][ C0] handle_bug+0xce/0x200 [ 1308.842796][ C0] exc_invalid_op+0x1a/0x50 [ 1308.847320][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1308.852187][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 1308.857659][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 39 b1 4e fb 49 83 3e 00 74 40 e8 ce f8 e2 fa 48 8d 3d 37 ea da 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 f8 e2 fa eb 05 e8 ac f8 [ 1308.877280][ C0] RSP: 0018:ffffc90000157798 EFLAGS: 00010283 [ 1308.883358][ C0] RAX: ffffffff86e380f2 RBX: ffff8880394d7700 RCX: 0000000000040000 [ 1308.891355][ C0] RDX: ffffc90003334000 RSI: ffff8880394d7700 RDI: ffffffff8fbe6b30 [ 1308.899877][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000100 [ 1308.907854][ C0] R10: 0000000000000000 R11: ffffffff8e1c3ac0 R12: ffff8880346bc942 [ 1308.915857][ C0] R13: ffff88803a716bc4 R14: ffff8880394d7708 R15: 0000000000000820 [ 1308.923875][ C0] ? usb_submit_urb+0x72/0x18b0 [ 1308.928761][ C0] ? usb_submit_urb+0x72/0x18b0 [ 1308.933640][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1308.939492][ C0] ? ___ratelimit+0x584/0x8e0 [ 1308.944200][ C0] cm109_urb_irq_callback+0x6f1/0xc90 [ 1308.949595][ C0] ? kcov_remote_start+0x55f/0x730 [ 1308.954721][ C0] __usb_hcd_giveback_urb+0x3bc/0x5f0 [ 1308.960122][ C0] dummy_timer+0xaac/0x4d50 [ 1308.964643][ C0] ? __lock_acquire+0x6df/0x2e40 [ 1308.969622][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 1308.975221][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1308.980612][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1308.985662][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1308.990632][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1308.996495][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1309.001472][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 1309.006714][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 1309.011850][ C0] handle_softirqs+0x1da/0x6d0 [ 1309.016675][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1309.021718][ C0] run_ktimerd+0x6a/0x100 [ 1309.026068][ C0] smpboot_thread_fn+0x565/0xa70 [ 1309.031025][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 1309.036094][ C0] kthread+0x38b/0x470 [ 1309.040175][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1309.045661][ C0] ? __pfx_kthread+0x10/0x10 [ 1309.050312][ C0] ret_from_fork+0x514/0xb70 [ 1309.055012][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1309.060232][ C0] ? __switch_to+0xc89/0x1420 [ 1309.064956][ C0] ? __pfx_kthread+0x10/0x10 [ 1309.069676][ C0] ret_from_fork_asm+0x1a/0x30 [ 1309.074489][ C0] [ 1309.077603][ C0] Kernel Offset: disabled [ 1309.081946][ C0] Rebooting in 86400 seconds..