last executing test programs: 10.345914559s ago: executing program 2 (id=2399): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x8, @private2, 0xf5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000ac0)='`', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000029f000/0x4000)=nil) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f00000001c0)=0x4) socket(0xa, 0x3, 0x3a) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb"], 0x2c2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 9.170551815s ago: executing program 2 (id=2404): keyctl$reject(0x13, 0x0, 0xaad2, 0x201, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xf0, 0x138, 0x700, {}, [@common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) waitid(0x1, r1, &(0x7f0000000000), 0x8, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1fffffff}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.859934567s ago: executing program 2 (id=2415): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902", 0x86}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee83", 0x80}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.630551815s ago: executing program 0 (id=2417): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x20}}], 0x1, 0x4880) 5.561019567s ago: executing program 2 (id=2419): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10, 0x0}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, 0x0, 0x0) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r8) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800b00010067656e657665000018000280140007002001000000000400000000000000000008000a005b5e8a60437c4aa3a0ee84df57f1d2f267a0ddbd4a1ea88047f9ab5dd295c374ac88b3dc99971c3f73adbba80cbead71579a48046230f70243afcb8b2c5aef3e53108dad00730cf9c8d38924d07442b02350ab9089e7436b5e9d17875de0ad7ce2232b3b818f3c4092f1a9ea81a58db7c20f459bcb8222964fb88d4ebda71d6ecd86d863e50798c179002616a44cc873fe4acb0e2c668ab6314d64", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) creat(0x0, 0x2) 5.326434084s ago: executing program 1 (id=2420): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.311393215s ago: executing program 0 (id=2421): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000040), &(0x7f0000000580)=r3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.975596686s ago: executing program 3 (id=2422): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 3.778553532s ago: executing program 0 (id=2423): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000000180)={0x0, 0x1c1e, 0x4000, 0x0, 0x205}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001400000000000000008"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x14, 0xf0b, 0x4000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x1, 0x8, 0xc, 0x20, 0x16, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x8e80) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 3.730399744s ago: executing program 1 (id=2424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) 3.476578962s ago: executing program 2 (id=2425): socket(0xa, 0x3, 0xff) socket$inet(0x2, 0x80001, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @sk_skb=0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BLKPG(0xffffffffffffffff, 0xc0104d04, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}) 3.392885455s ago: executing program 3 (id=2426): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 3.342551116s ago: executing program 1 (id=2427): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902", 0x86}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee83", 0x80}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6c", 0x3f}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.55510987s ago: executing program 3 (id=2428): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000880)="b9aea652ff030703008cb89e0800", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.456720453s ago: executing program 0 (id=2429): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x20}}], 0x1, 0x4880) 2.201096961s ago: executing program 2 (id=2430): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x14, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x80, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) 2.138593313s ago: executing program 3 (id=2431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x0, 0x2, {0x1, 0x0, 0x3}, {0x0, 0xf0}}], 0x20) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2.138349823s ago: executing program 1 (id=2432): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000040), &(0x7f0000000580)=r3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.136306813s ago: executing program 0 (id=2433): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt(0xffffffffffffffff, 0xac, 0x10001, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) semctl$GETPID(0x0, 0x710a46238146441f, 0xb, 0x0) sendmsg$tipc(r5, 0x0, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, 0x0, 0x0) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r8) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000280012800b00010067656e657665000018000280140007002001000000000400000000000000000008000a005b5e8a60437c4aa3a0ee84df57f1d2f267a0ddbd4a1ea88047f9ab5dd295c374ac88b3dc99971c3f73adbba80cbead71579a48046230f70243afcb8b2c5aef3e53108dad00730cf9c8d38924d07442b02350ab9089e7436b5e9d17875de0ad7ce2232b3b818f3c4092f1a9ea81a58db7c20f459bcb8222964fb88d4ebda71d6ecd86d863e50798c179002616a44cc873fe4acb0e2c668ab6314d64", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) creat(0x0, 0x2) 617.44993ms ago: executing program 0 (id=2434): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@nombcache}, {@nogrpid}], [{@dont_measure}, {@dont_appraise}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x432300c, 0x0, 0x21, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100), 0x65, 0x101282) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x8001) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x2, 0x0, 0x80fd}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40001, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @local}, [@srh={0x2f}, @fragment={0x2c}]}}}}}}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) 501.850964ms ago: executing program 1 (id=2435): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, &(0x7f0000000080)=0xc) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000200), 0x12) bind$x25(r3, &(0x7f0000000080), 0x12) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x40000) 320.69769ms ago: executing program 3 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r2, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 192.745543ms ago: executing program 1 (id=2437): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000000180)={0x0, 0x1c1e, 0x4000, 0x0, 0x205}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001400000000000000008"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x14, 0xf0b, 0x4000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x1, 0x8, 0xc, 0x20, 0x16, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x8e80) ioctl$NBD_SET_TIMEOUT(r7, 0xab09, 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) kernel console output (not intermixed with test programs): 9003][ T8068] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 250.993360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 252.125487][ T8194] overlayfs: failed to resolve './bus': -2 [ 254.632624][ T8229] netlink: 56 bytes leftover after parsing attributes in process `syz.0.707'. [ 254.858013][ T8234] IPv6: NLM_F_REPLACE set, but no existing node found! [ 255.850603][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.857156][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.969326][ T8257] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 257.798700][ T8262] IPv6: NLM_F_REPLACE set, but no existing node found! [ 258.439290][ T8278] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 260.401298][ T8293] IPv6: NLM_F_REPLACE set, but no existing node found! [ 264.035285][ T8332] IPv6: NLM_F_REPLACE set, but no existing node found! [ 266.274048][ T8354] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 267.067385][ T8370] IPv6: NLM_F_REPLACE set, but no existing node found! [ 270.704848][ T8401] IPv6: NLM_F_REPLACE set, but no existing node found! [ 270.733379][ T28] audit: type=1326 audit(1777530116.370:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8391 comm="syz.1.754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa27d19cdd9 code=0x0 [ 270.833779][ T5811] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 271.087957][ T5811] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 271.130365][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.213684][ T5811] usb 3-1: config 0 descriptor?? [ 271.679492][ T5811] ath6kl: Unsupported hardware version: 0x0 [ 271.709015][ T5811] ath6kl: Failed to init ath6kl core: -22 [ 271.874420][ T5811] ath6kl_usb: probe of 3-1:0.0 failed with error -22 [ 271.905486][ T5811] usb 3-1: USB disconnect, device number 3 [ 273.713094][ C0] sched: RT throttling activated [ 275.442169][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.767'. [ 275.786165][ T8430] IPv6: NLM_F_REPLACE set, but no existing node found! [ 277.808873][ T5811] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 278.836492][ T8478] netlink: 56 bytes leftover after parsing attributes in process `syz.3.783'. [ 278.856032][ T5811] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 278.865316][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.084066][ T8481] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 280.459535][ T5811] usb 3-1: config 0 descriptor?? [ 280.678856][ T5811] usb 3-1: can't set config #0, error -71 [ 280.698780][ T5811] usb 3-1: USB disconnect, device number 4 [ 281.750127][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 284.523448][ T5814] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 284.846992][ T5814] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 284.918323][ T8524] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 285.693632][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.760160][ T5814] usb 3-1: config 0 descriptor?? [ 286.212559][ T8529] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 286.260311][ T5814] ath6kl: Unsupported hardware version: 0x0 [ 286.283710][ T5814] ath6kl: Failed to init ath6kl core: -22 [ 286.296652][ T5814] ath6kl_usb: probe of 3-1:0.0 failed with error -22 [ 286.855067][ T5814] usb 3-1: USB disconnect, device number 5 [ 289.441316][ T8548] loop5: detected capacity change from 0 to 7 [ 290.023967][ T8561] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 290.742215][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'. [ 291.600982][ T8548] Dev loop5: unable to read RDB block 7 [ 291.601215][ T8548] loop5: unable to read partition table [ 291.602405][ T8548] loop5: partition table beyond EOD, truncated [ 291.623705][ T8548] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 292.635608][ T8577] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 294.273521][ T8592] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 296.657569][ T8588] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 297.433476][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 297.473617][ T8588] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 297.590395][ T8588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 297.613304][ T8588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 297.640331][ T8588] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 297.653441][ T8588] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 297.689355][ T8588] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.742681][ T8588] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 299.975826][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 299.982236][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 299.990424][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 299.997454][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 300.525388][ T8633] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 302.173992][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 302.174081][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 302.174099][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 304.225081][ T8663] netlink: 56 bytes leftover after parsing attributes in process `syz.3.831'. [ 307.713835][ T8695] overlayfs: failed to resolve './file0': -2 [ 315.704317][ T8765] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 316.287924][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 316.780724][ T8775] netlink: 'syz.0.861': attribute type 4 has an invalid length. [ 316.899900][ T8779] netlink: 'syz.0.861': attribute type 4 has an invalid length. [ 317.412448][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.715520][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.443233][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 318.578451][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 318.734635][ T9] usb 3-1: device descriptor read/64, error -71 [ 319.143248][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 319.333252][ T9] usb 3-1: device descriptor read/64, error -71 [ 319.613473][ T9] usb usb3-port1: attempt power cycle [ 320.023249][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 320.064247][ T9] usb 3-1: device descriptor read/8, error -71 [ 320.987262][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 321.359404][ T9] usb 3-1: device descriptor read/8, error -71 [ 321.483948][ T9] usb usb3-port1: unable to enumerate USB device [ 322.023158][ T8826] netlink: 56 bytes leftover after parsing attributes in process `syz.0.876'. [ 322.597242][ T8828] overlayfs: failed to resolve './file0': -2 [ 322.787433][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 324.894338][ T8833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.879'. [ 325.791229][ T8855] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 326.476971][ T8833] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 326.737534][ T8863] netlink: 56 bytes leftover after parsing attributes in process `syz.1.886'. [ 327.378951][ T8871] overlayfs: failed to resolve './file0': -2 [ 327.473232][ T789] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 327.522014][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 330.569934][ T789] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.848072][ T789] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 330.859409][ T789] usb 3-1: can't read configurations, error -71 [ 332.913599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 333.660200][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 336.563463][ T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 338.033660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 338.422945][ T8969] netlink: 'syz.3.911': attribute type 4 has an invalid length. [ 338.434010][ T8969] netlink: 'syz.3.911': attribute type 4 has an invalid length. [ 338.780848][ T8971] overlayfs: missing 'workdir' [ 339.842247][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 342.291415][ T9013] misc userio: Invalid payload size [ 343.494756][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 343.536467][ T27] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 343.544377][ T27] usb 2-1: chopping to 0 config(s) [ 343.549772][ T27] usb 2-1: can't read configurations, error -32 [ 343.717620][ T27] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 344.892363][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 345.185976][ T9031] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 345.362528][ T9038] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 348.253215][ T8342] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 350.133088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 351.617646][ T8342] usb 4-1: unable to get BOS descriptor or descriptor too short [ 351.692830][ T8342] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 351.713245][ T8342] usb 4-1: can't read configurations, error -71 [ 354.713640][ T9112] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 360.195388][ T9149] netlink: 'syz.1.954': attribute type 14 has an invalid length. [ 360.264066][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 360.959129][ T9149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.968502][ T9149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.978339][ T9149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.987460][ T9149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.192338][ T9149] netlink: 'syz.1.954': attribute type 14 has an invalid length. [ 361.244481][ T9149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 364.787938][ T9196] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 370.799048][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.983'. [ 370.974986][ T9256] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 371.690566][ T9281] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 373.857126][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 374.043505][ T9299] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 376.811647][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 377.796109][ T9348] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 378.727435][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.734482][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.420667][ T9380] overlayfs: failed to resolve './file0': -2 [ 386.016363][ T9460] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 386.117911][ T9461] misc userio: Invalid payload size [ 386.123529][ T9461] misc userio: No port type given on /dev/userio [ 387.822419][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1041'. [ 389.280327][ T9496] misc userio: Invalid payload size [ 389.286103][ T9496] misc userio: No port type given on /dev/userio [ 390.438717][ T9519] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 391.536231][ T9528] fuse: Bad value for 'fd' [ 392.413439][ T9538] netlink: 'syz.0.1058': attribute type 4 has an invalid length. [ 392.546539][ T9541] netlink: 'syz.0.1058': attribute type 4 has an invalid length. [ 394.478497][ T9561] fuse: Invalid rootmode [ 394.566354][ T9565] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 396.949268][ T28] audit: type=1326 audit(1777530242.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9584 comm="syz.0.1076" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88859cdd9 code=0x0 [ 398.176708][ T9600] netlink: 'syz.3.1078': attribute type 4 has an invalid length. [ 398.292869][ T9606] netlink: 'syz.3.1078': attribute type 4 has an invalid length. [ 398.314236][ T9607] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 404.587867][ T9675] syz.3.1100 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 407.847444][ T28] audit: type=1326 audit(1777530253.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.0.1103" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88859cdd9 code=0x0 [ 407.882566][ T9699] netlink: 'syz.3.1105': attribute type 4 has an invalid length. [ 407.929082][ T9704] fuse: Bad value for 'rootmode' [ 408.694055][ T9700] netlink: 'syz.3.1105': attribute type 4 has an invalid length. [ 414.053119][ T9738] fuse: Unknown parameter 'use00000000000000000000' [ 416.995422][ T9771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1130'. [ 418.206936][ T9784] netlink: 'syz.3.1132': attribute type 4 has an invalid length. [ 418.749403][ T9793] netlink: 'syz.3.1132': attribute type 4 has an invalid length. [ 420.109801][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1141'. [ 421.819344][ T9823] fuse: Unknown parameter 'use00000000000000000000' [ 423.493676][ T9838] misc userio: No port type given on /dev/userio [ 425.363530][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 425.393996][ T9860] fuse: Unknown parameter 'user_i00000000000000000000' [ 426.002793][ T9870] misc userio: No port type given on /dev/userio [ 430.142250][ T9916] misc userio: No port type given on /dev/userio [ 430.380404][ T9919] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 431.532574][ T9930] fuse: Unknown parameter 'user_i00000000000000000000' [ 434.669795][ T9963] misc userio: No port type given on /dev/userio [ 434.967018][ T9960] overlayfs: failed to resolve './file0': -2 [ 435.642646][ T9968] fuse: Unknown parameter 'user_id00000000000000000000' [ 439.806051][T10011] misc userio: No port type given on /dev/userio [ 440.150664][T10014] overlayfs: failed to resolve './file0': -2 [ 440.168644][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.175412][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.544138][T10017] fuse: Unknown parameter 'user_id00000000000000000000' [ 443.015746][T10054] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 443.118216][T10058] fuse: Unknown parameter 'user_id00000000000000000000' [ 443.156932][T10053] misc userio: No port type given on /dev/userio [ 444.290043][T10065] overlayfs: failed to resolve './file0': -2 [ 445.426019][ T28] audit: type=1326 audit(1777530291.070:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.1.1211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa27d19cdd9 code=0x0 [ 446.272521][T10088] netlink: 'syz.3.1214': attribute type 14 has an invalid length. [ 446.323535][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 446.338521][T10088] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 446.347350][T10088] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.356561][T10088] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.365793][T10088] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.386319][T10088] netlink: 'syz.3.1214': attribute type 14 has an invalid length. [ 446.403947][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 446.745363][T10098] misc userio: No port type given on /dev/userio [ 448.523136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 449.205944][T10112] overlayfs: failed to resolve './file0': -2 [ 450.124541][ T28] audit: type=1326 audit(1777530295.770:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.3.1224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57d439cdd9 code=0x0 [ 451.032412][T10125] fuse: Bad value for 'fd' [ 451.505299][T10129] misc userio: No port type given on /dev/userio [ 453.233731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 454.507661][T10166] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 455.463626][ T28] audit: type=1326 audit(1777530301.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.1.1234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa27d19cdd9 code=0x0 [ 456.957901][T10183] misc userio: No port type given on /dev/userio [ 458.039268][T10191] misc userio: Invalid payload size [ 458.045048][T10191] misc userio: No port type given on /dev/userio [ 462.150729][T10212] misc userio: No port type given on /dev/userio [ 462.829342][T10220] misc userio: Invalid payload size [ 462.835269][T10220] misc userio: No port type given on /dev/userio [ 463.558407][T10222] overlayfs: failed to resolve './file0': -2 [ 465.167301][T10238] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 466.729802][ T28] audit: type=1326 audit(1777530312.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.3.1249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57d439cdd9 code=0x0 [ 467.244475][T10251] misc userio: No port type given on /dev/userio [ 469.584002][T10271] netlink: 'syz.1.1263': attribute type 4 has an invalid length. [ 469.953578][T10272] netlink: 'syz.1.1263': attribute type 4 has an invalid length. [ 470.239099][T10279] misc userio: No port type given on /dev/userio [ 470.439673][ T28] audit: type=1326 audit(1777530316.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.3.1266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57d439cdd9 code=0x0 [ 474.137970][T10309] misc userio: No port type given on /dev/userio [ 475.422021][ T28] audit: type=1326 audit(1777530320.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10312 comm="syz.1.1280" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa27d19cdd9 code=0x0 [ 477.868376][T10350] misc userio: No port type given on /dev/userio [ 481.090306][T10380] loop1: detected capacity change from 0 to 512 [ 481.173447][T10380] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1299: bg 0: block 393: padding at end of block bitmap is not set [ 481.213857][T10380] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 481.265709][T10380] EXT4-fs (loop1): 2 truncates cleaned up [ 482.897315][T10380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.208244][T10391] misc userio: No port type given on /dev/userio [ 484.251606][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.310322][T10414] netlink: 'syz.0.1306': attribute type 4 has an invalid length. [ 487.828211][T10428] misc userio: No port type given on /dev/userio [ 488.106200][ T28] audit: type=1326 audit(1777530333.750:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.3.1304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57d439cdd9 code=0x0 [ 489.770319][T10437] loop0: detected capacity change from 0 to 512 [ 489.792647][T10437] ======================================================= [ 489.792647][T10437] WARNING: The mand mount option has been deprecated and [ 489.792647][T10437] and is ignored by this kernel. Remove the mand [ 489.792647][T10437] option from the mount to silence this warning. [ 489.792647][T10437] ======================================================= [ 489.856911][T10437] EXT4-fs: Ignoring removed oldalloc option [ 489.870283][T10437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 489.902588][T10437] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 489.914350][T10437] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 489.933943][T10437] EXT4-fs (loop0): orphan cleanup on readonly fs [ 489.947361][T10437] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 489.967775][T10437] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 489.996533][T10437] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 490.011646][T10437] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1313: bg 0: block 40: padding at end of block bitmap is not set [ 490.028389][T10437] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 490.037893][T10437] EXT4-fs (loop0): 1 truncate cleaned up [ 490.048601][T10437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 490.099071][T10437] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1313: bad symlink. [ 490.163714][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.038900][T10461] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 494.645091][T10471] netlink: 'syz.1.1321': attribute type 4 has an invalid length. [ 494.955313][T10475] netlink: 'syz.1.1321': attribute type 4 has an invalid length. [ 496.753254][T10488] misc userio: Invalid payload size [ 496.758723][T10488] misc userio: No port type given on /dev/userio [ 497.732471][T10494] misc userio: No port type given on /dev/userio [ 499.313467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 501.546573][T10522] misc userio: Invalid payload size [ 501.552053][T10522] misc userio: No port type given on /dev/userio [ 501.598167][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.604641][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.465459][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1336'. [ 503.753795][T10533] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 505.327035][T10563] misc userio: No port type given on /dev/userio [ 507.403077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 508.454922][T10578] netlink: 'syz.0.1349': attribute type 4 has an invalid length. [ 508.694615][T10579] netlink: 'syz.0.1349': attribute type 4 has an invalid length. [ 510.177106][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1350'. [ 510.413313][T10584] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 511.027496][T10597] misc userio: Invalid payload size [ 511.032944][T10597] misc userio: No port type given on /dev/userio [ 514.644223][T10624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1361'. [ 514.885864][T10631] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 515.865116][T10642] misc userio: Invalid payload size [ 515.870673][T10642] misc userio: No port type given on /dev/userio [ 516.566143][T10650] misc userio: No port type given on /dev/userio [ 516.722276][T10656] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 517.595418][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 517.666846][T10660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 517.810835][T10660] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 517.819421][T10660] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.828189][T10660] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.837044][T10660] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.955208][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 518.043198][T10660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 518.074662][T10666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1372'. [ 518.294889][T10666] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 519.423881][T10682] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 523.562862][T10706] netlink: 'syz.2.1381': attribute type 4 has an invalid length. [ 524.479890][T10709] netlink: 'syz.2.1381': attribute type 4 has an invalid length. [ 524.848793][T10712] misc userio: Invalid payload size [ 524.854336][T10712] misc userio: No port type given on /dev/userio [ 525.608426][T10716] overlayfs: failed to resolve './file1': -2 [ 529.118536][T10753] misc userio: Invalid payload size [ 529.124146][T10753] misc userio: No port type given on /dev/userio [ 531.455592][T10763] overlayfs: failed to resolve './file0': -2 [ 534.391960][T10787] overlayfs: failed to resolve './file0': -2 [ 537.905642][T10822] overlayfs: failed to resolve './file0': -2 [ 540.025949][T10833] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1411'. [ 541.103126][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 541.360182][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.390061][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 541.408654][ T28] audit: type=1326 audit(1777530387.050:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10844 comm="syz.1.1414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa27d19cdd9 code=0x0 [ 541.430529][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 541.461029][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.518740][ T9] usb 1-1: config 0 descriptor?? [ 541.702795][T10849] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 543.155542][ T9] usb 1-1: USB disconnect, device number 3 [ 543.503068][T10862] overlayfs: failed to resolve './file0': -2 [ 548.611074][T10891] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 549.113269][ T8342] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 549.392761][ T8342] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.433742][ T8342] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 549.442862][ T8342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.491862][ T8342] usb 1-1: config 0 descriptor?? [ 549.692021][ T28] audit: type=1326 audit(1777530395.330:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.3.1425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57d439cdd9 code=0x0 [ 549.979600][ T8342] ath6kl: Unsupported hardware version: 0x0 [ 550.003902][ T8342] ath6kl: Failed to init ath6kl core: -22 [ 550.010226][ T8342] ath6kl_usb: probe of 1-1:0.0 failed with error -22 [ 550.185232][ T9] usb 1-1: USB disconnect, device number 4 [ 553.253837][T10923] overlayfs: failed to resolve './file0': -2 [ 555.452759][T10944] misc userio: No port type given on /dev/userio [ 560.922286][T10974] overlayfs: failed to resolve './file0': -2 [ 561.846813][T10980] misc userio: No port type given on /dev/userio [ 563.036481][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.045622][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.281148][T10993] misc userio: Invalid payload size [ 564.286683][T10993] misc userio: No port type given on /dev/userio [ 564.985775][T11001] misc userio: Invalid payload size [ 564.991254][T11001] misc userio: No port type given on /dev/userio [ 565.345180][T11006] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 569.074229][T11035] misc userio: No port type given on /dev/userio [ 570.546559][T11042] misc userio: Invalid payload size [ 570.552010][T11042] misc userio: No port type given on /dev/userio [ 571.683798][ T28] audit: type=1326 audit(1777530417.300:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11044 comm="syz.0.1461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88859cdd9 code=0x0 [ 575.171332][T11072] netlink: 'syz.0.1465': attribute type 4 has an invalid length. [ 575.682037][T11073] netlink: 'syz.0.1465': attribute type 4 has an invalid length. [ 576.308600][T11085] misc userio: Invalid payload size [ 576.314278][T11085] misc userio: No port type given on /dev/userio [ 578.213209][T11108] misc userio: No port type given on /dev/userio [ 578.353412][ T28] audit: type=1326 audit(1777530423.990:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11101 comm="syz.0.1474" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88859cdd9 code=0x0 [ 579.211312][T11120] misc userio: Invalid payload size [ 579.217028][T11120] misc userio: No port type given on /dev/userio [ 579.443213][ T5811] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 579.988324][ T5811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.033248][ T5811] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 580.042607][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.119160][ T5811] usb 1-1: config 0 descriptor?? [ 580.616790][ T5811] ath6kl: Unsupported hardware version: 0x0 [ 580.636072][ T5811] ath6kl: Failed to init ath6kl core: -22 [ 580.642373][ T5811] ath6kl_usb: probe of 1-1:0.0 failed with error -22 [ 580.876521][ T8] usb 1-1: USB disconnect, device number 5 [ 582.248320][T11142] netlink: 'syz.2.1483': attribute type 4 has an invalid length. [ 582.410914][T11144] netlink: 'syz.2.1483': attribute type 4 has an invalid length. [ 582.968936][T11156] misc userio: No port type given on /dev/userio [ 583.411533][T11162] misc userio: Invalid payload size [ 583.417111][T11162] misc userio: No port type given on /dev/userio [ 587.961736][T11202] misc userio: Invalid payload size [ 587.967312][T11202] misc userio: No port type given on /dev/userio [ 588.607070][T11211] misc userio: No port type given on /dev/userio [ 588.641064][T11212] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 589.847534][T11219] overlayfs: failed to resolve './file0': -2 [ 594.734494][T11249] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 596.540734][T11259] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 597.079398][T11265] netlink: 'syz.1.1512': attribute type 4 has an invalid length. [ 597.154223][T11269] misc userio: Invalid payload size [ 597.160217][T11269] misc userio: No port type given on /dev/userio [ 597.564987][T11270] netlink: 'syz.1.1512': attribute type 4 has an invalid length. [ 602.114151][T11323] netlink: 'syz.1.1525': attribute type 4 has an invalid length. [ 602.207539][T11327] netlink: 'syz.1.1525': attribute type 4 has an invalid length. [ 602.847455][T11335] misc userio: Invalid payload size [ 602.863378][T11335] misc userio: No port type given on /dev/userio [ 607.551883][T11382] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 608.483829][T11384] netlink: 'syz.0.1541': attribute type 4 has an invalid length. [ 608.724554][T11384] netlink: 'syz.0.1541': attribute type 4 has an invalid length. [ 609.121183][T11391] misc userio: Invalid payload size [ 609.126623][T11391] misc userio: No port type given on /dev/userio [ 614.963908][T11448] misc userio: Invalid payload size [ 614.974014][T11448] misc userio: No port type given on /dev/userio [ 618.979268][T11490] fuse: Bad value for 'fd' [ 619.053086][ T28] audit: type=1326 audit(1777530464.670:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11489 comm="syz.2.1571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4592d9cdd9 code=0x0 [ 624.477964][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.484624][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.604407][ T28] audit: type=1326 audit(1777530470.250:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11529 comm="syz.2.1583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4592d9cdd9 code=0x0 [ 624.681592][T11533] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 627.338389][T11563] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 628.969421][T11569] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1592'. [ 629.013426][ T28] audit: type=1326 audit(1777530474.660:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11568 comm="syz.2.1593" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4592d9cdd9 code=0x0 [ 632.901203][ T28] audit: type=1326 audit(1777530478.540:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57d439cdd9 code=0x0 [ 633.392534][T11617] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1605'. [ 633.846530][T11623] misc userio: Invalid payload size [ 635.324957][T11637] overlayfs: failed to resolve './file0': -2 [ 635.778926][T11647] netlink: 'syz.2.1612': attribute type 4 has an invalid length. [ 635.844403][T11647] netlink: 'syz.2.1612': attribute type 4 has an invalid length. [ 635.868360][T11651] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1614'. [ 637.835427][ T28] audit: type=1326 audit(1777530483.460:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.0.1617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88859cdd9 code=0x0 [ 638.532550][T11668] misc userio: Invalid payload size [ 638.653974][T11669] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 639.405359][T11671] overlayfs: failed to resolve './file0': -2 [ 639.885596][T11679] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1623'. [ 644.385543][T11710] overlayfs: failed to resolve './file0': -2 [ 644.901387][T11717] overlayfs: failed to resolve './file0': -2 [ 645.704705][T11724] netlink: 'syz.0.1633': attribute type 4 has an invalid length. [ 645.748162][T11724] netlink: 'syz.0.1633': attribute type 4 has an invalid length. [ 646.017719][T11729] misc userio: Invalid payload size [ 646.023282][T11729] misc userio: No port type given on /dev/userio [ 646.741167][ T28] audit: type=1326 audit(1777530492.380:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.3.1636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57d439cdd9 code=0x0 [ 646.934826][T11740] overlayfs: failed to resolve './file0': -2 [ 648.380780][T11758] overlayfs: failed to resolve './file0': -2 [ 648.668985][T11762] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 650.485457][T11775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1646'. [ 650.666215][T11775] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 650.832847][T11781] netlink: 'syz.0.1647': attribute type 4 has an invalid length. [ 650.875172][T11781] netlink: 'syz.0.1647': attribute type 4 has an invalid length. [ 651.077538][T11785] overlayfs: failed to resolve './file0': -2 [ 653.140552][T11804] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1653'. [ 655.487506][T11821] overlayfs: failed to resolve './file0': -2 [ 655.805414][T11823] overlayfs: failed to resolve './file0': -2 [ 659.386784][T11849] netlink: 'syz.2.1663': attribute type 4 has an invalid length. [ 659.465364][T11853] netlink: 'syz.2.1663': attribute type 4 has an invalid length. [ 660.398388][T11859] overlayfs: failed to resolve './file0': -2 [ 662.438501][T11878] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1664'. [ 662.512871][T11886] loop0: detected capacity change from 0 to 1024 [ 662.762394][T11886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.854063][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.826356][T11909] fuse: Bad value for 'fd' [ 666.626629][T11918] overlayfs: failed to resolve './file0': -2 [ 667.422648][ T28] audit: type=1326 audit(1777530513.060:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.2.1682" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4592d9cdd9 code=0x0 [ 668.967644][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1687'. [ 670.937899][T11963] overlayfs: failed to resolve './file0': -2 [ 671.618679][T11971] misc userio: Invalid payload size [ 671.636518][T11971] misc userio: No port type given on /dev/userio [ 673.146703][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 675.543962][T12006] overlayfs: failed to resolve './file0': -2 [ 675.777442][T11998] overlayfs: failed to resolve './file0': -2 [ 677.584493][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1707'. [ 678.294216][T12040] misc userio: Invalid payload size [ 678.300232][T12040] misc userio: No port type given on /dev/userio [ 679.679812][T12052] loop2: detected capacity change from 0 to 256 [ 681.050656][T12052] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 683.211131][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1718'. [ 683.876023][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 684.007905][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1719'. [ 684.022862][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 684.032153][T12072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1719'. [ 685.917314][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.925753][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.005793][T12103] loop2: detected capacity change from 0 to 512 [ 686.215156][T12103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.228324][T12103] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.342334][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1729'. [ 687.354001][T12114] misc userio: Invalid payload size [ 687.359502][T12114] misc userio: No port type given on /dev/userio [ 688.396732][T12121] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 689.076149][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.307633][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 689.353297][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1732'. [ 689.362890][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 689.432838][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1732'. [ 689.783518][ T28] audit: type=1326 audit(1777530535.430:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12133 comm="syz.2.1736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4592d9cdd9 code=0x0 [ 690.955843][T12146] misc userio: No port type given on /dev/userio [ 691.839049][T12149] misc userio: Invalid payload size [ 691.864489][T12149] misc userio: No port type given on /dev/userio [ 692.102462][T12139] loop0: detected capacity change from 0 to 40427 [ 692.138708][T12139] F2FS-fs (loop0): invalid crc value [ 692.167542][T12139] F2FS-fs (loop0): Found nat_bits in checkpoint [ 692.298291][T12139] F2FS-fs (loop0): Start checkpoint disabled! [ 692.334737][T12139] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 692.432539][ T28] audit: type=1800 audit(1777530538.070:24): pid=12139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1737" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 692.690175][ T1124] kworker/u4:6: attempt to access beyond end of device [ 692.690175][ T1124] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 692.735210][ T1124] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 692.742291][ T1124] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 693.145276][T12158] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 694.084325][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 694.093619][T12164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1744'. [ 694.103790][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 694.112707][T12164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1744'. [ 695.550737][T12179] fuse: Bad value for 'group_id' [ 697.580869][T12202] misc userio: No port type given on /dev/userio [ 698.847421][T12210] misc userio: Invalid payload size [ 698.871104][T12210] misc userio: No port type given on /dev/userio [ 698.916699][T12211] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 700.747147][T12227] fuse: Bad value for 'group_id' [ 700.818872][ T28] audit: type=1326 audit(1777530546.450:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.2.1757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4592d9cdd9 code=0x0 [ 704.098349][T12262] misc userio: No port type given on /dev/userio [ 704.868987][T12270] fuse: Bad value for 'group_id' [ 704.944379][T12271] misc userio: Invalid payload size [ 704.970262][T12271] misc userio: No port type given on /dev/userio [ 704.997182][ T28] audit: type=1326 audit(1777530550.640:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz.2.1769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4592d9cdd9 code=0x0 [ 706.208611][T12280] loop2: detected capacity change from 0 to 256 [ 708.081485][T12308] misc userio: Invalid payload size [ 709.402638][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1781'. [ 709.413511][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1781'. [ 709.941856][T12324] misc userio: Invalid payload size [ 709.947492][T12324] misc userio: No port type given on /dev/userio [ 710.512576][T12326] misc userio: No port type given on /dev/userio [ 710.965683][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.973617][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.150852][T12334] overlayfs: failed to resolve './file0': -2 [ 712.257374][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.303973][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.016084][T12315] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.024915][T12315] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.033919][T12315] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.042839][T12315] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.232428][T12315] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.241104][T12315] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.252333][T12315] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.261349][T12315] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.045332][T12377] overlayfs: failed to resolve './file0': -2 [ 717.814434][T12381] overlayfs: missing 'lowerdir' [ 717.878971][T12390] loop3: detected capacity change from 0 to 256 [ 718.031506][T12390] FAT-fs (loop3): Directory bread(block 64) failed [ 718.049455][T12390] FAT-fs (loop3): Directory bread(block 65) failed [ 718.060060][T12390] FAT-fs (loop3): Directory bread(block 66) failed [ 718.069575][T12390] FAT-fs (loop3): Directory bread(block 67) failed [ 718.089856][T12390] FAT-fs (loop3): Directory bread(block 68) failed [ 718.118024][T12390] FAT-fs (loop3): Directory bread(block 69) failed [ 718.137771][T12390] FAT-fs (loop3): Directory bread(block 70) failed [ 718.156311][T12390] FAT-fs (loop3): Directory bread(block 71) failed [ 718.177636][T12390] FAT-fs (loop3): Directory bread(block 72) failed [ 718.186321][T12390] FAT-fs (loop3): Directory bread(block 73) failed [ 718.846926][T12413] misc userio: Invalid payload size [ 719.573633][T12415] overlayfs: failed to resolve './file0': -2 [ 720.591919][T12424] loop0: detected capacity change from 0 to 512 [ 720.644097][T12424] ext4: Unknown parameter 'dont_measure' [ 724.313820][ T28] audit: type=1326 audit(1777530569.960:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12451 comm="syz.1.1813" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa27d19cdd9 code=0x0 [ 724.669390][T12460] misc userio: Invalid payload size [ 725.027907][T12460] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 725.036525][T12460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.045351][T12460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.054210][T12460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.116565][T12460] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.125369][T12460] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.134359][T12460] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.143413][T12460] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.672988][T12462] overlayfs: failed to resolve './file0': -2 [ 726.887665][T12479] xt_TPROXY: Can be used only with -p tcp or -p udp [ 728.091477][T12498] overlayfs: failed to resolve './file0': -2 [ 729.516845][T12506] overlayfs: missing 'lowerdir' [ 729.977539][T12512] misc userio: Invalid payload size [ 730.016432][T12512] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 730.092841][T12512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.175015][T12512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.219727][T12512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.291424][T12512] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.393959][T12512] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.480148][T12512] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.537357][T12512] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.413441][T12533] loop0: detected capacity change from 0 to 512 [ 731.437049][T12533] ext4: Unknown parameter 'dont_measure' [ 733.314860][T12547] overlayfs: missing 'lowerdir' [ 734.139539][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 734.330579][T12563] fuse: Unknown parameter 'grou00000000000000000000' [ 734.361833][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.394718][ T27] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 734.425174][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.448602][ T27] usb 2-1: config 0 descriptor?? [ 734.476031][ T28] audit: type=1326 audit(1777530579.623:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12562 comm="syz.2.1846" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4592d9cdd9 code=0x0 [ 734.504859][T12565] loop3: detected capacity change from 0 to 512 [ 734.516029][T12565] ext4: Unknown parameter 'dont_measure' [ 734.561582][T10582] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 735.299837][ T27] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 735.529259][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input5 [ 736.600566][ T27] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 736.813315][ T27] usb 2-1: USB disconnect, device number 7 [ 737.371204][T12580] fido_id[12580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 737.950251][T12596] misc userio: Invalid payload size [ 738.006968][T12596] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 738.132913][T12596] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.176288][T12596] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.271745][T12596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.371445][T12596] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.399270][T12596] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.441631][T12596] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.467035][T12596] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.601991][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 738.622976][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 738.837229][T12604] loop0: detected capacity change from 0 to 512 [ 738.874307][T12604] ext4: Unknown parameter 'dont_measure' [ 740.133949][T12608] fuse: Unknown parameter 'grou00000000000000000000' [ 741.635486][T12619] overlayfs: missing 'lowerdir' [ 742.487082][T12626] loop2: detected capacity change from 0 to 128 [ 742.495243][T12626] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 742.510191][T12626] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 742.685709][T12638] fuse: Unknown parameter 'grou00000000000000000000' [ 742.716065][T12635] netlink: 'syz.3.1865': attribute type 4 has an invalid length. [ 742.765920][T12635] netlink: 'syz.3.1865': attribute type 4 has an invalid length. [ 742.837777][ T5843] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 743.032402][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.054857][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.067369][ T5843] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 743.081194][ T5843] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 743.091887][ T5843] usb 1-1: Manufacturer: syz [ 743.112272][ T5843] usb 1-1: config 0 descriptor?? [ 743.878841][T12644] misc userio: Invalid payload size [ 744.092813][ T5843] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 744.122764][ T5843] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 744.161894][ T5843] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 744.177670][ T5843] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 744.198077][ T5843] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 744.238029][ T5843] usb 1-1: USB disconnect, device number 6 [ 744.461327][T12647] : renamed from bond_slave_1 [ 744.560718][T12647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.576794][T12647] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.611978][T12647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 746.080565][ T28] audit: type=1326 audit(1777530590.487:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d439cdd9 code=0x7ffc0000 [ 746.176071][T12659] overlayfs: missing 'lowerdir' [ 746.316153][ T28] audit: type=1326 audit(1777530590.487:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d439cdd9 code=0x7ffc0000 [ 746.514185][ T28] audit: type=1326 audit(1777530590.525:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57d439cdd9 code=0x7ffc0000 [ 746.610632][ T28] audit: type=1326 audit(1777530590.525:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d439cdd9 code=0x7ffc0000 [ 746.678244][ T28] audit: type=1326 audit(1777530590.534:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f57d439cdd9 code=0x7ffc0000 [ 746.700732][ T28] audit: type=1326 audit(1777530590.534:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d439cdd9 code=0x7ffc0000 [ 746.746716][ T28] audit: type=1326 audit(1777530590.534:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12657 comm="syz.3.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57d439cdd9 code=0x7ffc0000 [ 746.911278][T12665] fuse: Unknown parameter 'group_i00000000000000000000' [ 747.469656][T12674] binder: 12666:12674 ioctl c0306201 200000000080 returned -14 [ 747.516748][T12674] binder: BINDER_SET_CONTEXT_MGR already set [ 747.523267][T12674] binder: 12666:12674 ioctl 4018620d 200000000040 returned -16 [ 747.540669][T12674] binder: 12666:12674 ioctl c0306201 2000000003c0 returned -14 [ 748.289964][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 748.320935][T12673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1880'. [ 748.461283][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 748.557033][T12673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1880'. [ 748.762163][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.769668][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.634753][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 749.667100][T12693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1884'. [ 751.202260][T12698] misc userio: Invalid payload size [ 751.232031][T12699] overlayfs: missing 'lowerdir' [ 751.649614][T12709] fuse: Unknown parameter 'group_i00000000000000000000' [ 751.717873][ T28] audit: type=1326 audit(1777530595.756:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.0.1889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88859cdd9 code=0x0 [ 751.861947][ T5889] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 752.791209][T12725] loop0: detected capacity change from 0 to 256 [ 752.882074][T12725] FAT-fs (loop0): Directory bread(block 64) failed [ 752.900943][T12725] FAT-fs (loop0): Directory bread(block 65) failed [ 752.908805][T12725] FAT-fs (loop0): Directory bread(block 66) failed [ 752.915783][T12725] FAT-fs (loop0): Directory bread(block 67) failed [ 752.922440][T12725] FAT-fs (loop0): Directory bread(block 68) failed [ 752.929127][T12725] FAT-fs (loop0): Directory bread(block 69) failed [ 752.937025][T12725] FAT-fs (loop0): Directory bread(block 70) failed [ 752.943629][T12725] FAT-fs (loop0): Directory bread(block 71) failed [ 752.950335][T12725] FAT-fs (loop0): Directory bread(block 72) failed [ 752.956940][T12725] FAT-fs (loop0): Directory bread(block 73) failed [ 752.974328][T12725] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 753.054001][T12729] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 753.809511][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 753.829154][T12730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1892'. [ 753.840872][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 753.857617][T12730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1892'. [ 754.119585][T12738] overlayfs: failed to resolve './file0': -2 [ 754.852933][T12746] fuse: Unknown parameter 'group_i00000000000000000000' [ 754.896846][ T28] audit: type=1326 audit(1777530598.732:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12744 comm="syz.3.1901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57d439cdd9 code=0x0 [ 754.945031][ T5843] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 755.003088][T12748] misc userio: Invalid payload size [ 755.249367][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 755.260420][ T5843] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 755.284497][ T5843] usb 2-1: string descriptor 0 read error: -22 [ 755.294493][ T5843] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 755.306753][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.639693][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 755.853903][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 755.871967][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.894434][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.927838][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 755.947262][ T27] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 755.958312][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.980492][ T27] usb 3-1: config 0 descriptor?? [ 756.105029][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 756.114125][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1906'. [ 756.124427][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 756.133919][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1906'. [ 756.426077][ T5843] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 756.446775][ T27] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 756.457737][ T5843] usb 2-1: USB disconnect, device number 8 [ 756.467357][ T27] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 756.479946][ T27] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 756.488621][ T27] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 756.497482][ T27] appleir 0003:05AC:8241.0004: unknown main item tag 0x0 [ 756.513928][ T27] appleir 0003:05AC:8241.0004: No inputs registered, leaving [ 756.534861][ T27] appleir 0003:05AC:8241.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 756.861371][ T5843] usb 3-1: USB disconnect, device number 12 [ 757.382204][T12771] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 758.611478][T12773] overlayfs: failed to resolve './file0': -2 [ 759.153428][T12783] fuse: Unknown parameter 'group_id00000000000000000000' [ 759.771699][T12794] misc userio: Invalid payload size [ 759.777602][T12794] misc userio: No port type given on /dev/userio [ 760.126784][T12797] misc userio: Invalid payload size [ 760.507599][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'. [ 760.535938][T12791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1916'. [ 760.657010][T12791] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 760.665759][T12791] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.674798][T12791] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.684097][T12791] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.708946][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1916'. [ 760.722641][T12791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1916'. [ 761.571281][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1921'. [ 761.892027][T12820] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 763.606590][T12817] loop0: detected capacity change from 0 to 256 [ 763.615134][T12817] FAT-fs (loop0): Unrecognized mount option "nonumtail=0" or missing value [ 763.687900][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.719460][T12589] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 763.752330][T12824] fuse: Unknown parameter 'group_id00000000000000000000' [ 763.755436][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.805496][ T28] audit: type=1326 audit(1777530607.079:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12823 comm="syz.3.1922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57d439cdd9 code=0x0 [ 764.456525][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1927'. [ 764.482588][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 764.501744][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1926'. [ 764.512147][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 764.521659][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1926'. [ 764.583834][T12837] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 766.030823][T12857] netlink: 'syz.0.1931': attribute type 4 has an invalid length. [ 766.167153][T12862] netlink: 'syz.0.1931': attribute type 4 has an invalid length. [ 766.655760][T12869] misc userio: Invalid payload size [ 766.667232][T12869] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 766.676742][T12869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.685596][T12869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.694381][T12869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.753178][T12869] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.761832][T12869] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.771092][T12869] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.780051][T12869] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.323370][T12851] loop2: detected capacity change from 0 to 40427 [ 767.360192][T12851] F2FS-fs (loop2): invalid crc value [ 767.492118][T12851] F2FS-fs (loop2): Found nat_bits in checkpoint [ 767.566003][T12877] fuse: Unknown parameter 'group_id00000000000000000000' [ 767.715246][T12851] F2FS-fs (loop2): Start checkpoint disabled! [ 767.790103][T12851] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 767.933309][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1939'. [ 768.036124][T12881] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 768.187556][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 768.202291][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1940'. [ 768.216721][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 768.230673][T12885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1940'. [ 768.778031][ T42] kworker/u4:2: attempt to access beyond end of device [ 768.778031][ T42] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 768.819066][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 768.868656][T12902] fuse: Bad value for 'user_id' [ 768.934664][ T28] audit: type=1326 audit(1777530611.861:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.0.1947" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88859cdd9 code=0x0 [ 768.956341][ C0] vkms_vblank_simulate: vblank timer overrun [ 770.616348][T12920] netlink: 'syz.3.1949': attribute type 4 has an invalid length. [ 771.250837][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'. [ 771.282941][T12911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1950'. [ 771.308452][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'. [ 771.323637][T12911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1950'. [ 771.333754][T12923] netlink: 'syz.3.1949': attribute type 4 has an invalid length. [ 771.808522][T12934] misc userio: Invalid payload size [ 773.276786][T12947] fuse: Bad value for 'user_id' [ 773.380964][T12950] loop2: detected capacity change from 0 to 512 [ 773.462314][T12950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.475069][T12950] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.544350][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.994720][T12969] xt_hashlimit: size too large, truncated to 1048576 [ 775.132548][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 775.174174][T12964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1962'. [ 775.192010][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 775.347455][T12964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1962'. [ 777.075934][ T5843] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 777.357461][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 777.366965][ T5843] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.457390][ T5843] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.761489][ T5843] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 777.803568][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.897353][ T5843] usb 1-1: Product: syz [ 777.902467][ T5843] usb 1-1: Manufacturer: syz [ 777.907116][ T5843] usb 1-1: SerialNumber: syz [ 778.032150][T13009] misc userio: Invalid payload size [ 778.422524][ T5843] usb 1-1: cannot find UAC_HEADER [ 778.725948][ T5843] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 778.750769][ T5843] usb 1-1: USB disconnect, device number 7 [ 778.787016][T12589] udevd[12589]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.851494][T13017] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 778.860056][T13017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.868946][T13017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.877744][T13017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.888688][T13017] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.897390][T13017] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.915137][T13017] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.924138][T13017] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.593164][T13020] loop2: detected capacity change from 0 to 1024 [ 779.614115][T13020] EXT4-fs: Ignoring removed bh option [ 779.623913][T13020] EXT4-fs: Ignoring removed oldalloc option [ 779.639532][T13020] EXT4-fs: Ignoring removed nobh option [ 779.667939][T13020] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 779.691424][T13020] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 779.691424][T13020] [ 779.774485][ T28] audit: type=1326 audit(1777530622.014:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13023 comm="syz.0.1979" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88859cdd9 code=0x0 [ 779.961973][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 779.978086][T13022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1977'. [ 779.988872][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 780.003101][T13022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1977'. [ 781.213866][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1985'. [ 781.414730][T13048] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 781.777232][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 781.788164][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 781.797910][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 781.807672][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 781.817285][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 781.827133][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 781.836602][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 781.847297][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 781.857973][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1988'. [ 781.869345][T13059] misc userio: Invalid payload size [ 782.732977][T13071] loop2: detected capacity change from 0 to 4096 [ 782.982954][T13071] EXT4-fs (loop2): Test dummy encryption mode enabled [ 783.003578][T13071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.078513][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.872772][T13094] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 784.881528][T13094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.892559][T13094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.901764][T13094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.958207][T13094] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.967222][T13094] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.976612][T13094] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.985851][T13094] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.790906][T13109] loop2: detected capacity change from 0 to 512 [ 785.989644][T13109] ext4: Unknown parameter 'dont_measure' [ 789.313136][T13126] loop3: detected capacity change from 0 to 256 [ 789.465581][T13126] FAT-fs (loop3): Directory bread(block 64) failed [ 789.499662][T13126] FAT-fs (loop3): Directory bread(block 65) failed [ 789.521124][T13126] FAT-fs (loop3): Directory bread(block 66) failed [ 789.538962][T13126] FAT-fs (loop3): Directory bread(block 67) failed [ 789.554714][T13126] FAT-fs (loop3): Directory bread(block 68) failed [ 789.576187][T13126] FAT-fs (loop3): Directory bread(block 69) failed [ 789.587387][T13126] FAT-fs (loop3): Directory bread(block 70) failed [ 789.598063][T13126] FAT-fs (loop3): Directory bread(block 71) failed [ 789.612200][T13126] FAT-fs (loop3): Directory bread(block 72) failed [ 789.618874][T13126] FAT-fs (loop3): Directory bread(block 73) failed [ 793.044591][T13144] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 793.053813][T13144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.062725][T13144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.071490][T13144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.102995][T13144] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.111721][T13144] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.120770][T13144] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.130112][T13144] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.158758][T13146] __nla_validate_parse: 15 callbacks suppressed [ 793.158787][T13146] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2011'. [ 793.343847][T13151] binder: 13150:13151 ioctl c0306201 200000000080 returned -14 [ 798.086478][T13178] loop3: detected capacity change from 0 to 1024 [ 798.093980][T13178] EXT4-fs: Ignoring removed mblk_io_submit option [ 798.269205][T13178] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 798.269205][T13178] [ 799.348492][T13183] misc userio: Invalid payload size [ 799.356602][T13183] misc userio: No port type given on /dev/userio [ 799.409765][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 799.591402][ T27] usb 4-1: device descriptor read/64, error -71 [ 799.922911][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 800.179541][ T27] usb 4-1: device descriptor read/64, error -71 [ 800.354996][T13185] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2021'. [ 800.379790][ T27] usb usb4-port1: attempt power cycle [ 800.873780][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 800.977367][T13190] xt_hashlimit: size too large, truncated to 1048576 [ 801.612847][ T27] usb 4-1: device descriptor read/8, error -71 [ 802.332446][T13201] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 802.341069][T13201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.350794][T13201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.359703][T13201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.059040][T13201] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.067664][T13201] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.077152][T13201] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.086569][T13201] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.570460][T13207] misc userio: No port type given on /dev/userio [ 806.648704][T13222] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2030'. [ 807.313470][T13228] loop3: detected capacity change from 0 to 40427 [ 807.349031][T13228] F2FS-fs (loop3): invalid crc value [ 807.367684][T13228] F2FS-fs (loop3): Found nat_bits in checkpoint [ 809.112883][T13228] F2FS-fs (loop3): Start checkpoint disabled! [ 809.173518][T13228] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 809.584362][ T1141] kworker/u4:7: attempt to access beyond end of device [ 809.584362][ T1141] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 809.604130][ T1141] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 809.611090][ T1141] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 809.618340][ T1141] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 809.625538][ T1141] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 809.777211][T13246] misc userio: Invalid payload size [ 809.786057][T13246] misc userio: No port type given on /dev/userio [ 811.432099][T13258] misc userio: No port type given on /dev/userio [ 813.381692][T13259] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2040'. [ 814.202010][T13278] binder: 13271:13278 ioctl c0306201 200000000080 returned -14 [ 814.214631][T13278] binder: BINDER_SET_CONTEXT_MGR already set [ 814.220970][T13278] binder: 13271:13278 ioctl 4018620d 200000000040 returned -16 [ 814.230931][T13278] binder: 13271:13278 ioctl c0306201 2000000003c0 returned -14 [ 814.416932][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.433383][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.681538][T13284] loop3: detected capacity change from 0 to 512 [ 814.709487][T13284] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 814.771523][T13284] EXT4-fs (loop3): 1 truncate cleaned up [ 814.802117][T13284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.875949][ T28] audit: type=1800 audit(1777530654.842:41): pid=13284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2047" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 815.880054][T13284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.579747][T13313] misc userio: Invalid payload size [ 821.668983][ T5814] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 821.726767][T13313] misc userio: No port type given on /dev/userio [ 821.760281][T13313] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 821.770427][T13313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.779258][T13313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.788052][T13313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.978945][ T5814] usb 2-1: device descriptor read/64, error -71 [ 822.278017][ T5814] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 822.486428][ T5814] usb 2-1: device descriptor read/64, error -71 [ 822.834512][T13313] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.843279][T13313] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.852291][T13313] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.861449][T13313] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.951904][ T5814] usb usb2-port1: attempt power cycle [ 824.041128][T13318] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2055'. [ 824.929033][T13329] binder: 13320:13329 ioctl c0306201 200000000080 returned -14 [ 824.952230][T13329] binder: BINDER_SET_CONTEXT_MGR already set [ 824.958371][T13329] binder: 13320:13329 ioctl 4018620d 200000000040 returned -16 [ 824.968959][T13329] binder: 13320:13329 ioctl c0306201 2000000003c0 returned -14 [ 824.982331][ T5811] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 825.372246][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 825.394771][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 825.428908][ T5811] usb 3-1: config 8 has an invalid interface number: 42 but max is 0 [ 825.460097][ T5811] usb 3-1: config 8 has no interface number 0 [ 825.633306][ T5811] usb 3-1: config 8 interface 42 has no altsetting 0 [ 825.652924][ T5811] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 825.673800][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.691584][ T5811] usb 3-1: Product: syz [ 825.697595][ T5811] usb 3-1: Manufacturer: syz [ 825.702255][ T5811] usb 3-1: SerialNumber: syz [ 826.030092][T13323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.069360][T13323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.428449][T13323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.506172][T13323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.121501][ T5811] empeg 3-1:8.42: empeg converter detected [ 827.127465][ T5811] usb 3-1: active config #8 != 1 ?? [ 827.138325][ T5811] usb 3-1: USB disconnect, device number 13 [ 827.915240][T13347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2064'. [ 829.121591][T13369] misc userio: Invalid payload size [ 829.127176][T13369] misc userio: No port type given on /dev/userio [ 829.140829][T13369] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 829.149433][T13369] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.158839][T13369] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.167631][T13369] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.251119][T13369] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.260170][T13369] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.269903][T13369] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.279050][T13369] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.531440][T13377] misc userio: No port type given on /dev/userio [ 830.273206][T13394] overlayfs: overlapping lowerdir path [ 830.355216][T13396] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 832.504564][T13406] netlink: 'syz.3.2076': attribute type 4 has an invalid length. [ 832.642342][T13407] netlink: 'syz.3.2076': attribute type 4 has an invalid length. [ 833.348647][T13415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2079'. [ 833.680673][T13412] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2078'. [ 833.829871][T13410] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 835.086610][T13430] misc userio: Invalid payload size [ 835.092159][T13430] misc userio: No port type given on /dev/userio [ 835.250668][T12350] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 835.461992][T13441] bridge0: port 3(syz_tun) entered blocking state [ 835.492427][T13441] bridge0: port 3(syz_tun) entered disabled state [ 835.530383][T13441] syz_tun: entered allmulticast mode [ 835.531241][T12350] usb 2-1: Using ep0 maxpacket: 16 [ 835.543108][T13441] syz_tun: entered promiscuous mode [ 835.561431][T13441] bridge0: port 3(syz_tun) entered blocking state [ 835.563871][T12350] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.571758][T13441] bridge0: port 3(syz_tun) entered forwarding state [ 835.583789][T12350] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 835.628042][T12350] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 835.658033][T12350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.677076][T12350] usb 2-1: Product: syz [ 835.685496][T12350] usb 2-1: Manufacturer: syz [ 835.697151][T12350] usb 2-1: SerialNumber: syz [ 835.831889][T13444] misc userio: No port type given on /dev/userio [ 836.164285][T12350] usb 2-1: cannot find UAC_HEADER [ 836.231620][T12350] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 836.361296][T12589] udevd[12589]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.414294][T12350] usb 2-1: USB disconnect, device number 12 [ 837.133139][T13453] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2090'. [ 837.608750][T13466] misc userio: Invalid payload size [ 837.614530][T13466] misc userio: No port type given on /dev/userio [ 837.787353][T12417] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 838.441542][T12417] usb 2-1: unable to get BOS descriptor or descriptor too short [ 838.464577][T12417] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 838.485057][T12417] usb 2-1: can't read configurations, error -71 [ 839.077040][T13487] syz.3.2099 (13487) used greatest stack depth: 17704 bytes left [ 839.759957][T13492] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2101'. [ 839.896877][T13491] xt_hashlimit: size too large, truncated to 1048576 [ 839.997874][T13494] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 840.137233][T13485] misc userio: No port type given on /dev/userio [ 840.679784][ C0] Adjusting tsc more than 11% (6079458 vs 8464875) [ 841.035078][T13505] misc userio: Invalid payload size [ 841.041074][T13505] misc userio: No port type given on /dev/userio [ 841.053955][T13505] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 841.062523][T13505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.071321][T13505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.080066][T13505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.351784][T13505] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.360662][T13505] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.369834][T13505] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.378842][T13505] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.792093][T13525] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 843.800605][T13525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.809358][T13525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.818158][T13525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.858092][T13525] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.866763][T13525] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.875776][T13525] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.884838][T13525] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.684837][T13537] binder: 13536:13537 ioctl c0306201 200000000080 returned -14 [ 844.696192][T13537] binder_alloc: 13536: binder_alloc_buf, no vma [ 844.733253][T13529] misc userio: No port type given on /dev/userio [ 845.633604][T13544] misc userio: Invalid payload size [ 845.639252][T13544] misc userio: No port type given on /dev/userio [ 848.086378][T13564] misc userio: No port type given on /dev/userio [ 849.217673][T12351] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 849.566480][T13584] misc userio: Invalid payload size [ 849.572022][T13584] misc userio: No port type given on /dev/userio [ 849.584730][T13584] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 849.593361][T13584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.602104][T13584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.610872][T13584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.740419][T13595] loop2: detected capacity change from 0 to 512 [ 851.771022][T13595] ext4: Unknown parameter 'dont_measure' [ 852.058157][T13596] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 852.520739][T13584] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.529534][T13584] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.538588][T13584] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.547624][T13584] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.080043][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2130'. [ 854.566469][T13602] loop2: detected capacity change from 0 to 131072 [ 854.791573][T13602] F2FS-fs (loop2): Found nat_bits in checkpoint [ 854.873900][T13602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 856.893090][T13635] tipc: Started in network mode [ 856.898368][T13635] tipc: Node identity ac14140f, cluster identity 4711 [ 856.933193][T13635] tipc: New replicast peer: 255.255.255.255 [ 856.960853][T13635] tipc: Enabled bearer , priority 10 [ 857.026866][T13637] loop3: detected capacity change from 0 to 512 [ 857.060919][T13637] ext4: Unknown parameter 'dont_measure' [ 858.180673][T12351] tipc: Node number set to 2886997007 [ 858.311871][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2144'. [ 858.423733][T13647] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 859.846570][T13666] binder: 13656:13666 ioctl c0306201 200000000080 returned -14 [ 860.388975][T13666] binder: 13656:13666 ioctl c0306201 2000000003c0 returned -14 [ 861.132276][T13672] loop3: detected capacity change from 0 to 512 [ 861.376832][T13672] EXT4-fs: inline encryption not supported [ 861.410757][T13672] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 861.530771][T13672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 861.908020][T13672] EXT4-fs (loop3): orphan cleanup on readonly fs [ 862.158040][T13672] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2150: inode #15: comm syz.3.2150: iget: illegal inode # [ 862.213493][T13672] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.2150: couldn't read orphan inode 15 (err -117) [ 862.260508][T13672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 862.457845][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'. [ 863.101876][T13684] misc userio: Invalid payload size [ 863.107682][T13684] misc userio: No port type given on /dev/userio [ 863.638433][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.629262][T13704] binder: 13696:13704 ioctl c0306201 200000000080 returned -14 [ 866.063034][T13704] binder: BINDER_SET_CONTEXT_MGR already set [ 866.069103][T13704] binder: 13696:13704 ioctl 4018620d 200000000040 returned -16 [ 866.083605][T13704] binder: 13696:13704 ioctl c0306201 2000000003c0 returned -14 [ 867.200731][T13707] netlink: 'syz.3.2154': attribute type 4 has an invalid length. [ 867.445633][T13711] netlink: 'syz.3.2154': attribute type 4 has an invalid length. [ 867.613855][T12350] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 867.822635][T12350] usb 2-1: unable to get BOS descriptor or descriptor too short [ 867.858548][T12350] usb 2-1: too many endpoints for config 1 interface 0 altsetting 128: 253, using maximum allowed: 30 [ 867.884965][T12350] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1544, setting to 8 [ 867.912763][T12350] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x82 is Bulk; changing to Interrupt [ 867.944621][T12350] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x3 is Bulk; changing to Interrupt [ 867.987760][T12350] usb 2-1: config 1 interface 0 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 253 [ 868.015094][T12350] usb 2-1: config 1 interface 0 has no altsetting 0 [ 868.027184][T12350] usb 2-1: string descriptor 0 read error: -22 [ 868.033546][T12350] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.047660][T12350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.070993][T13717] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 868.080693][T13717] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 868.102234][T13717] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 868.123939][T12350] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 868.443449][T13721] random: crng reseeded on system resumption [ 869.050804][T13727] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 869.060448][T13727] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.069286][T13727] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.078108][T13727] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.090977][T13727] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.099641][T13727] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.108591][T13727] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.117581][T13727] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.252375][T12350] usb 2-1: USB disconnect, device number 15 [ 869.955258][T13733] loop3: detected capacity change from 0 to 512 [ 869.973542][T13733] ext4: Unknown parameter 'dont_measure' [ 871.449119][T13748] binder: 13740:13748 ioctl c0306201 200000000080 returned -14 [ 871.464462][T13748] binder: BINDER_SET_CONTEXT_MGR already set [ 871.470570][T13748] binder: 13740:13748 ioctl 4018620d 200000000040 returned -16 [ 871.480872][T13748] binder: 13740:13748 ioctl c0306201 2000000003c0 returned -14 [ 874.177329][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2173'. [ 874.189439][T13770] misc userio: Invalid payload size [ 874.194976][T13770] misc userio: No port type given on /dev/userio [ 874.259051][T13771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2173'. [ 876.550366][T13784] overlayfs: failed to resolve './file1': -2 [ 877.998463][T13786] binder: 13783:13786 ioctl c0306201 200000000080 returned -14 [ 878.008326][T13786] binder: BINDER_SET_CONTEXT_MGR already set [ 878.014488][T13786] binder: 13783:13786 ioctl 4018620d 200000000040 returned -16 [ 878.022558][T13786] binder: 13783:13786 ioctl c0306201 2000000003c0 returned -14 [ 879.366797][T13804] xt_hashlimit: size too large, truncated to 1048576 [ 879.468282][T13806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 879.898389][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2185'. [ 879.922981][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2185'. [ 880.565050][T13820] misc userio: Invalid payload size [ 880.570566][T13820] misc userio: No port type given on /dev/userio [ 880.583537][T13820] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 880.592021][T13820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.600880][T13820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.611098][T13820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.622034][T13820] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.630711][T13820] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.639880][T13820] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.649094][T13820] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.476610][T13827] binder: 13825:13827 ioctl c0306201 200000000080 returned -14 [ 881.486289][T13827] binder: 13825:13827 ioctl c0306201 2000000003c0 returned -14 [ 881.712596][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 881.720443][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.641095][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2193'. [ 884.331568][T13853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2195'. [ 884.358437][T13853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2195'. [ 885.865937][T13867] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2199'. [ 885.918076][T13866] misc userio: Invalid payload size [ 885.923578][T13866] misc userio: No port type given on /dev/userio [ 885.935365][T13866] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 885.943811][T13866] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.952611][T13866] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.961312][T13866] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.983187][T13866] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.992333][T13866] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.001578][T13866] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.010499][T13866] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.520078][T13876] binder: 13868:13876 ioctl c0306201 200000000080 returned -14 [ 886.542335][T13876] binder: BINDER_SET_CONTEXT_MGR already set [ 886.548563][T13876] binder: 13868:13876 ioctl 4018620d 200000000040 returned -16 [ 886.559193][T13876] binder: 13868:13876 ioctl c0306201 2000000003c0 returned -14 [ 887.028395][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 892.135595][T13906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2208'. [ 892.160571][T13906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2208'. [ 892.630051][T13913] misc userio: Invalid payload size [ 892.635540][T13913] misc userio: No port type given on /dev/userio [ 892.649689][T13913] netdevsim netdevsim3 : set [1, 0] type 2 family 0 port 6081 - 0 [ 892.658173][T13913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.667048][T13913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.675905][T13913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.709126][T13913] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.717796][T13913] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.726713][T13913] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.735802][T13913] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.255477][T13904] overlayfs: conflicting lowerdir path [ 893.777378][T13925] binder: 13920:13925 ioctl c0306201 200000000080 returned -14 [ 893.787295][T13925] binder: BINDER_SET_CONTEXT_MGR already set [ 893.793392][T13925] binder: 13920:13925 ioctl 4018620d 200000000040 returned -16 [ 893.801514][T13925] binder: 13920:13925 ioctl c0306201 2000000003c0 returned -14 [ 894.683714][T13929] netlink: 336 bytes leftover after parsing attributes in process `syz.3.2214'. [ 896.973353][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2218'. [ 897.032009][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2218'. [ 897.420694][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2219'. [ 899.463169][T13960] binder: 13954:13960 ioctl c0306201 200000000080 returned -14 [ 899.471854][T13960] binder: 13954:13960 ioctl c0306201 2000000003c0 returned -14 [ 900.385702][T13962] misc userio: Invalid payload size [ 900.391176][T13962] misc userio: No port type given on /dev/userio [ 902.428400][T13989] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2229'. [ 903.494992][T13989] sctp: [Deprecated]: syz.3.2229 (pid 13989) Use of int in max_burst socket option deprecated. [ 903.494992][T13989] Use struct sctp_assoc_value instead [ 903.672926][T13989] netlink: 'syz.3.2229': attribute type 21 has an invalid length. [ 904.813852][T13981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 908.969058][T14043] misc userio: Invalid payload size [ 908.974618][T14043] misc userio: No port type given on /dev/userio [ 913.387674][T14071] misc userio: Invalid payload size [ 913.393377][T14071] misc userio: No port type given on /dev/userio [ 915.254125][T14080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2258'. [ 915.348180][T14080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2258'. [ 915.403293][T14080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2258'. [ 915.467779][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2259'. [ 915.532418][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2259'. [ 918.449435][T13312] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 918.880025][T13312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2046, setting to 1024 [ 918.895180][T13312] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.40 [ 918.912040][T13312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.922968][T14111] misc userio: Invalid payload size [ 918.928433][T14111] misc userio: No port type given on /dev/userio [ 918.980718][T13312] usb 1-1: Product: syz [ 918.991556][T13312] usb 1-1: Manufacturer: syz [ 918.997950][T13312] usb 1-1: SerialNumber: syz [ 919.072683][T14106] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 920.014084][T13312] usbhid 1-1:1.0: can't add hid device: -71 [ 920.020116][T13312] usbhid: probe of 1-1:1.0 failed with error -71 [ 920.107093][T13312] usb 1-1: USB disconnect, device number 8 [ 921.573320][T14125] misc userio: Invalid payload size [ 921.579410][T14125] misc userio: No port type given on /dev/userio [ 925.651608][T14149] misc userio: Invalid payload size [ 925.657123][T14149] misc userio: No port type given on /dev/userio [ 926.785358][T14158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 926.797784][T14158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 926.807007][T14158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 926.826993][T14158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 926.838968][T14158] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 926.847048][T14158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 927.619609][T14156] chnl_net:caif_netlink_parms(): no params data found [ 928.198698][T14170] fuse: Bad value for 'user_id' [ 928.311239][T14156] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.397826][T14156] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.469686][T14156] bridge_slave_0: entered allmulticast mode [ 928.534079][T14156] bridge_slave_0: entered promiscuous mode [ 928.557351][T14156] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.564772][T14156] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.597290][T14156] bridge_slave_1: entered allmulticast mode [ 928.611542][T14156] bridge_slave_1: entered promiscuous mode [ 928.730147][T14156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.754909][T14156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.888177][T14156] team0: Port device team_slave_0 added [ 928.945830][T14156] team0: Port device team_slave_1 added [ 929.062405][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2281'. [ 929.074115][T14177] overlayfs: failed to resolve './file1/file0': -2 [ 929.110039][ T5775] Bluetooth: hci4: command tx timeout [ 929.290018][T14156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.297221][T14156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.323430][T14156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.509097][T14156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.735229][T14156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.773963][T14156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.915146][T14179] syzkaller0: entered promiscuous mode [ 929.920705][T14179] syzkaller0: entered allmulticast mode [ 930.106511][T14156] hsr_slave_0: entered promiscuous mode [ 930.114165][T14156] hsr_slave_1: entered promiscuous mode [ 930.133470][T14156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 930.144998][T14156] Cannot create hsr debugfs directory [ 930.152038][T14185] gretap0: entered promiscuous mode [ 930.171604][T12726] bridge0: port 3(syz_tun) entered disabled state [ 930.196156][T12726] syz_tun (unregistering): left allmulticast mode [ 930.202843][T12726] syz_tun (unregistering): left promiscuous mode [ 930.210060][T12726] bridge0: port 3(syz_tun) entered disabled state [ 930.534069][T14191] misc userio: Invalid payload size [ 930.539646][T14191] misc userio: No port type given on /dev/userio [ 931.263251][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2286'. [ 931.273767][T14197] 8021q: VLANs not supported on vxcan1 [ 931.387985][ T5775] Bluetooth: hci4: command tx timeout [ 931.436770][T14202] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 931.440828][T14200] fuse: Bad value for 'user_id' [ 931.449647][T14202] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 931.460012][T14202] netlink: 'syz.2.2287': attribute type 2 has an invalid length. [ 931.468175][T14202] netlink: 'syz.2.2287': attribute type 7 has an invalid length. [ 931.476375][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 931.567131][ T28] audit: type=1326 audit(1777530762.224:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14199 comm="syz.0.2288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88859cdd9 code=0x0 [ 932.837455][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2291'. [ 932.854890][T14217] overlayfs: failed to resolve './file1/file0': -2 [ 933.609580][ T5775] Bluetooth: hci4: command tx timeout [ 934.103279][T14235] fuse: Bad value for 'user_id' [ 934.185422][T14237] misc userio: Invalid payload size [ 934.190955][T14237] misc userio: No port type given on /dev/userio [ 935.169084][T14248] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2299'. [ 935.865166][ T5775] Bluetooth: hci4: command tx timeout [ 936.671242][T14156] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 936.686699][T14156] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 936.721965][T14156] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 938.153274][T14156] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 938.797111][T14275] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2305'. [ 938.861349][T14277] fuse: Bad value for 'fd' [ 939.658338][T14291] misc userio: Invalid payload size [ 939.664450][T14291] misc userio: No port type given on /dev/userio [ 940.492593][ T62] hsr_slave_0: left promiscuous mode [ 940.510188][ T62] hsr_slave_1: left promiscuous mode [ 941.192604][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.222585][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.285568][ T62] bridge_slave_1: left allmulticast mode [ 941.302737][ T62] bridge_slave_1: left promiscuous mode [ 941.354881][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.389698][ T62] bridge_slave_0: left allmulticast mode [ 941.396996][ T62] bridge_slave_0: left promiscuous mode [ 941.402818][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.183000][ T62] team0 (unregistering): Port device team_slave_1 removed [ 942.234431][ T62] team0 (unregistering): Port device team_slave_0 removed [ 942.282983][ T62] bond0 (unregistering): (slave ): Releasing backup interface [ 942.336912][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.701809][ T62] bond0 (unregistering): Released all slaves [ 942.851470][T14156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.921132][T14156] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.964791][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.972545][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.012373][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.019603][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.360048][T14324] fuse: Bad value for 'fd' [ 943.835041][T14156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.058713][T14156] veth0_vlan: entered promiscuous mode [ 944.075693][T14156] veth1_vlan: entered promiscuous mode [ 944.183390][T14337] misc userio: Invalid payload size [ 944.188961][T14337] misc userio: No port type given on /dev/userio [ 944.841735][T14156] veth0_macvtap: entered promiscuous mode [ 944.936110][T14156] veth1_macvtap: entered promiscuous mode [ 945.021190][T14156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.068610][T14156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.109408][T14156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.147503][T14156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.190485][T14156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.230878][T14156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.264928][T14156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.369734][T14156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.383043][T14156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.398344][T14156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.411637][T14156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.425005][T14156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.437618][T14156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.635680][T14156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.890786][T14156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.935356][T14156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.986493][T14156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.016987][T14156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.219296][T14346] loop2: detected capacity change from 0 to 512 [ 946.245023][T14346] ext4: Unknown parameter 'dont_measure' [ 946.252980][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.260856][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.533502][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.573022][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.687804][T14351] 8021q: VLANs not supported on gre0 [ 947.928948][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 947.935539][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 948.777580][T14374] misc userio: Invalid payload size [ 948.784083][T14374] misc userio: No port type given on /dev/userio [ 949.463211][T14158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 949.473975][T14158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 949.482415][T14158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 949.496911][T14158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 949.514665][T14158] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 949.538711][T14158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 949.721404][ T5889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.759453][ T5889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.762672][ T5889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.795169][ T5889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.870242][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2329'. [ 950.898614][T14390] 8021q: VLANs not supported on gre0 [ 950.977735][ T5889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.998535][ T5889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.024109][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2331'. [ 951.312197][ T5889] netdevsim netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.322679][ T5889] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.467222][T14376] chnl_net:caif_netlink_parms(): no params data found [ 951.741004][ T5775] Bluetooth: hci2: command tx timeout [ 952.307238][T14376] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.336725][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.340828][T14402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.344179][T14376] bridge_slave_0: entered allmulticast mode [ 952.395245][T14376] bridge_slave_0: entered promiscuous mode [ 952.410471][T14376] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.418145][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.431491][T14376] bridge_slave_1: entered allmulticast mode [ 952.440108][T14376] bridge_slave_1: entered promiscuous mode [ 952.679884][T14376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.723122][T14376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.732750][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 952.750725][T14420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2334'. [ 952.765680][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2334'. [ 952.775023][T14420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2334'. [ 953.101659][T14376] team0: Port device team_slave_0 added [ 953.118570][T14376] team0: Port device team_slave_1 added [ 953.282518][T14376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.289570][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.315533][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.371560][T14376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.396231][T14376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.418650][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.444648][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.495896][T14376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.700126][T14434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 954.081374][ T5775] Bluetooth: hci2: command tx timeout [ 954.738137][T14376] hsr_slave_0: entered promiscuous mode [ 954.765376][T14376] hsr_slave_1: entered promiscuous mode [ 954.775888][T14376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 954.786897][T14376] Cannot create hsr debugfs directory [ 955.080465][T14452] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 955.088315][T14452] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 955.122650][T14452] netlink: 'syz.2.2339': attribute type 2 has an invalid length. [ 955.130463][T14452] netlink: 'syz.2.2339': attribute type 7 has an invalid length. [ 955.155045][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2339'. [ 955.167797][T14454] loop3: detected capacity change from 0 to 512 [ 955.191470][T14454] ext4: Unknown parameter 'dont_measure' [ 956.277945][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c4fd400: rx timeout, send abort [ 956.392354][ T5775] Bluetooth: hci2: command tx timeout [ 956.695059][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2346'. [ 957.509023][ T5889] hsr_slave_0: left promiscuous mode [ 957.531108][ T5889] hsr_slave_1: left promiscuous mode [ 957.545631][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.570825][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.611518][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.637613][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.671233][ T5889] bridge_slave_1: left allmulticast mode [ 957.693449][ T5889] bridge_slave_1: left promiscuous mode [ 957.714362][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.749716][ T5889] bridge_slave_0: left allmulticast mode [ 957.755462][ T5889] bridge_slave_0: left promiscuous mode [ 957.772614][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.848148][ T5889] veth1_vlan: left promiscuous mode [ 957.855584][ T5889] veth0_vlan: left promiscuous mode [ 958.544747][T14506] loop3: detected capacity change from 0 to 512 [ 958.552899][T14506] ext4: Unknown parameter 'dont_measure' [ 958.597832][ T5775] Bluetooth: hci2: command tx timeout [ 958.618931][T14109] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 959.087318][ T5889] team0 (unregistering): Port device team_slave_1 removed [ 959.145660][ T5889] team0 (unregistering): Port device team_slave_0 removed [ 959.204341][ T5889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.257778][ T5889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.832714][ T5889] bond0 (unregistering): Released all slaves [ 959.923138][T14482] netlink: 'syz.1.2349': attribute type 1 has an invalid length. [ 959.931162][T14482] netlink: 'syz.1.2349': attribute type 1 has an invalid length. [ 959.939197][T14482] netlink: 'syz.1.2349': attribute type 2 has an invalid length. [ 959.947033][T14482] netlink: 'syz.1.2349': attribute type 7 has an invalid length. [ 959.955138][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2349'. [ 960.311757][T14376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 960.365765][T14376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 960.408377][T14376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 960.692384][T14376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 960.824012][T14530] loop2: detected capacity change from 0 to 512 [ 960.892362][T14530] ext4: Unknown parameter 'dont_measure' [ 961.128320][T14534] netlink: 'syz.1.2363': attribute type 1 has an invalid length. [ 961.204282][T14534] netlink: 'syz.1.2363': attribute type 1 has an invalid length. [ 961.235989][T14534] netlink: 'syz.1.2363': attribute type 2 has an invalid length. [ 961.255406][T14534] netlink: 'syz.1.2363': attribute type 7 has an invalid length. [ 961.277131][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 961.461059][T14376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.647278][T14376] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.717909][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.725140][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.913998][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.921249][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.515597][T14376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.661796][T14376] veth0_vlan: entered promiscuous mode [ 962.706393][T14376] veth1_vlan: entered promiscuous mode [ 962.799524][T14568] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2369'. [ 962.840013][T14376] veth0_macvtap: entered promiscuous mode [ 962.888354][T14568] syzkaller0: entered promiscuous mode [ 962.896975][T14568] syzkaller0: entered allmulticast mode [ 962.932816][T14376] veth1_macvtap: entered promiscuous mode [ 962.964027][T14568] tc action pedit offset must be on 32 bit boundaries [ 962.971233][T14568] tc action pedit offset must be on 32 bit boundaries [ 962.979791][T14568] tc action pedit offset must be on 32 bit boundaries [ 962.986675][T14568] tc action pedit offset must be on 32 bit boundaries [ 962.993509][T14568] tc action pedit offset must be on 32 bit boundaries [ 963.000384][T14568] tc action pedit offset must be on 32 bit boundaries [ 963.007265][T14568] tc action pedit offset must be on 32 bit boundaries [ 963.014086][T14568] tc action pedit offset must be on 32 bit boundaries [ 963.020994][T14568] tc action pedit offset must be on 32 bit boundaries [ 963.027835][T14568] tc action pedit offset must be on 32 bit boundaries [ 963.034664][T14568] 0: reclassify loop, rule prio 0, protocol 800 [ 963.072667][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.087957][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.098599][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.133663][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.179278][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.189971][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.222160][T14376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.303441][T14578] netlink: 'syz.2.2370': attribute type 72 has an invalid length. [ 963.318577][T14581] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 963.331528][T14581] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 963.339630][T14581] netlink: 'syz.3.2371': attribute type 2 has an invalid length. [ 963.376137][T14581] netlink: 'syz.3.2371': attribute type 7 has an invalid length. [ 963.387136][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 963.489491][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.524459][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.536987][T14586] loop2: detected capacity change from 0 to 512 [ 963.559777][T14586] ext4: Unknown parameter 'dont_measure' [ 963.581590][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.615107][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.650961][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 963.665772][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.701371][T14376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.747538][T14376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.777623][T14376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.800415][T14109] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 963.808429][T14376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.852108][T14376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.184310][T14609] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 965.200383][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.250906][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.284288][ T28] audit: type=1326 audit(1777530793.311:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa27d19cdd9 code=0x0 [ 965.432463][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.476126][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.612658][T14616] netlink: 'syz.3.2380': attribute type 72 has an invalid length. [ 965.742353][T14623] fuse: Bad value for 'fd' [ 966.019620][T14636] loop2: detected capacity change from 0 to 512 [ 966.066957][T14636] ext4: Unknown parameter 'dont_measure' [ 966.331943][T13967] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 967.158915][T14650] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 967.413578][T14646] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2389'. [ 967.764680][T14663] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2392'. [ 969.733886][T14710] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2403'. [ 972.866483][T14751] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2415'. [ 973.437591][T14775] misc userio: Invalid payload size [ 973.443189][T14775] misc userio: No port type given on /dev/userio [ 977.072434][T14831] misc userio: Invalid payload size [ 977.077956][T14831] misc userio: No port type given on /dev/userio [ 977.790954][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2431'. [ 978.416446][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2436'. [ 978.877705][ T11] ------------[ cut here ]------------ [ 978.883752][ T11] WARNING: CPU: 0 PID: 11 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 978.894765][ T11] Modules linked in: [ 978.898735][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 978.906267][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 978.916558][ T11] Workqueue: phy3 ieee80211_csa_finalize_work [ 978.922717][ T11] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 978.930168][ T11] Code: 48 89 df e8 2a 33 d6 f7 e9 dc fc ff ff e8 10 fc 7d f7 eb 24 e8 09 fc 7d f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 f8 fb 7d f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ea fb 7d f7 48 8b 7c 24 08 4c 8b 7c [ 978.950016][ T11] RSP: 0018:ffffc900001079c0 EFLAGS: 00010293 [ 978.956165][ T11] RAX: ffffffff8a09220e RBX: 0000000000000001 RCX: ffff88801a273c00 [ 978.964348][ T11] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 978.972475][ T11] RBP: dffffc0000000000 R08: ffff88805c1f95af R09: 1ffff1100b83f2b5 [ 978.980576][ T11] R10: dffffc0000000000 R11: ffffed100b83f2b6 R12: 0000000000000001 [ 978.986445][ C1] ------------[ cut here ]------------ [ 978.991145][ T11] R13: ffff88805c1fa5d9 R14: ffff88807e4d2c70 R15: ffff88807e4d2ce8 [ 978.994500][ C1] WARNING: CPU: 1 PID: 14855 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 979.003185][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 979.012600][ C1] Modules linked in: [ 979.021567][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 979.021588][ T11] CR2: 000000110c3aa4a5 CR3: 000000002e8f2000 CR4: 00000000003506f0 [ 979.025525][ C1] CPU: 1 PID: 14855 Comm: syz.1.2437 Not tainted syzkaller #0 [ 979.025547][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 979.025561][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 979.032172][ T11] Call Trace: [ 979.040206][ C1] Code: 24 4c 89 e7 e8 fe 69 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 a7 82 f7 0f 0b e9 f6 f7 ff ff e8 ed a7 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 a7 82 f7 48 c7 c7 60 89 64 8e 4c 89 e6 [ 979.047862][ T11] [ 979.057813][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 979.064181][ T11] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 979.067568][ C1] [ 979.067577][ C1] RAX: ffffffff8a047a13 RBX: ffffffff8a046816 RCX: ffff888029fada00 [ 979.067595][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 979.067609][ C1] RBP: 0000000000000000 R08: ffff888029fada00 R09: 0000000000000003 [ 979.067626][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c1fa3c0 [ 979.087338][ T11] ieee80211_csa_finalize+0x5a6/0xf20 [ 979.090284][ C1] R13: dffffc0000000000 R14: ffff88805c1fa8b0 R15: ffff88802eba9424 [ 979.099356][ T11] ? mutex_lock_nested+0x20/0x20 [ 979.102975][ C1] FS: 00007fa27e1276c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 979.105247][ T11] ? lockdep_hardirqs_on+0x98/0x150 [ 979.113282][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 979.113301][ C1] CR2: 00007f5407c4f0d1 CR3: 000000002e8f2000 CR4: 00000000003506e0 [ 979.113320][ C1] Call Trace: [ 979.113329][ C1] [ 979.113340][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 979.113379][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 979.113412][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 979.113453][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 979.113487][ C1] __iterate_interfaces+0x243/0x500 [ 979.121583][ T11] ? ieee80211_csa_finalize_work+0x140/0x140 [ 979.129561][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 979.137734][ T11] ? read_lock_is_recursive+0x20/0x20 [ 979.142966][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 979.143010][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 979.150997][ T11] ieee80211_csa_finalize_work+0xf6/0x140 [ 979.151033][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 979.156007][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 979.156047][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 979.156073][ C1] __hrtimer_run_queues+0x520/0xc40 [ 979.156097][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 979.156138][ C1] ? hw_scan_work+0xf60/0xf60 [ 979.156169][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 979.156192][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 979.156224][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 979.156250][ C1] handle_softirqs+0x280/0x820 [ 979.156277][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 979.156302][ C1] ? do_softirq+0x1a0/0x1a0 [ 979.156329][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 979.156361][ C1] __irq_exit_rcu+0xd3/0x190 [ 979.156383][ C1] ? irq_exit_rcu+0x20/0x20 [ 979.156413][ C1] irq_exit_rcu+0x9/0x20 [ 979.156431][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 979.156456][ C1] [ 979.156464][ C1] [ 979.156473][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.156501][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 979.156532][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0b 64 cc f6 65 8b 05 4c 91 73 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 979.156551][ C1] RSP: 0018:ffffc900050575a0 EFLAGS: 00000206 [ 979.156574][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: d1fc56ccaa078700 [ 979.156591][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 979.156607][ C1] RBP: ffffc90005057638 R08: ffffffff911c65af R09: 1ffffffff2238cb5 [ 979.156624][ C1] R10: dffffc0000000000 R11: fffffbfff2238cb6 R12: dffffc0000000000 [ 979.156640][ C1] R13: 1ffff1100f41e446 R14: ffff88807a0f21d0 R15: 1ffff92000a0aeb4 [ 979.156675][ C1] ? _raw_spin_unlock+0x40/0x40 [ 979.156713][ C1] __skb_try_recv_datagram+0x17d/0x4d0 [ 979.156759][ C1] ? sock_load_diag_module+0x140/0x140 [ 979.156811][ C1] __unix_dgram_recvmsg+0x2f8/0xd80 [ 979.156848][ C1] ? unix_unhash+0x10/0x10 [ 979.156875][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.156899][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 979.156929][ C1] ? mark_lock+0x94/0x320 [ 979.156949][ C1] ? unix_dgram_recvmsg+0xad/0xd0 [ 979.156967][ C1] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 979.156987][ C1] sock_recvmsg_nosec+0x82/0xd0 [ 979.157016][ C1] ____sys_recvmsg+0x4e8/0x5e0 [ 979.157045][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 979.157077][ C1] ? import_iovec+0x73/0xa0 [ 979.157098][ C1] ___sys_recvmsg+0x216/0x590 [ 979.157129][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 979.157165][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 979.157192][ C1] ? __might_fault+0xc6/0x120 [ 979.157209][ C1] ? __might_fault+0xaa/0x120 [ 979.157229][ C1] do_recvmmsg+0x39a/0x870 [ 979.157265][ C1] ? __sys_recvmmsg+0x290/0x290 [ 979.157301][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 979.157323][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 979.157367][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 979.157395][ C1] ? do_recvmmsg+0x870/0x870 [ 979.157421][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 979.157452][ C1] do_syscall_64+0x55/0xa0 [ 979.157471][ C1] ? clear_bhb_loop+0x40/0x90 [ 979.157497][ C1] ? clear_bhb_loop+0x40/0x90 [ 979.157528][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 979.157555][ C1] RIP: 0033:0x7fa27d19cdd9 [ 979.157587][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.157607][ C1] RSP: 002b:00007fa27e127028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 979.157632][ C1] RAX: ffffffffffffffda RBX: 00007fa27d416090 RCX: 00007fa27d19cdd9 [ 979.157649][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 979.157663][ C1] RBP: 00007fa27d232d69 R08: 0000000000000000 R09: 0000000000000000 [ 979.157677][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 979.157690][ C1] R13: 00007fa27d416128 R14: 00007fa27d416090 R15: 00007ffe2b6cb4e8 [ 979.157724][ C1] [ 979.157735][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 979.157751][ C1] CPU: 1 PID: 14855 Comm: syz.1.2437 Not tainted syzkaller #0 [ 979.157771][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 979.157783][ C1] Call Trace: [ 979.157791][ C1] [ 979.157798][ C1] dump_stack_lvl+0x18c/0x250 [ 979.157832][ C1] ? show_regs_print_info+0x20/0x20 [ 979.157864][ C1] ? load_image+0x420/0x420 [ 979.157903][ C1] panic+0x2dc/0x730 [ 979.157934][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 979.157977][ C1] __warn+0x2e0/0x470 [ 979.158000][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 979.158030][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 979.158056][ C1] report_bug+0x2be/0x4f0 [ 979.158079][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 979.158189][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 979.158273][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 979.158359][ C1] handle_bug+0xcf/0x120 [ 979.158419][ C1] exc_invalid_op+0x1a/0x50 [ 979.158485][ C1] asm_exc_invalid_op+0x1a/0x20 [ 979.158578][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 979.158663][ C1] Code: 24 4c 89 e7 e8 fe 69 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 a7 82 f7 0f 0b e9 f6 f7 ff ff e8 ed a7 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 a7 82 f7 48 c7 c7 60 89 64 8e 4c 89 e6 [ 979.158711][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 979.158765][ C1] RAX: ffffffff8a047a13 RBX: ffffffff8a046816 RCX: ffff888029fada00 [ 979.158801][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 979.158833][ C1] RBP: 0000000000000000 R08: ffff888029fada00 R09: 0000000000000003 [ 979.158861][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c1fa3c0 [ 979.158902][ C1] R13: dffffc0000000000 R14: ffff88805c1fa8b0 R15: ffff88802eba9424 [ 979.158956][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 979.159026][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 979.159133][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 979.159201][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 979.159297][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 979.159375][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 979.159480][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 979.159575][ C1] __iterate_interfaces+0x243/0x500 [ 979.159682][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 979.159754][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 979.159835][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 979.159903][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 979.160001][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 979.160066][ C1] __hrtimer_run_queues+0x520/0xc40 [ 979.160131][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 979.160218][ C1] ? hw_scan_work+0xf60/0xf60 [ 979.160291][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 979.160351][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 979.160437][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 979.160507][ C1] handle_softirqs+0x280/0x820 [ 979.160569][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 979.160631][ C1] ? do_softirq+0x1a0/0x1a0 [ 979.160693][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 979.160765][ C1] __irq_exit_rcu+0xd3/0x190 [ 979.160816][ C1] ? irq_exit_rcu+0x20/0x20 [ 979.160881][ C1] irq_exit_rcu+0x9/0x20 [ 979.160932][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 979.160975][ C1] [ 979.161000][ C1] [ 979.161029][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.161116][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 979.161178][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0b 64 cc f6 65 8b 05 4c 91 73 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 979.161219][ C1] RSP: 0018:ffffc900050575a0 EFLAGS: 00000206 [ 979.161260][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: d1fc56ccaa078700 [ 979.161300][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 979.161338][ C1] RBP: ffffc90005057638 R08: ffffffff911c65af R09: 1ffffffff2238cb5 [ 979.161372][ C1] R10: dffffc0000000000 R11: fffffbfff2238cb6 R12: dffffc0000000000 [ 979.161411][ C1] R13: 1ffff1100f41e446 R14: ffff88807a0f21d0 R15: 1ffff92000a0aeb4 [ 979.161525][ C1] ? _raw_spin_unlock+0x40/0x40 [ 979.161651][ C1] __skb_try_recv_datagram+0x17d/0x4d0 [ 979.161749][ C1] ? sock_load_diag_module+0x140/0x140 [ 979.161850][ C1] __unix_dgram_recvmsg+0x2f8/0xd80 [ 979.161984][ C1] ? unix_unhash+0x10/0x10 [ 979.162071][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 979.162147][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 979.162236][ C1] ? mark_lock+0x94/0x320 [ 979.162292][ C1] ? unix_dgram_recvmsg+0xad/0xd0 [ 979.162362][ C1] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 979.162447][ C1] sock_recvmsg_nosec+0x82/0xd0 [ 979.162542][ C1] ____sys_recvmsg+0x4e8/0x5e0 [ 979.162639][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 979.162742][ C1] ? import_iovec+0x73/0xa0 [ 979.162807][ C1] ___sys_recvmsg+0x216/0x590 [ 979.162876][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 979.162995][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 979.163074][ C1] ? __might_fault+0xc6/0x120 [ 979.163137][ C1] ? __might_fault+0xaa/0x120 [ 979.163204][ C1] do_recvmmsg+0x39a/0x870 [ 979.163282][ C1] ? __sys_recvmmsg+0x290/0x290 [ 979.163383][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 979.163420][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 979.163514][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 979.163582][ C1] ? do_recvmmsg+0x870/0x870 [ 979.163646][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 979.163725][ C1] do_syscall_64+0x55/0xa0 [ 979.163788][ C1] ? clear_bhb_loop+0x40/0x90 [ 979.163871][ C1] ? clear_bhb_loop+0x40/0x90 [ 979.163935][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 979.163996][ C1] RIP: 0033:0x7fa27d19cdd9 [ 979.164037][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.164079][ C1] RSP: 002b:00007fa27e127028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 979.164139][ C1] RAX: ffffffffffffffda RBX: 00007fa27d416090 RCX: 00007fa27d19cdd9 [ 979.164178][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 979.164210][ C1] RBP: 00007fa27d232d69 R08: 0000000000000000 R09: 0000000000000000 [ 979.164241][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 979.164271][ C1] R13: 00007fa27d416128 R14: 00007fa27d416090 R15: 00007ffe2b6cb4e8 [ 979.164350][ C1] [ 979.167606][ C1] Kernel Offset: disabled