last executing test programs: 6.799242609s ago: executing program 0 (id=2654): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4008000) 6.589444634s ago: executing program 0 (id=2656): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x80}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.102023916s ago: executing program 0 (id=2660): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41) pipe(0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000005880)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000005900), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000005980)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005a00)="1400000052004f7fb3e4bf80a000f00c00000000", 0x14) close(0xffffffffffffffff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 4.018705719s ago: executing program 2 (id=2673): r0 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x80) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000480)={0x8, 0xcfa5, 0x0, 0x0, 0xfff, 0x3ff, "a07e336376e25d665bfec5e05cf341d2", 0x3, 0x2d, 0x7, 0x6, 0x8, 0x9, 0x7f}) 3.364805916s ago: executing program 0 (id=2681): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000001840)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) sendto$inet6(r0, &(0x7f0000002f40)="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", 0xf80, 0x800, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003fc0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x44) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000004000)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000004040)=""/220, 0xdc, 0x1, 0x0}, &(0x7f0000004140)=0x40) 2.695902992s ago: executing program 2 (id=2682): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000240)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x31, 0x32]}, &(0x7f0000000340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000440)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000540)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000740)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @desc1}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x61, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x31, 0x32]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000a40)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ac0), &(0x7f0000000b00)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000b40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @auto=[0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000c40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @auto=[0x62, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x63]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), 0x0, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001140)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001240)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 2.530887566s ago: executing program 3 (id=2684): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000200)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ee) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='offline', 0x7) write(0xffffffffffffffff, &(0x7f0000000480)='n', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) syz_emit_ethernet(0x76, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x7, '\x00', {0x6, 0x6, '\tkS', 0x86, 0x33, 0xff, @empty, @loopback, [@fragment={0x29, 0x0, 0x6, 0x0, 0x0, 0x5, 0x68}], "93f79649efef1d8c"}}}}}}}, 0x0) mount(&(0x7f0000000080)=@filename='127.0.0.1:file0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='nfs4\x00', 0x48, &(0x7f0000000140)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') 2.489958797s ago: executing program 2 (id=2685): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)="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", 0x116}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000009c0)="b826c4139a86353cbda69434b1660c9490c1dce0068251193a8d0bbe9ef1d234afe76884532fc1418ff5250c917485f0ff345b39a90da2123a68e59c81b4e1291b7fa7c753d100d8ac26326a5828673dbb1f284799a2655eb91a1d1d35f4adc7c85920b40ba4c90bcbe564bad4422f2c1df8aab220851f24feb537bc74c14c70c096f4f82676b8", 0x87}, {&(0x7f0000000a80)="85def750bf0f970d18673f7a66da039282c9e8bad703922b4bb30ba92ee6e4a38cc1e681f094c48eacc04a75eee5d9bafa37c0339df18615d436", 0x3a}, {&(0x7f0000000ac0)="99ddc8b5582b558a3c0366c34c19fb5e63050b060f8c573ef4b40a4f91e798498320af4f9deefe54ab0e05ec5cea2f08e75b313b5aa4e36ce2b7361e133ec162079509e078fd813296ca83514d6f96c7b8e130291ed9bb423b7dde7dfcb055473d6088413d2ff2b0942db70a0f31444096ec76be0773ac66b01fd3d618c85ade1bb12bc85324", 0x86}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000e80)="98b00967c5c7904da7c6a62237c944f98187705d27ec2e87121ee503bb029dec67124692e4438e228f72bcfae7e07eeaf3b852086a93b875080cf4181532b7d7685cc71acff78b2a50a8685f487267f1ad7e4197bf9ec3ffc2e57a8bd6bac61b0e09e610c92d57c7cd482583d053f748e1176b4c63df7f34e9985f66ab1a1b3195be50d2a1f75f67350c05a766b12b0a74a55af4d13421a740b7427e556eeb926f66fa51be722882b51a1d994a3d8399ea598d9426171d119f70f42e1808a18a9207264c57af29f2e43ae70110758d0184910d57ee7abe042be58159301a3fc51b4aa32a5e752d017b89ae8d70959b271345bd5a27d58659e5a8d858c1923c8821ffa65d235af453f86f810ffc61d45c658dac96d4f20335ab7edd445d52433b307d16478e3578d96cffaf3bdc40d9c3e2c67a892cce2e8409be7ff568cfba1b9ca5feead69388f90d986f45246000e48f83b1f8e363bd21a753067660057610e40ef5d87e095059a389718a772ef4205691bbe55e55d053c6c0bd599b0a27dcc5d1b9a327bd365f60ad8a880566ef5705a3a016fcffaab758235851456b8084cd5ea851e0cc214e468e1d2a6e882904bbc099a9b819c1826421e5f8e4c03c9cde98ccfacfb1f1a67084e1e1d5c9617fece7719dbf271f50e9a8bbf21bf0a194c34782726a2c61bd24816055e0a6dc3d1bd1942bb2d201ad6fe75796abe456a16b6c9533ab4e51d1d02da67c150f4792aa21c46b3e15cb6c4076ace3fd7a9edae0accfc21fa08245e51065803ad762733db70a8db608c62533a0892f900870bdf0c682ccfccf9f75ab2b47311143994bef6d69834406c2134385a0d1176241989498eb77bf74b164e84e763e3fa4fef898556c1cc5ad916377888d2c8d141a5c339d23a028ed785fc582bba53a19f51b9517d92337df333f6c55c69fbbbc3d58b3ccbd6f0e8729fa5fc083a0c4ad5d2e020ff668efa3cbe434c119f3e534a4370da2d062d60fe08ecb8aa5b54cdb091eb349e42fda4ee6db3fcfeb8cfcf0fbf73d3cba12941e8f545cef4f22a347fa15391d3b54a68cd3a2756700b5c4cc384ba31522539eda54b6c78c80a2d32e7e41fbf800bb4ac95ff141c45bbf84b79ada9ad06e1b1a6707afa62777bc598a7b236cee03bd3cdda4ad2a666a959a799c7ebde1e26803e30942afe22ef9c42b2f8403ad20a9a28329851d838308c44dccbb4a95cb8dde385abb82c4959d33ecbea626412fbf69c2aa5de2c593d49183e02f75af9cfa513d87fd6327c4696c66d8fd22ad27506e5771811d44782474f53491c09402b0b6c0d940d7dc9aeaffbba0cddb65c4a1d3cba9d14e6637e3a63abe423df8e7757140fc6e6da54c9122d955fac9c9872fb8a763a64f88e440bf74b8cef06ded0ced10ae4689c958f0f2ec48009add53b6113ed6e778b540958d24cbc874e26e1b20c8db1a3093916e3eedd0f40c3cbedb6c5f5db9d8ac84656310cb5dd9c7f3d06d3c6fcf7522a63088e63686c20b6d2d4339b7f157611a93acfa1e3f6aee606eea9d9bc92f8abc4a3b77b7b850510d943a049078290678d9de1bcd9bf099e0cbf7f455f9b2c30099180ce076dc0f0109a3a9a59a312fa89217d1c79f53f5034e5feb07906d4846cdabf4f61ee77f3c52021862bb9eed565472dd24c8c3a47a24200ecc1cac657589670d4123fe2a1746b679d31cc578adb24c41543565c6dd8416852f9120c5a47688a5335797a915ad2202a374", 0x4d8}], 0x1}}], 0x3, 0x0) 2.4054023s ago: executing program 1 (id=2686): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x20000000, 0xb, 0xdc}, 0x3, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) 2.303032662s ago: executing program 2 (id=2687): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400000007fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@fd={0x6, 0x1, 0x4, 0x800, 0xc, {0x77359400}, {0x4, 0x1, 0xc, 0x3, 0xfb, 0x2}, 0x1, 0x4, {}, 0xfffffffb}) 2.185100365s ago: executing program 1 (id=2688): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000dee400000020000000100000000000000000000000d000000feffffff100000000000000001"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.144395386s ago: executing program 2 (id=2689): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000980)='asymmetric\x00', &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) keyctl$restrict_keyring(0xa, r0, 0x0, &(0x7f0000000b00)='id:cb2e') 2.035614069s ago: executing program 1 (id=2690): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4096, 0x1800}], 0x1, 0x0, 0x100000}}], 0x1, 0x121, 0x0) 1.953128231s ago: executing program 2 (id=2691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.758362326s ago: executing program 3 (id=2692): syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d03000000b85ba123469d944958af20000000000000000105000000200000010e0000"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000600)=[{&(0x7f0000000680)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x30}, {&(0x7f0000000700)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3d5", 0x3d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x70, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) recvmmsg$unix(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, 0x0, 0x0) connect$x25(r3, &(0x7f0000000900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000940)={'bond0\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) 687.549783ms ago: executing program 3 (id=2693): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000240)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x31, 0x32]}, &(0x7f0000000340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000440)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000540)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000740)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @desc1}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x61, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x31, 0x32]}, &(0x7f0000000940)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000a40)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ac0), &(0x7f0000000b00)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000b40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000bc0), &(0x7f0000000c00)={'fscrypt:', @auto=[0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000c40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @auto=[0x62, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x63]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), 0x0, &(0x7f0000000e40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000ec0), &(0x7f0000000f00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000f40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000fc0), &(0x7f0000001000)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000001040)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001140)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001240)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 607.381495ms ago: executing program 1 (id=2694): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x38, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1000040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000700)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x66, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x37, 0x30, 0x30, 0x37]}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x31, 0x30, 0x30, 0x37, 0x34]}, &(0x7f0000000d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @desc3}, &(0x7f0000000f80)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000001000), &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001080), &(0x7f00000010c0)={'fscrypt:', @auto=[0x39, 0x34, 0x31, 0x38, 0x30, 0x30, 0x66, 0x65, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000001100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @auto=[0x62, 0x30, 0x32, 0x30, 0x30, 0x31, 0x65, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x64]}, &(0x7f0000001200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000001400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x3}, 0x0, 0x0, r0) 547.555036ms ago: executing program 1 (id=2695): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000340)={0xc4}) 490.124408ms ago: executing program 1 (id=2696): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x9640, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000001540)="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", 0x1000) 489.400608ms ago: executing program 3 (id=2697): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400000007fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 361.016121ms ago: executing program 3 (id=2698): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000b0000000000001104000000070000000a0000000000000203000000000000000500000dee400000020000000100000000000000000000000d000000feffffff100000000000000001000000"], 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 184.520965ms ago: executing program 0 (id=2699): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000980)='asymmetric\x00', &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r0) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000ac0)='asymmetric\x00', 0x0) 164.773346ms ago: executing program 3 (id=2700): r0 = syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x5, 0xfffffffe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ZONE={0x6, 0x4, 0x4721}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003340), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000033c0), 0x2000010, &(0x7f0000003400)=ANY=[]) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000005540)='./file0\x00', 0x22801, 0x0) dup2(r5, r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000056c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee01}}, './file0\x00'}) setresuid(0x0, 0x0, r6) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4802}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 0 (id=2701): syz_open_dev$evdev(&(0x7f0000000240), 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f00000003c0), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d03000000b85ba123469d944958af20000000000000000105000000200000010e0000"], 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000600)=[{&(0x7f0000000680)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x30}, {&(0x7f0000000700)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000780)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3d5", 0x3d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x70, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) recvmmsg$unix(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, &(0x7f00000008c0), 0x12) connect$x25(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000940)={'bond0\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000980)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): d from eth0 [ 78.306957][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.319500][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.338878][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.360658][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.444733][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.459349][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.466728][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.506633][ T2928] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.513854][ T2928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.535722][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.570301][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.598014][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.644586][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.651679][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.668036][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.687736][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.726814][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.734006][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.757226][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.764426][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.788350][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.831979][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.839137][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.877379][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.976528][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.983754][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.996617][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.003830][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.110817][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.272868][ T5771] veth0_vlan: entered promiscuous mode [ 79.294277][ T5771] veth1_vlan: entered promiscuous mode [ 79.312139][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.384734][ T5771] veth0_macvtap: entered promiscuous mode [ 79.419806][ T5771] veth1_macvtap: entered promiscuous mode [ 79.437067][ T5772] veth0_vlan: entered promiscuous mode [ 79.466880][ T5772] veth1_vlan: entered promiscuous mode [ 79.499529][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.534016][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.555288][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.567226][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.577001][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.586241][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.627302][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.683872][ T5783] Bluetooth: hci2: command tx timeout [ 79.684122][ T5776] Bluetooth: hci3: command tx timeout [ 79.693604][ T5783] Bluetooth: hci0: command tx timeout [ 79.695519][ T5780] Bluetooth: hci1: command tx timeout [ 79.701321][ T5772] veth0_macvtap: entered promiscuous mode [ 79.732736][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.766378][ T5772] veth1_macvtap: entered promiscuous mode [ 79.788779][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.801258][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.812925][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.834023][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.842009][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.878603][ T5774] veth0_vlan: entered promiscuous mode [ 79.892116][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.905412][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.917077][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.945717][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.956624][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.966590][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.975541][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.987954][ T5774] veth1_vlan: entered promiscuous mode [ 80.043618][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.058730][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.093583][ T5773] veth0_vlan: entered promiscuous mode [ 80.139862][ T5774] veth0_macvtap: entered promiscuous mode [ 80.157146][ T5773] veth1_vlan: entered promiscuous mode [ 80.177519][ T5774] veth1_macvtap: entered promiscuous mode [ 80.232766][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.261518][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.272695][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.288480][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.299304][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.306230][ T5837] syz.0.1[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.310391][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.331680][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.354392][ T5773] veth0_macvtap: entered promiscuous mode [ 80.364495][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.380308][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.390211][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.410813][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.426778][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.440622][ T5773] veth1_macvtap: entered promiscuous mode [ 80.480454][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.492754][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.507642][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.518354][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.549824][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.558343][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.579476][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.600625][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.610915][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.626441][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.637620][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.652864][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.665046][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.684534][ T5837] loop0: detected capacity change from 0 to 32768 [ 80.699548][ T5837] ======================================================= [ 80.699548][ T5837] WARNING: The mand mount option has been deprecated and [ 80.699548][ T5837] and is ignored by this kernel. Remove the mand [ 80.699548][ T5837] option from the mount to silence this warning. [ 80.699548][ T5837] ======================================================= [ 80.718548][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.750194][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.765595][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.776850][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.789403][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.800189][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.804835][ T5837] JBD2: Ignoring recovery information on journal [ 80.812896][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.866061][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.875560][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.890977][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.899868][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.975843][ T5837] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 81.018697][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.063845][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.111323][ T789] IPVS: starting estimator thread 0... [ 81.121370][ T27] audit: type=1800 audit(1791841527.404:2): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 81.215125][ T5842] IPVS: using max 19 ests per chain, 45600 per kthread [ 81.236450][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.244780][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.298807][ T5837] syz.0.1 (5837) used greatest stack depth: 17640 bytes left [ 81.312590][ T5845] loop1: detected capacity change from 0 to 512 [ 81.406770][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.416622][ T5771] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 81.446941][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.463682][ T5771] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 81.486243][ T5771] OCFS2: File system is now read-only. [ 81.491759][ T5771] (syz-executor,5771,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 81.523147][ T5771] (syz-executor,5771,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 81.525958][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.531400][ T5771] (syz-executor,5771,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 81.543617][ T27] audit: type=1804 audit(1791841527.794:3): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5" name="/newroot/1/file0/bus" dev="loop1" ino=1048611 res=1 errno=0 [ 81.561458][ T5771] (syz-executor,5771,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 81.594150][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.623756][ T5771] (syz-executor,5771,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 81.767907][ T5780] Bluetooth: hci0: command tx timeout [ 81.793121][ T5780] Bluetooth: hci2: command tx timeout [ 81.798568][ T5780] Bluetooth: hci1: command tx timeout [ 81.803051][ T5776] Bluetooth: hci3: command tx timeout [ 81.959816][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 83.844055][ T5783] Bluetooth: hci3: command tx timeout [ 83.849536][ T5783] Bluetooth: hci1: command tx timeout [ 83.855514][ T5783] Bluetooth: hci2: command tx timeout [ 83.860946][ T5783] Bluetooth: hci0: command tx timeout [ 83.882674][ T5870] syzkaller0: entered promiscuous mode [ 83.903258][ T5870] syzkaller0: entered allmulticast mode [ 84.092951][ C0] sched: RT throttling activated [ 84.272001][ T5777] IPVS: starting estimator thread 0... [ 84.393152][ T5877] IPVS: using max 18 ests per chain, 43200 per kthread [ 84.802668][ T5882] loop3: detected capacity change from 0 to 512 [ 85.027466][ T27] audit: type=1804 audit(1791841531.304:4): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.15" name="/newroot/3/file0/bus" dev="loop3" ino=1048623 res=1 errno=0 [ 86.010269][ T5895] binder: 5890:5895 ioctl 4018620d 0 returned -22 [ 86.817593][ T9] cfg80211: failed to load regulatory.db [ 86.925455][ T5895] syz.0.18 (5895): drop_caches: 2 [ 88.678710][ T5927] binder: 5926:5927 ioctl 4018620d 0 returned -22 [ 89.189693][ T5927] syz.2.33 (5927): drop_caches: 2 [ 90.309274][ T5777] IPVS: starting estimator thread 0... [ 90.483478][ T5965] IPVS: using max 19 ests per chain, 45600 per kthread [ 92.718941][ T5999] loop0: detected capacity change from 0 to 512 [ 96.059478][ T6048] Zero length message leads to an empty skb [ 100.117872][ T6087] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 115.944100][ T27] audit: type=1326 audit(1791841562.224:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.1.115" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x0 [ 118.480645][ T6308] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 119.696439][ T27] audit: type=1326 audit(1791841565.964:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x0 [ 121.831404][ T6346] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.516557][ T6365] usbip-vudc usbip-vudc.0: gadget not bound [ 123.785497][ T27] audit: type=1326 audit(1791841570.064:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.0.142" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x0 [ 124.833266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 127.100297][ T6398] usbip-vudc usbip-vudc.0: gadget not bound [ 127.847944][ T27] audit: type=1326 audit(1791841574.124:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.1.152" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x0 [ 131.411444][ T6438] usbip-vudc usbip-vudc.0: gadget not bound [ 131.703112][ T27] audit: type=1326 audit(1791841577.974:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.162" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x0 [ 132.887647][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.903015][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.073199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 137.568354][ T6484] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.195147][ T27] audit: type=1326 audit(1791841584.474:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.2.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x0 [ 142.554605][ T6524] FAULT_INJECTION: forcing a failure. [ 142.554605][ T6524] name fail_futex, interval 1, probability 0, space 0, times 1 [ 142.607605][ T6524] CPU: 1 PID: 6524 Comm: syz.2.190 Not tainted syzkaller #0 [ 142.614968][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.625051][ T6524] Call Trace: [ 142.628325][ T6524] [ 142.631246][ T6524] dump_stack_lvl+0x18c/0x250 [ 142.635931][ T6524] ? show_regs_print_info+0x20/0x20 [ 142.641116][ T6524] ? load_image+0x420/0x420 [ 142.645619][ T6524] ? __might_fault+0xaa/0x120 [ 142.650295][ T6524] should_fail_ex+0x394/0x4c0 [ 142.654992][ T6524] get_futex_key+0x136/0x1030 [ 142.659667][ T6524] ? futex_setup_timer+0xc0/0xc0 [ 142.664599][ T6524] futex_wake+0x127/0x4f0 [ 142.668953][ T6524] ? futex_wake_mark+0x150/0x150 [ 142.673876][ T6524] ? __lock_acquire+0x7eb0/0x7eb0 [ 142.678889][ T6524] ? file_end_write+0x159/0x250 [ 142.683740][ T6524] ? vfs_write+0x5de/0x9a0 [ 142.688152][ T6524] do_futex+0x35d/0x3e0 [ 142.692298][ T6524] ? __ia32_sys_get_robust_list+0x110/0x110 [ 142.698190][ T6524] __se_sys_futex+0x3a9/0x440 [ 142.702878][ T6524] ? __x64_sys_futex+0xf0/0xf0 [ 142.707680][ T6524] ? __x64_sys_futex+0x21/0xf0 [ 142.712443][ T6524] do_syscall_64+0x55/0xb0 [ 142.716879][ T6524] ? clear_bhb_loop+0x40/0x90 [ 142.721591][ T6524] ? clear_bhb_loop+0x40/0x90 [ 142.726298][ T6524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.732247][ T6524] RIP: 0033:0x7f6e7619e1d9 [ 142.736692][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.756421][ T6524] RSP: 002b:00007f6e771040e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 142.764887][ T6524] RAX: ffffffffffffffda RBX: 00007f6e76425fa8 RCX: 00007f6e7619e1d9 [ 142.772984][ T6524] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6e76425fac [ 142.780995][ T6524] RBP: 00007f6e76425fa0 R08: 0000000000745aca R09: 0000000000000000 [ 142.788995][ T6524] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 142.796992][ T6524] R13: 00007f6e76426038 R14: 00007ffc4a002da0 R15: 00007ffc4a002e88 [ 142.805006][ T6524] [ 144.462978][ T27] audit: type=1326 audit(1791841590.734:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.2.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x0 [ 148.283147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 148.899840][ T27] audit: type=1326 audit(1791841595.174:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.1.204" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x0 [ 151.406195][ T6606] fuse: Bad value for 'fd' [ 152.608282][ T27] audit: type=1326 audit(1791841598.884:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.2.220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x0 [ 153.824205][ T6638] ip_tables: iptables: counters copy to user failed while replacing table [ 155.475007][ T27] audit: type=1326 audit(1791841601.744:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.1.234" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x0 [ 155.587728][ T6678] loop2: detected capacity change from 0 to 256 [ 155.596544][ T6678] exfat: Deprecated parameter 'utf8' [ 155.634794][ T6678] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 156.458719][ T6688] fuse: Bad value for 'fd' [ 157.736334][ T6716] fuse: Bad value for 'fd' [ 163.392732][ T6795] fuse: Bad value for 'fd' [ 169.034692][ T6877] fuse: Bad value for 'fd' [ 172.376870][ T6907] fuse: Bad value for 'fd' [ 176.272810][ T27] audit: type=1326 audit(1791841622.534:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6926 comm="syz.0.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x0 [ 177.696691][ T6947] netlink: 'syz.1.312': attribute type 2 has an invalid length. [ 177.793045][ T6947] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 177.833367][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.312'. [ 177.842280][ T6947] netlink: 'syz.1.312': attribute type 2 has an invalid length. [ 177.874964][ T6941] loop2: detected capacity change from 0 to 40427 [ 177.935480][ T6941] F2FS-fs (loop2): invalid crc value [ 177.995181][ T6941] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.073120][ T6947] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 178.196644][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.312'. [ 178.205867][ T6941] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 178.349987][ T6947] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 178.622579][ T5776] Bluetooth: hci2: link tx timeout [ 178.628160][ T5776] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 179.687542][ T5774] syz-executor: attempt to access beyond end of device [ 179.687542][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.734427][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 180.653529][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 182.699063][ T6991] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 183.576315][ T7008] fuse: Bad value for 'fd' [ 183.883600][ T7011] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 184.589321][ T7025] capability: warning: `syz.3.338' uses deprecated v2 capabilities in a way that may be insecure [ 187.557804][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.587453][ T7055] bridge_slave_0: left allmulticast mode [ 187.603496][ T7055] bridge_slave_0: left promiscuous mode [ 187.614633][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.712427][ T7055] team0: Failed to send port change of device bridge_slave_0 via netlink (err -105) [ 187.743328][ T7055] team0: Failed to send options change via netlink (err -105) [ 187.763054][ T7055] team0: Port device bridge_slave_0 added [ 189.243048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 194.553946][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.560299][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.899294][ T7173] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.114318][ T7177] netlink: 36 bytes leftover after parsing attributes in process `syz.0.393'. [ 199.170810][ T7177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.393'. [ 199.483084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 202.243235][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 202.252368][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 202.252384][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 202.544786][ T7220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.408'. [ 203.860462][ T7234] gre1: entered promiscuous mode [ 205.701449][ T7262] FAULT_INJECTION: forcing a failure. [ 205.701449][ T7262] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 205.730747][ T7262] CPU: 1 PID: 7262 Comm: syz.2.423 Not tainted syzkaller #0 [ 205.738085][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.748133][ T7262] Call Trace: [ 205.751403][ T7262] [ 205.754322][ T7262] dump_stack_lvl+0x18c/0x250 [ 205.759007][ T7262] ? show_regs_print_info+0x20/0x20 [ 205.764195][ T7262] ? load_image+0x420/0x420 [ 205.768709][ T7262] ? __might_fault+0xaa/0x120 [ 205.773390][ T7262] ? __lock_acquire+0x7eb0/0x7eb0 [ 205.778427][ T7262] ? __virt_addr_valid+0x10c/0x380 [ 205.783531][ T7262] should_fail_ex+0x394/0x4c0 [ 205.788234][ T7262] _copy_to_user+0x2f/0xa0 [ 205.792677][ T7262] bpf_verifier_vlog+0x4e6/0x840 [ 205.797622][ T7262] __btf_verifier_log+0xe3/0x140 [ 205.802561][ T7262] ? btf_check_sec_info+0x350/0x350 [ 205.807769][ T7262] btf_verifier_log_member+0x5a9/0x800 [ 205.813329][ T7262] ? __btf_verifier_log_type+0x690/0x690 [ 205.818987][ T7262] btf_struct_check_meta+0xb3c/0xce0 [ 205.824368][ T7262] btf_check_all_metas+0x371/0xaf0 [ 205.829496][ T7262] btf_parse_type_sec+0xfc/0x1960 [ 205.834516][ T7262] ? btf_check_sec_info+0x350/0x350 [ 205.839714][ T7262] ? __virt_addr_valid+0x10c/0x380 [ 205.844836][ T7262] ? btf_verifier_log+0x1a0/0x1a0 [ 205.849866][ T7262] ? btf_parse_hdr+0x545/0x700 [ 205.854623][ T7262] ? btf_parse_str_sec+0x20d/0x2a0 [ 205.859730][ T7262] btf_new_fd+0x440/0x9e0 [ 205.864078][ T7262] ? bpf_btf_show_fdinfo+0x80/0x80 [ 205.869186][ T7262] ? capable+0x88/0xe0 [ 205.873267][ T7262] __sys_bpf+0x670/0x890 [ 205.877528][ T7262] ? bpf_link_show_fdinfo+0x560/0x560 [ 205.882928][ T7262] ? lock_chain_count+0x20/0x20 [ 205.887794][ T7262] __x64_sys_bpf+0x7c/0x90 [ 205.892206][ T7262] do_syscall_64+0x55/0xb0 [ 205.896619][ T7262] ? clear_bhb_loop+0x40/0x90 [ 205.901306][ T7262] ? clear_bhb_loop+0x40/0x90 [ 205.905984][ T7262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.911902][ T7262] RIP: 0033:0x7f6e7619e1d9 [ 205.916344][ T7262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.935951][ T7262] RSP: 002b:00007f6e77104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.944368][ T7262] RAX: ffffffffffffffda RBX: 00007f6e76425fa0 RCX: 00007f6e7619e1d9 [ 205.952353][ T7262] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 205.960342][ T7262] RBP: 00007f6e76235888 R08: 0000000000000000 R09: 0000000000000000 [ 205.968314][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.976286][ T7262] R13: 00007f6e76426038 R14: 00007f6e76425fa0 R15: 00007ffc4a002e88 [ 205.984369][ T7262] [ 208.193982][ T7315] mmap: syz.2.441 (7315) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 210.175732][ T7352] raw_sendmsg: syz.2.461 forgot to set AF_INET. Fix it! [ 210.857632][ T7359] overlayfs: failed to clone upperpath [ 211.872572][ T7380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.472'. [ 214.398538][ T7404] loop2: detected capacity change from 0 to 512 [ 219.746562][ T7479] overlayfs: failed to clone upperpath [ 220.851735][ T27] audit: type=1326 audit(1791841667.094:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7fc00000 [ 221.310946][ T27] audit: type=1326 audit(1791841667.534:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e76197f57 code=0x7fc00000 [ 221.342416][ T27] audit: type=1326 audit(1791841667.564:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.2.519" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6e7619e1d9 code=0x7fc00000 [ 224.193163][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 239.042384][ T7691] sctp: [Deprecated]: syz.3.581 (pid 7691) Use of int in max_burst socket option deprecated. [ 239.042384][ T7691] Use struct sctp_assoc_value instead [ 240.849858][ T7729] bond1: entered allmulticast mode [ 244.501833][ T7785] gre1: entered promiscuous mode [ 245.000579][ T7802] overlayfs: failed to clone upperpath [ 246.144685][ T7837] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 246.175808][ T7837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.240221][ T7837] bond2: (slave veth3): Enslaving as an active interface with a down link [ 246.302331][ T7837] bond2: (slave dummy0): making interface the new active one [ 246.315220][ T7837] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 250.033965][ T7939] fuse: Bad value for 'fd' [ 251.781994][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 253.656264][ T8026] fuse: Bad value for 'fd' [ 253.773312][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 255.767194][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773839][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.037074][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.723'. [ 265.107661][ T8207] sctp: [Deprecated]: syz.3.777 (pid 8207) Use of int in max_burst socket option deprecated. [ 265.107661][ T8207] Use struct sctp_assoc_value instead [ 268.193193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 272.817893][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.818'. [ 275.043307][ T8326] sctp: [Deprecated]: syz.1.816 (pid 8326) Use of int in max_burst socket option deprecated. [ 275.043307][ T8326] Use struct sctp_assoc_value instead [ 275.159714][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.3.830'. [ 275.189943][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.830'. [ 276.526661][ T8356] sctp: [Deprecated]: syz.1.840 (pid 8356) Use of int in max_burst socket option deprecated. [ 276.526661][ T8356] Use struct sctp_assoc_value instead [ 277.026405][ T8373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.848'. [ 277.036062][ T8373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.848'. [ 278.257249][ T8385] sctp: [Deprecated]: syz.3.851 (pid 8385) Use of int in max_burst socket option deprecated. [ 278.257249][ T8385] Use struct sctp_assoc_value instead [ 278.463343][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'. [ 280.118753][ T8414] sctp: [Deprecated]: syz.2.861 (pid 8414) Use of int in max_burst socket option deprecated. [ 280.118753][ T8414] Use struct sctp_assoc_value instead [ 280.471420][ T8425] ip_tables: iptables: counters copy to user failed while replacing table [ 280.752328][ T8437] fuse: Bad value for 'fd' [ 280.793485][ T8441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 281.073449][ T8451] fuse: Bad value for 'fd' [ 281.381853][ T8466] sock: sock_set_timeout: `syz.3.884' (pid 8466) tries to set negative timeout [ 281.667898][ T8477] futex_wake_op: syz.1.889 tries to shift op by 144; fix this program [ 281.758470][ T8481] overlayfs: failed to clone upperpath [ 283.738107][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'. [ 285.526845][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 286.388858][ T8621] overlayfs: disabling nfs_export due to verity=require [ 286.397196][ T8621] overlayfs: failed to clone upperpath [ 288.607563][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 291.846407][ T8726] gre2: entered promiscuous mode [ 293.692514][ T8752] sctp: [Deprecated]: syz.2.991 (pid 8752) Use of int in max_burst socket option deprecated. [ 293.692514][ T8752] Use struct sctp_assoc_value instead [ 294.606024][ T8774] sctp: [Deprecated]: syz.1.1001 (pid 8774) Use of int in max_burst socket option deprecated. [ 294.606024][ T8774] Use struct sctp_assoc_value instead [ 295.886039][ T8799] sctp: [Deprecated]: syz.0.1010 (pid 8799) Use of int in max_burst socket option deprecated. [ 295.886039][ T8799] Use struct sctp_assoc_value instead [ 295.913372][ T8801] overlayfs: failed to clone upperpath [ 295.932036][ T8801] overlayfs: failed to clone upperpath [ 296.637795][ T8820] overlayfs: failed to clone upperpath [ 296.681334][ T8823] sctp: [Deprecated]: syz.1.1021 (pid 8823) Use of int in max_burst socket option deprecated. [ 296.681334][ T8823] Use struct sctp_assoc_value instead [ 296.868575][ T8828] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 298.281315][ T8847] sctp: [Deprecated]: syz.3.1031 (pid 8847) Use of int in max_burst socket option deprecated. [ 298.281315][ T8847] Use struct sctp_assoc_value instead [ 299.773156][ T8881] sctp: [Deprecated]: syz.1.1044 (pid 8881) Use of int in max_burst socket option deprecated. [ 299.773156][ T8881] Use struct sctp_assoc_value instead [ 300.351623][ T8904] sctp: [Deprecated]: syz.3.1054 (pid 8904) Use of int in max_burst socket option deprecated. [ 300.351623][ T8904] Use struct sctp_assoc_value instead [ 301.520898][ T8928] sctp: [Deprecated]: syz.2.1064 (pid 8928) Use of int in max_burst socket option deprecated. [ 301.520898][ T8928] Use struct sctp_assoc_value instead [ 302.098622][ T8938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.798177][ T8953] sctp: [Deprecated]: syz.2.1073 (pid 8953) Use of int in max_burst socket option deprecated. [ 302.798177][ T8953] Use struct sctp_assoc_value instead [ 303.962928][ T27] audit: type=1326 audit(1791841750.234:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8959 comm="syz.3.1076" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x0 [ 307.091245][ T27] audit: type=1326 audit(1791841753.364:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1107" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 307.114428][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 307.143375][ T27] audit: type=1326 audit(1791841753.364:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1107" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 307.185744][ T27] audit: type=1326 audit(1791841753.364:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1107" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 307.225959][ T27] audit: type=1326 audit(1791841753.364:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1107" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 307.251600][ T27] audit: type=1326 audit(1791841753.404:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1107" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 307.280362][ T27] audit: type=1326 audit(1791841753.404:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1107" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 307.307507][ T27] audit: type=1326 audit(1791841753.404:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1107" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 307.332366][ T27] audit: type=1326 audit(1791841753.404:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1107" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 307.418580][ T27] audit: type=1326 audit(1791841753.404:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9049 comm="syz.2.1107" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 312.782134][ T9151] futex_wake_op: syz.0.1145 tries to shift op by -1; fix this program [ 313.182165][ T9160] sctp: [Deprecated]: syz.0.1148 (pid 9160) Use of int in max_burst socket option deprecated. [ 313.182165][ T9160] Use struct sctp_assoc_value instead [ 313.951144][ T9197] futex_wake_op: syz.2.1164 tries to shift op by -1; fix this program [ 314.590280][ T27] audit: type=1326 audit(1791841760.864:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.2.1169" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e7619e1d9 code=0x0 [ 317.169357][ T9241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1182'. [ 317.216805][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.223333][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.907637][ T9255] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1187'. [ 318.034497][ T9263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1191'. [ 319.099653][ T9282] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1199'. [ 319.829487][ T9306] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1209'. [ 321.013137][ T27] audit: type=1326 audit(1791841767.284:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.1.1218" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2f899e1d9 code=0x0 [ 321.249137][ T9338] ip_tables: iptables: counters copy to user failed while replacing table [ 326.823956][ T9433] overlayfs: failed to clone upperpath [ 327.609395][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1267'. [ 327.929098][ T9449] netem: incorrect gi model size [ 327.988697][ T9449] netem: change failed [ 329.541276][ T9487] ip_tables: iptables: counters copy to user failed while replacing table [ 330.603643][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.612248][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.879830][ T9487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.949625][ T9487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.720656][ T9558] overlayfs: failed to clone upperpath [ 336.038968][ T9487] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.059642][ T9487] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.083202][ T9487] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.112508][ T9487] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.002933][ T27] audit: type=1326 audit(1791841784.274:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.1.1318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2f899e1d9 code=0x0 [ 338.146229][ T9590] overlayfs: failed to clone upperpath [ 339.962097][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 339.996189][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 340.030860][ T9618] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 342.276109][ T9660] bridge0: port 3(syz_tun) entered blocking state [ 342.282792][ T9660] bridge0: port 3(syz_tun) entered disabled state [ 342.296500][ T9658] overlayfs: failed to clone upperpath [ 342.303591][ T9660] syz_tun: entered allmulticast mode [ 342.310432][ T9660] syz_tun: entered promiscuous mode [ 345.997163][ T9717] overlayfs: failed to resolve './bus': -2 [ 348.018243][ T9758] overlayfs: failed to resolve './bus': -2 [ 351.957037][ T9865] overlayfs: failed to clone upperpath [ 352.485910][ T9890] overlayfs: failed to clone upperpath [ 353.834553][ T9941] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 353.888385][ T9941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.965247][ T9947] bond1: (slave veth3): Enslaving as an active interface with a down link [ 354.048193][ T9941] bond1: (slave syz_tun): making interface the new active one [ 354.059966][ T9941] syz_tun: entered promiscuous mode [ 354.065791][ T9941] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 354.116619][ T9941] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 354.284471][ T9953] overlayfs: failed to clone upperpath [ 354.816679][ T9975] overlayfs: failed to clone upperpath [ 355.347513][T10000] overlayfs: failed to clone upperpath [ 355.897659][T10020] overlayfs: failed to clone upperpath [ 356.402404][T10042] overlayfs: failed to clone upperpath [ 357.319191][T10075] ip_tables: iptables: counters copy to user failed while replacing table [ 357.964123][T10096] ip_tables: iptables: counters copy to user failed while replacing table [ 358.470066][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.477527][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.993985][T10117] ip_tables: iptables: counters copy to user failed while replacing table [ 359.037167][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.076346][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.067453][T10096] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.082694][T10096] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.101951][T10096] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.112058][T10096] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.712771][ T27] audit: type=1326 audit(1791841806.984:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 360.742440][ T27] audit: type=1326 audit(1791841807.014:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 360.774234][ T27] audit: type=1326 audit(1791841807.014:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 360.798923][ T27] audit: type=1326 audit(1791841807.014:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 360.831327][ T27] audit: type=1326 audit(1791841807.014:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 360.866231][ T27] audit: type=1326 audit(1791841807.014:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 360.897300][ T27] audit: type=1326 audit(1791841807.014:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 360.932642][ T27] audit: type=1326 audit(1791841807.044:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 360.953309][T10156] ip_tables: iptables: counters copy to user failed while replacing table [ 360.957425][ T27] audit: type=1326 audit(1791841807.044:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 360.998025][ T27] audit: type=1326 audit(1791841807.044:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10153 comm="syz.1.1550" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 364.507099][T10233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.621786][T10236] 9pnet_fd: Insufficient options for proto=fd [ 364.656810][T10236] overlayfs: failed to clone upperpath [ 365.150294][ T2945] syz_tun: left promiscuous mode [ 365.696998][T10266] 9pnet_fd: Insufficient options for proto=fd [ 365.706165][T10266] overlayfs: failed to clone upperpath [ 366.393776][T10287] 9pnet_fd: Insufficient options for proto=fd [ 366.426006][T10287] overlayfs: failed to clone upperpath [ 366.819819][T10305] ip_tables: iptables: counters copy to user failed while replacing table [ 367.145024][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.153857][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.544372][T10305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.575257][T10318] overlayfs: failed to clone upperpath [ 367.614657][T10305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.152532][T10305] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.166242][T10305] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.176445][T10305] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.185702][T10305] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.703826][T10364] IPv6: Can't replace route, no match found [ 373.540414][T10582] overlayfs: failed to clone lowerpath [ 374.109098][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 374.109112][ T27] audit: type=1326 audit(1791841820.384:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 374.202987][ T27] audit: type=1326 audit(1791841820.384:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 374.257665][ T27] audit: type=1326 audit(1791841820.384:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 374.317994][ T27] audit: type=1326 audit(1791841820.384:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 374.349018][ T27] audit: type=1326 audit(1791841820.384:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 374.378551][ T27] audit: type=1326 audit(1791841820.384:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 374.442639][ T27] audit: type=1326 audit(1791841820.384:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 374.477950][ T27] audit: type=1326 audit(1791841820.384:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 374.509007][ T27] audit: type=1326 audit(1791841820.384:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 374.540516][ T27] audit: type=1326 audit(1791841820.394:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e7619e1d9 code=0x7ffc0000 [ 378.648860][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.655518][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.356266][T11061] lo: entered allmulticast mode [ 386.377056][T11061] bond0: entered allmulticast mode [ 386.382566][T11061] dummy0: entered allmulticast mode [ 386.400944][T11061] eql: entered allmulticast mode [ 386.416864][T11061] ifb0: entered allmulticast mode [ 386.430671][T11061] ifb1: entered allmulticast mode [ 386.446810][T11061] virtio_net virtio1 eth0: entered allmulticast mode [ 386.466611][T11061] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 386.487110][T11061] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 386.505288][T11061] hwsim0: entered allmulticast mode [ 386.521339][T11061] ieee802154 phy0 wpan0: entered allmulticast mode [ 386.536066][T11061] ieee802154 phy1 wpan1: entered allmulticast mode [ 386.553508][T11061] teql0: entered allmulticast mode [ 386.562352][T11061] tunl0: entered allmulticast mode [ 386.584356][T11061] gre0: entered allmulticast mode [ 386.606767][T11061] gretap0: entered allmulticast mode [ 386.633120][T11061] erspan0: entered allmulticast mode [ 386.660495][T11061] ip_vti0: entered allmulticast mode [ 386.685920][T11061] ip6_vti0: entered allmulticast mode [ 386.708597][T11061] sit0: entered allmulticast mode [ 386.728895][T11061] ip6tnl0: entered allmulticast mode [ 386.752451][T11061] ip6gre0: entered allmulticast mode [ 386.767174][T11061] nr0: entered allmulticast mode [ 386.783894][T11061] nr1: entered allmulticast mode [ 386.799922][T11061] nr2: entered allmulticast mode [ 386.818751][T11061] nr3: entered allmulticast mode [ 386.835265][T11061] nr4: entered allmulticast mode [ 386.850472][T11061] nr5: entered allmulticast mode [ 386.866349][T11061] nr6: entered allmulticast mode [ 386.880466][T11061] nr7: entered allmulticast mode [ 386.895739][T11061] nr8: entered allmulticast mode [ 386.913570][T11061] nr9: entered allmulticast mode [ 386.933355][T11061] nr10: entered allmulticast mode [ 386.953062][T11061] nr11: entered allmulticast mode [ 386.972460][T11061] nr12: entered allmulticast mode [ 386.996814][T11061] nr13: entered allmulticast mode [ 387.011213][T11061] nr14: entered allmulticast mode [ 387.027257][T11061] nr15: entered allmulticast mode [ 387.041736][T11061] nr16: entered allmulticast mode [ 387.062254][T11061] nr17: entered allmulticast mode [ 387.090251][T11061] nr18: entered allmulticast mode [ 387.111369][T11061] nr19: entered allmulticast mode [ 387.133046][T11061] nr20: entered allmulticast mode [ 387.146509][T11061] nr21: entered allmulticast mode [ 387.171610][T11061] nr22: entered allmulticast mode [ 387.177526][T11061] nr23: entered allmulticast mode [ 387.192237][ T5776] Bluetooth: hci3: link tx timeout [ 387.198952][ T5776] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 387.209484][T11061] nr24: entered allmulticast mode [ 387.216384][T11061] nr25: entered allmulticast mode [ 387.221784][T11061] nr26: entered allmulticast mode [ 387.227529][T11061] nr27: entered allmulticast mode [ 387.233693][T11061] nr28: entered allmulticast mode [ 387.239025][T11061] nr29: entered allmulticast mode [ 387.244747][T11061] nr30: entered allmulticast mode [ 387.250069][T11061] nr31: entered allmulticast mode [ 387.256175][T11061] rose0: entered allmulticast mode [ 387.261598][T11061] rose1: entered allmulticast mode [ 387.267430][T11061] rose2: entered allmulticast mode [ 387.273340][T11061] rose3: entered allmulticast mode [ 387.291451][T11061] rose4: entered allmulticast mode [ 387.303008][T11061] rose5: entered allmulticast mode [ 387.324133][T11061] rose6: entered allmulticast mode [ 387.342746][T11061] rose7: entered allmulticast mode [ 387.361942][T11061] rose8: entered allmulticast mode [ 387.383281][T11061] rose9: entered allmulticast mode [ 387.389278][T11061] rose10: entered allmulticast mode [ 387.403101][T11061] rose11: entered allmulticast mode [ 387.411826][T11061] rose12: entered allmulticast mode [ 387.422939][T11061] rose13: entered allmulticast mode [ 387.433938][T11061] rose14: entered allmulticast mode [ 387.446050][T11061] rose15: entered allmulticast mode [ 387.457215][T11061] rose16: entered allmulticast mode [ 387.469393][T11061] rose17: entered allmulticast mode [ 387.480657][T11061] rose18: entered allmulticast mode [ 387.494826][T11061] rose19: entered allmulticast mode [ 387.508447][T11061] rose20: entered allmulticast mode [ 387.520742][T11061] rose21: entered allmulticast mode [ 387.532197][T11061] rose22: entered allmulticast mode [ 387.544091][T11061] rose23: entered allmulticast mode [ 387.556219][T11061] rose24: entered allmulticast mode [ 387.567273][T11061] rose25: entered allmulticast mode [ 387.578328][T11061] rose26: entered allmulticast mode [ 387.590541][T11061] rose27: entered allmulticast mode [ 387.603191][T11061] rose28: entered allmulticast mode [ 387.618511][T11061] rose29: entered allmulticast mode [ 387.630571][T11061] rose30: entered allmulticast mode [ 387.657240][T11061] rose31: entered allmulticast mode [ 387.682113][T11061] bpq0: entered allmulticast mode [ 387.689614][T11061] lapb0: entered allmulticast mode [ 387.723938][T11061] bpq1: entered allmulticast mode [ 387.729119][T11061] lapb1: entered allmulticast mode [ 387.756972][T11061] bpq2: entered allmulticast mode [ 387.763338][T11061] lapb2: entered allmulticast mode [ 387.777778][T11061] bpq3: entered allmulticast mode [ 387.789363][T11061] lapb3: entered allmulticast mode [ 387.803315][T11061] bpq4: entered allmulticast mode [ 387.813152][T11061] lapb4: entered allmulticast mode [ 387.829086][T11061] bpq5: entered allmulticast mode [ 387.846409][T11061] lapb5: entered allmulticast mode [ 387.882758][T11061] lowpan0: entered allmulticast mode [ 388.576240][ T5780] Bluetooth: hci2: link tx timeout [ 388.582247][ T5780] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 389.184638][T11124] mmap: syz.1.1938 (11124): VmData 37462016 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 389.285857][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 389.346117][T11123] Invalid ELF header magic: != ELF [ 390.646518][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 390.699514][ T5780] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 392.148566][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 392.148579][ T27] audit: type=1326 audit(1791841838.414:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 392.243175][ T27] audit: type=1326 audit(1791841838.414:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 392.313910][ T27] audit: type=1326 audit(1791841838.414:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 392.363255][ T27] audit: type=1326 audit(1791841838.414:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 392.452908][ T27] audit: type=1326 audit(1791841838.414:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 392.502948][ T27] audit: type=1326 audit(1791841838.414:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 392.567519][ T27] audit: type=1326 audit(1791841838.414:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 392.664149][ T27] audit: type=1326 audit(1791841838.414:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 392.772609][ T27] audit: type=1326 audit(1791841838.414:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 393.062026][ T27] audit: type=1326 audit(1791841838.414:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.3.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe901f9e1d9 code=0x7ffc0000 [ 399.082986][ T5780] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 400.674032][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 400.674046][ T27] audit: type=1326 audit(1791841846.954:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 400.760556][ T27] audit: type=1326 audit(1791841846.994:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 400.808112][T11319] jffs2: notice: (11319) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 400.844464][ T27] audit: type=1326 audit(1791841846.994:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 400.865509][T11332] ip_tables: iptables: counters copy to user failed while replacing table [ 400.913913][ T27] audit: type=1326 audit(1791841846.994:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 400.970693][ T27] audit: type=1326 audit(1791841847.004:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 400.980066][T11323] overlay: ./bus is not a directory [ 401.019481][ T27] audit: type=1326 audit(1791841847.004:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 401.059711][ T27] audit: type=1326 audit(1791841847.004:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 401.102943][ T27] audit: type=1326 audit(1791841847.004:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 401.137346][ T27] audit: type=1326 audit(1791841847.004:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 401.182664][ T27] audit: type=1326 audit(1791841847.004:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe2f899e1d9 code=0x7ffc0000 [ 401.246778][T11337] overlayfs: failed to clone upperpath [ 401.872059][T11366] overlayfs: failed to clone upperpath [ 402.104418][T11373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.131338][T11373] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 404.051050][T11399] overlayfs: failed to clone upperpath [ 404.228205][T11409] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2047'. [ 404.915091][ T5780] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 406.005390][T11448] jffs2: notice: (11448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 406.529207][ T27] kauditd_printk_skb: 132 callbacks suppressed [ 406.529221][ T27] audit: type=1326 audit(1791841852.804:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 406.581372][ T27] audit: type=1326 audit(1791841852.804:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 406.612878][ T27] audit: type=1326 audit(1791841852.824:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 406.652990][ T27] audit: type=1326 audit(1791841852.824:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 406.690924][ T27] audit: type=1326 audit(1791841852.844:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 406.722934][ T27] audit: type=1326 audit(1791841852.844:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 406.756487][ T27] audit: type=1326 audit(1791841852.844:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 406.907207][ T27] audit: type=1326 audit(1791841852.854:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 406.932038][ T27] audit: type=1326 audit(1791841852.854:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 406.983334][ T27] audit: type=1326 audit(1791841852.854:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11471 comm="syz.0.2073" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ffa93d9e1d9 code=0x7ffc0000 [ 407.683045][ T5780] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 408.781675][T11505] jffs2: notice: (11505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 413.751854][T11571] warning: `syz.1.2106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 413.953223][ T5780] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 416.161691][T11615] fuse: Bad value for 'group_id' [ 416.187412][T11610] process 'syz.3.2116' launched './file0' with NULL argv: empty string added [ 416.511652][T11624] bond1: (slave bridge0): Device is not bonding slave [ 416.539401][T11624] bond1: option active_slave: invalid value (bridge0) [ 416.576602][T11624] bond1 (unregistering): Released all slaves [ 417.098936][T11634] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 417.098936][T11634] [ 417.145795][T11634] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 417.184351][T11634] CIFS: Attempting to mount //172.20.20.170/share [ 418.094747][T11634] CIFS: VFS: Error connecting to socket. Aborting operation. [ 418.102426][T11634] CIFS: VFS: cifs_mount failed w/return code = -4 [ 418.748551][ T5780] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 420.732884][ T5780] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 420.991391][ T5780] Bluetooth: hci1: Malformed LE Event: 0x0b [ 421.064817][T11693] bond1: option lp_interval: invalid value (0) [ 421.112950][T11693] bond1: option lp_interval: allowed values 1 - 2147483647 [ 421.138592][ T5780] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 421.177086][T11693] bond1 (unregistering): Released all slaves [ 422.137192][ T5780] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 423.623195][ T5780] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 425.224876][T11788] overlayfs: failed to clone upperpath [ 425.473988][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2191'. [ 425.524019][T11790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.618540][T11790] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 427.799357][T11838] netlink: 'syz.2.2208': attribute type 1 has an invalid length. [ 435.522992][T11966] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 435.573126][T11966] Cannot find add_set index 0 as target [ 439.935394][ T5780] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 440.087516][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.102855][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.728585][T12074] ip_tables: iptables: counters copy to user failed while replacing table [ 442.031790][ T5780] Bluetooth: hci1: link tx timeout [ 442.037647][ T5780] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 443.593728][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.634491][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.654254][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.669490][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.680737][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 443.745375][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 444.093152][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 444.903934][T12116] chnl_net:caif_netlink_parms(): no params data found [ 445.295233][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.330868][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.355598][T12116] bridge_slave_0: entered allmulticast mode [ 445.374971][T12116] bridge_slave_0: entered promiscuous mode [ 445.462383][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.493030][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.500353][T12116] bridge_slave_1: entered allmulticast mode [ 445.525033][T12116] bridge_slave_1: entered promiscuous mode [ 445.634264][T12145] 9pnet_virtio: no channels available for device syz [ 445.651975][T12116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.662310][T12145] overlayfs: failed to clone upperpath [ 445.750211][T12116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.847395][ T5780] Bluetooth: hci4: command tx timeout [ 445.864746][T12116] team0: Port device team_slave_0 added [ 445.987100][T12116] team0: Port device team_slave_1 added [ 446.129134][T12116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.190785][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.556943][T12116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.833601][T12116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.862934][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.909136][T12167] ip_tables: iptables: counters copy to user failed while replacing table [ 446.935302][T12116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.265763][T12116] hsr_slave_0: entered promiscuous mode [ 447.295976][T12116] hsr_slave_1: entered promiscuous mode [ 447.322956][T12116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.330566][T12116] Cannot create hsr debugfs directory [ 448.018015][ T5780] Bluetooth: hci4: command tx timeout [ 448.905411][T12206] ªªªªª»: renamed from bond_slave_0 (while UP) [ 449.706484][ T8584] hsr_slave_0: left promiscuous mode [ 449.795468][ T8584] hsr_slave_1: left promiscuous mode [ 449.802010][ T8584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.843175][ T8584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.895580][ T8584] bridge_slave_1: left allmulticast mode [ 449.901268][ T8584] bridge_slave_1: left promiscuous mode [ 449.938406][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.962388][ T8584] bridge_slave_0: left allmulticast mode [ 449.988079][ T8584] bridge_slave_0: left promiscuous mode [ 450.053313][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.083208][ T5780] Bluetooth: hci4: command tx timeout [ 450.285624][ T5780] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 450.909082][ T8584] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 450.919245][ T8584] bond3 (unregistering): Released all slaves [ 450.951856][ T8584] bond2 (unregistering): (slave veth3): Releasing active interface [ 450.962002][ T8584] bond2 (unregistering): (slave veth3): the permanent HWaddr of slave - 66:73:4a:da:d1:3a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 451.098810][ T8584] bond2 (unregistering): (slave dummy0): Releasing active interface [ 451.107911][ T8584] bond2 (unregistering): Released all slaves [ 451.120442][ T8584] bond1 (unregistering): Released all slaves [ 451.569196][ T8584] team0 (unregistering): Port device team_slave_1 removed [ 451.610189][ T8584] team0 (unregistering): Port device team_slave_0 removed [ 451.646992][ T8584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.684703][ T8584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.082677][ T8584] bond0 (unregistering): Released all slaves [ 452.163114][ T5780] Bluetooth: hci4: command tx timeout [ 453.098616][T12116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.154964][T12116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.185512][T12281] jffs2: notice: (12281) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 453.225808][T12116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.284470][T12116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 453.457482][ T8584] IPVS: stop unused estimator thread 0... [ 453.594969][T12116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.641133][T12116] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.686060][T11091] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.693270][T11091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.746200][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.753427][ T8584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.000253][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.139861][T12116] veth0_vlan: entered promiscuous mode [ 455.178392][T12116] veth1_vlan: entered promiscuous mode [ 455.218691][T12325] jffs2: notice: (12325) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 455.251579][T12116] veth0_macvtap: entered promiscuous mode [ 455.277355][T12116] veth1_macvtap: entered promiscuous mode [ 455.336612][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.381007][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.408183][T12116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.453923][T12116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.498257][T12116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.534658][T12116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.559260][T12116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.581255][T12116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.598145][T12116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.607518][T12116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.822234][ T8584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.867806][ T8584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.623245][ T8584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.644634][ T8584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.312028][T12367] jffs2: notice: (12367) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 457.662317][T12381] FAULT_INJECTION: forcing a failure. [ 457.662317][T12381] name fail_futex, interval 1, probability 0, space 0, times 0 [ 457.707134][T12381] CPU: 1 PID: 12381 Comm: syz.3.2371 Not tainted syzkaller #0 [ 457.714650][T12381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 457.724739][T12381] Call Trace: [ 457.728048][T12381] [ 457.730990][T12381] dump_stack_lvl+0x18c/0x250 [ 457.735690][T12381] ? show_regs_print_info+0x20/0x20 [ 457.740910][T12381] ? load_image+0x420/0x420 [ 457.745442][T12381] ? get_user_pages_fast_only+0xa0/0xa0 [ 457.751021][T12381] should_fail_ex+0x394/0x4c0 [ 457.755743][T12381] get_futex_key+0x857/0x1030 [ 457.760449][T12381] ? futex_setup_timer+0xc0/0xc0 [ 457.765418][T12381] futex_wake+0x127/0x4f0 [ 457.769772][T12381] ? futex_wake_mark+0x150/0x150 [ 457.774723][T12381] do_futex+0x35d/0x3e0 [ 457.778879][T12381] ? __might_fault+0xaa/0x120 [ 457.783560][T12381] ? __ia32_sys_get_robust_list+0x110/0x110 [ 457.789471][T12381] ? __might_fault+0xc6/0x120 [ 457.794164][T12381] mm_release+0x184/0x3a0 [ 457.798496][T12381] ? exit_mm_release+0x30/0x30 [ 457.803256][T12381] ? lockdep_hardirqs_on+0x98/0x150 [ 457.808461][T12381] exit_mm+0xa4/0x340 [ 457.812447][T12381] ? sysctl_delayacct+0x220/0x220 [ 457.817470][T12381] ? do_exit+0x2530/0x2530 [ 457.821901][T12381] do_exit+0x909/0x2530 [ 457.826066][T12381] ? put_task_struct+0xc0/0xc0 [ 457.830834][T12381] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 457.836809][T12381] ? get_signal+0x100e/0x1390 [ 457.841485][T12381] ? lock_chain_count+0x20/0x20 [ 457.846336][T12381] ? _raw_spin_lock_irq+0xbb/0xf0 [ 457.851395][T12381] do_group_exit+0x22d/0x2f0 [ 457.855981][T12381] ? lockdep_hardirqs_on+0x98/0x150 [ 457.861178][T12381] get_signal+0x12a6/0x1390 [ 457.865696][T12381] arch_do_signal_or_restart+0xc2/0x7b0 [ 457.871261][T12381] ? __ia32_sys_get_robust_list+0x110/0x110 [ 457.877149][T12381] ? get_sigframe_size+0x20/0x20 [ 457.882082][T12381] ? __sys_connect+0x27f/0x470 [ 457.886858][T12381] ? exit_to_user_mode_loop+0x3b/0x110 [ 457.892321][T12381] exit_to_user_mode_loop+0x70/0x110 [ 457.897603][T12381] exit_to_user_mode_prepare+0xee/0x180 [ 457.903150][T12381] syscall_exit_to_user_mode+0x1a/0x50 [ 457.908605][T12381] do_syscall_64+0x61/0xb0 [ 457.913013][T12381] ? clear_bhb_loop+0x40/0x90 [ 457.917685][T12381] ? clear_bhb_loop+0x40/0x90 [ 457.922362][T12381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.928253][T12381] RIP: 0033:0x7f810cd9e1d9 [ 457.932660][T12381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.952271][T12381] RSP: 002b:00007f810db810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 457.960703][T12381] RAX: fffffffffffffe00 RBX: 00007f810d025fa8 RCX: 00007f810cd9e1d9 [ 457.968680][T12381] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f810d025fa8 [ 457.976674][T12381] RBP: 00007f810d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 457.984647][T12381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.992620][T12381] R13: 00007f810d026038 R14: 00007ffc86386de0 R15: 00007ffc86386ec8 [ 458.000608][T12381] [ 458.325908][T12391] bond1: (slave syz_tun): Releasing active interface [ 458.361987][T12391] bridge_slave_0: left allmulticast mode [ 458.491501][T12391] bridge_slave_0: left promiscuous mode [ 458.598653][T12391] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.154121][T12391] bridge_slave_1: left allmulticast mode [ 459.165943][T12391] bridge_slave_1: left promiscuous mode [ 459.271136][T12391] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.409545][T12391] bond0: (slave bond_slave_0): Releasing backup interface [ 459.485439][T12405] jffs2: notice: (12405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 459.529399][T12391] bond0: (slave bond_slave_1): Releasing backup interface [ 459.597681][T12391] team0: Port device team_slave_0 removed [ 459.609967][T12391] team0: Port device team_slave_1 removed [ 459.617458][T12391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.635016][T12391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.647720][T12391] bond1: (slave veth3): Releasing active interface [ 459.668199][T12391] bond1: (slave veth3): the permanent HWaddr of slave - 8a:33:07:4a:10:71 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 459.679730][T12409] overlayfs: failed to clone upperpath [ 459.694454][T12391] bond1: (slave bridge1): Releasing active interface [ 459.703141][T12393] team0: Mode changed to "broadcast" [ 459.709415][T12396] vlan0: entered promiscuous mode [ 459.721354][T12399] bond0: left allmulticast mode [ 459.758806][T12401] tipc: Started in network mode [ 459.793040][T12401] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 459.813220][T12401] tipc: Enabled bearer , priority 0 [ 459.866739][T12411] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2380'. [ 460.278682][T12424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 460.289318][T12424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 460.299073][T12424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 460.308606][T12424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 460.319592][T12424] geneve2: entered promiscuous mode [ 460.771699][T12433] jffs2: notice: (12433) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 460.945235][T10147] tipc: Node number set to 11578026 [ 461.663430][T12463] jffs2: notice: (12463) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 461.859492][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.868683][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.877649][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.897912][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.908397][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.918319][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 462.096685][T12475] overlayfs: failed to clone upperpath [ 462.298223][T12467] chnl_net:caif_netlink_parms(): no params data found [ 462.303556][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'. [ 462.400519][T12467] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.411008][T12467] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.422642][T12467] bridge_slave_0: entered allmulticast mode [ 462.437745][T12467] bridge_slave_0: entered promiscuous mode [ 462.452553][T12467] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.460536][T12467] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.468253][T12467] bridge_slave_1: entered allmulticast mode [ 462.476232][T12467] bridge_slave_1: entered promiscuous mode [ 462.515024][T12467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.528379][T12467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.568113][T12467] team0: Port device team_slave_0 added [ 462.577058][T12467] team0: Port device team_slave_1 added [ 462.611478][T12467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.618916][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.645557][T12467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.659639][T12467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.667035][T12467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.693529][T12467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.747642][T12467] hsr_slave_0: entered promiscuous mode [ 462.759339][T12467] hsr_slave_1: entered promiscuous mode [ 462.766969][T12467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.775760][T12467] Cannot create hsr debugfs directory [ 462.961019][T12467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 463.099024][T12467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 463.203500][T12467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 463.276612][T12510] bond1: Removing last arp target with arp_interval on [ 463.319933][T12467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 463.471414][T12467] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 463.491912][T12467] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 463.513539][T12467] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 463.533497][T12467] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 463.701426][T12467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.737973][T12467] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.760880][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.768933][ T8584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.799752][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.806970][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.003187][ T5776] Bluetooth: hci1: command tx timeout [ 464.782032][T12467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.867625][T12467] veth0_vlan: entered promiscuous mode [ 464.900096][T12467] veth1_vlan: entered promiscuous mode [ 464.932113][T12467] veth0_macvtap: entered promiscuous mode [ 464.945073][T12467] veth1_macvtap: entered promiscuous mode [ 464.965144][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.982859][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.992701][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.005690][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.017353][T12467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.054663][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.067946][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.092946][T12467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.118360][T12467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.139993][T12467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.156838][T12467] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.167664][T12467] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.176838][T12467] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.186168][T12467] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.349846][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.401126][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.463317][T11091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.471177][T11091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.646765][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2436'. [ 466.084374][ T5776] Bluetooth: hci1: command tx timeout [ 467.010857][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 467.020842][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 467.092229][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 467.105714][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 467.308038][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 467.316797][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 467.690772][T12582] random: crng reseeded on system resumption [ 467.826954][T12588] netlink: 'syz.2.2445': attribute type 1 has an invalid length. [ 467.838991][ T8347] syz_tun (unregistering): left allmulticast mode [ 467.863339][ T8347] syz_tun (unregistering): left promiscuous mode [ 467.889543][ T8347] bridge0: port 3(syz_tun) entered disabled state [ 467.985532][T12590] autofs4:pid:12590:autofs_fill_super: called with bogus options [ 468.146854][T12577] chnl_net:caif_netlink_parms(): no params data found [ 468.163253][ T5780] Bluetooth: hci1: command tx timeout [ 468.251249][T12577] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.259056][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.267100][T12577] bridge_slave_0: entered allmulticast mode [ 468.294984][T12577] bridge_slave_0: entered promiscuous mode [ 468.338814][T12577] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.369595][T12577] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.393333][T12577] bridge_slave_1: entered allmulticast mode [ 468.400604][T12577] bridge_slave_1: entered promiscuous mode [ 468.409710][T12604] loop3: detected capacity change from 0 to 256 [ 468.423555][T12604] exfat: Deprecated parameter 'utf8' [ 468.477946][T12604] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 468.502397][T12577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.623548][T12577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.752544][T12577] team0: Port device team_slave_0 added [ 468.761759][T12577] team0: Port device team_slave_1 added [ 469.107268][T12577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.219235][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.332928][T12577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.400005][T12577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.421658][T12577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.454011][ T5780] Bluetooth: hci2: command tx timeout [ 469.505930][T12577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.548568][T12623] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2457'. [ 469.633866][T12577] hsr_slave_0: entered promiscuous mode [ 469.796076][T12577] hsr_slave_1: entered promiscuous mode [ 469.855450][T12577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.946831][T12577] Cannot create hsr debugfs directory [ 470.242902][ T5780] Bluetooth: hci1: command tx timeout [ 470.509081][T12637] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 470.523491][T12637] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 470.533379][T12637] i2c-slave-eeprom: probe of 0-0001 failed with error -22 [ 470.559772][T12637] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 470.881369][T12577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 470.901310][T12577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 470.921267][T12577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 470.940850][T12577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 470.993770][ T5781] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 471.071203][T12577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.097536][T12577] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.115684][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.122888][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.160427][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.167657][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.222157][ T5781] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 471.233952][ T5781] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 471.264561][ T5781] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.272124][T12577] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.288883][T12577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.315870][ T5781] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 471.332028][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.348432][ T5781] usb 1-1: Product: syz [ 471.359945][ T5781] usb 1-1: Manufacturer: syz [ 471.377346][ T5781] usb 1-1: SerialNumber: syz [ 471.432342][T12657] rt1719: probe of 0-0049 failed with error -5 [ 471.442225][ T5781] hub 1-1:1.0: bad descriptor, ignoring hub [ 471.453717][ T5781] hub: probe of 1-1:1.0 failed with error -5 [ 471.466599][T12657] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 471.523574][ T5780] Bluetooth: hci2: command tx timeout [ 471.573609][T12577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.638477][T12577] veth0_vlan: entered promiscuous mode [ 471.639061][ T5781] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 471.653899][T12577] veth1_vlan: entered promiscuous mode [ 471.710526][T12577] veth0_macvtap: entered promiscuous mode [ 471.721308][T12577] veth1_macvtap: entered promiscuous mode [ 471.739661][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.750398][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.760286][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.771173][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.781109][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.791571][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.802693][T12577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.820415][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.841767][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.851701][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.862289][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.872515][T12577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.883030][T12577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.893191][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 471.894578][T12577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.909595][T12663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.925412][T12577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.935272][T12577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.944728][T12663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.954008][T12577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.962722][T12577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.005423][ T5813] usb 1-1: USB disconnect, device number 2 [ 472.045069][ T5813] usblp0: removed [ 472.085472][ T5815] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 472.101106][ T5815] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 472.103820][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.118314][ T5815] usb 4-1: config 0 interface 0 has no altsetting 0 [ 472.128538][ T5815] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 472.139189][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 472.149709][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.153254][ T5815] usb 4-1: Product: syz [ 472.170378][ T5815] usb 4-1: Manufacturer: syz [ 472.183386][ T5815] usb 4-1: SerialNumber: syz [ 472.202399][ T5815] usb 4-1: config 0 descriptor?? [ 472.213441][ T8588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.215805][ T5815] hub 4-1:0.0: bad descriptor, ignoring hub [ 472.228656][ T8588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.234711][ T5815] hub: probe of 4-1:0.0 failed with error -5 [ 472.249611][T12666] overlayfs: failed to clone lowerpath [ 472.251482][ T5815] usb 4-1: selecting invalid altsetting 0 [ 473.450397][T12676] syzkaller0: entered promiscuous mode [ 473.466766][T12676] syzkaller0: entered allmulticast mode [ 473.520146][T12676] 0: reclassify loop, rule prio 0, protocol 800 [ 473.609055][ T5780] Bluetooth: hci2: command tx timeout [ 473.695289][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.705478][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.714332][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.733555][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.745499][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 473.752995][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.168332][T12681] chnl_net:caif_netlink_parms(): no params data found [ 474.205992][T12699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2481'. [ 474.312067][T12681] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.326432][T12681] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.338381][T12681] bridge_slave_0: entered allmulticast mode [ 474.346294][T12681] bridge_slave_0: entered promiscuous mode [ 474.356492][T12681] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.364225][T12681] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.372627][T12681] bridge_slave_1: entered allmulticast mode [ 474.380510][T12681] bridge_slave_1: entered promiscuous mode [ 474.438186][T12681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.451073][T12681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.492437][T12681] team0: Port device team_slave_0 added [ 474.509126][T12681] team0: Port device team_slave_1 added [ 474.543209][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 474.553967][T12681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.561045][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.588514][T12681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.601959][T12681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.608947][T12681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.637353][T12681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.684103][T12681] hsr_slave_0: entered promiscuous mode [ 474.690310][T12681] hsr_slave_1: entered promiscuous mode [ 474.696889][T12681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.704661][T12681] Cannot create hsr debugfs directory [ 474.737037][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.756099][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 474.771325][ T23] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 474.792947][ T789] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 474.802624][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.834336][ T23] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 474.858853][T12681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.963928][T12681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.997865][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 475.007193][ T789] usb 2-1: config 142 has an invalid interface number: 251 but max is 0 [ 475.015783][ T789] usb 2-1: config 142 descriptor has 1 excess byte, ignoring [ 475.032827][ T789] usb 2-1: config 142 has no interface number 0 [ 475.039198][ T789] usb 2-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping [ 475.064457][ T789] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 475.077377][T12681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.078380][ T789] usb 2-1: config 142 interface 251 has no altsetting 0 [ 475.100426][ T789] usb 2-1: string descriptor 0 read error: -22 [ 475.106892][ T789] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 475.116097][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.132027][T12711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 475.139631][T12711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 475.152466][ T789] cypress_m8 2-1:142.251: HID->COM RS232 Adapter converter detected [ 475.165559][ T789] cyphidcom ttyUSB0: required endpoint is missing [ 475.198089][T12681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.345394][T12681] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 475.359236][T12681] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 475.369935][T12681] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 475.389536][T12681] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 475.430222][ T789] usb 2-1: USB disconnect, device number 2 [ 475.469542][ T789] cypress_m8 2-1:142.251: device disconnected [ 475.515015][T12681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.535544][T12681] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.566475][ T8572] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.573697][ T8572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.591448][ T8572] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.598674][ T8572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.684094][ T5776] Bluetooth: hci2: command tx timeout [ 475.839382][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.843277][ T5776] Bluetooth: hci0: command tx timeout [ 475.907084][T12681] veth0_vlan: entered promiscuous mode [ 475.921604][T12681] veth1_vlan: entered promiscuous mode [ 475.959274][T12681] veth0_macvtap: entered promiscuous mode [ 475.981791][T12681] veth1_macvtap: entered promiscuous mode [ 476.029332][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.043630][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.056900][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.069711][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.079881][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.088066][ T789] usb 1-1: USB disconnect, device number 3 [ 476.091123][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.108519][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.124323][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.140881][T12681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.261830][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.274758][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.290127][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.302290][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.313486][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.328798][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.340471][T12681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.401376][T12681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.468806][T12681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.613333][T12681] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.651199][T12681] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.747282][T12681] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.756104][ T789] idmouse 1-1:1.0: disconnected [ 476.791044][T12681] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.869181][T10146] usb 4-1: USB disconnect, device number 2 [ 476.952523][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.988604][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.078752][ T8584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.078787][T12723] syzkaller0: entered promiscuous mode [ 477.087913][ T8584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.103330][T12723] syzkaller0: entered allmulticast mode [ 477.923944][ T5776] Bluetooth: hci0: command tx timeout [ 478.497324][T12764] program syz.0.2498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.643512][T10146] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 478.776421][T12772] fuse: Bad value for 'fd' [ 478.784594][T12772] jffs2: notice: (12772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 478.802013][T12772] FAULT_INJECTION: forcing a failure. [ 478.802013][T12772] name failslab, interval 1, probability 0, space 0, times 0 [ 478.818094][T12772] CPU: 0 PID: 12772 Comm: syz.0.2501 Not tainted syzkaller #0 [ 478.824626][T10146] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.825571][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 478.839373][T10146] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 478.845323][T12772] Call Trace: [ 478.845335][T12772] [ 478.845343][T12772] dump_stack_lvl+0x18c/0x250 [ 478.855836][T10146] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 478.858383][T12772] ? show_regs_print_info+0x20/0x20 [ 478.861302][T10146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.865991][T12772] ? load_image+0x420/0x420 [ 478.866052][T12772] ? __might_sleep+0xe0/0xe0 [ 478.866114][T12772] ? __lock_acquire+0x7eb0/0x7eb0 [ 478.866152][T12772] should_fail_ex+0x394/0x4c0 [ 478.885387][T10146] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 478.888314][T12772] should_failslab+0x9/0x20 [ 478.920122][T12772] slab_pre_alloc_hook+0x59/0x300 [ 478.925219][T12772] ? memcg_list_lru_alloc+0x335/0xb00 [ 478.930624][T12772] ? memcg_list_lru_alloc+0x335/0xb00 [ 478.936030][T12772] __kmem_cache_alloc_node+0x53/0x250 [ 478.941434][T12772] ? memcg_list_lru_alloc+0x335/0xb00 [ 478.946814][T12772] __kmalloc+0xa7/0x240 [ 478.951004][T12772] memcg_list_lru_alloc+0x335/0xb00 [ 478.956250][T12772] ? memcg_reparent_list_lrus+0x860/0x860 [ 478.962004][T12772] ? get_obj_cgroup_from_current+0xd4/0x280 [ 478.967897][T12772] ? get_obj_cgroup_from_current+0xd4/0x280 [ 478.973789][T12772] slab_pre_alloc_hook+0x2ad/0x300 [ 478.978892][T12772] ? slab_pre_alloc_hook+0xb1/0x300 [ 478.984081][T12772] kmem_cache_alloc_lru+0x4d/0x2b0 [ 478.989221][T12772] ? __d_alloc+0x31/0x710 [ 478.993586][T12772] __d_alloc+0x31/0x710 [ 478.997753][T12772] d_make_root+0x4a/0xe0 [ 479.001986][T12772] jffs2_do_fill_super+0x5cf/0xc50 [ 479.007133][T12772] ? jffs2_reconfigure+0x310/0x310 [ 479.012352][T12772] mtd_get_sb+0x189/0x3b0 [ 479.016737][T12772] ? jffs2_reconfigure+0x310/0x310 [ 479.021856][T12772] get_tree_mtd+0x5e6/0x760 [ 479.026378][T12772] ? jffs2_reconfigure+0x310/0x310 [ 479.031484][T12772] ? mtd_proc_show+0x270/0x270 [ 479.036253][T12772] ? apparmor_capable+0x137/0x1a0 [ 479.041302][T12772] ? bpf_lsm_capable+0x9/0x10 [ 479.045978][T12772] ? security_capable+0x89/0xb0 [ 479.050831][T12772] vfs_get_tree+0x8c/0x280 [ 479.055249][T12772] do_new_mount+0x24a/0xa40 [ 479.059754][T12772] __se_sys_mount+0x2e7/0x3d0 [ 479.064440][T12772] ? __x64_sys_mount+0xc0/0xc0 [ 479.069213][T12772] ? lockdep_hardirqs_on+0x98/0x150 [ 479.074423][T12772] ? __x64_sys_mount+0x20/0xc0 [ 479.079187][T12772] do_syscall_64+0x55/0xb0 [ 479.083609][T12772] ? clear_bhb_loop+0x40/0x90 [ 479.088407][T12772] ? clear_bhb_loop+0x40/0x90 [ 479.093113][T12772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.099093][T12772] RIP: 0033:0x7f7ab4b9e1d9 [ 479.103529][T12772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.123252][T12772] RSP: 002b:00007f7ab5b51028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 479.131702][T12772] RAX: ffffffffffffffda RBX: 00007f7ab4e25fa0 RCX: 00007f7ab4b9e1d9 [ 479.139701][T12772] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 00002000000000c0 [ 479.147691][T12772] RBP: 00007f7ab4c35888 R08: 0000000000000000 R09: 0000000000000000 [ 479.155678][T12772] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000 [ 479.163657][T12772] R13: 00007f7ab4e26038 R14: 00007f7ab4e25fa0 R15: 00007fffd37d06c8 [ 479.171676][T12772] [ 480.003103][ T5776] Bluetooth: hci0: command tx timeout [ 480.170222][T10146] usb 4-1: USB disconnect, device number 3 [ 480.194703][T10146] idmouse 4-1:1.0: disconnected [ 480.344803][T12734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.677544][T12803] syzkaller0: entered promiscuous mode [ 480.683360][T12803] syzkaller0: entered allmulticast mode [ 481.729218][T12820] overlayfs: missing 'workdir' [ 482.083499][ T5776] Bluetooth: hci0: command tx timeout [ 482.107737][T12836] syzkaller0: entered promiscuous mode [ 482.113727][T12836] syzkaller0: entered allmulticast mode [ 482.187768][T10146] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 482.380043][T12844] overlayfs: missing 'workdir' [ 482.387218][T10146] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.407463][T10146] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 482.427493][T10146] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 482.442318][T10146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.491616][T10146] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 482.504497][T12848] overlayfs: missing 'workdir' [ 482.822854][ T5813] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 482.896202][T12852] loop0: detected capacity change from 0 to 40427 [ 482.913012][T12852] F2FS-fs (loop0): invalid crc value [ 482.935854][T12852] F2FS-fs (loop0): Found nat_bits in checkpoint [ 482.998619][T12852] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 483.037211][ T5813] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 483.049537][ T5813] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 483.059854][ T5813] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.079009][ T5813] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 483.095605][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.116627][ T5813] usb 4-1: Product: syz [ 483.145184][ T5813] usb 4-1: Manufacturer: syz [ 483.155169][ T5813] usb 4-1: SerialNumber: syz [ 483.227093][ T5813] hub 4-1:1.0: bad descriptor, ignoring hub [ 483.251307][ T5813] hub: probe of 4-1:1.0 failed with error -5 [ 483.721513][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.743265][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.767986][ T23] usb 3-1: USB disconnect, device number 2 [ 483.804696][ T5813] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 483.819386][ T23] idmouse 3-1:1.0: disconnected [ 483.839481][T12467] syz-executor: attempt to access beyond end of device [ 483.839481][T12467] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 483.868473][ T5813] usb 4-1: USB disconnect, device number 4 [ 483.870224][T12467] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 483.886604][ T5813] usblp1: removed [ 484.823356][T12867] syzkaller0: entered promiscuous mode [ 484.832887][T12867] syzkaller0: entered allmulticast mode [ 484.841773][T12866] syzkaller0: entered promiscuous mode [ 484.851603][T12866] syzkaller0: entered allmulticast mode [ 485.268337][T12881] overlayfs: missing 'lowerdir' [ 485.565527][T12889] syzkaller0: entered promiscuous mode [ 485.571161][T12889] syzkaller0: entered allmulticast mode [ 485.702416][T12891] syzkaller0: entered promiscuous mode [ 485.708342][T12891] syzkaller0: entered allmulticast mode [ 485.931683][T12883] loop1: detected capacity change from 0 to 40427 [ 485.958048][T12883] F2FS-fs (loop1): invalid crc value [ 485.982709][T12883] F2FS-fs (loop1): Found nat_bits in checkpoint [ 486.097188][T12883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 486.874193][T12577] syz-executor: attempt to access beyond end of device [ 486.874193][T12577] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 486.896875][T12911] overlayfs: missing 'lowerdir' [ 486.903484][T12577] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 487.057148][T12915] syzkaller0: entered promiscuous mode [ 487.062673][T12915] syzkaller0: entered allmulticast mode [ 487.333545][T12922] 9pnet_virtio: no channels available for device syz [ 487.589179][T12934] overlayfs: missing 'lowerdir' [ 487.756654][T12941] syzkaller0: entered promiscuous mode [ 487.762334][T12941] syzkaller0: entered allmulticast mode [ 487.950738][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2570'. [ 488.144181][T12936] loop0: detected capacity change from 0 to 40427 [ 488.164198][T12936] F2FS-fs (loop0): invalid crc value [ 488.195250][T12936] F2FS-fs (loop0): Found nat_bits in checkpoint [ 488.304769][T12954] syzkaller0: entered promiscuous mode [ 488.317178][T12954] syzkaller0: entered allmulticast mode [ 488.341505][T12936] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 489.132215][T12467] syz-executor: attempt to access beyond end of device [ 489.132215][T12467] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 489.149848][T12467] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 489.695045][T12982] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2583'. [ 489.780823][T12984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.121876][T13004] syzkaller0: entered promiscuous mode [ 490.133313][T13004] syzkaller0: entered allmulticast mode [ 490.614307][T13017] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 490.777835][T12999] loop3: detected capacity change from 0 to 40427 [ 490.801855][T12999] F2FS-fs (loop3): invalid crc value [ 490.836258][T12999] F2FS-fs (loop3): Found nat_bits in checkpoint [ 490.996532][T12999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 491.171514][T13035] syzkaller0: entered promiscuous mode [ 491.187054][T13035] syzkaller0: entered allmulticast mode [ 491.558722][T12116] syz-executor: attempt to access beyond end of device [ 491.558722][T12116] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 491.590793][T12116] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 491.864666][T13055] syzkaller0: entered promiscuous mode [ 491.878489][T13055] syzkaller0: entered allmulticast mode [ 492.332835][ T5777] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 492.535112][ T5777] usb 3-1: unable to get BOS descriptor or descriptor too short [ 492.559771][ T5777] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 492.592892][ T5777] usb 3-1: config 142 descriptor has 1 excess byte, ignoring [ 492.619452][ T5777] usb 3-1: config 142 has no interface number 0 [ 492.642429][ T5777] usb 3-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping [ 492.683012][ T5777] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 492.713089][ T5777] usb 3-1: config 142 interface 251 has no altsetting 0 [ 492.749584][ T5777] usb 3-1: string descriptor 0 read error: -22 [ 492.760911][ T5777] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 492.778198][ T5777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.797210][T13057] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.818785][T13057] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 492.849650][ T5777] cypress_m8 3-1:142.251: HID->COM RS232 Adapter converter detected [ 492.869082][ T5777] cyphidcom ttyUSB0: required endpoint is missing [ 493.036004][T13064] loop0: detected capacity change from 0 to 40427 [ 493.068699][T13064] F2FS-fs (loop0): invalid crc value [ 493.080279][ T5777] usb 3-1: USB disconnect, device number 3 [ 493.093920][T13064] F2FS-fs (loop0): Found nat_bits in checkpoint [ 493.104113][ T5777] cypress_m8 3-1:142.251: device disconnected [ 493.234002][T13064] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 493.455680][T13087] syzkaller0: entered promiscuous mode [ 493.463909][T13087] syzkaller0: entered allmulticast mode [ 493.752675][T12467] syz-executor: attempt to access beyond end of device [ 493.752675][T12467] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 493.822577][T12467] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 494.113971][ T5777] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 494.330556][ T5777] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 494.372867][ T5777] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 494.385889][ T5777] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 494.422928][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.464142][ T5777] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 494.501557][ T5777] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 494.637024][T13125] syzkaller0: entered promiscuous mode [ 494.642639][T13125] syzkaller0: entered allmulticast mode [ 494.648687][ T5813] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 494.847506][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 494.853171][T13097] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 494.856927][ T5813] usb 2-1: config 142 has an invalid interface number: 251 but max is 0 [ 494.880985][ T5813] usb 2-1: config 142 descriptor has 1 excess byte, ignoring [ 494.882626][T13097] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 494.895611][ T5813] usb 2-1: config 142 has no interface number 0 [ 494.912727][ T5813] usb 2-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping [ 494.918239][T13097] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 494.949848][ T5813] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 494.980679][ T5813] usb 2-1: config 142 interface 251 has no altsetting 0 [ 495.004522][ T5813] usb 2-1: string descriptor 0 read error: -22 [ 495.012638][ T5813] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 495.023697][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.037238][T13118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 495.054576][T13118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 495.072193][ T5813] cypress_m8 2-1:142.251: HID->COM RS232 Adapter converter detected [ 495.077651][T13094] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 495.087474][ T5813] cyphidcom ttyUSB1: required endpoint is missing [ 495.110523][ T5777] usb 3-1: USB disconnect, device number 4 [ 495.154127][ T5777] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 495.185839][ T5777] spcp8x5 3-1:1.0: device disconnected [ 495.291217][T13123] loop3: detected capacity change from 0 to 40427 [ 495.297098][ T5813] usb 2-1: USB disconnect, device number 3 [ 495.319440][ T5813] cypress_m8 2-1:142.251: device disconnected [ 495.347757][T13123] F2FS-fs (loop3): invalid crc value [ 495.382577][T13123] F2FS-fs (loop3): Found nat_bits in checkpoint [ 495.531829][T13123] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 495.799416][T13151] syzkaller0: entered promiscuous mode [ 495.807293][T13151] syzkaller0: entered allmulticast mode [ 496.055845][T12116] syz-executor: attempt to access beyond end of device [ 496.055845][T12116] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 496.116294][T12116] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 496.217305][ T789] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 496.235011][ T789] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 496.253333][ T789] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 496.268826][ T789] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 496.278316][ T789] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 496.293042][ T789] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 496.301602][ T789] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 496.315749][ T789] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 496.345361][ T789] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 496.609844][T13174] fido_id[13174]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 498.916276][T13189] loop0: detected capacity change from 0 to 40427 [ 498.941765][T13189] F2FS-fs (loop0): invalid crc value [ 498.958014][T13189] F2FS-fs (loop0): Found nat_bits in checkpoint [ 499.157572][T13189] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 499.205546][T13238] syzkaller0: entered promiscuous mode [ 499.222900][T13238] syzkaller0: entered allmulticast mode [ 499.605755][T12467] syz-executor: attempt to access beyond end of device [ 499.605755][T12467] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 499.630795][T12467] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 500.606420][T13259] syzkaller0: entered promiscuous mode [ 500.612247][T13259] syzkaller0: entered allmulticast mode [ 500.735956][T13261] page:ffffea0001430000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50c00 [ 500.796961][T13261] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 500.848911][T13261] page_type: 0xffffffff() [ 500.884132][T13261] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 500.902880][T13261] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 500.932388][T13261] page dumped because: unmovable page [ 500.940172][T13261] page_owner tracks the page as allocated [ 500.957857][T13261] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100cc0(GFP_USER), pid 12103, tgid 12103 (syz-executor), ts 443122836883, free_ts 389078085924 [ 500.975753][T13261] post_alloc_hook+0x1c1/0x200 [ 500.981256][T13261] get_page_from_freelist+0x2181/0x22a0 [ 500.987182][T13261] __alloc_pages+0x1f0/0x460 [ 500.991894][T13261] __get_free_pages+0xc/0x30 [ 500.996718][T13261] kasan_populate_vmalloc_pte+0x35/0x100 [ 501.002514][T13261] __apply_to_page_range+0x860/0xdd0 [ 501.007998][T13261] alloc_vmap_area+0x1d26/0x1e50 [ 501.013676][T13261] __get_vm_area_node+0x162/0x370 [ 501.018853][T13261] __vmalloc_node_range+0x36f/0x1320 [ 501.024503][T13261] vmalloc_user+0x74/0x80 [ 501.028948][T13261] kcov_ioctl+0x58/0x610 [ 501.033932][T13261] __se_sys_ioctl+0xfd/0x170 [ 501.043443][T13261] do_syscall_64+0x55/0xb0 [ 501.051599][T13261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.070917][T13261] page last free stack trace: [ 501.081243][T13261] __free_pages_ok+0x994/0xad0 [ 501.091365][T13261] io_pages_unmap+0x1c4/0x300 [ 501.112959][T13261] io_rings_free+0x83/0x3d0 [ 501.119318][T13261] io_ring_ctx_free+0x745/0x950 [ 501.139194][T13261] io_ring_exit_work+0x7a6/0x830 [ 501.151457][T13261] process_scheduled_works+0xa60/0x1600 [ 501.167755][T13261] worker_thread+0xa5e/0xfe0 [ 501.172490][T13261] kthread+0x2fa/0x390 [ 501.185918][T13261] ret_from_fork+0x48/0x80 [ 501.191199][T13261] ret_from_fork_asm+0x11/0x20 [ 501.530987][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.541659][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.983274][T13299] netlink: 'syz.3.2700': attribute type 3 has an invalid length. [ 503.001302][T13299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2700'. [ 503.022189][T13299] ------------[ cut here ]------------ [ 503.027920][T13299] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:871 (size 16) [ 503.044891][T13299] WARNING: CPU: 0 PID: 13299 at net/sched/cls_u32.c:871 u32_change+0x1ed3/0x28c0 [ 503.054326][T13299] Modules linked in: [ 503.058251][T13299] CPU: 0 PID: 13299 Comm: syz.3.2700 Not tainted syzkaller #0 [ 503.065808][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 503.075966][T13299] RIP: 0010:u32_change+0x1ed3/0x28c0 [ 503.081396][T13299] Code: 00 00 00 e8 bf 39 cd f8 c6 05 25 89 9c 06 01 b9 10 00 00 00 48 c7 c7 20 c8 c8 8b 4c 89 fe 48 c7 c2 a0 c8 c8 8b e8 3d f8 96 f8 <0f> 0b e9 67 ee ff ff e8 91 39 cd f8 eb 58 e8 8a 39 cd f8 be 02 00 [ 503.102871][T13299] RSP: 0018:ffffc9000393ed20 EFLAGS: 00010246 [ 503.108982][T13299] RAX: f0cf096b9b8aca00 RBX: 0000000000000010 RCX: 0000000000080000 [ 503.117712][T13299] RDX: ffffc90019a91000 RSI: 000000000000acf0 RDI: 000000000000acf1 [ 503.126361][T13299] RBP: ffffc9000393eef8 R08: ffffc9000393e927 R09: 1ffff92000727d24 [ 503.134494][T13299] R10: dffffc0000000000 R11: fffff52000727d25 R12: 1ffff92000727db8 [ 503.142493][T13299] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 503.150650][T13299] FS: 00007f810db816c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 503.159664][T13299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.166894][T13299] CR2: 00007f810cdeb8c0 CR3: 000000006a307000 CR4: 00000000003506f0 [ 503.174961][T13299] Call Trace: [ 503.178259][T13299] [ 503.181229][T13299] ? u32_get+0x370/0x370 [ 503.185587][T13299] ? u32_get+0x370/0x370 [ 503.189861][T13299] tc_new_tfilter+0x1253/0x1840 [ 503.194936][T13299] ? tcf_proto_signal_destroying+0x240/0x240 [ 503.202537][T13299] ? rcu_read_unlock+0x8c/0xa0 [ 503.208039][T13299] ? tcf_proto_signal_destroying+0x240/0x240 [ 503.214102][T13299] ? tcf_proto_signal_destroying+0x240/0x240 [ 503.220113][T13299] rtnetlink_rcv_msg+0x892/0xf90 [ 503.225129][T13299] ? rtnetlink_rcv_msg+0x220/0xf90 [ 503.230302][T13299] ? rtnetlink_bind+0x80/0x80 [ 503.235057][T13299] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 503.241073][T13299] ? lock_chain_count+0x20/0x20 [ 503.246005][T13299] ? __local_bh_enable_ip+0x13a/0x1c0 [ 503.251405][T13299] ? lockdep_hardirqs_on+0x98/0x150 [ 503.256703][T13299] ? __local_bh_enable_ip+0x13a/0x1c0 [ 503.262203][T13299] ? _local_bh_enable+0xa0/0xa0 [ 503.267122][T13299] ? __dev_queue_xmit+0x272/0x37e0 [ 503.272335][T13299] ? __dev_queue_xmit+0x1329/0x37e0 [ 503.277650][T13299] ? __dev_queue_xmit+0x272/0x37e0 [ 503.282881][T13299] ? ref_tracker_free+0x686/0x830 [ 503.287941][T13299] netlink_rcv_skb+0x235/0x4c0 [ 503.292839][T13299] ? rtnetlink_bind+0x80/0x80 [ 503.297545][T13299] ? netlink_ack+0x1160/0x1160 [ 503.302350][T13299] ? __lock_acquire+0x7eb0/0x7eb0 [ 503.308902][T13299] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.314709][T13299] netlink_unicast+0x7b1/0x930 [ 503.319517][T13299] netlink_sendmsg+0x8d0/0xbf0 [ 503.324377][T13299] ? netlink_getsockopt+0x590/0x590 [ 503.329604][T13299] ? apparmor_socket_sendmsg+0x8e/0x330 [ 503.335211][T13299] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 503.340528][T13299] ? security_socket_sendmsg+0x80/0xa0 [ 503.346057][T13299] ? netlink_getsockopt+0x590/0x590 [ 503.351289][T13299] ____sys_sendmsg+0x61b/0x980 [ 503.356245][T13299] ? __asan_memset+0x22/0x40 [ 503.360869][T13299] ? __sys_sendmsg_sock+0x30/0x30 [ 503.366013][T13299] ? __import_iovec+0x5f2/0x850 [ 503.370908][T13299] ? import_iovec+0x73/0xa0 [ 503.375475][T13299] ___sys_sendmsg+0x2a6/0x360 [ 503.380210][T13299] ? __sys_sendmsg+0x2b0/0x2b0 [ 503.385073][T13299] ? futex_setup_timer+0xc0/0xc0 [ 503.390067][T13299] __sys_sendmmsg+0x2ca/0x510 [ 503.394822][T13299] ? __ia32_sys_sendmsg+0x90/0x90 [ 503.399884][T13299] ? __ia32_sys_get_robust_list+0x110/0x110 [ 503.407317][T13299] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 503.413864][T13299] ? lock_chain_count+0x20/0x20 [ 503.418758][T13299] __x64_sys_sendmmsg+0xa0/0xb0 [ 503.423999][T13299] do_syscall_64+0x55/0xb0 [ 503.428444][T13299] ? clear_bhb_loop+0x40/0x90 [ 503.433200][T13299] ? clear_bhb_loop+0x40/0x90 [ 503.437903][T13299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.444904][T13299] RIP: 0033:0x7f810cd9e1d9 [ 503.449355][T13299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.469265][T13299] RSP: 002b:00007f810db81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.477775][T13299] RAX: ffffffffffffffda RBX: 00007f810d025fa0 RCX: 00007f810cd9e1d9 [ 503.485818][T13299] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 503.493878][T13299] RBP: 00007f810ce35888 R08: 0000000000000000 R09: 0000000000000000 [ 503.501875][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.511469][T13299] R13: 00007f810d026038 R14: 00007f810d025fa0 R15: 00007ffc86386ec8 [ 503.519989][T13299] [ 503.523200][T13299] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 503.530489][T13299] CPU: 0 PID: 13299 Comm: syz.3.2700 Not tainted syzkaller #0 [ 503.537954][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 503.548010][T13299] Call Trace: [ 503.551376][T13299] [ 503.554321][T13299] dump_stack_lvl+0x18c/0x250 [ 503.559020][T13299] ? show_regs_print_info+0x20/0x20 [ 503.564226][T13299] ? load_image+0x420/0x420 [ 503.568768][T13299] panic+0x2ca/0x720 [ 503.572692][T13299] ? bpf_jit_dump+0xd0/0xd0 [ 503.577235][T13299] __warn+0x2e0/0x470 [ 503.581244][T13299] ? u32_change+0x1ed3/0x28c0 [ 503.585946][T13299] ? u32_change+0x1ed3/0x28c0 [ 503.590645][T13299] report_bug+0x2be/0x4f0 [ 503.595054][T13299] ? u32_change+0x1ed3/0x28c0 [ 503.599729][T13299] ? u32_change+0x1ed3/0x28c0 [ 503.604418][T13299] ? u32_change+0x1ed5/0x28c0 [ 503.609089][T13299] handle_bug+0xcf/0x120 [ 503.613341][T13299] exc_invalid_op+0x1a/0x50 [ 503.617842][T13299] asm_exc_invalid_op+0x1a/0x20 [ 503.622696][T13299] RIP: 0010:u32_change+0x1ed3/0x28c0 [ 503.627982][T13299] Code: 00 00 00 e8 bf 39 cd f8 c6 05 25 89 9c 06 01 b9 10 00 00 00 48 c7 c7 20 c8 c8 8b 4c 89 fe 48 c7 c2 a0 c8 c8 8b e8 3d f8 96 f8 <0f> 0b e9 67 ee ff ff e8 91 39 cd f8 eb 58 e8 8a 39 cd f8 be 02 00 [ 503.647609][T13299] RSP: 0018:ffffc9000393ed20 EFLAGS: 00010246 [ 503.653674][T13299] RAX: f0cf096b9b8aca00 RBX: 0000000000000010 RCX: 0000000000080000 [ 503.661643][T13299] RDX: ffffc90019a91000 RSI: 000000000000acf0 RDI: 000000000000acf1 [ 503.669620][T13299] RBP: ffffc9000393eef8 R08: ffffc9000393e927 R09: 1ffff92000727d24 [ 503.677590][T13299] R10: dffffc0000000000 R11: fffff52000727d25 R12: 1ffff92000727db8 [ 503.685573][T13299] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000020 [ 503.693567][T13299] ? u32_get+0x370/0x370 [ 503.697827][T13299] ? u32_get+0x370/0x370 [ 503.702065][T13299] tc_new_tfilter+0x1253/0x1840 [ 503.706944][T13299] ? tcf_proto_signal_destroying+0x240/0x240 [ 503.712948][T13299] ? rcu_read_unlock+0x8c/0xa0 [ 503.717735][T13299] ? tcf_proto_signal_destroying+0x240/0x240 [ 503.723721][T13299] ? tcf_proto_signal_destroying+0x240/0x240 [ 503.729701][T13299] rtnetlink_rcv_msg+0x892/0xf90 [ 503.734641][T13299] ? rtnetlink_rcv_msg+0x220/0xf90 [ 503.739755][T13299] ? rtnetlink_bind+0x80/0x80 [ 503.744442][T13299] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 503.750436][T13299] ? lock_chain_count+0x20/0x20 [ 503.755286][T13299] ? __local_bh_enable_ip+0x13a/0x1c0 [ 503.760658][T13299] ? lockdep_hardirqs_on+0x98/0x150 [ 503.765859][T13299] ? __local_bh_enable_ip+0x13a/0x1c0 [ 503.771230][T13299] ? _local_bh_enable+0xa0/0xa0 [ 503.776084][T13299] ? __dev_queue_xmit+0x272/0x37e0 [ 503.781195][T13299] ? __dev_queue_xmit+0x1329/0x37e0 [ 503.786410][T13299] ? __dev_queue_xmit+0x272/0x37e0 [ 503.791530][T13299] ? ref_tracker_free+0x686/0x830 [ 503.796556][T13299] netlink_rcv_skb+0x235/0x4c0 [ 503.801336][T13299] ? rtnetlink_bind+0x80/0x80 [ 503.806016][T13299] ? netlink_ack+0x1160/0x1160 [ 503.810784][T13299] ? __lock_acquire+0x7eb0/0x7eb0 [ 503.815815][T13299] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.821019][T13299] netlink_unicast+0x7b1/0x930 [ 503.825793][T13299] netlink_sendmsg+0x8d0/0xbf0 [ 503.830559][T13299] ? netlink_getsockopt+0x590/0x590 [ 503.835757][T13299] ? apparmor_socket_sendmsg+0x8e/0x330 [ 503.841300][T13299] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 503.846582][T13299] ? security_socket_sendmsg+0x80/0xa0 [ 503.852038][T13299] ? netlink_getsockopt+0x590/0x590 [ 503.857235][T13299] ____sys_sendmsg+0x61b/0x980 [ 503.862005][T13299] ? __asan_memset+0x22/0x40 [ 503.866611][T13299] ? __sys_sendmsg_sock+0x30/0x30 [ 503.871632][T13299] ? __import_iovec+0x5f2/0x850 [ 503.876489][T13299] ? import_iovec+0x73/0xa0 [ 503.880995][T13299] ___sys_sendmsg+0x2a6/0x360 [ 503.885679][T13299] ? __sys_sendmsg+0x2b0/0x2b0 [ 503.890456][T13299] ? futex_setup_timer+0xc0/0xc0 [ 503.895404][T13299] __sys_sendmmsg+0x2ca/0x510 [ 503.900088][T13299] ? __ia32_sys_sendmsg+0x90/0x90 [ 503.905129][T13299] ? __ia32_sys_get_robust_list+0x110/0x110 [ 503.911028][T13299] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 503.917009][T13299] ? lock_chain_count+0x20/0x20 [ 503.921867][T13299] __x64_sys_sendmmsg+0xa0/0xb0 [ 503.926726][T13299] do_syscall_64+0x55/0xb0 [ 503.931137][T13299] ? clear_bhb_loop+0x40/0x90 [ 503.935810][T13299] ? clear_bhb_loop+0x40/0x90 [ 503.940480][T13299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.946383][T13299] RIP: 0033:0x7f810cd9e1d9 [ 503.950794][T13299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.970406][T13299] RSP: 002b:00007f810db81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.978830][T13299] RAX: ffffffffffffffda RBX: 00007f810d025fa0 RCX: 00007f810cd9e1d9 [ 503.986807][T13299] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 503.994800][T13299] RBP: 00007f810ce35888 R08: 0000000000000000 R09: 0000000000000000 [ 504.002782][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.010762][T13299] R13: 00007f810d026038 R14: 00007f810d025fa0 R15: 00007ffc86386ec8 [ 504.018745][T13299] [ 504.022014][T13299] Kernel Offset: disabled [ 504.026328][T13299] Rebooting in 86400 seconds..