last executing test programs: 1m2.007453253s ago: executing program 2 (id=2507): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_generic(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000040)=0xe4d9891e9f9983eb, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1m0.460392507s ago: executing program 2 (id=2508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 59.594954927s ago: executing program 2 (id=2510): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003030000000000000000000008003a00011d040004000d00030000000080000000000000000000000700000000000000080000000000000005000000000000000204"], 0x78) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x5) r4 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000380)) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket(0x10, 0x803, 0x2) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 54.588259334s ago: executing program 2 (id=2519): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff0000000705010200020007"], 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 52.474867963s ago: executing program 2 (id=2526): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r0, 0x100000000000011, 0x2000, 0x2f93) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xbd}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 52.280919463s ago: executing program 2 (id=2527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r3, 0x400003}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1}, 0x804) 36.991544825s ago: executing program 32 (id=2527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r3, 0x400003}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1}, 0x804) 11.061187318s ago: executing program 4 (id=2547): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10.588012331s ago: executing program 0 (id=2534): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff0000000705010200020007"], 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 10.215444948s ago: executing program 1 (id=2579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10004, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xffffff6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x2c020400) r4 = msgget$private(0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x140, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x200000000}, {}, 0x70bd2a, 0x3503, 0xa, 0x5, 0x0, 0x8}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x140}}, 0x2000c0c4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x4800) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x3f}}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) msgsnd(r4, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x5, 0x1, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.207897938s ago: executing program 3 (id=2580): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x3c}}, 0x0) 10.207487098s ago: executing program 4 (id=2547): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.90043409s ago: executing program 0 (id=2534): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff0000000705010200020007"], 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 8.511453709s ago: executing program 1 (id=2581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e50100000000000084e30700", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="0100080001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) 8.511157219s ago: executing program 3 (id=2582): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0xe24, 0x7, @mcast2, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="181100", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.510948909s ago: executing program 4 (id=2547): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.617305821s ago: executing program 0 (id=2534): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff0000000705010200020007"], 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 7.238257819s ago: executing program 1 (id=2583): r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) socket(0x2d, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020) r3 = fsopen(0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) 7.230367639s ago: executing program 3 (id=2584): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000"], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 7.229757579s ago: executing program 4 (id=2547): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.991605708s ago: executing program 0 (id=2534): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff0000000705010200020007"], 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 5.438834814s ago: executing program 1 (id=2585): syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.437974364s ago: executing program 3 (id=2586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 5.437618684s ago: executing program 4 (id=2547): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.83254497s ago: executing program 0 (id=2534): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff0000000705010200020007"], 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 3.431924058s ago: executing program 1 (id=2587): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x40, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d0003", 0x23}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0xc441) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000080)) 3.431562748s ago: executing program 3 (id=2588): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000980)=ANY=[@ANYBLOB="00042abd7000fedbdf253900000094015a807800028005000700020000001400050006000100080003000700050009005b0505000700000000001400050002000000030006000400080003007b"], 0x330}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20000885) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x1000f) 3.431477998s ago: executing program 4 (id=2547): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.521577019s ago: executing program 3 (id=2589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) userfaultfd(0x80801) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)={0x108806, 0x3, 0x1ffffffd, 0x3ff}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe11) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r3, 0x18, 0x0, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r4 = socket$inet(0x2, 0x2, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000b07e7e830574f7be8c0d21a06bb3a74578312fa1001c0012800a0001006970697000"], 0x3c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000180)="e568a66ff7d158db6f8e5e", 0xb}], 0x2}, 0x0) 125.153325ms ago: executing program 1 (id=2590): socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x4, 0xffffffff, 0xa, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x7, 0x1, 0x3, 0x400}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010800000000ef07fbc0e8663c5a6c59fe8aff00000000f2000900020073797a310000000005000400000000001400078005001500010000000800114000000100050001000600000005000500000000000d00030068"], 0x5c}}, 0x4004804) fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f00000001c0)=@md5={0x1, "0a08e3078bd8565a3444fae0130a9596"}, 0x11, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002600)=ANY=[@ANYBLOB="aaaa696b00c10d275f1e00000800450c001c000000020011907800000000000000004e234e2400089078"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x36, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) ptrace(0x10, r1) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, 0x0, 0x80) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0xfffffffffffffffe, 0x1, 0x1}, &(0x7f0000000040)=[{}]) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r4) rmdir(&(0x7f0000000640)='./file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f00000000c0)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x24) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x267) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x1ed, 0x0, 0x1015, 0xffffff01, 0x5, 0x8, 0x161b}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) epoll_create1(0x0) 0s ago: executing program 0 (id=2534): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff0000000705010200020007"], 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) kernel console output (not intermixed with test programs): tered promiscuous mode [ 355.635179][ T9126] veth0: left promiscuous mode [ 355.900956][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'. [ 358.621756][ T9179] jffs2: notice: (9179) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 359.144909][ T9189] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 360.184930][ T9206] : renamed from bond_slave_0 (while UP) [ 360.692061][ T27] audit: type=1800 audit(1789429256.019:4): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1023" name="/newroot/267" dev="tmpfs" ino=1481 res=0 errno=0 [ 362.802583][ T9281] loop0: detected capacity change from 0 to 256 [ 362.811176][ T9281] exfat: Deprecated parameter 'namecase' [ 362.819738][ T9281] exfat: Deprecated parameter 'namecase' [ 362.840634][ T9281] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 362.945535][ T9285] CacheFiles: Failed to register: -95 [ 363.798969][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 363.864194][ T9300] jffs2: notice: (9300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 364.627834][ T9316] veth0: entered promiscuous mode [ 364.651985][ T9315] veth0: left promiscuous mode [ 365.028434][ T9324] fuse: Bad value for 'fd' [ 365.850536][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 366.203256][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 366.421562][ T9345] veth0: entered promiscuous mode [ 366.468820][ T9344] veth0: left promiscuous mode [ 368.477538][ T9388] veth0: entered promiscuous mode [ 369.153488][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 371.363695][ T9386] veth0: left promiscuous mode [ 372.650965][ T9458] CUSE: unknown device info "n|zQC*" [ 372.668366][ T9469] veth0: entered promiscuous mode [ 372.679627][ T9458] CUSE: unknown device info "G2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 372.700132][ T9458] CUSE: unknown device info "" [ 372.709696][ T9458] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 372.745746][ T9458] CUSE: DEVNAME unspecified [ 373.849313][ T5811] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 374.074543][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 374.083810][ T5811] usb 1-1: config 8 has an invalid interface number: 109 but max is 0 [ 374.092183][ T5811] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 374.121598][ T5811] usb 1-1: config 8 has no interface number 0 [ 374.152539][ T5811] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 374.192769][ T5811] usb 1-1: config 8 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.270872][ T5811] usb 1-1: string descriptor 0 read error: -22 [ 374.277370][ T5811] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 374.310796][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.352532][ T5811] metro_usb 1-1:8.109: required endpoints missing [ 374.607736][ T9487] trusted_key: syz.0.1121 sent an empty control message without MSG_MORE. [ 374.618837][ T5812] usb 1-1: USB disconnect, device number 26 [ 375.400794][ T9521] loop0: detected capacity change from 0 to 256 [ 375.409127][ T9521] exfat: Deprecated parameter 'namecase' [ 375.418046][ T9521] exfat: Deprecated parameter 'namecase' [ 375.441604][ T9521] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 375.536709][ T9522] CacheFiles: Failed to register: -95 [ 375.640238][ T9467] veth0: left promiscuous mode [ 376.737413][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 376.839458][ T9553] veth0: entered promiscuous mode [ 376.881313][ T9552] veth0: left promiscuous mode [ 377.235435][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 377.480227][ T9589] veth0: entered promiscuous mode [ 378.628593][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 378.629020][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.668118][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.777056][ T9624] jffs2: notice: (9624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 380.478064][ T9588] veth0: left promiscuous mode [ 380.738012][ T9638] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 380.994520][ T9649] jffs2: notice: (9649) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 381.119887][ T9652] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 381.179820][ T9652] jffs2: No space for garbage collection. Aborting GC thread [ 381.335045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 382.254218][ T9668] veth0: entered promiscuous mode [ 382.261728][ T9667] jffs2: notice: (9667) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 382.625556][ T9678] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 383.416783][ T9688] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 383.597470][ T9693] loop0: detected capacity change from 0 to 256 [ 383.611076][ T9693] exfat: Deprecated parameter 'namecase' [ 383.618316][ T9693] exfat: Deprecated parameter 'namecase' [ 383.645438][ T9693] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 383.666661][ T9696] jffs2: notice: (9696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 383.826811][ T9700] CacheFiles: Failed to register: -95 [ 385.243198][ T9666] veth0: left promiscuous mode [ 385.518441][ T9713] loop0: detected capacity change from 0 to 2048 [ 385.598928][ T9713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.996752][ T9725] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 387.819569][ T9736] jffs2: notice: (9736) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 387.875937][ T9741] loop0: detected capacity change from 0 to 256 [ 387.891000][ T9741] exfat: Deprecated parameter 'namecase' [ 387.909310][ T9741] exfat: Deprecated parameter 'namecase' [ 387.943931][ T9741] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 388.823117][ T9746] CacheFiles: Failed to register: -95 [ 389.001493][ T9748] veth0: entered promiscuous mode [ 389.368790][ T9765] jffs2: notice: (9765) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 389.412468][ T5810] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 389.646846][ T5810] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 389.668670][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.707889][ T5810] usb 1-1: config 0 descriptor?? [ 390.289914][ T5810] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 391.055262][ T5810] [drm] Initialized udl on minor 2 [ 391.065827][ T5810] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 391.084480][ T5810] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 391.098755][ T789] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 391.108499][ T789] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 391.117691][ T5810] usb 1-1: USB disconnect, device number 27 [ 391.310893][ T9783] loop0: detected capacity change from 0 to 256 [ 391.318740][ T9783] exfat: Deprecated parameter 'namecase' [ 391.328435][ T9783] exfat: Deprecated parameter 'namecase' [ 391.349398][ T9783] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 391.486032][ T9783] CacheFiles: Failed to register: -95 [ 391.963867][ T9747] veth0: left promiscuous mode [ 393.047880][ T9810] jffs2: notice: (9810) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 394.421721][ T9833] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1233'. [ 394.474124][ T9837] veth0: entered promiscuous mode [ 394.490350][ T9836] veth0: left promiscuous mode [ 395.029210][ T9847] jffs2: notice: (9847) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 396.252724][ T9866] veth0: entered promiscuous mode [ 398.283947][ T9895] jffs2: notice: (9895) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 398.675797][ T9908] md: array md0 already initialised! [ 398.730366][ T9910] loop0: detected capacity change from 0 to 256 [ 398.737908][ T9910] exfat: Deprecated parameter 'namecase' [ 398.745653][ T9910] exfat: Deprecated parameter 'namecase' [ 398.771797][ T9910] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 398.909429][ T9911] CacheFiles: Failed to register: -95 [ 399.250817][ T9865] veth0: left promiscuous mode [ 399.672446][ T9925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1260'. [ 399.698519][ T9928] jffs2: notice: (9928) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 400.222189][ T9940] veth0: entered promiscuous mode [ 400.338854][ T9944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 401.489435][ T9965] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1273'. [ 401.841536][ T9975] jffs2: notice: (9975) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 402.612085][ T9984] loop0: detected capacity change from 0 to 256 [ 402.626389][ T9984] exfat: Deprecated parameter 'namecase' [ 402.651940][ T9984] exfat: Deprecated parameter 'namecase' [ 402.705390][ T9984] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 402.793196][ T9987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 402.814027][ T9984] CacheFiles: Failed to register: -95 [ 403.186517][ T9938] veth0: left promiscuous mode [ 403.650078][T10000] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1284'. [ 403.866218][T10008] loop0: detected capacity change from 0 to 256 [ 403.884417][T10008] exfat: Deprecated parameter 'namecase' [ 403.903599][T10008] exfat: Deprecated parameter 'namecase' [ 403.933853][T10008] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 404.003865][T10008] CacheFiles: Failed to register: -95 [ 404.160090][T10017] veth0: entered promiscuous mode [ 404.203764][T10016] veth0: left promiscuous mode [ 404.349786][T10023] md: array md0 already initialised! [ 404.503047][T10031] jffs2: notice: (10031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 405.473286][T10038] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1297'. [ 405.603064][T10043] syz.0.1299: attempt to access beyond end of device [ 405.603064][T10043] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 407.017107][T10065] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 407.058304][T10065] loop0: detected capacity change from 0 to 1024 [ 407.103737][T10065] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #2: comm syz.0.1304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 407.251465][T10065] EXT4-fs (loop0): Remounting filesystem read-only [ 407.258516][T10065] EXT4-fs (loop0): get root inode failed [ 407.264766][T10065] EXT4-fs (loop0): mount failed [ 407.580562][T10072] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1308'. [ 408.546124][T10111] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1320'. [ 408.807703][T10124] md: array md0 already initialised! [ 410.100227][T10135] netlink: 'syz.1.1332': attribute type 3 has an invalid length. [ 410.128627][T10135] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1332'. [ 410.874889][T10167] netlink: 'syz.3.1343': attribute type 3 has an invalid length. [ 410.882903][T10167] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1343'. [ 411.547429][ T5810] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 411.834289][ T5810] usb 1-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0x7C, skipping [ 411.853428][ T5810] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 411.862693][ T5810] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 411.878901][ T5810] usb 1-1: Manufacturer: syz [ 411.892843][ T5810] usb 1-1: SerialNumber: syz [ 412.197618][ T5810] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 412.234700][ T5810] usb 1-1: USB disconnect, device number 28 [ 414.291164][T10251] jffs2: notice: (10251) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 415.316469][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 419.540621][T10315] jffs2: notice: (10315) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 419.598436][T10317] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 419.737102][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1388'. [ 419.900932][T10317] jffs2: No space for garbage collection. Aborting GC thread [ 421.189577][T10358] veth0: entered promiscuous mode [ 421.209058][T10357] veth0: left promiscuous mode [ 421.348028][T10362] jffs2: notice: (10362) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 421.443490][T10365] jffs2: notice: (10365) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 422.721842][T10392] veth0: entered promiscuous mode [ 423.787449][T10405] jffs2: notice: (10405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 423.839001][T10410] jffs2: notice: (10410) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 425.138518][T10436] jffs2: notice: (10436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 425.693476][T10390] veth0: left promiscuous mode [ 425.765101][T10442] jffs2: notice: (10442) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 425.799977][T10443] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 425.864061][T10443] jffs2: No space for garbage collection. Aborting GC thread [ 426.890932][T10457] jffs2: notice: (10457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 427.282093][T10472] veth0: entered promiscuous mode [ 427.447774][T10476] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 427.556024][ T5774] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 427.863672][ T5774] usb 1-1: Using ep0 maxpacket: 16 [ 428.033559][ T5774] usb 1-1: unable to get BOS descriptor or descriptor too short [ 428.051830][ T5774] usb 1-1: config 174 has an invalid interface number: 197 but max is 0 [ 428.085670][ T5774] usb 1-1: config 174 has no interface number 0 [ 428.110046][ T5774] usb 1-1: config 174 interface 197 has no altsetting 0 [ 428.154344][ T5774] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 428.170205][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.188809][ T5774] usb 1-1: Product: syz [ 428.198423][ T5774] usb 1-1: Manufacturer: syz [ 428.212968][ T5774] usb 1-1: SerialNumber: syz [ 429.089141][ T5774] peak_usb 1-1:174.197 can0: unable to request usb[type=0 value=1] err=-71 [ 429.155901][ T5774] peak_usb 1-1:174.197: unable to read PCAN-Chip USB firmware info (err -71) [ 429.268253][ T5774] peak_usb: probe of 1-1:174.197 failed with error -71 [ 429.312864][ T5774] usb 1-1: USB disconnect, device number 29 [ 429.409612][T10509] jffs2: notice: (10509) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 430.313932][T10471] veth0: left promiscuous mode [ 431.026688][T10534] jffs2: notice: (10534) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 432.527646][T10566] jffs2: notice: (10566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 432.879567][T10576] jffs2: notice: (10576) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 434.587183][T10604] jffs2: notice: (10604) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 434.922554][ T5810] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 435.217225][T10624] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 435.922379][ T5810] usb 1-1: Using ep0 maxpacket: 16 [ 435.934189][ T5810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 435.946326][ T5810] usb 1-1: config 174 has an invalid interface number: 197 but max is 0 [ 435.959608][ T5810] usb 1-1: config 174 has no interface number 0 [ 436.152450][ T5810] usb 1-1: config 174 interface 197 has no altsetting 0 [ 436.162414][ T5810] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 436.182479][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.190536][ T5810] usb 1-1: Product: syz [ 436.212318][ T5810] usb 1-1: Manufacturer: syz [ 436.216951][ T5810] usb 1-1: SerialNumber: syz [ 436.318103][T10633] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 437.268908][ T5810] peak_usb 1-1:174.197 can0: unable to request usb[type=0 value=1] err=-71 [ 437.292560][ T5810] peak_usb 1-1:174.197: unable to read PCAN-Chip USB firmware info (err -71) [ 437.382678][ T5810] peak_usb: probe of 1-1:174.197 failed with error -71 [ 437.412566][ T5810] usb 1-1: USB disconnect, device number 30 [ 437.902653][T10661] loop0: detected capacity change from 0 to 256 [ 437.918807][T10661] exfat: Deprecated parameter 'namecase' [ 437.926837][T10661] exfat: Deprecated parameter 'namecase' [ 437.940297][T10661] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 438.704980][T10661] CacheFiles: Failed to register: -95 [ 438.895007][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 439.144825][T10686] jffs2: notice: (10686) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 439.927523][ T5810] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 440.152886][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.159236][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.376782][ T5810] usb 1-1: Using ep0 maxpacket: 16 [ 440.385373][ T5810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 440.397529][ T5810] usb 1-1: config 174 has an invalid interface number: 197 but max is 0 [ 440.406036][ T5810] usb 1-1: config 174 has no interface number 0 [ 440.412377][ T5810] usb 1-1: config 174 interface 197 has no altsetting 0 [ 440.421913][ T5810] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 440.431021][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.439046][ T5810] usb 1-1: Product: syz [ 440.443253][ T5810] usb 1-1: Manufacturer: syz [ 440.447845][ T5810] usb 1-1: SerialNumber: syz [ 440.693166][ T5810] peak_usb 1-1:174.197 can0: unable to request usb[type=0 value=1] err=-71 [ 440.701834][ T5810] peak_usb 1-1:174.197: unable to read PCAN-Chip USB firmware info (err -71) [ 440.763631][ T5810] peak_usb: probe of 1-1:174.197 failed with error -71 [ 440.804849][ T5810] usb 1-1: USB disconnect, device number 31 [ 442.602980][T10778] jffs2: notice: (10778) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 445.069785][T10826] jffs2: notice: (10826) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 447.081449][T10858] jffs2: notice: (10858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 447.422395][ T5829] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 447.622362][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 447.636250][ T5829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 447.658281][ T5829] usb 1-1: config 174 has an invalid interface number: 197 but max is 0 [ 447.677846][ T5829] usb 1-1: config 174 has no interface number 0 [ 448.872677][ T5829] usb 1-1: config 174 interface 197 has no altsetting 0 [ 448.962615][T10887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.213349][ T5829] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 449.222490][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.231521][ T5829] usb 1-1: Product: syz [ 449.235728][ T5829] usb 1-1: Manufacturer: syz [ 449.240337][ T5829] usb 1-1: SerialNumber: syz [ 449.465728][ T5829] peak_usb 1-1:174.197 can0: unable to request usb[type=0 value=1] err=-71 [ 449.479487][ T5829] peak_usb 1-1:174.197: unable to read PCAN-Chip USB firmware info (err -71) [ 449.533892][ T5829] peak_usb: probe of 1-1:174.197 failed with error -71 [ 449.547572][ T5829] usb 1-1: USB disconnect, device number 32 [ 449.830616][T10900] 9pnet_fd: Insufficient options for proto=fd [ 453.343705][T10936] : renamed from bond_slave_0 (while UP) [ 453.422400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 454.035657][ T27] audit: type=1800 audit(1789429349.359:5): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.1571" name="/newroot/356" dev="tmpfs" ino=1959 res=0 errno=0 [ 454.367491][T10949] jffs2: notice: (10949) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 454.756542][T10958] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.495867][T10979] syz.0.1583: attempt to access beyond end of device [ 456.495867][T10979] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 456.662948][T10989] jffs2: notice: (10989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 456.736256][T10993] jffs2: notice: (10993) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 457.097982][T11001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 457.119168][T11001] loop0: detected capacity change from 0 to 1024 [ 457.215028][T11001] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #2: comm syz.0.1588: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 457.238371][T11001] EXT4-fs (loop0): Remounting filesystem read-only [ 457.245210][T11001] EXT4-fs (loop0): get root inode failed [ 457.250874][T11001] EXT4-fs (loop0): mount failed [ 460.209320][T11030] overlayfs: missing 'lowerdir' [ 461.146559][T11033] jffs2: notice: (11033) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 461.523962][T11044] jffs2: notice: (11044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 461.577263][T11047] netlink: 'syz.3.1602': attribute type 72 has an invalid length. [ 461.585216][T11047] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1602'. [ 461.852372][ T5810] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 462.112336][ T5810] usb 1-1: Using ep0 maxpacket: 16 [ 462.123839][ T5810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 462.143677][ T5810] usb 1-1: config 174 has an invalid interface number: 197 but max is 0 [ 462.154499][ T5810] usb 1-1: config 174 has no interface number 0 [ 462.160797][ T5810] usb 1-1: config 174 interface 197 has no altsetting 0 [ 462.184812][ T5810] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 462.200417][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.218692][ T5810] usb 1-1: Product: syz [ 462.226708][ T5810] usb 1-1: Manufacturer: syz [ 462.237400][ T5810] usb 1-1: SerialNumber: syz [ 462.355809][T11070] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1611'. [ 462.500259][ T5810] peak_usb 1-1:174.197 can0: unable to request usb[type=0 value=1] err=-71 [ 462.519349][ T5810] peak_usb 1-1:174.197: unable to read PCAN-Chip USB firmware info (err -71) [ 462.575998][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'. [ 462.587692][ T5810] peak_usb: probe of 1-1:174.197 failed with error -71 [ 462.603109][ T5810] usb 1-1: USB disconnect, device number 33 [ 463.449377][T11082] jffs2: notice: (11082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 465.439860][T11103] FAULT_INJECTION: forcing a failure. [ 465.439860][T11103] name failslab, interval 1, probability 0, space 0, times 0 [ 465.452710][T11103] CPU: 0 PID: 11103 Comm: syz.0.1619 Not tainted syzkaller #0 [ 465.460189][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.470259][T11103] Call Trace: [ 465.473627][T11103] [ 465.476615][T11103] dump_stack_lvl+0x18c/0x250 [ 465.481462][T11103] ? show_regs_print_info+0x20/0x20 [ 465.486727][T11103] ? load_image+0x420/0x420 [ 465.491275][T11103] ? __might_sleep+0xe0/0xe0 [ 465.495921][T11103] ? __lock_acquire+0x7d80/0x7d80 [ 465.500986][T11103] should_fail_ex+0x394/0x4c0 [ 465.505722][T11103] should_failslab+0x9/0x20 [ 465.510267][T11103] slab_pre_alloc_hook+0x59/0x300 [ 465.515342][T11103] kmem_cache_alloc+0x5a/0x2c0 [ 465.520131][T11103] ? security_inode_alloc+0x34/0x110 [ 465.525469][T11103] security_inode_alloc+0x34/0x110 [ 465.530601][T11103] inode_init_always+0x914/0xc90 [ 465.535572][T11103] new_inode_pseudo+0x95/0x1d0 [ 465.540351][T11103] __sock_create+0x12d/0x940 [ 465.545047][T11103] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 465.551054][T11103] __sys_socket+0xd7/0x1b0 [ 465.555492][T11103] __x64_sys_socket+0x7a/0x90 [ 465.560185][T11103] do_syscall_64+0x55/0xb0 [ 465.564620][T11103] ? clear_bhb_loop+0x40/0x90 [ 465.569416][T11103] ? clear_bhb_loop+0x40/0x90 [ 465.574114][T11103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.580027][T11103] RIP: 0033:0x7ff79739e159 [ 465.584506][T11103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.604166][T11103] RSP: 002b:00007ff79818b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 465.612602][T11103] RAX: ffffffffffffffda RBX: 00007ff797626270 RCX: 00007ff79739e159 [ 465.620585][T11103] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 465.628563][T11103] RBP: 00007ff79743503b R08: 0000000000000000 R09: 0000000000000000 [ 465.636544][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.644529][T11103] R13: 00007ff797626308 R14: 00007ff797626270 R15: 00007ffc0ae4fa68 [ 465.652526][T11103] [ 465.691822][T11103] socket: no more sockets [ 465.734982][T11102] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 466.089148][T11106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1620'. [ 466.245790][T11112] jffs2: notice: (11112) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 466.482106][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 467.743767][T11137] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1631'. [ 467.988615][T11146] jffs2: notice: (11146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 468.545518][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1635'. [ 468.716951][T11158] jffs2: notice: (11158) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 470.524400][T11186] jffs2: notice: (11186) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 470.776521][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'. [ 472.280825][T11212] jffs2: notice: (11212) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 472.612368][ T5774] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 473.590308][ T5774] usb 1-1: Using ep0 maxpacket: 16 [ 474.548201][ T5774] usb 1-1: unable to get BOS descriptor or descriptor too short [ 474.644190][T11229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1658'. [ 474.662329][ T5774] usb 1-1: config 174 has an invalid interface number: 197 but max is 0 [ 474.670705][ T5774] usb 1-1: config 174 has no interface number 0 [ 474.700229][ T5774] usb 1-1: config 174 interface 197 has no altsetting 0 [ 474.718863][ T5774] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 474.730450][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.739832][ T5774] usb 1-1: Product: syz [ 474.744354][ T5774] usb 1-1: Manufacturer: syz [ 474.748963][ T5774] usb 1-1: SerialNumber: syz [ 474.984071][ T5774] peak_usb 1-1:174.197 can0: unable to request usb[type=0 value=1] err=-71 [ 474.992837][ T5774] peak_usb 1-1:174.197: unable to read PCAN-Chip USB firmware info (err -71) [ 475.063163][ T5774] peak_usb: probe of 1-1:174.197 failed with error -71 [ 475.084525][ T5774] usb 1-1: USB disconnect, device number 34 [ 475.309537][T11239] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 478.174091][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1669'. [ 478.347812][T11273] jffs2: notice: (11273) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 478.385290][T11275] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 478.432562][T11275] jffs2: No space for garbage collection. Aborting GC thread [ 479.301010][T11287] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 480.111843][T11290] syz.0.1673: attempt to access beyond end of device [ 480.111843][T11290] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 482.693004][T11326] jffs2: notice: (11326) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 482.861817][T11318] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 483.283452][T11332] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 485.285276][T11359] jffs2: notice: (11359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 485.482380][ T5829] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 485.634011][T11370] jffs2: notice: (11370) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 485.685841][ T5829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.700471][ T5829] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 485.718107][ T5829] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 485.728600][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.756022][ T5829] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 485.938969][T11373] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 486.518774][ T9732] usb 1-1: USB disconnect, device number 35 [ 487.996237][T11392] jffs2: notice: (11392) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 490.571811][T11419] syz.0.1710: attempt to access beyond end of device [ 490.571811][T11419] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 492.080038][T11438] jffs2: notice: (11438) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 497.254327][T11495] jffs2: notice: (11495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 501.505057][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.511387][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.932293][ T5774] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 502.134693][ T5774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.152571][ T5774] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 502.182586][ T5774] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 502.198468][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.234589][ T5774] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 502.465088][ T5811] usb 1-1: USB disconnect, device number 36 [ 502.796642][T11557] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.159076][T11565] jffs2: notice: (11565) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 505.075591][T11584] jffs2: notice: (11584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 505.151185][T11586] bond0: no command found in slaves file - use +ifname or -ifname [ 508.562436][ T5774] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 508.816796][ T5774] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.869434][ T5774] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 508.923984][ T5774] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 508.947942][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.040567][ T5774] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19! [ 509.421074][ T28] usb 1-1: USB disconnect, device number 37 [ 510.473358][T11654] syz.0.1787: attempt to access beyond end of device [ 510.473358][T11654] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 512.327079][T11688] syz.0.1800: attempt to access beyond end of device [ 512.327079][T11688] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 515.975548][T11753] jffs2: notice: (11753) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 516.282328][T11760] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1823'. [ 516.291926][T11760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1823'. [ 520.319483][T11798] jffs2: notice: (11798) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 521.155526][ T5774] IPVS: starting estimator thread 0... [ 521.422869][T11813] IPVS: using max 18 ests per chain, 43200 per kthread [ 521.646476][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'. [ 522.287785][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.303514][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.312864][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.321887][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.330865][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.344664][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.353733][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.362761][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.371724][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.380720][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 522.517089][T11841] fuse: Bad value for 'fd' [ 524.028989][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1859'. [ 527.100442][T11895] jffs2: notice: (11895) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 527.531573][T11891] fuse: Bad value for 'fd' [ 527.838725][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 528.538756][ C1] net_ratelimit: 1 callbacks suppressed [ 528.538848][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 528.553891][ C1] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 528.563420][ C0] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 528.572460][ C0] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 528.582466][ C0] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 528.592111][ C0] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 528.601081][ C0] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 528.610005][ C0] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 528.618929][ C0] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 528.627872][ C0] TCP: MD5 Hash failed for (127.0.0.1, 20000)->(127.0.0.1, 20000) L3 index 0 [ 531.810992][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1884'. [ 535.009561][T11985] jffs2: notice: (11985) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 537.849840][T12020] jffs2: notice: (12020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 539.832653][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'. [ 540.341231][T12054] jffs2: notice: (12054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 541.433344][T12066] net_ratelimit: 6 callbacks suppressed [ 541.433356][T12066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 543.253693][T12103] overlay: Unknown parameter '/' [ 543.260978][T12103] overlayfs: failed to clone lowerpath [ 543.555566][T12113] jffs2: notice: (12113) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 544.181685][T12129] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 545.028994][T12152] jffs2: notice: (12152) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 545.378753][T12162] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 547.171394][T12179] bridge_slave_0: left allmulticast mode [ 547.202576][T12179] bridge_slave_0: left promiscuous mode [ 547.219695][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.254587][T12183] netlink: 'syz.3.1961': attribute type 5 has an invalid length. [ 547.274185][ T5782] Bluetooth: hci3: Malformed LE Event: 0x0b [ 547.370265][T12179] bridge_slave_1: left allmulticast mode [ 547.381641][T12179] bridge_slave_1: left promiscuous mode [ 547.392549][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.392597][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1961'. [ 547.439374][T12179] bond0: (slave 30): Releasing backup interface [ 547.478882][T12179] bond0: (slave bond_slave_1): Releasing backup interface [ 547.574325][T12179] team0: Port device team_slave_0 removed [ 547.654791][T12179] team0: Port device team_slave_1 removed [ 547.669490][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.678204][T12179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.693142][T12179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.705968][T12179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.733569][T12179] bond0: (slave geneve1): Releasing backup interface [ 547.777648][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 547.795053][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1962'. [ 548.055344][T12193] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 548.082546][T12193] CIFS: Attempting to mount //127.0.0.1/share [ 548.094834][T12193] CIFS: VFS: Error connecting to socket. Aborting operation. [ 548.102375][T12193] CIFS: VFS: cifs_mount failed w/return code = -111 [ 548.251474][T12196] jffs2: notice: (12196) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 548.634111][T12204] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 550.253348][ T5782] Bluetooth: hci0: Malformed LE Event: 0x0b [ 550.282867][T12220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1975'. [ 550.851230][T12223] fuse: Bad value for 'fd' [ 550.857193][T12226] netlink: 'syz.2.1971': attribute type 1 has an invalid length. [ 551.142976][T12234] jffs2: notice: (12234) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 551.657206][ T5782] Bluetooth: hci3: Malformed LE Event: 0x0b [ 551.680220][T12255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1985'. [ 553.262379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 553.985500][T12267] fuse: Bad value for 'fd' [ 554.189776][T12285] jffs2: notice: (12285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 556.529325][T12283] Bluetooth: hci0: command 0x0406 tx timeout [ 556.905286][T12324] fuse: Bad value for 'fd' [ 557.395031][T12332] jffs2: notice: (12332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 559.177727][T12368] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 561.015658][T12387] jffs2: notice: (12387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 562.668184][T12409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 563.218729][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.225985][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.389486][ T5782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 565.129703][ T8] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 565.233378][T12406] fuse: Bad value for 'fd' [ 565.536332][ T5774] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 565.931786][T12426] ceph: No mds server is up or the cluster is laggy [ 566.418252][T12447] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 567.316789][T12451] CIFS: Attempting to mount //127.0.0.1/share [ 567.330926][T12451] CIFS: VFS: Error connecting to socket. Aborting operation. [ 567.339789][T12451] CIFS: VFS: cifs_mount failed w/return code = -111 [ 568.734039][T12478] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 569.098123][T12485] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 571.098482][T12542] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2079'. [ 571.280101][T12550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2083'. [ 575.681144][T12615] 9pnet_fd: Insufficient options for proto=fd [ 575.693017][T12617] xt_hashlimit: size too large, truncated to 1048576 [ 575.748625][T12619] xt_hashlimit: size too large, truncated to 1048576 [ 576.872783][T12627] IPVS: sh: FWM 3 0x00000003 - no destination available [ 576.969064][T12633] No source specified [ 580.003303][T12676] jffs2: notice: (12676) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 581.462714][T12695] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 582.654274][T12706] jffs2: notice: (12706) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 583.458509][T12724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 586.023929][T12739] jffs2: notice: (12739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 586.956429][T12748] jffs2: notice: (12748) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 587.354356][T12758] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.411997][T12784] jffs2: notice: (12784) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 589.441174][T12789] jffs2: notice: (12789) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 590.601594][ T5782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 593.089448][T12827] jffs2: notice: (12827) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 593.239408][ T5782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 595.589352][ T5782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 596.339515][T12864] jffs2: notice: (12864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 598.491932][ T5782] Bluetooth: hci0: Malformed LE Event: 0x0b [ 598.533118][T12897] tmpfs: Unknown parameter 'grpquota_block_har' [ 600.170477][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2209'. [ 600.662311][ T5782] Bluetooth: hci0: Malformed LE Event: 0x0b [ 601.682345][T12932] tmpfs: Unknown parameter 'grpquota_block_har' [ 604.930768][T12971] No source specified [ 608.184990][ T5782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 608.521853][T13016] No source specified [ 610.869494][T12283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 610.879741][T12283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 610.893685][T12283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.246847][T12283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.327087][T12283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 611.339472][T12283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.885651][T13054] No source specified [ 612.819432][T13062] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 613.106092][T13034] chnl_net:caif_netlink_parms(): no params data found [ 613.219806][ T140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.418075][ T140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.502289][T12283] Bluetooth: hci3: command tx timeout [ 613.551860][ T140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.703692][ T140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.734156][T13034] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.751693][T13034] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.770987][T13034] bridge_slave_0: entered allmulticast mode [ 613.812122][T13034] bridge_slave_0: entered promiscuous mode [ 613.859422][T13034] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.882117][T13034] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.905943][T13034] bridge_slave_1: entered allmulticast mode [ 613.913830][T13034] bridge_slave_1: entered promiscuous mode [ 613.984137][T13034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.015909][T13034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.081922][T12283] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 614.133778][T13034] team0: Port device team_slave_0 added [ 614.144340][T13034] team0: Port device team_slave_1 added [ 614.270216][T13034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.278533][T13034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.377936][T13034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.397879][T13034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.405473][T13034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.472585][T13034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.685832][T13095] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 614.822337][T13034] hsr_slave_0: entered promiscuous mode [ 614.841582][T13034] hsr_slave_1: entered promiscuous mode [ 614.856219][T13034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.912212][T13034] Cannot create hsr debugfs directory [ 615.099090][T13108] jffs2: notice: (13108) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 615.583731][T12283] Bluetooth: hci3: command tx timeout [ 616.307694][ T140] IPVS: stopping backup sync thread 11332 ... [ 616.670924][ T140] hsr_slave_0: left promiscuous mode [ 616.692118][ T140] hsr_slave_1: left promiscuous mode [ 616.703705][T13143] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 616.730659][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.739862][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.769924][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.794110][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.818710][ T140] bridge_slave_1: left allmulticast mode [ 616.896492][ T140] bridge_slave_1: left promiscuous mode [ 616.923987][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.950943][ T140] bridge_slave_0: left allmulticast mode [ 616.963275][ T140] bridge_slave_0: left promiscuous mode [ 616.969066][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.058291][ T140] veth1_macvtap: left promiscuous mode [ 617.072987][ T140] veth0_macvtap: left promiscuous mode [ 617.082686][ T140] veth1_vlan: left promiscuous mode [ 617.093643][ T140] veth0_vlan: left promiscuous mode [ 617.662468][T12283] Bluetooth: hci3: command tx timeout [ 618.614846][ T140] team0 (unregistering): Port device team_slave_1 removed [ 618.657722][ T140] team0 (unregistering): Port device team_slave_0 removed [ 618.698162][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.747574][ T140] bond0 (unregistering): (slave 30): Releasing backup interface [ 619.049079][ T140] bond0 (unregistering): Released all slaves [ 619.555924][T13034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 619.614917][T13034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 619.663284][T13034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 619.705175][T13186] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 619.734924][T13034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 619.744480][T12283] Bluetooth: hci3: command tx timeout [ 619.825547][ T140] IPVS: stop unused estimator thread 0... [ 620.232100][T13034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.323566][T13208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2279'. [ 620.351263][T13034] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.375372][T12283] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 620.412915][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.420088][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.429661][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.436830][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.802752][T13224] jffs2: notice: (13224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 621.071376][T13238] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 621.135265][T13034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.274447][T13034] veth0_vlan: entered promiscuous mode [ 621.275759][T13245] jffs2: notice: (13245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 621.325935][T13034] veth1_vlan: entered promiscuous mode [ 621.419116][T13251] jffs2: notice: (13251) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 621.438652][T13034] veth0_macvtap: entered promiscuous mode [ 621.489677][T13034] veth1_macvtap: entered promiscuous mode [ 621.632067][T13034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.667832][T13034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.679482][T13034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.699658][T13034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.724065][T13034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.784456][T13034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.805200][T13034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.832417][T13034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.852255][T13034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.873733][T13034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.914657][T13034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.942478][T13034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.951305][T13034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.960464][T13034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.116027][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.173708][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.239912][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.270426][T13271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2289'. [ 622.280782][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.387320][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.393872][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.619252][T13301] jffs2: notice: (13301) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 625.736473][T13315] jffs2: notice: (13315) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 626.573110][T13317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2298'. [ 626.868552][T12283] Bluetooth: hci3: Malformed LE Event: 0x0b [ 628.231419][T13356] jffs2: notice: (13356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 628.277843][T13360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2310'. [ 628.382622][T13363] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 628.647559][T12283] Bluetooth: hci0: Malformed LE Event: 0x0b [ 629.180505][T13376] jffs2: notice: (13376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 631.731845][T13401] jffs2: notice: (13401) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 631.994702][T13409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2320'. [ 634.237207][T13438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2335'. [ 634.558930][T13449] jffs2: notice: (13449) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 637.696613][T13463] jffs2: notice: (13463) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 642.053873][T13500] jffs2: notice: (13500) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 643.962257][ T28] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 644.063126][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 644.073760][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 644.081603][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 644.105693][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 644.139205][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 644.146613][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 644.160213][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.181784][ T28] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 644.221297][ T28] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 644.246409][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.292574][ T28] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 644.460576][T13512] chnl_net:caif_netlink_parms(): no params data found [ 644.503022][ T5774] usb 3-1: USB disconnect, device number 23 [ 644.574924][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.582229][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.590065][T13512] bridge_slave_0: entered allmulticast mode [ 644.600689][T13526] xt_hashlimit: size too large, truncated to 1048576 [ 644.600903][T13512] bridge_slave_0: entered promiscuous mode [ 644.628546][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.642504][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.649746][T13512] bridge_slave_1: entered allmulticast mode [ 644.664981][T13512] bridge_slave_1: entered promiscuous mode [ 644.725911][T13512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.755890][T13512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.830087][T13512] team0: Port device team_slave_0 added [ 644.856961][T13512] team0: Port device team_slave_1 added [ 644.917393][T13512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.929328][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.957341][T13512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.975940][T13512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.986514][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.020797][T13512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.156501][T13512] hsr_slave_0: entered promiscuous mode [ 646.181893][T13512] hsr_slave_1: entered promiscuous mode [ 646.212348][T13512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.235440][T12283] Bluetooth: hci4: command tx timeout [ 646.241828][T13512] Cannot create hsr debugfs directory [ 646.755838][T13512] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.954430][T13512] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.997501][T13540] jffs2: notice: (13540) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 647.160507][T13512] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.164087][T13512] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.302653][T12283] Bluetooth: hci4: command tx timeout [ 648.508478][T13512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 648.558594][T13512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 648.583524][T13512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 648.626092][T13512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 648.884272][T13512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.939290][T13512] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.970749][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.977930][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.028977][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.036143][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.101095][T13549] jffs2: notice: (13549) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 649.182249][T13550] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 649.190275][T13550] jffs2: No space for garbage collection. Aborting GC thread [ 649.542654][T13512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.599110][T13512] veth0_vlan: entered promiscuous mode [ 649.616320][T13512] veth1_vlan: entered promiscuous mode [ 649.648953][T13512] veth0_macvtap: entered promiscuous mode [ 649.665627][T13512] veth1_macvtap: entered promiscuous mode [ 649.686137][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.698773][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.709242][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.720061][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.739227][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.750113][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.767774][T13512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.781498][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.799872][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.810077][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.829574][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.840910][T13512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.857818][T13512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.869319][T13512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.894135][T13512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.903464][T13512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.912315][T13512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.927603][T13512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.182097][ T4719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.202604][ T4719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.295958][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.314618][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.382565][T12283] Bluetooth: hci4: command tx timeout [ 650.614893][T13572] FAULT_INJECTION: forcing a failure. [ 650.614893][T13572] name fail_futex, interval 1, probability 0, space 0, times 0 [ 650.647539][T13572] CPU: 0 PID: 13572 Comm: syz.1.2372 Not tainted syzkaller #0 [ 650.655056][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.665129][T13572] Call Trace: [ 650.668420][T13572] [ 650.671374][T13572] dump_stack_lvl+0x18c/0x250 [ 650.676098][T13572] ? show_regs_print_info+0x20/0x20 [ 650.681320][T13572] ? load_image+0x420/0x420 [ 650.685837][T13572] ? ____sys_sendmsg+0x779/0x980 [ 650.690805][T13572] ? __asan_memset+0x22/0x40 [ 650.695424][T13572] ? __sys_sendmsg_sock+0x30/0x30 [ 650.700471][T13572] should_fail_ex+0x394/0x4c0 [ 650.705181][T13572] get_futex_key+0x136/0x1030 [ 650.709912][T13572] ? rcu_is_watching+0x15/0xb0 [ 650.714696][T13572] ? ___sys_sendmsg+0x2b6/0x360 [ 650.719545][T13572] ? kfree+0x31/0x1a0 [ 650.723527][T13572] ? ___sys_sendmsg+0x2b6/0x360 [ 650.728375][T13572] ? futex_setup_timer+0xc0/0xc0 [ 650.733313][T13572] ? __sys_sendmsg+0x2b0/0x2b0 [ 650.738078][T13572] futex_wake+0x127/0x4f0 [ 650.742417][T13572] ? futex_wake_mark+0x150/0x150 [ 650.747363][T13572] do_futex+0x35d/0x3e0 [ 650.751524][T13572] ? __ia32_sys_get_robust_list+0x110/0x110 [ 650.757492][T13572] ? fput+0x154/0x1a0 [ 650.761505][T13572] __se_sys_futex+0x3a9/0x440 [ 650.766188][T13572] ? __x64_sys_futex+0xf0/0xf0 [ 650.770958][T13572] ? __x64_sys_futex+0x21/0xf0 [ 650.775719][T13572] do_syscall_64+0x55/0xb0 [ 650.780136][T13572] ? clear_bhb_loop+0x40/0x90 [ 650.784814][T13572] ? clear_bhb_loop+0x40/0x90 [ 650.789496][T13572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.795391][T13572] RIP: 0033:0x7f58e919e159 [ 650.799799][T13572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.819414][T13572] RSP: 002b:00007f58ea1580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 650.827826][T13572] RAX: ffffffffffffffda RBX: 00007f58e9425fa8 RCX: 00007f58e919e159 [ 650.835789][T13572] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f58e9425fac [ 650.843751][T13572] RBP: 00007f58e9425fa0 R08: 0000000000745a4d R09: 0000000000000000 [ 650.851714][T13572] R10: 00000000000000b4 R11: 0000000000000246 R12: 0000000000000000 [ 650.859683][T13572] R13: 00007f58e9426038 R14: 00007ffc0c550850 R15: 00007ffc0c550938 [ 650.867660][T13572] [ 651.043112][T13575] syzkaller0: entered promiscuous mode [ 651.048640][T13575] syzkaller0: entered allmulticast mode [ 651.693200][T13585] jffs2: notice: (13585) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 651.934719][T13592] ieee802154 phy0 wpan0: encryption failed: -22 [ 652.463509][T12283] Bluetooth: hci4: command tx timeout [ 652.552344][ T1191] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 652.744478][ T1191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.754736][ T1191] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 652.767647][ T1191] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 652.776983][ T1191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.820076][ T1191] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 653.028011][ T1191] usb 2-1: USB disconnect, device number 8 [ 654.552778][T13616] xt_hashlimit: size too large, truncated to 1048576 [ 655.131674][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2394'. [ 655.252442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 655.282433][ T5760] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 656.205643][ T5760] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.241355][ T5760] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 656.259185][ T5760] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 656.268677][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.309419][ T5760] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 656.539465][ T5760] usb 2-1: USB disconnect, device number 9 [ 657.402732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 658.222227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 659.857625][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'. [ 660.138817][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 660.152934][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 660.164003][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 660.272586][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 660.312548][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 660.319900][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.134849][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.470411][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.052095][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.223885][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.390257][ T5782] Bluetooth: hci0: command tx timeout [ 662.767849][T13674] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.145845][ T5774] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 664.202040][T13660] chnl_net:caif_netlink_parms(): no params data found [ 664.334374][ T5774] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.368939][ T5774] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 665.226418][ T5782] Bluetooth: hci0: command tx timeout [ 665.226759][ T5774] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 665.241202][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.257879][ T5774] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 665.537670][ T5774] usb 3-1: USB disconnect, device number 24 [ 665.703299][T13660] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.710529][T13660] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.732648][T13660] bridge_slave_0: entered allmulticast mode [ 665.754028][T13660] bridge_slave_0: entered promiscuous mode [ 665.783305][T13660] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.810735][T13660] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.831067][T13660] bridge_slave_1: entered allmulticast mode [ 665.852506][T13660] bridge_slave_1: entered promiscuous mode [ 666.877342][T13660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.094942][T13660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.522309][ T5782] Bluetooth: hci0: command tx timeout [ 668.455007][T13724] xt_hashlimit: size too large, truncated to 1048576 [ 668.527617][T13660] team0: Port device team_slave_0 added [ 668.543093][T13660] team0: Port device team_slave_1 added [ 669.151890][T13728] overlayfs: failed to clone upperpath [ 669.582446][ T5782] Bluetooth: hci0: command tx timeout [ 669.609636][T13660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.661025][T13660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.799122][T13660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.037051][T13660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.080416][T13660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.199921][T13660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.427364][T13660] hsr_slave_0: entered promiscuous mode [ 670.453864][T13660] hsr_slave_1: entered promiscuous mode [ 670.545311][T13660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.596866][T13660] Cannot create hsr debugfs directory [ 671.342916][ T49] hsr_slave_0: left promiscuous mode [ 671.365324][ T49] hsr_slave_1: left promiscuous mode [ 671.541062][ T49] veth1_macvtap: left promiscuous mode [ 671.557430][ T49] veth0_macvtap: left promiscuous mode [ 671.577950][ T49] veth1_vlan: left promiscuous mode [ 671.602058][ T49] veth0_vlan: left promiscuous mode [ 673.188216][ T49] bond0 (unregistering): Released all slaves [ 673.303078][T13769] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2427'. [ 674.617826][T13797] xt_hashlimit: size too large, truncated to 1048576 [ 678.315018][T13660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 678.334959][T13845] syz.1.2448: attempt to access beyond end of device [ 678.334959][T13845] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 678.365317][T13660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 679.150393][T13660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 679.196633][T13660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 679.308542][ T5811] IPVS: starting estimator thread 0... [ 679.345624][T13853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.402996][T13853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2451'. [ 679.412958][T13858] IPVS: using max 19 ests per chain, 45600 per kthread [ 679.431034][T13853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2451'. [ 679.556758][ T4719] tipc: Subscription rejected, illegal request [ 679.567516][T13660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.848876][T13660] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.001785][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.009014][ T7395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.247014][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.254230][T10940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.852300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 682.436734][T13660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.676591][T13660] veth0_vlan: entered promiscuous mode [ 682.725214][T13660] veth1_vlan: entered promiscuous mode [ 682.732269][ T5812] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 682.817786][T13660] veth0_macvtap: entered promiscuous mode [ 682.849239][T13660] veth1_macvtap: entered promiscuous mode [ 682.909057][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.949868][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.972463][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.992644][ T5812] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.012372][ T5812] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 683.025320][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.042518][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.062242][ T5812] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 683.071301][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.079402][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.114425][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.140988][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.155313][ T5812] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 683.167195][T13660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.233154][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.262889][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.292177][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.317236][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.327202][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.342267][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.352095][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.362772][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.374273][ T5774] usb 2-1: USB disconnect, device number 10 [ 683.377716][T13660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.408506][T13660] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.425525][T13660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.438456][T13660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.458013][T13660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.609441][T10940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.639126][T10940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.707125][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2464'. [ 683.716932][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.734013][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.774601][T13941] FAULT_INJECTION: forcing a failure. [ 685.774601][T13941] name failslab, interval 1, probability 0, space 0, times 0 [ 685.787493][T13941] CPU: 1 PID: 13941 Comm: syz.1.2466 Not tainted syzkaller #0 [ 685.794977][T13941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.805054][T13941] Call Trace: [ 685.808345][T13941] [ 685.811287][T13941] dump_stack_lvl+0x18c/0x250 [ 685.815997][T13941] ? show_regs_print_info+0x20/0x20 [ 685.821224][T13941] ? load_image+0x420/0x420 [ 685.825754][T13941] ? __might_sleep+0xe0/0xe0 [ 685.830374][T13941] ? __lock_acquire+0x7d80/0x7d80 [ 685.835438][T13941] should_fail_ex+0x394/0x4c0 [ 685.840151][T13941] should_failslab+0x9/0x20 [ 685.844680][T13941] slab_pre_alloc_hook+0x59/0x300 [ 685.849734][T13941] ? crypto_create_tfm_node+0x77/0x380 [ 685.855251][T13941] ? crypto_create_tfm_node+0x77/0x380 [ 685.860725][T13941] __kmem_cache_alloc_node+0x53/0x250 [ 685.866123][T13941] ? __lock_acquire+0x7d80/0x7d80 [ 685.871160][T13941] ? crypto_create_tfm_node+0x77/0x380 [ 685.876614][T13941] __kmalloc_node+0xa6/0x240 [ 685.881194][T13941] crypto_create_tfm_node+0x77/0x380 [ 685.886486][T13941] crypto_spawn_tfm2+0x5c/0x90 [ 685.891281][T13941] hmac_init_tfm+0x7e/0x1a0 [ 685.895818][T13941] crypto_shash_init_tfm+0x1be/0x310 [ 685.896168][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.901116][T13941] crypto_create_tfm_node+0x155/0x380 [ 685.908314][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.912723][T13941] ? crypto_alg_mod_lookup+0x1ad/0x570 [ 685.912751][T13941] crypto_alloc_tfm_node+0x17b/0x360 [ 685.912781][T13941] sctp_auth_init_hmacs+0x1c4/0x4a0 [ 685.934967][T13941] sctp_auth_init+0x288/0x460 [ 685.939678][T13941] sctp_setsockopt_auth_supported+0x302/0x530 [ 685.945772][T13941] sctp_setsockopt+0x571/0x11e0 [ 685.950738][T13941] ? sock_common_recvmsg+0x190/0x190 [ 685.956073][T13941] do_sock_setsockopt+0x175/0x1a0 [ 685.961122][T13941] ? __fdget+0x180/0x210 [ 685.965395][T13941] __x64_sys_setsockopt+0x182/0x200 [ 685.970622][T13941] do_syscall_64+0x55/0xb0 [ 685.975069][T13941] ? clear_bhb_loop+0x40/0x90 [ 685.979773][T13941] ? clear_bhb_loop+0x40/0x90 [ 685.984481][T13941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.990396][T13941] RIP: 0033:0x7f58e919e159 [ 685.994830][T13941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.014452][T13941] RSP: 002b:00007f58ea158028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 686.022889][T13941] RAX: ffffffffffffffda RBX: 00007f58e9425fa0 RCX: 00007f58e919e159 [ 686.030881][T13941] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 686.038872][T13941] RBP: 00007f58e923503b R08: 0000000000000008 R09: 0000000000000000 [ 686.046860][T13941] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 686.054850][T13941] R13: 00007f58e9426038 R14: 00007f58e9425fa0 R15: 00007ffc0c550938 [ 686.062854][T13941] [ 687.772848][ T789] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 687.982671][ T5760] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 688.000510][ T789] usb 3-1: Using ep0 maxpacket: 8 [ 688.024418][ T789] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 688.043190][ T789] usb 3-1: config 0 has no interface number 0 [ 688.049329][ T789] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 688.099778][ T789] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 688.120700][ T789] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 688.164649][ T789] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 688.197335][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.212995][ T5760] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.227419][ T5760] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 688.251607][ T789] usb 3-1: config 0 descriptor?? [ 688.274047][ T789] ldusb 3-1:0.55: Interrupt in endpoint not found [ 688.290149][ T5760] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 688.319445][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.354110][ T5760] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 688.518703][ T5760] usb 3-1: USB disconnect, device number 25 [ 688.595772][ T1191] usb 4-1: USB disconnect, device number 29 [ 688.612423][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 693.242842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 695.400464][T14050] jffs2: notice: (14050) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 697.035946][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2488'. [ 697.373651][ T1191] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 697.562255][ T1191] usb 4-1: Using ep0 maxpacket: 8 [ 697.575904][ T1191] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 697.586400][ T1191] usb 4-1: config 0 has no interface number 0 [ 697.600071][ T1191] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 697.612818][ T1191] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 697.623673][ T1191] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 697.644145][ T1191] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 697.669030][ T1191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.700409][ T1191] usb 4-1: config 0 descriptor?? [ 697.729768][ T1191] ldusb 4-1:0.55: Interrupt in endpoint not found [ 699.211820][ T789] usb 4-1: USB disconnect, device number 30 [ 699.254950][T14100] jffs2: notice: (14100) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 699.461009][ T9732] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 699.766419][ T9732] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 699.833529][ T9732] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 699.890587][ T9732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.976703][ T9732] usb 3-1: config 0 has no interface number 0 [ 700.036170][ T9732] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 700.133327][ T9732] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 700.219875][ T9732] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 700.268878][ T9732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.312991][ T9732] usb 3-1: config 0 descriptor?? [ 700.361179][ T9732] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 700.617386][ T9732] usb 3-1: USB disconnect, device number 26 [ 700.621892][ T2960] usb 3-1: Failed to submit usb control message: -71 [ 700.642512][ T2960] usb 3-1: unable to send the bmi data to the device: -71 [ 700.649925][ T2960] usb 3-1: unable to get target info from device [ 700.660698][ T2960] usb 3-1: could not get target info (-71) [ 700.671676][ T2960] usb 3-1: could not probe fw (-71) [ 700.832358][ T1191] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 701.027232][ T1191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.041680][ T1191] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 701.072359][ T1191] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 701.081951][ T1191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.111312][ T1191] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 701.188013][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2506'. [ 701.364705][ T1191] usb 2-1: USB disconnect, device number 11 [ 704.803390][T14150] jffs2: notice: (14150) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 705.831448][T14162] jffs2: notice: (14162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 706.270414][T14164] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 706.341592][T14164] jffs2: No space for garbage collection. Aborting GC thread [ 708.503029][T14176] ip_tables: iptables: counters copy to user failed while replacing table [ 708.992254][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 709.127107][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2518'. [ 709.204907][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.233774][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 709.291461][ T8] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 709.343067][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.380251][ T8] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 710.222565][ T9732] usb 3-1: USB disconnect, device number 27 [ 710.382820][ T5774] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 710.524012][T14200] xt_hashlimit: size too large, truncated to 1048576 [ 710.604003][ T5774] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 710.612646][ T5774] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 710.620827][ T5774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.631288][ T5774] usb 2-1: config 0 has no interface number 0 [ 710.637903][ T5774] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 710.648018][ T5774] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 710.663469][ T5774] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 710.672784][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.684072][ T5774] usb 2-1: config 0 descriptor?? [ 710.707367][ T5774] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 710.919865][ T5774] usb 2-1: USB disconnect, device number 12 [ 710.926092][ T7395] usb 2-1: Failed to submit usb control message: -71 [ 710.938831][ T7395] usb 2-1: unable to send the bmi data to the device: -71 [ 710.951241][ T7395] usb 2-1: unable to get target info from device [ 710.961114][ T7395] usb 2-1: could not get target info (-71) [ 710.967425][ T7395] usb 2-1: could not probe fw (-71) [ 712.377139][T14215] jffs2: notice: (14215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 712.522628][T14218] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 712.532447][T14218] jffs2: No space for garbage collection. Aborting GC thread [ 715.572905][T12283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 715.583967][T12283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 716.270822][T12283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 716.280519][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 716.289261][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 716.297541][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 716.474037][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 716.518347][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 716.544574][ T27] audit: type=1804 audit(1789429611.879:6): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/69/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 716.591932][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 716.619978][ T2960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.623864][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 716.736540][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 716.766530][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 716.800522][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 716.839849][ T2960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.989066][ T2960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.188604][ T2960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.298342][ T5141] udevd[5141]: could not touch /run/udev/queue: No such file or directory [ 717.598599][ T2960] tipc: Left network mode [ 718.010369][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 718.021589][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 718.031948][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 718.054035][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 718.062586][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 718.069859][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 719.549032][T14277] jffs2: notice: (14277) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 719.582315][T14278] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 720.819976][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 720.830242][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 720.841761][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 720.855413][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 720.869765][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 720.879890][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 721.812440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 722.409141][ T2960] hsr_slave_0: left promiscuous mode [ 722.415291][ T2960] hsr_slave_1: left promiscuous mode [ 722.435363][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.472342][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.495900][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.513246][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.542365][ T2960] bridge_slave_1: left allmulticast mode [ 722.548033][ T2960] bridge_slave_1: left promiscuous mode [ 722.562333][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.584565][ T2960] bridge_slave_0: left allmulticast mode [ 722.590224][ T2960] bridge_slave_0: left promiscuous mode [ 722.613442][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.714078][ T2960] veth1_macvtap: left promiscuous mode [ 722.719650][ T2960] veth0_macvtap: left promiscuous mode [ 722.747516][ T2960] veth1_vlan: left promiscuous mode [ 722.762617][ T2960] veth0_vlan: left promiscuous mode [ 723.425809][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 723.438919][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 723.462391][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 723.473091][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 723.480712][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 723.488232][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 724.333022][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 724.398737][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 724.458609][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.522882][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.542484][ T5829] infiniband syz5: ib_query_port failed (-19) [ 725.130121][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.141665][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.154944][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.185629][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.194266][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 725.201564][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.255019][ T2960] bond0 (unregistering): Released all slaves [ 725.967291][ T2960] IPVS: stop unused estimator thread 0... [ 726.727741][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 726.749757][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 726.760351][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 726.780148][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 726.799584][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 726.812661][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 727.007126][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.026047][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.039222][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.060091][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.070526][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 727.079171][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 727.904760][ T2960] IPVS: stopping backup sync thread 9688 ... [ 728.059340][T14348] overlay: Unknown parameter '/' [ 728.833251][ T2960] hsr_slave_0: left promiscuous mode [ 728.914398][ T2960] hsr_slave_1: left promiscuous mode [ 728.998250][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.089423][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.207248][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.298284][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.423109][ T2960] bridge_slave_1: left allmulticast mode [ 729.486845][ T2960] bridge_slave_1: left promiscuous mode [ 729.559221][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.721156][ T2960] bridge_slave_0: left allmulticast mode [ 729.788883][ T2960] bridge_slave_0: left promiscuous mode [ 729.867221][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.358981][ T2960] veth1_macvtap: left promiscuous mode [ 730.432390][ T2960] veth0_macvtap: left promiscuous mode [ 730.508207][ T2960] veth1_vlan: left promiscuous mode [ 730.580854][ T2960] veth0_vlan: left promiscuous mode [ 730.992499][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 731.006703][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 731.015167][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 731.037560][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 731.047886][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 731.049135][T14357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 731.055240][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 731.065138][T14357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 731.077713][T14357] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 731.090795][T14357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 731.098978][T14357] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 731.111770][T14357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 732.201250][ T2960] pim6reg (unregistering): left allmulticast mode [ 732.650791][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 732.671263][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 732.679901][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 732.692648][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 732.700811][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 732.712459][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 733.187857][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 733.293998][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 733.353398][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.441940][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.456004][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 733.465307][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 733.474937][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 733.489834][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 733.495186][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.498325][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 733.511554][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 733.515896][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.530129][T14241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.568728][T14241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.584373][T14241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 733.594268][T14241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.102966][ T2960] bond0 (unregistering): Released all slaves [ 734.447898][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 734.460120][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 734.506687][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 734.522542][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 734.533795][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 734.542515][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 734.979702][ T2960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.137176][ T2960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.242906][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 735.257486][ T2960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.271403][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 735.287024][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 735.299381][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.307107][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 735.315178][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.358109][ T2960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.553688][ T1191] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 736.424777][ T1191] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.445334][ T1191] usb 2-1: config 0 has no interfaces? [ 736.456632][ T1191] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 736.492166][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.500215][ T1191] usb 2-1: Product: syz [ 736.512634][ T1191] usb 2-1: Manufacturer: syz [ 736.517411][ T1191] usb 2-1: SerialNumber: syz [ 736.524561][ T1191] usb 2-1: config 0 descriptor?? [ 736.650846][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 736.662765][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 736.680120][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 736.688096][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 736.700196][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 736.707802][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 736.777460][ T789] usb 2-1: USB disconnect, device number 13 [ 738.375554][T14438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2562'. [ 738.826563][T14448] jffs2: notice: (14448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 739.305587][T14449] jffs2: Checked all inodes but still 0x0 bytes of unchecked space? [ 739.571339][T14449] jffs2: No space for garbage collection. Aborting GC thread [ 739.604740][ T2960] hsr_slave_0: left promiscuous mode [ 739.636942][ T2960] hsr_slave_1: left promiscuous mode [ 739.707870][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.730523][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.758601][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.769972][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.790234][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 739.809854][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 739.821857][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 739.829687][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 739.850586][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.867605][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.875609][T14461] FAULT_INJECTION: forcing a failure. [ 739.875609][T14461] name failslab, interval 1, probability 0, space 0, times 0 [ 739.889320][T14461] CPU: 0 PID: 14461 Comm: syz.1.2564 Not tainted syzkaller #0 [ 739.896806][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.906882][T14461] Call Trace: [ 739.910178][T14461] [ 739.913130][T14461] dump_stack_lvl+0x18c/0x250 [ 739.917847][T14461] ? show_regs_print_info+0x20/0x20 [ 739.923078][T14461] ? load_image+0x420/0x420 [ 739.927602][T14461] ? __might_sleep+0xe0/0xe0 [ 739.932204][T14461] ? __lock_acquire+0x7d80/0x7d80 [ 739.937240][T14461] should_fail_ex+0x394/0x4c0 [ 739.941922][T14461] should_failslab+0x9/0x20 [ 739.946427][T14461] slab_pre_alloc_hook+0x59/0x300 [ 739.951458][T14461] ? memcg_list_lru_alloc+0x335/0xb00 [ 739.956829][T14461] ? memcg_list_lru_alloc+0x335/0xb00 [ 739.962202][T14461] __kmem_cache_alloc_node+0x53/0x250 [ 739.967582][T14461] ? memcg_list_lru_alloc+0x335/0xb00 [ 739.972949][T14461] __kmalloc+0xa7/0x240 [ 739.977111][T14461] memcg_list_lru_alloc+0x335/0xb00 [ 739.982316][T14461] ? memcg_reparent_list_lrus+0x860/0x860 [ 739.988049][T14461] ? get_obj_cgroup_from_current+0xd4/0x280 [ 739.993939][T14461] ? get_obj_cgroup_from_current+0xd4/0x280 [ 739.999832][T14461] slab_pre_alloc_hook+0x2ad/0x300 [ 740.004946][T14461] ? slab_pre_alloc_hook+0xb1/0x300 [ 740.010145][T14461] kmem_cache_alloc_lru+0x4d/0x2b0 [ 740.015256][T14461] ? __d_alloc+0x31/0x710 [ 740.019583][T14461] __d_alloc+0x31/0x710 [ 740.023735][T14461] d_make_root+0x4a/0xe0 [ 740.027973][T14461] proc_fill_super+0x4b8/0x730 [ 740.032771][T14461] ? proc_reconfigure+0x370/0x370 [ 740.037791][T14461] get_tree_nodev+0xb5/0x140 [ 740.042383][T14461] vfs_get_tree+0x8c/0x280 [ 740.046799][T14461] do_new_mount+0x24a/0xa40 [ 740.051304][T14461] __se_sys_mount+0x2e7/0x3d0 [ 740.055981][T14461] ? __x64_sys_mount+0xc0/0xc0 [ 740.060742][T14461] ? lockdep_hardirqs_on+0x98/0x150 [ 740.065999][T14461] ? __x64_sys_mount+0x20/0xc0 [ 740.070760][T14461] do_syscall_64+0x55/0xb0 [ 740.075175][T14461] ? clear_bhb_loop+0x40/0x90 [ 740.079858][T14461] ? clear_bhb_loop+0x40/0x90 [ 740.084536][T14461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.090425][T14461] RIP: 0033:0x7f58e919e159 [ 740.094833][T14461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.114433][T14461] RSP: 002b:00007f58ea158028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 740.122842][T14461] RAX: ffffffffffffffda RBX: 00007f58e9425fa0 RCX: 00007f58e919e159 [ 740.130804][T14461] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000000 [ 740.138766][T14461] RBP: 00007f58e923503b R08: 0000000000000000 R09: 0000000000000000 [ 740.146733][T14461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.154697][T14461] R13: 00007f58e9426038 R14: 00007f58e9425fa0 R15: 00007ffc0c550938 [ 740.162674][T14461] [ 740.223626][ T2960] bridge_slave_1: left allmulticast mode [ 740.244787][ T2960] bridge_slave_1: left promiscuous mode [ 740.250991][T12283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 740.253337][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.264939][T12283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 740.269336][T14461] proc_fill_super: allocate dentry failed [ 740.276051][T12283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 740.289877][T12283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 740.299207][T12283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 740.307173][T12283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 740.378523][ T2960] bridge_slave_0: left allmulticast mode [ 740.405327][ T2960] bridge_slave_0: left promiscuous mode [ 740.411192][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.469381][ T2960] veth1_macvtap: left promiscuous mode [ 740.476346][ T2960] veth0_macvtap: left promiscuous mode [ 740.482000][ T2960] veth1_vlan: left promiscuous mode [ 740.488005][ T2960] veth0_vlan: left promiscuous mode [ 742.172924][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 742.193574][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 742.204974][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 742.217427][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 742.227654][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 742.261126][T14476] NILFS (nullb0): couldn't find nilfs on the device [ 742.535820][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 744.506672][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 744.518901][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 744.519818][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 744.548149][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 744.556440][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 744.566601][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 744.577538][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 744.618540][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 744.713661][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.781706][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.245684][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 745.246993][ T2960] bond0 (unregistering): Released all slaves [ 745.256630][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 745.274655][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 745.288694][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 745.296349][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 745.303718][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 745.756518][T14515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2571'. [ 745.810974][ T2960] IPVS: stop unused estimator thread 0... [ 745.966164][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 745.977522][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 745.988817][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 745.997669][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 746.007281][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 746.014695][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 746.859383][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 746.868779][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 746.878214][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 746.886640][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 746.894383][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 746.902365][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 747.124714][T14528] Bluetooth: MGMT ver 1.22 [ 747.267804][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.274189][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.116827][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.126755][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.137458][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.145875][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.153634][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 748.160978][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 748.528315][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 748.536611][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 748.547032][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 748.555119][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 748.564360][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 748.571726][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 749.729556][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 749.739118][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 749.748023][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 749.757279][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 749.765722][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 749.774121][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 750.154441][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.165019][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.173724][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 750.184533][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 750.192271][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 750.200692][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 750.272552][ T9732] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 751.026674][ T9732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.071222][ T9732] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 751.130441][ T9732] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 751.278243][ T9732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.351075][ T9732] usb 2-1: config 0 descriptor?? [ 751.396467][ T9732] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 751.406238][ T9732] dvb-usb: bulk message failed: -22 (3/0) [ 751.453311][ T9732] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 751.465374][ T9732] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 751.473221][ T9732] usb 2-1: media controller created [ 751.493564][ T9732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.527375][ T9732] dvb-usb: bulk message failed: -22 (6/0) [ 751.535080][ T9732] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 751.549584][ T9732] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 751.584871][T14550] dvb-usb: bulk message failed: -22 (2/0) [ 751.594621][ T9732] dvb-usb: schedule remote query interval to 150 msecs. [ 751.601595][ T9732] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 751.755501][ T9732] dvb-usb: bulk message failed: -22 (1/0) [ 751.758884][ T1191] usb 2-1: USB disconnect, device number 14 [ 751.761581][ T9732] dvb-usb: error while querying for an remote control event. [ 751.841009][ T1191] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 752.026142][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.035880][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.063802][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.083912][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.092080][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 752.112228][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 752.406601][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.418718][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.431506][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.444780][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.452537][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 752.459860][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 752.852515][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.860640][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.871870][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.880772][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.889041][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 752.896959][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 753.258248][T14589] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2579'. [ 754.150749][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.163193][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.174259][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.182163][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.189742][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 754.197521][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 754.544610][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.553632][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.561406][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.570297][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.578593][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 754.586309][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.135663][T14602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2581'. [ 755.440231][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 755.450026][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 755.458455][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 755.468770][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 755.476807][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 755.484469][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.821704][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 755.832362][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 755.840425][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 755.849208][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 755.856880][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 755.865249][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 757.083763][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 757.094943][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 757.103711][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 757.111963][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 757.119739][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 757.128348][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 757.448446][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 757.458858][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 757.466934][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 757.475620][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 757.484233][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 757.491491][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 759.150825][T14241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.162314][T14241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.171375][T14241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.180109][T14241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.188936][T14241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 759.197257][T14241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 759.632598][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.640868][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.649546][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.657497][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.667645][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 759.675119][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 763.032933][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 763.045265][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 763.053787][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 763.064228][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 763.077291][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 763.085658][T14654] netlink: 'syz.3.2589': attribute type 10 has an invalid length. [ 763.094062][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 763.119222][T14654] team0: Port device netdevsim0 added [ 763.286398][T14660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2590'. [ 763.383003][T12283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 763.394365][T12283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 763.402498][T12283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 763.411185][T12283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 763.419159][T12283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 763.422980][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2590'. [ 763.426708][T12283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=0 req=2534 state=3 status=67 (errno 9: Bad file descriptor) [ 764.186879][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.287617][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.374184][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.444400][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.564475][ T42] netdevsim netdevsim120 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.568153][ T42] hsr_slave_0: left promiscuous mode [ 765.574312][ T42] hsr_slave_1: left promiscuous mode [ 765.580066][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.589567][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.597581][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.605196][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.612722][ T42] bridge_slave_1: left allmulticast mode [ 765.618353][ T42] bridge_slave_1: left promiscuous mode [ 765.624118][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.633393][ T42] bridge_slave_0: left allmulticast mode [ 765.639248][ T42] bridge_slave_0: left promiscuous mode [ 765.645272][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.667091][ T42] veth1_macvtap: left promiscuous mode [ 765.672755][ T42] veth0_macvtap: left promiscuous mode [ 765.678300][ T42] veth1_vlan: left promiscuous mode [ 765.684287][ T42] veth0_vlan: left promiscuous mode [ 766.190340][ T42] team0 (unregistering): Port device team_slave_1 removed [ 766.234740][ T42] team0 (unregistering): Port device team_slave_0 removed [ 766.281260][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.321593][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.630277][ T42] bond0 (unregistering): Released all slaves [ 767.078804][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.171055][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.254560][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.331614][ T42] team0: Port device netdevsim0 removed [ 767.338792][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.253519][ T42] hsr_slave_0: left promiscuous mode [ 768.259323][ T42] hsr_slave_1: left promiscuous mode [ 768.265208][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.272671][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.280197][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.287980][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.296316][ T42] bridge_slave_1: left allmulticast mode [ 768.301959][ T42] bridge_slave_1: left promiscuous mode [ 768.307835][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.317280][ T42] bridge_slave_0: left allmulticast mode [ 768.323455][ T42] bridge_slave_0: left promiscuous mode [ 768.329127][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.351076][ T42] veth1_macvtap: left promiscuous mode [ 768.356610][ T42] veth0_macvtap: left promiscuous mode [ 768.362208][ T42] veth1_vlan: left promiscuous mode [ 768.368715][ T42] veth0_vlan: left promiscuous mode [ 768.874189][ T42] team0 (unregistering): Port device team_slave_1 removed [ 768.915929][ T42] team0 (unregistering): Port device team_slave_0 removed [ 768.954400][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.001371][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.287844][ T42] bond0 (unregistering): Released all slaves