last executing test programs: 6.06654148s ago: executing program 2 (id=1019): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) 5.854944447s ago: executing program 0 (id=1021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0xb, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x2, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 5.451793669s ago: executing program 4 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd31, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xfe, 0x0, 0x100}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}]}, 0x38}}, 0x0) 5.184753464s ago: executing program 4 (id=1027): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) sendmsg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 5.026517329s ago: executing program 1 (id=1029): 4.890826727s ago: executing program 0 (id=1030): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r0, &(0x7f00000004c0)=""/175, 0xaf, 0xc0012000, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 4.819805704s ago: executing program 1 (id=1032): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 4.70083765s ago: executing program 1 (id=1033): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e00), 0x0, 0x2401c4c5) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 4.53488921s ago: executing program 1 (id=1036): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)={0xac, r1, 0x201, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x90, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x88, 0x0, "561b71d5925aed25390e61e1c15153c4ab609f15a925da27d3b52b3c4dfbf86f91a6bf13f496e00c957f96ec98ed02c07544457f9eee0062c2430e5e28e375217b483fc0a4f4da84fb0bc6cf95acb14f6d09a45f0df752cc57db615496f5fd8071fdad82ae2c2996aa3e9cb1d4bfb58b2d4cb8e4b0126e2f2f2fe12e0be82c56006c7d71"}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004003}, 0x8004) 4.524497678s ago: executing program 2 (id=1037): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x66, 0x30, 0x31, 0x66, 0x62, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000640)={'fscrypt:', @desc4}, &(0x7f0000000740)={0x0, "d120e097f4d5b2b1a14a86db3b96cf27943196bf60bfb7044b0bdb6f87fc1f64f30282455999ff6ab03bfda317a18146d025828e6bf3ca0215686b9993601865", 0x18}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x33, 0x62, 0x31, 0x39, 0x66, 0x61, 0x63, 0x37, 0x38, 0x62, 0x66, 0x64, 0x34, 0x30, 0x36, 0x39]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x30, 0x30, 0x37, 0x30, 0x63, 0x30, 0x30, 0x39, 0x30, 0x63, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x38, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x62, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 4.507202498s ago: executing program 0 (id=1038): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 4.408111518s ago: executing program 0 (id=1039): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x200004}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 4.340352436s ago: executing program 1 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00050000000000001c0012800e00010069703665727370616e000000680002800400120008000a00", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 4.28718636s ago: executing program 2 (id=1042): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9436}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) sendto$packet(r0, &(0x7f0000000300)="44a33b69ebe6a2bbdf35616f9900", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @random="1e812d0bd55f"}, 0x14) 4.158903203s ago: executing program 4 (id=1043): rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x40895}, 0x200480c0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) 4.008768567s ago: executing program 3 (id=1044): 3.995108523s ago: executing program 1 (id=1045): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x100, 0x4, 0xb47e, 0xb, 0x3, 0x40d, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 3.958519878s ago: executing program 2 (id=1046): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) close(0x4) 3.95492394s ago: executing program 0 (id=1047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd30, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x3}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001d80)="ca", 0x1}], 0x1}, 0x20004014) 3.802904569s ago: executing program 3 (id=1048): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) 3.742647167s ago: executing program 3 (id=1049): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 3.652998053s ago: executing program 3 (id=1050): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.534768088s ago: executing program 3 (id=1051): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)='re', 0x2}], 0x1, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "0100"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) 3.406395662s ago: executing program 4 (id=1052): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x66, 0x30, 0x31, 0x66, 0x62, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000640)={'fscrypt:', @desc4}, &(0x7f0000000740)={0x0, "d120e097f4d5b2b1a14a86db3b96cf27943196bf60bfb7044b0bdb6f87fc1f64f30282455999ff6ab03bfda317a18146d025828e6bf3ca0215686b9993601865", 0x18}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x33, 0x62, 0x31, 0x39, 0x66, 0x61, 0x63, 0x37, 0x38, 0x62, 0x66, 0x64, 0x34, 0x30, 0x36, 0x39]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x30, 0x30, 0x37, 0x30, 0x63, 0x30, 0x30, 0x39, 0x30, 0x63, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x38, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x62, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3.269200074s ago: executing program 4 (id=1053): socket(0x2, 0x80805, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0xad05725454c62502, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00004e3000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 3.164492443s ago: executing program 4 (id=1054): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x11, 0xd, 0x0, 0x2, 0xc3c, 0x5, 0xe9, 0x9}}]}}]}, 0x44}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 3.063596995s ago: executing program 2 (id=1055): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000100feffffff000100006401010000000000000000000000000020010000000000000000000000000001000107164e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x80) 3.025786269s ago: executing program 2 (id=1056): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9436}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) sendto$packet(r0, &(0x7f0000000300)="44a33b69ebe6a2bbdf35616f9900", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @random="1e812d0bd55f"}, 0x14) 2.604330824s ago: executing program 3 (id=1057): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18103, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af0000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) 0s ago: executing program 0 (id=1058): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB='^:N'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0xfffffffffffffda3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xa, 0x7, 0xf7, 0x7, 0x1, 0x3, 0x7, 0x47, 0x14, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 83.403395][ T5598] cgroup: Unknown subsys name 'net' [ 83.508712][ T5598] cgroup: Unknown subsys name 'cpuset' [ 83.518341][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.256663][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.867356][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.894147][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.903735][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.912038][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.921680][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.929898][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.940070][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.948715][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.955754][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.962196][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.967936][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.972251][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.985546][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.992223][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.999953][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.007413][ T4928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.009757][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.027019][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.029383][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.042549][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.051299][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.080623][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.089101][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.097809][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.105645][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.323264][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.331046][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.339875][ T5628] bridge_slave_0: entered allmulticast mode [ 89.350061][ T5628] bridge_slave_0: entered promiscuous mode [ 89.382751][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.390842][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.398717][ T5625] bridge_slave_0: entered allmulticast mode [ 89.406298][ T5625] bridge_slave_0: entered promiscuous mode [ 89.415225][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.422568][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.430374][ T5625] bridge_slave_1: entered allmulticast mode [ 89.438275][ T5625] bridge_slave_1: entered promiscuous mode [ 89.445876][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.453164][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.460912][ T5628] bridge_slave_1: entered allmulticast mode [ 89.469507][ T5628] bridge_slave_1: entered promiscuous mode [ 89.609471][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.621675][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.657854][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.665408][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.672632][ T5630] bridge_slave_0: entered allmulticast mode [ 89.680423][ T5630] bridge_slave_0: entered promiscuous mode [ 89.692115][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.703491][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.713081][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.720310][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.727833][ T5627] bridge_slave_0: entered allmulticast mode [ 89.735825][ T5627] bridge_slave_0: entered promiscuous mode [ 89.743865][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.751731][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.760091][ T5624] bridge_slave_0: entered allmulticast mode [ 89.768295][ T5624] bridge_slave_0: entered promiscuous mode [ 89.777141][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.784449][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.792970][ T5630] bridge_slave_1: entered allmulticast mode [ 89.801982][ T5630] bridge_slave_1: entered promiscuous mode [ 89.833808][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.841223][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.848882][ T5627] bridge_slave_1: entered allmulticast mode [ 89.856159][ T5627] bridge_slave_1: entered promiscuous mode [ 89.863593][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.871100][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.878445][ T5624] bridge_slave_1: entered allmulticast mode [ 89.886017][ T5624] bridge_slave_1: entered promiscuous mode [ 89.974334][ T5625] team0: Port device team_slave_0 added [ 89.982220][ T5628] team0: Port device team_slave_0 added [ 90.001566][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.013979][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.026277][ T5625] team0: Port device team_slave_1 added [ 90.034100][ T5628] team0: Port device team_slave_1 added [ 90.042882][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.054841][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.066699][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.101299][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.137733][ T4928] Bluetooth: hci4: command tx timeout [ 90.138054][ T5610] Bluetooth: hci0: command tx timeout [ 90.144352][ T5616] Bluetooth: hci2: command tx timeout [ 90.149685][ T51] Bluetooth: hci3: command tx timeout [ 90.156140][ T5613] Bluetooth: hci1: command tx timeout [ 90.230355][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.237790][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.263884][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.277334][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.284460][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.311276][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.335455][ T5624] team0: Port device team_slave_0 added [ 90.344021][ T5630] team0: Port device team_slave_0 added [ 90.350927][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.358689][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.385237][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.397444][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.404937][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.431199][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.444742][ T5627] team0: Port device team_slave_0 added [ 90.452523][ T5624] team0: Port device team_slave_1 added [ 90.460846][ T5630] team0: Port device team_slave_1 added [ 90.482864][ T5627] team0: Port device team_slave_1 added [ 90.524019][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.531243][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.557550][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.570317][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.577405][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.603576][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.641107][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.648203][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.675137][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.687954][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.695127][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.721236][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.797322][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.804597][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.830719][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.862024][ T5625] hsr_slave_0: entered promiscuous mode [ 90.869003][ T5625] hsr_slave_1: entered promiscuous mode [ 90.882174][ T5628] hsr_slave_0: entered promiscuous mode [ 90.889459][ T5628] hsr_slave_1: entered promiscuous mode [ 90.896822][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 90.903942][ T5628] Cannot create hsr debugfs directory [ 90.911538][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.919294][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.945892][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.038763][ T5630] hsr_slave_0: entered promiscuous mode [ 91.045666][ T5630] hsr_slave_1: entered promiscuous mode [ 91.052140][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 91.058038][ T5630] Cannot create hsr debugfs directory [ 91.094621][ T5624] hsr_slave_0: entered promiscuous mode [ 91.101311][ T5624] hsr_slave_1: entered promiscuous mode [ 91.108230][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 91.114062][ T5624] Cannot create hsr debugfs directory [ 91.261084][ T5627] hsr_slave_0: entered promiscuous mode [ 91.268245][ T5627] hsr_slave_1: entered promiscuous mode [ 91.275553][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 91.281378][ T5627] Cannot create hsr debugfs directory [ 91.863207][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.878892][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.887185][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.898824][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.909115][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.921588][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.930237][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.943223][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.049879][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.069888][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.091537][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.107335][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.140883][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.151967][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.160478][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.170962][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.214947][ T5616] Bluetooth: hci2: command tx timeout [ 92.220967][ T4928] Bluetooth: hci4: command tx timeout [ 92.221057][ T5610] Bluetooth: hci0: command tx timeout [ 92.234179][ T51] Bluetooth: hci3: command tx timeout [ 92.240435][ T5613] Bluetooth: hci1: command tx timeout [ 92.300975][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.308534][ T985] cfg80211: failed to load regulatory.db [ 92.329391][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.337896][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.348545][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.365521][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.379951][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.399567][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.412345][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.530686][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.562698][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.576987][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.595221][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.608763][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.627893][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.638891][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.648853][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.661371][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.681216][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.761629][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.769530][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.812097][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.822820][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.839133][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.849311][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.864180][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.871966][ T3308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.892566][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.908380][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.931193][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.944392][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.009510][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.085631][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.140899][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.148315][ T3308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.185795][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.213742][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.221331][ T3308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.262129][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.292285][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.302803][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.310215][ T3308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.382251][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.389478][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.405788][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.470708][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.499457][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.506753][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.568769][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.585917][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.593139][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.639141][ T5625] veth0_vlan: entered promiscuous mode [ 93.652670][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.682756][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.703541][ T5625] veth1_vlan: entered promiscuous mode [ 93.728754][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.735994][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.767688][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.775123][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.866474][ T5625] veth0_macvtap: entered promiscuous mode [ 93.882099][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.907878][ T5625] veth1_macvtap: entered promiscuous mode [ 93.957092][ T5630] veth0_vlan: entered promiscuous mode [ 93.992580][ T5630] veth1_vlan: entered promiscuous mode [ 94.003756][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.017199][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.044933][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.096798][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.107580][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.156291][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.171092][ T5628] veth0_vlan: entered promiscuous mode [ 94.189265][ T117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.204311][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.227352][ T5630] veth0_macvtap: entered promiscuous mode [ 94.249048][ T5628] veth1_vlan: entered promiscuous mode [ 94.286087][ T5630] veth1_macvtap: entered promiscuous mode [ 94.297122][ T5613] Bluetooth: hci1: command tx timeout [ 94.303362][ T5610] Bluetooth: hci0: command tx timeout [ 94.308987][ T5613] Bluetooth: hci3: command tx timeout [ 94.315673][ T51] Bluetooth: hci2: command tx timeout [ 94.317158][ T5616] Bluetooth: hci4: command tx timeout [ 94.361584][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.386791][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.474205][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.506387][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.509365][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.527013][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.538009][ T5627] veth0_vlan: entered promiscuous mode [ 94.582373][ T5627] veth1_vlan: entered promiscuous mode [ 94.605029][ T1160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.630267][ T5628] veth0_macvtap: entered promiscuous mode [ 94.670708][ T5624] veth0_vlan: entered promiscuous mode [ 94.680460][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.722421][ T5628] veth1_macvtap: entered promiscuous mode [ 94.762810][ T5624] veth1_vlan: entered promiscuous mode [ 94.878547][ T5627] veth0_macvtap: entered promiscuous mode [ 94.921006][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.930627][ T5627] veth1_macvtap: entered promiscuous mode [ 94.939647][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.947519][ T117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.947860][ T117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.962244][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.019284][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.035016][ T1160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.093649][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.101973][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.113647][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.181563][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.204067][ T5624] veth0_macvtap: entered promiscuous mode [ 95.261879][ T5624] veth1_macvtap: entered promiscuous mode [ 95.298530][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.457256][ T117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.477264][ T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.487347][ T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.512234][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.637251][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.648915][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.660179][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.884782][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.051179][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.088961][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.280273][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.300825][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.316561][ T5700] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 96.374270][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.382744][ T5616] Bluetooth: hci2: command tx timeout [ 96.382787][ T5616] Bluetooth: hci3: command tx timeout [ 96.382814][ T5616] Bluetooth: hci0: command tx timeout [ 96.385631][ T5616] Bluetooth: hci4: command tx timeout [ 96.385674][ T5616] Bluetooth: hci1: command tx timeout [ 96.421414][ T117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.443542][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.547322][ T117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.600579][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.634885][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.650307][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.686363][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.726648][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.772940][ T5734] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 4, id = 0 [ 96.803721][ T117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.859596][ T5732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.900569][ T170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.909684][ T5732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.943489][ T170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.124599][ T5747] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.241963][ T5753] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.887287][ T5761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11'. [ 97.938132][ T5761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11'. [ 98.833538][ T5700] usb 1-1: unable to get BOS descriptor or descriptor too short [ 98.859268][ T5700] usb 1-1: New USB device found, idVendor=16d5, idProduct=000a, bcdDevice= 0.00 [ 98.889558][ T5668] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.914697][ T5700] usb 1-1: no configurations [ 98.928494][ T5700] usb 1-1: can't read configurations, error -22 [ 99.097440][ T5668] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.119147][ T5668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.128557][ T5668] usb 2-1: Product: syz [ 99.133096][ T5668] usb 2-1: Manufacturer: syz [ 99.144834][ T5668] usb 2-1: SerialNumber: syz [ 99.166459][ T5668] usb 2-1: config 0 descriptor?? [ 99.294850][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 99.398323][ T5668] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 99.474026][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 99.559221][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.608710][ T5668] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 99.618561][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 99.663442][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 99.698117][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 99.750874][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 99.774588][ T9] usb 5-1: Manufacturer: syz [ 99.807563][ T5781] Zero length message leads to an empty skb [ 99.834329][ T9] usb 5-1: config 0 descriptor?? [ 99.982408][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.185139][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 100.231552][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.254569][ T43] usb 3-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 100.322184][ T43] usb 3-1: config 1 has an invalid interface number: 242 but max is 2 [ 100.339109][ T9] rc_core: IR keymap rc-hauppauge not found [ 100.354142][ T43] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 100.380659][ T9] Registered IR keymap rc-empty [ 100.426101][ T5786] misc userio: Invalid payload size [ 100.435764][ T43] usb 3-1: config 1 has no interface number 3 [ 100.441196][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.488491][ T43] usb 3-1: config 1 interface 1 has no altsetting 0 [ 100.497499][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.523869][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.550215][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 100.584106][ T43] usb 3-1: Product: syz [ 100.618323][ T43] usb 3-1: Manufacturer: syz [ 100.630380][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 100.639454][ T43] usb 3-1: SerialNumber: syz [ 100.755130][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.804952][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.835201][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.856261][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.875198][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.895565][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.926497][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 100.966274][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 101.007276][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 101.056007][ T9] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 101.099919][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 101.122997][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 101.179574][ T9] usb 5-1: USB disconnect, device number 2 [ 101.280828][ T43] usb 3-1: 1:1 : unsupported format bits 0x2004 [ 101.311666][ T43] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 101.377590][ T43] usb 3-1: selecting invalid altsetting 0 [ 101.398216][ T43] usb 3-1: selecting invalid altsetting 0 [ 101.426457][ T43] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 101.576276][ T5701] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.652303][ T985] usb 2-1: USB disconnect, device number 2 [ 101.693428][ T43] usb 3-1: USB disconnect, device number 2 [ 101.747848][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 101.763161][ T5701] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 101.776952][ T5812] netlink: 'syz.4.22': attribute type 1 has an invalid length. [ 101.802848][ T5701] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 101.845307][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.873519][ T5701] usb 4-1: Product: syz [ 101.902686][ T5701] usb 4-1: Manufacturer: syz [ 101.917397][ T5701] usb 4-1: SerialNumber: syz [ 101.960186][ T5701] r8152-cfgselector 4-1: Unknown version 0x0000 [ 101.983313][ T5701] r8152-cfgselector 4-1: config 0 descriptor?? [ 102.062323][ T985] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.171636][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.235972][ T985] usb 2-1: Using ep0 maxpacket: 32 [ 102.366288][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.496351][ T29] audit: type=1326 audit(1787583797.247:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169979e0d9 code=0x7ffc0000 [ 102.523941][ T29] audit: type=1326 audit(1787583797.247:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f169979dd6b code=0x7ffc0000 [ 102.547469][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 102.571902][ T43] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 102.607958][ T5827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.618778][ T29] audit: type=1326 audit(1787583797.247:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f169979dd6b code=0x7ffc0000 [ 102.650837][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.661187][ T29] audit: type=1326 audit(1787583797.267:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169979e0d9 code=0x7ffc0000 [ 102.689118][ T5827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.701652][ T5686] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 102.744008][ T29] audit: type=1326 audit(1787583797.267:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169979e0d9 code=0x7ffc0000 [ 102.759557][ T43] usb 3-1: config 0 descriptor?? [ 102.832475][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 102.874544][ T29] audit: type=1326 audit(1787583797.267:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169979e0d9 code=0x7ffc0000 [ 102.953277][ T5809] loop6: detected capacity change from 0 to 2640 [ 102.981062][ T29] audit: type=1326 audit(1787583797.267:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f169979e0d9 code=0x7ffc0000 [ 103.028242][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.052316][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.057176][ T29] audit: type=1326 audit(1787583797.307:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f169979dd6b code=0x7ffc0000 [ 103.100355][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.102128][ T29] audit: type=1326 audit(1787583797.327:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f169979dd6b code=0x7ffc0000 [ 103.127198][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.156641][ T5817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.167616][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.188486][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.194031][ T29] audit: type=1326 audit(1787583797.337:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5808 comm="syz.1.21" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f169979dd6b code=0x7ffc0000 [ 103.203986][ T5817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.246011][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.257400][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.289519][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.297969][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.307097][ T5809] ldm_validate_partition_table(): Disk read failed. [ 103.314296][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.323287][ T5809] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.331973][ T5809] Dev loop6: unable to read RDB block 0 [ 103.342551][ T5809] loop6: unable to read partition table [ 103.355712][ T43] gspca_vc032x: reg_r err -110 [ 103.370775][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.383274][ T5809] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 103.393994][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.416106][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.439233][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.470131][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.490370][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.506711][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.520268][ T4978] ldm_validate_partition_table(): Disk read failed. [ 103.526050][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.536668][ T4978] Dev loop6: unable to read RDB block 0 [ 103.543077][ T4978] loop6: unable to read partition table [ 103.548995][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549035][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549049][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549060][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549070][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549079][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549090][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549101][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549113][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549125][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 103.549135][ T43] gspca_vc032x: Unknown sensor... [ 103.549265][ T43] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 103.629011][ T5668] usb 3-1: USB disconnect, device number 3 [ 103.802583][ T985] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.822875][ T985] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 103.854951][ T985] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 103.884105][ T985] usb 2-1: can't read configurations, error -71 [ 104.231521][ T5856] netlink: 72 bytes leftover after parsing attributes in process `syz.3.33'. [ 104.247015][ T5686] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 104.405022][ T5858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.34'. [ 104.423162][ T5686] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.472140][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.511421][ T5686] usb 1-1: Product: syz [ 104.547186][ T5686] usb 1-1: Manufacturer: syz [ 104.626033][ T5686] usb 1-1: SerialNumber: syz [ 104.654777][ T5686] usb 1-1: config 0 descriptor?? [ 104.916002][ T5686] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.012153][ T5624] cgroup: fork rejected by pids controller in /syz1 [ 105.134398][ T5686] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 105.745951][ T5747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.945524][ T5747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.124398][ T5747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.320646][ T5747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.637193][ T5747] bridge_slave_1: left allmulticast mode [ 106.671740][ T5747] bridge_slave_1: left promiscuous mode [ 106.690366][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.709893][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.724913][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.743688][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.753843][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.775016][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.874319][ T5747] bridge_slave_0: left allmulticast mode [ 106.881574][ T5747] bridge_slave_0: left promiscuous mode [ 106.893553][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.187681][ T5668] usb 1-1: USB disconnect, device number 4 [ 107.839910][ T5747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.867198][ T5747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.908066][ T5747] bond0 (unregistering): Released all slaves [ 107.968427][ T5887] netlink: 52 bytes leftover after parsing attributes in process `syz.4.42'. [ 108.159835][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.46'. [ 108.297279][ T5913] loop8: detected capacity change from 0 to 7 [ 108.410826][ T5913] Dev loop8: unable to read RDB block 7 [ 108.419588][ T5913] loop8: unable to read partition table [ 108.435723][ T5913] loop8: partition table beyond EOD, truncated [ 108.450054][ T5913] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 108.555014][ T5686] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 108.676026][ T5926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 108.741432][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 108.757274][ T5686] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.793287][ T5701] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.802392][ T5686] usb 1-1: not running at top speed; connect to a high speed hub [ 108.842268][ T5686] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.44 [ 108.858144][ T5616] Bluetooth: hci3: command tx timeout [ 108.929116][ T5686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.955780][ T5701] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.983492][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.016650][ T5686] usb 1-1: Product: syz [ 109.028610][ T5686] usb 1-1: Manufacturer: syz [ 109.041610][ T5686] usb 1-1: SerialNumber: syz [ 109.525425][ T5747] hsr_slave_0: left promiscuous mode [ 109.547932][ T5747] hsr_slave_1: left promiscuous mode [ 109.567074][ T5747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.619392][ T5747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.661140][ T5747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.689879][ T5747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.748378][ T5747] veth1_macvtap: left promiscuous mode [ 109.765251][ T5747] veth0_macvtap: left promiscuous mode [ 109.774639][ T5747] veth1_vlan: left promiscuous mode [ 109.791025][ T5747] veth0_vlan: left promiscuous mode [ 110.085195][ T5669] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.267454][ T5669] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.283146][ T5931] fuse: Unknown parameter 'eroup_id' [ 110.290032][ T5669] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 110.334970][ T5669] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.361634][ T5669] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.399831][ T5669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.426598][ T5669] usb 4-1: Product: syz [ 110.435716][ T5669] usb 4-1: Manufacturer: syz [ 110.450454][ T5669] usb 4-1: SerialNumber: syz [ 110.529079][ T5669] usb 4-1: selecting invalid altsetting 1 [ 110.557986][ T5669] usb 4-1: unit 6 not found! [ 110.712488][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.743970][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.777508][ T5747] team0 (unregistering): Port device team_slave_1 removed [ 110.848144][ T5747] team0 (unregistering): Port device team_slave_0 removed [ 110.936304][ T5616] Bluetooth: hci3: command tx timeout [ 110.990648][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.081464][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.113668][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.143673][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.324193][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 111.324212][ T29] audit: type=1326 audit(1787583806.067:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37e19e0d9 code=0x7ffc0000 [ 111.376417][ T29] audit: type=1326 audit(1787583806.107:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37e19e0d9 code=0x7ffc0000 [ 111.432882][ T29] audit: type=1326 audit(1787583806.107:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37e19e0d9 code=0x7ffc0000 [ 111.506382][ T29] audit: type=1326 audit(1787583806.107:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37e19e0d9 code=0x7ffc0000 [ 111.561662][ T29] audit: type=1326 audit(1787583806.107:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc37e19e0d9 code=0x7ffc0000 [ 111.625799][ T29] audit: type=1326 audit(1787583806.107:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc37e197e57 code=0x7ffc0000 [ 111.682477][ T5957] netlink: 72 bytes leftover after parsing attributes in process `syz.4.54'. [ 111.696028][ T29] audit: type=1326 audit(1787583806.107:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc37e13f459 code=0x7ffc0000 [ 111.820882][ T29] audit: type=1326 audit(1787583806.107:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc37e197e57 code=0x7ffc0000 [ 111.871120][ T5918] syzkaller0: entered promiscuous mode [ 111.873979][ T29] audit: type=1326 audit(1787583806.107:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc37e13f459 code=0x7ffc0000 [ 111.901424][ T5918] syzkaller0: entered allmulticast mode [ 111.907971][ T29] audit: type=1326 audit(1787583806.107:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5952 comm="syz.2.53" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc37e197e57 code=0x7ffc0000 [ 111.970274][ T5669] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 112.037619][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 112.240977][ T5686] usb 1-1: USB disconnect, device number 5 [ 112.990678][ T5669] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 113.025698][ T5616] Bluetooth: hci3: command tx timeout [ 113.058262][ T5669] usb 4-1: USB disconnect, device number 3 [ 113.162023][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.218396][ T5970] @0: renamed from dummy0 (while UP) [ 113.433103][ T5970] netlink: 64 bytes leftover after parsing attributes in process `syz.2.56'. [ 113.581259][ T5978] netlink: 52 bytes leftover after parsing attributes in process `syz.3.58'. [ 113.939602][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.953761][ T5988] fuse: Unknown parameter 'grou00000000000000000000' [ 113.969962][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.978332][ T5880] bridge_slave_0: entered allmulticast mode [ 113.987140][ T5880] bridge_slave_0: entered promiscuous mode [ 114.024825][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.046091][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.072589][ T5880] bridge_slave_1: entered allmulticast mode [ 114.103400][ T5880] bridge_slave_1: entered promiscuous mode [ 114.271363][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.312598][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.600388][ T5880] team0: Port device team_slave_0 added [ 114.626224][ T5880] team0: Port device team_slave_1 added [ 114.696472][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 114.838153][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.871813][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.932698][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.092805][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.100154][ T5616] Bluetooth: hci3: command tx timeout [ 115.127159][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.153921][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.168013][ T5970] syzkaller1: entered promiscuous mode [ 115.173886][ T5970] syzkaller1: entered allmulticast mode [ 115.353916][ T6000] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 115.690095][ T5880] hsr_slave_0: entered promiscuous mode [ 115.713905][ T5880] hsr_slave_1: entered promiscuous mode [ 115.735301][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 115.765117][ T5880] Cannot create hsr debugfs directory [ 115.798284][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 115.985565][ T5669] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 116.227862][ T5669] usb 5-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 116.284940][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.310373][ T5669] usb 5-1: Product: syz [ 116.336312][ T5669] usb 5-1: Manufacturer: syz [ 116.346783][ T5669] usb 5-1: SerialNumber: syz [ 116.733563][ T6035] netlink: 'syz.3.69': attribute type 6 has an invalid length. [ 118.343921][ T6077] loop4: detected capacity change from 0 to 7 [ 118.371190][ T6077] Dev loop4: unable to read RDB block 7 [ 118.411718][ T6077] loop4: unable to read partition table [ 118.445448][ T6077] loop4: partition table beyond EOD, truncated [ 118.469287][ T5880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.481978][ T6077] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 118.525544][ T5880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.587757][ T5880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.642904][ T5669] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 118.686377][ T5880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.718690][ T5880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.784310][ T5880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.821094][ T5880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.912884][ T5880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.013293][ T5669] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 119.100106][ T5669] usb 5-1: USB disconnect, device number 3 [ 119.349082][ T6096] netlink: 52 bytes leftover after parsing attributes in process `syz.0.81'. [ 119.382719][ T6099] mmap: syz.3.83 (6099) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.396968][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.495213][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.588055][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.649529][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.656851][ T5767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.759233][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.766528][ T5767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.175417][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.544247][ T5880] veth0_vlan: entered promiscuous mode [ 120.615795][ T5880] veth1_vlan: entered promiscuous mode [ 120.696480][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 120.711381][ T6133] unsupported nla_type 15750 [ 120.969472][ T5880] veth0_macvtap: entered promiscuous mode [ 121.004937][ T5880] veth1_macvtap: entered promiscuous mode [ 121.088907][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.226928][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.400241][ T5744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.455378][ T5744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.495177][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.580682][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.801699][ T5744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.824335][ T5744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.890486][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.930881][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.599851][ T6215] syz.2.115 uses obsolete (PF_INET,SOCK_PACKET) [ 125.708768][ T6289] capability: warning: `syz.3.130' uses 32-bit capabilities (legacy support in use) [ 127.053681][ T6326] program syz.3.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.560170][ T6407] sctp: [Deprecated]: syz.2.175 (pid 6407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.560170][ T6407] Use struct sctp_sack_info instead [ 131.916845][ T6489] batman_adv: batadv0: Adding interface: dummy0 [ 131.923567][ T6489] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.959629][ T6489] batman_adv: batadv0: Interface activated: dummy0 [ 132.071977][ T6490] batadv0: mtu less than device minimum [ 132.096676][ T6490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.111440][ T6490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.123616][ T6490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.136945][ T6490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.148794][ T6490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.160675][ T6490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.172616][ T6490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.184508][ T6490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.196441][ T6490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.817797][ T6523] netlink: 27 bytes leftover after parsing attributes in process `syz.4.227'. [ 133.270751][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.281431][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.961176][ T43] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0002/input/input6 [ 135.124282][ T43] hid-generic 0005:0009:0040.0002: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 135.264653][ T5701] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.404636][ T5701] usb 3-1: device descriptor read/64, error -71 [ 135.655005][ T5701] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.816588][ T5701] usb 3-1: device descriptor read/64, error -71 [ 135.955402][ T5701] usb usb3-port1: attempt power cycle [ 136.155440][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 136.315037][ T5701] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.355503][ T5701] usb 3-1: device descriptor read/8, error -71 [ 136.634701][ T5701] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.677093][ T5701] usb 3-1: device descriptor read/8, error -71 [ 136.784045][ T6669] netlink: 64 bytes leftover after parsing attributes in process `syz.0.291'. [ 136.795113][ T5701] usb usb3-port1: unable to enumerate USB device [ 136.815492][ T6669] syzkaller1: entered promiscuous mode [ 136.826041][ T6669] syzkaller1: entered allmulticast mode [ 137.207495][ T6683] syz.0.298 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.558852][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 140.395130][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.333'. [ 140.416451][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 142.923533][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 143.022770][ T6850] 8021q: adding VLAN 0 to HW filter on device team1 [ 144.222216][ T6885] netlink: 'syz.0.375': attribute type 4 has an invalid length. [ 145.420511][ T6926] program syz.2.395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.337270][ T6967] netlink: 91 bytes leftover after parsing attributes in process `syz.0.413'. [ 146.460375][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 146.460394][ T29] audit: type=1804 audit(1787583841.207:759): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.412" name="bus" dev="ramfs" ino=14360 res=1 errno=0 [ 147.409121][ T6995] netlink: 91 bytes leftover after parsing attributes in process `syz.2.425'. [ 148.238678][ T7024] netlink: 91 bytes leftover after parsing attributes in process `syz.4.439'. [ 148.464117][ T7035] dummy0: entered allmulticast mode [ 148.511619][ T7035] dummy0: left allmulticast mode [ 148.754208][ T7045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 148.787074][ T7045] gre0: entered allmulticast mode [ 149.018198][ T7053] netlink: 27 bytes leftover after parsing attributes in process `syz.0.453'. [ 149.706273][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.463'. [ 149.762239][ T7075] gre0: entered allmulticast mode [ 150.356232][ T7088] xt_hashlimit: size too large, truncated to 1048576 [ 150.983227][ T7103] netlink: 'syz.2.475': attribute type 4 has an invalid length. [ 151.304712][ T7111] capability: warning: `syz.4.481' uses deprecated v2 capabilities in a way that may be insecure [ 151.763628][ T7134] netlink: 'syz.0.488': attribute type 4 has an invalid length. [ 151.822016][ T7137] netlink: 48 bytes leftover after parsing attributes in process `syz.3.491'. [ 151.884331][ T7138] xt_hashlimit: size too large, truncated to 1048576 [ 152.310957][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 152.342301][ T7157] gre0: entered allmulticast mode [ 152.873400][ T7175] syzkaller0: entered promiscuous mode [ 152.909830][ T7175] syzkaller0: entered allmulticast mode [ 152.964927][ T7181] tipc: Started in network mode [ 153.001164][ T7181] tipc: Node identity ae2157829bf6, cluster identity 4711 [ 153.034016][ T7181] tipc: Enabled bearer , priority 0 [ 153.106646][ T7172] tipc: Resetting bearer [ 153.229398][ T7172] tipc: Disabling bearer [ 153.292245][ T7195] netlink: 'syz.2.517': attribute type 6 has an invalid length. [ 153.542505][ T5766] IPVS: starting estimator thread 0... [ 153.550046][ T7201] net_ratelimit: 10 callbacks suppressed [ 153.550068][ T7201] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 153.650644][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 153.664812][ T7204] IPVS: using max 33 ests per chain, 79200 per kthread [ 155.777606][ T7265] netlink: 52 bytes leftover after parsing attributes in process `syz.1.547'. [ 156.096002][ T7278] syzkaller0: entered promiscuous mode [ 156.105347][ T7278] syzkaller0: entered allmulticast mode [ 156.282127][ T7284] veth0: entered promiscuous mode [ 156.305139][ T7283] veth0: left promiscuous mode [ 156.838524][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 158.358727][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 158.457862][ T7348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 159.024378][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.591'. [ 159.246660][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'. [ 159.828947][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 160.520504][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.620'. [ 162.812836][ T7508] syzkaller0: entered promiscuous mode [ 162.820057][ T7508] syzkaller0: entered allmulticast mode [ 167.845815][ T7611] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.855622][ T7611] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.211235][ T7611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.233029][ T7611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.499326][ T7636] xt_TCPMSS: Only works on TCP SYN packets [ 168.604819][ T58] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.636598][ T58] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.646716][ T58] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.667345][ T58] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.702879][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 170.184811][ T985] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.251010][ T29] audit: type=1326 audit(1787583864.997:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c379e0d9 code=0x7ffc0000 [ 170.306272][ T29] audit: type=1326 audit(1787583864.997:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c379e0d9 code=0x7ffc0000 [ 170.375116][ T29] audit: type=1326 audit(1787583865.027:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c379e0d9 code=0x7ffc0000 [ 170.406543][ T985] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 170.434968][ T29] audit: type=1326 audit(1787583865.027:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f35c379e0d9 code=0x7ffc0000 [ 170.436960][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.491140][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.523819][ T985] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.531139][ T29] audit: type=1326 audit(1787583865.027:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c379e0d9 code=0x7ffc0000 [ 170.570027][ T985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.625721][ T985] usb 4-1: config 0 descriptor?? [ 170.638675][ T29] audit: type=1326 audit(1787583865.027:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c379e0d9 code=0x7ffc0000 [ 170.691304][ T29] audit: type=1326 audit(1787583865.027:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c379e0d9 code=0x7ffc0000 [ 170.738553][ T29] audit: type=1326 audit(1787583865.027:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f35c379e0d9 code=0x7ffc0000 [ 170.803112][ T29] audit: type=1326 audit(1787583865.027:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.4.727" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f35c379e0d9 code=0x7ffc0000 [ 170.904672][ T5686] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 171.053301][ T7708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.058211][ T5686] usb 1-1: Using ep0 maxpacket: 32 [ 171.118974][ T7696] loop2: detected capacity change from 0 to 7 [ 171.145064][ T7696] Dev loop2: unable to read RDB block 7 [ 171.164201][ T985] thrustmaster 0003:044F:B324.0003: unbalanced collection at end of report description [ 171.188787][ T7696] loop2: unable to read partition table [ 171.200072][ T985] thrustmaster 0003:044F:B324.0003: probe with driver thrustmaster failed with error -22 [ 171.239785][ T7696] loop2: partition table beyond EOD, truncated [ 171.258256][ T7696] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 171.287899][ T5686] usb 1-1: unable to get BOS descriptor or descriptor too short [ 171.314292][ T5686] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 171.347730][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 171.357253][ T5701] usb 4-1: USB disconnect, device number 4 [ 171.383570][ T5686] usb 1-1: can't read configurations, error -71 [ 171.747797][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.755645][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.850636][ T7723] batman_adv: batadv0: Interface deactivated: dummy0 [ 172.222207][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.283481][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.825792][ T5766] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.839723][ T5766] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.857917][ T5766] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.875960][ T5766] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.470814][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 173.966748][ T5686] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.077510][ T7793] hub 8-0:1.0: USB hub found [ 174.104822][ T7793] hub 8-0:1.0: 1 port detected [ 174.187136][ T5686] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 174.252506][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.273589][ T5686] usb 3-1: Product: syz [ 174.280047][ T5686] usb 3-1: Manufacturer: syz [ 174.287558][ T5686] usb 3-1: SerialNumber: syz [ 174.522657][ T5686] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 174.543795][ T5686] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 174.556510][ T5686] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 174.572489][ T5686] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 174.623748][ T5686] usb 3-1: USB disconnect, device number 8 [ 174.651293][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 177.935964][ T7931] netlink: 'syz.2.832': attribute type 4 has an invalid length. [ 178.255947][ T7942] netlink: 96 bytes leftover after parsing attributes in process `syz.1.837'. [ 178.661648][ T13] IPVS: starting estimator thread 0... [ 178.666492][ T7958] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 178.784545][ T7959] IPVS: using max 28 ests per chain, 67200 per kthread [ 179.045822][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.853'. [ 179.167070][ T5711] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 179.346164][ T5711] usb 2-1: not running at top speed; connect to a high speed hub [ 179.355326][ T5711] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 179.367945][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.380265][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.431871][ T5711] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 179.742769][ T7991] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 179.749703][ T7991] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.803022][ T5616] Bluetooth: hci1: unexpected subevent 0x10 length: 30 > 2 [ 179.830479][ T5711] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 179.841707][ T7991] vhci_hcd vhci_hcd.0: Device attached [ 179.848683][ T5711] uvcvideo 2-1:1.1: No frame descriptor found for the default format. [ 179.862264][ T7995] vhci_hcd: connection closed [ 179.866947][ T5711] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 179.892259][ T13] vhci_hcd vhci_hcd.4: stop threads [ 179.894259][ T5711] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -22 [ 179.923304][ T13] vhci_hcd vhci_hcd.4: release socket [ 179.945037][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 180.070806][ T5701] usb 2-1: USB disconnect, device number 5 [ 180.177832][ T8009] netlink: 56 bytes leftover after parsing attributes in process `syz.0.866'. [ 180.350154][ T8016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.869'. [ 180.933174][ T8042] process 'syz.2.880' launched './file1' with NULL argv: empty string added [ 181.126805][ T8047] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 181.231822][ T8055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'. [ 181.346023][ T5686] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 181.505688][ T5686] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 181.528839][ T5686] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.541501][ T5686] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.552491][ T29] audit: type=1326 audit(1787583876.287:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8060 comm="syz.3.890" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f666139e0d9 code=0x0 [ 181.584700][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.177068][ T5686] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 182.201065][ T5686] input input9: Absolute device without dev->absinfo, refusing to register [ 182.277407][ T5686] wacom 0003:056A:033B.0004: probe with driver wacom failed with error -22 [ 182.343674][ T5686] usb 1-1: USB disconnect, device number 8 [ 182.715274][ T8085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.899'. [ 182.794637][ T985] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.960749][ T8087] input: syz0 as /devices/virtual/input/input11 [ 182.978882][ T985] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 183.013124][ T985] usb 2-1: config index 0 descriptor too short (expected 86, got 68) [ 183.034187][ T985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.068370][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.088761][ T985] usb 2-1: Product: syz [ 183.098190][ T985] usb 2-1: Manufacturer: syz [ 183.115173][ T985] usb 2-1: SerialNumber: syz [ 183.189850][ T985] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 183.301107][ T8100] syz_tun: entered allmulticast mode [ 183.385721][ T5711] usb 2-1: USB disconnect, device number 6 [ 184.395097][ T5677] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 184.445068][ T5711] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.575215][ T5677] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 184.603873][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.616261][ T5711] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 184.630332][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.653239][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 184.655952][ T8142] xt_hashlimit: size too large, truncated to 1048576 [ 184.670249][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.684737][ T5711] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 184.716864][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 184.728224][ T5677] usb 3-1: config 0 descriptor?? [ 184.756060][ T5711] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 184.796482][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.832041][ T5711] usb 4-1: config 0 descriptor?? [ 185.055957][ T5711] hdpvr 4-1:0.0: firmware version 0x1e dated q|RC@22[7BD^jvi0 [ 185.055957][ T5711] pY [ 185.231481][ T5677] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 185.255897][ T5711] hdpvr 4-1:0.0: device init failed [ 185.273966][ T5711] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 185.320020][ T5677] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input12 [ 185.333844][ T5711] usb 4-1: USB disconnect, device number 5 [ 185.445715][ T5686] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 185.537609][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.925'. [ 185.625823][ T5686] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82 [ 185.654682][ T5686] usb 5-1: config 43 interface 0 has no altsetting 0 [ 185.670140][ T5677] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 185.688930][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.723491][ T5686] usb 5-1: Product: syz [ 185.728485][ T5677] usb 3-1: USB disconnect, device number 9 [ 185.744585][ T5686] usb 5-1: Manufacturer: syz [ 185.768453][ T5686] usb 5-1: SerialNumber: syz [ 185.905776][ T8154] fido_id[8154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 186.112412][ T5686] usb 5-1: dvb_usb_v2: found a 'Anysee' in warm state [ 186.142507][ T5686] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 186.176216][ T5686] dvb_usb_anysee 5-1:43.0: probe with driver dvb_usb_anysee failed with error -22 [ 186.221704][ T5686] usb 5-1: USB disconnect, device number 4 [ 187.704787][ T5677] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 187.872060][ T8214] syzkaller0: entered promiscuous mode [ 187.884605][ T5677] usb 3-1: Using ep0 maxpacket: 8 [ 187.884626][ T8214] syzkaller0: entered allmulticast mode [ 187.902318][ T5677] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.921266][ T5677] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.937186][ T5677] usb 3-1: config 0 has no interface number 0 [ 187.949740][ T5677] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.969582][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.993966][ T5677] usb 3-1: config 0 descriptor?? [ 188.082641][ T5677] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 188.477901][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.490073][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.914843][ T5686] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.066455][ T5686] usb 5-1: New USB device found, idVendor=049d, idProduct=ffff, bcdDevice= 0.00 [ 189.080343][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.100667][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.121070][ T5686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.144607][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.185276][ T5686] usb 5-1: config 0 descriptor?? [ 189.388664][ T9] usb 3-1: USB disconnect, device number 10 [ 189.620319][ T5686] hid-generic 0003:049D:FFFF.0006: hidraw0: USB HID v0.00 Device [HID 049d:ffff] on usb-dummy_hcd.4-1/input0 [ 189.845411][ T5686] usb 5-1: USB disconnect, device number 5 [ 192.789901][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.798013][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.912149][ T8235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.927628][ T8235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.093643][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 193.206331][ T5765] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.270590][ T5765] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.295177][ T5765] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.478042][ T5766] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.517727][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 193.894612][ T5701] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 194.064628][ T5701] usb 3-1: Using ep0 maxpacket: 8 [ 194.073250][ T5701] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 194.089465][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.106781][ T5701] usb 3-1: Product: syz [ 194.116220][ T5701] usb 3-1: Manufacturer: syz [ 194.121938][ T5701] usb 3-1: SerialNumber: syz [ 194.254958][ T5686] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 194.403289][ T5701] usb 3-1: USB disconnect, device number 11 [ 194.444860][ T5686] usb 5-1: Using ep0 maxpacket: 16 [ 194.453222][ T5686] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.482107][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.496985][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.516315][ T5686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.529342][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.543441][ T5686] usb 5-1: config 0 descriptor?? [ 194.554647][ T5677] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 194.706544][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.714785][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.727411][ T5677] usb 1-1: not running at top speed; connect to a high speed hub [ 194.735788][ T5677] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0 [ 194.747439][ T5677] usb 1-1: config 8 has an invalid interface number: 44 but max is 0 [ 194.756504][ T5677] usb 1-1: config 8 has no interface number 0 [ 194.762937][ T5677] usb 1-1: config 8 interface 44 has no altsetting 0 [ 194.777261][ T5677] usb 1-1: string descriptor 0 read error: -22 [ 194.787701][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.980878][ T5686] usbhid 5-1:0.0: can't add hid device: -71 [ 194.988902][ T5686] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 195.010875][ T5686] usb 5-1: USB disconnect, device number 6 [ 195.031139][ T5677] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state. [ 195.081509][ T5677] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 195.114969][ T5677] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 195.154876][ T5677] usb 1-1: media controller created [ 195.175356][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.325556][ T5766] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.340146][ T5677] DVB: Unable to find symbol dib7000p_attach() [ 195.347808][ T5766] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.358866][ T5677] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 195.372785][ T5766] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.382406][ T5677] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 195.391102][ T5766] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.401319][ T5677] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5) [ 195.411181][ T5677] usb 1-1: media controller created [ 195.429162][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.507964][ T5686] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 195.566687][ T8334] batman_adv: batadv0: Adding interface: veth0 [ 195.586570][ T8334] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.618360][ T8336] netlink: 88 bytes leftover after parsing attributes in process `syz.2.995'. [ 195.629709][ T5677] DVB: Unable to find symbol dib7000p_attach() [ 195.656095][ T5677] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5' [ 195.694986][ T5686] usb 2-1: Using ep0 maxpacket: 32 [ 195.701282][ T5686] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 195.712736][ T5686] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 195.724990][ T8334] batman_adv: batadv0: Interface activated: veth0 [ 195.733606][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.743808][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 195.752618][ T5686] usb 2-1: Product: syz [ 195.757375][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.764943][ T5686] usb 2-1: Manufacturer: syz [ 195.770011][ T5686] usb 2-1: SerialNumber: syz [ 195.786764][ T8338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.799887][ T5686] usb 2-1: config 0 descriptor?? [ 195.816335][ T8326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.831398][ T8338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.842623][ T5686] hub 2-1:0.0: bad descriptor, ignoring hub [ 195.844792][ T5677] rc_core: IR keymap rc-dib0700-rc5 not found [ 195.857206][ T8344] netlink: 31 bytes leftover after parsing attributes in process `syz.4.998'. [ 195.867327][ T5677] Registered IR keymap rc-empty [ 195.871441][ T5686] hub 2-1:0.0: probe with driver hub failed with error -5 [ 195.882101][ T5677] dvb-usb: could not initialize remote control. [ 195.890791][ T5677] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected. [ 195.891631][ T8338] batman_adv: batadv0: Interface deactivated: veth0 [ 195.916798][ T8338] batman_adv: batadv0: Removing interface: veth0 [ 196.006255][ T8313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.032098][ T8313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.233740][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'. [ 196.380330][ T8356] syzkaller0: entered promiscuous mode [ 196.386376][ T8356] syzkaller0: entered allmulticast mode [ 196.436852][ T5677] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 196.494813][ T8326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.510735][ T8326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.597712][ T5744] IPVS: starting estimator thread 0... [ 196.605422][ T8361] IPVS: rr: TCP 127.0.0.1:5376 - no destination available [ 196.607121][ T5677] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 196.640007][ T5677] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.651588][ T5677] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.663248][ T5677] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.682413][ T5677] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.704878][ T5677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.714608][ T8362] IPVS: using max 36 ests per chain, 86400 per kthread [ 197.034540][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.043897][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.142582][ T5677] gud 5-1:1.0: Unexpected status OK for failed transfer [ 197.150127][ T5677] gud 5-1:1.0: probe with driver gud failed with error -32 [ 197.328198][ T5701] usb 1-1: USB disconnect, device number 9 [ 197.393628][ T24] usb 5-1: USB disconnect, device number 7 [ 197.420897][ T5766] raw-gadget.0 gadget.1: failed to queue suspend event [ 197.495100][ T8326] raw-gadget.0 gadget.1: failed to queue resume event [ 197.529806][ T5701] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected. [ 197.547910][ T5766] raw-gadget.0 gadget.1: failed to queue suspend event [ 197.644599][ T8359] raw-gadget.0 gadget.1: failed to queue resume event [ 197.724368][ T5744] raw-gadget.0 gadget.1: failed to queue suspend event [ 197.793370][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.834624][ T8326] raw-gadget.0 gadget.1: failed to queue resume event [ 197.867439][ T58] raw-gadget.0 gadget.1: failed to queue suspend event [ 197.929462][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'. [ 197.947408][ T8363] raw-gadget.0 gadget.1: failed to queue disconnect event [ 198.453282][ T5677] usb 2-1: USB disconnect, device number 7 [ 198.688234][ T5677] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 198.822453][ T8408] openvswitch: netlink: IP tunnel dst address not specified [ 198.866701][ T5677] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 198.890346][ T5677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 198.931610][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 198.947774][ T5677] usb 2-1: Product: syz [ 198.952294][ T5677] usb 2-1: Manufacturer: syz [ 198.958180][ T5677] usb 2-1: SerialNumber: syz [ 198.968619][ T5677] usb 2-1: config 0 descriptor?? [ 198.977128][ T8363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.038979][ T8412] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 199.054611][ T5677] hub 2-1:0.0: bad descriptor, ignoring hub [ 199.068700][ T5677] hub 2-1:0.0: probe with driver hub failed with error -5 [ 199.112128][ T8403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.134335][ T8403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.333754][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 199.412167][ T5677] usb 2-1: USB disconnect, device number 8 [ 200.100403][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 200.503021][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.510996][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.650040][ T8451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.668154][ T8451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.005535][ T8470] syzkaller0: entered promiscuous mode [ 201.012550][ T8470] syzkaller0: entered allmulticast mode [ 201.087524][ T8472] syzkaller0: entered promiscuous mode [ 201.093197][ T8472] syzkaller0: entered allmulticast mode [ 204.602177][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.764899][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 204.781680][ T43] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 204.810972][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.822091][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.842213][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.874924][ T43] usb 1-1: config 0 descriptor?? [ 205.326139][ T43] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 205.341923][ T43] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 205.349802][ T43] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 205.371876][ T43] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 205.380483][ T43] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 205.432173][ T43] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 205.760924][ T8504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.778372][ T8504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.793396][ T43] usb 1-1: USB disconnect, device number 10 [ 206.005397][ T5701] ================================================================== [ 206.013555][ T5701] BUG: KASAN: slab-use-after-free in k90_backlight_work+0x174/0x1c0 [ 206.021592][ T5701] Read of size 1 at addr ffff888027aa9b10 by task kworker/1:6/5701 [ 206.029513][ T5701] [ 206.031879][ T5701] CPU: 1 UID: 0 PID: 5701 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 206.031903][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.031916][ T5701] Workqueue: events k90_backlight_work [ 206.031943][ T5701] Call Trace: [ 206.031953][ T5701] [ 206.031960][ T5701] dump_stack_lvl+0xe8/0x150 [ 206.031983][ T5701] print_address_description+0x55/0x1e0 [ 206.032006][ T5701] ? k90_backlight_work+0x174/0x1c0 [ 206.032020][ T5701] print_report+0x58/0x70 [ 206.032038][ T5701] kasan_report+0x117/0x150 [ 206.032065][ T5701] ? k90_backlight_work+0x174/0x1c0 [ 206.032081][ T5701] ? process_scheduled_works+0x97a/0x1630 [ 206.032099][ T5701] k90_backlight_work+0x174/0x1c0 [ 206.032115][ T5701] process_scheduled_works+0xc3d/0x1630 [ 206.032144][ T5701] ? __pfx_process_scheduled_works+0x10/0x10 [ 206.032164][ T5701] ? assign_work+0x3cf/0x5d0 [ 206.032182][ T5701] worker_thread+0xa47/0xfb0 [ 206.032205][ T5701] ? __kthread_parkme+0x71/0x1f0 [ 206.032228][ T5701] kthread+0x38b/0x480 [ 206.032250][ T5701] ? __pfx_worker_thread+0x10/0x10 [ 206.032267][ T5701] ? __pfx_kthread+0x10/0x10 [ 206.032289][ T5701] ret_from_fork+0x514/0xb70 [ 206.032313][ T5701] ? __pfx_ret_from_fork+0x10/0x10 [ 206.032334][ T5701] ? __switch_to+0xc89/0x1420 [ 206.032354][ T5701] ? __pfx_kthread+0x10/0x10 [ 206.032376][ T5701] ret_from_fork_asm+0x1a/0x30 [ 206.032405][ T5701] [ 206.032410][ T5701] [ 206.173540][ T5701] Allocated by task 43: [ 206.177712][ T5701] kasan_save_track+0x3e/0x80 [ 206.182465][ T5701] __kasan_kmalloc+0x93/0xb0 [ 206.187111][ T5701] __kmalloc_cache_noprof+0x331/0x660 [ 206.192583][ T5701] corsair_probe+0x627/0xbc0 [ 206.197313][ T5701] hid_device_probe+0x46a/0x870 [ 206.202189][ T5701] really_probe+0x254/0xae0 [ 206.206729][ T5701] __driver_probe_device+0x1e8/0x360 [ 206.212080][ T5701] driver_probe_device+0x4f/0x240 [ 206.217163][ T5701] __device_attach_driver+0x270/0x410 [ 206.222587][ T5701] bus_for_each_drv+0x258/0x2f0 [ 206.227488][ T5701] __device_attach+0x2c4/0x450 [ 206.232288][ T5701] device_initial_probe+0xa1/0xd0 [ 206.237347][ T5701] bus_probe_device+0x12a/0x220 [ 206.242231][ T5701] device_add+0x7d7/0xb80 [ 206.246616][ T5701] hid_add_device+0x272/0x3e0 [ 206.251319][ T5701] usbhid_probe+0x9d4/0xde0 [ 206.255847][ T5701] usb_probe_interface+0x653/0xc60 [ 206.260996][ T5701] really_probe+0x254/0xae0 [ 206.265583][ T5701] __driver_probe_device+0x1e8/0x360 [ 206.271387][ T5701] driver_probe_device+0x4f/0x240 [ 206.276459][ T5701] __device_attach_driver+0x270/0x410 [ 206.281874][ T5701] bus_for_each_drv+0x258/0x2f0 [ 206.286754][ T5701] __device_attach+0x2c4/0x450 [ 206.291576][ T5701] device_initial_probe+0xa1/0xd0 [ 206.296821][ T5701] bus_probe_device+0x12a/0x220 [ 206.301745][ T5701] device_add+0x7d7/0xb80 [ 206.306110][ T5701] usb_set_configuration+0x1ad8/0x2180 [ 206.311609][ T5701] usb_generic_driver_probe+0x8d/0x150 [ 206.317104][ T5701] usb_probe_device+0x1c3/0x3b0 [ 206.322004][ T5701] really_probe+0x254/0xae0 [ 206.326544][ T5701] __driver_probe_device+0x1e8/0x360 [ 206.331907][ T5701] driver_probe_device+0x4f/0x240 [ 206.337104][ T5701] __device_attach_driver+0x270/0x410 [ 206.342541][ T5701] bus_for_each_drv+0x258/0x2f0 [ 206.347476][ T5701] __device_attach+0x2c4/0x450 [ 206.352313][ T5701] device_initial_probe+0xa1/0xd0 [ 206.357402][ T5701] bus_probe_device+0x12a/0x220 [ 206.362313][ T5701] device_add+0x7d7/0xb80 [ 206.366778][ T5701] usb_new_device+0x9aa/0x1690 [ 206.371635][ T5701] hub_event+0x28e8/0x4d30 [ 206.376125][ T5701] process_scheduled_works+0xc3d/0x1630 [ 206.381780][ T5701] worker_thread+0xa47/0xfb0 [ 206.386447][ T5701] kthread+0x38b/0x480 [ 206.390615][ T5701] ret_from_fork+0x514/0xb70 [ 206.395298][ T5701] ret_from_fork_asm+0x1a/0x30 [ 206.400158][ T5701] [ 206.402507][ T5701] Freed by task 43: [ 206.406338][ T5701] kasan_save_track+0x3e/0x80 [ 206.411050][ T5701] kasan_save_free_info+0x40/0x50 [ 206.416111][ T5701] __kasan_slab_free+0x5c/0x80 [ 206.420908][ T5701] kfree+0x1c5/0x640 [ 206.424841][ T5701] hid_device_remove+0xc5/0x1c0 [ 206.429715][ T5701] device_release_driver_internal+0x48b/0x880 [ 206.435825][ T5701] bus_remove_device+0x444/0x560 [ 206.440929][ T5701] device_del+0x524/0x8f0 [ 206.445309][ T5701] hid_destroy_device+0x6b/0x1b0 [ 206.450272][ T5701] usbhid_disconnect+0x9f/0xc0 [ 206.455063][ T5701] usb_unbind_interface+0x295/0x9f0 [ 206.460302][ T5701] device_release_driver_internal+0x4f5/0x880 [ 206.466412][ T5701] bus_remove_device+0x444/0x560 [ 206.471411][ T5701] device_del+0x524/0x8f0 [ 206.475784][ T5701] usb_disable_device+0x3d4/0x8d0 [ 206.480845][ T5701] usb_disconnect+0x346/0x9a0 [ 206.485574][ T5701] hub_event+0x1bbb/0x4d30 [ 206.490037][ T5701] process_scheduled_works+0xc3d/0x1630 [ 206.495612][ T5701] worker_thread+0xa47/0xfb0 [ 206.500226][ T5701] kthread+0x38b/0x480 [ 206.504343][ T5701] ret_from_fork+0x514/0xb70 [ 206.508966][ T5701] ret_from_fork_asm+0x1a/0x30 [ 206.513761][ T5701] [ 206.516244][ T5701] Last potentially related work creation: [ 206.522012][ T5701] kasan_save_stack+0x3e/0x60 [ 206.526756][ T5701] kasan_record_aux_stack+0xbd/0xd0 [ 206.531995][ T5701] insert_work+0x3d/0x330 [ 206.536395][ T5701] __queue_work+0xd07/0x10d0 [ 206.541029][ T5701] queue_work_on+0x106/0x1d0 [ 206.545655][ T5701] led_classdev_unregister+0x113/0x280 [ 206.551167][ T5701] corsair_remove+0x1a4/0x260 [ 206.555918][ T5701] hid_device_remove+0xc5/0x1c0 [ 206.560834][ T5701] device_release_driver_internal+0x48b/0x880 [ 206.567039][ T5701] bus_remove_device+0x444/0x560 [ 206.572052][ T5701] device_del+0x524/0x8f0 [ 206.576516][ T5701] hid_destroy_device+0x6b/0x1b0 [ 206.581703][ T5701] usbhid_disconnect+0x9f/0xc0 [ 206.586542][ T5701] usb_unbind_interface+0x295/0x9f0 [ 206.591794][ T5701] device_release_driver_internal+0x4f5/0x880 [ 206.597945][ T5701] bus_remove_device+0x444/0x560 [ 206.602937][ T5701] device_del+0x524/0x8f0 [ 206.607431][ T5701] usb_disable_device+0x3d4/0x8d0 [ 206.612536][ T5701] usb_disconnect+0x346/0x9a0 [ 206.617256][ T5701] hub_event+0x1bbb/0x4d30 [ 206.621708][ T5701] process_scheduled_works+0xc3d/0x1630 [ 206.627307][ T5701] worker_thread+0xa47/0xfb0 [ 206.631943][ T5701] kthread+0x38b/0x480 [ 206.636076][ T5701] ret_from_fork+0x514/0xb70 [ 206.640735][ T5701] ret_from_fork_asm+0x1a/0x30 [ 206.645553][ T5701] [ 206.647926][ T5701] The buggy address belongs to the object at ffff888027aa9800 [ 206.647926][ T5701] which belongs to the cache kmalloc-1k of size 1024 [ 206.662030][ T5701] The buggy address is located 784 bytes inside of [ 206.662030][ T5701] freed 1024-byte region [ffff888027aa9800, ffff888027aa9c00) [ 206.675960][ T5701] [ 206.678321][ T5701] The buggy address belongs to the physical page: [ 206.684763][ T5701] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027aae000 pfn:0x27aa8 [ 206.694879][ T5701] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 206.703472][ T5701] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 206.712026][ T5701] page_type: f5(slab) [ 206.716071][ T5701] raw: 00fff00000000240 ffff88801b041dc0 ffffea0000a56e10 ffffea00015e6610 [ 206.724835][ T5701] raw: ffff888027aae000 000000080010000f 00000000f5000000 0000000000000000 [ 206.733554][ T5701] head: 00fff00000000240 ffff88801b041dc0 ffffea0000a56e10 ffffea00015e6610 [ 206.742356][ T5701] head: ffff888027aae000 000000080010000f 00000000f5000000 0000000000000000 [ 206.751070][ T5701] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 206.760393][ T5701] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 206.769356][ T5701] page dumped because: kasan: bad access detected [ 206.775822][ T5701] page_owner tracks the page as allocated [ 206.781569][ T5701] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5907, tgid 5907 (dhcpcd-run-hook), ts 107886464054 [ 206.801518][ T5701] post_alloc_hook+0x1f9/0x250 [ 206.806512][ T5701] get_page_from_freelist+0x2209/0x2280 [ 206.812505][ T5701] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 206.818482][ T5701] allocate_slab+0x7c/0x5e0 [ 206.823091][ T5701] refill_objects+0x2d5/0x350 [ 206.827842][ T5701] __pcs_replace_empty_main+0x2c3/0x6b0 [ 206.833435][ T5701] __kmalloc_noprof+0x489/0x720 [ 206.838326][ T5701] load_elf_binary+0x2c6/0x28d0 [ 206.843244][ T5701] bprm_execve+0x930/0x1590 [ 206.847772][ T5701] do_execveat_common+0x4f4/0x670 [ 206.852845][ T5701] __x64_sys_execve+0x97/0xc0 [ 206.857680][ T5701] do_syscall_64+0x166/0x520 [ 206.862606][ T5701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.868797][ T5701] page last free pid 5685 tgid 5685 ts 107821460347 stack trace: [ 206.876900][ T5701] __free_frozen_pages+0xc93/0xd90 [ 206.882314][ T5701] __slab_free+0x274/0x2c0 [ 206.886764][ T5701] qlist_free_all+0x99/0x100 [ 206.891396][ T5701] kasan_quarantine_reduce+0x148/0x160 [ 206.896901][ T5701] __kasan_slab_alloc+0x22/0x80 [ 206.901809][ T5701] kmem_cache_alloc_noprof+0x2a4/0x5f0 [ 206.907308][ T5701] do_getname+0x2e/0x250 [ 206.911607][ T5701] vfs_fstatat+0x45/0x170 [ 206.916020][ T5701] __x64_sys_newfstatat+0x151/0x200 [ 206.921253][ T5701] do_syscall_64+0x166/0x520 [ 206.925903][ T5701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.931851][ T5701] [ 206.934208][ T5701] Memory state around the buggy address: [ 206.939940][ T5701] ffff888027aa9a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 206.948138][ T5701] ffff888027aa9a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 206.956432][ T5701] >ffff888027aa9b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 206.964578][ T5701] ^ [ 206.969335][ T5701] ffff888027aa9b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 206.977553][ T5701] ffff888027aa9c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 206.985652][ T5701] ================================================================== [ 207.029718][ T5701] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 207.037020][ T5701] CPU: 1 UID: 0 PID: 5701 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 207.046435][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.056573][ T5701] Workqueue: events k90_backlight_work [ 207.062110][ T5701] Call Trace: [ 207.065427][ T5701] [ 207.068417][ T5701] vpanic+0x56d/0xa60 [ 207.072475][ T5701] ? __pfx_vpanic+0x10/0x10 [ 207.077133][ T5701] ? __pfx___schedule+0x10/0x10 [ 207.082035][ T5701] panic+0xc5/0xd0 [ 207.085807][ T5701] ? __pfx_panic+0x10/0x10 [ 207.090282][ T5701] ? preempt_schedule_thunk+0x16/0x40 [ 207.095705][ T5701] ? k90_backlight_work+0x174/0x1c0 [ 207.100954][ T5701] check_panic_on_warn+0x89/0xb0 [ 207.105992][ T5701] ? k90_backlight_work+0x174/0x1c0 [ 207.111255][ T5701] end_report+0x73/0x170 [ 207.115564][ T5701] ? k90_backlight_work+0x174/0x1c0 [ 207.120836][ T5701] kasan_report+0x128/0x150 [ 207.125402][ T5701] ? k90_backlight_work+0x174/0x1c0 [ 207.130658][ T5701] ? process_scheduled_works+0x97a/0x1630 [ 207.136432][ T5701] k90_backlight_work+0x174/0x1c0 [ 207.141508][ T5701] process_scheduled_works+0xc3d/0x1630 [ 207.147155][ T5701] ? __pfx_process_scheduled_works+0x10/0x10 [ 207.153189][ T5701] ? assign_work+0x3cf/0x5d0 [ 207.157834][ T5701] worker_thread+0xa47/0xfb0 [ 207.162489][ T5701] ? __kthread_parkme+0x71/0x1f0 [ 207.167497][ T5701] kthread+0x38b/0x480 [ 207.171624][ T5701] ? __pfx_worker_thread+0x10/0x10 [ 207.176818][ T5701] ? __pfx_kthread+0x10/0x10 [ 207.181487][ T5701] ret_from_fork+0x514/0xb70 [ 207.186137][ T5701] ? __pfx_ret_from_fork+0x10/0x10 [ 207.191314][ T5701] ? __switch_to+0xc89/0x1420 [ 207.196051][ T5701] ? __pfx_kthread+0x10/0x10 [ 207.200747][ T5701] ret_from_fork_asm+0x1a/0x30 [ 207.205580][ T5701] [ 207.208829][ T5701] Kernel Offset: disabled [ 207.213194][ T5701] Rebooting in 86400 seconds..