last executing test programs: 2m12.104193004s ago: executing program 0 (id=108): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) 2m10.772341406s ago: executing program 0 (id=113): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f00000002c0)=[{0xd6, 0x4000, 0x0, 0x0}, {0x4, 0x2811, 0x0, 0x0}, {0x1, 0x4000, 0x0, 0x0}], 0x3}) 2m7.427496242s ago: executing program 0 (id=122): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) 2m6.181325361s ago: executing program 0 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1c4, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x21, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2, 0x5]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1f6) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) 2m4.219655473s ago: executing program 0 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1c4, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x21, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2, 0x5]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1f6) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/128, 0x80) 2m2.492228374s ago: executing program 0 (id=139): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x84, 0x7, 0xfffffffffffffffe, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5610067f0200ff000005000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000a000200040010000800014004000000", 0x58}], 0x1) 1m47.053622977s ago: executing program 32 (id=139): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x84, 0x7, 0xfffffffffffffffe, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c5610067f0200ff000005000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000a000200040010000800014004000000", 0x58}], 0x1) 6.332275083s ago: executing program 2 (id=491): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup(r2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.651870096s ago: executing program 1 (id=497): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f00000001c0)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000b40)}, 0x9}], 0x1, 0x4, 0x0) recvmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002380)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) 5.215379566s ago: executing program 1 (id=509): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) epoll_create1(0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.90825933s ago: executing program 2 (id=503): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56", 0x2) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 4.132053297s ago: executing program 4 (id=504): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1c4, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x21, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2, 0x5]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1f6) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/127, 0x7f) 3.939071156s ago: executing program 4 (id=505): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) close(r1) 3.880092868s ago: executing program 2 (id=506): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4558, 0x1000, 0x3, 0x208}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8bbb, 0x4000, 0x3, 0x169}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b2, 0x1, 0x3, 0x2b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x492c, 0x8, 0x0, 0x1dc}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x3000, 0xfffffffe, 0x1064}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4955, 0x2000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x400, 0x3, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.834053341s ago: executing program 3 (id=507): openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.799975602s ago: executing program 4 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0fc5:1227:hc', 0xc) 3.702889597s ago: executing program 3 (id=510): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40140) poll(&(0x7f00000001c0)=[{r2, 0x4044}], 0x1, 0xffffff04) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x100000000, 0xa, 0x7f, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x40100}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.544282174s ago: executing program 1 (id=511): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000480)) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0x124, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300ff010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13", 0x0, 0x31, 0x6000000000000000}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000680)={0x1, 'syz_tun\x00', {}, 0x2}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) 3.544072184s ago: executing program 4 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000080, 0x0, 0x5}]}) 3.362205853s ago: executing program 1 (id=513): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/82, 0x52}], 0x1}, 0x81}], 0x61, 0x2100, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.344930394s ago: executing program 3 (id=514): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc25c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r0}]}}}]}, 0x38}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster/comms/2\x00', 0x1fd) timer_create(0x0, &(0x7f00000007c0)={0x0, 0x33, 0x2, @thr={&(0x7f0000000740)="467de29de66f28a89f043bc670a65f", &(0x7f0000000780)="c31a56a6d768f5b7f9258e80b4dfbe526ee33663fc1d9d89e2e9df7fdb72c3131fea2474dcd8e0"}}, &(0x7f0000000800)=0x0) timer_settime(r1, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r2 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x2, 0x3, 0x6, 0x0, 0x9, 0x7}, @ipv6=@tipc_packet={0x8, 0x6, "8d72d0", 0x1c4, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[@hopopts={0x0, 0x21, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x981, [0x4, 0x9, 0xb28, 0x8, 0x8, 0x2, 0x5]}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x33, 0x98, "15630ba6813003746524f74ea3f5b481c33a813da4ffcc7b1c6b95d48dc1022712bb6919771d4aa4f3965e70fa13dc5a3a80eefa585cb09f03f22832ce4f57c7a51e7a8644ac037357358f141e0384898c29606e218bf13cb8b1bfa8d03a41e4cd5dfe30c25bf597d63220876a11d24b757fe1480f9c949821e1de7e1c8f3e4dbc61e31108da495614f0457722a8d89bf732a544cd738dfd"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xffc0, [0x8000]}}, @enc_lim={0x4, 0x1, 0x6}, @padn]}, @srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x8, 0x50be, [@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @empty}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x40, 0x0, 0x0, 0x2, 0x9, 0x4, 0x4e24, 0x4e21, 0x3, 0x4}, [{0x2, 0xffffffff, 0x4, 0x1, 0x5, 0x5, 0x8, 0x5}, {0x5, 0x200000, 0x8, 0x7fff, 0x80000001, 0x10000, 0x4}, {0x1af2, 0x0, 0xdf12, 0x1ff, 0xf9e0, 0x4, 0x8, 0xbb}]}}}}, 0x1f6) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)="020052487f00000100"/127, 0x7f) 3.144361453s ago: executing program 4 (id=515): unshare(0x60600) socket$inet6(0xa, 0x1, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) 3.143829343s ago: executing program 3 (id=516): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56", 0x2) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008011}, 0x40880) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 2.517450382s ago: executing program 2 (id=517): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) close(r1) 2.35058356s ago: executing program 1 (id=518): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x94) 1.376308196s ago: executing program 4 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8091}, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 351.659794ms ago: executing program 1 (id=520): sync() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sync() sync() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 303.734136ms ago: executing program 2 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 247.462509ms ago: executing program 3 (id=522): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$int_in(r1, 0x5452, &(0x7f0000001080)=0x3) write(r1, &(0x7f0000000180)='g', 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x7, 0x3, 0x6, 0x7fff, 0x17, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 222.36µs ago: executing program 2 (id=523): syz_open_dev$ndb(0x0, 0x0, 0x8e83) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70b52b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 3 (id=524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x26000, 0x2000, &(0x7f0000881000/0x2000)=nil, 0x21000, r2}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x70000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x10000, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r6, 0x3000001, 0x11, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9, r5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 73.854959][ T5762] cgroup: Unknown subsys name 'net' [ 73.955324][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.638649][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.335578][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.341715][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.345991][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.354358][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.358505][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.365390][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.380045][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.389113][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.390290][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.397113][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.406056][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.420531][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.429285][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.448295][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.449114][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.464391][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.465337][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.480162][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.489364][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.497518][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.508122][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.515789][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.533765][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.546229][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.997357][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.036232][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 78.114803][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 78.148622][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 78.282274][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.290641][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.298335][ T5778] bridge_slave_0: entered allmulticast mode [ 78.305219][ T5778] bridge_slave_0: entered promiscuous mode [ 78.318962][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.326219][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.333789][ T5773] bridge_slave_0: entered allmulticast mode [ 78.343242][ T5773] bridge_slave_0: entered promiscuous mode [ 78.355873][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.363539][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.370902][ T5778] bridge_slave_1: entered allmulticast mode [ 78.378019][ T5778] bridge_slave_1: entered promiscuous mode [ 78.390246][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.397492][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.405677][ T5773] bridge_slave_1: entered allmulticast mode [ 78.413004][ T5773] bridge_slave_1: entered promiscuous mode [ 78.493691][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.501149][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.508529][ T5774] bridge_slave_0: entered allmulticast mode [ 78.515447][ T5774] bridge_slave_0: entered promiscuous mode [ 78.535709][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.543529][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.550870][ T5781] bridge_slave_0: entered allmulticast mode [ 78.561898][ T5781] bridge_slave_0: entered promiscuous mode [ 78.571873][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.584324][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.591664][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.598981][ T5774] bridge_slave_1: entered allmulticast mode [ 78.606173][ T5774] bridge_slave_1: entered promiscuous mode [ 78.615725][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.627598][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.635007][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.642533][ T5781] bridge_slave_1: entered allmulticast mode [ 78.650253][ T5781] bridge_slave_1: entered promiscuous mode [ 78.671843][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.715777][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.738270][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.752127][ T5778] team0: Port device team_slave_0 added [ 78.774888][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.798759][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.822637][ T5778] team0: Port device team_slave_1 added [ 78.830898][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.862200][ T5773] team0: Port device team_slave_0 added [ 78.894722][ T5781] team0: Port device team_slave_0 added [ 78.902673][ T5773] team0: Port device team_slave_1 added [ 78.943007][ T5781] team0: Port device team_slave_1 added [ 78.961420][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.968924][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.995399][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.010432][ T5774] team0: Port device team_slave_0 added [ 79.017401][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.024713][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.051618][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.082826][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.090122][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.116222][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.129644][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.137342][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.163987][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.178209][ T5774] team0: Port device team_slave_1 added [ 79.210063][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.217077][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.243873][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.283250][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.291650][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.319002][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.375880][ T5778] hsr_slave_0: entered promiscuous mode [ 79.382949][ T5778] hsr_slave_1: entered promiscuous mode [ 79.404084][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.411705][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.438325][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.476853][ T5773] hsr_slave_0: entered promiscuous mode [ 79.483571][ T5773] hsr_slave_1: entered promiscuous mode [ 79.491103][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.499540][ T5773] Cannot create hsr debugfs directory [ 79.511334][ T5781] hsr_slave_0: entered promiscuous mode [ 79.520620][ T5780] Bluetooth: hci1: command tx timeout [ 79.526634][ T5781] hsr_slave_1: entered promiscuous mode [ 79.533734][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.541460][ T5781] Cannot create hsr debugfs directory [ 79.547666][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.554986][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.581538][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.597988][ T5780] Bluetooth: hci3: command tx timeout [ 79.598045][ T5787] Bluetooth: hci0: command tx timeout [ 79.603828][ T5780] Bluetooth: hci2: command tx timeout [ 79.774621][ T5774] hsr_slave_0: entered promiscuous mode [ 79.781519][ T5774] hsr_slave_1: entered promiscuous mode [ 79.788666][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.796238][ T5774] Cannot create hsr debugfs directory [ 80.095175][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.134224][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.146949][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.158754][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.225731][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.237498][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.255511][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.266515][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.360754][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.379170][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.390717][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.430711][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.508313][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.533063][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.550428][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.562423][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.585827][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.665086][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.695382][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.707150][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.714658][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.757496][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.764943][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.795391][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.834791][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.842067][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.880227][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.889126][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.921705][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.986953][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.005426][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.052458][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.059708][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.071479][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.078733][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.097315][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.152782][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.160030][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.175227][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.183112][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.465131][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.583654][ T5778] veth0_vlan: entered promiscuous mode [ 81.599566][ T5780] Bluetooth: hci1: command tx timeout [ 81.672286][ T5778] veth1_vlan: entered promiscuous mode [ 81.678295][ T5780] Bluetooth: hci0: command tx timeout [ 81.679024][ T5787] Bluetooth: hci3: command tx timeout [ 81.688148][ T5780] Bluetooth: hci2: command tx timeout [ 81.723375][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.813287][ T5778] veth0_macvtap: entered promiscuous mode [ 81.839882][ T5778] veth1_macvtap: entered promiscuous mode [ 81.887505][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.902722][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.920652][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.929107][ T5773] veth0_vlan: entered promiscuous mode [ 81.947659][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.957233][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.966447][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.976455][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.994272][ T5773] veth1_vlan: entered promiscuous mode [ 82.003649][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.104728][ T5773] veth0_macvtap: entered promiscuous mode [ 82.162853][ T5781] veth0_vlan: entered promiscuous mode [ 82.170052][ T5773] veth1_macvtap: entered promiscuous mode [ 82.216798][ T5781] veth1_vlan: entered promiscuous mode [ 82.246199][ T5774] veth0_vlan: entered promiscuous mode [ 82.259538][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.270957][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.283484][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.295988][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.308367][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.316447][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.324098][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.325681][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.372229][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.382539][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.391730][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.401667][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.414379][ T5774] veth1_vlan: entered promiscuous mode [ 82.462196][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.471774][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.532267][ T5781] veth0_macvtap: entered promiscuous mode [ 82.585328][ T5781] veth1_macvtap: entered promiscuous mode [ 82.677516][ T5774] veth0_macvtap: entered promiscuous mode [ 82.688608][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.719104][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.723289][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.731646][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.749205][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.760092][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.773289][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.782679][ T5774] veth1_macvtap: entered promiscuous mode [ 82.846952][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.871791][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.883203][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.904452][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.920925][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.935711][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.950628][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.982883][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.994337][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.006883][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.023637][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.034510][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.051991][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.065460][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.087352][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.104667][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.115671][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.144304][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.155176][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.172794][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.187561][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.229838][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.246483][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.258328][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.273116][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.301240][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.315804][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.326131][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.340442][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.678218][ T5780] Bluetooth: hci1: command tx timeout [ 83.697649][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.727637][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.758474][ T5780] Bluetooth: hci3: command tx timeout [ 83.758504][ T5782] Bluetooth: hci0: command tx timeout [ 83.770103][ T5787] Bluetooth: hci2: command tx timeout [ 83.834227][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.871299][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.946165][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.962181][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.980119][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.998831][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.769512][ T5782] Bluetooth: hci1: command tx timeout [ 85.847949][ T5782] Bluetooth: hci0: command tx timeout [ 85.853538][ T5782] Bluetooth: hci3: command tx timeout [ 85.855540][ T5787] Bluetooth: hci2: command tx timeout [ 86.618136][ T971] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.933821][ T971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.023625][ T971] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 87.319399][ T971] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 87.554248][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.611511][ T971] usb 4-1: Product: syz [ 87.648128][ T971] usb 4-1: Manufacturer: syz [ 87.663560][ T971] usb 4-1: SerialNumber: syz [ 88.028875][ T971] kaweth 4-1:1.0: Firmware present in device. [ 88.148724][ T971] kaweth 4-1:1.0: Error reading configuration (-71), no net device created [ 88.185530][ T971] kaweth: probe of 4-1:1.0 failed with error -5 [ 88.272709][ T971] usb 4-1: USB disconnect, device number 2 [ 88.737755][ C0] sched: RT throttling activated [ 91.562982][ T5915] netlink: 83 bytes leftover after parsing attributes in process `syz.0.26'. [ 92.410896][ T1218] cfg80211: failed to load regulatory.db [ 94.352766][ T27] audit: type=1326 audit(1789923107.616:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 94.389062][ T5938] jffs2: notice: (5938) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.460492][ T27] audit: type=1326 audit(1789923107.646:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 95.837829][ T27] audit: type=1326 audit(1789923107.646:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 95.888240][ T27] audit: type=1326 audit(1789923107.646:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 95.957952][ T27] audit: type=1326 audit(1789923107.646:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 96.007904][ T27] audit: type=1326 audit(1789923107.686:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 96.089743][ T27] audit: type=1326 audit(1789923107.686:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 96.125814][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.43'. [ 96.174206][ T27] audit: type=1326 audit(1789923107.686:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 96.290388][ T27] audit: type=1326 audit(1789923107.686:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 96.316664][ T27] audit: type=1326 audit(1789923107.686:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.3.37" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ad79e159 code=0x7ffc0000 [ 101.335842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.542876][ T6044] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.469187][ T6069] Bluetooth: MGMT ver 1.22 [ 107.541950][ T6069] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 109.918676][ T6096] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 110.064997][ T6098] process 'syz.2.90' launched './file0' with NULL argv: empty string added [ 114.377936][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 114.377979][ T27] audit: type=1326 audit(1789923127.566:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.99" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca6a59e159 code=0x0 [ 115.464650][ T6137] syz_tun: entered allmulticast mode [ 115.533995][ T6136] syz_tun: left allmulticast mode [ 118.034542][ T6170] ALSA: mixer_oss: invalid OSS volume '' [ 118.640752][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.848101][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 118.890209][ T23] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 118.918497][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.940682][ T23] usb 1-1: Product: syz [ 118.950311][ T23] usb 1-1: Manufacturer: syz [ 118.964757][ T23] usb 1-1: SerialNumber: syz [ 119.264790][ T23] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 119.309915][ T23] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 119.336180][ T23] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 119.373676][ T23] usb 1-1: media controller created [ 120.308244][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.442491][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 121.448724][ T23] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 121.527926][ T23] usb 1-1: USB disconnect, device number 2 [ 121.724096][ T971] logitech-hidpp-device 0003:046D:C082.0001: Device not connected [ 128.358654][ T6268] input: syz1 as /devices/virtual/input/input5 [ 129.337843][ T28] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.317761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.357763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 130.377760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.479566][ T28] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 130.488897][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.500789][ T28] usb 3-1: config 0 descriptor?? [ 130.509294][ T28] cp210x 3-1:0.0: cp210x converter detected [ 130.967885][ T28] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 131.024277][ T28] usb 3-1: cp210x converter now attached to ttyUSB0 [ 131.221310][ T28] usb 3-1: USB disconnect, device number 2 [ 131.256119][ T28] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.032225][ T28] cp210x 3-1:0.0: device disconnected [ 133.906295][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.915642][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.649166][ T6320] Illegal XDP return value 1398407212 on prog (id 16) dev syz_tun, expect packet loss! [ 136.227938][ T5817] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.417977][ T5817] usb 3-1: device not accepting address 3, error -71 [ 139.796373][ T6346] capability: warning: `syz.2.172' uses 32-bit capabilities (legacy support in use) [ 141.687921][ T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.975639][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 142.110527][ T28] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 142.283227][ T28] usb 2-1: config 179 has no interface number 0 [ 142.450389][ T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 142.508128][ T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 142.567777][ T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 142.651299][ T28] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 142.720326][ T28] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 142.771055][ T28] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 142.806883][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.850596][ T6362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.407789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.427790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 144.257814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 144.317781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 144.367801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 144.387778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 145.180100][ T6362] syz.1.177[6362]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 145.287204][ T5817] usb 2-1: USB disconnect, device number 2 [ 145.287218][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 145.302212][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 145.676604][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.688965][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.697427][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.718268][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.728384][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 145.735787][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.834760][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 147.843950][ T5782] Bluetooth: hci4: command tx timeout [ 147.893826][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.029586][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.182337][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.346819][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.391974][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 148.412032][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 148.470690][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.478207][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.486166][ T6382] bridge_slave_0: entered allmulticast mode [ 148.502193][ T6382] bridge_slave_0: entered promiscuous mode [ 148.529363][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.545460][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.553772][ T6382] bridge_slave_1: entered allmulticast mode [ 148.589520][ T6382] bridge_slave_1: entered promiscuous mode [ 149.927868][ T5782] Bluetooth: hci4: command tx timeout [ 150.049045][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.388271][ T6434] FAULT_INJECTION: forcing a failure. [ 150.388271][ T6434] name failslab, interval 1, probability 0, space 0, times 1 [ 150.420450][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.444405][ T6434] CPU: 1 PID: 6434 Comm: syz.1.202 Not tainted syzkaller #0 [ 150.452309][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.463193][ T6434] Call Trace: [ 150.466517][ T6434] [ 150.469490][ T6434] dump_stack_lvl+0x18c/0x250 [ 150.474325][ T6434] ? show_regs_print_info+0x20/0x20 [ 150.479640][ T6434] ? load_image+0x420/0x420 [ 150.484214][ T6434] ? __might_sleep+0xe0/0xe0 [ 150.488880][ T6434] ? __lock_acquire+0x7d80/0x7d80 [ 150.493968][ T6434] ? lock_chain_count+0x20/0x20 [ 150.498882][ T6434] should_fail_ex+0x394/0x4c0 [ 150.503631][ T6434] should_failslab+0x9/0x20 [ 150.508330][ T6434] slab_pre_alloc_hook+0x59/0x300 [ 150.513513][ T6434] ? _raw_spin_unlock+0x40/0x40 [ 150.518519][ T6434] ? __request_module+0x2d1/0x600 [ 150.523604][ T6434] __kmem_cache_alloc_node+0x53/0x250 [ 150.529221][ T6434] ? __request_module+0x2d1/0x600 [ 150.534322][ T6434] kmalloc_trace+0x2a/0xe0 [ 150.538815][ T6434] __request_module+0x2d1/0x600 [ 150.543727][ T6434] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 150.549430][ T6434] ? module_enforce_rwx_sections+0x150/0x150 [ 150.555468][ T6434] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 150.561159][ T6434] ? mutex_unlock+0x10/0x10 [ 150.565738][ T6434] nfnetlink_rcv+0x707/0x2490 [ 150.570468][ T6434] ? lockdep_hardirqs_on+0x98/0x150 [ 150.575720][ T6434] ? __dev_queue_xmit+0x1329/0x37e0 [ 150.581162][ T6434] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 150.586803][ T6434] ? ref_tracker_free+0x686/0x830 [ 150.592157][ T6434] ? refcount_inc+0x70/0x70 [ 150.596723][ T6434] ? __asan_memcpy+0x40/0x70 [ 150.601375][ T6434] ? __skb_clone+0x5c/0x6c0 [ 150.605950][ T6434] ? __skb_clone+0x446/0x6c0 [ 150.610619][ T6434] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.615881][ T6434] ? __lock_acquire+0x7d80/0x7d80 [ 150.621031][ T6434] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.626284][ T6434] netlink_unicast+0x7b1/0x930 [ 150.631772][ T6434] netlink_sendmsg+0x8d0/0xbf0 [ 150.636568][ T6434] ? netlink_getsockopt+0x590/0x590 [ 150.641790][ T6434] ? apparmor_socket_sendmsg+0x170/0x330 [ 150.647462][ T6434] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 150.652778][ T6434] ? security_socket_sendmsg+0x80/0xa0 [ 150.658428][ T6434] ? netlink_getsockopt+0x590/0x590 [ 150.663647][ T6434] ____sys_sendmsg+0x61b/0x980 [ 150.668711][ T6434] ? __asan_memset+0x22/0x40 [ 150.673329][ T6434] ? __sys_sendmsg_sock+0x30/0x30 [ 150.678373][ T6434] ? __import_iovec+0x5f2/0x850 [ 150.683250][ T6434] ? import_iovec+0x73/0xa0 [ 150.687889][ T6434] ___sys_sendmsg+0x2a6/0x360 [ 150.692640][ T6434] ? __sys_sendmsg+0x2b0/0x2b0 [ 150.697470][ T6434] __se_sys_sendmsg+0x1d0/0x2c0 [ 150.702341][ T6434] ? __x64_sys_sendmsg+0x80/0x80 [ 150.707322][ T6434] ? lockdep_hardirqs_on+0x98/0x150 [ 150.712580][ T6434] do_syscall_64+0x55/0xb0 [ 150.717019][ T6434] ? clear_bhb_loop+0x40/0x90 [ 150.722060][ T6434] ? clear_bhb_loop+0x40/0x90 [ 150.726791][ T6434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.732724][ T6434] RIP: 0033:0x7f7d5899e159 [ 150.737509][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.761293][ T6434] RSP: 002b:00007f7d598d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.769853][ T6434] RAX: ffffffffffffffda RBX: 00007f7d58c25fa0 RCX: 00007f7d5899e159 [ 150.777875][ T6434] RDX: 0000000020004450 RSI: 0000200000000000 RDI: 0000000000000006 [ 150.785980][ T6434] RBP: 00007f7d58a3506b R08: 0000000000000000 R09: 0000000000000000 [ 150.794087][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.802088][ T6434] R13: 00007f7d58c26038 R14: 00007f7d58c25fa0 R15: 00007fffb3168958 [ 150.810093][ T6434] [ 150.825972][ T6382] team0: Port device team_slave_0 added [ 150.857629][ T6382] team0: Port device team_slave_1 added [ 151.003668][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.046605][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.086102][ T6443] No buffer was provided with the request [ 151.105255][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.198201][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.215546][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.300068][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.007927][ T5782] Bluetooth: hci4: command tx timeout [ 152.573005][ T6382] hsr_slave_0: entered promiscuous mode [ 152.580409][ T6382] hsr_slave_1: entered promiscuous mode [ 152.589095][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.596724][ T6382] Cannot create hsr debugfs directory [ 152.660475][ T23] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 152.895427][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.926339][ T23] usb 2-1: config 8 has an invalid interface number: 109 but max is 0 [ 152.939568][ T23] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 152.978045][ T23] usb 2-1: config 8 has no interface number 0 [ 152.984322][ T23] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 153.028424][ T23] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 153.062850][ T23] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 153.102549][ T23] usb 2-1: string descriptor 0 read error: -22 [ 153.111851][ T23] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 153.139433][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.166929][ T6453] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.204368][ T23] metro_usb 2-1:8.109: Metrologic USB to Serial converter detected [ 153.248597][ T23] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 153.446295][ T789] usb 2-1: USB disconnect, device number 3 [ 153.506240][ T789] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 153.541407][ T789] metro_usb 2-1:8.109: device disconnected [ 154.084645][ T5782] Bluetooth: hci4: command tx timeout [ 154.137859][ T6382] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.214233][ T6382] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.378234][ T28] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.602707][ T28] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 154.658032][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.666123][ T28] usb 3-1: Product: syz [ 154.736796][ T28] usb 3-1: Manufacturer: syz [ 154.756039][ T28] usb 3-1: SerialNumber: syz [ 154.835463][ T28] usb 3-1: config 0 descriptor?? [ 154.864165][ T28] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 155.278802][ T23] usb 3-1: USB disconnect, device number 5 [ 155.944196][ T6382] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.039983][ T6382] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.513710][ T49] hsr_slave_0: left promiscuous mode [ 156.667196][ T49] hsr_slave_1: left promiscuous mode [ 156.825974][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.967490][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.109283][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.142270][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.172712][ T49] bridge_slave_1: left allmulticast mode [ 157.194058][ T49] bridge_slave_1: left promiscuous mode [ 157.219393][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.418799][ T49] bridge_slave_0: left allmulticast mode [ 157.424568][ T49] bridge_slave_0: left promiscuous mode [ 157.493305][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.353325][ T49] veth1_macvtap: left promiscuous mode [ 158.362863][ T49] veth0_macvtap: left promiscuous mode [ 158.371735][ T49] veth1_vlan: left promiscuous mode [ 158.377564][ T49] veth0_vlan: left promiscuous mode [ 159.086818][ T49] team0 (unregistering): Port device team_slave_1 removed [ 159.131754][ T49] team0 (unregistering): Port device team_slave_0 removed [ 159.177812][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.222388][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.577591][ T49] bond0 (unregistering): Released all slaves [ 159.699507][ T6542] netlink: 'syz.3.233': attribute type 39 has an invalid length. [ 160.162544][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.244859][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.160596][ T6568] capability: warning: `syz.2.239' uses deprecated v2 capabilities in a way that may be insecure [ 161.637446][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.645327][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.675966][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.683298][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.289891][ T6582] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 163.158907][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 163.263628][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.695668][ T6612] FAULT_INJECTION: forcing a failure. [ 164.695668][ T6612] name failslab, interval 1, probability 0, space 0, times 0 [ 164.757835][ T6612] CPU: 0 PID: 6612 Comm: syz.2.249 Not tainted syzkaller #0 [ 164.765588][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 164.775963][ T6612] Call Trace: [ 164.779291][ T6612] [ 164.782266][ T6612] dump_stack_lvl+0x18c/0x250 [ 164.787012][ T6612] ? show_regs_print_info+0x20/0x20 [ 164.792261][ T6612] ? load_image+0x420/0x420 [ 164.796812][ T6612] ? __might_sleep+0xe0/0xe0 [ 164.801463][ T6612] ? __lock_acquire+0x7d80/0x7d80 [ 164.806561][ T6612] should_fail_ex+0x394/0x4c0 [ 164.811412][ T6612] should_failslab+0x9/0x20 [ 164.815991][ T6612] slab_pre_alloc_hook+0x59/0x300 [ 164.821089][ T6612] ? sctp_association_new+0x89/0x25b0 [ 164.826529][ T6612] __kmem_cache_alloc_node+0x53/0x250 [ 164.831987][ T6612] ? sctp_association_new+0x89/0x25b0 [ 164.837516][ T6612] kmalloc_trace+0x2a/0xe0 [ 164.842008][ T6612] sctp_association_new+0x89/0x25b0 [ 164.847307][ T6612] ? __ipv6_addr_type+0x13e/0x2e0 [ 164.852393][ T6612] sctp_connect_new_asoc+0x2de/0x6a0 [ 164.857829][ T6612] ? __sctp_connect+0xd80/0xd80 [ 164.862847][ T6612] ? __ipv6_addr_type+0x13e/0x2e0 [ 164.867970][ T6612] ? sctp_inet6_send_verify+0x6e/0x300 [ 164.873490][ T6612] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 164.879403][ T6612] __sctp_connect+0x5b7/0xd80 [ 164.884421][ T6612] ? sctp_send_asconf+0x170/0x170 [ 164.889590][ T6612] ? __local_bh_enable_ip+0x13a/0x1c0 [ 164.895062][ T6612] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 164.900676][ T6612] ? security_sctp_bind_connect+0x89/0xb0 [ 164.906456][ T6612] sctp_setsockopt_connectx+0x104/0x1a0 [ 164.912062][ T6612] sctp_setsockopt+0x6d8/0x11e0 [ 164.916981][ T6612] ? sock_common_recvmsg+0x190/0x190 [ 164.922371][ T6612] do_sock_setsockopt+0x175/0x1a0 [ 164.927448][ T6612] ? __fdget+0x180/0x210 [ 164.931769][ T6612] __x64_sys_setsockopt+0x182/0x200 [ 164.937121][ T6612] do_syscall_64+0x55/0xb0 [ 164.941778][ T6612] ? clear_bhb_loop+0x40/0x90 [ 164.946520][ T6612] ? clear_bhb_loop+0x40/0x90 [ 164.951277][ T6612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.957320][ T6612] RIP: 0033:0x7f715259e159 [ 164.961789][ T6612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.981749][ T6612] RSP: 002b:00007f7153395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 164.990224][ T6612] RAX: ffffffffffffffda RBX: 00007f7152826090 RCX: 00007f715259e159 [ 164.998251][ T6612] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000005 [ 165.006278][ T6612] RBP: 00007f715263506b R08: 000000000000001c R09: 0000000000000000 [ 165.014299][ T6612] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 165.022324][ T6612] R13: 00007f7152826128 R14: 00007f7152826090 R15: 00007ffedea95828 [ 165.030373][ T6612] [ 165.285813][ T6629] ALSA: mixer_oss: invalid OSS volume '' [ 165.306424][ T6382] veth0_vlan: entered promiscuous mode [ 165.330087][ T6382] veth1_vlan: entered promiscuous mode [ 165.474738][ T6382] veth0_macvtap: entered promiscuous mode [ 165.519700][ T6382] veth1_macvtap: entered promiscuous mode [ 165.585228][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.643163][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.667891][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.687042][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.699084][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.710278][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.723174][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.753486][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.773396][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.787330][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.811491][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.822301][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.833537][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.875933][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.902601][ T6382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.663205][ T6382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.695986][ T6382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.727019][ T6382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.009362][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.033423][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.137591][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.147898][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.812303][ T27] audit: type=1326 audit(1789923187.076:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 173.823856][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 173.887943][ T27] audit: type=1326 audit(1789923187.076:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 174.007987][ T27] audit: type=1326 audit(1789923187.076:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 174.107335][ T27] audit: type=1326 audit(1789923187.076:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 174.669855][ T27] audit: type=1326 audit(1789923187.076:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 174.946171][ T27] audit: type=1326 audit(1789923187.076:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 175.198031][ T27] audit: type=1326 audit(1789923187.076:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 175.335880][ T6766] syz.1.291: attempt to access beyond end of device [ 175.335880][ T6766] loop0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 175.404863][ T27] audit: type=1326 audit(1789923187.076:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 175.786228][ T27] audit: type=1326 audit(1789923187.076:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 175.811874][ T27] audit: type=1326 audit(1789923187.076:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f715259e159 code=0x7ffc0000 [ 176.027276][ T6766] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 176.106597][ T6766] device-mapper: ioctl: error adding target to table [ 180.959242][ T6823] jffs2: notice: (6823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 181.030388][ T6830] ======================================================= [ 181.030388][ T6830] WARNING: The mand mount option has been deprecated and [ 181.030388][ T6830] and is ignored by this kernel. Remove the mand [ 181.030388][ T6830] option from the mount to silence this warning. [ 181.030388][ T6830] ======================================================= [ 181.031146][ T5782] Bluetooth: hci0: hardware error 0x69 [ 181.989536][ T6860] program syz.3.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.407192][ T28] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.657526][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 182.673638][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.715760][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.753176][ T28] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.768800][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.787182][ T28] usb 3-1: Product: syz [ 182.822841][ T28] usb 3-1: Manufacturer: syz [ 182.830538][ T28] usb 3-1: SerialNumber: syz [ 183.128549][ T5782] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 183.441095][ T28] usb 3-1: 0:2 : does not exist [ 183.538278][ T28] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 183.830285][ T28] usb 3-1: USB disconnect, device number 6 [ 184.127517][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.837008][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.328'. [ 185.077903][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 186.014248][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.048277][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.080255][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.050293][ T6935] syz.1.337 uses obsolete (PF_INET,SOCK_PACKET) [ 187.938482][ T5817] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.947962][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.981386][ T5817] usb 4-1: config 0 descriptor?? [ 188.015231][ T5817] usb 4-1: can't set config #0, error -71 [ 188.047991][ T5817] usb 4-1: USB disconnect, device number 3 [ 191.653824][ T6984] Zero length message leads to an empty skb [ 192.480556][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.496799][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.513677][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.587551][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.639199][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.661903][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.742052][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.788060][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.845297][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 192.889248][ T6992] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 194.805855][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.825715][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.569162][ T7076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.879804][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 202.885917][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 203.159102][ T7110] jffs2: notice: (7110) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 205.745951][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.390'. [ 208.704090][ T7167] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 212.934158][ T7222] macvtap1: entered promiscuous mode [ 212.947908][ T7222] vlan0: entered promiscuous mode [ 212.959639][ T7222] macvtap1: entered allmulticast mode [ 212.972380][ T7222] vlan0: entered allmulticast mode [ 213.077862][ T7222] veth0_vlan: entered allmulticast mode [ 213.191263][ T7223] macvtap2: entered promiscuous mode [ 213.196952][ T7223] macvtap2: entered allmulticast mode [ 215.448198][ T971] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 215.651259][ T971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.677570][ T971] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 215.715899][ T971] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 215.733421][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.756537][ T971] usb 3-1: Product: syz [ 215.770143][ T971] usb 3-1: Manufacturer: syz [ 215.786298][ T971] usb 3-1: SerialNumber: syz [ 216.092688][ T971] kaweth 3-1:1.0: Firmware present in device. [ 216.266125][ T971] kaweth 3-1:1.0: Error reading configuration (-71), no net device created [ 216.303938][ T971] kaweth: probe of 3-1:1.0 failed with error -5 [ 216.337048][ T971] usb 3-1: USB disconnect, device number 7 [ 216.746554][ T7286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.422'. [ 216.954218][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 218.751500][ T7292] team0: Port device team_slave_0 removed [ 220.308652][ T7293] macvtap1: entered promiscuous mode [ 220.314043][ T7293] vlan0: entered promiscuous mode [ 220.327149][ T7293] macvtap1: entered allmulticast mode [ 220.334035][ T7293] vlan0: entered allmulticast mode [ 220.344384][ T7293] veth0_vlan: entered allmulticast mode [ 220.382231][ T7297] macvtap2: entered promiscuous mode [ 220.394901][ T7297] macvtap2: entered allmulticast mode [ 225.395516][ T7357] macvtap1: entered promiscuous mode [ 225.418188][ T7357] vlan0: entered promiscuous mode [ 225.424036][ T7357] macvtap1: entered allmulticast mode [ 225.481665][ T7357] vlan0: entered allmulticast mode [ 225.508090][ T7357] veth0_vlan: entered allmulticast mode [ 225.610989][ T7361] macvtap2: entered promiscuous mode [ 225.620927][ T7361] macvtap2: entered allmulticast mode [ 236.784507][ T7499] FAULT_INJECTION: forcing a failure. [ 236.784507][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 236.808343][ T7499] CPU: 1 PID: 7499 Comm: syz.2.473 Not tainted syzkaller #0 [ 236.815906][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.826028][ T7499] Call Trace: [ 236.829362][ T7499] [ 236.832324][ T7499] dump_stack_lvl+0x18c/0x250 [ 236.837324][ T7499] ? show_regs_print_info+0x20/0x20 [ 236.842572][ T7499] ? load_image+0x420/0x420 [ 236.847104][ T7499] ? __might_sleep+0xe0/0xe0 [ 236.851723][ T7499] ? __lock_acquire+0x7d80/0x7d80 [ 236.856769][ T7499] ? lock_chain_count+0x20/0x20 [ 236.861644][ T7499] should_fail_ex+0x394/0x4c0 [ 236.866349][ T7499] should_failslab+0x9/0x20 [ 236.870874][ T7499] slab_pre_alloc_hook+0x59/0x300 [ 236.875925][ T7499] ? kvm_io_bus_register_dev+0xef/0x550 [ 236.881486][ T7499] ? kvm_io_bus_register_dev+0xef/0x550 [ 236.887161][ T7499] __kmem_cache_alloc_node+0x53/0x250 [ 236.892566][ T7499] ? kvm_io_bus_register_dev+0xef/0x550 [ 236.898139][ T7499] __kmalloc+0xa7/0x240 [ 236.902317][ T7499] ? kvm_get_bus+0x95/0x1d0 [ 236.906845][ T7499] kvm_io_bus_register_dev+0xef/0x550 [ 236.912260][ T7499] kvm_pic_init+0x1dc/0x2f0 [ 236.916784][ T7499] kvm_arch_vm_ioctl+0x12b1/0x1770 [ 236.922022][ T7499] ? kvm_arch_pm_notifier+0x2c0/0x2c0 [ 236.927620][ T7499] ? deref_stack_reg+0x1ab/0x230 [ 236.932596][ T7499] ? is_bpf_text_address+0x26/0x2a0 [ 236.937823][ T7499] ? __lock_acquire+0x7d80/0x7d80 [ 236.942903][ T7499] ? is_bpf_text_address+0x28f/0x2a0 [ 236.948207][ T7499] ? is_bpf_text_address+0x26/0x2a0 [ 236.953427][ T7499] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.959606][ T7499] ? kernel_text_address+0xa0/0xd0 [ 236.964754][ T7499] ? __kernel_text_address+0xd/0x30 [ 236.969986][ T7499] ? unwind_get_return_address+0x91/0xc0 [ 236.975633][ T7499] ? stack_trace_save+0x100/0x100 [ 236.980679][ T7499] ? arch_stack_walk+0x160/0x190 [ 236.985652][ T7499] ? stack_trace_save+0xaa/0x100 [ 236.990809][ T7499] ? stack_trace_snprint+0xf0/0xf0 [ 236.995949][ T7499] ? __stack_depot_save+0x1f/0x660 [ 237.001093][ T7499] ? do_syscall_64+0x55/0xb0 [ 237.005749][ T7499] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.011845][ T7499] ? kasan_set_track+0x5f/0x70 [ 237.016632][ T7499] ? kasan_set_track+0x4e/0x70 [ 237.021413][ T7499] ? kasan_save_free_info+0x28/0x40 [ 237.026639][ T7499] ? ____kasan_slab_free+0x126/0x1f0 [ 237.031953][ T7499] ? slab_free_freelist_hook+0x130/0x1a0 [ 237.037692][ T7499] ? __kmem_cache_free+0xba/0x1f0 [ 237.042752][ T7499] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 237.048409][ T7499] ? security_file_ioctl+0x70/0xa0 [ 237.053541][ T7499] ? __se_sys_ioctl+0x48/0x170 [ 237.058322][ T7499] ? do_syscall_64+0x55/0xb0 [ 237.062940][ T7499] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.069045][ T7499] ? mark_lock+0x94/0x320 [ 237.073399][ T7499] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 237.079403][ T7499] ? do_vfs_ioctl+0x156c/0x1cc0 [ 237.084277][ T7499] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 237.090063][ T7499] kvm_vm_ioctl+0x78f/0xb10 [ 237.094678][ T7499] ? kvm_device_release+0x1f0/0x1f0 [ 237.100007][ T7499] ? __kmem_cache_free+0xba/0x1f0 [ 237.105104][ T7499] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 237.110765][ T7499] ? tomoyo_path_number_perm+0x217/0x5e0 [ 237.116422][ T7499] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 237.122029][ T7499] ? __fget_files+0x28/0x460 [ 237.126655][ T7499] ? bpf_lsm_file_ioctl+0x9/0x10 [ 237.131616][ T7499] ? security_file_ioctl+0x80/0xa0 [ 237.136769][ T7499] ? kvm_device_release+0x1f0/0x1f0 [ 237.142048][ T7499] __se_sys_ioctl+0xfd/0x170 [ 237.146673][ T7499] do_syscall_64+0x55/0xb0 [ 237.151110][ T7499] ? clear_bhb_loop+0x40/0x90 [ 237.155825][ T7499] ? clear_bhb_loop+0x40/0x90 [ 237.160535][ T7499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.166555][ T7499] RIP: 0033:0x7f715259e159 [ 237.170987][ T7499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.190702][ T7499] RSP: 002b:00007f71533b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.199296][ T7499] RAX: ffffffffffffffda RBX: 00007f7152825fa0 RCX: 00007f715259e159 [ 237.207896][ T7499] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000007 [ 237.215982][ T7499] RBP: 00007f715263506b R08: 0000000000000000 R09: 0000000000000000 [ 237.223971][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.231975][ T7499] R13: 00007f7152826038 R14: 00007f7152825fa0 R15: 00007ffedea95828 [ 237.240066][ T7499] [ 237.407940][ T6996] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 237.607954][ T6996] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 237.618143][ T6996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.627523][ T6996] usb 2-1: Product: syz [ 237.634406][ T6996] usb 2-1: Manufacturer: syz [ 237.674584][ T6996] usb 2-1: SerialNumber: syz [ 238.173496][ T6996] usb 2-1: config 0 descriptor?? [ 238.888006][ T6996] usb 2-1: Firmware version (0.0) predates our first public release. [ 239.816666][ T7516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.397876][ T6996] usb 2-1: Please update to version 0.2 or newer [ 240.605168][ T6996] usb 2-1: USB disconnect, device number 4 [ 240.661999][ T7531] macvtap1: entered promiscuous mode [ 240.701963][ T7531] vlan0: entered promiscuous mode [ 240.708592][ T7531] macvtap1: entered allmulticast mode [ 240.714329][ T7531] vlan0: entered allmulticast mode [ 240.723791][ T7531] veth0_vlan: entered allmulticast mode [ 240.854273][ T7536] macvtap2: entered promiscuous mode [ 240.860147][ T7536] macvtap2: entered allmulticast mode [ 242.054386][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 242.110493][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 243.434182][ T7585] misc userio: Invalid payload size [ 244.007841][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 244.208857][ T8] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 244.227803][ T8] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 244.242744][ T8] usb 2-1: Product: syz [ 244.250410][ T8] usb 2-1: SerialNumber: syz [ 244.263701][ T8] usb 2-1: config 0 descriptor?? [ 244.501119][ T8] hso 2-1:0.0: Failed to find BULK IN ep [ 244.706572][ T8] usb 2-1: USB disconnect, device number 5 [ 245.392002][ T7619] tipc: Started in network mode [ 245.397259][ T7619] tipc: Node identity 1000001, cluster identity 4369 [ 245.417802][ T7619] tipc: Node number set to 16777217 [ 245.426648][ T7619] tipc: Cannot configure node identity twice [ 245.440625][ T7619] tipc: New replicast peer: 127.0.0.1 [ 245.450012][ T7619] tipc: Enabled bearer , priority 10 [ 249.045089][ T7661] netlink: 'syz.2.523': attribute type 3 has an invalid length. [ 249.080997][ T7661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.523'. [ 249.104496][ T7661] ------------[ cut here ]------------ [ 249.110222][ T7661] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 249.144341][ T7661] WARNING: CPU: 0 PID: 7661 at net/sched/cls_u32.c:855 u32_change+0x1df2/0x2860 [ 249.153914][ T7661] Modules linked in: [ 249.157943][ T7661] CPU: 0 PID: 7661 Comm: syz.2.523 Not tainted syzkaller #0 [ 249.165454][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.175643][ T7661] RIP: 0010:u32_change+0x1df2/0x2860 [ 249.181048][ T7661] Code: f8 eb 59 e8 10 40 ce f8 c6 05 d6 6b bd 05 01 b9 10 00 00 00 48 c7 c7 60 8d c8 8b 4c 89 f6 48 c7 c2 e0 8d c8 8b e8 ee 03 98 f8 <0f> 0b e9 10 ef ff ff e8 e2 3f ce f8 eb 24 e8 db 3f ce f8 c6 05 36 [ 249.202025][ T7661] RSP: 0018:ffffc900037fed60 EFLAGS: 00010246 [ 249.208398][ T7661] RAX: bb99c580f8db8f00 RBX: ffff88802dfde800 RCX: 0000000000080000 [ 249.216466][ T7661] RDX: ffffc9000cde3000 RSI: 00000000000086af RDI: 00000000000086b0 [ 249.224584][ T7661] RBP: ffffc900037feef8 R08: ffffc900037fea67 R09: 1ffff920006ffd4c [ 249.232673][ T7661] R10: dffffc0000000000 R11: fffff520006ffd4d R12: 1ffff920006ffdbc [ 249.240807][ T7661] R13: ffff88802dff28e8 R14: 0000000000000020 R15: 0000000000000001 [ 249.248975][ T7661] FS: 00007f71533b66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 249.258249][ T7661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.264896][ T7661] CR2: 0000000000000000 CR3: 000000001bffb000 CR4: 00000000003526f0 [ 249.273015][ T7661] Call Trace: [ 249.276336][ T7661] [ 249.279609][ T7661] ? u32_get+0x370/0x370 [ 249.284031][ T7661] ? u32_get+0x370/0x370 [ 249.288386][ T7661] tc_new_tfilter+0x1253/0x1840 [ 249.293324][ T7661] ? tcf_proto_signal_destroying+0x240/0x240 [ 249.300447][ T7661] ? rcu_read_unlock+0x8c/0xa0 [ 249.305295][ T7661] ? tcf_proto_signal_destroying+0x240/0x240 [ 249.311590][ T7661] ? tcf_proto_signal_destroying+0x240/0x240 [ 249.317791][ T7661] rtnetlink_rcv_msg+0x892/0xf90 [ 249.322804][ T7661] ? rtnetlink_rcv_msg+0x220/0xf90 [ 249.328051][ T7661] ? rtnetlink_bind+0x80/0x80 [ 249.332794][ T7661] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 249.339009][ T7661] ? lock_chain_count+0x20/0x20 [ 249.343926][ T7661] ? __local_bh_enable_ip+0x13a/0x1c0 [ 249.349416][ T7661] ? lockdep_hardirqs_on+0x98/0x150 [ 249.354671][ T7661] ? __local_bh_enable_ip+0x13a/0x1c0 [ 249.360188][ T7661] ? _local_bh_enable+0xa0/0xa0 [ 249.365094][ T7661] ? __dev_queue_xmit+0x272/0x37e0 [ 249.370504][ T7661] ? __dev_queue_xmit+0x1329/0x37e0 [ 249.375765][ T7661] ? __dev_queue_xmit+0x272/0x37e0 [ 249.381050][ T7661] ? ref_tracker_free+0x686/0x830 [ 249.386234][ T7661] netlink_rcv_skb+0x235/0x4c0 [ 249.391118][ T7661] ? rtnetlink_bind+0x80/0x80 [ 249.395861][ T7661] ? netlink_ack+0x1160/0x1160 [ 249.401700][ T7661] ? __lock_acquire+0x7d80/0x7d80 [ 249.406806][ T7661] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.412304][ T7661] netlink_unicast+0x7b1/0x930 [ 249.417149][ T7661] netlink_sendmsg+0x8d0/0xbf0 [ 249.422062][ T7661] ? netlink_getsockopt+0x590/0x590 [ 249.427314][ T7661] ? apparmor_socket_sendmsg+0x8e/0x330 [ 249.432977][ T7661] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.438511][ T7661] ? security_socket_sendmsg+0x80/0xa0 [ 249.444027][ T7661] ? netlink_getsockopt+0x590/0x590 [ 249.449357][ T7661] ____sys_sendmsg+0x61b/0x980 [ 249.454277][ T7661] ? __asan_memset+0x22/0x40 [ 249.459005][ T7661] ? __sys_sendmsg_sock+0x30/0x30 [ 249.464093][ T7661] ? __import_iovec+0x5f2/0x850 [ 249.469085][ T7661] ? import_iovec+0x73/0xa0 [ 249.473686][ T7661] ___sys_sendmsg+0x2a6/0x360 [ 249.478950][ T7661] ? __sys_sendmsg+0x2b0/0x2b0 [ 249.483786][ T7661] ? futex_setup_timer+0xc0/0xc0 [ 249.489055][ T7661] __sys_sendmmsg+0x2ca/0x510 [ 249.493806][ T7661] ? __ia32_sys_sendmsg+0x90/0x90 [ 249.499161][ T7661] ? __ia32_sys_get_robust_list+0x110/0x110 [ 249.506233][ T7661] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 249.512544][ T7661] ? lock_chain_count+0x20/0x20 [ 249.517480][ T7661] __x64_sys_sendmmsg+0xa0/0xb0 [ 249.523039][ T7661] do_syscall_64+0x55/0xb0 [ 249.527528][ T7661] ? clear_bhb_loop+0x40/0x90 [ 249.532427][ T7661] ? clear_bhb_loop+0x40/0x90 [ 249.537171][ T7661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.543372][ T7661] RIP: 0033:0x7f715259e159 [ 249.547908][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.567921][ T7661] RSP: 002b:00007f71533b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 249.576411][ T7661] RAX: ffffffffffffffda RBX: 00007f7152825fa0 RCX: 00007f715259e159 [ 249.584518][ T7661] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 249.592636][ T7661] RBP: 00007f715263506b R08: 0000000000000000 R09: 0000000000000000 [ 249.601173][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.610578][ T7661] R13: 00007f7152826038 R14: 00007f7152825fa0 R15: 00007ffedea95828 [ 249.618971][ T7661] [ 249.622049][ T7661] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.629376][ T7661] CPU: 0 PID: 7661 Comm: syz.2.523 Not tainted syzkaller #0 [ 249.636710][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.646808][ T7661] Call Trace: [ 249.650118][ T7661] [ 249.653061][ T7661] dump_stack_lvl+0x18c/0x250 [ 249.657761][ T7661] ? show_regs_print_info+0x20/0x20 [ 249.662975][ T7661] ? load_image+0x420/0x420 [ 249.667502][ T7661] panic+0x2ca/0x720 [ 249.671411][ T7661] ? bpf_jit_dump+0xd0/0xd0 [ 249.675940][ T7661] __warn+0x2e0/0x470 [ 249.679934][ T7661] ? u32_change+0x1df2/0x2860 [ 249.684638][ T7661] ? u32_change+0x1df2/0x2860 [ 249.689322][ T7661] report_bug+0x2be/0x4f0 [ 249.693667][ T7661] ? u32_change+0x1df2/0x2860 [ 249.698353][ T7661] ? u32_change+0x1df2/0x2860 [ 249.703039][ T7661] ? u32_change+0x1df4/0x2860 [ 249.707737][ T7661] handle_bug+0xcf/0x120 [ 249.712014][ T7661] exc_invalid_op+0x1a/0x50 [ 249.716536][ T7661] asm_exc_invalid_op+0x1a/0x20 [ 249.721428][ T7661] RIP: 0010:u32_change+0x1df2/0x2860 [ 249.726724][ T7661] Code: f8 eb 59 e8 10 40 ce f8 c6 05 d6 6b bd 05 01 b9 10 00 00 00 48 c7 c7 60 8d c8 8b 4c 89 f6 48 c7 c2 e0 8d c8 8b e8 ee 03 98 f8 <0f> 0b e9 10 ef ff ff e8 e2 3f ce f8 eb 24 e8 db 3f ce f8 c6 05 36 [ 249.746354][ T7661] RSP: 0018:ffffc900037fed60 EFLAGS: 00010246 [ 249.752434][ T7661] RAX: bb99c580f8db8f00 RBX: ffff88802dfde800 RCX: 0000000000080000 [ 249.760418][ T7661] RDX: ffffc9000cde3000 RSI: 00000000000086af RDI: 00000000000086b0 [ 249.768398][ T7661] RBP: ffffc900037feef8 R08: ffffc900037fea67 R09: 1ffff920006ffd4c [ 249.776381][ T7661] R10: dffffc0000000000 R11: fffff520006ffd4d R12: 1ffff920006ffdbc [ 249.784362][ T7661] R13: ffff88802dff28e8 R14: 0000000000000020 R15: 0000000000000001 [ 249.792392][ T7661] ? u32_get+0x370/0x370 [ 249.796663][ T7661] ? u32_get+0x370/0x370 [ 249.800913][ T7661] tc_new_tfilter+0x1253/0x1840 [ 249.805894][ T7661] ? tcf_proto_signal_destroying+0x240/0x240 [ 249.811906][ T7661] ? rcu_read_unlock+0x8c/0xa0 [ 249.816702][ T7661] ? tcf_proto_signal_destroying+0x240/0x240 [ 249.822697][ T7661] ? tcf_proto_signal_destroying+0x240/0x240 [ 249.828706][ T7661] rtnetlink_rcv_msg+0x892/0xf90 [ 249.833693][ T7661] ? rtnetlink_rcv_msg+0x220/0xf90 [ 249.838828][ T7661] ? rtnetlink_bind+0x80/0x80 [ 249.843523][ T7661] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 249.849518][ T7661] ? lock_chain_count+0x20/0x20 [ 249.854388][ T7661] ? __local_bh_enable_ip+0x13a/0x1c0 [ 249.859773][ T7661] ? lockdep_hardirqs_on+0x98/0x150 [ 249.864996][ T7661] ? __local_bh_enable_ip+0x13a/0x1c0 [ 249.870377][ T7661] ? _local_bh_enable+0xa0/0xa0 [ 249.875242][ T7661] ? __dev_queue_xmit+0x272/0x37e0 [ 249.880366][ T7661] ? __dev_queue_xmit+0x1329/0x37e0 [ 249.885580][ T7661] ? __dev_queue_xmit+0x272/0x37e0 [ 249.890731][ T7661] ? ref_tracker_free+0x686/0x830 [ 249.895773][ T7661] netlink_rcv_skb+0x235/0x4c0 [ 249.900664][ T7661] ? rtnetlink_bind+0x80/0x80 [ 249.905360][ T7661] ? netlink_ack+0x1160/0x1160 [ 249.910157][ T7661] ? __lock_acquire+0x7d80/0x7d80 [ 249.915290][ T7661] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.920512][ T7661] netlink_unicast+0x7b1/0x930 [ 249.925386][ T7661] netlink_sendmsg+0x8d0/0xbf0 [ 249.930171][ T7661] ? netlink_getsockopt+0x590/0x590 [ 249.935410][ T7661] ? apparmor_socket_sendmsg+0x8e/0x330 [ 249.940973][ T7661] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.946273][ T7661] ? security_socket_sendmsg+0x80/0xa0 [ 249.951747][ T7661] ? netlink_getsockopt+0x590/0x590 [ 249.956960][ T7661] ____sys_sendmsg+0x61b/0x980 [ 249.961749][ T7661] ? __asan_memset+0x22/0x40 [ 249.966356][ T7661] ? __sys_sendmsg_sock+0x30/0x30 [ 249.971419][ T7661] ? __import_iovec+0x5f2/0x850 [ 249.976332][ T7661] ? import_iovec+0x73/0xa0 [ 249.980865][ T7661] ___sys_sendmsg+0x2a6/0x360 [ 249.985568][ T7661] ? __sys_sendmsg+0x2b0/0x2b0 [ 249.990990][ T7661] ? futex_setup_timer+0xc0/0xc0 [ 249.995971][ T7661] __sys_sendmmsg+0x2ca/0x510 [ 250.000673][ T7661] ? __ia32_sys_sendmsg+0x90/0x90 [ 250.005717][ T7661] ? __ia32_sys_get_robust_list+0x110/0x110 [ 250.011643][ T7661] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 250.017652][ T7661] ? lock_chain_count+0x20/0x20 [ 250.022528][ T7661] __x64_sys_sendmmsg+0xa0/0xb0 [ 250.027487][ T7661] do_syscall_64+0x55/0xb0 [ 250.032012][ T7661] ? clear_bhb_loop+0x40/0x90 [ 250.036699][ T7661] ? clear_bhb_loop+0x40/0x90 [ 250.041392][ T7661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.047293][ T7661] RIP: 0033:0x7f715259e159 [ 250.051719][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.071511][ T7661] RSP: 002b:00007f71533b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.079967][ T7661] RAX: ffffffffffffffda RBX: 00007f7152825fa0 RCX: 00007f715259e159 [ 250.087955][ T7661] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 250.096198][ T7661] RBP: 00007f715263506b R08: 0000000000000000 R09: 0000000000000000 [ 250.104180][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.112164][ T7661] R13: 00007f7152826038 R14: 00007f7152825fa0 R15: 00007ffedea95828 [ 250.120162][ T7661] [ 250.123563][ T7661] Kernel Offset: disabled [ 250.128076][ T7661] Rebooting in 86400 seconds..