last executing test programs: 1.479340772s ago: executing program 1 (id=792): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 1.42754924s ago: executing program 3 (id=794): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004c810) 1.327180657s ago: executing program 3 (id=796): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18, 0xd, "fee8a2ab70fc17daaca7bd6447a4b4e00d9683dda1afb94c1956b73fd95a8e4210c80000000300000000000000000000000000e0ffd0d2b95600", "2809e8dbe10859892d0000b420a9ca1f40f05f819e0117020000f20020000000e90300100000000000000000000000000000000000003fa2a49be15510e700", "90be8b1c5512406c5f000000000000008000000900", [0x4, 0x5]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r0) 1.322516958s ago: executing program 1 (id=797): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@usrquota}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0) 1.180543201s ago: executing program 1 (id=800): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept$inet6(r0, 0x0, 0x0) 1.155659189s ago: executing program 3 (id=801): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080089064803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.042670729s ago: executing program 0 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000080)=0x4, 0x4) 1.022432525s ago: executing program 1 (id=804): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 974.353849ms ago: executing program 3 (id=806): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514a10cc008001b0007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d000106b062e585e4a85dc9b1335d1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 906.680272ms ago: executing program 0 (id=807): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r0, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}]}]}, 0x28}}, 0x0) 851.736595ms ago: executing program 1 (id=808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000003c0)=@svm={0x9, 0x1, 0x1080, {0x8000000}, {"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"}}) 837.390651ms ago: executing program 3 (id=809): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) 764.666379ms ago: executing program 0 (id=811): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01134f9b3a000000fc006700000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800c300741300000800c4"], 0x3c}}, 0x40000) 696.014437ms ago: executing program 3 (id=812): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x30, 0x5a, 0xbd, 0x40, 0x22b8, 0x6425, 0x8ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xae, 0x5, 0x10, 0x2}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 633.357725ms ago: executing program 1 (id=813): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="9170") 592.363586ms ago: executing program 0 (id=814): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) 541.873741ms ago: executing program 0 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 498.337206ms ago: executing program 0 (id=816): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 334.673348ms ago: executing program 2 (id=819): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) 292.658572ms ago: executing program 2 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) 217.674986ms ago: executing program 2 (id=821): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xa, 0xfe, 0x8801}]}) write$ppp(r0, &(0x7f0000000000)="00ba", 0x2) 107.014718ms ago: executing program 2 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 60.663996ms ago: executing program 2 (id=823): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600040001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006", 0x21}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe45) 0s ago: executing program 2 (id=824): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 73.506656][ T5810] cgroup: Unknown subsys name 'net' [ 73.603931][ T5810] cgroup: Unknown subsys name 'cpuset' [ 73.613542][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.979355][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.086331][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.098087][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.109106][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.121567][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.130873][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.189137][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.198436][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.207706][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.218578][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.230003][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.254028][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.263324][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.274514][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.285278][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.286942][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.306180][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.315946][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.324882][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.333998][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.334124][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.848820][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 79.068869][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 79.110766][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 79.130221][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.137931][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.145690][ T5821] bridge_slave_0: entered allmulticast mode [ 79.153571][ T5821] bridge_slave_0: entered promiscuous mode [ 79.195596][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.210952][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.219032][ T5821] bridge_slave_1: entered allmulticast mode [ 79.229206][ T5821] bridge_slave_1: entered promiscuous mode [ 79.330691][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 79.358809][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.397327][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.473214][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.481298][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.488924][ T5825] bridge_slave_0: entered allmulticast mode [ 79.497651][ T5825] bridge_slave_0: entered promiscuous mode [ 79.521161][ T5821] team0: Port device team_slave_0 added [ 79.539053][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.546829][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.554453][ T5825] bridge_slave_1: entered allmulticast mode [ 79.562528][ T5825] bridge_slave_1: entered promiscuous mode [ 79.570190][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.577937][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.585710][ T5828] bridge_slave_0: entered allmulticast mode [ 79.593291][ T5828] bridge_slave_0: entered promiscuous mode [ 79.601837][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.609267][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.617129][ T5828] bridge_slave_1: entered allmulticast mode [ 79.624504][ T5828] bridge_slave_1: entered promiscuous mode [ 79.633871][ T5821] team0: Port device team_slave_1 added [ 79.729020][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.736115][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.767480][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.799904][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.817078][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.833808][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.842988][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.872237][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.884551][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.892941][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.900425][ T5829] bridge_slave_0: entered allmulticast mode [ 79.909483][ T5829] bridge_slave_0: entered promiscuous mode [ 79.922609][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.935789][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.967849][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.975798][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.985236][ T5829] bridge_slave_1: entered allmulticast mode [ 79.995452][ T5829] bridge_slave_1: entered promiscuous mode [ 80.068306][ T5828] team0: Port device team_slave_0 added [ 80.092238][ T5825] team0: Port device team_slave_0 added [ 80.103420][ T5828] team0: Port device team_slave_1 added [ 80.125476][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.138059][ T5825] team0: Port device team_slave_1 added [ 80.174184][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.215935][ T5821] hsr_slave_0: entered promiscuous mode [ 80.223549][ T5821] hsr_slave_1: entered promiscuous mode [ 80.231698][ T5833] Bluetooth: hci0: command tx timeout [ 80.262844][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.269838][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.297019][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.311452][ T5833] Bluetooth: hci1: command tx timeout [ 80.319081][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.326253][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.352715][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.386178][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.393697][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.393765][ T5833] Bluetooth: hci2: command tx timeout [ 80.421570][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.427572][ T5147] Bluetooth: hci3: command tx timeout [ 80.476605][ T5829] team0: Port device team_slave_0 added [ 80.484616][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.492029][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.520330][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.552055][ T5829] team0: Port device team_slave_1 added [ 80.589853][ T5828] hsr_slave_0: entered promiscuous mode [ 80.597053][ T5828] hsr_slave_1: entered promiscuous mode [ 80.604013][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 80.610055][ T5828] Cannot create hsr debugfs directory [ 80.651982][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.659305][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.686118][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.735696][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.742798][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.769868][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.805573][ T5825] hsr_slave_0: entered promiscuous mode [ 80.812564][ T5825] hsr_slave_1: entered promiscuous mode [ 80.819002][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 80.825428][ T5825] Cannot create hsr debugfs directory [ 81.012053][ T5829] hsr_slave_0: entered promiscuous mode [ 81.019600][ T5829] hsr_slave_1: entered promiscuous mode [ 81.027238][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 81.037237][ T5829] Cannot create hsr debugfs directory [ 81.367098][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.381971][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.419683][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.455116][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.544936][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.564037][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.574872][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.602895][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.702726][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.716418][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.728464][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.740037][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.975030][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.999459][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.033888][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.054489][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.095139][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.154450][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.190857][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.198621][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.236697][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.244162][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.290871][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.310711][ T5147] Bluetooth: hci0: command tx timeout [ 82.373546][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.400742][ T5147] Bluetooth: hci1: command tx timeout [ 82.414086][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.446750][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.453942][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.469365][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.482275][ T5833] Bluetooth: hci2: command tx timeout [ 82.488525][ T5147] Bluetooth: hci3: command tx timeout [ 82.512031][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.519317][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.582384][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.589638][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.616326][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.623607][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.707056][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.777404][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.834531][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.841863][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.862403][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.898658][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.905913][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.193274][ T5821] veth0_vlan: entered promiscuous mode [ 83.207502][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.238394][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.275580][ T5821] veth1_vlan: entered promiscuous mode [ 83.434811][ T5828] veth0_vlan: entered promiscuous mode [ 83.472029][ T5825] veth0_vlan: entered promiscuous mode [ 83.482337][ T5821] veth0_macvtap: entered promiscuous mode [ 83.496824][ T5828] veth1_vlan: entered promiscuous mode [ 83.518127][ T5821] veth1_macvtap: entered promiscuous mode [ 83.531497][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.546953][ T5825] veth1_vlan: entered promiscuous mode [ 83.597298][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.631232][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.676078][ T32] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.686725][ T32] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.696764][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.708300][ T5828] veth0_macvtap: entered promiscuous mode [ 83.729222][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.740178][ T5825] veth0_macvtap: entered promiscuous mode [ 83.761042][ T5828] veth1_macvtap: entered promiscuous mode [ 83.788539][ T5825] veth1_macvtap: entered promiscuous mode [ 83.805017][ T5829] veth0_vlan: entered promiscuous mode [ 83.853208][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.901669][ T5829] veth1_vlan: entered promiscuous mode [ 83.919693][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.931213][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.980219][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.989885][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.005194][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.015570][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.022848][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.036752][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.046569][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.056049][ T32] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.090835][ T32] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.101161][ T32] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.129778][ T32] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.178608][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.196028][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.260387][ T5829] veth0_macvtap: entered promiscuous mode [ 84.320148][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.329135][ T5829] veth1_macvtap: entered promiscuous mode [ 84.339911][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.346673][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.371834][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.393726][ T5147] Bluetooth: hci0: command tx timeout [ 84.443194][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.470904][ T5147] Bluetooth: hci1: command tx timeout [ 84.487528][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.505998][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.551286][ T5833] Bluetooth: hci2: command tx timeout [ 84.556921][ T5147] Bluetooth: hci3: command tx timeout [ 84.573520][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.574207][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.581756][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.617520][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.647923][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.659194][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.685038][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.694890][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.847595][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.988172][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.008832][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.113623][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.146655][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.958532][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 85.958678][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 86.140400][ T5953] GUP no longer grows the stack in syz.0.18 (5953): 200000009000-20000000a000 (200000005000) [ 86.175086][ T5953] CPU: 0 UID: 0 PID: 5953 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 86.175118][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 86.175136][ T5953] Call Trace: [ 86.175144][ T5953] [ 86.175152][ T5953] dump_stack_lvl+0xe8/0x150 [ 86.175187][ T5953] __get_user_pages+0x2378/0x2720 [ 86.175212][ T5953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.175258][ T5953] ? __gup_longterm_locked+0xc4e/0x1630 [ 86.175281][ T5953] ? down_read_killable+0x1bb/0x340 [ 86.175313][ T5953] __gup_longterm_locked+0xdcf/0x1630 [ 86.175356][ T5953] gup_fast_fallback+0x1d84/0x20d0 [ 86.175404][ T5953] ? __pfx_gup_fast_fallback+0x10/0x10 [ 86.175424][ T5953] ? futex_unqueue+0x22/0x240 [ 86.175449][ T5953] ? futex_unqueue+0x22/0x240 [ 86.175471][ T5953] ? is_valid_gup_args+0x11f/0x200 [ 86.175494][ T5953] ? get_user_pages_fast+0x4d/0xb0 [ 86.175517][ T5953] __iov_iter_get_pages_alloc+0x370/0xa10 [ 86.175552][ T5953] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 86.175580][ T5953] iov_iter_get_pages2+0x5e/0xa0 [ 86.175611][ T5953] __se_sys_vmsplice+0x7c7/0x1620 [ 86.175650][ T5953] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 86.175674][ T5953] ? __pfx_futex_wait+0x10/0x10 [ 86.175748][ T5953] do_syscall_64+0x14d/0xf80 [ 86.175768][ T5953] ? trace_irq_disable+0x3b/0x150 [ 86.175788][ T5953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.175805][ T5953] ? clear_bhb_loop+0x40/0x90 [ 86.175824][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.175841][ T5953] RIP: 0033:0x7efd6879c799 [ 86.175868][ T5953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.175883][ T5953] RSP: 002b:00007efd69729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 86.175903][ T5953] RAX: ffffffffffffffda RBX: 00007efd68a15fa0 RCX: 00007efd6879c799 [ 86.175917][ T5953] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 86.175929][ T5953] RBP: 00007efd68832c99 R08: 0000000000000000 R09: 0000000000000000 [ 86.175940][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.175949][ T5953] R13: 00007efd68a16038 R14: 00007efd68a15fa0 R15: 00007fff29053d48 [ 86.175975][ T5953] [ 86.480603][ T5147] Bluetooth: hci0: command tx timeout [ 86.555946][ T5147] Bluetooth: hci1: command tx timeout [ 86.610913][ T5957] binder: 5956:5957 ioctl c0306201 0 returned -14 [ 86.641134][ T5147] Bluetooth: hci3: command tx timeout [ 86.651538][ T5147] Bluetooth: hci2: command tx timeout [ 86.858802][ T5969] input: syz0 as /devices/virtual/input/input5 [ 86.914682][ T9] cfg80211: failed to load regulatory.db [ 87.019001][ T29] audit: type=1326 audit(1773244009.384:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd565d9c799 code=0x0 [ 87.393624][ T5997] netlink: 'syz.2.37': attribute type 2 has an invalid length. [ 88.797083][ T6035] warning: `syz.2.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.876777][ T6039] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.071092][ T6043] netlink: 770 bytes leftover after parsing attributes in process `syz.3.58'. [ 89.178936][ T6049] veth1_macvtap: left promiscuous mode [ 89.200238][ T6049] macsec0: entered promiscuous mode [ 89.232310][ T6049] veth1_macvtap: entered promiscuous mode [ 89.239174][ T6049] macsec0: left promiscuous mode [ 90.015930][ T6081] netlink: 48 bytes leftover after parsing attributes in process `syz.0.75'. [ 90.450072][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.492326][ T6096] ======================================================= [ 90.492326][ T6096] WARNING: The mand mount option has been deprecated and [ 90.492326][ T6096] and is ignored by this kernel. Remove the mand [ 90.492326][ T6096] option from the mount to silence this warning. [ 90.492326][ T6096] ======================================================= [ 91.721240][ T6144] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 91.733776][ T6144] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.273765][ T6166] netlink: 'syz.3.114': attribute type 4 has an invalid length. [ 93.246141][ T6207] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 93.295816][ T6207] syzkaller0: owner set to 774 [ 93.846013][ T6231] capability: warning: `syz.0.143' uses deprecated v2 capabilities in a way that may be insecure [ 93.878030][ T6231] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 93.929649][ T6231] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 93.985903][ T6231] overlayfs: failed to set uuid (42/file0, err=-13); falling back to uuid=null. [ 94.962666][ T6273] serio: Serial port ttyS3 [ 95.525768][ T6298] netlink: 1 bytes leftover after parsing attributes in process `syz.1.175'. [ 95.776469][ T6308] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.181'. [ 96.603712][ T6340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.074343][ T6365] netlink: 'syz.2.209': attribute type 19 has an invalid length. [ 97.094031][ T6365] netlink: 180 bytes leftover after parsing attributes in process `syz.2.209'. [ 97.729226][ T6388] netlink: 'syz.2.220': attribute type 25 has an invalid length. [ 97.742708][ T6388] netlink: 'syz.2.220': attribute type 28 has an invalid length. [ 98.578733][ T6426] netlink: 180 bytes leftover after parsing attributes in process `syz.0.239'. [ 99.023922][ T6440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.247'. [ 99.061197][ T6440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.247'. [ 99.078008][ T6445] input: syz1 as /devices/virtual/input/input6 [ 99.406130][ T6459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.669835][ T6469] block device autoloading is deprecated and will be removed. [ 100.144927][ T6490] netlink: 64 bytes leftover after parsing attributes in process `syz.0.270'. [ 100.257998][ T6497] Bluetooth: MGMT ver 1.23 [ 100.505340][ T6509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 101.820397][ T5147] block nbd0: Receive control failed (result -32) [ 102.645348][ T6598] sctp: [Deprecated]: syz.1.322 (pid 6598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.645348][ T6598] Use struct sctp_sack_info instead [ 103.036283][ T29] audit: type=1326 audit(1773244282.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.2.332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c38d9c799 code=0x0 [ 103.087188][ T29] audit: type=1326 audit(1773244282.435:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6619 comm="syz.0.334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd6879c799 code=0x0 [ 103.652874][ T6647] netlink: 56 bytes leftover after parsing attributes in process `syz.1.345'. [ 103.837475][ T6653] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 104.169118][ T6668] Failed to get privilege flags for destination (handle=0x2:0x3) [ 104.319453][ T6676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.652831][ T6693] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 104.662982][ T6693] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 104.675438][ T6693] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 104.997414][ T6705] netlink: 'syz.2.370': attribute type 83 has an invalid length. [ 105.153944][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 105.259325][ T6717] netlink: 'syz.2.376': attribute type 2 has an invalid length. [ 105.297749][ T6717] !: entered promiscuous mode [ 105.315119][ T6717] netlink: 'syz.2.376': attribute type 2 has an invalid length. [ 105.326761][ T6717] !: left promiscuous mode [ 105.354924][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 105.369457][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.383311][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.394259][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.409669][ T9] usb 1-1: Product: syz [ 105.414637][ T9] usb 1-1: Manufacturer: syz [ 105.430755][ T9] usb 1-1: SerialNumber: syz [ 105.482681][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 105.483123][ T9] usb 1-1: config 0 descriptor?? [ 105.537758][ T9] usb 1-1: selecting invalid altsetting 0 [ 105.785074][ T9] usb 1-1: USB disconnect, device number 2 [ 106.654984][ T6771] netlink: 160 bytes leftover after parsing attributes in process `syz.0.400'. [ 106.677545][ T6773] syz.2.401 uses obsolete (PF_INET,SOCK_PACKET) [ 106.918767][ T6784] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.407'. [ 107.616507][ T6816] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 107.702293][ T6816] team0: Port device dummy0 added [ 107.933633][ T6834] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 107.961505][ T6834] netlink: 'syz.1.430': attribute type 2 has an invalid length. [ 107.987593][ T6834] netlink: 'syz.1.430': attribute type 1 has an invalid length. [ 108.010938][ T6834] netlink: 'syz.1.430': attribute type 3 has an invalid length. [ 108.022277][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 109.891302][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.465'. [ 111.484923][ T6967] [U] [ 111.488034][ T6967] [U] [ 111.490753][ T6967] [U] N [ 111.494059][ T6967] [U] [ 111.527153][ T6967] [U] [ 111.529911][ T6967] [U] [ 111.532632][ T6967] [U] [ 111.535436][ T6967] [U] [ 111.550665][ T6967] [U] [ 111.553442][ T6967] [U] [ 111.556162][ T6967] [U] [ 111.558962][ T6967] [U] [ 111.576795][ T6967] [U] [ 111.579633][ T6967] [U] [ 111.582358][ T6967] [U] [ 111.585067][ T6967] [U] [ 111.611536][ T6967] [U] [ 111.614285][ T6967] [U] [ 111.617027][ T6967] [U] [ 111.619746][ T6967] [U] [ 111.641694][ T6967] [U] [ 111.644531][ T6967] [U] [ 111.647238][ T6967] [U] [ 111.649939][ T6967] [U] [ 111.673455][ T6967] [U] [ 111.676209][ T6967] [U] [ 111.678951][ T6967] [U] [ 111.681670][ T6967] [U] [ 111.705071][ T6967] [U] [ 111.707847][ T6967] [U] [ 111.710554][ T6967] [U] [ 111.713789][ T6967] [U] [ 111.738671][ T6967] [U] [ 111.741427][ T6967] [U] [ 111.744142][ T6967] [U] [ 111.746855][ T6967] [U] [ 111.749566][ T6967] [U] [ 111.763942][ T6967] [U] [ 111.766740][ T6967] [U] [ 111.769453][ T6967] [U] [ 111.772183][ T6967] [U] [ 111.787164][ T6967] [U] [ 111.789924][ T6967] [U] [ 111.792760][ T6967] [U] [ 111.795488][ T6967] [U] [ 111.820323][ T6967] [U] [ 111.823080][ T6967] [U] [ 111.825790][ T6967] [U] [ 111.828506][ T6967] [U] [ 111.857059][ T6967] [U] [ 111.859826][ T6967] [U] [ 111.862534][ T6967] [U] [ 111.865330][ T6967] [U] [ 111.891516][ T6967] [U] [ 111.894287][ T6967] [U] [ 111.897086][ T6967] [U] [ 111.899800][ T6967] [U] [ 111.903685][ T6967] [U] [ 111.906557][ T6967] [U] [ 111.909512][ T6967] [U] [ 111.912226][ T6967] [U] [ 111.938459][ T6967] [U] [ 111.941301][ T6967] [U] [ 111.944104][ T6967] [U] [ 111.946813][ T6967] [U] [ 111.972550][ T6967] [U] [ 111.975517][ T6967] [U] [ 111.978446][ T6967] [U] [ 111.981164][ T6967] [U] [ 112.011287][ T6967] [U] [ 112.014374][ T6967] [U] [ 112.017086][ T6967] [U] [ 112.020318][ T6967] [U] [ 112.046484][ T6967] [U] [ 112.049445][ T6967] [U] [ 112.052155][ T6967] [U] [ 112.054956][ T6967] [U] [ 112.085018][ T6967] [U] [ 112.087872][ T6967] [U] [ 112.090590][ T6967] [U] [ 112.093793][ T6967] [U] [ 112.126655][ T6967] [U] [ 112.129423][ T6967] [U] [ 112.132139][ T6967] [U] [ 112.135024][ T6967] [U] [ 112.150936][ T6967] [U] [ 112.153701][ T6967] [U] [ 112.156522][ T6967] [U] [ 112.159246][ T6967] [U] [ 112.182033][ T6967] [U] [ 112.184799][ T6967] [U] [ 112.187521][ T6967] [U] [ 112.190234][ T6967] [U] [ 112.210742][ T6967] [U] [ 112.213514][ T6967] [U] [ 112.216232][ T6967] [U] [ 112.218961][ T6967] [U] [ 112.255120][ T6967] [U] [ 112.257901][ T6967] [U] [ 112.260620][ T6967] [U] [ 112.263362][ T6967] [U] [ 112.283804][ T6967] [U] [ 112.286567][ T6967] [U] [ 112.289328][ T6967] [U] [ 112.292148][ T6967] [U] [ 112.299959][ T6967] [U] [ 112.302740][ T6967] [U] [ 112.305448][ T6967] [U] [ 112.308157][ T6967] [U] [ 112.319375][ T6967] [U] [ 112.322248][ T6967] [U] [ 112.325040][ T6967] [U] [ 112.327747][ T6967] [U] [ 112.363191][ T6967] [U] [ 112.366079][ T6967] [U] [ 112.368804][ T6967] [U] [ 112.371585][ T6967] [U] [ 112.406899][ T6967] [U] [ 116.924063][ T7152] program syz.0.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.349822][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.610'. [ 118.861096][ T7252] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.624'. [ 118.874900][ T7247] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.624'. [ 118.887311][ T7252] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.624'. [ 120.249064][ T7308] loop8: detected capacity change from 0 to 7 [ 120.282835][ T7308] loop8: [POWERTEC] [ 120.749333][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 120.758885][ T7330] netlink: 120 bytes leftover after parsing attributes in process `syz.2.663'. [ 120.784861][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 120.874052][ T7336] netlink: 104 bytes leftover after parsing attributes in process `syz.2.666'. [ 120.891605][ T7337] raw_sendmsg: syz.0.664 forgot to set AF_INET. Fix it! [ 121.668153][ T7373] capability: warning: `syz.1.683' uses 32-bit capabilities (legacy support in use) [ 123.617816][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 123.644152][ T7460] binder: 7457:7460 ioctl c018620c 200000000140 returned -1 [ 123.652515][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 124.283672][ T7487] block nbd1: Unsupported socket: should be TCP or UNIX. [ 124.426305][ T7495] mmap: syz.3.740 (7495) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.534973][ T7498] C: renamed from team_slave_0 (while UP) [ 124.560177][ T7498] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 124.576980][ T7498] netlink: 116 bytes leftover after parsing attributes in process `syz.2.741'. [ 128.328855][ T7679] misc userio: Can't change port type on an already running userio instance [ 128.367288][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 128.444560][ T7687] binder: 7686:7687 ioctl 400c620e 0 returned -14 [ 128.652216][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.830550][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 128.837564][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.849524][ T5894] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 128.859255][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.867491][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.879991][ T5894] usb 2-1: config 0 descriptor?? [ 128.951156][ T5147] Bluetooth: hci2: command tx timeout [ 128.957417][ C1] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 129.049004][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.064835][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 129.082237][ T5873] usb 4-1: can't read configurations, error -71 [ 129.310398][ T5894] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 129.717566][ T5894] usb 2-1: USB disconnect, device number 2 [ 132.955095][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.963524][ T1306] ieee802154 phy1 wpan1: encryption failed: -22