last executing test programs: 8.181167266s ago: executing program 0 (id=1062): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 8.048977343s ago: executing program 0 (id=1065): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 7.793813916s ago: executing program 2 (id=1070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) clock_nanosleep(0x1, 0x1, &(0x7f0000000040), &(0x7f00000000c0)) 7.051973371s ago: executing program 0 (id=1071): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x101, 0x2, 0x0, 0x8}, {0x81, 0xc, 0x0, 0xfffffffa}, {0x9, 0xe, 0xfa}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x18}}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000040bbff020000000000fc000000000002000000000000000002000000000000000000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, 0x0, 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000500006804c00040067636d2861657329000000000000000000000000000000000000000000000000240000002da0ef4d4f08ef16"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x2c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x2c}}, 0x8000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 6.605739559s ago: executing program 0 (id=1078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x24004090) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@bridge_delvlan={0x48, 0x71, 0x300, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5, 0xffff}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x81}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0xc00e, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r11, @ANYBLOB="eae9c226c033c8a5c65aefc3e2b957ff9c1255d854dd3152b16210cc54bad0a0317d658b5f2c9829cf384d4b1e4050d180a97a0b2bf2ea3bdb2d383739927b33914a0da8a8086f643eb970ead5e07668e4f0f36ee7167f75815116feaae5885e875569d4e89edc1c952e06a608d3698763d0bb5b35ab25cd5e751b26a9c571f1237d"], 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x24044080) 5.97435108s ago: executing program 0 (id=1085): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r5, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8d", 0x8a}], 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000051c0)={0x2020}, 0x2020) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f00000002c0)=0x7) pread64(r6, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) 5.005139675s ago: executing program 3 (id=1093): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 3.914730255s ago: executing program 3 (id=1096): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 3.765610685s ago: executing program 3 (id=1098): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x0, 0x0, 0x8000000000000001) mmap$xdp(&(0x7f0000a2c000/0x4000)=nil, 0x4000, 0x300000b, 0x80010, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r5, 0x0, 0x0, 0x3, 0x8, 0x0, {0x4, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d00"}}) 3.676308306s ago: executing program 4 (id=1099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 2.683573244s ago: executing program 3 (id=1100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 2.682776744s ago: executing program 1 (id=1101): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.569893859s ago: executing program 2 (id=1102): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0620, 0x0) socket(0x10, 0x803, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 2.547083242s ago: executing program 3 (id=1103): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x101, 0x2, 0x0, 0x8}, {0x81, 0xc, 0x0, 0xfffffffa}, {0x9, 0xe, 0xfa}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000390009002cbd70"], 0x18}}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000040bbff020000000000fc000000000002000000000000000002000000000000000000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, 0x0, 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000500006804c00040067636d2861657329000000000000000000000000000000000000000000000000240000002da0ef4d4f08ef16"], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000400)={0x2c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x2c}}, 0x8000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2.461384573s ago: executing program 4 (id=1104): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2.40186495s ago: executing program 1 (id=1105): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) unshare(0x600) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffc, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101040, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x40005}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10006, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 2.378730614s ago: executing program 4 (id=1106): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000093c0)=@delchain={0x5a0, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x4}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x570, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x8}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x7}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010101}, @TCA_FLOWER_ACT={0x54c, 0x3, [@m_connmark={0x548, 0x18, 0x0, 0x0, {{0xd}, {0x4}, {0x516, 0x6, "ad2aabcb0271ea4d60373b1be142c09918632b95d4916de5dbe4fece88c278e800bfad3fc3c5822e0af1af17a93b3242e8a275cdd7db89933af8320162adcaeb613a0324ff456e22639d4afc87b67e3ee655147dd0c1b74dc6a85539d2b11413e8f2af1261c4c457555916570033369993ab4bca13cbe9c842cb96c0c9d2b6ec9cc3415edbf7237a03ab46f64709a29ffea12eec4516366998ca71d9395e9e4ca2978be884defe49419730671607e693d22ac81a515ee13d36de057ab5e0a502263aa4784dedbda74e80658230f9afe3b2668c0b2ed440e9734d6543a9f97056ebe249e7fb311b03d1a59f548c9a9d80b31d276a7f1e5c4a7a4a1bee0b9d48c0f2d545d7d62019a0e5c897f1d8a58519c0246fc2b8e440c2a937d8b0781e616ea9a1f568f0c8e43b4ce267b8aff6f998ec5dca9a4773ae1a217ee4f8b714cda75839a47456b6883abbe03319bf39ac9c7489b0d3517f5f68abdacc61cfbd0f01dddfb6443b18306699f0e154fc712f3168c405df2c7c9fb2aad5f1e46b3a98ac3b58367703165908186579ed3e7132b63f7409daa31ac53d6a3b48487d6910fd7501fb8a88f013484c515e584bc66308863a6d1aed404ce3873550e43023324d4d450a3a220a17decfecce64bee847c7041633ff089ae8cc412cad40937f641a18fb19eefc6c874a630ec476afd7aebdb91cb365ba3f93511d81b53b463fdc88f9b0ce27d7caf42d85d6e9b38b9c968966aac71a52ef24c175b2f54b6f1e7cae3b08378120324ef0a4694d245df44b73ab2bf631109ab747d246dfd410ed67231be46a74eb9fc68046ce16b7bd73cb95154b39d08c5162c511c0edb325541b5ac71f54b3453bcdc0a0e7f5ada39056286409748ad5a9fe0b4b97be691675592ff01604c9a5aeaaaaa35aed9b209e7c804eb0260d538caa94004b66db9b085c94f14299081f123d28dab437d0fefba8f7538a7ecc4c403ddaf1a28a300a5fd94cfa354dcfdfb297a23c9d8c511767bdc5f9980f1d060bd35aa966ad983675d4e38a46750ff72b15ec788823f54a351e63bb47e75e0533d52015d5e7fdd44d24515445043744b989d4e84ee8cb432dd3aeb3c1ca1f86b8082a0b8b519f94319ebcc30a2314080f977242db3426451e022e15c7146656601cc23e0aadf71dcd4a3755f512f1632c9d88ec729b6b6eae6d1b40434fea9247e941ca61bd22550633bd6b5a230ff0a5f2488ea9b2c558ab6ddc7e36e20d9786fd76f778976ecc05ff00c959716453b9e54aeeb24f6e5f100e458dbbb04c3c53c8cc288752a4b0ed45d5baf3257cc4dbc765743364251448a5d11da216ea877f7ae903a616078d0efc86d609cebae47da7d6cad2f687a2399042110015794c7e6442782e82f88bb013f81e300f12345f14ecc02254eb0a692c14589320182abc697f27c0d0a05e5a339465b7d2704e197c2271732e32c33856aa8cc25ff278919d1009383219ee757b20f4befced2a9e97d717daef1087dbf8a3d3f70a2baef0dcd89ff01cc8a5aa391a292eb610d3deab80d002815dcecc8b0353095acd30f67dba0aa2aee1ab4b3767cc0e6a27b487756f18b31549beec8f9968327575fe146768fa84f421e4d45aa8e4b6b80340e676a2e0459df5621779aa2cbf8b82ff0a01b891cd86605bc7342a2af8309beb02d40f9a3f3f10177b825b20f3c3b1ce27a0d92661e68a792fa26df172555b25543f1ad0f954ba97e336618f4a94a363e289f26d893c0dfcfc69815815c9ba27f729079c65caa396073162a9443e629fdef4143726feeff467fd1d56f19c3f2a68e544345e90cf9c0651871ee3"}, {0xc}, {0xc}}}]}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4080}, 0xc810) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 2.376700044s ago: executing program 1 (id=1107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r2], 0x28}}, 0x0) 2.16987034s ago: executing program 2 (id=1108): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 2.158682612s ago: executing program 1 (id=1109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], 0x0}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r2}) close(r4) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) 2.113598618s ago: executing program 4 (id=1110): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x0, 0x0, 0x8000000000000001) mmap$xdp(&(0x7f0000a2c000/0x4000)=nil, 0x4000, 0x300000b, 0x80010, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={0x0, 0x0, r5, 0x0, 0x0, 0x3, 0x8, 0x0, {0x4, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d00"}}) 1.177851918s ago: executing program 2 (id=1111): r0 = socket$nl_route(0x10, 0x3, 0x0) munlockall() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 986.842543ms ago: executing program 3 (id=1112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) clock_nanosleep(0x1, 0x1, &(0x7f0000000040), &(0x7f00000000c0)) 958.325397ms ago: executing program 2 (id=1113): unshare(0x22020400) syz_open_dev$loop(0x0, 0xdf6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x1}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 939.880079ms ago: executing program 1 (id=1114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 201.905064ms ago: executing program 4 (id=1115): unshare(0x22020400) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 155.08718ms ago: executing program 0 (id=1116): unshare(0x22020600) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) 99.037787ms ago: executing program 4 (id=1117): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000003340), r2) 94.966398ms ago: executing program 2 (id=1118): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x3) 0s ago: executing program 1 (id=1119): unshare(0x2c020400) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x8}], 0x1, &(0x7f0000000200), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 64.080567][ T4173] cgroup: Unknown subsys name 'net' [ 64.215887][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.722714][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.740061][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 67.764639][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.833426][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.916812][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.924536][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.933222][ T4197] device bridge_slave_0 entered promiscuous mode [ 67.956707][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.964082][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.972268][ T4190] device bridge_slave_0 entered promiscuous mode [ 68.002425][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.009684][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.017544][ T4197] device bridge_slave_1 entered promiscuous mode [ 68.025632][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.035808][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.043178][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.051324][ T4190] device bridge_slave_1 entered promiscuous mode [ 68.093448][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.102711][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 68.125095][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.132707][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.141020][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.156749][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.177038][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.184921][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.193421][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.202793][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.243461][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.294786][ T4190] team0: Port device team_slave_0 added [ 68.307937][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.323191][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.330476][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.338810][ T4193] device bridge_slave_0 entered promiscuous mode [ 68.347452][ T4190] team0: Port device team_slave_1 added [ 68.365668][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.379862][ T4197] team0: Port device team_slave_0 added [ 68.386025][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.393418][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.401564][ T4193] device bridge_slave_1 entered promiscuous mode [ 68.440037][ T4197] team0: Port device team_slave_1 added [ 68.446511][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.453579][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.480072][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.500299][ T4186] team0: Port device team_slave_0 added [ 68.520994][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.528693][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.537024][ T4191] device bridge_slave_0 entered promiscuous mode [ 68.557173][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.564257][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.590522][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.603687][ T4186] team0: Port device team_slave_1 added [ 68.611579][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.621319][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.628414][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.636692][ T4191] device bridge_slave_1 entered promiscuous mode [ 68.663113][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.678426][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.685717][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.711796][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.724814][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.731866][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.757978][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.783110][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.790379][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.816859][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.836094][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.843465][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.869987][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.901770][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.914794][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.945214][ T4193] team0: Port device team_slave_0 added [ 68.971813][ T4190] device hsr_slave_0 entered promiscuous mode [ 68.978557][ T4190] device hsr_slave_1 entered promiscuous mode [ 68.993989][ T4193] team0: Port device team_slave_1 added [ 69.002128][ T4191] team0: Port device team_slave_0 added [ 69.024852][ T4197] device hsr_slave_0 entered promiscuous mode [ 69.032149][ T4197] device hsr_slave_1 entered promiscuous mode [ 69.038751][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.047078][ T4197] Cannot create hsr debugfs directory [ 69.062167][ T4191] team0: Port device team_slave_1 added [ 69.108350][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.115785][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.122537][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.130183][ T4186] Cannot create hsr debugfs directory [ 69.154261][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.161891][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.188105][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.200521][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.207495][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.237509][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.249878][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.257294][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.284182][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.307791][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.315073][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.341342][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.391335][ T4199] Bluetooth: hci0: command 0x0409 tx timeout [ 69.452306][ T4193] device hsr_slave_0 entered promiscuous mode [ 69.460471][ T4193] device hsr_slave_1 entered promiscuous mode [ 69.467854][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.475725][ T4199] Bluetooth: hci4: command 0x0409 tx timeout [ 69.476106][ T4193] Cannot create hsr debugfs directory [ 69.488127][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 69.494883][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 69.501534][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 69.508769][ T4191] device hsr_slave_0 entered promiscuous mode [ 69.516022][ T4191] device hsr_slave_1 entered promiscuous mode [ 69.522969][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.530909][ T4191] Cannot create hsr debugfs directory [ 69.804624][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.819097][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.830768][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.850744][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.893703][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.911793][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.921586][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.936496][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.996621][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.030002][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.039132][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.059078][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.118621][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.131779][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.144631][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.166765][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.250888][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.264106][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.277491][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.295084][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.308406][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.333696][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.345473][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.358522][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.375345][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.398036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.407316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.431597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.443912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.453230][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.460791][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.471168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.480747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.489271][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.496361][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.505930][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.540574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.548914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.563438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.573108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.582575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.591787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.601638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.610975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.621945][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.647557][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.663588][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.679331][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.688273][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.697152][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.704293][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.713953][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.723771][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.733085][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.742228][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.751793][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.758885][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.767374][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.780856][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.794281][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.806674][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.815558][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.832018][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.843255][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.854119][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.876103][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.893877][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.906770][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.916908][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.932710][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.945323][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.973695][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.040545][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.055919][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.065118][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.072256][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.082067][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.091942][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.100644][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.107734][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.117069][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.126942][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.135201][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.143939][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.153990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.168971][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.188491][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.203076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.213350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.224416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.232663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.241541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.250399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.270637][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.281099][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.289885][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.298486][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.307682][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.314824][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.323593][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.329932][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.338295][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.342928][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.353629][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.362854][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.371620][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.378679][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.386746][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.396539][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.405535][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.418483][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.436821][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.465763][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.473429][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 71.480177][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.488877][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.497368][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.505465][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.514827][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.524278][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.534274][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.543691][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.551306][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 71.556683][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.560931][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 71.569854][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.582118][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.582207][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 71.592853][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.607058][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 71.615459][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.624839][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.691902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.702992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.718638][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.725801][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.735668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.746125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.754912][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.762018][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.771102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.780568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.788952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.798950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.808666][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.820904][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.834845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.844014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.863858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.880499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.901310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.954427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.981863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.000199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.021671][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.046021][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.066331][ T4190] device veth0_vlan entered promiscuous mode [ 72.074084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.092141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.106807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.117090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.136775][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.154310][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.179900][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.190795][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.210227][ T4190] device veth1_vlan entered promiscuous mode [ 72.230966][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.246380][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.256467][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.272256][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.285195][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.298997][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.322441][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.373736][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.401595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.411133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.418733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.428365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.444999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.493831][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.507230][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.519766][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.528508][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.543271][ T4190] device veth0_macvtap entered promiscuous mode [ 72.553071][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.564802][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.574629][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.586335][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.595407][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.610985][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.621037][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.631770][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.640559][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.653658][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.666193][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.680487][ T4190] device veth1_macvtap entered promiscuous mode [ 72.690781][ T4197] device veth0_vlan entered promiscuous mode [ 72.701000][ T4186] device veth0_vlan entered promiscuous mode [ 72.714250][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.741272][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.753644][ T4197] device veth1_vlan entered promiscuous mode [ 72.785656][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.794359][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.804874][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.814196][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.827116][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.838255][ T4186] device veth1_vlan entered promiscuous mode [ 72.855264][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.865057][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.874255][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.884091][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.901825][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.917328][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.928309][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.944363][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.972365][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.985899][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.996422][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.040238][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.048821][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.057820][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.066780][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.078823][ T4191] device veth0_vlan entered promiscuous mode [ 73.095054][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.106949][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.147553][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.159629][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.182822][ T4191] device veth1_vlan entered promiscuous mode [ 73.200489][ T4197] device veth0_macvtap entered promiscuous mode [ 73.211239][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.222968][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.232522][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.242167][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.267605][ T4197] device veth1_macvtap entered promiscuous mode [ 73.292437][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.301757][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.310655][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.318929][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.334258][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.342577][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.351950][ T4193] device veth0_vlan entered promiscuous mode [ 73.371250][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.382589][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.394975][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.409301][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.417352][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.430333][ T4186] device veth0_macvtap entered promiscuous mode [ 73.442358][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.452396][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.461243][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.470696][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.480285][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.488965][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.502108][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.513484][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.525236][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.539718][ T4193] device veth1_vlan entered promiscuous mode [ 73.548140][ T4186] device veth1_macvtap entered promiscuous mode [ 73.555528][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 73.568341][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.578117][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.587453][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.597359][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.609974][ T4191] device veth0_macvtap entered promiscuous mode [ 73.623384][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.633237][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 73.639388][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.648135][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.657162][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 73.658195][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.663364][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 73.663534][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 73.715675][ T4191] device veth1_macvtap entered promiscuous mode [ 73.753161][ T1269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.776452][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.787749][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.798576][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.807267][ T1269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.812371][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.831030][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.844666][ T4193] device veth0_macvtap entered promiscuous mode [ 73.859902][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.871780][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.881489][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.890499][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.898377][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.907452][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.916974][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.926717][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.937024][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.959880][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.970662][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.982483][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.993271][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.003309][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.013876][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.025314][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.038132][ T4193] device veth1_macvtap entered promiscuous mode [ 74.056163][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.067772][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.077979][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.088969][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.101493][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.116959][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.126824][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.136912][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.146971][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.162471][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.174695][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.185629][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.200484][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.216281][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.227427][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.239574][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.252021][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.263915][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.275781][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.286637][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.298184][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.328641][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.337842][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.367130][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.401651][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.411955][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.422750][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.433370][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.464331][ T4298] loop1: detected capacity change from 0 to 128 [ 74.472296][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.482950][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.493673][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.505898][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.516570][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.527277][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.537211][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.546241][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.582433][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.597824][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.608717][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.620360][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.630581][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.641592][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.651777][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.662394][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.673133][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.683823][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.686519][ T4298] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.697451][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.716458][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.736965][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.754366][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.758070][ T4298] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.776108][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.807173][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.817088][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.828548][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.839614][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.895745][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.904550][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.061634][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.074548][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.847716][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 75.872049][ T4294] Bluetooth: hci2: command 0x0419 tx timeout [ 75.911657][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.919989][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.928012][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.943717][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.953971][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 75.970807][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 75.986330][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 76.004350][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.037292][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.141760][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.196037][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.222257][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.399369][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.429933][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.439012][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.500421][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 76.548345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.912460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.990365][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.121129][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.130226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.139774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.148811][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.157765][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.941904][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.122022][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.466729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.507601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.636977][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.652780][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.665412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.085059][ T4327] overlayfs: missing 'workdir' [ 82.669748][ T4336] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5'. [ 86.370680][ T4363] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 86.409000][ T4363] File: /dev/nullb0 PID: 4363 Comm: syz.4.16 [ 86.682948][ T23] cfg80211: failed to load regulatory.db [ 89.499912][ T4405] tipc: Started in network mode [ 89.505099][ T4405] tipc: Node identity 7f000001, cluster identity 4711 [ 89.561762][ T4405] tipc: Enabled bearer , priority 10 [ 89.880813][ T4413] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.682226][ T4234] tipc: Node number set to 2130706433 [ 92.757335][ T4464] tipc: Started in network mode [ 92.783072][ T4464] tipc: Node identity 7f000001, cluster identity 4711 [ 92.834698][ T4464] tipc: Enabled bearer , priority 10 [ 93.079819][ T4320] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.195087][ T4472] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 93.281837][ T4472] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 93.369502][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 93.509411][ T4320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.530111][ T4320] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.569311][ T4320] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 93.633223][ T4320] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 93.687657][ T4320] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 93.753805][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.863088][ T4320] hub 3-1:1.0: bad descriptor, ignoring hub [ 93.888507][ T4320] hub: probe of 3-1:1.0 failed with error -5 [ 93.910072][ T4320] cdc_wdm 3-1:1.0: skipping garbage [ 93.947196][ T4320] cdc_wdm 3-1:1.0: skipping garbage [ 93.952530][ T23] tipc: Node number set to 2130706433 [ 94.004520][ T4320] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 94.029389][ T4320] cdc_wdm 3-1:1.0: Unknown control protocol [ 94.130444][ T4320] usb 3-1: USB disconnect, device number 2 [ 95.742368][ T4510] tipc: Enabling of bearer rejected, already enabled [ 95.755823][ T4510] tipc: Enabled bearer , priority 10 [ 95.927731][ T4514] process 'syz.4.56' launched '/dev/fd/3' with NULL argv: empty string added [ 95.965054][ T4515] Zero length message leads to an empty skb [ 98.691116][ T4530] sched: RT throttling activated [ 100.914931][ T4558] tipc: Started in network mode [ 101.059824][ T4558] tipc: Node identity 7f000001, cluster identity 4711 [ 101.083193][ T4558] tipc: Enabled bearer , priority 10 [ 101.116234][ T4558] tipc: Enabled bearer , priority 10 [ 101.851219][ T4574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'. [ 102.120085][ T4199] tipc: Node number set to 2130706433 [ 116.193011][ T4778] device syzkaller0 entered promiscuous mode [ 120.880368][ T4828] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 120.987631][ T4828] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 125.401101][ T4903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 126.609668][ T4916] netlink: 'syz.0.125': attribute type 10 has an invalid length. [ 126.746751][ T4916] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 132.012881][ T4958] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 132.159341][ T4234] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.439595][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 132.569350][ T4234] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 132.684840][ T4234] usb 3-1: config 0 has no interface number 0 [ 132.754134][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.760685][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.879645][ T4234] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 132.935052][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.962858][ T4234] usb 3-1: Product: syz [ 132.973097][ T4234] usb 3-1: Manufacturer: syz [ 132.987678][ T4234] usb 3-1: SerialNumber: syz [ 133.011422][ T4234] usb 3-1: config 0 descriptor?? [ 134.019581][ T4234] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 134.036208][ T4234] usb 3-1: No valid video chain found. [ 134.241839][ T4175] usb 3-1: USB disconnect, device number 3 [ 135.274741][ T4199] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.319412][ T4199] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 137.369846][ T5027] device ip6erspan0 entered promiscuous mode [ 137.374365][ T4199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.428521][ T4199] usb 5-1: config 0 descriptor?? [ 137.564121][ T5030] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 138.610461][ T4199] pegasus: probe of 5-1:0.0 failed with error -32 [ 139.100081][ T5049] program syz.1.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.279048][ T5052] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 139.829503][ T4199] usb 5-1: USB disconnect, device number 2 [ 145.730071][ T5125] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 145.829542][ T5122] capability: warning: `syz.1.177' uses deprecated v2 capabilities in a way that may be insecure [ 147.299998][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 148.339535][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 148.514255][ T5086] syz.0.167 (5086): drop_caches: 1 [ 148.641850][ T5090] syz.0.167 (5090): drop_caches: 1 [ 150.579342][ T5180] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 153.452780][ T13] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 153.889417][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.909170][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.907596][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.063793][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.072817][ T13] usb 2-1: Product: syz [ 155.077295][ T13] usb 2-1: Manufacturer: syz [ 155.082375][ T13] usb 2-1: SerialNumber: syz [ 156.689973][ T13] usb 2-1: 0:2 : does not exist [ 157.184469][ T13] usb 2-1: USB disconnect, device number 2 [ 158.324099][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.437517][ T5275] IPVS: set_ctl: invalid protocol: 0 172.20.20.68:20000 [ 158.610568][ T5277] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.657629][ T5277] bridge0: port 3(macvlan2) entered blocking state [ 158.669304][ T5277] bridge0: port 3(macvlan2) entered disabled state [ 158.738141][ T5277] device macvlan2 entered promiscuous mode [ 158.800249][ T5277] bridge0: port 3(macvlan2) entered blocking state [ 158.807129][ T5277] bridge0: port 3(macvlan2) entered forwarding state [ 159.753279][ T5297] tipc: Started in network mode [ 159.771792][ T5297] tipc: Node identity c2f8badc2cb1, cluster identity 4711 [ 159.783845][ T5297] tipc: Enabled bearer , priority 0 [ 159.812278][ T5298] device syzkaller0 entered promiscuous mode [ 159.833354][ T5297] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 159.876032][ T5297] tipc: Resetting bearer [ 159.903103][ T5296] tipc: Resetting bearer [ 159.930778][ T5296] tipc: Disabling bearer [ 162.349497][ T4302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 162.600930][ T4302] usb 2-1: Using ep0 maxpacket: 8 [ 162.729523][ T4302] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 162.746949][ T4302] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.786596][ T4302] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.861710][ T4302] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.940182][ T4302] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.990077][ T4302] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.048540][ T4302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.147231][ T5318] ODEBUG: Out of memory. ODEBUG disabled [ 163.369279][ T4302] usb 2-1: usb_control_msg returned -32 [ 163.375024][ T4302] usbtmc 2-1:16.0: can't read capabilities [ 163.742874][ T5318] syz.2.234 (5318): drop_caches: 2 [ 163.750398][ T5340] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 163.763338][ T4234] usb 2-1: USB disconnect, device number 3 [ 167.675127][ T5392] loop0: detected capacity change from 0 to 2048 [ 167.815405][ T5392] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 170.459273][ T4266] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 170.829467][ T4266] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.854667][ T4266] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.905434][ T4266] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.936762][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.430010][ T4266] usb 3-1: GET_CAPABILITIES returned 0 [ 171.435627][ T4266] usbtmc 3-1:16.0: can't read capabilities [ 171.740041][ T4266] usb 3-1: USB disconnect, device number 4 [ 172.837341][ T1235] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 172.859506][ T4266] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 172.874280][ T1235] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 832 with error 28 [ 172.897268][ T1235] EXT4-fs (loop0): This should not happen!! Data will be lost [ 172.897268][ T1235] [ 172.908910][ T1235] EXT4-fs (loop0): Total free blocks count 0 [ 172.916674][ T1235] EXT4-fs (loop0): Free/Dirty block details [ 172.923046][ T1235] EXT4-fs (loop0): free_blocks=2415919504 [ 172.929580][ T1235] EXT4-fs (loop0): dirty_blocks=848 [ 172.935283][ T1235] EXT4-fs (loop0): Block reservation details [ 172.941874][ T1235] EXT4-fs (loop0): i_reserved_data_blocks=53 [ 173.001557][ T1235] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 173.052264][ T1235] EXT4-fs (loop0): This should not happen!! Data will be lost [ 173.052264][ T1235] [ 173.109161][ T4266] usb 3-1: Using ep0 maxpacket: 32 [ 173.229466][ T4266] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 173.410756][ T4266] usb 3-1: config 2 has no interface number 0 [ 173.416920][ T4266] usb 3-1: config 2 interface 88 has no altsetting 0 [ 173.505640][ T5447] netlink: 64 bytes leftover after parsing attributes in process `syz.4.271'. [ 173.749488][ T4266] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 177.699242][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.787792][ T4266] usb 3-1: Product: syz [ 177.800519][ T4266] usb 3-1: Manufacturer: syz [ 177.805263][ T4266] usb 3-1: SerialNumber: syz [ 178.219373][ T4266] usb 3-1: can't set config #2, error -71 [ 178.244898][ T4266] usb 3-1: USB disconnect, device number 5 [ 178.352228][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 178.416904][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.424384][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.777128][ T5475] loop1: detected capacity change from 0 to 2048 [ 179.060172][ T5475] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 181.229552][ T5483] netlink: 'syz.0.282': attribute type 21 has an invalid length. [ 181.237617][ T5483] netlink: 156 bytes leftover after parsing attributes in process `syz.0.282'. [ 181.331140][ T5483] netlink: 'syz.0.282': attribute type 21 has an invalid length. [ 181.356469][ T4615] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 181.404742][ T5483] netlink: 156 bytes leftover after parsing attributes in process `syz.0.282'. [ 181.433826][ T4615] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 181.447604][ T4615] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.447604][ T4615] [ 181.457991][ T4615] EXT4-fs (loop1): Total free blocks count 0 [ 181.475712][ T4615] EXT4-fs (loop1): Free/Dirty block details [ 181.492591][ T4615] EXT4-fs (loop1): free_blocks=2415919504 [ 181.507703][ T4615] EXT4-fs (loop1): dirty_blocks=32 [ 181.529166][ T4615] EXT4-fs (loop1): Block reservation details [ 181.545550][ T4615] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 181.565540][ T4653] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 181.628622][ T4653] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.628622][ T4653] [ 181.812437][ T5514] sch_fq: defrate 0 ignored. [ 182.089153][ T4320] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.336287][ T26] audit: type=1326 audit(1768714949.368:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf47acb9 code=0x7ffc0000 [ 182.359359][ T4320] usb 3-1: Using ep0 maxpacket: 32 [ 182.399602][ T26] audit: type=1326 audit(1768714949.408:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7bcf47acb9 code=0x7ffc0000 [ 182.470822][ T26] audit: type=1326 audit(1768714949.408:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf47acb9 code=0x7ffc0000 [ 182.493759][ T4320] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 182.512424][ T4320] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 182.559720][ T4320] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 182.602431][ T26] audit: type=1326 audit(1768714949.408:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7bcf47acb9 code=0x7ffc0000 [ 182.724275][ T26] audit: type=1326 audit(1768714949.408:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf47acb9 code=0x7ffc0000 [ 182.799347][ T4320] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 182.808449][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.833900][ T26] audit: type=1326 audit(1768714949.408:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7bcf47acb9 code=0x7ffc0000 [ 182.888217][ T4320] usb 3-1: Product: syz [ 182.909749][ T4320] usb 3-1: Manufacturer: syz [ 182.914409][ T4320] usb 3-1: SerialNumber: syz [ 182.934871][ T26] audit: type=1326 audit(1768714949.408:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7bcf474ad7 code=0x7ffc0000 [ 183.011656][ T4320] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 183.011881][ T26] audit: type=1326 audit(1768714949.408:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bcf41c0d9 code=0x7ffc0000 [ 183.064182][ T4320] imon 3-1:155.0: unable to initialize intf0, err -19 [ 183.106959][ T4320] imon:imon_probe: failed to initialize context! [ 183.119996][ T26] audit: type=1326 audit(1768714949.408:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7bcf474ad7 code=0x7ffc0000 [ 183.160060][ T4320] imon 3-1:155.0: unable to register, err -19 [ 183.199340][ T26] audit: type=1326 audit(1768714949.408:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5517 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7bcf41c0d9 code=0x7ffc0000 [ 184.226175][ T5542] loop0: detected capacity change from 0 to 2048 [ 184.671517][ T5542] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 185.097606][ T4234] usb 3-1: USB disconnect, device number 6 [ 187.805269][ T5578] loop8: detected capacity change from 0 to 8 [ 187.839700][ T5457] Dev loop8: unable to read RDB block 8 [ 187.847064][ T5457] loop8: unable to read partition table [ 187.856043][ T5457] loop8: partition table beyond EOD, truncated [ 187.868815][ T5578] Dev loop8: unable to read RDB block 8 [ 187.877181][ T5578] loop8: unable to read partition table [ 187.893119][ T5578] loop8: partition table beyond EOD, truncated [ 187.960662][ T5578] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 189.641724][ T4601] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 189.705131][ T4601] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 448 with error 28 [ 189.758076][ T4601] EXT4-fs (loop0): This should not happen!! Data will be lost [ 189.758076][ T4601] [ 189.798400][ T4601] EXT4-fs (loop0): Total free blocks count 0 [ 189.810493][ T4601] EXT4-fs (loop0): Free/Dirty block details [ 189.816486][ T4601] EXT4-fs (loop0): free_blocks=2415919504 [ 189.886199][ T4601] EXT4-fs (loop0): dirty_blocks=464 [ 189.911603][ T4601] EXT4-fs (loop0): Block reservation details [ 189.937978][ T4601] EXT4-fs (loop0): i_reserved_data_blocks=29 [ 189.995787][ T4601] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 190.036188][ T4601] EXT4-fs (loop0): This should not happen!! Data will be lost [ 190.036188][ T4601] [ 190.539265][ T4320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 190.729228][ T4320] usb 4-1: device descriptor read/64, error -71 [ 191.958513][ T2242] Bluetooth: hci0: command 0x0406 tx timeout [ 191.960944][ T4318] Bluetooth: hci2: command 0x0406 tx timeout [ 191.994678][ T2242] Bluetooth: hci3: command 0x0406 tx timeout [ 192.039160][ T4320] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 192.079642][ T4318] Bluetooth: hci1: command 0x0406 tx timeout [ 192.113530][ T4318] Bluetooth: hci4: command 0x0406 tx timeout [ 192.229318][ T4320] usb 4-1: device descriptor read/64, error -71 [ 192.370424][ T4320] usb usb4-port1: attempt power cycle [ 192.799296][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 192.929524][ T4320] usb 4-1: device descriptor read/8, error -71 [ 193.486264][ T5639] loop0: detected capacity change from 0 to 2048 [ 193.581681][ T5639] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 194.285799][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.301872][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.317595][ T144] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 194.390937][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 194.548979][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 194.548979][ T144] [ 194.618351][ T144] EXT4-fs (loop0): Total free blocks count 0 [ 194.661489][ T144] EXT4-fs (loop0): Free/Dirty block details [ 194.667625][ T144] EXT4-fs (loop0): free_blocks=2415919504 [ 194.675338][ T144] EXT4-fs (loop0): dirty_blocks=11968 [ 194.766418][ T144] EXT4-fs (loop0): Block reservation details [ 194.772623][ T144] EXT4-fs (loop0): i_reserved_data_blocks=748 [ 195.794830][ T4601] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 195.816897][ T4601] EXT4-fs (loop0): This should not happen!! Data will be lost [ 195.816897][ T4601] [ 198.071673][ T5682] usb usb8: usbfs: process 5682 (syz.0.333) did not claim interface 0 before use [ 200.121879][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.130394][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.732456][ T5686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.801303][ T5686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.255440][ T263] block nbd0: Attempted send on invalid socket [ 202.262299][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 202.763912][ T5686] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.773759][ T5686] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.783154][ T5686] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.792467][ T5686] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.902337][ T5696] tipc: Enabled bearer , priority 0 [ 203.016884][ T5696] tipc: Disabling bearer [ 205.607576][ T5775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'. [ 206.269229][ T4175] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 206.438928][ T4198] Bluetooth: hci2: hcon ffff888079af0000 sent 1 < count 7 [ 206.446733][ T4198] Bluetooth: hci2: hcon ffff888079af0000 sent 0 < count 14880 [ 206.455781][ T4198] Bluetooth: hci2: hcon ffff888079af0000 sent 0 < count 4 [ 206.509333][ T4175] usb 2-1: Using ep0 maxpacket: 16 [ 206.629515][ T4175] usb 2-1: config 0 interface 0 altsetting 102 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.656082][ T4175] usb 2-1: config 0 interface 0 altsetting 102 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.703059][ T4175] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.718647][ T4175] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 206.729681][ T4175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.748758][ T4175] usb 2-1: config 0 descriptor?? [ 207.080504][ T4175] usbhid 2-1:0.0: can't add hid device: -71 [ 207.090351][ T4175] usbhid: probe of 2-1:0.0 failed with error -71 [ 207.124616][ T4175] usb 2-1: USB disconnect, device number 4 [ 208.892099][ T5811] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 210.729232][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 210.969161][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 211.090042][ T23] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 211.098279][ T23] usb 4-1: config 0 has no interface number 0 [ 211.132780][ T23] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 211.263814][ T23] usb 4-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 211.275237][ T23] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.489790][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 212.209299][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.346502][ T23] usb 4-1: Product: syz [ 212.401802][ T23] usb 4-1: Manufacturer: syz [ 212.406553][ T23] usb 4-1: SerialNumber: syz [ 212.452973][ T23] usb 4-1: config 0 descriptor?? [ 212.473161][ T5833] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.506624][ T23] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input6 [ 212.710033][ T23] usb 4-1: USB disconnect, device number 6 [ 212.926634][ T5848] program syz.4.383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.315186][ T5855] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 218.013838][ T5945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.407'. [ 218.160903][ T5945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.407'. [ 220.509203][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 220.959469][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.019034][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.053059][ T13] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 221.311355][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.330665][ T13] usb 2-1: config 0 descriptor?? [ 222.229783][ T13] usbhid 2-1:0.0: can't add hid device: -71 [ 222.235828][ T13] usbhid: probe of 2-1:0.0 failed with error -71 [ 222.333858][ T13] usb 2-1: USB disconnect, device number 5 [ 222.426648][ T6012] loop2: detected capacity change from 0 to 2048 [ 222.624206][ T6012] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 223.244334][ T6032] tipc: Enabling of bearer rejected, already enabled [ 223.255825][ T6032] tipc: Enabled bearer , priority 10 [ 223.266847][ T4653] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 223.282743][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 223.331802][ T4653] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 223.368046][ T6026] tipc: Enabled bearer , priority 0 [ 223.386187][ T6024] tipc: Resetting bearer [ 223.438645][ T4653] EXT4-fs (loop2): This should not happen!! Data will be lost [ 223.438645][ T4653] [ 223.475819][ T6024] tipc: Disabling bearer [ 223.501714][ T4653] EXT4-fs (loop2): Total free blocks count 0 [ 223.526331][ T4653] EXT4-fs (loop2): Free/Dirty block details [ 223.564808][ T4653] EXT4-fs (loop2): free_blocks=2415919504 [ 223.617936][ T4653] EXT4-fs (loop2): dirty_blocks=6480 [ 223.691554][ T4653] EXT4-fs (loop2): Block reservation details [ 223.712129][ T4653] EXT4-fs (loop2): i_reserved_data_blocks=405 [ 223.909822][ T4653] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 223.922622][ T4653] EXT4-fs (loop2): This should not happen!! Data will be lost [ 223.922622][ T4653] [ 224.761441][ T6053] program syz.4.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.145820][ T6055] netlink: 'syz.1.433': attribute type 21 has an invalid length. [ 225.214964][ T6055] netlink: 156 bytes leftover after parsing attributes in process `syz.1.433'. [ 225.229605][ T6057] netlink: 'syz.1.433': attribute type 21 has an invalid length. [ 225.259333][ T6057] netlink: 156 bytes leftover after parsing attributes in process `syz.1.433'. [ 225.543113][ T6077] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.612231][ T6079] loop1: detected capacity change from 0 to 2048 [ 225.719632][ T6079] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 225.787217][ T6088] device syzkaller0 entered promiscuous mode [ 226.524504][ T1277] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 226.636267][ T1277] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 226.677751][ T1277] EXT4-fs (loop1): This should not happen!! Data will be lost [ 226.677751][ T1277] [ 226.762310][ T1277] EXT4-fs (loop1): Total free blocks count 0 [ 226.784785][ T1277] EXT4-fs (loop1): Free/Dirty block details [ 226.819907][ T1277] EXT4-fs (loop1): free_blocks=2415919504 [ 226.825697][ T1277] EXT4-fs (loop1): dirty_blocks=10768 [ 226.879438][ T1277] EXT4-fs (loop1): Block reservation details [ 226.937688][ T1277] EXT4-fs (loop1): i_reserved_data_blocks=673 [ 227.077023][ T4620] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 227.107034][ T4620] EXT4-fs (loop1): This should not happen!! Data will be lost [ 227.107034][ T4620] [ 229.189252][ T4318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.633470][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 229.669240][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.753373][ T4318] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.788741][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.879899][ T4318] usb 2-1: config 0 descriptor?? [ 229.932370][ T4318] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 230.422560][ T6142] netlink: 'syz.3.449': attribute type 21 has an invalid length. [ 230.472889][ T6142] netlink: 156 bytes leftover after parsing attributes in process `syz.3.449'. [ 230.543453][ T6148] netlink: 'syz.3.449': attribute type 21 has an invalid length. [ 230.554803][ T6148] netlink: 156 bytes leftover after parsing attributes in process `syz.3.449'. [ 230.671629][ T6154] loop4: detected capacity change from 0 to 2048 [ 230.777217][ T6154] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 230.843942][ T6162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.455'. [ 231.664548][ T1235] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 231.727009][ T1235] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 231.744280][ T1235] EXT4-fs (loop4): This should not happen!! Data will be lost [ 231.744280][ T1235] [ 231.755879][ T1235] EXT4-fs (loop4): Total free blocks count 0 [ 231.769219][ T1235] EXT4-fs (loop4): Free/Dirty block details [ 231.777478][ T1235] EXT4-fs (loop4): free_blocks=2415919504 [ 231.789253][ T1235] EXT4-fs (loop4): dirty_blocks=7696 [ 231.806596][ T1235] EXT4-fs (loop4): Block reservation details [ 231.824796][ T1235] EXT4-fs (loop4): i_reserved_data_blocks=481 [ 231.994438][ T1235] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 232.019015][ T1235] EXT4-fs (loop4): This should not happen!! Data will be lost [ 232.019015][ T1235] [ 232.039147][ T13] usb 2-1: USB disconnect, device number 6 [ 232.189401][ T4302] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 233.159801][ T4302] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.428868][ T4302] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.499423][ T4302] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.564205][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.669711][ T6181] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 234.646665][ T6204] ======================================================= [ 234.646665][ T6204] WARNING: The mand mount option has been deprecated and [ 234.646665][ T6204] and is ignored by this kernel. Remove the mand [ 234.646665][ T6204] option from the mount to silence this warning. [ 234.646665][ T6204] ======================================================= [ 234.768056][ T6204] fuse: Bad value for 'group_id' [ 235.310481][ T13] usb 4-1: USB disconnect, device number 7 [ 235.637138][ T6232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.473'. [ 237.382290][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 237.590398][ T6264] loop4: detected capacity change from 0 to 2048 [ 237.764603][ T6264] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 237.809324][ T4320] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 238.620246][ T6278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 238.688577][ T144] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 238.703966][ T144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 238.709445][ T4320] usb 3-1: Using ep0 maxpacket: 8 [ 238.734607][ T144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 238.734607][ T144] [ 238.773187][ T144] EXT4-fs (loop4): Total free blocks count 0 [ 238.785855][ T144] EXT4-fs (loop4): Free/Dirty block details [ 238.791911][ T144] EXT4-fs (loop4): free_blocks=2415919504 [ 238.797793][ T144] EXT4-fs (loop4): dirty_blocks=11456 [ 238.807630][ T144] EXT4-fs (loop4): Block reservation details [ 238.813835][ T144] EXT4-fs (loop4): i_reserved_data_blocks=716 [ 239.089338][ T4320] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 239.126285][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.134673][ T4320] usb 3-1: Product: syz [ 239.140054][ T4320] usb 3-1: Manufacturer: syz [ 239.144833][ T4320] usb 3-1: SerialNumber: syz [ 239.158471][ T4320] usb 3-1: config 0 descriptor?? [ 239.885337][ T4320] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 239.952360][ T4620] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 239.965389][ T4620] EXT4-fs (loop4): This should not happen!! Data will be lost [ 239.965389][ T4620] [ 240.020972][ T4320] dvb-usb: bulk message failed: -22 (2/0) [ 240.094919][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.143998][ T6263] dvb-usb: bulk message failed: -22 (4/0) [ 240.189391][ T6263] cxusb: i2c read failed [ 240.239552][ T4320] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 240.248806][ T4320] usb 3-1: media controller created [ 240.384886][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.519324][ T4320] cxusb: set interface failed [ 240.537614][ T4320] dvb-usb: bulk message failed: -22 (1/0) [ 240.690810][ T4320] DVB: Unable to find symbol mt352_attach() [ 240.696829][ T4320] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 240.955923][ T6291] bridge0: port 3(macvlan2) entered blocking state [ 240.999278][ T4320] rc_core: IR keymap rc-dvico-portable not found [ 241.009127][ T4320] Registered IR keymap rc-empty [ 241.032774][ T4320] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 241.144986][ T6291] bridge0: port 3(macvlan2) entered disabled state [ 241.496853][ T4320] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 241.655152][ T4320] dvb-usb: schedule remote query interval to 100 msecs. [ 241.730082][ T4320] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 241.929333][ T4320] usb 3-1: USB disconnect, device number 7 [ 242.115182][ T4320] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 242.515270][ T6328] program syz.4.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.770499][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 247.366332][ T6378] input: syz1 as /devices/virtual/input/input8 [ 247.579359][ T6383] netlink: 'syz.4.522': attribute type 10 has an invalid length. [ 247.603436][ T6383] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 247.826687][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.521'. [ 248.764089][ T6396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.528'. [ 248.958341][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 248.958357][ T26] audit: type=1326 audit(1768715015.988:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.2.533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a3abf6cb9 code=0x0 [ 249.821791][ T6419] netlink: 116 bytes leftover after parsing attributes in process `syz.1.534'. [ 249.874249][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.534'. [ 249.922896][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.534'. [ 253.515442][ T26] audit: type=1326 audit(1768715020.548:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 253.609195][ T26] audit: type=1326 audit(1768715020.598:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 253.764049][ T26] audit: type=1326 audit(1768715020.598:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 253.904763][ T26] audit: type=1326 audit(1768715020.598:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 254.008337][ T26] audit: type=1326 audit(1768715020.598:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 254.037985][ T26] audit: type=1326 audit(1768715020.598:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 254.118354][ T26] audit: type=1326 audit(1768715020.598:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 254.208676][ T26] audit: type=1326 audit(1768715020.598:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 254.329290][ T26] audit: type=1326 audit(1768715020.598:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 254.431163][ T26] audit: type=1326 audit(1768715020.598:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 254.463817][ T26] audit: type=1326 audit(1768715020.598:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 254.657515][ T26] audit: type=1326 audit(1768715020.598:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 254.725775][ T6486] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 254.762362][ T6486] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 254.829261][ T4302] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 255.649618][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.655983][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.768870][ T26] audit: type=1326 audit(1768715020.598:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 255.904413][ T26] audit: type=1326 audit(1768715020.598:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f73e30990d9 code=0x7ffc0000 [ 256.050057][ T4302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.085074][ T6501] netlink: 'syz.2.562': attribute type 10 has an invalid length. [ 256.130596][ T4302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.166332][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.561'. [ 256.183137][ T4302] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.197764][ T4302] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.211234][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.269986][ T4302] usb 4-1: config 0 descriptor?? [ 256.687684][ T6521] fuse: Bad value for 'group_id' [ 256.783078][ T4302] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 256.864839][ T4302] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 257.883036][ T6531] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 258.169026][ T6542] usb usb8: usbfs: process 6542 (syz.1.573) did not claim interface 0 before use [ 258.179801][ T6488] usb 4-1: string descriptor 0 read error: -71 [ 258.309190][ T4302] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 258.496469][ T6547] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 258.615730][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 259.176269][ T4242] usb 4-1: USB disconnect, device number 8 [ 265.831482][ T6625] netlink: 60 bytes leftover after parsing attributes in process `syz.1.599'. [ 265.933870][ C1] sd 0:0:1:0: tag#3041 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 265.943893][ C1] sd 0:0:1:0: tag#3041 CDB: Read(6) 08 00 00 00 00 00 00 00 00 00 00 00 [ 266.050368][ T6629] netlink: 'syz.4.600': attribute type 21 has an invalid length. [ 266.086634][ T6629] netlink: 156 bytes leftover after parsing attributes in process `syz.4.600'. [ 266.312796][ T6637] tipc: Enabling of bearer rejected, failed to enable media [ 266.972348][ T6647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.606'. [ 267.570383][ T6659] binder: BINDER_SET_CONTEXT_MGR already set [ 267.678146][ T6659] binder: 6656:6659 ioctl 4018620d 200000000040 returned -16 [ 272.730320][ T6677] tipc: Enabling of bearer rejected, already enabled [ 272.823478][ T6677] tipc: Enabling of bearer rejected, already enabled [ 273.588427][ T6696] syz.3.619 uses obsolete (PF_INET,SOCK_PACKET) [ 273.754289][ T6702] netlink: 14 bytes leftover after parsing attributes in process `syz.1.621'. [ 273.845122][ T6702] bridge0: port 3(macvlan2) entered disabled state [ 273.886311][ T6702] device macvlan2 left promiscuous mode [ 273.896293][ T6702] bridge0: port 3(macvlan2) entered disabled state [ 274.018194][ T6702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.093874][ T6702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.167774][ T6702] bond0 (unregistering): Released all slaves [ 277.579156][ T4242] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 277.869174][ T4242] usb 4-1: Using ep0 maxpacket: 16 [ 277.999461][ T4242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.030936][ T4242] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 278.075252][ T4242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.137789][ T4242] usb 4-1: config 0 descriptor?? [ 278.622242][ T4242] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 279.837873][ T4242] usb 4-1: USB disconnect, device number 9 [ 279.998254][ T6767] device syzkaller1 entered promiscuous mode [ 280.539163][ T4234] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 280.583606][ T6773] program syz.4.645 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.598033][ T6771] loop3: detected capacity change from 0 to 2048 [ 280.737243][ T6771] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 280.949454][ T4234] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 280.962842][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.675293][ T1277] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 281.729395][ T4234] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 281.755581][ T1277] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 281.779166][ T4234] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 281.827193][ T4234] usb 3-1: Manufacturer: syz [ 281.845257][ T1277] EXT4-fs (loop3): This should not happen!! Data will be lost [ 281.845257][ T1277] [ 281.866090][ T4234] usb 3-1: config 0 descriptor?? [ 281.949197][ T1277] EXT4-fs (loop3): Total free blocks count 0 [ 282.026263][ T1277] EXT4-fs (loop3): Free/Dirty block details [ 282.049223][ T4234] rc_core: IR keymap rc-hauppauge not found [ 282.055367][ T4234] Registered IR keymap rc-empty [ 282.056848][ T1277] EXT4-fs (loop3): free_blocks=2415919504 [ 282.092732][ T1277] EXT4-fs (loop3): dirty_blocks=32 [ 282.118257][ T1277] EXT4-fs (loop3): Block reservation details [ 282.139301][ T4234] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 282.149705][ T1277] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 282.171187][ T1277] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 282.182891][ T4234] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 282.248480][ T1277] EXT4-fs (loop3): This should not happen!! Data will be lost [ 282.248480][ T1277] [ 282.306470][ T6789] netlink: 'syz.4.651': attribute type 10 has an invalid length. [ 282.367813][ T4234] usb 3-1: USB disconnect, device number 8 [ 283.769172][ T4234] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 283.869272][ T2242] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 284.639157][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 284.799235][ T2242] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.799490][ T4234] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 284.858002][ T4234] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 284.899312][ T2242] usb 3-1: config 13 has an invalid interface number: 50 but max is 3 [ 284.907499][ T2242] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 284.928497][ T4234] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 284.947892][ T2242] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 284.982785][ T2242] usb 3-1: config 13 has no interface number 0 [ 284.989507][ T2242] usb 3-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 285.003221][ T4234] usb 4-1: config 250 has no interface number 0 [ 285.023617][ T4234] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 285.059402][ T4234] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 285.070027][ T2242] usb 3-1: config 13 interface 50 has no altsetting 0 [ 285.090924][ T4234] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 56 [ 285.139202][ T4234] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 285.213799][ T4234] usb 4-1: config 250 interface 228 has no altsetting 0 [ 285.259256][ T2242] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 285.284929][ T2242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.345904][ T2242] usb 3-1: Product: syz [ 285.356042][ T2242] usb 3-1: Manufacturer: syz [ 285.379364][ T4234] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 285.394943][ T2242] usb 3-1: SerialNumber: syz [ 285.399189][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 285.476313][ T4234] usb 4-1: Product: syz [ 285.489285][ T4234] usb 4-1: SerialNumber: syz [ 285.540357][ T4234] hub 4-1:250.228: bad descriptor, ignoring hub [ 285.546676][ T4234] hub: probe of 4-1:250.228 failed with error -5 [ 285.611324][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 285.611340][ T26] audit: type=1326 audit(1768715052.648:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cbcdccb9 code=0x7ffc0000 [ 285.689179][ T26] audit: type=1326 audit(1768715052.648:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63cbcdccb9 code=0x7ffc0000 [ 285.752001][ T4234] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 10 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 285.814401][ T2242] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 285.839298][ T144] usb 3-1: Failed to submit usb control message: -71 [ 285.859479][ T2242] usb 3-1: USB disconnect, device number 9 [ 285.868217][ T144] usb 3-1: unable to send the bmi data to the device: -71 [ 285.975387][ T144] usb 3-1: unable to get target info from device [ 285.986033][ T144] usb 3-1: could not get target info (-71) [ 286.010579][ T144] usb 3-1: could not probe fw (-71) [ 286.051313][ T4234] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 286.129377][ T4199] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 286.369353][ T4199] usb 5-1: Using ep0 maxpacket: 8 [ 286.529435][ T4199] usb 5-1: unable to get BOS descriptor or descriptor too short [ 286.629307][ T4199] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 286.656007][ T4199] usb 5-1: config 7 has no interface number 0 [ 286.919247][ T4199] usb 5-1: string descriptor 0 read error: -22 [ 286.927739][ T4199] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 286.937849][ T4199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.120239][ T2242] usb 4-1: USB disconnect, device number 10 [ 287.140919][ T2242] usblp0: removed [ 287.179178][ T4302] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 287.315942][ T4199] usb 5-1: USB disconnect, device number 3 [ 287.419167][ T4302] usb 2-1: Using ep0 maxpacket: 32 [ 287.539755][ T4302] usb 2-1: config 0 interface 0 has no altsetting 0 [ 288.539543][ T6856] netlink: 'syz.2.668': attribute type 46 has an invalid length. [ 288.580648][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 288.639593][ T4302] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 289.423543][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.488210][ T4302] usb 2-1: Product: syz [ 289.498441][ T4302] usb 2-1: Manufacturer: syz [ 289.551696][ T4302] usb 2-1: SerialNumber: syz [ 289.578377][ T4302] usb 2-1: config 0 descriptor?? [ 290.990020][ T4234] usb 2-1: USB disconnect, device number 7 [ 298.029181][ T4242] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 298.289230][ T4242] usb 5-1: Using ep0 maxpacket: 8 [ 298.526140][ T6978] tipc: Enabling of bearer rejected, already enabled [ 298.546761][ T6978] tipc: Enabling of bearer rejected, already enabled [ 298.569463][ T4242] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 298.596164][ T4242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.665577][ T4242] usb 5-1: Product: syz [ 298.669979][ T4242] usb 5-1: Manufacturer: syz [ 299.609191][ T4242] usb 5-1: SerialNumber: syz [ 299.646237][ T4242] usb 5-1: config 0 descriptor?? [ 299.726410][ T4242] gspca_main: sq905-2.14.0 probing 2770:9120 [ 300.149314][ T4242] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 300.194456][ T4242] sq905: probe of 5-1:0.0 failed with error -71 [ 300.235513][ T4242] usb 5-1: USB disconnect, device number 4 [ 301.289757][ T7007] netlink: 'syz.0.710': attribute type 10 has an invalid length. [ 301.669195][ T4234] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 301.701213][ T7022] IPVS: length: 66 != 8 [ 301.939151][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 302.069197][ T4234] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 302.086187][ T4234] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 302.129254][ T4234] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 302.165886][ T4234] usb 3-1: config 1 has no interface number 0 [ 302.204159][ T4234] usb 3-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 302.231878][ T4234] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 302.281667][ T4234] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 302.309283][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.425615][ T4234] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 302.629276][ T4234] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 302.645765][ T4234] snd_usb_pod 3-1:1.1: invalid control EP [ 302.684999][ T4234] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 302.711690][ T4234] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 302.734460][ T4234] snd_usb_pod: probe of 3-1:1.1 failed with error -22 [ 303.415399][ T4234] usb 3-1: USB disconnect, device number 10 [ 305.585755][ T7050] netlink: 'syz.2.724': attribute type 10 has an invalid length. [ 306.742739][ T7070] syz.0.730 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 308.885770][ T7084] netlink: 'syz.2.735': attribute type 10 has an invalid length. [ 309.130229][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 310.813799][ T7112] netlink: 80 bytes leftover after parsing attributes in process `syz.2.746'. [ 311.830474][ T7119] netlink: 'syz.0.748': attribute type 10 has an invalid length. [ 311.981617][ T7131] device macvlan1 entered promiscuous mode [ 314.228978][ T7161] netlink: 'syz.4.763': attribute type 10 has an invalid length. [ 314.504987][ T7176] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 314.929199][ T4234] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 315.330122][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD4, skipping [ 315.579530][ T4234] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.607062][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.684268][ T4234] usb 3-1: Product: syz [ 315.717800][ T4234] usb 3-1: Manufacturer: syz [ 315.746801][ T4234] usb 3-1: SerialNumber: syz [ 315.807470][ T4234] usb 3-1: config 0 descriptor?? [ 315.851250][ T7177] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 315.902305][ T4234] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 315.984057][ T6746] udevd[6746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.074409][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.081629][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.484804][ T7209] netlink: 'syz.1.776': attribute type 10 has an invalid length. [ 318.731769][ T7213] netlink: 'syz.3.778': attribute type 29 has an invalid length. [ 318.780367][ T7213] netlink: 'syz.3.778': attribute type 29 has an invalid length. [ 318.834115][ T7213] device syzkaller1 entered promiscuous mode [ 319.214581][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 319.397870][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 319.429347][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.782'. [ 319.508628][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.782'. [ 319.606318][ T4175] usb 3-1: USB disconnect, device number 11 [ 320.982385][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 321.617708][ T7269] tipc: Started in network mode [ 321.628328][ T7269] tipc: Node identity 2a11634edd84, cluster identity 4711 [ 321.691844][ T7269] tipc: Enabled bearer , priority 0 [ 321.770938][ T7271] device syzkaller0 entered promiscuous mode [ 321.875749][ T7269] tipc: Resetting bearer [ 321.928089][ T7267] tipc: Resetting bearer [ 321.995176][ T7267] tipc: Disabling bearer [ 323.862908][ T7288] device syzkaller0 entered promiscuous mode [ 324.318174][ T7303] device geneve2 entered promiscuous mode [ 324.488763][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 325.902185][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 327.093311][ T7358] ax25_connect(): syz.4.830 uses autobind, please contact jreuter@yaina.de [ 327.364493][ T7358] ax25_connect(): syz.4.830 uses autobind, please contact jreuter@yaina.de [ 328.102830][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 329.249820][ T7418] device syzkaller0 entered promiscuous mode [ 329.563007][ T7422] device syzkaller0 entered promiscuous mode [ 330.950305][ T7462] device syzkaller1 entered promiscuous mode [ 331.155172][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888061f09000: rx timeout, send abort [ 331.165931][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888061f09000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 331.277961][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.870'. [ 331.334352][ T7480] device syzkaller0 entered promiscuous mode [ 332.884563][ T7515] netlink: 72 bytes leftover after parsing attributes in process `syz.2.885'. [ 333.159184][ T7517] device syzkaller0 entered promiscuous mode [ 333.211684][ T7517] 0: reclassify loop, rule prio 0, protocol 800 [ 333.773607][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.890'. [ 335.445135][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 335.805796][ T7463] Set syz1 is full, maxelem 65536 reached [ 337.503456][ T4234] Bluetooth: hci3: command 0x0405 tx timeout [ 338.014870][ T7602] device syzkaller0 entered promiscuous mode [ 338.557270][ T7619] tipc: Enabled bearer , priority 10 [ 338.589812][ T7619] tipc: Enabled bearer , priority 10 [ 338.827187][ T7625] device syzkaller0 entered promiscuous mode [ 339.932851][ T7640] netlink: 76 bytes leftover after parsing attributes in process `syz.3.929'. [ 339.953495][ T4242] tipc: Node number set to 3997809372 [ 340.016491][ T7645] device syzkaller0 entered promiscuous mode [ 340.340995][ T7655] tipc: Enabling of bearer rejected, already enabled [ 340.389480][ T7655] tipc: Enabling of bearer rejected, already enabled [ 340.482872][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.936'. [ 340.523388][ T7664] netlink: 64 bytes leftover after parsing attributes in process `syz.3.939'. [ 340.586679][ T7664] block nbd0: not configured, cannot reconfigure [ 340.628877][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.940'. [ 340.703061][ T7669] netlink: 'syz.0.940': attribute type 7 has an invalid length. [ 340.839117][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 340.898034][ T7669] device ip6gretap0 entered promiscuous mode [ 341.096233][ T7669] device syz_tun entered promiscuous mode [ 341.264104][ T7669] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 341.582327][ T7669] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 341.925345][ T7685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'. [ 342.000007][ T7689] device syzkaller0 entered promiscuous mode [ 342.205018][ T7697] tipc: Enabling of bearer rejected, already enabled [ 342.261111][ T7697] tipc: Enabling of bearer rejected, already enabled [ 342.368018][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 343.608838][ T7737] device syzkaller0 entered promiscuous mode [ 343.825353][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 343.844268][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 343.939263][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.967'. [ 344.969168][ T7798] device syzkaller0 entered promiscuous mode [ 345.383080][ T7808] device syzkaller0 entered promiscuous mode [ 345.738326][ T7823] netlink: 'syz.2.991': attribute type 12 has an invalid length. [ 345.785936][ T7823] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 345.822403][ T7823] netlink: 'syz.2.991': attribute type 2 has an invalid length. [ 345.840602][ T7823] netlink: 'syz.2.991': attribute type 3 has an invalid length. [ 345.897129][ T7829] __nla_validate_parse: 4 callbacks suppressed [ 345.897145][ T7829] netlink: 116 bytes leftover after parsing attributes in process `syz.0.992'. [ 346.374987][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.996'. [ 347.416066][ T7861] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1008'. [ 347.457364][ T7859] device syzkaller0 entered promiscuous mode [ 347.616733][ T7868] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1009'. [ 349.735896][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 350.076133][ T7919] device syzkaller0 entered promiscuous mode [ 350.172412][ T7923] device syzkaller0 entered promiscuous mode [ 350.264506][ T7926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1029'. [ 350.283798][ T7926] (unnamed net_device) (uninitialized): option ad_select: invalid value (24) [ 351.997574][ T7960] device syzkaller0 entered promiscuous mode [ 352.045870][ T7958] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1039'. [ 352.160391][ T7963] device syzkaller0 entered promiscuous mode [ 353.570744][ T7993] device syzkaller0 entered promiscuous mode [ 353.685878][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'. [ 353.715886][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1055'. [ 353.977728][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 354.006423][ T8008] device gretap1 entered promiscuous mode [ 354.028883][ T8006] tipc: Enabled bearer , priority 0 [ 354.050269][ T8006] device syzkaller0 entered promiscuous mode [ 354.097885][ T8006] tipc: Resetting bearer [ 354.128795][ T8005] tipc: Resetting bearer [ 354.188886][ T8005] tipc: Disabling bearer [ 354.536235][ T8033] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1068'. [ 355.431541][ T8042] tipc: Enabling of bearer rejected, already enabled [ 355.486021][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1075'. [ 355.530211][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 355.617933][ T8042] tipc: Enabling of bearer rejected, already enabled [ 355.848308][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1078'. [ 357.060770][ T8083] tipc: Enabled bearer , priority 10 [ 357.178172][ T8083] tipc: Enabled bearer , priority 10 [ 357.269853][ T8093] tipc: Enabling of bearer rejected, failed to enable media [ 358.169144][ T4302] tipc: Node number set to 4153762638 [ 358.835647][ T8117] device syzkaller0 entered promiscuous mode [ 359.736032][ T8122] netlink: 'syz.1.1101': attribute type 4 has an invalid length. [ 359.979753][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 360.029746][ T8126] tipc: Enabling of bearer rejected, already enabled [ 360.114511][ T8126] tipc: Enabling of bearer rejected, already enabled [ 362.113927][ T8166] device syzkaller0 entered promiscuous mode [ 362.307804][ T8172] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 362.368604][ T8172] [ 362.371228][ T8172] ====================================================== [ 362.378390][ T8172] WARNING: possible circular locking dependency detected [ 362.385449][ T8172] syzkaller #0 Not tainted [ 362.389898][ T8172] ------------------------------------------------------ [ 362.397115][ T8172] syz.4.1117/8172 is trying to acquire lock: [ 362.403115][ T8172] ffff88814c8ee120 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_device_event+0x217/0x4f0 [ 362.412671][ T8172] [ 362.412671][ T8172] but task is already holding lock: [ 362.420587][ T8172] ffffffff8d434808 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 362.428903][ T8172] [ 362.428903][ T8172] which lock already depends on the new lock. [ 362.428903][ T8172] [ 362.439614][ T8172] [ 362.439614][ T8172] the existing dependency chain (in reverse order) is: [ 362.449027][ T8172] [ 362.449027][ T8172] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 362.456569][ T8172] __mutex_lock_common+0x1e3/0x2400 [ 362.462909][ T8172] mutex_lock_nested+0x17/0x20 [ 362.468256][ T8172] ax25_setsockopt+0x859/0xa60 [ 362.473603][ T8172] __sys_setsockopt+0x2bf/0x3d0 [ 362.479026][ T8172] __x64_sys_setsockopt+0xb1/0xc0 [ 362.484616][ T8172] do_syscall_64+0x4c/0xa0 [ 362.489599][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.496056][ T8172] [ 362.496056][ T8172] -> #0 (sk_lock-AF_AX25){+.+.}-{0:0}: [ 362.503752][ T8172] __lock_acquire+0x2c42/0x7d10 [ 362.509171][ T8172] lock_acquire+0x19e/0x400 [ 362.514234][ T8172] lock_sock_nested+0x44/0x100 [ 362.519558][ T8172] ax25_device_event+0x217/0x4f0 [ 362.525416][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 362.531453][ T8172] __dev_notify_flags+0x158/0x300 [ 362.537040][ T8172] dev_change_flags+0xe3/0x1a0 [ 362.542392][ T8172] dev_ifsioc+0x14b/0xf90 [ 362.547287][ T8172] dev_ioctl+0x55f/0xe50 [ 362.552087][ T8172] sock_do_ioctl+0x245/0x320 [ 362.557246][ T8172] sock_ioctl+0x4df/0x720 [ 362.562239][ T8172] __se_sys_ioctl+0xfa/0x170 [ 362.567390][ T8172] do_syscall_64+0x4c/0xa0 [ 362.572370][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.578912][ T8172] [ 362.578912][ T8172] other info that might help us debug this: [ 362.578912][ T8172] [ 362.589168][ T8172] Possible unsafe locking scenario: [ 362.589168][ T8172] [ 362.596642][ T8172] CPU0 CPU1 [ 362.602040][ T8172] ---- ---- [ 362.607458][ T8172] lock(rtnl_mutex); [ 362.611470][ T8172] lock(sk_lock-AF_AX25); [ 362.618446][ T8172] lock(rtnl_mutex); [ 362.624987][ T8172] lock(sk_lock-AF_AX25); [ 362.629447][ T8172] [ 362.629447][ T8172] *** DEADLOCK *** [ 362.629447][ T8172] [ 362.637791][ T8172] 1 lock held by syz.4.1117/8172: [ 362.642843][ T8172] #0: ffffffff8d434808 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54e/0xe50 [ 362.651603][ T8172] [ 362.651603][ T8172] stack backtrace: [ 362.657575][ T8172] CPU: 0 PID: 8172 Comm: syz.4.1117 Not tainted syzkaller #0 [ 362.664979][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.675080][ T8172] Call Trace: [ 362.678391][ T8172] [ 362.681355][ T8172] dump_stack_lvl+0x188/0x250 [ 362.686167][ T8172] ? load_image+0x400/0x400 [ 362.690714][ T8172] ? show_regs_print_info+0x20/0x20 [ 362.695957][ T8172] ? print_circular_bug+0x12b/0x1a0 [ 362.701285][ T8172] check_noncircular+0x296/0x330 [ 362.706392][ T8172] ? stack_trace_snprint+0xf0/0xf0 [ 362.711550][ T8172] ? add_chain_block+0x940/0x940 [ 362.716520][ T8172] ? lockdep_lock+0xf1/0x1f0 [ 362.721151][ T8172] ? mark_lock+0x94/0x320 [ 362.725520][ T8172] __lock_acquire+0x2c42/0x7d10 [ 362.730510][ T8172] ? mark_lock+0x94/0x320 [ 362.734970][ T8172] ? verify_lock_unused+0x140/0x140 [ 362.740823][ T8172] ? verify_lock_unused+0x140/0x140 [ 362.746165][ T8172] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 362.752194][ T8172] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 362.758216][ T8172] ? mark_lock+0x94/0x320 [ 362.762628][ T8172] lock_acquire+0x19e/0x400 [ 362.767312][ T8172] ? ax25_device_event+0x217/0x4f0 [ 362.772556][ T8172] ? lock_chain_count+0x20/0x20 [ 362.777604][ T8172] ? read_lock_is_recursive+0x10/0x10 [ 362.783213][ T8172] ? __local_bh_enable_ip+0x136/0x1c0 [ 362.788629][ T8172] ? lockdep_hardirqs_on+0x94/0x140 [ 362.793872][ T8172] ? __local_bh_enable_ip+0x136/0x1c0 [ 362.799286][ T8172] ? _local_bh_enable+0xa0/0xa0 [ 362.804177][ T8172] lock_sock_nested+0x44/0x100 [ 362.808982][ T8172] ? ax25_device_event+0x217/0x4f0 [ 362.814131][ T8172] ax25_device_event+0x217/0x4f0 [ 362.819106][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 362.824522][ T8172] __dev_notify_flags+0x158/0x300 [ 362.829587][ T8172] ? __dev_change_flags+0x6a0/0x6a0 [ 362.834829][ T8172] ? __dev_change_flags+0x4d0/0x6a0 [ 362.840074][ T8172] ? dev_get_flags+0x1c0/0x1c0 [ 362.845009][ T8172] ? dev_ioctl+0x54e/0xe50 [ 362.849465][ T8172] dev_change_flags+0xe3/0x1a0 [ 362.854264][ T8172] dev_ifsioc+0x14b/0xf90 [ 362.858621][ T8172] ? dev_ioctl+0xe50/0xe50 [ 362.863072][ T8172] ? apparmor_capable+0x12c/0x190 [ 362.868134][ T8172] ? full_name_hash+0x8e/0xe0 [ 362.873077][ T8172] dev_ioctl+0x55f/0xe50 [ 362.877540][ T8172] ? _copy_from_user+0x111/0x170 [ 362.882517][ T8172] sock_do_ioctl+0x245/0x320 [ 362.887147][ T8172] ? sock_show_fdinfo+0xb0/0xb0 [ 362.892134][ T8172] sock_ioctl+0x4df/0x720 [ 362.896512][ T8172] ? sock_poll+0x410/0x410 [ 362.900967][ T8172] ? bpf_lsm_file_ioctl+0x5/0x10 [ 362.905936][ T8172] ? security_file_ioctl+0x7c/0xa0 [ 362.911084][ T8172] ? sock_poll+0x410/0x410 [ 362.915530][ T8172] __se_sys_ioctl+0xfa/0x170 [ 362.920164][ T8172] do_syscall_64+0x4c/0xa0 [ 362.924616][ T8172] ? clear_bhb_loop+0x30/0x80 [ 362.929428][ T8172] ? clear_bhb_loop+0x30/0x80 [ 362.934152][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.940088][ T8172] RIP: 0033:0x7f63cbcdccb9 [ 362.944537][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.964706][ T8172] RSP: 002b:00007f63c9f38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.973184][ T8172] RAX: ffffffffffffffda RBX: 00007f63cbf57fa0 RCX: 00007f63cbcdccb9 [ 362.981193][ T8172] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 362.989206][ T8172] RBP: 00007f63cbd4abf7 R08: 0000000000000000 R09: 0000000000000000 [ 362.997202][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.005216][ T8172] R13: 00007f63cbf58038 R14: 00007f63cbf57fa0 R15: 00007fff2275af98 [ 363.013239][ T8172] [ 363.052141][ T8172] ================================================================== [ 363.060268][ T8172] BUG: KASAN: use-after-free in ax25_dev_device_down+0x35e/0x520 [ 363.068035][ T8172] Write of size 4 at addr ffff8880240c0db8 by task syz.4.1117/8172 [ 363.075961][ T8172] [ 363.078350][ T8172] CPU: 1 PID: 8172 Comm: syz.4.1117 Not tainted syzkaller #0 [ 363.085762][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.095843][ T8172] Call Trace: [ 363.099179][ T8172] [ 363.102143][ T8172] dump_stack_lvl+0x188/0x250 [ 363.106860][ T8172] ? show_regs_print_info+0x20/0x20 [ 363.112243][ T8172] ? _printk+0xda/0x130 [ 363.116526][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 363.122029][ T8172] ? load_image+0x400/0x400 [ 363.126873][ T8172] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 363.132552][ T8172] print_address_description+0x60/0x2d0 [ 363.138157][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 363.143672][ T8172] kasan_report+0xdf/0x130 [ 363.148121][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 363.153518][ T8172] kasan_check_range+0x235/0x290 [ 363.158484][ T8172] ax25_dev_device_down+0x35e/0x520 [ 363.163716][ T8172] ax25_device_event+0x4b4/0x4f0 [ 363.168947][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 363.174351][ T8172] __dev_notify_flags+0x158/0x300 [ 363.179519][ T8172] ? __dev_change_flags+0x6a0/0x6a0 [ 363.184739][ T8172] ? __dev_change_flags+0x4d0/0x6a0 [ 363.189964][ T8172] ? dev_get_flags+0x1c0/0x1c0 [ 363.194853][ T8172] ? dev_ioctl+0x54e/0xe50 [ 363.199287][ T8172] dev_change_flags+0xe3/0x1a0 [ 363.204091][ T8172] dev_ifsioc+0x14b/0xf90 [ 363.208794][ T8172] ? dev_ioctl+0xe50/0xe50 [ 363.213762][ T8172] ? apparmor_capable+0x12c/0x190 [ 363.218894][ T8172] ? full_name_hash+0x8e/0xe0 [ 363.223598][ T8172] dev_ioctl+0x55f/0xe50 [ 363.227944][ T8172] ? _copy_from_user+0x111/0x170 [ 363.232931][ T8172] sock_do_ioctl+0x245/0x320 [ 363.237542][ T8172] ? sock_show_fdinfo+0xb0/0xb0 [ 363.242508][ T8172] sock_ioctl+0x4df/0x720 [ 363.246952][ T8172] ? sock_poll+0x410/0x410 [ 363.251392][ T8172] ? bpf_lsm_file_ioctl+0x5/0x10 [ 363.256364][ T8172] ? security_file_ioctl+0x7c/0xa0 [ 363.261491][ T8172] ? sock_poll+0x410/0x410 [ 363.265924][ T8172] __se_sys_ioctl+0xfa/0x170 [ 363.270535][ T8172] do_syscall_64+0x4c/0xa0 [ 363.274982][ T8172] ? clear_bhb_loop+0x30/0x80 [ 363.279678][ T8172] ? clear_bhb_loop+0x30/0x80 [ 363.284458][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.290467][ T8172] RIP: 0033:0x7f63cbcdccb9 [ 363.294899][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.314519][ T8172] RSP: 002b:00007f63c9f38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.322947][ T8172] RAX: ffffffffffffffda RBX: 00007f63cbf57fa0 RCX: 00007f63cbcdccb9 [ 363.330933][ T8172] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 363.338919][ T8172] RBP: 00007f63cbd4abf7 R08: 0000000000000000 R09: 0000000000000000 [ 363.346900][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.354881][ T8172] R13: 00007f63cbf58038 R14: 00007f63cbf57fa0 R15: 00007fff2275af98 [ 363.362876][ T8172] [ 363.365902][ T8172] [ 363.368242][ T8172] Allocated by task 8172: [ 363.372694][ T8172] __kasan_kmalloc+0xb5/0xf0 [ 363.377304][ T8172] ax25_dev_device_up+0x50/0x580 [ 363.382254][ T8172] ax25_device_event+0x483/0x4f0 [ 363.387210][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 363.392596][ T8172] __dev_notify_flags+0x194/0x300 [ 363.397639][ T8172] dev_change_flags+0xe3/0x1a0 [ 363.402421][ T8172] dev_ifsioc+0x14b/0xf90 [ 363.406762][ T8172] dev_ioctl+0x55f/0xe50 [ 363.411014][ T8172] sock_do_ioctl+0x245/0x320 [ 363.415702][ T8172] sock_ioctl+0x4df/0x720 [ 363.420042][ T8172] __se_sys_ioctl+0xfa/0x170 [ 363.424645][ T8172] do_syscall_64+0x4c/0xa0 [ 363.429079][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.434988][ T8172] [ 363.437330][ T8172] Freed by task 8172: [ 363.441334][ T8172] kasan_set_track+0x4b/0x70 [ 363.445947][ T8172] kasan_set_free_info+0x1f/0x40 [ 363.450898][ T8172] ____kasan_slab_free+0xd5/0x110 [ 363.455945][ T8172] slab_free_freelist_hook+0xea/0x170 [ 363.461341][ T8172] kfree+0xef/0x2a0 [ 363.465178][ T8172] ax25_dev_device_down+0x1c0/0x520 [ 363.470398][ T8172] ax25_device_event+0x4b4/0x4f0 [ 363.475356][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 363.481101][ T8172] __dev_notify_flags+0x158/0x300 [ 363.486146][ T8172] dev_change_flags+0xe3/0x1a0 [ 363.490929][ T8172] dev_ifsioc+0x14b/0xf90 [ 363.495363][ T8172] dev_ioctl+0x55f/0xe50 [ 363.499617][ T8172] sock_do_ioctl+0x245/0x320 [ 363.504220][ T8172] sock_ioctl+0x4df/0x720 [ 363.508559][ T8172] __se_sys_ioctl+0xfa/0x170 [ 363.513178][ T8172] do_syscall_64+0x4c/0xa0 [ 363.517735][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.523667][ T8172] [ 363.526008][ T8172] Last potentially related work creation: [ 363.531741][ T8172] kasan_save_stack+0x35/0x60 [ 363.536430][ T8172] kasan_record_aux_stack+0xb8/0x100 [ 363.541729][ T8172] call_rcu+0x189/0x950 [ 363.545896][ T8172] addrconf_ifdown+0x16ee/0x19c0 [ 363.550846][ T8172] addrconf_notify+0x445/0xf00 [ 363.555628][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 363.561096][ T8172] unregister_netdevice_many+0x1049/0x19f0 [ 363.566913][ T8172] rtnl_dellink+0x52b/0x7b0 [ 363.571429][ T8172] rtnetlink_rcv_msg+0x844/0xf30 [ 363.576382][ T8172] netlink_rcv_skb+0x1f5/0x440 [ 363.581173][ T8172] netlink_unicast+0x774/0x920 [ 363.585955][ T8172] netlink_sendmsg+0x8ba/0xbe0 [ 363.590736][ T8172] ____sys_sendmsg+0x5b7/0x8f0 [ 363.595510][ T8172] ___sys_sendmsg+0x236/0x2e0 [ 363.600285][ T8172] __se_sys_sendmsg+0x1af/0x290 [ 363.605148][ T8172] do_syscall_64+0x4c/0xa0 [ 363.609586][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.615490][ T8172] [ 363.617851][ T8172] The buggy address belongs to the object at ffff8880240c0d00 [ 363.617851][ T8172] which belongs to the cache kmalloc-192 of size 192 [ 363.631996][ T8172] The buggy address is located 184 bytes inside of [ 363.631996][ T8172] 192-byte region [ffff8880240c0d00, ffff8880240c0dc0) [ 363.645297][ T8172] The buggy address belongs to the page: [ 363.650940][ T8172] page:ffffea0000903000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x240c0 [ 363.661102][ T8172] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 363.668685][ T8172] raw: 00fff00000000200 ffffea0000909040 0000000d00000008 ffff888016c41a00 [ 363.677313][ T8172] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 363.685906][ T8172] page dumped because: kasan: bad access detected [ 363.692414][ T8172] page_owner tracks the page as allocated [ 363.698137][ T8172] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 10645267839, free_ts 10331143484 [ 363.714160][ T8172] get_page_from_freelist+0x1bbd/0x1ca0 [ 363.719726][ T8172] __alloc_pages+0x1ee/0x480 [ 363.724333][ T8172] alloc_page_interleave+0x24/0x1e0 [ 363.729546][ T8172] new_slab+0xc0/0x4b0 [ 363.733626][ T8172] ___slab_alloc+0x80a/0xdd0 [ 363.738667][ T8172] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 363.744056][ T8172] call_usermodehelper_setup+0x8a/0x260 [ 363.749701][ T8172] kobject_uevent_env+0x65e/0x890 [ 363.754741][ T8172] really_probe+0x77d/0xc80 [ 363.759261][ T8172] __driver_probe_device+0x18c/0x330 [ 363.764558][ T8172] driver_probe_device+0x4f/0x420 [ 363.769592][ T8172] __device_attach_driver+0x2b0/0x500 [ 363.775063][ T8172] bus_for_each_drv+0x184/0x210 [ 363.779926][ T8172] __device_attach+0x2a8/0x480 [ 363.784708][ T8172] bus_probe_device+0xbc/0x1e0 [ 363.789571][ T8172] device_add+0xa00/0xfb0 [ 363.793919][ T8172] page last free stack trace: [ 363.798596][ T8172] free_unref_page_prepare+0x637/0x6c0 [ 363.804072][ T8172] free_unref_page+0x8f/0x2a0 [ 363.808768][ T8172] __vunmap+0x8b9/0xa50 [ 363.813121][ T8172] free_work+0x56/0x80 [ 363.817202][ T8172] process_one_work+0x85f/0x1010 [ 363.822182][ T8172] worker_thread+0xaa6/0x1290 [ 363.826895][ T8172] kthread+0x436/0x520 [ 363.830989][ T8172] ret_from_fork+0x1f/0x30 [ 363.835447][ T8172] [ 363.838016][ T8172] Memory state around the buggy address: [ 363.843677][ T8172] ffff8880240c0c80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 363.851785][ T8172] ffff8880240c0d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 363.860205][ T8172] >ffff8880240c0d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 363.868366][ T8172] ^ [ 363.874363][ T8172] ffff8880240c0e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 363.882523][ T8172] ffff8880240c0e80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 363.890691][ T8172] ================================================================== [ 363.908156][ T8172] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 363.915402][ T8172] CPU: 0 PID: 8172 Comm: syz.4.1117 Tainted: G B syzkaller #0 [ 363.924271][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.934357][ T8172] Call Trace: [ 363.937672][ T8172] [ 363.940723][ T8172] dump_stack_lvl+0x188/0x250 [ 363.945434][ T8172] ? show_regs_print_info+0x20/0x20 [ 363.950677][ T8172] ? load_image+0x400/0x400 [ 363.955224][ T8172] panic+0x2e5/0x810 [ 363.959145][ T8172] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 363.965335][ T8172] ? bpf_jit_dump+0xd0/0xd0 [ 363.969874][ T8172] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 363.975887][ T8172] ? _raw_spin_unlock+0x40/0x40 [ 363.980775][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 363.986176][ T8172] check_panic_on_warn+0x80/0xa0 [ 363.991152][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 363.996559][ T8172] end_report+0x6d/0xf0 [ 364.000752][ T8172] kasan_report+0x102/0x130 [ 364.005289][ T8172] ? ax25_dev_device_down+0x35e/0x520 [ 364.010689][ T8172] kasan_check_range+0x235/0x290 [ 364.015657][ T8172] ax25_dev_device_down+0x35e/0x520 [ 364.020889][ T8172] ax25_device_event+0x4b4/0x4f0 [ 364.025861][ T8172] raw_notifier_call_chain+0xcb/0x160 [ 364.031535][ T8172] __dev_notify_flags+0x158/0x300 [ 364.036597][ T8172] ? __dev_change_flags+0x6a0/0x6a0 [ 364.041869][ T8172] ? __dev_change_flags+0x4d0/0x6a0 [ 364.047135][ T8172] ? dev_get_flags+0x1c0/0x1c0 [ 364.051934][ T8172] ? dev_ioctl+0x54e/0xe50 [ 364.056377][ T8172] dev_change_flags+0xe3/0x1a0 [ 364.061172][ T8172] dev_ifsioc+0x14b/0xf90 [ 364.065541][ T8172] ? dev_ioctl+0xe50/0xe50 [ 364.069982][ T8172] ? apparmor_capable+0x12c/0x190 [ 364.075032][ T8172] ? full_name_hash+0x8e/0xe0 [ 364.079760][ T8172] dev_ioctl+0x55f/0xe50 [ 364.084117][ T8172] ? _copy_from_user+0x111/0x170 [ 364.089168][ T8172] sock_do_ioctl+0x245/0x320 [ 364.094223][ T8172] ? sock_show_fdinfo+0xb0/0xb0 [ 364.099112][ T8172] sock_ioctl+0x4df/0x720 [ 364.103468][ T8172] ? sock_poll+0x410/0x410 [ 364.107916][ T8172] ? bpf_lsm_file_ioctl+0x5/0x10 [ 364.112885][ T8172] ? security_file_ioctl+0x7c/0xa0 [ 364.118045][ T8172] ? sock_poll+0x410/0x410 [ 364.122505][ T8172] __se_sys_ioctl+0xfa/0x170 [ 364.127236][ T8172] do_syscall_64+0x4c/0xa0 [ 364.131693][ T8172] ? clear_bhb_loop+0x30/0x80 [ 364.136408][ T8172] ? clear_bhb_loop+0x30/0x80 [ 364.141116][ T8172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 364.147045][ T8172] RIP: 0033:0x7f63cbcdccb9 [ 364.151834][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.171579][ T8172] RSP: 002b:00007f63c9f38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.180041][ T8172] RAX: ffffffffffffffda RBX: 00007f63cbf57fa0 RCX: 00007f63cbcdccb9 [ 364.188044][ T8172] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 364.196184][ T8172] RBP: 00007f63cbd4abf7 R08: 0000000000000000 R09: 0000000000000000 [ 364.204180][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.212173][ T8172] R13: 00007f63cbf58038 R14: 00007f63cbf57fa0 R15: 00007fff2275af98 [ 364.220179][ T8172] [ 364.223520][ T8172] Kernel Offset: disabled [ 364.227958][ T8172] Rebooting in 86400 seconds..