last executing test programs: 8m17.3827451s ago: executing program 32 (id=3478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x2004c004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 3m30.263275668s ago: executing program 33 (id=5786): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f0000002700)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 3m0.872049275s ago: executing program 34 (id=6005): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x25d6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x8, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12042, 0x0) 2m56.210638034s ago: executing program 4 (id=6042): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000102c0)=[{0x6, 0xe, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m55.799697942s ago: executing program 4 (id=6045): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_ublk_setup_io_uring(0x81b, &(0x7f0000000640)={0x0, 0x30b5, 0x400, 0x4001002, 0x372}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000000c0)={0x0, 0x3, 0x3600, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x80, 0x2100, 0x22a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8aa6, 0x1, 0xfffffffe, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf950, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xfffffffe, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) 2m54.14348696s ago: executing program 4 (id=6054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001a000100feffffff00010000fc020000000000000000000000000001fc01000000000000000900000000000000050aed", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff"], 0xf0}}, 0x844) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2m53.531512574s ago: executing program 4 (id=6060): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001840)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x100}, 0x0, 0x0, '\x00', {0x3, 0xcbe, 0x0, &(0x7f0000000840)=@buf_max_buf="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"}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x7, 0xffffffffffffffff, &(0x7f0000001100)) 2m53.364563713s ago: executing program 4 (id=6061): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 2m53.040114642s ago: executing program 4 (id=6064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 2m49.215910388s ago: executing program 35 (id=6081): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x8) shutdown(r0, 0x1) 2m38.561486021s ago: executing program 7 (id=6008): landlock_create_ruleset(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0x1, 0x65, 0x5, 0x1, 0x2f, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) 2m38.182477199s ago: executing program 7 (id=6117): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 2m37.705416425s ago: executing program 36 (id=6064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 2m23.010252649s ago: executing program 37 (id=6117): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 1m50.891668783s ago: executing program 0 (id=6446): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001042022eb"], 0x76) 1m50.425472052s ago: executing program 0 (id=6452): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x20000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0x9}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x4, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x9, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xb}}}], 0x54) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xdc}, {}, @result}], 0x1c) 1m49.327254746s ago: executing program 0 (id=6464): r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x00\x00\x00\x00\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x1aZ\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\x12\xc9\xc0\xd2\xf2\xd5\xd9\x9e\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xcb\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00\x84\xc2\bn\xd9CG*2\x88\x8aBi\x85\x18\xff\xf9\x1f`\x9a\x13\x03\xc7\xb05\xc5&\xe7GEU\x12\xda\xc9\x8e{\x02\x1ah\xb7\xbc\xec\"\xa2[&\xde\xa7\x10V\x99\xa3\xb1\\K\x00\x1e\xe0\x14J?\xc2\xe5\xcea5\xce/!\x98\x7f\v\xab\xa7\x8c\xf6u/\xaf\xde0WRz\xb04O\x7f\x02S\x9as\xb3\x17\xe1Fr:\xbaI', 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000340)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af0203010902", @ANYRESOCT], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 1m46.143655389s ago: executing program 0 (id=6486): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1m45.79351695s ago: executing program 0 (id=6489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x3, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1m45.276774008s ago: executing program 0 (id=6493): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1e000}], 0x1}, 0x80d1) 1m44.182231488s ago: executing program 38 (id=6493): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1e000}], 0x1}, 0x80d1) 1m39.648433535s ago: executing program 9 (id=6523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x2, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x10001, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000004c0)=0xfffffffb, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) 1m39.280735235s ago: executing program 9 (id=6525): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x100, 0x64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) 1m39.033528572s ago: executing program 9 (id=6527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 1m36.074884795s ago: executing program 9 (id=6541): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m34.9469469s ago: executing program 9 (id=6544): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) 1m34.097355782s ago: executing program 9 (id=6546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004"], 0xfdef) 1m32.888536462s ago: executing program 39 (id=6546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004"], 0xfdef) 1m19.746093411s ago: executing program 6 (id=6587): r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r0, &(0x7f0000000100)='.request_key_auth\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000) keyctl$session_to_parent(0x12) 1m19.398072992s ago: executing program 6 (id=6589): r0 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m18.897910476s ago: executing program 6 (id=6591): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1m17.519050786s ago: executing program 6 (id=6595): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m17.126218126s ago: executing program 6 (id=6598): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4a046) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000080007"], 0x44}}, 0x0) 1m16.792913388s ago: executing program 6 (id=6600): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc00) 1m16.156914533s ago: executing program 40 (id=6600): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc00) 6.090866601s ago: executing program 3 (id=7035): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x21, 0x32c, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x2, 0xb9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 5.343393818s ago: executing program 3 (id=7040): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 4.220916969s ago: executing program 3 (id=7049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0x1b, 0x0, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 3.923047706s ago: executing program 1 (id=7051): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7, 0x2}]}]}}, 0x0, 0x2e, 0x0, 0x0, 0x100000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010"], 0x68}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 3.659765696s ago: executing program 1 (id=7054): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdff7000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r2, 0x10001, 0x5}, 0x10) 3.552746707s ago: executing program 3 (id=7056): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r2, 0xffffffffffffffff, 0x1) 3.422085838s ago: executing program 8 (id=7057): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@overlay={0x5cc2, 0x6, 0x4, 0x0, 0x2, {0x0, 0xea60}, {0x5, 0x2, 0x1, 0x9d, 0x8, 0x32, "42881f28"}, 0x5, 0x3, {}, 0x4}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 3.308260803s ago: executing program 2 (id=7058): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0x400017e) r1 = open(&(0x7f0000000000)='./file0\x00', 0x108242, 0x78e22799f4a46fa9) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) splice(r2, 0x0, r1, 0x0, 0xf3a, 0xb) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) 2.846817196s ago: executing program 8 (id=7060): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x4, 0x0, [0x9dd, 0x1, 0x7, 0x7, 0xa8, 0x4], 0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0x0, [0x3, 0x2800000000000, 0x6, 0x9cf, 0x0, 0x7], 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0xfffffffffffffffa, 0x0, 0x0, 0xc, 0xfffffffffffffff4, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x78) 2.298213053s ago: executing program 2 (id=7061): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="030000000400000004"], 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0xe81, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe73, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xe5f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc80795"}}}}}}, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xe56}], 0x10000000000000b7) 1.966686468s ago: executing program 2 (id=7062): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, 0x0, &(0x7f00000000c0)) 1.791001809s ago: executing program 5 (id=7063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) close(0x3) recvmsg(r1, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) 1.679734144s ago: executing program 2 (id=7064): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r0, &(0x7f0000000640)='p', 0x1, 0xc855, &(0x7f0000000040)={0x11, 0x9, r3, 0x1, 0x8, 0x6, @random}, 0x14) 1.53665539s ago: executing program 5 (id=7065): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x87) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@private1, 0x18, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1.302833402s ago: executing program 1 (id=7066): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 1.260165933s ago: executing program 5 (id=7067): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f00000003c0)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}}}}, 0x32) 1.250433044s ago: executing program 2 (id=7068): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x270) 1.139871526s ago: executing program 3 (id=7069): mlockall(0x6) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 1.014496609s ago: executing program 1 (id=7070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="f3ad260fadce66bad004ec3ef0101966baf80cb8a3b4bd8fef66bafc0cecb9040200000f32490fc7ae590000003e0f01c3440f01c948b800000100000000000f23d00f21f8351000000d0f23f8", 0x4d}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 763.889823ms ago: executing program 8 (id=7071): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 613.800028ms ago: executing program 5 (id=7072): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 366.706953ms ago: executing program 8 (id=7073): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000040), 0x4001) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 366.26198ms ago: executing program 1 (id=7074): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r0, 0x0, 0x78) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 271.372912ms ago: executing program 8 (id=7075): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20000000000000000000000007000000071006"], 0x20}, 0x0) 193.890961ms ago: executing program 5 (id=7076): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000046, r2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000020c0)=""/4093, 0xffd) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) 120.009837ms ago: executing program 2 (id=7077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 82.917835ms ago: executing program 1 (id=7078): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000001540)=0x2) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x7) 80.710703ms ago: executing program 8 (id=7079): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1) 1.758767ms ago: executing program 3 (id=7080): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 0s ago: executing program 5 (id=7081): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbfe}, 0x14}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): er snd-usb-caiaq failed with error -5 [ 685.718245][ T5710] usb 3-1: USB disconnect, device number 72 [ 685.925814][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.926844][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.171109][T19273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 687.205886][T19273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 687.207164][T19273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 687.245645][T19273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 687.247036][T19273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 687.282490][T19273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 687.283312][T19273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 687.344549][T19273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 687.698302][T19273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.752201][T19273] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.768198][T12926] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 687.779088][T12926] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 687.788879][T12930] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 687.790094][T12930] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 687.790434][T12930] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 687.817290][T12926] usb 5-1: USB disconnect, device number 73 [ 687.826735][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.826855][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.912969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.913087][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.383606][T19273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.559726][T19273] veth0_vlan: entered promiscuous mode [ 688.591290][T19273] veth1_vlan: entered promiscuous mode [ 688.665229][T19273] veth0_macvtap: entered promiscuous mode [ 688.690260][T19273] veth1_macvtap: entered promiscuous mode [ 688.735832][T19273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.788708][T19273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.916034][T18421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.919906][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.920084][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.947143][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.306327][T18424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.306354][T18424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.418116][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.418140][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.622494][T12926] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 689.780601][T12926] usb 6-1: Using ep0 maxpacket: 16 [ 689.781455][T12926] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 689.782644][T12926] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 689.782672][T12926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.782695][T12926] usb 6-1: config 0 has no interface number 0 [ 689.785107][T12926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.785135][T12926] usb 6-1: Product: syz [ 689.785153][T12926] usb 6-1: Manufacturer: syz [ 689.785171][T12926] usb 6-1: SerialNumber: syz [ 689.859163][T12926] usb 6-1: config 0 descriptor?? [ 689.872179][T12926] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 689.872216][T12926] uvcvideo 6-1:0.105: No valid video chain found. [ 690.101596][T12940] usb 6-1: USB disconnect, device number 24 [ 692.429467][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.451698][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.462653][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.465250][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.466122][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.952906][ T32] kauditd_printk_skb: 7 callbacks suppressed [ 692.952930][ T32] audit: type=1326 audit(1789306980.982:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9093f9e159 code=0x7ffc0000 [ 692.953691][ T32] audit: type=1326 audit(1789306980.982:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9093f9e159 code=0x7ffc0000 [ 692.954774][ T32] audit: type=1326 audit(1789306980.982:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9093f9e159 code=0x7ffc0000 [ 692.957963][ T32] audit: type=1326 audit(1789306980.982:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9093f9e159 code=0x7ffc0000 [ 692.959048][ T32] audit: type=1326 audit(1789306980.982:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9093f9e159 code=0x7ffc0000 [ 693.034086][ T32] audit: type=1326 audit(1789306981.062:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9093f5e98e code=0x7ffc0000 [ 693.055971][ T32] audit: type=1326 audit(1789306981.082:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9093f5e98e code=0x7ffc0000 [ 693.066343][ T32] audit: type=1326 audit(1789306981.092:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9093f5e98e code=0x7ffc0000 [ 693.075758][ T32] audit: type=1326 audit(1789306981.102:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9093f5e98e code=0x7ffc0000 [ 693.083771][ T32] audit: type=1326 audit(1789306981.112:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.5.5794" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9093f5e98e code=0x7ffc0000 [ 694.318959][T19600] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.319154][T19600] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.319338][T19600] bridge_slave_0: entered allmulticast mode [ 694.354825][T19600] bridge_slave_0: entered promiscuous mode [ 694.377722][T19600] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.378620][T19600] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.378791][T19600] bridge_slave_1: entered allmulticast mode [ 694.409028][T19600] bridge_slave_1: entered promiscuous mode [ 694.561498][ T5626] Bluetooth: hci4: command tx timeout [ 694.738734][T19600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.762778][T19600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.066619][T19600] team0: Port device team_slave_0 added [ 695.165596][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5805'. [ 695.165623][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5805'. [ 695.335873][T19600] team0: Port device team_slave_1 added [ 695.559342][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5805'. [ 695.559373][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5805'. [ 695.832586][T19600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.832608][T19600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.832647][T19600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.913641][T19600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.913663][T19600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.913695][T19600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.212000][ T150] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.212055][ T150] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.212095][ T150] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.262082][T19668] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5809'. [ 696.287165][T18424] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.636512][T19600] hsr_slave_0: entered promiscuous mode [ 696.642985][ T5626] Bluetooth: hci4: command tx timeout [ 696.655946][T19600] hsr_slave_1: entered promiscuous mode [ 696.669500][T19600] debugfs: 'hsr0' already exists in 'hsr' [ 696.669527][T19600] Cannot create hsr debugfs directory [ 697.224524][T12930] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 697.262232][T19685] netlink: 'syz.0.5816': attribute type 1 has an invalid length. [ 697.391234][T12930] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 697.392754][T12930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.392788][T12930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1216, setting to 1024 [ 697.392817][T12930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 697.392861][T12930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.446767][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 697.456835][T12930] usb 3-1: config 0 descriptor?? [ 697.476548][T19681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 697.782580][T19600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 697.812488][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.814398][T19600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 697.842212][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 697.947340][T12930] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 697.980656][T19692] ipvlan2: entered allmulticast mode [ 697.980687][T19692] macvlan1: entered allmulticast mode [ 697.980706][T19692] veth1_vlan: entered allmulticast mode [ 698.010312][T19692] batman_adv: batadv0: Adding interface: ipvlan2 [ 698.010336][T19692] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.024097][T19692] batman_adv: batadv0: Interface activated: ipvlan2 [ 698.075280][T19600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 698.206831][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.313651][T19693] ipvlan3: entered allmulticast mode [ 698.333970][T19693] batman_adv: batadv0: Adding interface: ipvlan3 [ 698.333992][T19693] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.334029][T19693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 698.334049][T19693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.334065][T19693] batman_adv: batadv0: Interface activated: ipvlan3 [ 698.456168][T19600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 698.538274][T19600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.722029][ T5626] Bluetooth: hci4: command tx timeout [ 699.132185][T19600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.195825][T19600] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.235816][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.235931][ T1476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.244227][ C0] plantronics 0003:047F:FFFF.0055: usb_submit_urb(ctrl) failed: -1 [ 699.372679][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.372797][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.584258][T19600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.742557][T19600] veth0_vlan: entered promiscuous mode [ 699.787672][T19600] veth1_vlan: entered promiscuous mode [ 699.937536][T19600] veth0_macvtap: entered promiscuous mode [ 699.976199][T19600] veth1_macvtap: entered promiscuous mode [ 700.037581][T12930] usb 3-1: USB disconnect, device number 73 [ 700.120601][T19733] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 700.125290][T19600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.328534][T19600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.402563][T16633] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.403903][T16633] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.422836][T16633] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.422993][T16633] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.591504][T19744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5835'. [ 700.749350][T19744] bond0: (slave bond_slave_1): Releasing backup interface [ 700.802992][ T5626] Bluetooth: hci4: command tx timeout [ 700.846916][T19750] bridge_slave_1: entered allmulticast mode [ 700.866066][T19750] bridge_slave_1: left allmulticast mode [ 700.929403][T19751] sctp: [Deprecated]: syz.5.5838 (pid 19751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 700.929403][T19751] Use struct sctp_sack_info instead [ 700.961926][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.961949][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.248101][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.248126][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.380635][ T5710] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 701.532015][ T5710] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 701.536375][ T5710] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 701.563915][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 701.563946][ T5710] usb 5-1: Product: syz [ 701.563963][ T5710] usb 5-1: Manufacturer: syz [ 702.130636][ T5710] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input107 [ 702.132037][T12939] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 702.163128][T12929] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 702.234145][ T5710] usb 5-1: USB disconnect, device number 74 [ 702.281294][T12939] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.284675][T12939] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.284811][T12939] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 702.315795][T12929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.317051][T12929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.317083][T12929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.317108][T12929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.317152][T12929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.345284][T12939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.345362][T12939] usb 6-1: Product: syz [ 702.345411][T12939] usb 6-1: Manufacturer: syz [ 702.345453][T12939] usb 6-1: SerialNumber: syz [ 702.409389][T12929] usb 3-1: config 0 descriptor?? [ 702.459122][T12939] cdc_mbim 6-1:1.0: skipping garbage [ 702.664626][T19765] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 702.956307][T12929] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 703.184416][ T5710] usb 3-1: USB disconnect, device number 74 [ 703.275396][T19765] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 703.275867][T12939] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 703.485012][T12939] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 703.498094][T12939] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 703.645273][T12939] wwan wwan0: port wwan0mbim0 attached [ 703.694639][T12939] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 22:4a:a7:a0:bf:e3 [ 703.744988][T12939] usb 6-1: USB disconnect, device number 25 [ 703.767255][T12939] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 703.917425][T12939] wwan wwan0: port wwan0mbim0 disconnected [ 704.444680][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5861'. [ 704.444708][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5861'. [ 704.770681][T12939] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 704.922936][T12939] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 704.924148][T12939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.924231][T12939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.944828][T12939] usb 5-1: config 0 descriptor?? [ 705.205854][T12939] usbhid 5-1:0.0: can't add hid device: -71 [ 705.205970][T12939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 705.230983][T12939] usb 5-1: USB disconnect, device number 75 [ 705.690584][T12939] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 705.850522][T12939] usb 5-1: Using ep0 maxpacket: 32 [ 705.851250][T12939] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 705.853453][T12939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.853502][T12939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.857382][T12939] usb 5-1: config 0 descriptor?? [ 705.900238][T12939] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 705.919095][T12939] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 706.138116][ T5710] usb 5-1: USB disconnect, device number 76 [ 706.199407][ T5710] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 707.053219][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 707.293630][T19882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.816661][T19921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.816685][T19921] IPv6: NLM_F_CREATE should be set when creating new route [ 708.819536][T19921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 709.480539][ T5707] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 709.658026][ T5707] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 709.660952][ T5707] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 709.660982][ T5707] usb 5-1: config 1 has no interface number 0 [ 709.679173][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.679256][ T5707] usb 5-1: Product: syz [ 709.679299][ T5707] usb 5-1: Manufacturer: syz [ 709.679348][ T5707] usb 5-1: SerialNumber: syz [ 709.770023][ T5707] usb 5-1: 3:1 : does not exist [ 709.770051][ T5707] usb 5-1: 3:0 : does not exist [ 710.065950][T12939] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0 [ 710.232519][T12939] hid-generic 0000:0000:0000.0057: hidraw0: HID v0.00 Device [syz1] on syz0 [ 710.258905][ T5707] usb 5-1: USB disconnect, device number 77 [ 710.451315][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 710.453720][T19951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.512689][T12929] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 712.661402][T12929] usb 5-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 712.667983][T12929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.668014][T12929] usb 5-1: Product: syz [ 712.668031][T12929] usb 5-1: Manufacturer: syz [ 712.668048][T12929] usb 5-1: SerialNumber: syz [ 712.955370][T12929] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 712.981965][T12929] usb 5-1: USB disconnect, device number 78 [ 713.386097][T20012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5940'. [ 713.460488][T12929] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 713.613722][T12929] usb 5-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 713.646016][T12929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.646047][T12929] usb 5-1: Product: syz [ 713.646065][T12929] usb 5-1: Manufacturer: syz [ 713.646082][T12929] usb 5-1: SerialNumber: syz [ 714.122756][T12929] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 714.547260][T12929] usb 5-1: USB disconnect, device number 79 [ 715.376813][T20040] net_ratelimit: 4 callbacks suppressed [ 715.376837][T20040] openvswitch: netlink: Missing valid actions attribute. [ 715.376866][T20040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.929704][T20053] kernel read not supported for file /zero (pid: 20053 comm: syz.5.5957) [ 716.488975][T20069] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5963'. [ 716.661254][ T5707] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 716.744309][T20078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5967'. [ 716.825637][ T5707] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 716.828042][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.828078][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.828119][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.867961][ T5707] usb 6-1: config 0 descriptor?? [ 716.898921][T20074] ALSA: seq fatal error: cannot create timer (-16) [ 717.346727][ T5707] cm6533_jd 0003:0D8C:0022.0058: unknown main item tag 0x0 [ 717.346857][ T5707] cm6533_jd 0003:0D8C:0022.0058: unknown main item tag 0x0 [ 717.384254][ T5707] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0058/input/input109 [ 717.442449][T12937] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 717.466454][ T5707] cm6533_jd 0003:0D8C:0022.0058: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 717.593828][T12937] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 717.594355][ T5707] usb 6-1: USB disconnect, device number 26 [ 717.596989][T12937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.597017][T12937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.599472][T12937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 717.599500][T12937] usb 3-1: SerialNumber: syz [ 717.662992][T20093] fido_id[20093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 717.927893][T12937] usb 3-1: 0:2 : does not exist [ 718.099639][T12937] usb 3-1: USB disconnect, device number 75 [ 718.233394][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.955958][T20112] syz.6.5981 (20112): drop_caches: 2 [ 719.212592][T12930] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 719.387764][T12930] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 719.405890][T12930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.405921][T12930] usb 3-1: Product: syz [ 719.405939][T12930] usb 3-1: Manufacturer: syz [ 719.405955][T12930] usb 3-1: SerialNumber: syz [ 719.439049][T12930] usb 3-1: config 0 descriptor?? [ 719.653936][T12930] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 719.853155][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5998'. [ 720.463556][T12930] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 720.469842][T12930] usb 3-1: USB disconnect, device number 76 [ 721.073832][T16633] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.073874][T16633] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.073905][T16633] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 721.274974][T16633] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.275016][T16633] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.275047][T16633] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 721.498660][T16633] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.498702][T16633] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.498732][T16633] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 721.770102][T16633] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 721.770143][T16633] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.770174][T16633] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 722.050837][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 722.055717][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 722.059926][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 722.087706][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 722.088490][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 722.458435][T20202] netlink: 'syz.4.6020': attribute type 10 has an invalid length. [ 722.521627][T20204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6020'. [ 722.526669][T20202] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 722.612720][T20204] syz_tun: left allmulticast mode [ 722.612751][T20204] syz_tun: left promiscuous mode [ 722.613009][T20204] bridge0: port 1(syz_tun) entered disabled state [ 722.683138][T20204] bond0: (slave bridge0): Releasing backup interface [ 723.139512][T16633] bridge_slave_1: left allmulticast mode [ 723.139543][T16633] bridge_slave_1: left promiscuous mode [ 723.139784][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.179776][T16633] bridge_slave_0: left allmulticast mode [ 723.179807][T16633] bridge_slave_0: left promiscuous mode [ 723.180033][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.983679][T16633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.984116][T16633] bond_slave_0: left promiscuous mode [ 723.990167][T16633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.015072][T16633] bond_slave_1: left promiscuous mode [ 724.032632][T16633] bond0 (unregistering): (slave team0): Releasing backup interface [ 724.039540][T16633] team0: left promiscuous mode [ 724.039564][T16633] team_slave_0: left promiscuous mode [ 724.039766][T16633] team_slave_1: left promiscuous mode [ 724.076059][T16633] bond0 (unregistering): Released all slaves [ 724.161154][ T5626] Bluetooth: hci5: command tx timeout [ 724.309122][T20232] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 724.447099][T20231] netlink: 'syz.2.6032': attribute type 12 has an invalid length. [ 724.447122][T20231] netlink: 'syz.2.6032': attribute type 29 has an invalid length. [ 724.447138][T20231] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6032'. [ 724.447171][T20231] netlink: 'syz.2.6032': attribute type 1 has an invalid length. [ 724.447186][T20231] netlink: 47 bytes leftover after parsing attributes in process `syz.2.6032'. [ 725.431585][T16633] hsr_slave_0: left promiscuous mode [ 725.437090][T16633] hsr_slave_1: left promiscuous mode [ 725.438014][T16633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.438072][T16633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.439629][T16633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.439651][T16633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.627978][T16633] veth1_macvtap: left promiscuous mode [ 725.628021][T16633] veth0_macvtap: left promiscuous mode [ 725.628147][T16633] veth1_vlan: left promiscuous mode [ 725.628227][T16633] veth0_vlan: left promiscuous mode [ 726.199482][T20272] input: syz0 as /devices/virtual/input/input110 [ 726.240638][ T5626] Bluetooth: hci5: command tx timeout [ 727.115516][T16633] team0 (unregistering): Port device team_slave_1 removed [ 727.179370][T16633] team0 (unregistering): Port device team_slave_0 removed [ 727.641216][ T32] kauditd_printk_skb: 106 callbacks suppressed [ 727.641239][ T32] audit: type=1326 audit(1789307015.672:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20299 comm="syz.2.6051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fb6d9e159 code=0x0 [ 727.885651][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 727.942868][T20306] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.947244][T20306] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.035708][T20307] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.035984][T20307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.037675][T20307] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.037838][T20307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.147279][T20307] bridge0: entered promiscuous mode [ 728.147308][T20307] bridge0: entered allmulticast mode [ 728.320510][ T5626] Bluetooth: hci5: command tx timeout [ 728.543985][T20317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6057'. [ 729.090618][T20196] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.090735][T20196] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.090902][T20196] bridge_slave_0: entered allmulticast mode [ 729.124872][T20196] bridge_slave_0: entered promiscuous mode [ 729.170697][T20196] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.170808][T20196] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.170980][T20196] bridge_slave_1: entered allmulticast mode [ 729.185584][T20196] bridge_slave_1: entered promiscuous mode [ 729.204718][T16633] IPVS: stop unused estimator thread 0... [ 729.474345][T20196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.515379][T20196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.719735][T20196] team0: Port device team_slave_0 added [ 729.777525][T20196] team0: Port device team_slave_1 added [ 729.985887][T20196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.985907][T20196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.985936][T20196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.066941][T20196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.066961][T20196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.066990][T20196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.350532][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 730.376259][T20196] hsr_slave_0: entered promiscuous mode [ 730.379782][T20196] hsr_slave_1: entered promiscuous mode [ 730.384301][T20196] debugfs: 'hsr0' already exists in 'hsr' [ 730.384372][T20196] Cannot create hsr debugfs directory [ 730.405342][ T5626] Bluetooth: hci5: command tx timeout [ 730.604419][T20373] syzkaller1: entered promiscuous mode [ 730.604445][T20373] syzkaller1: entered allmulticast mode [ 731.290209][T20385] netlink: 'syz.2.6075': attribute type 4 has an invalid length. [ 731.351372][T20387] netlink: 'syz.2.6075': attribute type 4 has an invalid length. [ 731.738225][T20394] syzkaller1: entered promiscuous mode [ 731.738252][T20394] syzkaller1: entered allmulticast mode [ 732.239552][T20196] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 732.272615][T20196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.274727][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 732.275305][T20196] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 732.332529][T20196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.538758][ T1476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 732.538800][ T1476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.590637][T20196] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 732.596290][T20196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.613634][T20196] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 732.633890][T20196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.108882][ T1476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.108929][ T1476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.157988][T20421] io-wq is not configured for unbound workers [ 733.620668][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.627054][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.629290][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.641476][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 733.671228][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 733.743567][ T1476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.743611][ T1476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.882927][T20436] vxlan0: entered allmulticast mode [ 734.013698][ T1476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.013741][ T1476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.342126][ T137] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.342285][ T137] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.450572][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.533336][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 734.944506][T20196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.152197][ T1476] veth0: left allmulticast mode [ 735.152226][ T1476] veth0: left promiscuous mode [ 735.152445][ T1476] bridge0: port 3(veth0) entered disabled state [ 735.158756][ T1476] bridge_slave_1: left allmulticast mode [ 735.158786][ T1476] bridge_slave_1: left promiscuous mode [ 735.159013][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.212843][ T1476] bridge_slave_0: left allmulticast mode [ 735.212875][ T1476] bridge_slave_0: left promiscuous mode [ 735.213076][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.723889][ T1476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.725827][ T1476] bond0 (unregistering): Released all slaves [ 735.748430][ T1476] bond1 (unregistering): Released all slaves [ 735.762330][ T5626] Bluetooth: hci2: command tx timeout [ 736.103869][T20196] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.415040][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.415154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.549281][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.549395][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.776406][ T1476] hsr_slave_0: left promiscuous mode [ 736.777255][ T1476] hsr_slave_1: left promiscuous mode [ 736.787023][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.787049][ T1476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.811887][ T1476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.811913][ T1476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.855272][ T1476] veth1_macvtap: left promiscuous mode [ 736.855316][ T1476] veth0_macvtap: left promiscuous mode [ 737.600655][T20488] loop5: detected capacity change from 0 to 7 [ 737.605464][T20488] Dev loop5: unable to read RDB block 7 [ 737.605512][T20488] loop5: unable to read partition table [ 737.605721][T20488] loop5: partition table beyond EOD, truncated [ 737.605742][T20488] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 737.840834][ T5626] Bluetooth: hci2: command tx timeout [ 737.919139][ T1476] team0 (unregistering): Port device team_slave_1 removed [ 737.989521][ T1476] team0 (unregistering): Port device team_slave_0 removed [ 738.218189][T20485] tipc: Started in network mode [ 738.218239][T20485] tipc: Node identity ac1414aa, cluster identity 4711 [ 738.218473][T20485] tipc: New replicast peer: 172.20.20.187 [ 738.229703][T20485] tipc: Enabled bearer , priority 10 [ 738.247139][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 738.270824][T18424] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.539748][T20497] input: syz0 as /devices/virtual/input/input111 [ 738.777403][T20437] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.778016][T20437] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.778164][T20437] bridge_slave_0: entered allmulticast mode [ 738.835840][T20437] bridge_slave_0: entered promiscuous mode [ 738.894175][T20437] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.894289][T20437] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.894455][T20437] bridge_slave_1: entered allmulticast mode [ 738.896473][T20437] bridge_slave_1: entered promiscuous mode [ 739.163692][T20437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.196779][T20437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.409441][T20518] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 739.433882][T12940] tipc: Node number set to 2886997162 [ 739.486408][T20437] team0: Port device team_slave_0 added [ 739.565031][T20437] team0: Port device team_slave_1 added [ 739.588610][T20196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.738302][T20528] xt_hashlimit: size too large, truncated to 1048576 [ 739.835972][T20437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.835992][T20437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.836022][T20437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.920849][ T5626] Bluetooth: hci2: command tx timeout [ 739.959771][T20437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.959792][T20437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.959823][T20437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.264213][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 740.382735][T20437] hsr_slave_0: entered promiscuous mode [ 740.385574][T20437] hsr_slave_1: entered promiscuous mode [ 740.386436][T20437] debugfs: 'hsr0' already exists in 'hsr' [ 740.386460][T20437] Cannot create hsr debugfs directory [ 740.527950][T20196] veth0_vlan: entered promiscuous mode [ 740.718526][T20196] veth1_vlan: entered promiscuous mode [ 741.197243][T20196] veth0_macvtap: entered promiscuous mode [ 741.268348][T20196] veth1_macvtap: entered promiscuous mode [ 741.462197][T20437] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 741.483748][T20437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 741.569054][T20437] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 741.583514][T20437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 741.584459][T20437] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 741.616395][T20437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 741.635645][T20437] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 741.650402][T20437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.655878][T20196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.747977][T20196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.975545][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 742.000607][ T5626] Bluetooth: hci2: command tx timeout [ 742.070535][ T1476] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.205491][T20567] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 742.263140][T20568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.266509][T20568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.269823][T20568] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 742.316198][T20568] bond0 (unregistering): Released all slaves [ 742.331790][ T1476] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.421278][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.772425][T20437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.914180][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.155655][T18424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.155682][T18424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.186830][T20437] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.209967][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.210081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.299879][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.299997][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.338545][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.338570][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.596234][T20437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.767897][T20437] veth0_vlan: entered promiscuous mode [ 743.818197][T20437] veth1_vlan: entered promiscuous mode [ 743.849356][T20592] syz_tun: entered allmulticast mode [ 743.863084][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 743.863556][T20591] syz_tun: left allmulticast mode [ 743.978348][T20437] veth0_macvtap: entered promiscuous mode [ 744.025460][T20437] veth1_macvtap: entered promiscuous mode [ 744.124290][T20437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.165599][T20437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.243222][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.245844][ T1476] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.246411][ T1476] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.247004][ T137] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.447398][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.447424][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.599031][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.599059][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.909698][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 744.940692][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 744.943974][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 744.946263][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 744.946875][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 746.166863][T20610] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.166988][T20610] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.167439][T20610] bridge_slave_0: entered allmulticast mode [ 746.180264][T20610] bridge_slave_0: entered promiscuous mode [ 746.214059][T20610] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.214233][T20610] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.214407][T20610] bridge_slave_1: entered allmulticast mode [ 746.234261][T20610] bridge_slave_1: entered promiscuous mode [ 746.441868][T20610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.467127][T20610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.689866][T20610] team0: Port device team_slave_0 added [ 746.775978][T20610] team0: Port device team_slave_1 added [ 746.923528][T20634] loop9: detected capacity change from 0 to 16384 [ 746.953934][T20610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.953953][T20610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.953978][T20610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.011729][T20610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.011747][T20610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.011773][T20610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.054023][ T52] Bluetooth: hci6: command tx timeout [ 747.336774][T20610] hsr_slave_0: entered promiscuous mode [ 747.346766][T20610] hsr_slave_1: entered promiscuous mode [ 747.357021][T20610] debugfs: 'hsr0' already exists in 'hsr' [ 747.357047][T20610] Cannot create hsr debugfs directory [ 747.377656][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.377720][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.739891][ T32] audit: type=1326 audit(1789307035.762:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161a19e159 code=0x7ffc0000 [ 747.746240][ T32] audit: type=1326 audit(1789307035.772:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161a19e159 code=0x7ffc0000 [ 747.758454][ T32] audit: type=1326 audit(1789307035.782:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f161a19e159 code=0x7ffc0000 [ 747.759139][ T32] audit: type=1326 audit(1789307035.782:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161a19e159 code=0x7ffc0000 [ 747.777553][ T32] audit: type=1326 audit(1789307035.792:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161a19e159 code=0x7ffc0000 [ 747.777705][ T32] audit: type=1326 audit(1789307035.802:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f161a19e159 code=0x7ffc0000 [ 747.777821][ T32] audit: type=1326 audit(1789307035.802:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161a19e159 code=0x7ffc0000 [ 747.777949][ T32] audit: type=1326 audit(1789307035.802:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161a19e159 code=0x7ffc0000 [ 747.800063][ T32] audit: type=1326 audit(1789307035.822:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f161a15e98e code=0x7ffc0000 [ 747.803143][ T32] audit: type=1326 audit(1789307035.832:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20644 comm="syz.8.6129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f161a15e98e code=0x7ffc0000 [ 748.486626][T20656] sit1: entered allmulticast mode [ 748.576614][T20610] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 748.584906][T20610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 748.599893][T20610] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 748.612725][T20610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 748.636072][T20610] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 748.641605][T20610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 748.656594][T20610] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 748.686921][T20610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.122331][ T52] Bluetooth: hci6: command tx timeout [ 749.128786][T20674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.249118][T20610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.303962][T20610] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.328714][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.328855][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.385358][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.385473][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.545486][T20680] syzkaller1: entered promiscuous mode [ 749.545516][T20680] syzkaller1: entered allmulticast mode [ 749.838148][T20610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.865275][T20651] netlink: 'syz.8.6132': attribute type 16 has an invalid length. [ 749.865304][T20651] netlink: 'syz.8.6132': attribute type 17 has an invalid length. [ 749.895845][T20651] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 750.328413][T20610] veth0_vlan: entered promiscuous mode [ 750.384202][T20610] veth1_vlan: entered promiscuous mode [ 750.556053][T20610] veth0_macvtap: entered promiscuous mode [ 750.571295][T20610] veth1_macvtap: entered promiscuous mode [ 750.664254][T20610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.706295][T20610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.965769][T18424] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.967754][ T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.967822][ T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.967861][ T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.202625][ T52] Bluetooth: hci6: command tx timeout [ 751.250705][ T1476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.250731][ T1476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.486932][ T1476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.486957][ T1476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.856779][T20719] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 752.206094][T20727] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6118'. [ 753.280844][ T5626] Bluetooth: hci6: command tx timeout [ 754.950505][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 754.950527][ T32] audit: type=1326 audit(1789307042.972:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20784 comm="syz.9.6165" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66c219e159 code=0x0 [ 755.215573][T20789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.658629][T20846] xt_hashlimit: size too large, truncated to 1048576 [ 759.350107][T20892] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 759.431965][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 759.439696][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 759.451391][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 759.465366][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 759.476948][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 760.109153][T20916] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6195'. [ 760.741336][T20942] netlink: 'syz.9.6203': attribute type 1 has an invalid length. [ 761.262956][T20900] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.263072][T20900] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.263224][T20900] bridge_slave_0: entered allmulticast mode [ 761.293225][T20900] bridge_slave_0: entered promiscuous mode [ 761.308153][T20900] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.308240][T20900] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.308361][T20900] bridge_slave_1: entered allmulticast mode [ 761.332471][T20900] bridge_slave_1: entered promiscuous mode [ 761.451615][T20900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.459765][T20900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.521035][ T5626] Bluetooth: hci3: command tx timeout [ 761.594534][T20900] team0: Port device team_slave_0 added [ 762.058459][T20900] team0: Port device team_slave_1 added [ 762.268499][T20900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.268518][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.268544][T20900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.309242][T20900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.309291][T20900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.309369][T20900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.438892][T20900] hsr_slave_0: entered promiscuous mode [ 762.439975][T20900] hsr_slave_1: entered promiscuous mode [ 762.446579][T20900] debugfs: 'hsr0' already exists in 'hsr' [ 762.446602][T20900] Cannot create hsr debugfs directory [ 762.877974][T20988] xt_hashlimit: size too large, truncated to 1048576 [ 763.028549][T20991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.610740][ T5626] Bluetooth: hci3: command tx timeout [ 764.307705][T20900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.307749][T20900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.711663][T20900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.711705][T20900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.100156][T20900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.100200][T20900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.499836][T21048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.520138][T20900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.520180][T20900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.680939][ T5626] Bluetooth: hci3: command tx timeout [ 766.584170][T20900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 766.623530][T20900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.637642][T20900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 766.663325][T20900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 766.670602][T20900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 766.705690][T20900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 766.706608][T20900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 766.739558][T20900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.777237][T21089] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6236'. [ 766.798247][T21089] gretap0: entered promiscuous mode [ 766.827463][T21089] netlink: 5 bytes leftover after parsing attributes in process `syz.9.6236'. [ 766.827656][T21089] 0{X: renamed from gretap0 [ 766.860682][T21089] 0{X: left promiscuous mode [ 766.860711][T21089] 0{X: entered allmulticast mode [ 766.895462][T21089] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 767.335794][T21101] input: syz0 as /devices/virtual/input/input112 [ 767.365966][T20900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.476853][T20900] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.547937][T18422] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.548105][T18422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.729864][T18421] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.729968][T18421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.761172][ T5626] Bluetooth: hci3: command tx timeout [ 768.328791][T20900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.589988][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6247'. [ 768.622078][T21119] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6247'. [ 769.069111][T21128] syzkaller1: entered promiscuous mode [ 769.069136][T21128] syzkaller1: entered allmulticast mode [ 769.089336][T20900] veth0_vlan: entered promiscuous mode [ 769.278705][T20900] veth1_vlan: entered promiscuous mode [ 769.415839][T20900] veth0_macvtap: entered promiscuous mode [ 769.457677][T20900] veth1_macvtap: entered promiscuous mode [ 769.578193][T20900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.680226][T20900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.781574][T18421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.869956][T21070] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.875543][T21070] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.898855][T18424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.440732][T18424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.440763][T18424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.562181][T18421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.562205][T18421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.850927][T21158] ip_tables: iptables: counters copy to user failed while replacing table [ 771.287781][T21165] loop5: detected capacity change from 0 to 7 [ 771.298378][T21165] Dev loop5: unable to read RDB block 7 [ 771.298500][T21165] loop5: unable to read partition table [ 771.298820][T21165] loop5: partition table beyond EOD, truncated [ 771.298842][T21165] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 771.511163][T21169] loop7: detected capacity change from 0 to 5 [ 771.695847][T21169] loop7: detected capacity change from 5 to 0 [ 771.917810][T21173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.428001][T21181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6271'. [ 772.850220][T21190] netlink: 'syz.9.6276': attribute type 1 has an invalid length. [ 773.305155][T21190] 8021q: adding VLAN 0 to HW filter on device bond1 [ 773.447351][T21192] bond1: (slave geneve2): making interface the new active one [ 773.530005][T21192] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 774.932610][T21212] input: syz1 as /devices/virtual/input/input113 [ 775.688770][T21225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.579219][T21245] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 777.030613][ T5710] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 777.186737][ T5710] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 777.190690][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.190727][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.223004][ T5710] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 777.223039][ T5710] usb 4-1: Manufacturer: syz [ 777.242003][ T5710] usb 4-1: config 0 descriptor?? [ 778.180828][T12926] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 778.305275][ T5710] uclogic 0003:256C:006D.0059: v1 frame probing failed: -71 [ 778.306379][ T5710] uclogic 0003:256C:006D.0059: failed probing parameters: -71 [ 778.306534][ T5710] uclogic 0003:256C:006D.0059: probe with driver uclogic failed with error -71 [ 778.353860][T12926] usb 10-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 778.354633][ T5710] usb 4-1: USB disconnect, device number 47 [ 778.358030][T12926] usb 10-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 778.358058][T12926] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 778.398407][T12926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.398443][T12926] usb 10-1: Product: syz [ 778.398461][T12926] usb 10-1: Manufacturer: syz [ 778.398479][T12926] usb 10-1: SerialNumber: syz [ 778.435630][T12926] usb 10-1: config 0 descriptor?? [ 778.462592][T12926] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 779.644945][T21304] netlink: 'syz.6.6321': attribute type 4 has an invalid length. [ 779.695610][ T5710] usb 10-1: USB disconnect, device number 2 [ 782.620889][T12939] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 782.775029][T12939] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 782.788180][T12939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.862690][T12939] usb 4-1: config 0 descriptor?? [ 783.334172][T12939] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 783.334784][T12939] [drm:udl_init] *ERROR* Selecting channel failed [ 783.434029][T12939] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 783.438866][T12939] [drm] Initialized udl on minor 1 [ 783.444272][T12939] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 783.530296][T12939] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 783.575473][ T5707] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 783.599022][T12939] usb 4-1: USB disconnect, device number 48 [ 784.445885][T12928] psmouse serio5: Failed to reset mouse on : -5 [ 784.588760][T21425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.189433][T21440] vivid-000: disconnect [ 785.198750][T21437] vivid-000: reconnect [ 788.190667][T12928] misc userio: Buffer overflowed, userio client isn't keeping up [ 788.239419][T21515] kvm [21514]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc1) = 0xd105af [ 788.239523][T21515] kvm [21514]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0xc2) = 0xd105af [ 788.261620][T21515] kvm [21514]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0xd105af [ 788.265303][T21515] kvm [21514]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x186) = 0xd105af [ 788.265387][T21515] kvm [21514]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x187) = 0xd105af [ 788.268262][T21515] kvm_intel: kvm [21514]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x1d9) = 0xd105af [ 788.682402][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6410'. [ 789.256809][T12928] input: PS/2 Generic Mouse as /devices/serio5/input/input114 [ 789.469856][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6420'. [ 789.552939][T12928] psmouse serio5: Failed to enable mouse on [ 789.728449][T21560] input: syz0 as /devices/virtual/input/input115 [ 790.244280][T21576] input: syz1 as /devices/virtual/input/input116 [ 791.151943][T21592] binder: 21591:21592 ioctl c0306201 200000001a80 returned -14 [ 792.220679][T21642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.513811][ T32] audit: type=1326 audit(1789307080.542:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c219e159 code=0x7ffc0000 [ 792.514539][ T32] audit: type=1326 audit(1789307080.542:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c219e159 code=0x7ffc0000 [ 792.514687][ T32] audit: type=1326 audit(1789307080.542:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c219e159 code=0x7ffc0000 [ 792.514906][ T32] audit: type=1326 audit(1789307080.542:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c219e159 code=0x7ffc0000 [ 792.515063][ T32] audit: type=1326 audit(1789307080.542:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c219e159 code=0x7ffc0000 [ 792.517528][ T32] audit: type=1326 audit(1789307080.542:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f66c215e98e code=0x7ffc0000 [ 792.650877][ T32] audit: type=1326 audit(1789307080.682:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c219e159 code=0x7ffc0000 [ 792.657900][ T32] audit: type=1326 audit(1789307080.682:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f66c219e159 code=0x7ffc0000 [ 792.677791][ T32] audit: type=1326 audit(1789307080.682:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c219e159 code=0x7ffc0000 [ 792.751231][ T32] audit: type=1326 audit(1789307080.762:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21647 comm="syz.9.6459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f66c215e98e code=0x7ffc0000 [ 792.824567][T21653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6461'. [ 793.027665][T21660] batman_adv: batadv0: Adding interface: syzkaller0 [ 793.027685][T21660] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.027720][T21660] batman_adv: batadv0: Interface activated: syzkaller0 [ 793.089363][T21658] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 793.203311][T21658] batman_adv: batadv0: Removing interface: syzkaller0 [ 793.352437][T12926] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 793.501375][T12926] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.503604][T12926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.503638][T12926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.503677][T12926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 793.503728][T12926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.508593][T12926] usb 4-1: config 0 descriptor?? [ 793.991356][T12926] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 794.202849][T12928] usb 4-1: USB disconnect, device number 49 [ 794.924646][T21702] : renamed from vlan0 (while UP) [ 795.446284][T21710] kvm: MWAIT instruction emulated as NOP! [ 797.374139][T17875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.374179][T17875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.704727][T17875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.704774][T17875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.946599][T17875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.946641][T17875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.279407][T17875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.279490][T17875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.466386][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.488160][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 798.498814][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 798.499802][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 798.502820][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 799.273335][T17875] bridge_slave_1: left allmulticast mode [ 799.273366][T17875] bridge_slave_1: left promiscuous mode [ 799.273606][T17875] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.309579][T17875] bridge_slave_0: left allmulticast mode [ 799.309605][T17875] bridge_slave_0: left promiscuous mode [ 799.309817][T17875] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.826372][T17875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.847006][T17875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.848974][T17875] bond0 (unregistering): Released all slaves [ 800.055284][T17875] tipc: Disabling bearer [ 800.055628][T17875] tipc: Left network mode [ 800.560617][ T52] Bluetooth: hci0: command tx timeout [ 800.718905][T21806] tipc: Started in network mode [ 800.718940][T21806] tipc: Node identity ac1414aa, cluster identity 4711 [ 800.719195][T21806] tipc: New replicast peer: 172.20.20.187 [ 800.808909][T21806] tipc: Enabled bearer , priority 10 [ 801.134061][T17875] hsr_slave_0: left promiscuous mode [ 801.153731][T17875] hsr_slave_1: left promiscuous mode [ 801.156497][T17875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.156525][T17875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.186252][T17875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.186280][T17875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.213851][T17875] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 801.213880][T17875] batman_adv: batadv0: Removing interface: ipvlan2 [ 801.232574][T17875] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 801.232640][T17875] batman_adv: batadv0: Removing interface: ipvlan3 [ 801.423184][T17875] veth1_macvtap: left promiscuous mode [ 801.423228][T17875] veth0_macvtap: left promiscuous mode [ 801.423333][T17875] veth1_vlan: left allmulticast mode [ 801.423371][T17875] veth1_vlan: left promiscuous mode [ 801.492277][T17875] veth0_vlan: left promiscuous mode [ 802.324399][T21842] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 802.324432][T21842] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 802.455508][T21846] netlink: 'syz.8.6521': attribute type 1 has an invalid length. [ 802.640942][ T52] Bluetooth: hci0: command tx timeout [ 802.846357][T17875] team0 (unregistering): Port device team_slave_1 removed [ 802.887217][T17875] team0 (unregistering): Port device team_slave_0 removed [ 803.056313][ T5710] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 803.078325][ T5710] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 803.504755][T12937] tipc: Node number set to 2886997162 [ 803.568755][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9 [ 803.693864][T21846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 803.735351][T21850] bond1: (slave gretap1): making interface the new active one [ 803.739303][T21850] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 804.205583][T21768] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.205686][T21768] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.205838][T21768] bridge_slave_0: entered allmulticast mode [ 804.210188][T21768] bridge_slave_0: entered promiscuous mode [ 804.245344][T21768] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.247541][T21768] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.247708][T21768] bridge_slave_1: entered allmulticast mode [ 804.274045][T21768] bridge_slave_1: entered promiscuous mode [ 804.387581][T21768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.411754][T21768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.470126][T21768] team0: Port device team_slave_0 added [ 804.538555][T21768] team0: Port device team_slave_1 added [ 804.721640][ T52] Bluetooth: hci0: command tx timeout [ 804.781695][T21768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.781716][T21768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.781744][T21768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.839741][T21768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.839761][T21768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.839789][T21768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.133520][T21768] hsr_slave_0: entered promiscuous mode [ 805.134659][T21768] hsr_slave_1: entered promiscuous mode [ 805.152711][T21768] debugfs: 'hsr0' already exists in 'hsr' [ 805.152737][T21768] Cannot create hsr debugfs directory [ 806.190197][T21768] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.190240][T21768] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.190282][T21768] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59682 - 0 [ 806.444110][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10 [ 806.717244][T21768] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.717287][T21768] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.717317][T21768] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59682 - 0 [ 806.800463][ T52] Bluetooth: hci0: command tx timeout [ 807.332137][ T32] kauditd_printk_skb: 14 callbacks suppressed [ 807.332160][ T32] audit: type=1326 audit(1789307095.362:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21927 comm="syz.3.6542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc30f197ed7 code=0x0 [ 807.511000][T21768] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 807.511042][T21768] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.511072][T21768] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59682 - 0 [ 808.076997][T21768] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.077039][T21768] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.077068][T21768] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59682 - 0 [ 808.257812][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11 [ 808.426835][T18418] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.462233][T12939] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 808.637927][T12939] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 808.647755][T12939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 808.699898][T12939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.699935][T12939] usb 4-1: Product: syz [ 808.699954][T12939] usb 4-1: Manufacturer: syz [ 808.699971][T12939] usb 4-1: SerialNumber: syz [ 808.803383][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.803447][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.972434][T18418] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.094561][T12939] snd-usb-6fire 4-1:1.0: unable to receive device firmware state. [ 809.094688][T12939] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -71 [ 809.111171][T12939] usb 4-1: USB disconnect, device number 50 [ 809.479420][T18418] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.749163][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 809.779189][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 809.791018][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 809.795859][T18418] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.798074][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 809.798804][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 810.459252][T21768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 810.490739][T21768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 810.832497][T21768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 810.880000][T21768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 810.899912][T21768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 810.945867][T21768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 811.175760][T21768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 811.205514][T21768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 811.224258][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12 [ 811.307538][T21996] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6559'. [ 811.514232][T18418] bridge_slave_1: left allmulticast mode [ 811.514265][T18418] bridge_slave_1: left promiscuous mode [ 811.514561][T18418] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.555068][T18418] bridge_slave_0: left allmulticast mode [ 811.555104][T18418] bridge_slave_0: left promiscuous mode [ 811.555336][T18418] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.600902][T22006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6560'. [ 811.600943][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6560'. [ 811.926138][ T5626] Bluetooth: hci6: command tx timeout [ 812.064264][T18418] bond1 (unregistering): (slave geneve2): Releasing active interface [ 812.123793][T22013] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 812.123793][T22013] program iou-wrk-22012 not setting count and/or reply_len properly [ 812.123871][T22013] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 812.123871][T22013] program iou-wrk-22012 not setting count and/or reply_len properly [ 812.123909][T22013] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 812.123909][T22013] program iou-wrk-22012 not setting count and/or reply_len properly [ 812.129257][T18418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.234249][T18418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.239044][T18418] bond0 (unregistering): Released all slaves [ 812.266669][T18418] bond1 (unregistering): Released all slaves [ 812.357627][T22006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6560'. [ 812.357662][T22006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6560'. [ 812.471708][T18424] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.472627][T18424] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.472675][T18424] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.472717][T18424] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.486202][T18418] tipc: Disabling bearer [ 812.486571][T18418] tipc: Left network mode [ 812.540212][T18418] IPVS: stopping backup sync thread 20892 ... [ 813.699976][T18418] hsr_slave_0: left promiscuous mode [ 813.708839][T18418] hsr_slave_1: left promiscuous mode [ 813.709857][T18418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.709881][T18418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.735525][T18418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.735566][T18418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.774230][T18418] veth1_macvtap: left promiscuous mode [ 813.774274][T18418] veth0_macvtap: left promiscuous mode [ 813.774380][T18418] veth1_vlan: left promiscuous mode [ 813.774453][T18418] veth0_vlan: left promiscuous mode [ 814.002199][ T5626] Bluetooth: hci6: command tx timeout [ 814.434013][T18418] team0 (unregistering): Port device team_slave_1 removed [ 814.459881][T18418] team0 (unregistering): Port device team_slave_0 removed [ 814.688175][T21969] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.688354][T21969] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.688535][T21969] bridge_slave_0: entered allmulticast mode [ 814.721303][T21969] bridge_slave_0: entered promiscuous mode [ 814.737049][ T5277] 8021q: adding VLAN 0 to HW filter on device eth13 [ 814.742892][T21969] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.743848][T21969] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.749952][T21969] bridge_slave_1: entered allmulticast mode [ 814.769135][T21969] bridge_slave_1: entered promiscuous mode [ 814.965072][T21969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.002885][T21969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.076008][T21768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.245113][T21969] team0: Port device team_slave_0 added [ 815.273217][T21969] team0: Port device team_slave_1 added [ 815.367207][T21768] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.515569][T21969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.515589][T21969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.517234][T21969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.564710][T21969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.564730][T21969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.564760][T21969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.660220][T18421] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.660401][T18421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.753064][T18424] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.753183][T18424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.001003][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 816.023978][T21969] hsr_slave_0: entered promiscuous mode [ 816.028363][T21969] hsr_slave_1: entered promiscuous mode [ 816.030124][T21969] debugfs: 'hsr0' already exists in 'hsr' [ 816.030145][T21969] Cannot create hsr debugfs directory [ 816.086997][ T5626] Bluetooth: hci6: command tx timeout [ 817.459297][ T5277] 8021q: adding VLAN 0 to HW filter on device eth14 [ 817.549869][T21768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.051578][T21768] veth0_vlan: entered promiscuous mode [ 818.104127][T21768] veth1_vlan: entered promiscuous mode [ 818.160540][ T52] Bluetooth: hci6: command tx timeout [ 818.205865][T22101] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6579'. [ 819.323887][ T5277] 8021q: adding VLAN 0 to HW filter on device eth15 [ 819.478221][T21768] veth0_macvtap: entered promiscuous mode [ 819.557273][T21768] veth1_macvtap: entered promiscuous mode [ 819.626127][T21768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.645845][T21768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.418746][T21969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 820.473048][T21969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 820.477879][T21969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 820.559637][T21969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 820.565905][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.609784][T21969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 820.634552][T21969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 820.635230][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.635437][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.635478][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.729679][T21969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 820.777559][T21969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 820.924827][T18421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.924846][T18421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.242558][T22139] kernel read not supported for file /file1 (pid: 22139 comm: syz.6.6582) [ 821.242816][ T32] audit: type=1800 audit(1789307109.272:576): pid=22139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6582" name="file1" dev="mqueue" ino=101854 res=0 errno=0 [ 821.302824][T18421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.302868][T18421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.612924][T21969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.916392][ T5277] 8021q: adding VLAN 0 to HW filter on device eth16 [ 821.977334][T21969] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.159275][T18424] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.159390][T18424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.228175][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.228293][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.755703][T21969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.004508][T21969] veth0_vlan: entered promiscuous mode [ 823.047058][T21969] veth1_vlan: entered promiscuous mode [ 823.262312][T21969] veth0_macvtap: entered promiscuous mode [ 823.348838][T21969] veth1_macvtap: entered promiscuous mode [ 823.423761][T21969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.454263][T21969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.532662][T21070] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.578496][T17875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.578718][T17875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.578856][T17875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.968357][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.968383][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.240078][T21070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.240105][T21070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.972824][T22211] netlink: 'syz.5.6596': attribute type 1 has an invalid length. [ 825.234206][T22214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6597'. [ 826.062296][T12933] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 826.245598][T12933] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 826.246791][T12933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.246826][T12933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.246868][T12933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.398048][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 826.409662][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 826.419411][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 826.437673][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 826.440931][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 826.763798][T12933] hid-sensor-hub 0003:8086:0000.005C: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.3-1/input0 [ 827.328525][T12933] usb 4-1: USB disconnect, device number 51 [ 828.555551][T22249] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.555933][T22249] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.556487][T22249] bridge_slave_0: entered allmulticast mode [ 828.562208][ T52] Bluetooth: hci4: command tx timeout [ 828.592380][T22249] bridge_slave_0: entered promiscuous mode [ 828.604982][T22249] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.605446][T22249] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.605593][T22249] bridge_slave_1: entered allmulticast mode [ 828.610211][T22249] bridge_slave_1: entered promiscuous mode [ 828.693654][T22249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.713072][T22249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.764608][T22249] team0: Port device team_slave_0 added [ 828.768062][T22249] team0: Port device team_slave_1 added [ 828.821220][T22249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.821242][T22249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.821271][T22249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.890025][T22249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.890047][T22249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.890078][T22249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.258198][T22249] hsr_slave_0: entered promiscuous mode [ 829.269801][T22249] hsr_slave_1: entered promiscuous mode [ 829.271858][T22249] debugfs: 'hsr0' already exists in 'hsr' [ 829.271919][T22249] Cannot create hsr debugfs directory [ 829.460448][ T5707] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 829.614607][ T5707] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 829.617536][ T5707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.617593][ T5707] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.617641][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.503719][T12932] usb 4-1: USB disconnect, device number 52 [ 830.573747][T22335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.640584][ T52] Bluetooth: hci4: command tx timeout [ 830.745871][T21070] IPVS: starting estimator thread 0... [ 830.835226][T22339] IPVS: using max 28 ests per chain, 67200 per kthread [ 832.058095][T17874] IPVS: stop unused estimator thread 0... [ 832.353194][T22367] ip_tables: iptables: counters copy to user failed while replacing table [ 832.720474][ T52] Bluetooth: hci4: command tx timeout [ 834.521686][T22249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 834.558686][T22249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.574862][T22249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 834.626676][T22249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.645582][T22249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 834.682449][T22249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.699685][T22249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 834.746134][T22249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.804188][ T52] Bluetooth: hci4: command tx timeout [ 835.058393][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6638'. [ 835.457572][T22249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.564159][T22249] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.623081][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.623202][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.733107][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.733225][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.286351][T22480] hsr0: entered allmulticast mode [ 836.286378][T22480] hsr_slave_0: entered allmulticast mode [ 836.286400][T22480] hsr_slave_1: entered allmulticast mode [ 836.308154][T22480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6643'. [ 836.333834][T22480] hsr_slave_0: left promiscuous mode [ 836.385688][T22480] hsr_slave_1: left promiscuous mode [ 836.492861][T22249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.737516][T22249] veth0_vlan: entered promiscuous mode [ 836.787547][T22249] veth1_vlan: entered promiscuous mode [ 836.871310][T22492] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6647'. [ 836.898270][T22492] erspan0: entered promiscuous mode [ 836.908915][T22492] macvtap1: entered promiscuous mode [ 836.909202][T22492] macvtap1: entered allmulticast mode [ 836.909221][T22492] erspan0: entered allmulticast mode [ 836.969481][T22492] erspan0: left allmulticast mode [ 836.969787][T22492] erspan0: left promiscuous mode [ 836.999248][T22492] macvtap1: left promiscuous mode [ 836.999277][T22492] macvtap1: left allmulticast mode [ 837.185417][T22249] veth0_macvtap: entered promiscuous mode [ 837.222982][T22249] veth1_macvtap: entered promiscuous mode [ 837.358040][T22249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.415583][T22249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.512311][T17874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.513144][T18421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.513193][T18421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.513237][T18421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.343532][T18418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.343560][T18418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.703934][T22515] syzkaller0: entered promiscuous mode [ 838.703959][T22515] syzkaller0: entered allmulticast mode [ 839.275321][T18421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.275346][T18421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.564576][ T32] audit: type=1326 audit(1789307127.592:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.8.6659" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161a19e159 code=0x7fc00000 [ 839.596810][ T32] audit: type=1326 audit(1789307127.622:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.8.6659" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f161a19e159 code=0x7fc00000 [ 839.597354][ T32] audit: type=1326 audit(1789307127.622:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.8.6659" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161a19e159 code=0x7fc00000 [ 841.192552][ T32] audit: type=1326 audit(1789307129.222:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22586 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30f19e159 code=0x7ffc0000 [ 841.194475][ T32] audit: type=1326 audit(1789307129.222:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22586 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30f19e159 code=0x7ffc0000 [ 841.196351][ T32] audit: type=1326 audit(1789307129.222:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22586 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30f19e159 code=0x7ffc0000 [ 841.196938][ T32] audit: type=1326 audit(1789307129.222:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22586 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30f19e159 code=0x7ffc0000 [ 841.200428][ T32] audit: type=1326 audit(1789307129.222:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22586 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc30f19e159 code=0x7ffc0000 [ 841.275350][ T32] audit: type=1326 audit(1789307129.302:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22586 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc30f15e98e code=0x7ffc0000 [ 841.302398][ T32] audit: type=1326 audit(1789307129.322:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22586 comm="syz.3.6668" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc30f15e98e code=0x7ffc0000 [ 843.340154][T22581] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.341226][T22581] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.560212][T22581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.599341][T22581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.024944][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.025002][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.025044][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.025084][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.107362][T22673] netlink: 'syz.8.6683': attribute type 12 has an invalid length. [ 845.827888][T22690] ip_tables: iptables: counters copy to user failed while replacing table [ 845.851017][T12926] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 846.000598][T12926] usb 3-1: Using ep0 maxpacket: 32 [ 846.002184][T12926] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 846.003736][T12926] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 846.012872][T12926] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 846.012955][T12926] usb 3-1: Product: syz [ 846.013004][T12926] usb 3-1: Manufacturer: syz [ 846.013047][T12926] usb 3-1: SerialNumber: syz [ 846.056055][T12926] usb 3-1: config 0 descriptor?? [ 846.056916][T22687] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 846.075617][T12926] hub 3-1:0.0: bad descriptor, ignoring hub [ 846.075659][T12926] hub 3-1:0.0: probe with driver hub failed with error -5 [ 846.522117][ T5707] usb 3-1: USB disconnect, device number 77 [ 846.720442][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 847.221111][T22725] lo: Caught tx_queue_len zero misconfig [ 847.277134][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6696'. [ 847.277166][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6696'. [ 847.569145][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6698'. [ 847.584139][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6698'. [ 848.894827][T22773] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 849.167896][T22786] netlink: 'syz.3.6712': attribute type 8 has an invalid length. [ 849.167921][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6712'. [ 849.207186][T22786] veth1_to_team: entered promiscuous mode [ 849.208958][T22786] gretap0: entered promiscuous mode [ 849.227870][T22786] veth1_to_team: left promiscuous mode [ 849.239832][T22786] gretap0: left promiscuous mode [ 850.699371][T22839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6728'. [ 850.796828][T22839] ip6gre1: entered promiscuous mode [ 850.796857][T22839] ip6gre1: entered allmulticast mode [ 852.290616][T12926] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 852.443311][T12926] usb 2-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 852.444004][T12926] usb 2-1: config 0 has no interfaces? [ 852.444042][T12926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.459238][T12926] usb 2-1: config 0 descriptor?? [ 853.281518][T12940] wiimote 0005:057E:0306.005D: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 853.281931][T12940] wiimote 0005:057E:0306.005D: New device registered [ 853.343827][ T5710] usb 2-1: USB disconnect, device number 77 [ 853.463586][T22914] wiimote 0005:057E:0306.005D: Device removed [ 853.479396][T22923] fido_id[22923]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 853.841421][T22935] batman_adv: batadv0: Adding interface: syzkaller0 [ 853.841459][T22935] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.841497][T22935] batman_adv: batadv0: Interface activated: syzkaller0 [ 853.908920][T22934] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 854.026460][T22934] batman_adv: batadv0: Removing interface: syzkaller0 [ 854.331352][T12940] wiimote 0005:057E:0306.005D: detected device: Nintendo Wii Remote (Gen 1) [ 854.493111][T12940] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.005D/input/input118 [ 854.498743][T12940] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.005D/input/input119 [ 854.538904][T12940] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.005D/input/input117 [ 856.974220][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 857.503862][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6771'. [ 858.450467][ T5707] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 858.600725][ T5707] usb 2-1: Using ep0 maxpacket: 16 [ 858.601637][ T5707] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 858.603059][ T5707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 858.608775][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.608803][ T5707] usb 2-1: Product: syz [ 858.608821][ T5707] usb 2-1: Manufacturer: syz [ 858.608838][ T5707] usb 2-1: SerialNumber: syz [ 858.664097][ T5707] usb 2-1: config 0 descriptor?? [ 858.682391][ T5707] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 858.682451][ T5707] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 859.036129][T23056] input: syz0 as /devices/virtual/input/input120 [ 859.292377][ T5707] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 860.019697][ T5707] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 860.019839][ T5707] em28xx 2-1:0.0: board has no eeprom [ 860.110454][ T5707] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 860.110497][ T5707] em28xx 2-1:0.0: dvb set to bulk mode. [ 860.112355][T12940] em28xx 2-1:0.0: Binding DVB extension [ 860.154571][ T5707] usb 2-1: USB disconnect, device number 78 [ 860.156480][ T5707] em28xx 2-1:0.0: Disconnecting em28xx [ 860.621872][T12940] em28xx 2-1:0.0: Registering input extension [ 860.622252][ T5707] em28xx 2-1:0.0: Closing input extension [ 861.127221][ T5707] em28xx: Freeing device [ 861.817034][T23121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6793'. [ 864.310602][T23182] ip_tables: iptables: counters copy to user failed while replacing table [ 864.796926][T23191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6811'. [ 864.998957][T23191] team0: Port device team_slave_0 removed [ 865.860720][ T5707] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 866.018875][ T5707] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 866.032855][ T5707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 866.032888][ T5707] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 866.073123][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.073177][ T5707] usb 2-1: Product: syz [ 866.073196][ T5707] usb 2-1: Manufacturer: syz [ 866.073213][ T5707] usb 2-1: SerialNumber: syz [ 866.250900][T12940] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 866.387729][ T5707] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 866.403112][T12940] usb 6-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 866.404382][T12940] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.404416][T12940] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.404457][T12940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.924109][T12928] usb 2-1: USB disconnect, device number 79 [ 866.968187][T12940] hid-sensor-hub 0003:8086:0000.005E: hiddev1,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.5-1/input0 [ 866.970219][T12928] usblp0: removed [ 867.283361][T12940] usb 6-1: USB disconnect, device number 27 [ 867.416409][T23299] fido_id[23299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 870.216237][T23360] netlink: 'syz.8.6842': attribute type 4 has an invalid length. [ 870.253214][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.253281][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.922868][T23377] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6848'. [ 870.924092][T23377] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.927080][T23377] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.806412][T23403] input: syz0 as /devices/virtual/input/input122 [ 872.758042][T23429] ip_tables: iptables: counters copy to user failed while replacing table [ 872.885746][T23432] syzkaller1: entered promiscuous mode [ 872.885770][T23432] syzkaller1: entered allmulticast mode [ 873.114773][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6869'. [ 873.114803][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6869'. [ 873.114851][T23435] netlink: 'syz.5.6869': attribute type 5 has an invalid length. [ 876.114355][T12928] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 876.290425][T12928] usb 6-1: Using ep0 maxpacket: 32 [ 876.292617][T12928] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 876.294110][T12928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.328999][T12928] usb 6-1: config 0 descriptor?? [ 876.344390][T12928] gspca_main: sunplus-2.14.0 probing 041e:400b [ 876.518356][T23482] syzkaller1: entered promiscuous mode [ 876.518384][T23482] syzkaller1: entered allmulticast mode [ 876.984869][T23494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6888'. [ 877.080126][T23498] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6890'. [ 877.568641][T12928] gspca_sunplus: reg_w_riv err -71 [ 877.568751][T12928] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 877.590397][T12928] usb 6-1: USB disconnect, device number 28 [ 878.437904][ T32] kauditd_printk_skb: 75 callbacks suppressed [ 878.437927][ T32] audit: type=1326 audit(1789307166.462:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23517 comm="syz.2.6898" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9531f9e159 code=0x0 [ 878.732313][T12940] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 878.901116][T12940] usb 2-1: Using ep0 maxpacket: 32 [ 878.901877][T12940] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 878.904638][T12940] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 878.904672][T12940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 878.904701][T12940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 878.904727][T12940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 878.904757][T12940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 878.907681][T12940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.907708][T12940] usb 2-1: Product: syz [ 878.907725][T12940] usb 2-1: Manufacturer: syz [ 878.907766][T12940] usb 2-1: SerialNumber: syz [ 878.943689][T12940] usb 2-1: config 0 descriptor?? [ 879.404003][T12940] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 879.404059][T12940] input input123: Device does not respond to id packet M [ 879.406900][T12940] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 879.406950][T12940] input input123: Device does not respond to id packet P [ 879.409387][T12940] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 879.409436][T12940] input input123: Device does not respond to id packet B [ 879.488457][T23545] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6908'. [ 879.819627][T23554] netlink: 112 bytes leftover after parsing attributes in process `syz.8.6913'. [ 879.819826][T23554] netlink: 112 bytes leftover after parsing attributes in process `syz.8.6913'. [ 879.822064][T12940] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 879.824252][T12940] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 879.835500][T12940] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 879.869887][T12940] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input123 [ 879.949316][T12940] usb 2-1: USB disconnect, device number 80 [ 880.665099][T23579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.054918][T23594] syzkaller0: entered promiscuous mode [ 881.056389][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6926'. [ 881.094215][T23596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6926'. [ 881.817912][T23624] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 882.039875][T23628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6933'. [ 882.355675][T12940] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 882.546888][T12940] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 882.549425][T12940] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 882.549459][T12940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 882.560930][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 882.600561][T12940] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 882.600593][T12940] usb 4-1: Product: syz [ 882.600611][T12940] usb 4-1: Manufacturer: syz [ 882.600628][T12940] usb 4-1: SerialNumber: syz [ 882.644588][T12940] usb 4-1: config 0 descriptor?? [ 882.690608][T12940] usb 4-1: selecting invalid altsetting 0 [ 882.691776][ T32] audit: type=1326 audit(1789307170.722:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23653 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9531f9e159 code=0x7ffc0000 [ 882.692020][ T32] audit: type=1326 audit(1789307170.722:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23653 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9531f9e159 code=0x7ffc0000 [ 882.694565][ T32] audit: type=1326 audit(1789307170.722:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23653 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9531f9e159 code=0x7ffc0000 [ 882.695205][ T32] audit: type=1326 audit(1789307170.722:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23653 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9531f9e159 code=0x7ffc0000 [ 882.695254][ T32] audit: type=1326 audit(1789307170.722:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23653 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9531f9e159 code=0x7ffc0000 [ 882.695299][ T32] audit: type=1326 audit(1789307170.722:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23653 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9531f9e159 code=0x7ffc0000 [ 882.699076][ T32] audit: type=1326 audit(1789307170.722:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23653 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9531f9e159 code=0x7ffc0000 [ 882.699123][ T32] audit: type=1326 audit(1789307170.722:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23653 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9531f9e159 code=0x7ffc0000 [ 882.699987][ T32] audit: type=1326 audit(1789307170.722:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23653 comm="syz.2.6940" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9531f9e159 code=0x7ffc0000 [ 883.196438][T12940] usb 4-1: USB disconnect, device number 53 [ 883.251983][T23662] xt_hashlimit: size too large, truncated to 1048576 [ 883.429246][ T6559] udevd[6559]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.676945][T12940] hid-generic 0000:0000:0000.005F: unknown main item tag 0x0 [ 883.739785][T12940] hid-generic 0000:0000:0000.005F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 885.190462][T12928] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 885.340503][T12928] usb 6-1: Using ep0 maxpacket: 32 [ 885.341412][T12928] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 885.342907][T12928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.342939][T12928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.342981][T12928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.348784][T12928] usb 6-1: config 0 descriptor?? [ 885.859978][T12928] savu 0003:1E7D:2D5A.0060: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 886.693227][T12928] usb 6-1: USB disconnect, device number 29 [ 887.661290][T12928] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 887.810542][T12928] usb 4-1: Using ep0 maxpacket: 8 [ 887.811607][T12928] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 887.816896][T12928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.816924][T12928] usb 4-1: Product: syz [ 887.816941][T12928] usb 4-1: Manufacturer: syz [ 887.816958][T12928] usb 4-1: SerialNumber: syz [ 887.820199][T12928] usb 4-1: config 0 descriptor?? [ 887.883364][T12928] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 888.535565][T23783] syz.5.6972 (23783): drop_caches: 2 [ 888.696670][T23798] kernel read not supported for file /memory.events (pid: 23798 comm: syz.8.6976) [ 888.696903][ T32] kauditd_printk_skb: 22 callbacks suppressed [ 888.696920][ T32] audit: type=1800 audit(1789307176.722:694): pid=23798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6976" name="memory.events" dev="mqueue" ino=108280 res=0 errno=0 [ 889.110415][T12928] gspca_sonixj: reg_w1 err -71 [ 889.190458][T12928] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 889.194166][T12928] usb 4-1: USB disconnect, device number 54 [ 889.551892][T12926] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 889.710462][T12926] usb 3-1: Using ep0 maxpacket: 32 [ 889.715228][T12926] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 889.717005][T12926] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 889.717040][T12926] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 889.717064][T12926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 889.717091][T12926] usb 3-1: config 1 has no interface number 0 [ 889.717156][T12926] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 889.717182][T12926] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 889.717226][T12926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.825337][T12926] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 890.065565][T12926] snd_usb_pod 3-1:1.1: invalid control EP [ 890.065592][T12926] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 890.065828][T12926] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 890.066427][T12926] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 890.311343][T12926] usb 3-1: USB disconnect, device number 79 [ 891.436737][T23856] netlink: 7 bytes leftover after parsing attributes in process `syz.5.6996'. [ 891.807953][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7001'. [ 891.837062][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7001'. [ 891.845578][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.861516][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.865640][T18421] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.879610][T17873] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.563565][T23885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7008'. [ 894.140567][T23934] netlink: 'syz.5.7018': attribute type 23 has an invalid length. [ 894.267580][T17876] IPVS: starting estimator thread 0... [ 894.518252][T23942] IPVS: using max 27 ests per chain, 64800 per kthread [ 896.035433][T23994] xt_hashlimit: size too large, truncated to 1048576 [ 897.443145][T24033] netlink: 'syz.8.7043': attribute type 5 has an invalid length. [ 899.012643][T24069] loop5: detected capacity change from 0 to 7 [ 899.014445][T24069] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 899.014469][T24069] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 899.025241][T24069] Dev loop5: unable to read RDB block 7 [ 899.025328][T24069] loop5: AHDI p2 [ 899.025416][T24069] loop5: partition table partially beyond EOD, truncated [ 901.066841][T24102] ip_tables: iptables: counters copy to user failed while replacing table [ 901.398045][ T32] audit: type=1326 audit(1789307189.422:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24104 comm="syz.3.7069" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc30f19e159 code=0x0 [ 901.502654][T24115] netlink: 'syz.8.7071': attribute type 1 has an invalid length. [ 901.574861][T24115] bond2: (slave geneve2): making interface the new active one [ 901.575441][T24115] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 901.581230][T18423] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 901.613601][T21073] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 901.625396][T16633] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 901.627108][T21073] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 901.874861][ T32] audit: type=1804 audit(1789307189.902:696): pid=24122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7074" name="/newroot/101/file1" dev="tmpfs" ino=539 res=1 errno=0 [ 902.243515][ T33] INFO: task syz.7.6117:20599 blocked for more than 143 seconds. [ 902.243546][ T33] Tainted: G L syzkaller #0 [ 902.243560][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 902.243570][ T33] task:syz.7.6117 state:D stack:27640 pid:20599 tgid:20597 ppid:20196 task_flags:0x400140 flags:0x00080002 [ 902.243666][ T33] Call Trace: [ 902.243680][ T33] [ 902.243696][ T33] __schedule+0x17db/0x58f0 [ 902.243729][ T33] ? __lock_acquire+0x747/0x2de0 [ 902.243794][ T33] ? __pfx___schedule+0x10/0x10 [ 902.243815][ T33] ? lock_acquire+0x115/0x350 [ 902.243849][ T33] ? schedule+0x90/0x2b0 [ 902.243875][ T33] schedule+0x164/0x2b0 [ 902.243901][ T33] cgroup_lock_and_drain_offline+0x51a/0x650 [ 902.243951][ T33] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 902.243989][ T33] ? __pfx_autoremove_wake_function+0x10/0x10 [ 902.244043][ T33] cgroup_kn_lock_live+0x120/0x230 [ 902.244082][ T33] cgroup_subtree_control_write+0x4b5/0x1080 [ 902.244132][ T33] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 902.244186][ T33] ? kernfs_root+0x1c/0x230 [ 902.244208][ T33] ? kernfs_root+0x1c/0x230 [ 902.244232][ T33] ? kernfs_root+0x1ea/0x230 [ 902.244257][ T33] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 902.244294][ T33] cgroup_file_write+0x331/0x8f0 [ 902.244335][ T33] ? __pfx_cgroup_file_write+0x10/0x10 [ 902.244372][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 902.244407][ T33] ? __pfx_cgroup_file_write+0x10/0x10 [ 902.244439][ T33] kernfs_fop_write_iter+0x3a4/0x540 [ 902.244476][ T33] vfs_write+0x612/0xba0 [ 902.244522][ T33] ? __pfx_vfs_write+0x10/0x10 [ 902.244569][ T33] ? __fget_files+0x2a/0x420 [ 902.244611][ T33] ksys_write+0x150/0x270 [ 902.244650][ T33] ? __pfx_ksys_write+0x10/0x10 [ 902.244699][ T33] do_syscall_64+0x166/0x520 [ 902.244725][ T33] ? trace_irq_disable+0x3b/0x140 [ 902.244749][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.244775][ T33] ? clear_bhb_loop+0x70/0xc0 [ 902.244804][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.244829][ T33] RIP: 0033:0x7f2cfdb9e159 [ 902.244850][ T33] RSP: 002b:00007f2cfe9ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 902.244876][ T33] RAX: ffffffffffffffda RBX: 00007f2cfde25fa0 RCX: 00007f2c ** replaying previous printk message ** [ 902.244876][ T33] RAX: ffffffffffffffda RBX: 00007f2cfde25fa0 RCX: 00007f2cfdb9e159 [ 902.244894][ T33] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000005 [ 902.245146][ T33] RBP: 00007f2cfdc3503b R08: 0000000000000000 R09: 0000000000000000 [ 902.245165][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.245181][ T33] R13: 00007f2cfde26038 R14: 00007f2cfde25fa0 R15: 00007f2cfdf4fa48 [ 902.245218][ T33] [ 902.245229][ T33] INFO: task syz.7.6117:20601 blocked for more than 143 seconds. [ 902.245249][ T33] Tainted: G L syzkaller #0 [ 902.245263][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 902.245274][ T33] task:syz.7.6117 state:D stack:28808 pid:20601 tgid:20597 ppid:20196 task_flags:0x400040 flags:0x00080002 [ 902.245344][ T33] Call Trace: [ 902.245352][ T33] [ 902.245367][ T33] __schedule+0x17db/0x58f0 [ 902.245422][ T33] ? __pfx___schedule+0x10/0x10 [ 902.245456][ T33] ? schedule+0x90/0x2b0 [ 902.245483][ T33] schedule+0x164/0x2b0 [ 902.245510][ T33] schedule_preempt_disabled+0x13/0x30 [ 902.245533][ T33] __mutex_lock+0x7c1/0x1550 [ 902.245565][ T33] ? __mutex_lock+0x5d4/0x1550 [ 902.245596][ T33] ? fdget_pos+0x246/0x320 [ 902.245631][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 902.245665][ T33] ? __fget_files+0x2a/0x420 [ 902.245702][ T33] ? __fget_files+0x3a2/0x420 [ 902.245733][ T33] ? __fget_files+0x2a/0x420 [ 902.245770][ T33] fdget_pos+0x246/0x320 [ 902.245806][ T33] ksys_write+0x79/0x270 [ 902.245843][ T33] ? __pfx_ksys_write+0x10/0x10 [ 902.245878][ T33] ? __pfx_kcov_ioctl+0x10/0x10 [ 902.245912][ T33] do_syscall_64+0x166/0x520 [ 902.245938][ T33] ? trace_irq_disable+0x3b/0x140 [ 902.245960][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.245984][ T33] ? clear_bhb_loop+0x70/0xc0 [ 902.246012][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.246044][ T33] RIP: 0033:0x7f2cfdb9e159 [ 902.246063][ T33] RSP: 002b:00007f2cfe98c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 902.246088][ T33] RAX: ffffffffffffffda RBX: 00007f2cfde26090 RCX: 00007f2cfdb9e159 [ 902.246124][ T33] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000005 [ 902.246140][ T33] RBP: 00007f2cfdc3503b R08: 0000000000000000 R09: 0000000000000000 [ 902.246155][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.246170][ T33] R13: 00007f2cfde26128 R14: 00007f2cfde26090 R15: 00007f2cfdf4fa48 [ 902.246206][ T33] [ 902.246270][ T33] [ 902.246270][ T33] Showing all locks held in the system: [ 902.246283][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 902.246301][ T33] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 902.246381][ T33] locks held by udevd/4982: 3, last CPU#1: [ 902.246398][ T33] #0: ffff888077a1cef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 902.246462][ T33] #1: ffff888079e84600 (&type->i_mutex_dir_key#4){++++}-{4:4}, at: iterate_dir+0x209/0x4d0 [ 902.246525][ T33] #2: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_fop_readdir+0x26d/0x960 [ 902.246587][ T33] locks held by getty/5372: 2, on CPU#1: [ 902.246604][ T33] #0: ffff8880333eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 902.246670][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 902.248474][ T33] locks held by udevd/5616: 1, last CPU#1: [ 902.248492][ T33] #0: ffffffff8f4f18b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 902.248554][ T33] locks held by kworker/0:10/12928: 3, on CPU#0: [ 902.248568][ T33] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 902.248621][ T33] #1: ffffc9000321fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 902.248671][ T33] #2: ffff8880670ea250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 902.248729][ T33] locks held by syz.3.3478/13650: 1, last CPU#0: [ 902.248761][ T33] #0: ffffffff9aee9560 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad+0x26c/0xb50 [ 902.248817][ T33] locks held by kworker/u8:22/18423: 5, last CPU#1: [ 902.248832][ T33] #0: ffff888032535140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 902.248886][ T33] #1: ffffc9001d3cfc40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 902.248941][ T33] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: batadv_bla_periodic_work+0x336/0xb40 [ 902.248998][ T33] #3: ffff888085f85120 (&bat_priv->bla.num_requests_lock){+.-.}-{3:3}, at: batadv_bla_periodic_work+0x62b/0xb40 [ 902.249064][ T33] #4: ffff8880b8728298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 902.249122][ T33] locks held by syz.7.6117/20599: 3, on CPU#0: [ 902.249135][ T33] #0: ffff88807f9497b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 902.249188][ T33] #1: ffff888033990460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 902.249250][ T33] #2: ffff88807a735080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 902.249303][ T33] locks held by syz.7.6117/20601: 1, on CPU#1: [ 902.249317][ T33] #0: ffff88807f9497b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 902.249380][ T33] locks held by syz-executor/20900: 4, last CPU#0: [ 902.249395][ T33] #0: ffffffff8ee36330 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 902.249456][ T33] #1: ffff888078dee9b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 902.249521][ T33] #2: ffff888033c29d38 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 902.249594][ T33] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 902.249664][ T33] locks held by syz-executor/21969: 4, last CPU#1: [ 902.249682][ T33] #0: ffffffff8ee36330 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 902.249745][ T33] #1: ffff8880354ee9b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 902.249811][ T33] #2: ffff8880354ef678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 902.249883][ T33] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 902.249948][ T33] locks held by syz-executor/22249: 2, on CPU#0: [ 902.249966][ T33] #0: ffffffff90253140 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 902.338429][ T33] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 902.338517][ T33] locks held by syz.1.7078/24127: 2, last CPU#1: [ 902.338535][ T33] #0: ffff8880354ed038 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd10 [ 902.338594][ T33] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 902.338655][ T33] locks held by syz.8.7079/24129: 4, last CPU#1: [ 902.338672][ T33] #0: ffff8880717ce1c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 902.338740][ T33] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 902.338808][ T33] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 902.338872][ T33] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 902.338937][ T33] [ 902.338944][ T33] ============================================= [ 902.338944][ T33] [ 902.338954][ T33] NMI backtrace for cpu 0 [ 902.338986][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 902.339018][ T33] Tainted: [L]=SOFTLOCKUP [ 902.339035][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.339049][ T33] Call Trace: [ 902.339058][ T33] [ 902.339068][ T33] dump_stack_lvl+0xe8/0x150 [ 902.339103][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 902.339138][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 902.339176][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 902.339213][ T33] sys_info+0x135/0x170 [ 902.339243][ T33] watchdog+0xfd7/0x1030 [ 902.339272][ T33] ? watchdog+0x1c7/0x1030 [ 902.339301][ T33] kthread+0x38b/0x480 [ 902.339324][ T33] ? __pfx_watchdog+0x10/0x10 [ 902.339343][ T33] ? __pfx_kthread+0x10/0x10 [ 902.339366][ T33] ret_from_fork+0x514/0xb70 [ 902.339391][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 902.339427][ T33] ? __switch_to+0xc89/0x1420 [ 902.339461][ T33] ? __pfx_kthread+0x10/0x10 [ 902.339485][ T33] ret_from_fork_asm+0x1a/0x30 [ 902.339536][ T33] [ 902.339546][ T33] Sending NMI from CPU 0 to CPUs 1: [ 902.339642][ C1] NMI backtrace for cpu 1 [ 902.339658][ C1] CPU: 1 UID: 0 PID: 21969 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 902.339686][ C1] Tainted: [L]=SOFTLOCKUP [ 902.339693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.339705][ C1] RIP: 0010:update_load_avg+0xb5a/0x1920 [ 902.339735][ C1] Code: 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 db 9e 9d 00 49 8b 37 4c 89 e7 31 d2 4d 89 eb 2e e8 6a 11 66 1e 4c 8b 2c 24 <41> f6 c6 01 4c 8b 64 24 08 0f 85 ff 05 00 00 e9 02 06 00 00 4d 8d [ 902.339753][ C1] RSP: 0018:ffffc90000a18b40 EFLAGS: 00000046 [ 902.339770][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000001000003 [ 902.339783][ C1] RDX: 0000000000000000 RSI: ffffffff8e69bb73 RDI: ffffffff8c6da080 [ 902.339797][ C1] RBP: dffffc0000000000 R08: ffffffff907a3d7f R09: 1ffffffff20f47af [ 902.339812][ C1] R10: dffffc0000000000 R11: fffffbfff20f47b0 R12: 0000000000000000 [ 902.339826][ C1] R13: ffff88807a6e1fc0 R14: 0000000000000005 R15: ffff8880b873bac0 [ 902.339842][ C1] FS: 0000555567229500(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 902.339861][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 902.339875][ C1] CR2: 0000001b2fc20000 CR3: 000000006ff18000 CR4: 00000000003526f0 [ 902.339894][ C1] Call Trace: [ 902.339904][ C1] [ 902.339918][ C1] enqueue_task_fair+0x668/0x1cb0 [ 902.339951][ C1] enqueue_task+0x75/0x410 [ 902.339982][ C1] ttwu_do_activate+0x1c8/0x640 [ 902.340007][ C1] try_to_wake_up+0x82b/0x14d0 [ 902.340033][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 902.340063][ C1] hrtimer_wakeup+0x4e/0x60 [ 902.340091][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 902.340127][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 902.340169][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 902.340193][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 902.340214][ C1] [ 902.340221][ C1] [ 902.340228][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 902.340250][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 902.340294][ C1] Code: ff ff ff e8 f0 09 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 42 c5 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d c7 4b da [ 902.340313][ C1] RSP: 0018:ffffc900033af1c0 EFLAGS: 00000296 [ 902.340331][ C1] RAX: b6ea116dfa5b2700 RBX: 0000000000000000 RCX: 0000000000000046 [ 902.340346][ C1] RDX: 00000000cd99408e RSI: ffffffff8e69bb73 RDI: ffffffff8c6da080 [ 902.340362][ C1] RBP: ffff88807fe83e80 R08: ffffffff8177f1df R09: 0000000000000000 [ 902.340379][ C1] R10: ffffc900033af2f8 R11: ffffffff81b285f0 R12: ffffffff8ed5c8a0 [ 902.340397][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 902.340415][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 902.340438][ C1] ? unwind_next_frame+0x8f/0x2550 [ 902.340470][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 902.340495][ C1] ? unwind_next_frame+0x8f/0x2550 [ 902.340527][ C1] unwind_next_frame+0xac/0x2550 [ 902.340553][ C1] ? unwind_next_frame+0x8f/0x2550 [ 902.340577][ C1] ? kasan_save_track+0x3e/0x80 [ 902.340597][ C1] ? unwind_next_frame+0x8f/0x2550 [ 902.340619][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 902.340648][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 902.340667][ C1] arch_stack_walk+0x11b/0x150 [ 902.340692][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 902.340713][ C1] ? anon_vma_fork+0x88/0x540 [ 902.340741][ C1] stack_trace_save+0xa9/0x100 [ 902.340770][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 902.340800][ C1] ? __lock_acquire+0x747/0x2de0 [ 902.340821][ C1] ? vm_area_dup+0x28/0x760 [ 902.340851][ C1] kasan_save_track+0x3e/0x80 [ 902.340869][ C1] ? kasan_save_track+0x3e/0x80 [ 902.340888][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 902.340936][ C1] __kasan_slab_alloc+0x6c/0x80 [ 902.340958][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 902.340986][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 902.341012][ C1] ? anon_vma_fork+0x88/0x540 [ 902.341039][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 902.341068][ C1] ? anon_vma_fork+0x88/0x540 [ 902.341098][ C1] anon_vma_fork+0x88/0x540 [ 902.341123][ C1] ? anon_vma_name+0x61/0x210 [ 902.341143][ C1] ? dup_userfaultfd+0xa7/0x610 [ 902.341168][ C1] ? dup_mmap+0x875/0x1dc0 [ 902.341197][ C1] dup_mmap+0x954/0x1dc0 [ 902.341234][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 902.341261][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 902.341295][ C1] ? lock_acquire+0x115/0x350 [ 902.341323][ C1] copy_mm+0x11a/0x480 [ 902.341349][ C1] ? copy_process+0xd3c/0x43e0 [ 902.341372][ C1] copy_process+0x1e75/0x43e0 [ 902.341403][ C1] ? copy_process+0xd3c/0x43e0 [ 902.341438][ C1] ? __pfx_copy_process+0x10/0x10 [ 902.341470][ C1] kernel_clone+0x2d7/0x940 [ 902.341495][ C1] ? cgroup1_freezing+0x20/0x350 [ 902.341529][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 902.341565][ C1] __x64_sys_clone+0x1b6/0x230 [ 902.341594][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 902.341630][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 902.341655][ C1] do_syscall_64+0x166/0x520 [ 902.341676][ C1] ? trace_irq_disable+0x3b/0x140 [ 902.341698][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.341718][ C1] ? clear_bhb_loop+0x70/0xc0 [ 902.341740][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.341759][ C1] RIP: 0033:0x7effb91c6bd2 [ 902.341776][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 902.341791][ C1] RSP: 002b:00007effb954fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 902.341810][ C1] RAX: ffffffffffffffda RBX: 00007effb954fc60 RCX: 00007effb91c6bd2 [ 902.341824][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 902.341836][ C1] RBP: 00007effb954fdec R08: 0000000000000000 R09: 0000000000000001 [ 902.341849][ C1] R10: 00005555672297d0 R11: 0000000000000246 R12: 0000000000000001 [ 902.341861][ C1] R13: 00000000000927c0 R14: 00000000000dc3c3 R15: 00007effb954fe40 [ 902.341884][ C1] [ 902.485305][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 903.900551][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 903.911242][ T33] Tainted: [L]=SOFTLOCKUP [ 903.915581][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.925654][ T33] Call Trace: [ 903.928949][ T33] [ 903.931900][ T33] vpanic+0x56d/0xa60 [ 903.935918][ T33] ? __pfx___schedule+0x10/0x10 [ 903.940788][ T33] ? __pfx_vpanic+0x10/0x10 [ 903.945327][ T33] panic+0xc5/0xd0 [ 903.949087][ T33] ? __pfx_panic+0x10/0x10 [ 903.953532][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 903.959011][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 903.964398][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 903.970577][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 903.976757][ T33] watchdog+0x1030/0x1030 [ 903.981109][ T33] ? watchdog+0x1c7/0x1030 [ 903.985547][ T33] kthread+0x38b/0x480 [ 903.989631][ T33] ? __pfx_watchdog+0x10/0x10 [ 903.994325][ T33] ? __pfx_kthread+0x10/0x10 [ 903.998933][ T33] ret_from_fork+0x514/0xb70 [ 904.003537][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 904.008683][ T33] ? __switch_to+0xc89/0x1420 [ 904.013397][ T33] ? __pfx_kthread+0x10/0x10 [ 904.018024][ T33] ret_from_fork_asm+0x1a/0x30 [ 904.022843][ T33] [ 904.026508][ T33] Kernel Offset: disabled [ 904.030850][ T33] Rebooting in 86400 seconds..