last executing test programs: 7m37.858657063s ago: executing program 1 (id=93): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xb3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000fa", @ANYRES16=r7, @ANYBLOB="050029bd70000000000022000000"], 0x14}}, 0x4000000) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) 7m33.995708075s ago: executing program 1 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 7m32.080981511s ago: executing program 1 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/chipidea-usb2/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='pcspkr', 0x6) 7m31.967737483s ago: executing program 1 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='fusectl\x00', 0x800, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 7m31.806160738s ago: executing program 1 (id=119): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0), 0x8) listen(r0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80800) 7m28.376303719s ago: executing program 1 (id=131): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x138c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) splice(r2, 0x0, r0, 0x0, 0x16a, 0x1200000000000000) 7m27.804965893s ago: executing program 32 (id=131): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x138c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) splice(r2, 0x0, r0, 0x0, 0x16a, 0x1200000000000000) 7m13.615635161s ago: executing program 4 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='fusectl\x00', 0x800, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 7m13.290310859s ago: executing program 4 (id=217): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mount(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='hpfs\x00', 0x100008b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') r2 = getpid() r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xe1000d00) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b8008000a000000fc"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) r6 = syz_pidfd_open(r2, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close(0x3) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xb4000) 7m12.554123877s ago: executing program 4 (id=221): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7m11.908296542s ago: executing program 33 (id=221): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.24901478s ago: executing program 3 (id=2871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet(0xa, 0x801, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 2.794636245s ago: executing program 3 (id=2883): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00"/48, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) 2.766982316s ago: executing program 0 (id=2884): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="e8010000160001002cbd7000fedbdf25ac1414aa000000000000000000000000fc0200000000000000000000000000004e2400004e2400040a0000a03b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000001000000000000000000000000000004d46c0000000000000000000000000000000000000109000000000000000000000000000000010000000000000000010000003000000902000000000000090000000000000000000000000000004ed2000000000000ccacffffffffffff0500000000000000030000000000000001000000000000000600000009000000060000002bbd7000073500000a00013d48000000000000000400000004000000e4"], 0x1e8}, 0x1, 0x0, 0x0, 0x2004c094}, 0x24040000) 2.732229777s ago: executing program 2 (id=2885): r0 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 2.686732808s ago: executing program 3 (id=2886): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@newtaction={0x14, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x44045) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) 2.60764632s ago: executing program 3 (id=2887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) 2.575351931s ago: executing program 0 (id=2888): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x48400) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000400), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$vhost_msg_v2(r2, 0x0, 0x0) 2.410700575s ago: executing program 5 (id=2889): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/23, 0x17}, 0x8001}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 2.285755529s ago: executing program 2 (id=2890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) chdir(&(0x7f0000000180)='./file0\x00') fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001740)={0x8, {"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", 0x1000}}, 0x1006) 2.285032609s ago: executing program 0 (id=2898): r0 = io_uring_setup(0x36c2, &(0x7f0000000100)={0x0, 0xb2d1, 0x1, 0x1, 0x383}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) connect$netlink(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.25377076s ago: executing program 5 (id=2891): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x8, @loopback={0xff00000000000000}, 0x7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[], 0x18}, 0x5c39d53d76e37746) 1.190701358s ago: executing program 3 (id=2892): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003300)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="ed", 0x1}], 0x1, &(0x7f0000000c40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x24044894) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 592.456514ms ago: executing program 2 (id=2893): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/isp1760/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='10b5 5406 ', 0xa) 560.839905ms ago: executing program 5 (id=2894): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00"/48, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) 434.552968ms ago: executing program 0 (id=2895): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05", 0x29}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000300)="c62ee5d6a8ec1dc4f4d714ffff87cb40ff", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x78) 433.916908ms ago: executing program 3 (id=2896): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x44045) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) 414.254069ms ago: executing program 2 (id=2897): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000500)={0x28, 0x10004, 0x0, r1, 0x3ac3ae, 0xffffffffffffffff, 0x9, 0x3e76bf}) 313.887531ms ago: executing program 0 (id=2899): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f", 0xdf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d20", 0x93}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2fde502", 0x70}, {&(0x7f0000000880)="6697624319e115b3b12c54b477244af3979b03fafbcbe555a59252423d41131d33d81eefbc306e", 0x27}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd6e193c280eac0e484d38db0e45923cc47acab1da2c1b47f999d17a7f681eb1f12fb8771d4c103091f99d1c1a", 0x9f}, {&(0x7f0000000c80)="b8659518b69136c840de12f29e56372661ffc3250247a0a5b4d89fe71a1b9ced94b7b8948f88860d2b103e52888892ee3eb1e378638a70d7f47bf1d2df6b6fc368665f92a84b8b03a2ed4710b1f9b4b35b854ffc0ed7ba5e4bd0502b95e5e602b087f5ae9d22ba48614db6f84623ba247e94da8d20d86dfea4c5a23cf57da0471ab476d25bb5a252dde00c1c57", 0x8d}, {&(0x7f0000000dc0)="820b29dccf3af022d0ddfd370dd8dda2b3c897775aa4271e7408cb", 0x1b}], 0x3}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8", 0xab}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e", 0x68}], 0x2}}], 0x1, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 246.669064ms ago: executing program 5 (id=2900): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10, 0x0}, 0x0) 244.663273ms ago: executing program 2 (id=2901): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "f3c4922700002000000010a92231a11000000600000000000000000000004000", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000040)=[{r1, 0x8}], 0x1, 0xe) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 172.098175ms ago: executing program 5 (id=2902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_stats}) 1.0597ms ago: executing program 5 (id=2903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) chdir(&(0x7f0000000180)='./file0\x00') fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001740)={0x8, {"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", 0x1000}}, 0x1006) 607.01µs ago: executing program 2 (id=2904): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.stat\x00', 0x26e1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) lseek(r0, 0x54, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r5, &(0x7f0000000580)=""/174, 0xff56) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'8255\x00', [0x140, 0x0, 0xd, 0x6, 0x205, 0x4, 0x10001, 0x40000006, 0x7, 0x10, 0x5, 0x5, 0x3, 0xd, 0x4ce, 0x9e9b, 0x101, 0x8, 0x6, 0x9, 0xffffffff, 0x461, 0xa, 0x9, 0xffd, 0x80000005, 0x8, 0x3, 0x283, 0x8001, 0x5]}) 0s ago: executing program 0 (id=2911): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) connect(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0kB [ 102.381044][ T5909] Node 0 DMA32: 383*4kB (ME) 749*8kB (UM) 421*16kB (UM) 320*32kB (UM) 388*64kB (UME) 23*128kB (UME) 15*256kB (ME) 9*512kB (ME) 8*1024kB (UM) 3*2048kB (ME) 333*4096kB (M) = 1439028kB [ 102.408653][ T5909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 102.425770][ T5909] Node 1 Normal: 184*4kB (UME) 31*8kB (UME) 24*16kB (UME) 23*32kB (UME) 12*64kB (UE) 2*128kB (UM) 2*256kB (UE) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 946*4096kB (M) = 3883576kB [ 102.449211][ T5909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.511657][ T5909] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.540405][ T5909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.553157][ T5909] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.568650][ T5909] 52439 total pagecache pages [ 102.573568][ T5909] 0 pages in swap cache [ 102.580775][ T5909] Free swap = 124996kB [ 102.585105][ T5909] Total swap = 124996kB [ 102.589798][ T5909] 2097051 pages RAM [ 102.593671][ T5909] 0 pages HighMem/MovableOnly [ 102.609041][ T5909] 416955 pages reserved [ 102.613403][ T5909] 0 pages cma reserved [ 102.778600][ T5928] mmap: syz.0.25 (5928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.981263][ T5933] ci_hdrc ci_hdrc.0: invalid resource (null) [ 103.992079][ T5933] ci_hdrc: probe of ci_hdrc.0 failed with error -22 [ 105.499817][ T5942] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 105.971747][ T5943] IPVS: stopping backup sync thread 5952 ... [ 105.978743][ T5952] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 106.054779][ T5953] netlink: 188 bytes leftover after parsing attributes in process `syz.3.31'. [ 106.896203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.792812][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 109.098230][ T5989] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 109.714732][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 112.363106][ T6031] netlink: 188 bytes leftover after parsing attributes in process `syz.2.46'. [ 113.126093][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 114.321927][ T6048] syzkaller0: entered promiscuous mode [ 114.356855][ T6048] syzkaller0: entered allmulticast mode [ 117.355546][ T6077] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 119.822745][ T6125] loop4: detected capacity change from 0 to 7 [ 119.856269][ T6125] Dev loop4: unable to read RDB block 7 [ 119.884982][ T6125] loop4: AHDI p1 p2 p3 [ 119.905948][ T6125] loop4: partition table partially beyond EOD, truncated [ 119.944892][ T6125] loop4: p1 start 1601398130 is beyond EOD, truncated [ 119.978861][ T6125] loop4: p2 start 1702059890 is beyond EOD, truncated [ 120.296148][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 121.366433][ T5821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.549468][ T6170] loop4: detected capacity change from 0 to 7 [ 121.570592][ T5821] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 121.581046][ T6170] loop4: [ 121.584073][ T6170] loop4: partition table partially beyond EOD, truncated [ 121.611786][ T6172] ======================================================= [ 121.611786][ T6172] WARNING: The mand mount option has been deprecated and [ 121.611786][ T6172] and is ignored by this kernel. Remove the mand [ 121.611786][ T6172] option from the mount to silence this warning. [ 121.611786][ T6172] ======================================================= [ 121.655833][ T5821] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 121.675832][ T5821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 121.706308][ T5821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 121.790188][ T5821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 121.814652][ T5821] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 121.818748][ T6172] overlayfs: failed to clone lowerpath [ 121.834683][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 121.872558][ T5821] usb 2-1: Product: syz [ 121.920134][ T5821] usb 2-1: Manufacturer: syz [ 121.956745][ T5821] cdc_wdm 2-1:1.0: skipping garbage [ 121.965772][ T5821] cdc_wdm 2-1:1.0: skipping garbage [ 121.978861][ T5821] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 122.665886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 123.076162][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 123.904514][ T6153] futex_wake_op: syz.1.93 tries to shift op by 144; fix this program [ 124.001828][ T6153] futex_wake_op: syz.1.93 tries to shift op by 144; fix this program [ 124.646795][ T6206] fuse: Bad value for 'fd' [ 125.635795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.906102][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 127.695487][ T5840] usb 2-1: USB disconnect, device number 2 [ 127.806847][ T2920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.186007][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'. [ 129.950243][ T2920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.069606][ T2920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.214005][ T6254] syzkaller0: entered promiscuous mode [ 130.222241][ T6254] syzkaller0: entered allmulticast mode [ 130.293245][ T2920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.690785][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.700041][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.708824][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.719456][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.728219][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 131.736118][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.052325][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.060050][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.555319][ T6313] fuse: Bad value for 'fd' [ 133.807671][ T2920] gretap0 (unregistering): left allmulticast mode [ 133.845809][ T5787] Bluetooth: hci3: command tx timeout [ 133.892540][ T6319] 8021q: VLANs not supported on lo [ 134.038674][ T6332] fuse: Bad value for 'fd' [ 134.287135][ T6287] chnl_net:caif_netlink_parms(): no params data found [ 135.374135][ T6359] fuse: Bad value for 'fd' [ 135.563460][ T6367] loop0: detected capacity change from 0 to 256 [ 135.651529][ T6371] overlayfs: failed to clone upperpath [ 135.869059][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.901616][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.927244][ T5787] Bluetooth: hci3: command tx timeout [ 135.936235][ T6287] bridge_slave_0: entered allmulticast mode [ 135.955985][ T6287] bridge_slave_0: entered promiscuous mode [ 136.050993][ T2920] hsr_slave_0: left promiscuous mode [ 136.069839][ T2920] hsr_slave_1: left promiscuous mode [ 136.084605][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.110480][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.126029][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.133707][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.143451][ T2920] bridge_slave_1: left allmulticast mode [ 136.154554][ T2920] bridge_slave_1: left promiscuous mode [ 136.163706][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.190140][ T2920] bridge_slave_0: left allmulticast mode [ 136.202952][ T2920] bridge_slave_0: left promiscuous mode [ 136.209589][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.267860][ T2920] veth1_macvtap: left promiscuous mode [ 136.285536][ T2920] veth0_macvtap: left promiscuous mode [ 136.293411][ T2920] veth1_vlan: left promiscuous mode [ 136.300160][ T2920] veth0_vlan: left promiscuous mode [ 136.555348][ T6392] loop0: detected capacity change from 0 to 256 [ 136.761439][ T6394] loop4: detected capacity change from 0 to 7 [ 136.777571][ T6394] Dev loop4: unable to read RDB block 7 [ 136.785631][ T6394] loop4: AHDI p1 p2 p3 [ 136.800804][ T6394] loop4: partition table partially beyond EOD, truncated [ 136.820524][ T6394] loop4: p1 start 1601398130 is beyond EOD, truncated [ 136.838526][ T6394] loop4: p2 start 1702059890 is beyond EOD, truncated [ 137.291188][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 137.338544][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 137.391835][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.436873][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.755530][ T2920] bond0 (unregistering): Released all slaves [ 137.852082][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.859806][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.867749][ T6287] bridge_slave_1: entered allmulticast mode [ 137.874906][ T6287] bridge_slave_1: entered promiscuous mode [ 137.964785][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.009284][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.026007][ T5787] Bluetooth: hci3: command tx timeout [ 138.114423][ T6287] team0: Port device team_slave_0 added [ 138.164129][ T6287] team0: Port device team_slave_1 added [ 138.268384][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.275411][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.301622][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.330359][ T6287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.494044][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.551669][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.605065][ T6287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.769159][ T6287] hsr_slave_0: entered promiscuous mode [ 138.841800][ T6287] hsr_slave_1: entered promiscuous mode [ 139.094499][ T6287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.326046][ T6287] Cannot create hsr debugfs directory [ 139.604338][ T6422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.955515][ T6287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.974744][ T6287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.987293][ T6287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.999736][ T6287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.086209][ T5787] Bluetooth: hci3: command tx timeout [ 140.273134][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.323917][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.355754][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.363023][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.401978][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.409367][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.931962][ T6459] fuse: Bad value for 'fd' [ 141.066625][ T6461] fuse: Bad value for 'fd' [ 141.990031][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.109885][ T6475] futex_wake_op: syz.2.196 tries to shift op by 144; fix this program [ 142.323716][ T6475] futex_wake_op: syz.2.196 tries to shift op by 144; fix this program [ 143.821819][ T6287] veth0_vlan: entered promiscuous mode [ 143.863988][ T6287] veth1_vlan: entered promiscuous mode [ 143.884543][ T6508] fuse: Bad value for 'fd' [ 143.976757][ T6287] veth0_macvtap: entered promiscuous mode [ 143.992772][ T6287] veth1_macvtap: entered promiscuous mode [ 144.065858][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.094739][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.123994][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.146943][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.174583][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.185541][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.218711][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.243501][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.305244][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.355015][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.382972][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.393027][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.404199][ T6521] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.421073][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.437570][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.470718][ T6287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.494022][ T6287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.515504][ T6287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.524914][ T6287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.777630][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.796764][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.907108][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.915016][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.171180][ T6537] fuse: Bad value for 'fd' [ 145.818971][ T6554] syz.3.219 uses obsolete (PF_INET,SOCK_PACKET) [ 146.322917][ T3455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.646334][ T3455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.818974][ T3455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.068265][ T6578] fuse: Bad value for 'fd' [ 147.086720][ T3455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.796002][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.805932][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.814776][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.823636][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.832626][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.840172][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.897798][ T6619] fuse: Bad value for 'fd' [ 149.276534][ T6624] fuse: Bad value for 'fd' [ 149.292525][ T6624] 9pnet_fd: p9_fd_create_unix (6624): problem connecting socket: ./file0: -111 [ 149.809574][ T6591] chnl_net:caif_netlink_parms(): no params data found [ 149.925820][ T5787] Bluetooth: hci3: command tx timeout [ 150.383365][ T3455] hsr_slave_0: left promiscuous mode [ 150.442052][ T3455] hsr_slave_1: left promiscuous mode [ 150.469558][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.497708][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.537978][ T3455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.573368][ T3455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.626645][ T3455] bridge_slave_1: left allmulticast mode [ 150.632388][ T3455] bridge_slave_1: left promiscuous mode [ 150.663798][ T3455] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.685592][ T3455] bridge_slave_0: left allmulticast mode [ 150.691966][ T3455] bridge_slave_0: left promiscuous mode [ 150.702387][ T3455] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.724760][ T6654] fuse: Bad value for 'fd' [ 150.813227][ T3455] veth1_macvtap: left promiscuous mode [ 150.833875][ T3455] veth0_macvtap: left promiscuous mode [ 150.851450][ T3455] veth1_vlan: left promiscuous mode [ 150.878527][ T3455] veth0_vlan: left promiscuous mode [ 150.908921][ T6660] overlayfs: failed to resolve './file0': -2 [ 151.563161][ T6676] fuse: Bad value for 'fd' [ 151.658917][ T6678] overlayfs: failed to resolve './file0': -2 [ 152.020206][ T5787] Bluetooth: hci3: command tx timeout [ 152.049065][ T3455] team0 (unregistering): Port device team_slave_1 removed [ 152.099016][ T3455] team0 (unregistering): Port device team_slave_0 removed [ 152.147745][ T3455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.197246][ T3455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.555574][ T3455] bond0 (unregistering): Released all slaves [ 152.767455][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.786590][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.796059][ T6591] bridge_slave_0: entered allmulticast mode [ 152.803536][ T6591] bridge_slave_0: entered promiscuous mode [ 152.846609][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.856354][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.863647][ T6591] bridge_slave_1: entered allmulticast mode [ 152.887650][ T6591] bridge_slave_1: entered promiscuous mode [ 153.020179][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.050288][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.183338][ T6591] team0: Port device team_slave_0 added [ 153.194690][ T6699] overlayfs: failed to resolve './file0': -2 [ 153.210673][ T6591] team0: Port device team_slave_1 added [ 153.237966][ T6701] fuse: Bad value for 'fd' [ 153.345889][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.352957][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.464728][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.505127][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.542994][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.598175][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.841707][ T6591] hsr_slave_0: entered promiscuous mode [ 153.864271][ T6591] hsr_slave_1: entered promiscuous mode [ 153.891069][ T6591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.899580][ T6591] Cannot create hsr debugfs directory [ 154.086094][ T5787] Bluetooth: hci3: command tx timeout [ 154.135061][ T6734] fuse: Bad value for 'rootmode' [ 154.689422][ T6591] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.714678][ T6591] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.775548][ T6591] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.838754][ T6591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.036964][ T6766] fuse: Bad value for 'fd' [ 155.200470][ T6591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.282486][ T6591] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.328483][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.336475][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.394338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.401619][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.549187][ T6591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.819830][ T6797] fuse: Bad value for 'fd' [ 156.114950][ T6591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.175919][ T5787] Bluetooth: hci3: command tx timeout [ 156.695550][ T6834] fuse: Bad value for 'fd' [ 156.908684][ T6591] veth0_vlan: entered promiscuous mode [ 156.963410][ T6591] veth1_vlan: entered promiscuous mode [ 157.064435][ T6591] veth0_macvtap: entered promiscuous mode [ 157.098816][ T6591] veth1_macvtap: entered promiscuous mode [ 157.177939][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.205821][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.217981][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.228964][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.239294][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.250565][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.262695][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.303887][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.330475][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.361631][ T6855] fuse: Bad value for 'fd' [ 157.375887][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.405873][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.425751][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.451506][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.484481][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.530394][ T6591] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.548081][ T6591] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.565864][ T6591] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.585348][ T6591] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.670781][ T6868] fuse: Bad value for 'fd' [ 157.841670][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.874071][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.014053][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.036412][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.363753][ T6886] futex_wake_op: syz.3.314 tries to shift op by 144; fix this program [ 158.383478][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 158.407171][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.427963][ T6886] futex_wake_op: syz.3.314 tries to shift op by 144; fix this program [ 158.623816][ T6887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.778687][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.321'. [ 160.168434][ T6934] overlayfs: failed to clone upperpath [ 160.359432][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.332'. [ 160.384510][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.332'. [ 162.176083][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 162.983279][ T6996] fuse: Bad value for 'fd' [ 164.619702][ T7041] fuse: Bad value for 'fd' [ 165.102231][ T7053] futex_wake_op: syz.5.363 tries to shift op by 144; fix this program [ 165.136387][ T7053] futex_wake_op: syz.5.363 tries to shift op by 144; fix this program [ 167.158804][ T7115] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 167.220054][ T7121] fuse: Bad value for 'fd' [ 167.395436][ T7106] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 168.988296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 169.008333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 169.019321][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 169.038232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 169.058883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 169.626214][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 171.798465][ T7201] overlayfs: failed to clone upperpath [ 172.776028][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.412'. [ 173.766234][ T7226] netlink: 36 bytes leftover after parsing attributes in process `syz.0.417'. [ 173.775288][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 174.032286][ T7235] netlink: 64 bytes leftover after parsing attributes in process `syz.0.420'. [ 174.916550][ T7262] netlink: 64 bytes leftover after parsing attributes in process `syz.3.431'. [ 176.157478][ T7297] netlink: 64 bytes leftover after parsing attributes in process `syz.3.441'. [ 176.780095][ T7319] futex_wake_op: syz.5.442 tries to shift op by 144; fix this program [ 176.837357][ T7319] futex_wake_op: syz.5.442 tries to shift op by 144; fix this program [ 177.500508][ T7344] netlink: 64 bytes leftover after parsing attributes in process `syz.3.454'. [ 178.672626][ T7380] netlink: 64 bytes leftover after parsing attributes in process `syz.0.466'. [ 179.384294][ T7377] futex_wake_op: syz.3.465 tries to shift op by 144; fix this program [ 179.855218][ T7377] futex_wake_op: syz.3.465 tries to shift op by 144; fix this program [ 180.735426][ T7417] netlink: 64 bytes leftover after parsing attributes in process `syz.2.475'. [ 181.745191][ T7448] netlink: 64 bytes leftover after parsing attributes in process `syz.0.486'. [ 182.967686][ T7483] netlink: 64 bytes leftover after parsing attributes in process `syz.0.495'. [ 184.395913][ T7528] netlink: 64 bytes leftover after parsing attributes in process `syz.0.507'. [ 185.417332][ T7555] netlink: 64 bytes leftover after parsing attributes in process `syz.0.519'. [ 187.966975][ T7598] netlink: 64 bytes leftover after parsing attributes in process `syz.3.531'. [ 188.940967][ T7618] futex_wake_op: syz.2.528 tries to shift op by 144; fix this program [ 189.388653][ T7636] netlink: 64 bytes leftover after parsing attributes in process `syz.0.540'. [ 189.599820][ T7618] futex_wake_op: syz.2.528 tries to shift op by 144; fix this program [ 190.919775][ T7678] netlink: 64 bytes leftover after parsing attributes in process `syz.0.552'. [ 192.250223][ T7715] netlink: 64 bytes leftover after parsing attributes in process `syz.2.563'. [ 192.492566][ T7718] futex_wake_op: syz.0.560 tries to shift op by 144; fix this program [ 192.554629][ T7718] futex_wake_op: syz.0.560 tries to shift op by 144; fix this program [ 194.183978][ T7760] netlink: 64 bytes leftover after parsing attributes in process `syz.2.573'. [ 194.496748][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.503208][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.139092][ T7799] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 196.434662][ T7799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.783666][ T7803] futex_wake_op: syz.3.576 tries to shift op by 144; fix this program [ 196.795651][ C0] sched: RT throttling activated [ 197.107320][ T7803] futex_wake_op: syz.3.576 tries to shift op by 144; fix this program [ 200.344771][ T7871] fuse: Bad value for 'fd' [ 202.957983][ T7929] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 203.013533][ T7929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.457354][ T7954] Zero length message leads to an empty skb [ 206.936667][ T8007] overlayfs: failed to resolve './file0': -2 [ 207.511060][ T8031] netlink: 64 bytes leftover after parsing attributes in process `syz.5.644'. [ 207.679031][ T8035] fuse: Bad value for 'fd' [ 207.775977][ T8039] futex_wake_op: syz.3.633 tries to shift op by 144; fix this program [ 207.784836][ T8039] futex_wake_op: syz.3.633 tries to shift op by 144; fix this program [ 207.817075][ T8041] overlayfs: failed to resolve './file0': -2 [ 208.734719][ T8069] netlink: 64 bytes leftover after parsing attributes in process `syz.2.655'. [ 210.013739][ T8106] netlink: 64 bytes leftover after parsing attributes in process `syz.3.667'. [ 210.494963][ T8123] overlayfs: failed to clone lowerpath [ 211.122158][ T8145] netlink: 64 bytes leftover after parsing attributes in process `syz.2.681'. [ 211.763236][ T8167] fuse: Bad value for 'fd' [ 211.985436][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 211.991711][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 211.997991][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 212.261865][ T8178] netlink: 64 bytes leftover after parsing attributes in process `syz.5.693'. [ 212.294416][ T8179] overlayfs: failed to clone upperpath [ 212.821212][ T8201] netlink: 64 bytes leftover after parsing attributes in process `syz.2.704'. [ 214.490364][ T8232] netlink: 64 bytes leftover after parsing attributes in process `syz.2.715'. [ 215.164034][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'. [ 215.628835][ T8267] netlink: 64 bytes leftover after parsing attributes in process `syz.2.726'. [ 215.977503][ T8277] overlayfs: missing 'lowerdir' [ 216.022759][ T8282] fuse: Bad value for 'fd' [ 216.682323][ T8278] sctp: failed to load transform for md5: -2 [ 217.227111][ T8303] futex_wake_op: syz.5.735 tries to shift op by 144; fix this program [ 217.257773][ T8303] futex_wake_op: syz.5.735 tries to shift op by 144; fix this program [ 217.842877][ T8321] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 218.118660][ T8321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.781183][ T8354] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 219.936695][ T8354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.223885][ T8365] fuse: Bad value for 'fd' [ 220.357432][ T8366] futex_wake_op: syz.2.760 tries to shift op by 144; fix this program [ 220.405605][ T8366] futex_wake_op: syz.2.760 tries to shift op by 144; fix this program [ 220.964299][ T8387] fuse: Bad value for 'fd' [ 221.283355][ T8398] overlayfs: missing 'lowerdir' [ 222.933303][ T8414] overlayfs: failed to resolve './file0': -2 [ 223.118557][ T8420] overlayfs: missing 'lowerdir' [ 223.123887][ T8422] process 'syz.0.790' launched '/dev/fd/3' with NULL argv: empty string added [ 223.534868][ T8421] futex_wake_op: syz.2.788 tries to shift op by 144; fix this program [ 223.624550][ T8441] fuse: Bad value for 'fd' [ 224.001073][ T8448] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 224.026347][ T8448] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 224.903667][ T8478] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 224.935916][ T8478] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 225.694063][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 225.788736][ T8496] futex_wake_op: syz.0.817 tries to shift op by 144; fix this program [ 226.501497][ T8514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 226.531650][ T8514] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 227.947896][ T8555] fuse: Bad value for 'fd' [ 228.088278][ T8553] futex_wake_op: syz.2.837 tries to shift op by 144; fix this program [ 228.166434][ T8558] fuse: Bad value for 'fd' [ 229.339191][ T8572] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 229.392839][ T8572] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.803364][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 231.567202][ T8604] netlink: 'syz.5.859': attribute type 1 has an invalid length. [ 231.697609][ T8604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.459325][ T8621] netlink: 'syz.0.863': attribute type 11 has an invalid length. [ 232.467446][ T8621] netlink: 36 bytes leftover after parsing attributes in process `syz.0.863'. [ 232.774569][ T8631] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 232.863076][ T8631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.414018][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.875'. [ 234.532900][ T8657] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 234.638177][ T8661] overlayfs: missing 'lowerdir' [ 234.657344][ T8657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.097454][ T8671] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 235.162383][ T8671] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.327311][ T8682] overlayfs: missing 'workdir' [ 235.410154][ T8684] netlink: 'syz.2.890': attribute type 1 has an invalid length. [ 235.449344][ T8684] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.633792][ T8691] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 235.671874][ T8693] netlink: 'syz.5.893': attribute type 1 has an invalid length. [ 235.750118][ T8693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.770732][ T8693] bond2: (slave bond3): making interface the new active one [ 235.783250][ T8693] bond2: (slave bond3): Enslaving as an active interface with an up link [ 235.792905][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.5.893'. [ 235.808755][ T8698] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.180976][ T8705] overlayfs: missing 'workdir' [ 236.830410][ T8717] futex_wake_op: syz.3.901 tries to shift op by 144; fix this program [ 237.042960][ T8733] overlayfs: missing 'workdir' [ 237.933651][ T8755] overlayfs: failed to clone upperpath [ 238.101145][ T8763] netem: incorrect ge model size [ 238.112858][ T8763] netem: change failed [ 238.320516][ T8768] futex_wake_op: syz.3.924 tries to shift op by 144; fix this program [ 238.534191][ T8784] overlayfs: failed to clone upperpath [ 238.832045][ T8793] capability: warning: `syz.0.936' uses deprecated v2 capabilities in a way that may be insecure [ 238.859913][ T8793] overlayfs: failed to clone lowerpath [ 238.867952][ T8793] overlayfs: failed to clone lowerpath [ 239.268317][ T8805] overlayfs: failed to clone upperpath [ 240.449405][ T8835] overlayfs: failed to clone upperpath [ 241.343321][ T8862] overlayfs: failed to clone upperpath [ 241.907746][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.975'. [ 241.928016][ T8881] vlan2: entered promiscuous mode [ 241.933135][ T8881] bond0: entered promiscuous mode [ 241.939640][ T8881] bond_slave_0: entered promiscuous mode [ 241.956919][ T8881] bond_slave_1: entered promiscuous mode [ 242.078217][ T8883] overlayfs: failed to clone upperpath [ 242.275423][ T8891] futex_wake_op: syz.0.980 tries to shift op by 144; fix this program [ 243.891862][ T8930] futex_wake_op: syz.0.994 tries to shift op by 144; fix this program [ 244.002301][ T8930] futex_wake_op: syz.0.994 tries to shift op by 144; fix this program [ 247.567083][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 247.942710][ T8989] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1014'. [ 248.717977][ T9000] futex_wake_op: syz.3.1018 tries to shift op by 144; fix this program [ 248.767597][ T9000] futex_wake_op: syz.3.1018 tries to shift op by 144; fix this program [ 249.853158][ T9017] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1024'. [ 250.365143][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1020'. [ 254.716188][ T9062] fuse: Bad value for 'fd' [ 256.574491][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.580936][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.229751][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1070'. [ 260.741647][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 261.692780][ T9175] futex_wake_op: syz.5.1089 tries to shift op by 144; fix this program [ 261.749690][ T9175] futex_wake_op: syz.5.1089 tries to shift op by 144; fix this program [ 262.280659][ T9184] overlayfs: failed to clone upperpath [ 262.627958][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 267.067455][ T9251] overlayfs: failed to resolve './file0': -2 [ 267.575903][ T9262] futex_wake_op: syz.5.1121 tries to shift op by 144; fix this program [ 268.105971][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 268.621682][ T9262] futex_wake_op: syz.5.1121 tries to shift op by 144; fix this program [ 271.245901][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 271.756785][ T9301] overlayfs: failed to clone upperpath [ 272.146025][ T9308] futex_wake_op: syz.2.1134 tries to shift op by 144; fix this program [ 272.155001][ T9308] futex_wake_op: syz.2.1134 tries to shift op by 144; fix this program [ 272.515295][ T9314] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.852099][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 274.715825][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.725315][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.788941][ T9334] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.796581][ T9334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.805713][ T9334] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.812952][ T9334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.884330][ T9334] team0: Port device bridge0 added [ 274.962694][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.987150][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.062640][ T9340] vlan2: left promiscuous mode [ 275.075779][ T9340] bond0: left promiscuous mode [ 275.080707][ T9340] bond_slave_0: left promiscuous mode [ 275.096423][ T9340] bond_slave_1: left promiscuous mode [ 275.124856][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 275.360745][ T9355] 9pnet_fd: Insufficient options for proto=fd [ 275.602830][ T9363] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.103358][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.113202][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.154991][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.164081][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.233817][ T9376] bridge_slave_1: left allmulticast mode [ 276.250824][ T9376] bridge_slave_1: left promiscuous mode [ 276.274226][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.301499][ T9376] bridge_slave_0: left allmulticast mode [ 276.319623][ T9376] bridge_slave_0: left promiscuous mode [ 276.325509][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.582081][ T9389] overlayfs: failed to resolve './file0': -2 [ 276.680275][ T9386] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.594335][ T9426] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.645107][ T9430] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.660406][ T9430] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.786124][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.574146][ T28] audit: type=1326 audit(1785046414.228:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.5.1233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x0 [ 280.723165][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 281.597445][ T9557] overlayfs: missing 'lowerdir' [ 281.822574][ T9567] netlink: 'syz.5.1247': attribute type 4 has an invalid length. [ 282.489252][ T9592] fuse: Bad value for 'fd' [ 282.548920][ T9594] netlink: 'syz.5.1259': attribute type 1 has an invalid length. [ 282.609378][ T9594] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.209146][ T9620] 9pnet_fd: Insufficient options for proto=fd [ 283.339879][ T9625] netlink: 'syz.3.1272': attribute type 1 has an invalid length. [ 283.506166][ T9625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.451127][ T9647] capability: warning: `syz.3.1279' uses 32-bit capabilities (legacy support in use) [ 284.550436][ T9644] futex_wake_op: syz.5.1276 tries to shift op by 144; fix this program [ 284.609392][ T9652] overlayfs: missing 'lowerdir' [ 284.646653][ T9644] futex_wake_op: syz.5.1276 tries to shift op by 144; fix this program [ 286.887004][ T9695] futex_wake_op: syz.3.1297 tries to shift op by 144; fix this program [ 286.956497][ T9695] futex_wake_op: syz.3.1297 tries to shift op by 144; fix this program [ 289.155468][ T9729] futex_wake_op: syz.0.1314 tries to shift op by 144; fix this program [ 289.236294][ T9729] futex_wake_op: syz.0.1314 tries to shift op by 144; fix this program [ 289.579065][ T9745] 9pnet_fd: p9_fd_create_unix (9745): problem connecting socket: ./file0: -111 [ 289.817922][ T9748] overlayfs: failed to clone upperpath [ 290.030289][ T9757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1324'. [ 290.609715][ T9772] overlayfs: failed to clone upperpath [ 291.051949][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1334'. [ 291.092223][ T9772] overlayfs: failed to clone lowerpath [ 291.147756][ T9784] fuse: Bad value for 'fd' [ 291.349953][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 292.626281][ T9832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.983916][ T9861] futex_wake_op: syz.2.1361 tries to shift op by 144; fix this program [ 294.105383][ T9861] futex_wake_op: syz.2.1361 tries to shift op by 144; fix this program [ 295.772904][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1386'. [ 297.295168][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1397'. [ 298.767581][ T9982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1407'. [ 302.238277][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1415'. [ 310.693260][T10221] netlink: 'syz.3.1495': attribute type 2 has an invalid length. [ 315.017120][T10276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.024909][T10276] IPv6: NLM_F_CREATE should be set when creating new route [ 316.807383][T10295] netlink: 'syz.2.1519': attribute type 2 has an invalid length. [ 316.972722][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 317.381763][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.388331][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.175904][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 321.675923][T10342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1536'. [ 322.403737][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 322.532190][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 322.786872][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 323.347081][T10366] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1546'. [ 324.275891][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 329.077953][T10441] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 329.128259][T10441] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.232344][T10441] bond6: (slave geneve2): making interface the new active one [ 329.252907][T10441] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 330.190371][T10458] netlink: 642 bytes leftover after parsing attributes in process `syz.3.1574'. [ 331.627925][T10472] netlink: 'syz.5.1581': attribute type 2 has an invalid length. [ 333.736019][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1588'. [ 335.116767][T10493] futex_wake_op: syz.0.1587 tries to shift op by 144; fix this program [ 335.164207][T10493] futex_wake_op: syz.0.1587 tries to shift op by 144; fix this program [ 337.505937][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1597'. [ 339.315891][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 340.327590][T10565] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 340.341641][T10565] overlayfs: missing 'lowerdir' [ 341.078147][T10592] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 341.142766][T10592] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.184056][T10598] bond7: entered promiscuous mode [ 341.226444][T10598] bond7: entered allmulticast mode [ 341.478779][T10609] bond7: left promiscuous mode [ 341.906895][T10627] netlink: 'syz.0.1640': attribute type 1 has an invalid length. [ 342.491300][T10627] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.588522][T10630] bond8: entered promiscuous mode [ 342.594290][T10630] bond8: entered allmulticast mode [ 344.647535][T10667] fuse: Bad value for 'fd' [ 350.599406][T10720] futex_wake_op: syz.5.1682 tries to shift op by 144; fix this program [ 350.622025][T10720] futex_wake_op: syz.5.1682 tries to shift op by 144; fix this program [ 354.695181][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'. [ 356.344750][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 356.867790][T10800] autofs4:pid:10800:autofs_fill_super: called with bogus options [ 359.158844][T10823] autofs4:pid:10823:autofs_fill_super: called with bogus options [ 362.498572][T10852] wlan0 speed is unknown, defaulting to 1000 [ 362.505100][T10852] wlan0 speed is unknown, defaulting to 1000 [ 362.515432][T10852] wlan0 speed is unknown, defaulting to 1000 [ 362.529702][T10852] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 362.548813][T10852] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 362.610415][T10852] wlan0 speed is unknown, defaulting to 1000 [ 362.627312][T10852] wlan0 speed is unknown, defaulting to 1000 [ 362.640534][T10852] wlan0 speed is unknown, defaulting to 1000 [ 362.654703][T10852] wlan0 speed is unknown, defaulting to 1000 [ 364.523583][T10860] autofs4:pid:10860:autofs_fill_super: called with bogus options [ 364.983672][T10867] futex_wake_op: syz.5.1728 tries to shift op by 144; fix this program [ 365.016955][T10867] futex_wake_op: syz.5.1728 tries to shift op by 144; fix this program [ 365.925522][T10889] UBIFS error (pid: 10889): cannot open "ubifs", error -22 [ 369.374062][T10919] wlan0 speed is unknown, defaulting to 1000 [ 369.389412][T10919] wlan0 speed is unknown, defaulting to 1000 [ 369.396792][T10919] wlan0 speed is unknown, defaulting to 1000 [ 369.423790][T10919] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 369.452094][T10919] wlan0 speed is unknown, defaulting to 1000 [ 369.459891][T10919] wlan0 speed is unknown, defaulting to 1000 [ 369.468929][T10919] wlan0 speed is unknown, defaulting to 1000 [ 369.476843][T10919] wlan0 speed is unknown, defaulting to 1000 [ 370.085488][T10932] futex_wake_op: syz.0.1752 tries to shift op by 144; fix this program [ 370.258724][T10932] futex_wake_op: syz.0.1752 tries to shift op by 144; fix this program [ 372.591501][T10963] UBIFS error (pid: 10963): cannot open "ubifs", error -22 [ 374.392053][T10981] siw: device registration error -23 [ 376.583182][T11002] ip6gre1: entered promiscuous mode [ 376.593457][T11002] ip6gre1: entered allmulticast mode [ 376.614287][ T2964] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.656133][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.668767][ T2964] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 377.077014][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1775'. [ 377.141057][T11011] gretap0: entered promiscuous mode [ 378.884203][ T173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.887974][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.898990][ T173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.905773][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.024123][T11029] Illegal XDP return value 4294966772 on prog (id 30) dev syz_tun, expect packet loss! [ 379.529509][T11044] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1796'. [ 380.735809][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.982569][T11052] netlink: 'syz.2.1800': attribute type 1 has an invalid length. [ 381.005766][T11052] netlink: 'syz.2.1800': attribute type 3 has an invalid length. [ 381.025270][T11052] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1800'. [ 382.243055][T11070] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1805'. [ 385.764597][T11074] overlayfs: failed to clone lowerpath [ 386.020763][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 386.095729][T11095] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 386.103649][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1814'. [ 386.925899][T11100] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1816'. [ 388.855109][T11118] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1815'. [ 389.047117][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.645884][T11126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1825'. [ 391.014628][T11149] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1832'. [ 393.362778][ T28] audit: type=1326 audit(1785046527.018:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 393.412646][ T28] audit: type=1326 audit(1785046527.018:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 393.451783][ T28] audit: type=1326 audit(1785046527.028:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 393.480701][ T28] audit: type=1326 audit(1785046527.038:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 393.525717][ T28] audit: type=1326 audit(1785046527.038:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 393.558440][ T28] audit: type=1326 audit(1785046527.038:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 393.591168][ T28] audit: type=1326 audit(1785046527.038:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 393.622540][ T28] audit: type=1326 audit(1785046527.048:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 393.653677][T11178] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1841'. [ 393.673468][ T28] audit: type=1326 audit(1785046527.048:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 393.734331][ T28] audit: type=1326 audit(1785046527.048:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.0.1839" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82b0b9de99 code=0x7ffc0000 [ 394.939766][T11194] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 396.308180][T11213] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1852'. [ 397.824270][T11239] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1862'. [ 398.274961][T11265] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1873'. [ 398.613658][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1880'. [ 398.835380][T11286] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1883'. [ 399.262572][T11297] ip6gre1: left promiscuous mode [ 399.305975][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.469691][T11308] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1892'. [ 399.546076][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.801179][T11335] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 401.814953][T11337] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1903'. [ 401.981099][T11343] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 401.991591][T11343] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 403.018598][T11361] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1912'. [ 404.443464][T11397] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1925'. [ 404.465296][T11381] futex_wake_op: syz.3.1920 tries to shift op by 144; fix this program [ 404.493706][T11381] futex_wake_op: syz.3.1920 tries to shift op by 144; fix this program [ 404.726155][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 404.726169][ T28] audit: type=1326 audit(1785046538.388:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.5.1927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 404.817574][ T28] audit: type=1326 audit(1785046538.418:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.5.1927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 404.910671][ T28] audit: type=1326 audit(1785046538.568:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11405 comm="syz.5.1927" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 405.685857][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.690360][T11433] autofs4:pid:11433:autofs_fill_super: called with bogus options [ 407.662408][T11448] futex_wake_op: syz.5.1940 tries to shift op by 144; fix this program [ 407.673127][T11448] futex_wake_op: syz.5.1940 tries to shift op by 144; fix this program [ 411.366995][T11503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1963'. [ 412.507340][T11505] futex_wake_op: syz.0.1960 tries to shift op by 144; fix this program [ 412.659638][T11505] futex_wake_op: syz.0.1960 tries to shift op by 144; fix this program [ 413.342442][ T5787] Bluetooth: hci3: hcon ffff88807759c000 sent 1 < count 3143 [ 413.350283][ T5787] Bluetooth: hci3: hcon ffff88807759c000 sent 0 < count 2 [ 413.357948][ T5787] Bluetooth: hci3: hcon ffff88807759c000 sent 0 < count 1830 [ 413.365501][ T5787] Bluetooth: hci3: hcon ffff88807759c000 sent 0 < count 3 [ 414.711456][T11549] futex_wake_op: syz.2.1982 tries to shift op by 144; fix this program [ 414.783273][T11549] futex_wake_op: syz.2.1982 tries to shift op by 144; fix this program [ 415.015476][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1987'. [ 417.961903][T11579] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1995'. [ 419.365794][T11611] futex_wake_op: syz.5.2003 tries to shift op by 144; fix this program [ 419.374792][T11611] futex_wake_op: syz.5.2003 tries to shift op by 144; fix this program [ 422.097891][T11648] futex_wake_op: syz.5.2021 tries to shift op by 144; fix this program [ 422.140945][T11648] futex_wake_op: syz.5.2021 tries to shift op by 144; fix this program [ 423.574936][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2025'. [ 424.046095][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2028'. [ 426.405901][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2037'. [ 428.862518][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2048'. [ 429.695851][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2049'. [ 431.444574][T11749] tipc: Started in network mode [ 431.461379][T11749] tipc: Node identity ac141441, cluster identity 4711 [ 431.529020][T11749] tipc: Enabled bearer , priority 10 [ 431.585656][T11746] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2056'. [ 433.335252][ T27] tipc: Node number set to 2886997057 [ 434.187798][T11816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2083'. [ 435.076780][T11829] netlink: 'syz.2.2089': attribute type 39 has an invalid length. [ 435.467157][T11841] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2094'. [ 437.463851][T11870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2102'. [ 438.967122][T11887] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2108'. [ 439.193097][T11896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2112'. [ 439.411628][T11907] bond0: (slave bond_slave_0): Releasing backup interface [ 439.434170][T11907] bond0: (slave bond_slave_1): Releasing backup interface [ 439.499781][T11907] team0: Port device team_slave_0 removed [ 439.532262][T11907] team0: Port device team_slave_1 removed [ 439.548605][T11907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.558547][T11907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.570916][T11907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.580887][T11907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.615817][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.635975][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.642972][T11909] ip6gre1: entered allmulticast mode [ 439.706334][ T2964] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.729660][T11916] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2121'. [ 440.058021][T11923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2124'. [ 440.266601][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.273089][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.814787][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.592986][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2134'. [ 441.795846][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2134'. [ 442.032442][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2137'. [ 442.374384][T11971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2144'. [ 442.383761][T11971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2144'. [ 443.478605][T11982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2148'. [ 443.716056][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2153'. [ 443.734619][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2153'. [ 443.845758][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.846007][T12016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2160'. [ 444.931203][T12018] Invalid option length (1048432) for dns_resolver key [ 445.085322][ T28] audit: type=1326 audit(1785046578.738:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12020 comm="syz.5.2164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50a859de99 code=0x0 [ 445.459946][T12031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2165'. [ 445.473349][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 447.014297][T12032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.434225][T12042] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2169'. [ 447.456714][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2171'. [ 447.481666][T12050] tipc: Enabling of bearer rejected, failed to enable media [ 447.569980][T12053] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2172'. [ 448.503393][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2181'. [ 449.442527][T12095] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2187'. [ 450.002292][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2190'. [ 450.033332][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'. [ 450.225003][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 450.664203][T12120] netlink: 'syz.3.2196': attribute type 1 has an invalid length. [ 450.682546][T12120] netlink: 'syz.3.2196': attribute type 2 has an invalid length. [ 452.405911][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.533208][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 452.751143][T12169] futex_wake_op: syz.5.2217 tries to shift op by 144; fix this program [ 452.761323][T12169] futex_wake_op: syz.5.2217 tries to shift op by 144; fix this program [ 452.890682][T12179] autofs4:pid:12179:autofs_fill_super: called with bogus options [ 455.406420][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 455.417334][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 455.425512][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 455.434848][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 455.443030][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 455.451705][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.327328][T12209] wlan0 speed is unknown, defaulting to 1000 [ 457.535775][ T5787] Bluetooth: hci4: command tx timeout [ 457.720488][T12209] chnl_net:caif_netlink_parms(): no params data found [ 458.021539][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.268722][T12253] siw: device registration error -23 [ 459.150115][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.377978][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.419482][T12209] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.431864][T12209] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.451728][T12209] bridge_slave_0: entered allmulticast mode [ 459.483585][T12209] bridge_slave_0: entered promiscuous mode [ 459.535272][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.559536][T12209] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.575135][T12209] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.584010][T12209] bridge_slave_1: entered allmulticast mode [ 459.596825][T12209] bridge_slave_1: entered promiscuous mode [ 459.605706][ T5787] Bluetooth: hci4: command tx timeout [ 459.710036][T12209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.741333][T12209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.959328][T12209] team0: Port device team_slave_0 added [ 460.169446][T12209] team0: Port device team_slave_1 added [ 461.026412][T12209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.046391][T12209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.100622][T12209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.116077][ T69] tipc: Disabling bearer [ 461.139336][ T69] tipc: Left network mode [ 461.149615][T12209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.162408][T12209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.203312][T12209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.433201][T12209] hsr_slave_0: entered promiscuous mode [ 461.458174][T12209] hsr_slave_1: entered promiscuous mode [ 461.479565][T12209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.488032][T12209] Cannot create hsr debugfs directory [ 461.686463][ T5787] Bluetooth: hci4: command tx timeout [ 462.093960][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 463.458897][ T69] hsr_slave_0: left promiscuous mode [ 463.476874][ T69] hsr_slave_1: left promiscuous mode [ 463.483453][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.496166][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.518026][ T69] bridge_slave_1: left allmulticast mode [ 463.523760][ T69] bridge_slave_1: left promiscuous mode [ 463.535883][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.566827][ T69] bridge_slave_0: left allmulticast mode [ 463.575670][ T69] bridge_slave_0: left promiscuous mode [ 463.581498][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.655195][ T69] veth1_macvtap: left promiscuous mode [ 463.667165][ T69] veth0_macvtap: left promiscuous mode [ 463.672989][ T69] veth1_vlan: left promiscuous mode [ 463.695756][ T69] veth0_vlan: left promiscuous mode [ 463.766141][ T5787] Bluetooth: hci4: command tx timeout [ 464.227777][ T69] bond8 (unregistering): Released all slaves [ 464.550750][ T69] bond7 (unregistering): Released all slaves [ 464.581082][ T69] bond6 (unregistering): (slave geneve2): Releasing active interface [ 464.807250][ T69] bond6 (unregistering): Released all slaves [ 465.095220][ T69] bond5 (unregistering): Released all slaves [ 465.354094][ T69] bond4 (unregistering): Released all slaves [ 465.619519][ T69] bond3 (unregistering): Released all slaves [ 465.888060][ T69] bond2 (unregistering): Released all slaves [ 466.112911][ T69] bond1 (unregistering): Released all slaves [ 466.982815][ T69] team0 (unregistering): Port device team_slave_1 removed [ 467.044652][ T69] team0 (unregistering): Port device team_slave_0 removed [ 467.113352][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.257835][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.799087][ T69] bond0 (unregistering): Released all slaves [ 467.994367][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2292'. [ 468.178330][T12410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.443822][T12209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 468.464014][T12209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.505795][T12209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.860648][T12209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 469.120327][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2313'. [ 469.230915][T12209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.299916][T12209] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.367316][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.374575][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.422358][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.429824][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.685787][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.275009][T12209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.447379][T12209] veth0_vlan: entered promiscuous mode [ 470.481852][T12209] veth1_vlan: entered promiscuous mode [ 470.551472][T12209] veth0_macvtap: entered promiscuous mode [ 470.596813][T12209] veth1_macvtap: entered promiscuous mode [ 470.650086][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.671012][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.687193][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.708388][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.727040][T12209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.740817][T12499] netlink: 'syz.2.2330': attribute type 49 has an invalid length. [ 470.942918][T12499] ip6gretap0: entered promiscuous mode [ 470.960665][T12499] ip6gretap0: entered allmulticast mode [ 471.009777][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.055744][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.081489][T12209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.093531][T12209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.110518][T12209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.141468][T12209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.154500][T12209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.164491][T12209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.173826][T12209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.420416][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.451620][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.566644][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.584365][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.064111][T12563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.174398][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.186805][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.196525][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.215795][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.236264][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 473.243811][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 473.498362][T12573] wlan0 speed is unknown, defaulting to 1000 [ 473.818377][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2353'. [ 474.433710][T12573] chnl_net:caif_netlink_parms(): no params data found [ 474.656857][T12613] program syz.0.2361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.917252][T12573] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.953823][T12573] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.997581][T12573] bridge_slave_0: entered allmulticast mode [ 475.005154][T12573] bridge_slave_0: entered promiscuous mode [ 475.033102][T12573] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.045313][T12573] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.064031][T12573] bridge_slave_1: entered allmulticast mode [ 475.072223][T12573] bridge_slave_1: entered promiscuous mode [ 475.165130][T12573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.184231][T12573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.244053][T12573] team0: Port device team_slave_0 added [ 475.264730][T12573] team0: Port device team_slave_1 added [ 475.365786][ T5787] Bluetooth: hci2: command tx timeout [ 475.591969][T12573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.626345][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.691295][T12573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.737948][T12573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.745228][T12573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.849063][T12573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.010917][T12573] hsr_slave_0: entered promiscuous mode [ 476.046194][T12573] hsr_slave_1: entered promiscuous mode [ 476.073878][T12573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.102041][T12573] Cannot create hsr debugfs directory [ 476.189794][T12662] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2377'. [ 476.810167][T12573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.899241][T12683] tipc: Failed to obtain node identity [ 476.930652][T12683] tipc: Enabling of bearer rejected, failed to enable media [ 477.244546][T12573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.991700][ T5787] Bluetooth: hci2: command tx timeout [ 478.650154][T12688] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2385'. [ 478.666792][T12696] batadv_slave_0: entered promiscuous mode [ 478.674475][T12698] batadv_slave_0: left promiscuous mode [ 478.686071][T12702] netlink: 'syz.3.2386': attribute type 39 has an invalid length. [ 480.011066][ T5087] Bluetooth: hci2: command tx timeout [ 480.120051][T12573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.340174][T12573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.504704][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2392'. [ 480.815278][T12573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 480.830644][T12573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 480.862282][T12573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 480.888924][T12573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 481.115435][T12573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.283097][T12573] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.322184][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.329389][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.384547][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.391873][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.988929][T12740] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2395'. [ 482.087014][ T5087] Bluetooth: hci2: command tx timeout [ 482.158580][T12573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.327450][T12573] veth0_vlan: entered promiscuous mode [ 482.374515][T12573] veth1_vlan: entered promiscuous mode [ 482.426546][T12746] netlink: 'syz.3.2399': attribute type 39 has an invalid length. [ 482.470933][T12573] veth0_macvtap: entered promiscuous mode [ 482.513961][T12573] veth1_macvtap: entered promiscuous mode [ 482.586128][T12573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.608501][T12573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.638228][T12573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.679786][T12573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.705633][T12573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.725844][T12573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.748033][T12573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.780914][T12573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.801814][T12573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.830376][T12573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.855561][T12573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.875842][T12573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.895620][T12573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.927614][T12573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.980127][T12573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.015154][T12573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.041039][T12573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.070298][T12573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.287654][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.319441][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.367902][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.376526][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.404295][T12756] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2404'. [ 483.696092][T12765] netlink: 'syz.3.2408': attribute type 39 has an invalid length. [ 487.317381][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.331033][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.341485][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.379681][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.409304][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 487.423297][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.261991][T12824] wlan0 speed is unknown, defaulting to 1000 [ 489.287748][T12824] chnl_net:caif_netlink_parms(): no params data found [ 489.526069][ T5787] Bluetooth: hci0: command tx timeout [ 489.859686][ T2920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.255024][T12824] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.305702][T12824] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.313030][T12824] bridge_slave_0: entered allmulticast mode [ 490.325657][T12824] bridge_slave_0: entered promiscuous mode [ 490.444739][ T2920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.511884][T12824] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.534644][T12824] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.555822][T12824] bridge_slave_1: entered allmulticast mode [ 490.585019][T12824] bridge_slave_1: entered promiscuous mode [ 490.719989][ T2920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.878157][ T2920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.958490][T12824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.983069][T12824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.097538][T12893] netlink: 'syz.2.2460': attribute type 39 has an invalid length. [ 491.253350][T12824] team0: Port device team_slave_0 added [ 491.283119][T12824] team0: Port device team_slave_1 added [ 491.489214][T12824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.496774][ T28] audit: type=1326 audit(1785046625.138:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 491.538037][T12824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.582437][ T28] audit: type=1326 audit(1785046625.138:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 491.616063][ T5787] Bluetooth: hci0: command tx timeout [ 491.674886][T12824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.718522][ T28] audit: type=1326 audit(1785046625.188:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 491.763911][T12824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.787180][T12824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.794624][ T28] audit: type=1326 audit(1785046625.188:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 491.888432][T12913] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 491.900988][T12824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.922349][ T28] audit: type=1326 audit(1785046625.188:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 492.048138][ T28] audit: type=1326 audit(1785046625.188:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 492.143857][ T28] audit: type=1326 audit(1785046625.188:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 492.187219][T12824] hsr_slave_0: entered promiscuous mode [ 492.226509][T12824] hsr_slave_1: entered promiscuous mode [ 492.238791][T12824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.271353][ T28] audit: type=1326 audit(1785046625.198:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 492.296160][T12824] Cannot create hsr debugfs directory [ 492.375666][ T28] audit: type=1326 audit(1785046625.198:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 492.456074][ T28] audit: type=1326 audit(1785046625.198:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12903 comm="syz.5.2464" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f50a859de99 code=0x7ffc0000 [ 492.974907][T12933] netlink: 'syz.5.2473': attribute type 39 has an invalid length. [ 493.285879][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 493.297324][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 493.304944][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 493.315062][ T5787] Workqueue: hci4 hci_rx_work [ 493.319983][ T5787] Call Trace: [ 493.323312][ T5787] [ 493.326283][ T5787] dump_stack_lvl+0x18c/0x250 [ 493.331129][ T5787] ? show_regs_print_info+0x20/0x20 [ 493.336459][ T5787] ? load_image+0x420/0x420 [ 493.341150][ T5787] sysfs_create_dir_ns+0x26e/0x2a0 [ 493.346333][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 493.351506][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 493.356237][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 493.361486][ T5787] kobject_add_internal+0x617/0xc90 [ 493.366815][ T5787] kobject_add+0x164/0x240 [ 493.371289][ T5787] ? kobject_init+0x1d0/0x1d0 [ 493.376015][ T5787] ? get_device_parent+0x366/0x390 [ 493.381202][ T5787] device_add+0x3fa/0xc40 [ 493.385589][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 493.390642][ T5787] le_conn_complete_evt+0xe9f/0x1480 [ 493.396033][ T5787] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 493.402400][ T5787] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 493.408139][ T5787] ? mutex_unlock+0x10/0x10 [ 493.412676][ T5787] ? skb_pull_data+0xf0/0x1f0 [ 493.417430][ T5787] hci_le_conn_complete_evt+0x187/0x440 [ 493.423022][ T5787] ? hci_remote_host_features_evt+0x150/0x150 [ 493.429174][ T5787] hci_event_packet+0x7b4/0x1280 [ 493.434162][ T5787] ? __lock_acquire+0x7d80/0x7d80 [ 493.439229][ T5787] ? lock_chain_count+0x20/0x20 [ 493.444108][ T5787] ? bis_list+0x290/0x290 [ 493.448473][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 493.453736][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 493.458975][ T5787] hci_rx_work+0x43a/0xd60 [ 493.463455][ T5787] ? process_scheduled_works+0x975/0x1600 [ 493.469254][ T5787] process_scheduled_works+0xa60/0x1600 [ 493.474865][ T5787] ? worker_attach_to_pool+0x370/0x370 [ 493.480368][ T5787] ? assign_work+0x3cc/0x5d0 [ 493.484993][ T5787] worker_thread+0xa5e/0xfe0 [ 493.489638][ T5787] kthread+0x2fa/0x390 [ 493.493741][ T5787] ? pr_cont_work+0x550/0x550 [ 493.498454][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 493.503074][ T5787] ret_from_fork+0x48/0x80 [ 493.507574][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 493.512195][ T5787] ret_from_fork_asm+0x11/0x20 [ 493.517030][ T5787] [ 493.530866][ T5787] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 493.545078][ T5787] Bluetooth: hci4: failed to register connection device [ 493.685671][ T5087] Bluetooth: hci0: command tx timeout [ 495.706054][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 495.763497][T12824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.771692][ T5087] Bluetooth: hci0: command tx timeout [ 495.819449][T12824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 495.947038][T12824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 495.985722][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 496.020868][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 496.050956][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.060820][T12824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 496.075624][ T27] usb 3-1: Product: syz [ 496.079979][ T27] usb 3-1: Manufacturer: syz [ 496.084622][ T27] usb 3-1: SerialNumber: syz [ 496.114166][T12984] netlink: 'syz.0.2486': attribute type 39 has an invalid length. [ 496.386320][ T2920] hsr_slave_0: left promiscuous mode [ 496.408443][ T2920] hsr_slave_1: left promiscuous mode [ 496.429377][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.452648][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.471314][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.490736][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.516740][ T2920] bridge_slave_1: left allmulticast mode [ 496.533356][ T2920] bridge_slave_1: left promiscuous mode [ 496.546837][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.564632][ T2920] bridge_slave_0: left allmulticast mode [ 496.575398][ T2920] bridge_slave_0: left promiscuous mode [ 496.587608][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.661715][ T27] usb 3-1: USB disconnect, device number 2 [ 496.695374][T12426] udevd[12426]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.743270][ T2920] veth1_macvtap: left promiscuous mode [ 496.753478][ T2920] veth0_macvtap: left promiscuous mode [ 496.779136][ T2920] veth1_vlan: left promiscuous mode [ 496.793368][ T2920] veth0_vlan: left promiscuous mode [ 497.648600][ T2920] bond1 (unregistering): Released all slaves [ 498.999020][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 499.061045][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 499.136550][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.212358][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.671586][ T2920] bond0 (unregistering): Released all slaves [ 500.188047][T12824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.341620][T12824] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.404460][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.411738][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.500384][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.507645][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.497276][T13054] netlink: 'syz.5.2505': attribute type 39 has an invalid length. [ 501.696992][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.703383][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.742961][T12824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.129118][T12824] veth0_vlan: entered promiscuous mode [ 502.564026][T12824] veth1_vlan: entered promiscuous mode [ 502.861784][T13093] netlink: 'syz.0.2517': attribute type 39 has an invalid length. [ 502.890908][T12824] veth0_macvtap: entered promiscuous mode [ 503.605739][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.774846][T12824] veth1_macvtap: entered promiscuous mode [ 504.012876][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.074505][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.099607][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.131496][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.215895][ T9] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 504.238532][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.249579][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.262930][T12824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.323342][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.358940][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.381137][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.405229][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.418552][T12824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.429501][T12824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.441524][T12824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.480926][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.496230][ T9] usb 3-1: config 0 has no interface number 0 [ 504.512788][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 504.544257][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 504.569302][T12824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.578157][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 504.578216][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.612296][T12824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.634779][ T9] usb 3-1: config 0 descriptor?? [ 504.637023][T12824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.652599][T13115] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 504.680518][T12824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.802422][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 504.935387][ T27] usb 3-1: USB disconnect, device number 3 [ 505.487844][ T2920] hsr_slave_0: left promiscuous mode [ 505.529404][ T2920] hsr_slave_1: left promiscuous mode [ 505.714883][ T2920] veth1_macvtap: left promiscuous mode [ 505.741481][ T2920] veth0_macvtap: left promiscuous mode [ 505.756057][ T2920] veth1_vlan: left promiscuous mode [ 505.785729][ T2920] veth0_vlan: left promiscuous mode [ 506.811389][ T2920] bond7 (unregistering): Released all slaves [ 506.835654][ T5781] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 507.035848][ T5781] usb 3-1: Using ep0 maxpacket: 16 [ 507.047624][ T5781] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 507.071927][ T5781] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 507.109046][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.132036][ T5781] usb 3-1: Product: syz [ 507.136732][ T5781] usb 3-1: Manufacturer: syz [ 507.151722][ T5781] usb 3-1: SerialNumber: syz [ 507.171450][ T5781] usb 3-1: config 0 descriptor?? [ 507.716659][ T2920] bond6 (unregistering): Released all slaves [ 508.192410][ T2920] bond5 (unregistering): Released all slaves [ 508.743390][ T2920] bond4 (unregistering): Released all slaves [ 508.940381][ T2920] bond3 (unregistering): Released all slaves [ 509.135941][ T2920] bond2 (unregistering): Released all slaves [ 509.376454][ T5840] usb 3-1: USB disconnect, device number 4 [ 509.617410][ T2920] bond1 (unregistering): Released all slaves [ 510.435726][ T5781] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 510.650284][ T5781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.665415][ T5781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.695988][ T5781] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 510.705212][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.776190][ T5781] usb 3-1: config 0 descriptor?? [ 511.035872][ T5781] usbhid 3-1:0.0: can't add hid device: -71 [ 511.050105][ T5781] usbhid: probe of 3-1:0.0 failed with error -71 [ 511.093642][ T5781] usb 3-1: USB disconnect, device number 5 [ 511.586019][ T5781] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 511.807942][ T5781] usb 3-1: Using ep0 maxpacket: 16 [ 511.836138][ T5781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.867348][ T5781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.896482][ T5781] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice= 0.40 [ 511.907510][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.938183][ T5781] usb 3-1: config 0 descriptor?? [ 511.964018][ T5781] appledisplay 3-1:0.0: Submitting URB failed [ 511.971742][ T5781] appledisplay: probe of 3-1:0.0 failed with error -5 [ 512.911335][ T5781] usbhid 3-1:0.0: can't add hid device: -71 [ 512.918489][ T5781] usbhid: probe of 3-1:0.0 failed with error -71 [ 512.930264][ T5781] usb 3-1: USB disconnect, device number 6 [ 513.193371][T13267] 0x000000000000-0x000000020000 : "" [ 513.240575][T13267] ftl_cs: FTL header not found. [ 513.320693][ T2920] bond0 (unregistering): Released all slaves [ 513.402200][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.417592][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.481270][T13181] netlink: 'syz.0.2540': attribute type 4 has an invalid length. [ 513.536506][T13184] netlink: 'syz.0.2540': attribute type 4 has an invalid length. [ 513.638645][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.664396][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.975885][ T5781] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 516.165716][ T5781] usb 4-1: Using ep0 maxpacket: 16 [ 516.217201][ T5781] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.248037][ T5781] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.282114][ T5781] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.298698][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.312197][ T5781] usb 4-1: Product: syz [ 516.320242][ T5781] usb 4-1: Manufacturer: syz [ 516.324999][ T5781] usb 4-1: SerialNumber: syz [ 516.566483][ T5781] usb 4-1: 0:2 : does not exist [ 516.595024][ T5781] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 516.647552][T13297] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 516.658107][ T9] IPVS: starting estimator thread 0... [ 516.719243][ T5781] usb 4-1: USB disconnect, device number 2 [ 516.789862][T12426] udevd[12426]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.895936][T13298] IPVS: using max 25 ests per chain, 60000 per kthread [ 518.099247][T13309] netlink: 'syz.5.2580': attribute type 39 has an invalid length. [ 519.132247][T13332] UBIFS error (pid: 13332): cannot open "ubifs", error -22 [ 520.107778][T13343] netlink: 'syz.3.2592': attribute type 39 has an invalid length. [ 522.670391][T13383] netlink: 'syz.3.2606': attribute type 39 has an invalid length. [ 523.228528][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 523.239474][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 523.252021][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 523.262857][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 523.270715][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 523.278220][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 523.462557][T13384] wlan0 speed is unknown, defaulting to 1000 [ 523.932294][T13384] chnl_net:caif_netlink_parms(): no params data found [ 524.067122][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 524.067143][ T28] audit: type=1326 audit(1785046657.728:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 524.211133][ T28] audit: type=1326 audit(1785046657.728:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 524.682839][ T28] audit: type=1326 audit(1785046657.758:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 524.918524][T13384] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.925942][T13384] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.933426][T13384] bridge_slave_0: entered allmulticast mode [ 524.942846][T13384] bridge_slave_0: entered promiscuous mode [ 524.946058][ T28] audit: type=1326 audit(1785046657.758:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 524.959522][T13384] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.046595][T13384] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.053964][T13384] bridge_slave_1: entered allmulticast mode [ 525.062963][ T28] audit: type=1326 audit(1785046657.758:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 525.075945][T13384] bridge_slave_1: entered promiscuous mode [ 525.140952][ T28] audit: type=1326 audit(1785046657.758:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 525.201106][ T28] audit: type=1326 audit(1785046657.758:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 525.233483][T13384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.275637][ T28] audit: type=1326 audit(1785046657.758:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 525.318173][T13384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.322339][ T28] audit: type=1326 audit(1785046657.758:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 525.375957][ T5087] Bluetooth: hci1: command tx timeout [ 525.383136][T13410] netlink: 'syz.0.2614': attribute type 39 has an invalid length. [ 525.425707][ T28] audit: type=1326 audit(1785046657.758:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13398 comm="syz.3.2611" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852819de99 code=0x7ffc0000 [ 525.551886][T13384] team0: Port device team_slave_0 added [ 525.578723][T13384] team0: Port device team_slave_1 added [ 525.697019][T13384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.704038][T13384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.808007][T13384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.840900][T13384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.849155][T13384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.908972][T13384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.937064][T13419] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2617'. [ 526.086771][ T5087] Bluetooth: hci0: command tx timeout [ 526.337305][T13384] hsr_slave_0: entered promiscuous mode [ 526.374770][T13384] hsr_slave_1: entered promiscuous mode [ 527.574606][ T5087] Bluetooth: hci1: command tx timeout [ 528.104412][T13384] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.210228][T13441] netlink: 'syz.3.2625': attribute type 39 has an invalid length. [ 528.582142][T13384] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.978672][T13384] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.278563][T13384] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.605663][ T5087] Bluetooth: hci1: command tx timeout [ 529.670033][ T173] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 529.924836][ T173] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.936149][ T173] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.982138][ T173] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 530.003097][ T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 530.027669][ T173] usb 4-1: SerialNumber: syz [ 530.058626][T13384] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 530.255407][ T173] usb 4-1: 0:2 : does not exist [ 530.313442][T13384] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 530.322252][ T173] usb 4-1: USB disconnect, device number 3 [ 530.367483][T13384] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 530.411034][T13462] udevd[13462]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.433240][T13384] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 531.013581][T13384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.044888][T13384] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.687497][ T5087] Bluetooth: hci1: command tx timeout [ 532.582214][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.589579][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.654415][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.661750][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.732940][ T5781] wlan0 speed is unknown, defaulting to 1000 [ 533.785035][T13384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.961758][ T42] hsr_slave_0: left promiscuous mode [ 533.976335][ T42] hsr_slave_1: left promiscuous mode [ 533.995789][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.003291][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.046534][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.054034][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.086642][ T42] bridge_slave_1: left promiscuous mode [ 534.092587][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.147634][ T42] bridge_slave_0: left allmulticast mode [ 534.153838][ T42] bridge_slave_0: left promiscuous mode [ 534.186700][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.314584][ T42] veth1_macvtap: left promiscuous mode [ 534.320426][ T42] veth0_macvtap: left promiscuous mode [ 534.346051][ T42] veth1_vlan: left promiscuous mode [ 534.351523][ T42] veth0_vlan: left promiscuous mode [ 535.852174][ T42] bond4 (unregistering): Released all slaves [ 536.109742][ T42] bond2 (unregistering): (slave bond3): Releasing backup interface [ 536.122635][ T42] bond3 (unregistering): Released all slaves [ 536.338785][ T42] bond2 (unregistering): Released all slaves [ 536.583498][ T42] bond1 (unregistering): Released all slaves [ 537.674846][ T42] team0 (unregistering): Port device team_slave_1 removed [ 537.732215][ T42] team0 (unregistering): Port device team_slave_0 removed [ 537.791561][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.852055][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.880633][ T42] team0 (unregistering): Port device bridge0 removed [ 538.923583][ T42] bond0 (unregistering): Released all slaves [ 540.391283][T13384] veth0_vlan: entered promiscuous mode [ 540.412119][T13384] veth1_vlan: entered promiscuous mode [ 540.441824][ T42] IPVS: stop unused estimator thread 0... [ 540.525069][T13384] veth0_macvtap: entered promiscuous mode [ 540.553327][T13384] veth1_macvtap: entered promiscuous mode [ 540.652609][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.695547][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.726647][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.759223][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.784220][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.814984][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.827583][T13384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.131526][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.170456][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.236455][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.265629][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.280391][T13384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.291141][T13384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.310171][T13384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.483706][T13384] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.496547][T13384] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.506053][T13384] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.514816][T13384] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.724393][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.761915][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.886153][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.894068][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.935403][T13632] syzkaller0: entered promiscuous mode [ 544.957551][T13632] syzkaller0: entered allmulticast mode [ 546.892136][T13659] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2702'. [ 550.346047][T13691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2715'. [ 551.795627][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 552.041257][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 552.064028][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.076399][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.091202][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.105268][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 552.114866][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.167878][ T9] usb 1-1: config 0 descriptor?? [ 552.205391][T13729] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2731'. [ 552.227831][T13729] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2731'. [ 552.618291][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 552.618434][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 552.625213][ T9] usb 1-1: USB disconnect, device number 2 [ 553.384772][T13757] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2744'. [ 553.386666][T13757] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2744'. [ 553.559706][T13761] loop8: detected capacity change from 0 to 8 [ 553.574877][T13761] Dev loop8: unable to read RDB block 8 [ 553.574951][T13761] loop8: unable to read partition table [ 553.575185][T13761] loop8: partition table beyond EOD, truncated [ 553.577042][T13761] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 553.837395][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 553.977019][T13768] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 554.992594][T13780] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2753'. [ 555.023815][ T5821] IPVS: starting estimator thread 0... [ 555.116190][T13782] IPVS: using max 18 ests per chain, 43200 per kthread [ 555.215619][ T5781] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 555.417617][ T5781] usb 1-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 555.431485][ T5781] usb 1-1: config 219 has 0 interfaces, different from the descriptor's value: 1 [ 555.444367][T13794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2757'. [ 555.458751][ T5781] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 555.475997][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.487950][ T5781] usb 1-1: Product: syz [ 555.492191][ T5781] usb 1-1: Manufacturer: syz [ 555.506006][ T5781] usb 1-1: SerialNumber: syz [ 555.785622][ T173] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 555.986215][ T173] usb 6-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 556.020063][ T173] usb 6-1: config 219 has 0 interfaces, different from the descriptor's value: 1 [ 556.037534][ T173] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 556.051592][ T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.061121][ T173] usb 6-1: Product: syz [ 556.072953][ T173] usb 6-1: Manufacturer: syz [ 556.078557][ T173] usb 6-1: SerialNumber: syz [ 556.350247][T13819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2770'. [ 557.013552][T13834] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 557.013552][T13834] program syz.2.2778 not setting count and/or reply_len properly [ 557.237819][T13839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2781'. [ 557.960965][ T5781] usb 1-1: USB disconnect, device number 3 [ 558.224091][T13857] ALSA: mixer_oss: invalid OSS volume 'G(`*_*h%L' [ 558.302097][T13857] ALSA: mixer_oss: invalid OSS volume '?;%D֛56h^34' [ 558.315061][T13857] ALSA: mixer_oss: invalid OSS volume 'E9V7BL*~]3jP`Q;"' [ 558.323950][T13857] ALSA: mixer_oss: invalid OSS volume '%X4 Z0@Y*Z_i;G' [ 558.339126][T13857] ALSA: mixer_oss: invalid OSS volume ' >U̷U~%8Uv88~' [ 558.350338][T13857] ALSA: mixer_oss: invalid OSS volume '~\v=&tV' [ 558.371188][T13857] ALSA: mixer_oss: invalid OSS volume '*Ԅb3;٦]M?ٗ' [ 558.401170][T13857] ALSA: mixer_oss: invalid OSS volume '{FSX&ĎP[І' [ 558.421754][T13857] ALSA: mixer_oss: invalid OSS volume 'r2ݗdȸc;`' [ 558.431660][T13857] ALSA: mixer_oss: invalid OSS volume ':lLݳ6&/1O' [ 558.442519][T13857] ALSA: mixer_oss: invalid OSS volume '(,",; +AnjZo9op' [ 558.451454][T13857] ALSA: mixer_oss: invalid OSS volume 'A 8tfK./j|' [ 558.484325][T13857] ALSA: mixer_oss: invalid OSS volume 'Y75Ƣ v7{' [ 558.589778][T13857] ALSA: mixer_oss: invalid OSS volume 'ƢT2,#r4z#U' [ 558.658893][T13857] ALSA: mixer_oss: invalid OSS volume 'xZ)]̜zʌrkJb؇lXc' [ 558.713587][T13857] ALSA: mixer_oss: invalid OSS volume 'tG>j@EkW6' [ 558.764072][T13857] ALSA: mixer_oss: invalid OSS volume 'Oqua;5^>QlV' [ 558.812461][T13857] ALSA: mixer_oss: invalid OSS volume '66#"pn,S?2hfr' [ 558.865413][T13857] ALSA: mixer_oss: invalid OSS volume 'yi' [ 558.921949][T13857] ALSA: mixer_oss: invalid OSS volume 'Y#U7n^F ~Cil|c' [ 558.971146][T13857] ALSA: mixer_oss: invalid OSS volume ':ȴ]16),dc iPAs' [ 559.051690][T13857] ALSA: mixer_oss: invalid OSS volume ',~sh2e-?ΰT1?V&' [ 559.126534][T13857] ALSA: mixer_oss: invalid OSS volume 'XBDP`!WLφU;rMh' [ 559.168072][T13857] ALSA: mixer_oss: invalid OSS volume '9N' [ 559.209064][T13857] ALSA: mixer_oss: invalid OSS volume '0' [ 559.215056][T13857] ALSA: mixer_oss: invalid OSS volume '\5;[殷KXԙ' [ 559.257989][T13857] ALSA: mixer_oss: invalid OSS volume 'PvG7?@wo]' [ 559.269013][T13857] ALSA: mixer_oss: invalid OSS volume '1EMl' [ 559.275152][T13857] ALSA: mixer_oss: invalid OSS volume 'Z. fٽ32%jISO|S0x1' [ 559.293613][T13857] ALSA: mixer_oss: invalid OSS volume '' [ 559.303228][T13857] ALSA: mixer_oss: invalid OSS volume '"#jjR ] a(#3;l3' [ 559.318459][T13857] ALSA: mixer_oss: invalid OSS volume '7z*OAj#8BwՐz' [ 559.375759][T13857] ALSA: mixer_oss: invalid OSS volume 'Agđ/;' [ 559.383030][T13857] ALSA: mixer_oss: invalid OSS volume 'k d% {ixFBx''o' [ 559.422826][T13857] ALSA: mixer_oss: invalid OSS volume 'GR k_!QR.|' [ 559.432476][ T173] usb 6-1: USB disconnect, device number 2 [ 559.470235][T13857] ALSA: mixer_oss: invalid OSS volume ')Ҽh' [ 559.489437][T13857] ALSA: mixer_oss: invalid OSS volume '5jS)P,Dc&k' [ 559.509153][T13857] ALSA: mixer_oss: invalid OSS volume 'iyJ#ZWsV̱ݤCr}' [ 559.517740][T13857] ALSA: mixer_oss: invalid OSS volume 'BٌN*pc%_' [ 559.526812][T13857] ALSA: mixer_oss: invalid OSS volume ']PB,HJ<[x0P'T\1rcR:W' [ 559.535214][T13857] ALSA: mixer_oss: invalid OSS volume 'h(' [ 559.544900][T13857] ALSA: mixer_oss: invalid OSS volume ' řULۀ^ZQ̗"' [ 559.554392][T13861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2791'. [ 559.574823][T13857] ALSA: mixer_oss: invalid OSS volume 'f&s<|i3@IRG' [ 559.587808][T13857] ALSA: mixer_oss: invalid OSS volume 'N;tBM2N_ .u6o[Ltz'N' [ 559.596350][T13857] ALSA: mixer_oss: invalid OSS volume 'Xz^.TXs|KViyLvZI3' [ 559.604867][T13857] ALSA: mixer_oss: invalid OSS volume 'MdIE7&W!OQ|1)Dk' [ 559.615542][T13857] ALSA: mixer_oss: invalid OSS volume '>;?+7C г6S+P qq' [ 559.630533][T13857] ALSA: mixer_oss: invalid OSS volume '= !M>y_N5#HBA' [ 559.639563][T13857] ALSA: mixer_oss: invalid OSS volume 'qsbRa|\~OqT24' [ 559.648105][T13857] ALSA: mixer_oss: invalid OSS volume 'Mz7z]ǢYoq71.C' [ 559.656835][T13857] ALSA: mixer_oss: invalid OSS volume 'YIU' [ 559.663259][T13857] ALSA: mixer_oss: invalid OSS volume 'p:zӍ;˅ӳsP,_Eˣ' [ 559.680306][T13857] ALSA: mixer_oss: invalid OSS volume 'N&Z}텫*5g ' [ 559.885099][T13867] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2794'. [ 560.531387][T13880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2800'. [ 560.843704][T13888] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2804'. [ 561.972099][T13912] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2815'. [ 562.003564][ T5781] IPVS: starting estimator thread 0... [ 562.116342][T13913] IPVS: using max 16 ests per chain, 38400 per kthread [ 562.779341][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 563.072946][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.132649][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.139829][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.313899][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 563.351121][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.399694][ T9] usb 3-1: config 0 descriptor?? [ 563.593637][T13944] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2829'. [ 563.652186][ T9] usb 3-1: USB disconnect, device number 7 [ 564.235737][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 565.012376][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.475892][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 565.485139][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.587375][ T9] usb 3-1: config 0 descriptor?? [ 565.618205][ T9] usb 3-1: can't set config #0, error -71 [ 565.661018][ T9] usb 3-1: USB disconnect, device number 8 [ 566.312829][T13982] overlay: Unknown parameter '/' [ 567.942414][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2850'. [ 568.687173][T14002] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2851'. [ 570.266785][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 570.416522][T14029] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2861'. [ 570.469649][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 570.504029][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 570.534403][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.581324][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 573.461766][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 573.472589][ T9] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 573.487061][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 573.495327][ T9] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 573.557913][ T9] usb 1-1: USB disconnect, device number 4 [ 573.626414][T14058] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2873'. [ 575.894824][T14091] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2883'. [ 576.020758][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2884'. [ 576.217404][ T5781] kernel write not supported for file /snd/seq (pid: 5781 comm: kworker/1:4) [ 578.251503][T14124] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2894'. [ 686.015584][ C0] ------------[ cut here ]------------ [ 686.022481][ C0] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 686.032866][ C0] Modules linked in: [ 686.036786][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 686.043840][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 686.053911][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 686.060353][ C0] Code: ff ff ff 48 c7 c7 a0 44 33 97 be 04 00 00 00 e8 7a 23 6e 00 48 89 df b8 01 00 00 00 87 05 dc 73 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 5c b1 8c 8e 48 c1 e8 03 [ 686.079983][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 686.086122][ C0] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff8171d0b6 [ 686.094102][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 686.102082][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 686.110060][ C0] R10: dffffc0000000000 R11: fffffbfff2e66894 R12: 0000000000002904 [ 686.118034][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 686.126010][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 686.134962][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.141547][ C0] CR2: 0000001b35120ff8 CR3: 000000006205c000 CR4: 00000000003506f0 [ 686.149550][ C0] Call Trace: [ 686.152847][ C0] [ 686.155716][ C0] rcu_core+0x5ec/0x17f0 [ 686.159973][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 686.165215][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 686.171136][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 686.176445][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 686.181661][ C0] ? sched_clock+0x3f/0x60 [ 686.186088][ C0] ? sched_clock_cpu+0x75/0x430 [ 686.190963][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 686.196953][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 686.202240][ C0] ? lock_chain_count+0x20/0x20 [ 686.207105][ C0] handle_softirqs+0x27d/0x820 [ 686.211877][ C0] ? read_tsc+0x9/0x20 [ 686.215957][ C0] ? ktime_get+0x24b/0x280 [ 686.220412][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 686.225201][ C0] ? do_softirq+0x1a0/0x1a0 [ 686.229815][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 686.235028][ C0] __irq_exit_rcu+0xd3/0x190 [ 686.239644][ C0] ? irq_exit_rcu+0x20/0x20 [ 686.244186][ C0] irq_exit_rcu+0x9/0x20 [ 686.248452][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 686.254105][ C0] [ 686.257041][ C0] [ 686.259975][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 686.266055][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 686.271703][ C0] Code: 5e 1c 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 6a 3b 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 686.291317][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 686.297395][ C0] RAX: 621ab93151326600 RBX: ffffffff81630c31 RCX: 621ab93151326600 [ 686.305394][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660 [ 686.313410][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 686.321394][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 686.329378][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 686.337364][ C0] ? do_idle+0x221/0x5c0 [ 686.341638][ C0] default_idle+0x13/0x20 [ 686.345996][ C0] default_idle_call+0x6c/0xa0 [ 686.350867][ C0] do_idle+0x221/0x5c0 [ 686.354979][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 686.360221][ C0] ? do_idle+0x15/0x5c0 [ 686.364407][ C0] cpu_startup_entry+0x43/0x60 [ 686.369193][ C0] rest_init+0x2e2/0x300 [ 686.373486][ C0] ? time_init+0x40/0x40 [ 686.377796][ C0] arch_call_rest_init+0xe/0x10 [ 686.382704][ C0] start_kernel+0x461/0x4e0 [ 686.387239][ C0] x86_64_start_reservations+0x2a/0x30 [ 686.392710][ C0] x86_64_start_kernel+0x60/0x60 [ 686.397742][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 686.403842][ C0] [ 686.406864][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 686.414142][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 686.421166][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 686.431239][ C0] Call Trace: [ 686.434519][ C0] [ 686.437368][ C0] dump_stack_lvl+0x18c/0x250 [ 686.442055][ C0] ? show_regs_print_info+0x20/0x20 [ 686.447276][ C0] ? load_image+0x420/0x420 [ 686.451802][ C0] panic+0x2ca/0x720 [ 686.455716][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 686.460231][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 686.466487][ C0] __warn+0x2e0/0x470 [ 686.470478][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 686.476214][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 686.481946][ C0] report_bug+0x2be/0x4f0 [ 686.486282][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 686.492013][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 686.497758][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 686.503576][ C0] handle_bug+0xcf/0x120 [ 686.507825][ C0] exc_invalid_op+0x1a/0x50 [ 686.512331][ C0] asm_exc_invalid_op+0x1a/0x20 [ 686.517189][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 686.523536][ C0] Code: ff ff ff 48 c7 c7 a0 44 33 97 be 04 00 00 00 e8 7a 23 6e 00 48 89 df b8 01 00 00 00 87 05 dc 73 c1 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 70 13 8d 74 47 48 c7 c0 5c b1 8c 8e 48 c1 e8 03 [ 686.543146][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 686.549217][ C0] RAX: 0000000000000000 RBX: ffffffff8d137000 RCX: ffffffff8171d0b6 [ 686.557208][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137000 [ 686.565180][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 686.573167][ C0] R10: dffffc0000000000 R11: fffffbfff2e66894 R12: 0000000000002904 [ 686.581157][ C0] R13: 1ffff92000000f94 R14: 0000000000000a02 R15: dffffc0000000000 [ 686.589144][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 686.594878][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 686.600634][ C0] rcu_core+0x5ec/0x17f0 [ 686.604878][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 686.610087][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 686.616012][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 686.621228][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 686.626444][ C0] ? sched_clock+0x3f/0x60 [ 686.631134][ C0] ? sched_clock_cpu+0x75/0x430 [ 686.636013][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 686.642007][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 686.647291][ C0] ? lock_chain_count+0x20/0x20 [ 686.652154][ C0] handle_softirqs+0x27d/0x820 [ 686.657005][ C0] ? read_tsc+0x9/0x20 [ 686.661100][ C0] ? ktime_get+0x24b/0x280 [ 686.665526][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 686.670296][ C0] ? do_softirq+0x1a0/0x1a0 [ 686.674812][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 686.680020][ C0] __irq_exit_rcu+0xd3/0x190 [ 686.684620][ C0] ? irq_exit_rcu+0x20/0x20 [ 686.689142][ C0] irq_exit_rcu+0x9/0x20 [ 686.693402][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 686.699057][ C0] [ 686.702076][ C0] [ 686.705012][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 686.710991][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 686.716675][ C0] Code: 5e 1c 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 6a 3b 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 686.736293][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 686.742362][ C0] RAX: 621ab93151326600 RBX: ffffffff81630c31 RCX: 621ab93151326600 [ 686.750351][ C0] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660 [ 686.758326][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 686.766301][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 686.774275][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 686.782251][ C0] ? do_idle+0x221/0x5c0 [ 686.786506][ C0] default_idle+0x13/0x20 [ 686.790848][ C0] default_idle_call+0x6c/0xa0 [ 686.795649][ C0] do_idle+0x221/0x5c0 [ 686.799732][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 686.804943][ C0] ? do_idle+0x15/0x5c0 [ 686.809281][ C0] cpu_startup_entry+0x43/0x60 [ 686.814051][ C0] rest_init+0x2e2/0x300 [ 686.818303][ C0] ? time_init+0x40/0x40 [ 686.822579][ C0] arch_call_rest_init+0xe/0x10 [ 686.827447][ C0] start_kernel+0x461/0x4e0 [ 686.831964][ C0] x86_64_start_reservations+0x2a/0x30 [ 686.837436][ C0] x86_64_start_kernel+0x60/0x60 [ 686.842382][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 686.848469][ C0] [ 687.960714][ C0] Shutting down cpus with NMI [ 687.966073][ C0] Kernel Offset: disabled [ 687.970905][ C0] Rebooting in 86400 seconds..