last executing test programs: 7.345378768s ago: executing program 0 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='2,0x7f0000000000,0x7f', 0x15) 7.067595124s ago: executing program 0 (id=427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={&(0x7f0000001300), 0xc, &(0x7f0000001400)={&(0x7f0000001500)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={&(0x7f0000000f00), 0x10, &(0x7f0000001000)={&(0x7f0000001100)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) 5.889155724s ago: executing program 0 (id=430): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000300), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440), 0x2) 5.494399754s ago: executing program 0 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='2,0x7f0000000000,0x7f', 0x15) 5.259531449s ago: executing program 0 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/firmware/timeout\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write(r1, &(0x7f0000000340)='\x00\x00', 0x2) write(0xffffffffffffffff, &(0x7f00000003c0), 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e80308000000010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303400001"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 5.099413713s ago: executing program 1 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r4}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) unshare(0x10010400) 3.685482988s ago: executing program 2 (id=442): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x104) 3.580363301s ago: executing program 2 (id=443): mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) 3.385200756s ago: executing program 2 (id=445): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000300), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000420)={0x2, 0xcc}, 0x2) 2.770580641s ago: executing program 1 (id=452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.608866385s ago: executing program 1 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='127.0.0.1\n', 0xa) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f00000002c0), 0x0) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='127.0.0.2\n', 0xa) 2.519536957s ago: executing program 2 (id=456): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x180}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 2.434915169s ago: executing program 1 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={&(0x7f0000001300), 0x10, &(0x7f0000001400)={&(0x7f0000001500)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) 2.262912314s ago: executing program 2 (id=460): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_assert_syzos_uexit$x86(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(0x0, 0x6) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) 2.169209486s ago: executing program 1 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r4}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) unshare(0x10010400) 1.015896885s ago: executing program 1 (id=464): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000300), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000420)={0x2, 0xcc}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440), 0x2) 929.124887ms ago: executing program 2 (id=465): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000300), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000420)={0x2, 0xcc}, 0x2) 741.853772ms ago: executing program 3 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) 675.418743ms ago: executing program 3 (id=468): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53e}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) getpeername$tipc(r0, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 461.672659ms ago: executing program 3 (id=469): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5000000000000"], 0x78) 303.663653ms ago: executing program 3 (id=470): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x180}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 156.049606ms ago: executing program 3 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x104) 102.644357ms ago: executing program 0 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r4}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) unshare(0x10010400) 0s ago: executing program 3 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='acpi-fan\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/acpi-fan/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr', 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 82.950808][ T5764] cgroup: Unknown subsys name 'net' [ 83.063261][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.752745][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.478080][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.497746][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.515044][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.533044][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.536660][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.548711][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.556859][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.565897][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.574505][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.582497][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.590295][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.598060][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.605866][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.631786][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.663007][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.668655][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.673161][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.685145][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.687185][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.702023][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.709831][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.718531][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.726518][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.733908][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.234012][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.370090][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 87.434332][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 87.530181][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 87.578416][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.586568][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.594138][ T5775] bridge_slave_0: entered allmulticast mode [ 87.601825][ T5775] bridge_slave_0: entered promiscuous mode [ 87.620694][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.627979][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.635299][ T5775] bridge_slave_1: entered allmulticast mode [ 87.642839][ T5775] bridge_slave_1: entered promiscuous mode [ 87.788715][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.847644][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.870836][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.878577][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.885921][ T5785] bridge_slave_0: entered allmulticast mode [ 87.893469][ T5785] bridge_slave_0: entered promiscuous mode [ 87.914170][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.921469][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.929123][ T5781] bridge_slave_0: entered allmulticast mode [ 87.936955][ T5781] bridge_slave_0: entered promiscuous mode [ 87.959557][ T5775] team0: Port device team_slave_0 added [ 87.966066][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.973297][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.980888][ T5785] bridge_slave_1: entered allmulticast mode [ 87.988772][ T5785] bridge_slave_1: entered promiscuous mode [ 88.008418][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.016428][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.023697][ T5781] bridge_slave_1: entered allmulticast mode [ 88.033000][ T5781] bridge_slave_1: entered promiscuous mode [ 88.043231][ T5775] team0: Port device team_slave_1 added [ 88.074521][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.081834][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.089382][ T5780] bridge_slave_0: entered allmulticast mode [ 88.096947][ T5780] bridge_slave_0: entered promiscuous mode [ 88.107091][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.114835][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.122251][ T5780] bridge_slave_1: entered allmulticast mode [ 88.130143][ T5780] bridge_slave_1: entered promiscuous mode [ 88.199337][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.211299][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.224289][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.234849][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.241829][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.268549][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.294416][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.327687][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.342294][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.368372][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.382774][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.396554][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.421392][ T5785] team0: Port device team_slave_0 added [ 88.461807][ T5785] team0: Port device team_slave_1 added [ 88.505846][ T5781] team0: Port device team_slave_0 added [ 88.512873][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.520516][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.546869][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.573010][ T5780] team0: Port device team_slave_0 added [ 88.581921][ T5781] team0: Port device team_slave_1 added [ 88.589188][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.599172][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.628488][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.654846][ T51] Bluetooth: hci1: command tx timeout [ 88.660653][ T51] Bluetooth: hci0: command tx timeout [ 88.666937][ T5780] team0: Port device team_slave_1 added [ 88.707916][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.715287][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.741895][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.760548][ T5775] hsr_slave_0: entered promiscuous mode [ 88.767421][ T5775] hsr_slave_1: entered promiscuous mode [ 88.799431][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.806758][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.814650][ T51] Bluetooth: hci2: command tx timeout [ 88.834318][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.840612][ T5782] Bluetooth: hci3: command tx timeout [ 88.858422][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.866880][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.893611][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.911847][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.921045][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.947162][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.047106][ T5781] hsr_slave_0: entered promiscuous mode [ 89.054287][ T5781] hsr_slave_1: entered promiscuous mode [ 89.060621][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.068746][ T5781] Cannot create hsr debugfs directory [ 89.099290][ T5785] hsr_slave_0: entered promiscuous mode [ 89.109416][ T5785] hsr_slave_1: entered promiscuous mode [ 89.115867][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.123643][ T5785] Cannot create hsr debugfs directory [ 89.161381][ T5780] hsr_slave_0: entered promiscuous mode [ 89.167986][ T5780] hsr_slave_1: entered promiscuous mode [ 89.177726][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.185459][ T5780] Cannot create hsr debugfs directory [ 89.614267][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.632552][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.643209][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.657524][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.731636][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.743437][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.758791][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.771909][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.911703][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.946547][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.961335][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.971686][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.036646][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.048457][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.059282][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.071005][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.136730][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.200345][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.216926][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.230294][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.238011][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.302642][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.309892][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.341623][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.358691][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.366040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.407672][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.414928][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.548214][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.568621][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.607416][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.641543][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.683493][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.690776][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.738687][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.744287][ T5782] Bluetooth: hci0: command tx timeout [ 90.754803][ T5782] Bluetooth: hci1: command tx timeout [ 90.771226][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.778564][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.849497][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.857050][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.891815][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.895807][ T51] Bluetooth: hci3: command tx timeout [ 90.899327][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.905149][ T5782] Bluetooth: hci2: command tx timeout [ 90.988654][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.171798][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.209526][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.362610][ T5775] veth0_vlan: entered promiscuous mode [ 91.423439][ T5781] veth0_vlan: entered promiscuous mode [ 91.477379][ T5775] veth1_vlan: entered promiscuous mode [ 91.488832][ T5781] veth1_vlan: entered promiscuous mode [ 91.512557][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.582365][ T5775] veth0_macvtap: entered promiscuous mode [ 91.602048][ T5775] veth1_macvtap: entered promiscuous mode [ 91.617644][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.652050][ T5781] veth0_macvtap: entered promiscuous mode [ 91.673187][ T5781] veth1_macvtap: entered promiscuous mode [ 91.701960][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.719821][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.729874][ T5780] veth0_vlan: entered promiscuous mode [ 91.750080][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.761966][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.774963][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.790439][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.799717][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.809366][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.819131][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.864975][ T5780] veth1_vlan: entered promiscuous mode [ 91.873520][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.888068][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.900584][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.916285][ T5785] veth0_vlan: entered promiscuous mode [ 91.945543][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.954561][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.968203][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.977450][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.056728][ T5785] veth1_vlan: entered promiscuous mode [ 92.196014][ T5780] veth0_macvtap: entered promiscuous mode [ 92.241151][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.252447][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.266907][ T970] cfg80211: failed to load regulatory.db [ 92.279340][ T5780] veth1_macvtap: entered promiscuous mode [ 92.310942][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.321064][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.359106][ T5785] veth0_macvtap: entered promiscuous mode [ 92.390328][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.401860][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.414816][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.424111][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.425167][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.445189][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.458419][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.470651][ T5785] veth1_macvtap: entered promiscuous mode [ 92.509253][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.520643][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.532713][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.543591][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.556192][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.580443][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.595490][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.604660][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.613436][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.630827][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.647930][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.662097][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.678132][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.690395][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.701691][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.711929][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.722696][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.745887][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.796644][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.814854][ T5782] Bluetooth: hci1: command tx timeout [ 92.820335][ T5782] Bluetooth: hci0: command tx timeout [ 92.839410][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.851832][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.870388][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.881681][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.908708][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.939817][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.974459][ T5782] Bluetooth: hci3: command tx timeout [ 92.974469][ T51] Bluetooth: hci2: command tx timeout [ 93.010042][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.029689][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.041226][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.063109][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.275086][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.283443][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.294010][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.301898][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.397656][ T5855] vcan0: tx address claim with dest, not broadcast [ 93.449675][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.469188][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.504876][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.512781][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.654383][ T5859] Bluetooth: MGMT ver 1.22 [ 93.659217][ T5859] Bluetooth: hci0: unsupported parameter 5134 [ 93.669637][ T5859] Bluetooth: hci0: unsupported parameter 8192 [ 93.714653][ T5859] Bluetooth: hci0: unsupported parameter 5134 [ 93.741394][ T5859] Bluetooth: hci0: unsupported parameter 8192 [ 94.037415][ T5871] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11'. [ 94.087237][ T5874] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 94.627433][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.895348][ T5782] Bluetooth: hci1: command tx timeout [ 94.895370][ T51] Bluetooth: hci0: command tx timeout [ 95.054219][ T51] Bluetooth: hci3: command tx timeout [ 95.059847][ T5782] Bluetooth: hci2: command tx timeout [ 95.245868][ T5906] syzkaller0: entered promiscuous mode [ 95.251439][ T5906] syzkaller0: entered allmulticast mode [ 95.306490][ T5912] fuse: Bad value for 'fd' [ 97.158709][ T28] audit: type=1800 audit(1787002333.678:2): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="idProduct" dev="configfs" ino=6951 res=0 errno=0 [ 97.196935][ T28] audit: type=1800 audit(1787002333.718:3): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="configuration" dev="configfs" ino=6956 res=0 errno=0 [ 97.799342][ T5959] fuse: Bad value for 'fd' [ 100.009931][ T5935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.206643][ T5987] netlink: 13 bytes leftover after parsing attributes in process `syz.3.55'. [ 100.646218][ T6006] Illegal XDP return value 4294967294 on prog (id 2) dev N/A, expect packet loss! [ 100.682657][ T6003] syzkaller0: entered promiscuous mode [ 100.707085][ T6003] syzkaller0: entered allmulticast mode [ 102.264361][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 102.281166][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.454159][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.276652][ T6042] syzkaller0: entered promiscuous mode [ 103.283874][ T6042] syzkaller0: entered allmulticast mode [ 104.153534][ T6069] netlink: 10 bytes leftover after parsing attributes in process `syz.3.80'. [ 105.972851][ T6102] netlink: 10 bytes leftover after parsing attributes in process `syz.3.91'. [ 106.442400][ T6120] syzkaller0: entered promiscuous mode [ 106.462212][ T6120] syzkaller0: entered allmulticast mode [ 108.690818][ T6149] netlink: 10 bytes leftover after parsing attributes in process `syz.2.103'. [ 109.699052][ T6182] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 109.745570][ T6184] netlink: 10 bytes leftover after parsing attributes in process `syz.2.115'. [ 110.809279][ T6217] netlink: 10 bytes leftover after parsing attributes in process `syz.1.126'. [ 111.945143][ T6232] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 112.218316][ T6246] syz.0.135[6246]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 112.268998][ T6246] loop0: detected capacity change from 0 to 512 [ 112.299185][ T6246] ======================================================= [ 112.299185][ T6246] WARNING: The mand mount option has been deprecated and [ 112.299185][ T6246] and is ignored by this kernel. Remove the mand [ 112.299185][ T6246] option from the mount to silence this warning. [ 112.299185][ T6246] ======================================================= [ 113.204815][ T6254] netlink: 10 bytes leftover after parsing attributes in process `syz.2.137'. [ 113.527790][ T28] audit: type=1800 audit(1787002350.048:4): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.138" name="idProduct" dev="configfs" ino=9260 res=0 errno=0 [ 113.596951][ T28] audit: type=1800 audit(1787002350.088:5): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.138" name="configuration" dev="configfs" ino=9261 res=0 errno=0 [ 115.308516][ T6288] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 115.324175][ T6287] netlink: 10 bytes leftover after parsing attributes in process `syz.1.147'. [ 115.487165][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 115.771796][ T28] audit: type=1800 audit(1787002352.288:6): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.151" name="idProduct" dev="configfs" ino=9358 res=0 errno=0 [ 115.810920][ T28] audit: type=1800 audit(1787002352.318:7): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.151" name="configuration" dev="configfs" ino=9359 res=0 errno=0 [ 117.611089][ T28] audit: type=1800 audit(1787002354.128:8): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.162" name="idProduct" dev="configfs" ino=8551 res=0 errno=0 [ 117.676407][ T28] audit: type=1800 audit(1787002354.158:9): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.162" name="configuration" dev="configfs" ino=8552 res=0 errno=0 [ 118.753343][ T6353] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 119.153601][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 119.199805][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.412973][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.965983][ T28] audit: type=1800 audit(1787002356.468:10): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.173" name="idProduct" dev="configfs" ino=8596 res=0 errno=0 [ 120.012797][ T28] audit: type=1800 audit(1787002356.478:11): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.173" name="configuration" dev="configfs" ino=8597 res=0 errno=0 [ 121.613988][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 122.074612][ T6412] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 122.567118][ T28] audit: type=1800 audit(1787002359.088:12): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.185" name="idProduct" dev="configfs" ino=8659 res=0 errno=0 [ 122.629444][ T28] audit: type=1800 audit(1787002359.098:13): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.185" name="configuration" dev="configfs" ino=8660 res=0 errno=0 [ 122.954125][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 123.457835][ T28] audit: type=1800 audit(1787002359.978:14): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.194" name="idProduct" dev="configfs" ino=9671 res=0 errno=0 [ 123.506704][ T28] audit: type=1800 audit(1787002359.978:15): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.194" name="configuration" dev="configfs" ino=9672 res=0 errno=0 [ 124.685954][ T6472] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 124.760155][ T6450] syzkaller0: entered promiscuous mode [ 124.776516][ T6450] syzkaller0: entered allmulticast mode [ 126.332206][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 126.706638][ T28] audit: type=1800 audit(1787002363.228:16): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.206" name="idProduct" dev="configfs" ino=8779 res=0 errno=0 [ 126.761609][ T28] audit: type=1800 audit(1787002363.248:17): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.206" name="configuration" dev="configfs" ino=8780 res=0 errno=0 [ 126.873548][ T6499] netlink: 10 bytes leftover after parsing attributes in process `syz.3.207'. [ 128.186873][ T6518] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 128.273640][ T6509] syzkaller0: entered promiscuous mode [ 128.279523][ T6509] syzkaller0: entered allmulticast mode [ 129.789840][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 130.110878][ T28] audit: type=1800 audit(1787002366.628:18): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.217" name="idProduct" dev="configfs" ino=9862 res=0 errno=0 [ 130.198183][ T28] audit: type=1800 audit(1787002366.628:19): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.217" name="configuration" dev="configfs" ino=9863 res=0 errno=0 [ 130.255877][ T6545] netlink: 10 bytes leftover after parsing attributes in process `syz.1.219'. [ 131.570279][ T6569] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 132.088299][ T28] audit: type=1800 audit(1787002368.608:20): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.229" name="idProduct" dev="configfs" ino=8878 res=0 errno=0 [ 132.118525][ T28] audit: type=1800 audit(1787002368.638:21): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.229" name="configuration" dev="configfs" ino=8879 res=0 errno=0 [ 132.178971][ T6581] netlink: 10 bytes leftover after parsing attributes in process `syz.0.230'. [ 133.423407][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.434980][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.147903][ T28] audit: type=1800 audit(1787002370.668:22): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.239" name="idProduct" dev="configfs" ino=10071 res=0 errno=0 [ 134.212794][ T28] audit: type=1800 audit(1787002370.698:23): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.239" name="configuration" dev="configfs" ino=10072 res=0 errno=0 [ 134.487916][ T6613] fuse: Unknown parameter 'fd0x000000000000000300000000000000000000' [ 134.924777][ T28] audit: type=1800 audit(1787002371.448:24): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.248" name="idProduct" dev="configfs" ino=10114 res=0 errno=0 [ 134.967195][ T28] audit: type=1800 audit(1787002371.468:25): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.248" name="configuration" dev="configfs" ino=10115 res=0 errno=0 [ 135.974464][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 136.370066][ T28] audit: type=1800 audit(1787002372.888:26): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.258" name="idProduct" dev="configfs" ino=8996 res=0 errno=0 [ 137.346651][ T28] audit: type=1800 audit(1787002372.918:27): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.258" name="configuration" dev="configfs" ino=8997 res=0 errno=0 [ 137.733171][ T6672] fuse: Bad value for 'fd' [ 138.679977][ T28] audit: type=1800 audit(1787002375.198:28): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.268" name="idProduct" dev="configfs" ino=9058 res=0 errno=0 [ 138.793831][ T28] audit: type=1800 audit(1787002375.228:29): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.268" name="configuration" dev="configfs" ino=9063 res=0 errno=0 [ 140.319930][ T6708] fuse: Bad value for 'fd' [ 140.344170][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 140.616355][ T28] audit: type=1800 audit(1787002377.138:30): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.278" name="idProduct" dev="configfs" ino=10366 res=0 errno=0 [ 140.720474][ T28] audit: type=1800 audit(1787002377.158:31): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.278" name="configuration" dev="configfs" ino=10367 res=0 errno=0 [ 143.237355][ T6747] fuse: Bad value for 'fd' [ 143.352942][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 143.465436][ T28] audit: type=1800 audit(1787002379.988:32): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.289" name="idProduct" dev="configfs" ino=9155 res=0 errno=0 [ 143.569019][ T28] audit: type=1800 audit(1787002380.018:33): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.289" name="configuration" dev="configfs" ino=9157 res=0 errno=0 [ 144.897397][ T6772] syzkaller0: entered promiscuous mode [ 144.902969][ T6772] syzkaller0: entered allmulticast mode [ 145.003313][ T28] audit: type=1800 audit(1787002381.518:34): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.300" name="idProduct" dev="configfs" ino=10453 res=0 errno=0 [ 145.745769][ T6769] loop1: detected capacity change from 0 to 65536 [ 145.925484][ T6769] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 146.098695][ T6769] XFS (loop1): Ending clean mount [ 146.302545][ T5781] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 147.973867][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 148.333092][ T28] audit: type=1800 audit(1787002384.848:35): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.309" name="idProduct" dev="configfs" ino=11345 res=0 errno=0 [ 150.134408][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.368626][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.568475][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.692650][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.779086][ T27] usb 2-1: Product: syz [ 150.853814][ T27] usb 2-1: Manufacturer: syz [ 150.858512][ T27] usb 2-1: SerialNumber: syz [ 152.062741][ T27] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 152.078704][ T27] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 152.087060][ T27] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 152.280755][ T27] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 152.629971][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 152.666914][ T27] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 152.732437][ T27] usb 2-1: USB disconnect, device number 2 [ 152.741544][ T27] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 152.962788][ T28] audit: type=1800 audit(1787002389.478:36): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.322" name="idProduct" dev="configfs" ino=11405 res=0 errno=0 [ 153.608194][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 154.722838][ T28] audit: type=1800 audit(1787002391.188:37): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.333" name="idProduct" dev="configfs" ino=11468 res=0 errno=0 [ 154.745189][ T28] audit: type=1800 audit(1787002391.198:38): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.333" name="configuration" dev="configfs" ino=11470 res=0 errno=0 [ 155.688390][ T6891] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 155.718218][ T6891] CIFS: Attempting to mount //127.0.0.1/share [ 156.477608][ T6891] CIFS: VFS: cifs_mount failed w/return code = -112 [ 157.569381][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.339'. [ 159.805227][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 159.890086][ T6938] loop3: detected capacity change from 0 to 32768 [ 159.937392][ T6938] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.348 (6938) [ 160.063788][ T6938] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 160.091331][ T6938] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 160.121020][ T6938] BTRFS info (device loop3): use zlib compression, level 3 [ 160.139278][ T6938] BTRFS info (device loop3): using free space tree [ 160.262848][ T1103] BTRFS warning (device loop3): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0x2ed603e1c7020c26560d5b67cb583d18728f31e4c19fda36b9e72f3cdfabcbb2 level 0 [ 160.350814][ T6938] BTRFS error (device loop3): failed to read chunk root [ 160.394674][ T6938] BTRFS error (device loop3): open_ctree failed: -5 [ 162.623784][ C0] sched: RT throttling activated [ 162.894770][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 164.814135][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 164.854455][ T7048] Zero length message leads to an empty skb [ 165.465812][ T7064] loop1: detected capacity change from 0 to 4096 [ 165.642913][ T7064] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 166.005070][ T7021] loop0: detected capacity change from 0 to 65536 [ 166.061831][ T7021] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 166.226228][ T7021] XFS (loop0): Ending clean mount [ 166.316404][ T5775] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 166.658585][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 168.551578][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 168.928818][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 169.524170][ T7127] loop0: detected capacity change from 0 to 32768 [ 169.554249][ T7127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.397 (7127) [ 169.656033][ T7127] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.713496][ T7127] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 169.773029][ T7127] BTRFS info (device loop0): using free space tree [ 170.142750][ T7127] BTRFS info (device loop0): enabling ssd optimizations [ 170.169078][ T7127] BTRFS info (device loop0): auto enabling async discard [ 170.584666][ T7177] syzkaller0: entered promiscuous mode [ 170.603882][ T7177] syzkaller0: entered allmulticast mode [ 170.708091][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.981545][ T5776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (5776) [ 174.704955][ T7210] misc userio: Invalid payload size [ 175.463577][ T7233] ubi0: attaching mtd0 [ 175.505103][ T7233] ubi0: scanning is finished [ 175.523941][ T7233] ubi0: empty MTD device detected [ 175.654511][ T7233] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 175.684426][ T7233] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 175.713935][ T7233] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 175.723093][ T7233] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 175.753496][ T7233] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 175.784016][ T7233] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 175.797853][ T7233] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4026245495 [ 175.850750][ T7233] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 175.902987][ T7242] ubi0: background thread "ubi_bgt0d" started, PID 7242 [ 177.723050][ T7275] misc userio: Invalid payload size [ 177.855139][ T7277] netlink: 10 bytes leftover after parsing attributes in process `syz.3.431'. [ 178.722270][ T5777] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 179.749388][ T5777] usb 1-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 179.759010][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.772701][ T5777] usb 1-1: Product: syz [ 179.777231][ T5777] usb 1-1: Manufacturer: syz [ 179.782037][ T5777] usb 1-1: SerialNumber: syz [ 180.056964][ T5777] kaweth 1-1:1.0: Downloading firmware... [ 180.114787][ T5777] usb 1-1: Direct firmware load for kaweth/new_code.bin failed with error -2 [ 180.147016][ T5777] usb 1-1: Falling back to sysfs fallback for: kaweth/new_code.bin [ 180.230127][ T7321] misc userio: Invalid payload size [ 181.218367][ T5777] kaweth 1-1:1.0: Firmware request failed [ 181.234847][ T5777] kaweth 1-1:1.0: Error downloading firmware (-110) [ 181.259198][ T5777] kaweth: probe of 1-1:1.0 failed with error -5 [ 181.378437][ T7360] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 183.008561][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 183.397450][ T5777] usb 1-1: USB disconnect, device number 2 [ 183.651278][ T7403] general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN [ 183.663080][ T7403] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 183.671591][ T7403] CPU: 0 PID: 7403 Comm: syz.3.473 Not tainted syzkaller #0 [ 183.678932][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.689085][ T7403] RIP: 0010:acpi_fan_probe+0x116/0xef0 [ 183.694612][ T7403] Code: 00 4c 89 ff ba c0 0d 00 00 e8 b6 99 c1 00 48 85 c0 0f 84 3e 04 00 00 4c 89 7c 24 68 4c 8d bb 58 02 00 00 4d 89 fe 49 c1 ee 03 <43> 80 3c 2e 00 48 89 44 24 18 74 0d 4c 89 ff e8 86 f7 4f fd 48 8b [ 183.714272][ T7403] RSP: 0018:ffffc9000c4e7940 EFLAGS: 00010206 [ 183.720394][ T7403] RAX: ffff88802ef29128 RBX: 0000000000000000 RCX: 0000000000000000 [ 183.728421][ T7403] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 00000000ffffffff [ 183.736429][ T7403] RBP: ffffc9000c4e7b40 R08: ffffffff911ed5b7 R09: 1ffffffff223dab6 [ 183.744443][ T7403] R10: dffffc0000000000 R11: fffffbfff223dab7 R12: ffff88801be9b000 [ 183.752445][ T7403] R13: dffffc0000000000 R14: 000000000000004b R15: 0000000000000258 [ 183.760440][ T7403] FS: 00007f0d180d06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 183.769404][ T7403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.776011][ T7403] CR2: 0000200000055030 CR3: 000000001fb3d000 CR4: 00000000003506f0 [ 183.784010][ T7403] Call Trace: [ 183.787317][ T7403] [ 183.790275][ T7403] ? kernfs_add_one+0x149/0x6b0 [ 183.795165][ T7403] ? of_clk_set_defaults+0x2b0/0x6d0 [ 183.800481][ T7403] ? __lock_acquire+0x7d80/0x7d80 [ 183.805537][ T7403] ? down_write+0x16e/0x200 [ 183.810097][ T7403] ? down_read_killable+0x340/0x340 [ 183.815364][ T7403] ? acpi_fan_get_fst+0x3a0/0x3a0 [ 183.820430][ T7403] ? up_write+0x1be/0x410 [ 183.824796][ T7403] ? kernfs_add_one+0x149/0x6b0 [ 183.829683][ T7403] ? kernfs_put+0x309/0x360 [ 183.834222][ T7403] ? is_acpi_device_node+0x26/0x60 [ 183.839362][ T7403] ? acpi_dev_pm_attach+0xeb/0x290 [ 183.844526][ T7403] platform_probe+0x13b/0x1c0 [ 183.849260][ T7403] ? platform_uevent+0xb0/0xb0 [ 183.854063][ T7403] really_probe+0x247/0xae0 [ 183.858639][ T7403] ? pm_runtime_barrier+0x14b/0x1c0 [ 183.863880][ T7403] __driver_probe_device+0x1f5/0x390 [ 183.869211][ T7403] device_driver_attach+0xe0/0x1d0 [ 183.874362][ T7403] bind_store+0x1cc/0x210 [ 183.878732][ T7403] ? sysfs_kf_read+0x360/0x360 [ 183.883521][ T7403] kernfs_fop_write_iter+0x3a4/0x520 [ 183.888848][ T7403] vfs_write+0x474/0x9a0 [ 183.893123][ T7403] ? file_end_write+0x250/0x250 [ 183.898177][ T7403] ? __fget_files+0x3fc/0x460 [ 183.902892][ T7403] ? __fdget_pos+0x2a3/0x330 [ 183.907522][ T7403] ? ksys_write+0x74/0x260 [ 183.911977][ T7403] ksys_write+0x151/0x260 [ 183.916341][ T7403] ? __ia32_sys_read+0x90/0x90 [ 183.921168][ T7403] ? lockdep_hardirqs_on+0x98/0x150 [ 183.926416][ T7403] do_syscall_64+0x55/0xb0 [ 183.930864][ T7403] ? clear_bhb_loop+0x40/0x90 [ 183.935567][ T7403] ? clear_bhb_loop+0x40/0x90 [ 183.940273][ T7403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.946198][ T7403] RIP: 0033:0x7f0d1719e0d9 [ 183.950656][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.970293][ T7403] RSP: 002b:00007f0d180d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.978736][ T7403] RAX: ffffffffffffffda RBX: 00007f0d17425fa0 RCX: 00007f0d1719e0d9 [ 183.986729][ T7403] RDX: 0000000000000006 RSI: 0000200000000400 RDI: 0000000000000004 [ 183.994746][ T7403] RBP: 00007f0d17235024 R08: 0000000000000000 R09: 0000000000000000 [ 184.002765][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.010769][ T7403] R13: 00007f0d17426038 R14: 00007f0d17425fa0 R15: 00007fff8bfe22c8 [ 184.018785][ T7403] [ 184.021845][ T7403] Modules linked in: [ 184.523347][ T7403] ---[ end trace 0000000000000000 ]--- [ 184.555763][ T7403] RIP: 0010:acpi_fan_probe+0x116/0xef0 [ 184.561422][ T7403] Code: 00 4c 89 ff ba c0 0d 00 00 e8 b6 99 c1 00 48 85 c0 0f 84 3e 04 00 00 4c 89 7c 24 68 4c 8d bb 58 02 00 00 4d 89 fe 49 c1 ee 03 <43> 80 3c 2e 00 48 89 44 24 18 74 0d 4c 89 ff e8 86 f7 4f fd 48 8b [ 184.601129][ T7403] RSP: 0018:ffffc9000c4e7940 EFLAGS: 00010206 [ 184.607888][ T7403] RAX: ffff88802ef29128 RBX: 0000000000000000 RCX: 0000000000000000 [ 184.621910][ T7403] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 00000000ffffffff [ 184.633281][ T7403] RBP: ffffc9000c4e7b40 R08: ffffffff911ed5b7 R09: 1ffffffff223dab6 [ 184.649423][ T7403] R10: dffffc0000000000 R11: fffffbfff223dab7 R12: ffff88801be9b000 [ 184.668332][ T7403] R13: dffffc0000000000 R14: 000000000000004b R15: 0000000000000258 [ 184.676471][ T7403] FS: 00007f0d180d06c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 184.685943][ T7403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.692947][ T7403] CR2: 00007ff34edef2f8 CR3: 000000001fb3d000 CR4: 00000000003506e0 [ 184.701135][ T7403] Kernel panic - not syncing: Fatal exception [ 184.707824][ T7403] Kernel Offset: disabled [ 184.712179][ T7403] Rebooting in 86400 seconds..