[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty3. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.109' (ECDSA) to the list of known hosts. 2020/12/10 04:00:41 fuzzer started 2020/12/10 04:00:43 dialing manager at 10.128.0.26:40505 2020/12/10 04:00:43 syscalls: 3443 2020/12/10 04:00:43 code coverage: enabled 2020/12/10 04:00:43 comparison tracing: enabled 2020/12/10 04:00:43 extra coverage: enabled 2020/12/10 04:00:43 setuid sandbox: enabled 2020/12/10 04:00:43 namespace sandbox: enabled 2020/12/10 04:00:43 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/10 04:00:43 fault injection: enabled 2020/12/10 04:00:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/10 04:00:43 net packet injection: enabled 2020/12/10 04:00:43 net device setup: enabled 2020/12/10 04:00:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/10 04:00:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/10 04:00:43 USB emulation: enabled 2020/12/10 04:00:43 hci packet injection: enabled 2020/12/10 04:00:43 wifi device emulation: enabled 04:03:46 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) connect(r0, 0x0, 0x0) syzkaller login: [ 332.166450][ T8282] IPVS: ftp: loaded support on port[0] = 21 [ 332.588334][ T8282] chnl_net:caif_netlink_parms(): no params data found [ 332.780062][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.787522][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.797056][ T8282] device bridge_slave_0 entered promiscuous mode [ 332.818811][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.826157][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.835633][ T8282] device bridge_slave_1 entered promiscuous mode [ 332.898030][ T8282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.915376][ T8282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.972144][ T8282] team0: Port device team_slave_0 added [ 332.985779][ T8282] team0: Port device team_slave_1 added [ 333.038530][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.045990][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.072110][ T8282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.088086][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.095675][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.122512][ T8282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.188150][ T8282] device hsr_slave_0 entered promiscuous mode [ 333.198246][ T8282] device hsr_slave_1 entered promiscuous mode [ 333.484856][ T8282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.502098][ T8282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 333.519910][ T8282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 333.550838][ T8282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 333.878289][ T8282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.910565][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.920048][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.943647][ T8282] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.966288][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.976395][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.985800][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.993163][ T4726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.043787][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.053374][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.063062][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.072362][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.079582][ T4726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.088658][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.092999][ T2986] Bluetooth: hci0: command 0x0409 tx timeout [ 334.099003][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.127694][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.138226][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.183051][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.193084][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 334.203146][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.213333][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 334.222748][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.232071][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 334.241491][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.271525][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.333938][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.341591][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.378455][ T8282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.437998][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.448320][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.504799][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.515376][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.537469][ T8282] device veth0_vlan entered promiscuous mode [ 334.546002][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.555192][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.586787][ T8282] device veth1_vlan entered promiscuous mode [ 334.635031][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.644645][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 334.675624][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.685733][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.705286][ T8282] device veth0_macvtap entered promiscuous mode [ 334.728160][ T8282] device veth1_macvtap entered promiscuous mode [ 334.778159][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.786645][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.795938][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.805227][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.815133][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.838308][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.856674][ T8282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.866022][ T8282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.875020][ T8282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.883982][ T8282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.898647][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.908837][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.263417][ T8372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.271322][ T8372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.280680][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.447410][ T8372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.456054][ T8372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.464885][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:03:52 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcsa\x00', 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) 04:03:52 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, @c='abcdefghijklmnopqrstuvwxyz0123456'}, 0x29, 0xfffffffffffffff9) 04:03:52 executing program 0: syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x4, 0x0) [ 336.176471][ T17] Bluetooth: hci0: command 0x041b tx timeout 04:03:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 04:03:53 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) 04:03:53 executing program 0: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000080)=""/140) syz_emit_ethernet(0x129, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000009100315309d84ff5ccdd86c70081002100001825d3a643217e7e2cb2e7d56ab25e11b180c30378ced4d36bfbc6d199275c45fc71e8e3bb0e5b4a9ba4378ad52af891a69d36289b3cf4a109b63f694a7bcce02e813229078a214d1a5f28dab6ef3849d7369f22fc384c6ebfb1409d4fcfc143c652779d1913ca65d36d09e02e9e2cc8233f75efc49c93a1e4ee6614ede9816967b597210f664652b000000000f8d31a3715a47537187f35cc02f99bb1c6bdef823898a351ff0c8ac2a5979275a0676064a13ce53889a2aa879401df91c801e79dc30f72c41e9d07778a1dc3ca411defdcdc0e2e1323b671d5133e2a9454489cc9cdd0bed3430c5a6c6778eaaa10f05a47e1ebef110fc91cc6e289a2142a2638669b9ff41ff73e70c101b9"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x35, 0x1}, 0x8) 04:03:53 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000140)) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 04:03:53 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc0, 0xbb, 0x9b, 0x40, 0x20b7, 0x1540, 0xef8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, &(0x7f00000027c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0xfffffffffffffe4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="0000030000000007"], 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0xe0, 0x4) [ 337.653551][ T2986] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 338.013763][ T2986] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 338.023106][ T2986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.055329][ T2986] usb 1-1: config 0 descriptor?? [ 338.254398][ T4726] Bluetooth: hci0: command 0x040f tx timeout [ 339.175208][ T2986] usb 1-1: ATUSB: AT86RF212 version 0 [ 339.393278][ T2986] usb 1-1: Firmware: major: 0, minor: 7, hardware type: ATUSB (0) 04:03:56 executing program 1: ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x1, 0x3, 0x0, 0x7ee, 0x8000, 0x7ff}) ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x5) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/16) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000184}, 0x1) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000280), 0x4) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f00000002c0)={0x3, 'syz1\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x140a, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4405) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000400)={{0xa, 0x4e20, 0x81, @mcast2, 0x34d}, {0xa, 0x4e23, 0x8000, @local, 0x10000}, 0x8000, [0x9, 0x5, 0x6, 0x3, 0x7, 0x9, 0x2]}, 0x5c) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000480)='/dev/input/mouse#\x00', 0xfffff080, 0x600000) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x0, 0xd, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0x68}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xe7}, @exit, @jmp={0x5, 0x0, 0x8, 0xb, 0x3, 0x18}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x66816fc8}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @exit, @map={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f00000005c0)='syzkaller\x00', 0x62, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001640)={0x4, 0xe, 0xed, 0x7fffffff}, 0x10, 0xffffffffffffffff}, 0x74) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000001700)=r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001780)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20004810) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 339.745733][ T2986] usb 1-1: atusb_control_msg: req 0x01 val 0x0 idx 0x0, error -71 [ 339.753796][ T2986] usb 1-1: failed to fetch extended address, random address set [ 339.761585][ T2986] usb 1-1: atusb_probe: initialization failed, error = -71 [ 339.769259][ T2986] atusb: probe of 1-1:0.0 failed with error -71 [ 339.855880][ T2986] usb 1-1: USB disconnect, device number 2 [ 340.334224][ T56] Bluetooth: hci0: command 0x0419 tx timeout [ 340.383688][ T2986] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 340.823731][ T2986] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 340.833071][ T2986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.845372][ T2986] usb 1-1: config 0 descriptor?? 04:03:57 executing program 0: ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000540)={0x53, 0xffffffffffffffff, 0xe7, 0x6, @buffer={0x0, 0x1f, &(0x7f00000003c0)=""/31}, &(0x7f0000000400)="fbca874d253b4c3296b865a872e0c1b3467cbd6b5a807d6c1ac866f97718da114cec04b88d75430d911828dab3b89d061ca23b0d76c32ad4e17bb18dc6536fe802a3fea1e0664606a50ed9e4f98a75df9588345664f6617de50752080520fdcc2732178ba72f37c04153d01b159f566f27ec1569d936dc4ad6c7d8cfe691b363cc81ddadfa705145a80c4f87656971086fd4df97c71be47aabf18e0ec58063239bfecad57d25cb9e80bd66a4f24a3136912ba8a07c9f03165070c86713e32f75c856ea6939303cb3008facc816be41afa4cf2282860cad671d492a02e3369cbc8c1522d0bea45f", &(0x7f00000010c0)=""/4096, 0x8, 0x10015, 0x3, &(0x7f0000000500)}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000240)={0x5, 0x6, 0x8, 0x8a93, 0x9, "0129acbc16d09e6a"}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) sendto$phonet(r0, &(0x7f0000000280)="052d04e52c039c60eed7de5757af366f1afa02117b0d906451af6413122793df36126996e51b35af6fd2062b9b8f1e5fdbc6ce1410dc5d67ea437778135ec16bc04a23fc41760d0288a0f42f0ade5b779985c446f15a27d8723fd3709aedf496468bc064e55926ff658aa148375c6fdd31d1fad418cb98c0c3d349a96fe19ad885302d482c55b5241792b582fe8b12e831f8b829bb76b39d8b939803789b3b563d5497306d10f93c22c926a74a2063258a053b779ee41aac9aea388de64a50239df4b91db1d57dfee9c08d2fae557a1ff8b1b77f5cb59b82de38c8cdc71de7719ba39b0b96e471bb2014f7369ab75a265ba1816a90231c4e", 0xf8, 0x80, &(0x7f0000000380)={0x23, 0x7, 0x0, 0xff}, 0x10) syz_read_part_table(0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)="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", 0x1f7, 0x9}]) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000200)=0x1) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000580)=0x800, 0x4) [ 341.172532][ T2986] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -71 [ 341.180760][ T2986] usb 1-1: Firmware version (0.0) predates our first public release. [ 341.189139][ T2986] usb 1-1: Please update to version 0.2 or newer [ 341.195813][ T2986] usb 1-1: atusb_probe: initialization failed, error = -71 [ 341.203378][ T2986] atusb: probe of 1-1:0.0 failed with error -71 [ 341.293278][ T2986] usb 1-1: USB disconnect, device number 3 [ 341.388125][ T8568] IPVS: ftp: loaded support on port[0] = 21 [ 341.742147][ T8568] chnl_net:caif_netlink_parms(): no params data found 04:03:58 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0003000000410904"], 0x0) r0 = syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000040)='./file0\x00', 0x200, 0x9, &(0x7f00000016c0)=[{&(0x7f0000000080)="1477e3cd302d3733fea888f1924d6fb9a4ba05832df702aa8bf6a9df697c1d04aa8ae5d11d2536a379580f8c87d986f09dc9e131e3b0501ab9690828ba54a8f729e10902379b76bd255963546ed87b8611d2d3007446b8139e95f6aa06d0fb79c229568c2ca39bcc37695bfc18fedbb1cd276d88b1fa46d177eccc038e810bab22ccac63d815", 0x86, 0x6}, {&(0x7f0000000180)="6978d9168170c75831df5f3c1a946a83f2d1bc17c5bb40088d5b2efa962cc1da779cc29b25e3373ad218964488cca905f969e73ca6d94952adbf591d05dd04a367ccf702c5bd3b93c487a8053507e4e20970058f249641b304bc03a0d70f067a683698c89959dcac539ebb26a7e5e5c84d11fecc21db25ee2fb74143b0f549575ef4b1fdc9521c119147477f6f223bcd061a20b2b5531ce2d502a06a8437c8b3e9204327c82b518699ccb05c41ce841661926b5f0a0fb1809debfc358d123e10158bc7291753053c97bf6dfd38ff9cfebfd92374e7c50523f8543c78a7cdebdbef40652c775e1c28419b77f1e8fe9367737c1332f9ca04", 0xf7}, {&(0x7f0000000280)="5b91077be20be952de6295b1d70ded3d62b2578f075967c99f8aea7f9e310c1f95b06b9e2d47628d04ad16b2743da36ed8806ecd70600a2672d56541c42f97cb607fa2c6cddd4071c1e93b48eba5e5ffa7471c6f5f1e9db708801fa712417e3f8b10fd1a9a1989f3ef0c4368cc6dd5f23a6f13ad64f643d506fd9dad646373c8d2a5f1d98b21515cd4c96b418486e2e5ddcb8f1279a2be7c45d269c8dca0856162871ad049cc40c9a63649f8515baae27916bce0db3107ee42d95a7ecb828a3cc19ab5e9e88bff2845d264c44d4a20735724d19ba03e0ce5843273cbbd15852992ea6e787ddd", 0xe6, 0x2}, {&(0x7f0000000380)="3222863668f8f4ebf011487c415fe415d00074866ced6419dd142badb4adafb5a44f08a0b03affa4c414eb897ad853d7317042ab3a2ddda0d92c683de543fe1e3428b62665ace461579defbaa748e3eade989f86d75c1f9a97cd92d76d1c37b8b0fb9b59e28a4ee89a89a449d64c6ae01a52b6f611bff686e08f641039607fe42cd6e9c27ee1ba3260d5cafb7c677162639a96ccb20cd5498ada7a0fd81534f1ed301ccdcb0fd81631fa9aaf8288c55f8a64e688449886143e60f90f0a5a11ce12a86a436bf71f606e63827dabf34d99296ab05de14d54a8748be49b957716", 0xdf, 0x10001}, {&(0x7f0000000480)="0a6725177589a608fe3f6acbb5198398699128f61679bb4a2d38c1f798048f2a3331964cc9ffc50c646aea3a20883c1bb31c63cf160e0f41579f858ae7ff59c423ecc6ab4ba0aae542b68d18b63b0128bc181a27213946500f310d416b145152889f328b36397f77c501149115a51210d8b6ba17fb43c0d4d2dc2b06fa536f529462d2f06d69577e9897572c615d6d5ad1ec6806df882478cd57b5694ea0c64feeaa2eeffbb9ffb1f04c6b992d1c0f0195eed97712", 0xb5, 0x800}, {&(0x7f0000000540)="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", 0x1000, 0x8000}, {&(0x7f0000001540)="1e47119809bbcf9d38800f37f87622cfcba849ef636f3f4a7ab686671f21c9dc5a7b1873df900ed2b697a9af406077d87f1021aa0cc792937c77e3f0ac354f987b67e64e054b6b", 0x47, 0x8}, {&(0x7f00000015c0)="2bc519f4d209b9f56ab01f7ae66fe6954faf7e3aa31647d1133e27c032ef2feb0f022f3401c5c65e4db8e5f07ca0ac3902489e5549cd34a75a058bd0c5c402b0c8bc94552805132b0fdd75538e7151d3f3a5908bf204ee33c43d59d9c5c0f34637933afe937f475a15357f6e009c6ded683b0cce0e8852bd2ba244018e73049b374abe837291e3e6a2045a49c2ccafc1e1f972825c9878589558fb6685066ada68bc27b959e604d87f7b6eab861d1a4af213d76c4a83b0ab94", 0xb9, 0x6}, {&(0x7f0000001680)="d86e2f7fa17750d4a499ced61c1ecad74f0511545fbb81fdbb1068c1d60b2fd5bf65126da0903e849e31673d7edb1e2213c0304b", 0x34, 0x10}], 0x100000, &(0x7f0000001740)={[{'.,-&^'}, {}, {}, {'.'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@appraise='appraise'}]}) futimesat(r0, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={{0x77359400}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000001840)={'ah\x00'}, &(0x7f0000001880)=0x1e) [ 342.088237][ T8568] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.096634][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.106177][ T8568] device bridge_slave_0 entered promiscuous mode [ 342.176669][ T8568] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.184051][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.193504][ T8568] device bridge_slave_1 entered promiscuous mode [ 342.292196][ T8568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.377572][ T8568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.393156][ T56] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 342.528029][ T8568] team0: Port device team_slave_0 added [ 342.576337][ T8568] team0: Port device team_slave_1 added [ 342.628089][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.635400][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.661748][ T8568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.679140][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 342.709886][ T8568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.717121][ T8568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.743350][ T8568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.803856][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.814243][ T56] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 342.823517][ T56] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.832757][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.851401][ T8568] device hsr_slave_0 entered promiscuous mode [ 342.873804][ T8568] device hsr_slave_1 entered promiscuous mode [ 342.893556][ T8568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.901183][ T8568] Cannot create hsr debugfs directory [ 342.926120][ T56] usb 1-1: config 0 descriptor?? [ 342.973015][ T56] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 343.258269][ T2986] usb 1-1: USB disconnect, device number 4 [ 343.334975][ T8568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.371868][ T8568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.379741][ T56] Bluetooth: hci1: command 0x0409 tx timeout [ 343.414061][ T8568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.456397][ T8568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.972825][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.034559][ T2986] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 344.037588][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.051296][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.071583][ T8568] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.108669][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.119476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.128818][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.136258][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.214307][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.223415][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.233125][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.243221][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.250441][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.259526][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.270356][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.281070][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.291460][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.293093][ T2986] usb 1-1: Using ep0 maxpacket: 8 [ 344.301442][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.314572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.324813][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.334302][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.350315][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.366641][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.376113][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.402993][ T8568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.424022][ T2986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.434450][ T2986] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 344.443644][ T2986] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 344.452866][ T2986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.516062][ T2986] usb 1-1: config 0 descriptor?? [ 344.557266][ T2986] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 344.558295][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.572088][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.621984][ T8568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.726203][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.736811][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.773979][ T2986] usb 1-1: USB disconnect, device number 5 [ 344.795345][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.805705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.854823][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.864045][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.875636][ T8568] device veth0_vlan entered promiscuous mode 04:04:01 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0003000000410904"], 0x0) r0 = syz_mount_image$romfs(&(0x7f0000000000)='romfs\x00', &(0x7f0000000040)='./file0\x00', 0x200, 0x9, &(0x7f00000016c0)=[{&(0x7f0000000080)="1477e3cd302d3733fea888f1924d6fb9a4ba05832df702aa8bf6a9df697c1d04aa8ae5d11d2536a379580f8c87d986f09dc9e131e3b0501ab9690828ba54a8f729e10902379b76bd255963546ed87b8611d2d3007446b8139e95f6aa06d0fb79c229568c2ca39bcc37695bfc18fedbb1cd276d88b1fa46d177eccc038e810bab22ccac63d815", 0x86, 0x6}, {&(0x7f0000000180)="6978d9168170c75831df5f3c1a946a83f2d1bc17c5bb40088d5b2efa962cc1da779cc29b25e3373ad218964488cca905f969e73ca6d94952adbf591d05dd04a367ccf702c5bd3b93c487a8053507e4e20970058f249641b304bc03a0d70f067a683698c89959dcac539ebb26a7e5e5c84d11fecc21db25ee2fb74143b0f549575ef4b1fdc9521c119147477f6f223bcd061a20b2b5531ce2d502a06a8437c8b3e9204327c82b518699ccb05c41ce841661926b5f0a0fb1809debfc358d123e10158bc7291753053c97bf6dfd38ff9cfebfd92374e7c50523f8543c78a7cdebdbef40652c775e1c28419b77f1e8fe9367737c1332f9ca04", 0xf7}, {&(0x7f0000000280)="5b91077be20be952de6295b1d70ded3d62b2578f075967c99f8aea7f9e310c1f95b06b9e2d47628d04ad16b2743da36ed8806ecd70600a2672d56541c42f97cb607fa2c6cddd4071c1e93b48eba5e5ffa7471c6f5f1e9db708801fa712417e3f8b10fd1a9a1989f3ef0c4368cc6dd5f23a6f13ad64f643d506fd9dad646373c8d2a5f1d98b21515cd4c96b418486e2e5ddcb8f1279a2be7c45d269c8dca0856162871ad049cc40c9a63649f8515baae27916bce0db3107ee42d95a7ecb828a3cc19ab5e9e88bff2845d264c44d4a20735724d19ba03e0ce5843273cbbd15852992ea6e787ddd", 0xe6, 0x2}, {&(0x7f0000000380)="3222863668f8f4ebf011487c415fe415d00074866ced6419dd142badb4adafb5a44f08a0b03affa4c414eb897ad853d7317042ab3a2ddda0d92c683de543fe1e3428b62665ace461579defbaa748e3eade989f86d75c1f9a97cd92d76d1c37b8b0fb9b59e28a4ee89a89a449d64c6ae01a52b6f611bff686e08f641039607fe42cd6e9c27ee1ba3260d5cafb7c677162639a96ccb20cd5498ada7a0fd81534f1ed301ccdcb0fd81631fa9aaf8288c55f8a64e688449886143e60f90f0a5a11ce12a86a436bf71f606e63827dabf34d99296ab05de14d54a8748be49b957716", 0xdf, 0x10001}, {&(0x7f0000000480)="0a6725177589a608fe3f6acbb5198398699128f61679bb4a2d38c1f798048f2a3331964cc9ffc50c646aea3a20883c1bb31c63cf160e0f41579f858ae7ff59c423ecc6ab4ba0aae542b68d18b63b0128bc181a27213946500f310d416b145152889f328b36397f77c501149115a51210d8b6ba17fb43c0d4d2dc2b06fa536f529462d2f06d69577e9897572c615d6d5ad1ec6806df882478cd57b5694ea0c64feeaa2eeffbb9ffb1f04c6b992d1c0f0195eed97712", 0xb5, 0x800}, {&(0x7f0000000540)="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", 0x1000, 0x8000}, {&(0x7f0000001540)="1e47119809bbcf9d38800f37f87622cfcba849ef636f3f4a7ab686671f21c9dc5a7b1873df900ed2b697a9af406077d87f1021aa0cc792937c77e3f0ac354f987b67e64e054b6b", 0x47, 0x8}, {&(0x7f00000015c0)="2bc519f4d209b9f56ab01f7ae66fe6954faf7e3aa31647d1133e27c032ef2feb0f022f3401c5c65e4db8e5f07ca0ac3902489e5549cd34a75a058bd0c5c402b0c8bc94552805132b0fdd75538e7151d3f3a5908bf204ee33c43d59d9c5c0f34637933afe937f475a15357f6e009c6ded683b0cce0e8852bd2ba244018e73049b374abe837291e3e6a2045a49c2ccafc1e1f972825c9878589558fb6685066ada68bc27b959e604d87f7b6eab861d1a4af213d76c4a83b0ab94", 0xb9, 0x6}, {&(0x7f0000001680)="d86e2f7fa17750d4a499ced61c1ecad74f0511545fbb81fdbb1068c1d60b2fd5bf65126da0903e849e31673d7edb1e2213c0304b", 0x34, 0x10}], 0x100000, &(0x7f0000001740)={[{'.,-&^'}, {}, {}, {'.'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@audit='audit'}, {@euid_gt={'euid>'}}, {@appraise='appraise'}]}) futimesat(r0, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={{0x77359400}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000001840)={'ah\x00'}, &(0x7f0000001880)=0x1e) [ 344.946797][ T8568] device veth1_vlan entered promiscuous mode [ 345.103155][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.112993][ T2986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.140594][ T8568] device veth0_macvtap entered promiscuous mode [ 345.165841][ T8568] device veth1_macvtap entered promiscuous mode [ 345.227306][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 345.238440][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.251894][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.262700][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.271953][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.281209][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.291036][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.340063][ T8568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 345.351295][ T8568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.365737][ T8568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.380358][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.390509][ T8503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.418817][ T8568] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.427808][ T8568] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.436792][ T8568] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.446266][ T8568] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.458689][ T17] Bluetooth: hci1: command 0x041b tx timeout [ 345.484101][ T2986] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 345.760588][ T2986] usb 1-1: Using ep0 maxpacket: 8 [ 345.785781][ T8838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.793830][ T8838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.801803][ T8502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 345.875315][ T390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.883676][ T390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.894741][ T2986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.895079][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 345.904997][ T2986] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 345.905107][ T2986] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.905174][ T2986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.966099][ T2986] usb 1-1: config 0 descriptor?? [ 346.007848][ T2986] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 346.294205][ T2986] usb 1-1: USB disconnect, device number 6 04:04:03 executing program 1: syz_open_dev$ptys(0xc, 0x3, 0x1) syz_usb_connect$cdc_ncm(0x0, 0x99, &(0x7f0000000640)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "8e7087dd"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x41c96b7e, 0x4, 0x400, 0xff}, {0x6, 0x24, 0x1a, 0x100, 0x18}, [@network_terminal={0x7}, @mdlm={0x15}, @network_terminal={0x7}, @acm={0x4}]}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa}, 0x2e, &(0x7f0000000140)={0x5, 0xf, 0x2e, 0x5, [@ptm_cap={0x3}, @ext_cap={0xfffffffffffffd69}, @ss_cap={0xa}, @wireless={0xb}, @ss_cap={0xa}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4}}]}) 04:04:03 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000340)=""/187, 0xbb) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes128, 0x1, @desc1='\x00\x00\x11\x11\"\"33'}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) [ 347.033759][ T2986] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 347.484492][ T2986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.495883][ T2986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.506000][ T2986] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.516240][ T2986] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 347.526402][ T2986] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 347.532972][ T4726] Bluetooth: hci1: command 0x040f tx timeout [ 347.536210][ T2986] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 04:04:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000340)=""/187, 0xbb) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @aes128, 0x1, @desc1='\x00\x00\x11\x11\"\"33'}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)) [ 347.845016][ T2986] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 347.854460][ T2986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.862737][ T2986] usb 2-1: Product: syz [ 347.866993][ T2986] usb 2-1: SerialNumber: syz [ 348.243246][ T2986] cdc_ncm 2-1:1.0: bind() failure [ 348.257174][ T2986] cdc_ncm 2-1:1.1: bind() failure [ 348.303344][ T2986] usb 2-1: USB disconnect, device number 2 04:04:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000000c0)={"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"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x78, r6, 0x102, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x54}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x4084094) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="b6d69765051b80b19e33fb87dbd8562efdaf8364b5d1fbc3c1aec89aba1dbdc1eb56c75ca45375674ee1ad59781211c6ccc6ae2ff81f3e6f47f0adee3ab3dde2d470f167a567fbe05de34e58f6778b4fc293026e43a2504e68b745e8b7910c5c255090d853cadd43022a7ec5545eefc8398a7feff435fe4342205cf7bbf5cf811a5b4d602d9bec9eb250dae7c51708d28d920543", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r2, @ANYRESHEX, @ANYRESDEC=r1, @ANYBLOB="d2cdab3631d674a437289c0bef0a4bfcc60a94afd0939c6b3fc2f5f60891c162cc099a59a72db25bdf30977c181798a8e52491a0e5a1b68b3720f17854ae4ec9877fb3732ff25faa8e13ca9ff0d07d151f5439add163b72483ab3deb6e6e2ad0286f78e70614c4fea7ea00"], 0x1c}}, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r3, @ANYBLOB="00032cbd7000fbdbdf25670000009bbf940503bbf894d241c3c2e23a118808000300", @ANYRES32=r8, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x40000}, 0x11) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 04:04:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000001) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000140)=""/67, &(0x7f00000001c0)=0x43) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x1000000) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) [ 349.144528][ T8907] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:04:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) syz_usb_connect$uac1(0x5, 0x9a, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0xe8, 0xe0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfe01, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x6, 0x6, 0x2, 0xf9, 0x7}, @extension_unit={0xc, 0x24, 0x8, 0x4, 0x2, 0x16, "2feed0746b"}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x27, "3cd62a729a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x9, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x40, 0xe5, {0x7, 0x25, 0x1, 0x83, 0x7f, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x5, 0x7f, {0x7, 0x25, 0x1, 0x3, 0x7f}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x201, 0x8, 0x9, 0x20, 0x8, 0xff}, 0x2e, &(0x7f0000000580)={0x5, 0xf, 0x2e, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x80, 0x3, 0x9, 0x3f}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6, 0xb34c}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0xd, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1f, 0xa8, 0x3}]}, 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2801}}]}) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r1}, 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000680)) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x111600, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8bd}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb18}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8001}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x38, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_AF_SPEC={0x4, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'macvlan0\x00'}, {0x20, '-%#'}, {0x20, 'macvlan0\x00'}, {0x20, 'macvlan0\x00'}, {0x20, ',,[(!*-&'}, {0x20, '@['}, {0x20, 'macvlan0\x00'}], 0xa, "9df3b23fe199023e409fa848b1d46a53bdc9a0dca5ce042236fe11d19bb052bbdc9719ed7537b5b400c5b3dc3e71a28b53f0783fcc26281e7eb4a4389984a975712169d3d4f0f31bd1b8941dc2a547666f299366f41a5553dc284660f0600df51d2265abef756e3b7d7e34f6b1ed075d526fdbd34d7d83c06181744648f9"}, 0xc1) [ 349.614437][ T56] Bluetooth: hci1: command 0x0419 tx timeout [ 349.932409][ T8839] usb 1-1: new high-speed USB device number 7 using dummy_hcd 04:04:06 executing program 1: r0 = socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xea, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100000086dd6000000000b02b00fe8000000000000000000000000000aafe8000000000000000000000000000aa871300000000000005020000c910fe8000000000000000000000000000aa00657a605e77c5e05fd796abb87535684937714663965f415fce4a22e1dbd0385ed86f13825ef10ac0cdfb5db4bdfb33336ae3a59ce53c2dbc221e3dd9870200000000000000f5306a0e73d6e90faec896e90a16ca980cd2bebf74475ef0924b8abc0f5d73af3ec910fe80000000000000000000000000000004010000000502000004010200000000000000000000089078"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x2, 0x3, 0x20, @mcast1, @dev={0xfe, 0x80, [], 0x44}, 0x7, 0x7, 0x3, 0x8}}) [ 350.173720][ T8839] usb 1-1: Using ep0 maxpacket: 16 04:04:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r6 = dup2(r4, r5) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xd10a) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000000000004179696fd8a97cb3639a802a0a9ae7e706ad8a7f7ae0420f4bfd9e953886573728c639afaf540124edf699b9c66b94b2683c271d2408e7060e550263c1736a954fdbb2de00a3425b36de3e6bc62f40ddfe30c182e72be25a7a8fbdc74f7e737214e33aaeaca6c886e06b183ddab1a48f5da09d91b0d91d752a557c5810fbdcde6b8f919247a137deef073a43d7b6e18a5545948b9728d1737fa2bc8a7500000000"], 0x24}}, 0x0) [ 350.383063][ T8839] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 350.391992][ T8839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.402468][ T8839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.429850][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.456490][ C1] hrtimer: interrupt took 71499 ns [ 350.594838][ T8839] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.604046][ T8839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.612119][ T8839] usb 1-1: Product: syz [ 350.616508][ T8839] usb 1-1: Manufacturer: syz [ 350.621186][ T8839] usb 1-1: SerialNumber: syz [ 350.781544][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 351.082704][ T8839] usb 1-1: 0:2 : does not exist [ 351.148404][ T8839] usb 1-1: USB disconnect, device number 7 04:04:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r6 = dup2(r4, r5) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xd10a) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb, 0x1, 'multiq\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000000000004179696fd8a97cb3639a802a0a9ae7e706ad8a7f7ae0420f4bfd9e953886573728c639afaf540124edf699b9c66b94b2683c271d2408e7060e550263c1736a954fdbb2de00a3425b36de3e6bc62f40ddfe30c182e72be25a7a8fbdc74f7e737214e33aaeaca6c886e06b183ddab1a48f5da09d91b0d91d752a557c5810fbdcde6b8f919247a137deef073a43d7b6e18a5545948b9728d1737fa2bc8a7500000000"], 0x24}}, 0x0) [ 351.439438][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 351.782563][ T8839] usb 1-1: new high-speed USB device number 8 using dummy_hcd 04:04:08 executing program 1: openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/exec\x00', 0xf68, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xf44, 0x20000) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000500000000010000684400018008000500000000000c00070000000000000000000800090000000000080008000000000008000b000a697200090006006e6f6e6500000000060001000a"], 0x58}, 0x1, 0xa00000000000000}, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000001c0)=""/172, &(0x7f0000000280)=0xac) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="8400161a", @ANYRES16=r2, @ANYBLOB="090127bd7000fddbdf2502000000140002800800030000000000080006003f00000008000600030000004c000280060002004e22000005000d0001000000060002004e21000008000700750000000800040004000000080004000900000006000e004e24000006000f0009000000080008007f0000000800040008000000"], 0x84}, 0x1, 0x0, 0x0, 0x20040044}, 0x4008001) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) [ 352.052368][ T8839] usb 1-1: Using ep0 maxpacket: 16 [ 352.218222][ T8958] IPVS: persistence engine module ip_vs_pe_ [ 352.218222][ T8958] ir not found [ 352.275284][ T8839] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 352.284233][ T8839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.294699][ T8839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.306744][ T8961] IPVS: persistence engine module ip_vs_pe_ [ 352.306744][ T8961] ir not found 04:04:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00') r1 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="290000001000010400ad38dcce3c903200b1032a", @ANYRES32=0x0, @ANYRESHEX=r1], 0x44}}, 0x0) [ 352.463906][ T8839] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 352.473273][ T8839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.481350][ T8839] usb 1-1: Product: syz [ 352.485877][ T8839] usb 1-1: Manufacturer: syz [ 352.490568][ T8839] usb 1-1: SerialNumber: syz [ 352.516826][ T8967] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.530582][ T8968] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. 04:04:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "91397da7df909c1ce4a9532a4977f2756254fb9796d9abe908a1f7ffffff000000ffff000000000000641b1e61e5819709e50000"}, 0x42) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xe) 04:04:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x130b7f, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="b2a62ae468f31e3ee34fbc74756e6c30", @ANYRESDEC=0x0, @ANYBLOB="00000000000000000000000045000014000000000004"]}) [ 352.713741][ T8839] usb 1-1: can't set config #1, error -71 [ 352.741271][ T8839] usb 1-1: USB disconnect, device number 8 04:04:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400fffd}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="11038b75fcbc2ca86e102d387b70d2dc610e1cc53918adb4d092818e449497667df1035d9d30d6ee43e70628807b5b85d6cfe4623e3a2acaa3788038c422efe651ddea02ad9af4bd4d15afe2adeca1fa754ad1e460310f724b33a791e91394ee11807e07ec003388f336cb59b5dbc799568f18dd7401109024fa88edaac616ae025448500b52b4411d4d1de07453bd3b1c4183f018650a85a363bc326396ea78afbcb5c9f4bf2d7974293f9a4d45e51773c0f224e2fceb173007f89f39dca112d5ba0293d05dad551b81d3d309f75f25b33d426a55d1078d34b9221df2da927ab2eacf622e30137ce7551c114b5a35c8699d258eaa"], &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x1b, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) socket$packet(0x11, 0x3, 0x300) 04:04:09 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a300000000008000340000000000900020073797a300000000004000480040004800800034000000003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) mmap$snddsp(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1000004, 0x110, r1, 0x5000) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 353.371675][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 04:04:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400fffd}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="11038b75fcbc2ca86e102d387b70d2dc610e1cc53918adb4d092818e449497667df1035d9d30d6ee43e70628807b5b85d6cfe4623e3a2acaa3788038c422efe651ddea02ad9af4bd4d15afe2adeca1fa754ad1e460310f724b33a791e91394ee11807e07ec003388f336cb59b5dbc799568f18dd7401109024fa88edaac616ae025448500b52b4411d4d1de07453bd3b1c4183f018650a85a363bc326396ea78afbcb5c9f4bf2d7974293f9a4d45e51773c0f224e2fceb173007f89f39dca112d5ba0293d05dad551b81d3d309f75f25b33d426a55d1078d34b9221df2da927ab2eacf622e30137ce7551c114b5a35c8699d258eaa"], &(0x7f0000000100)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x1b, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) socket$packet(0x11, 0x3, 0x300) 04:04:10 executing program 1: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040054}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) r0 = syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0xd8, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x890}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000380)=0x3, 0x4) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x1000000, 0x0, 0x0, 0x824448, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') acct(&(0x7f0000000540)='./bus/file0\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 04:04:10 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a300000000008000340000000000900020073797a300000000004000480040004800800034000000003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) mmap$snddsp(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1000004, 0x110, r1, 0x5000) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 354.407277][ T9001] overlayfs: overlapping lowerdir path [ 354.462112][ T9002] overlayfs: 'file0' not a directory [ 354.516216][ T9001] overlayfs: failed to resolve './bus': -2 [ 354.626428][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 04:04:11 executing program 1: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040054}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3ca, 0x0, 0x0) r0 = syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0xd8, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x890}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000380)=0x3, 0x4) syz_mount_image$tmpfs(0x0, &(0x7f0000000800)='./file1\x00', 0x1000000, 0x0, 0x0, 0x824448, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') acct(&(0x7f0000000540)='./bus/file0\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) [ 355.307078][ T9015] overlayfs: overlapping lowerdir path 04:04:12 executing program 0: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000280)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xbd2}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd110800", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 355.506727][ T9012] overlayfs: './file0' not a directory [ 355.617452][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:04:12 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x234, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x1a0, 0x1f0, 0x1f0, 0x1a0, 0x1f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x48], 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@remote, @loopback, 0x0, 0x0, '\x00', 'rose0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x290) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c800000010001fff0000056800080000faff81413aec9ca8ed1fc14abf7ae56261c6642bf36154e7813ea763d12c6113b25f6519a4f11bc16b2f01f99aea05da355518535c371c8b22f5b3c0610b073d3d8aeb8c010470cff5d1e648f3ab29c3e621c9f295467df4e3f935f457ab7e2e17d447b4d7b753cb1ea6bfffb929fd98e6b0fbc3a1cca6d668db261c99777b92fef82397", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140012"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@loopback, @in6=@mcast1, 0x4e23, 0x8, 0x3f, 0x8, 0x2, 0x20, 0x0, 0xff, 0x0, r4}, {0xc000000, 0x5, 0x80000000, 0xffffffff00000000, 0x7, 0xcc, 0x3f, 0x1}, {0x5, 0x3f, 0x100000000, 0xc8d}, 0x2, 0x6e6bb2, 0x0, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, 0x2, @in6=@local, 0x3504, 0x6, 0x3, 0x68, 0x898, 0x91, 0x80}}, 0xe4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 355.658667][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:04:12 executing program 0: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000280)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xbd2}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd110800", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 355.995357][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 356.060229][ T9024] Dropped outbound packet type=0 04:04:12 executing program 1: r0 = getpgid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) tgkill(r0, r1, 0x3a) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="1797f96f00000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="0000000000000000000000000000000000000000000000000000000080d87d5a", 0x20, 0x200fe0}, {&(0x7f0000011600)="00000000000000000000000000000000000000000000000000000001000000001797f96f00000000001000000000000002000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc", 0xc5, 0x204fe0}], 0x0, &(0x7f0000012400)) 04:04:12 executing program 0: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000280)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xbd2}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd110800", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 356.295005][ T9029] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 356.303013][ T9029] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 356.317021][ T9029] F2FS-fs (loop1): invalid crc value [ 356.324370][ T9029] F2FS-fs (loop1): invalid crc_offset: 0 [ 356.330140][ T9029] F2FS-fs (loop1): Failed to get valid F2FS checkpoint 04:04:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x6, 0x0, 0x0, 0xfffffff6, 0xfff, 0x10503, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@id, &(0x7f0000000200)=0x10, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x82, 0x1, 0x7}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) write$P9_RREMOVE(r2, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, 0x0) r3 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0), 0x0) modify_ldt$read_default(0x2, &(0x7f0000000380)=""/218, 0xda) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000280)=0x8) eventfd(0xe76d) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000140)=0xffff, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) dup3(r1, r0, 0x80000) [ 356.630300][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:04:13 executing program 0: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f00000000c0)) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x23ff, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000280)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xbd2}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="480a838543a9914b8c53fd110800", 0xe, 0x0, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 356.975258][ T9040] IPVS: ftp: loaded support on port[0] = 21 [ 357.281870][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.305771][ T9058] ===================================================== [ 357.312746][ T9058] BUG: KMSAN: uninit-value in iptable_mangle_hook+0x8a0/0x8e0 [ 357.320207][ T9058] CPU: 1 PID: 9058 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0 [ 357.328873][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.338925][ T9058] Call Trace: [ 357.342228][ T9058] dump_stack+0x21c/0x280 [ 357.346562][ T9058] kmsan_report+0xf7/0x1e0 [ 357.350982][ T9058] __msan_warning+0x5f/0xa0 [ 357.355491][ T9058] iptable_mangle_hook+0x8a0/0x8e0 [ 357.360608][ T9058] ? iptable_mangle_net_exit+0x100/0x100 [ 357.366243][ T9058] nf_hook_slow+0x17b/0x460 [ 357.370755][ T9058] __ip_local_out+0x7a6/0x860 [ 357.375436][ T9058] ? __ip_local_out+0x860/0x860 [ 357.380286][ T9058] ip_local_out+0xa1/0x1e0 [ 357.384704][ T9058] iptunnel_xmit+0x932/0xf20 [ 357.389296][ T9058] ? kmsan_get_metadata+0x116/0x180 [ 357.394504][ T9058] udp_tunnel_xmit_skb+0x52a/0x650 [ 357.399628][ T9058] geneve_xmit+0x3908/0x3cc0 [ 357.404232][ T9058] ? geneve_stop+0x400/0x400 [ 357.408825][ T9058] xmit_one+0x2b9/0x770 [ 357.413074][ T9058] dev_hard_start_xmit+0x195/0x430 [ 357.418188][ T9058] sch_direct_xmit+0x5c7/0x1a30 [ 357.423043][ T9058] __qdisc_run+0x361/0x4a0 [ 357.427464][ T9058] __dev_queue_xmit+0x1de2/0x4520 [ 357.432496][ T9058] dev_queue_xmit+0x4b/0x60 [ 357.436998][ T9058] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 357.442280][ T9058] packet_sendmsg+0x86f9/0x99d0 [ 357.447138][ T9058] ? kmsan_get_metadata+0x116/0x180 [ 357.452340][ T9058] ? kmsan_internal_set_origin+0x85/0xc0 [ 357.457967][ T9058] ? kmsan_get_metadata+0x116/0x180 [ 357.463262][ T9058] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 357.469064][ T9058] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 357.475134][ T9058] ? aa_sk_perm+0x9a8/0xed0 [ 357.479649][ T9058] ? packet_getsockopt+0x1120/0x1120 [ 357.484932][ T9058] __sys_sendto+0x9dc/0xc80 [ 357.489452][ T9058] ? kmsan_get_metadata+0x116/0x180 [ 357.494653][ T9058] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 357.500461][ T9058] __se_sys_sendto+0x107/0x130 [ 357.505275][ T9058] __ia32_sys_sendto+0x6e/0x90 [ 357.510076][ T9058] __do_fast_syscall_32+0x102/0x160 [ 357.515284][ T9058] do_fast_syscall_32+0x6a/0xc0 [ 357.520136][ T9058] do_SYSENTER_32+0x73/0x90 [ 357.524640][ T9058] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 357.530964][ T9058] RIP: 0023:0xf7f47549 [ 357.535034][ T9058] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 357.554660][ T9058] RSP: 002b:00000000f54ff0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 357.563078][ T9058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 357.571047][ T9058] RDX: 000000000000000e RSI: 0000000000000000 RDI: 00000000200002c0 [ 357.579022][ T9058] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 357.586987][ T9058] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 357.594954][ T9058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.602918][ T9058] [ 357.605233][ T9058] Uninit was stored to memory at: [ 357.610263][ T9058] kmsan_internal_chain_origin+0xad/0x130 [ 357.615975][ T9058] __msan_chain_origin+0x57/0xa0 [ 357.620913][ T9058] iptunnel_xmit+0xbd9/0xf20 [ 357.625504][ T9058] udp_tunnel_xmit_skb+0x52a/0x650 [ 357.630618][ T9058] geneve_xmit+0x3908/0x3cc0 [ 357.635204][ T9058] xmit_one+0x2b9/0x770 [ 357.639355][ T9058] dev_hard_start_xmit+0x195/0x430 [ 357.644463][ T9058] sch_direct_xmit+0x5c7/0x1a30 [ 357.649308][ T9058] __qdisc_run+0x361/0x4a0 [ 357.653722][ T9058] __dev_queue_xmit+0x1de2/0x4520 [ 357.658741][ T9058] dev_queue_xmit+0x4b/0x60 [ 357.663254][ T9058] packet_sendmsg+0x86f9/0x99d0 [ 357.668108][ T9058] __sys_sendto+0x9dc/0xc80 [ 357.672612][ T9058] __se_sys_sendto+0x107/0x130 [ 357.677388][ T9058] __ia32_sys_sendto+0x6e/0x90 [ 357.682157][ T9058] __do_fast_syscall_32+0x102/0x160 [ 357.687356][ T9058] do_fast_syscall_32+0x6a/0xc0 [ 357.692201][ T9058] do_SYSENTER_32+0x73/0x90 [ 357.696705][ T9058] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 357.703015][ T9058] [ 357.705332][ T9058] Uninit was created at: [ 357.709594][ T9058] kmsan_internal_poison_shadow+0x5c/0xf0 [ 357.715304][ T9058] kmsan_slab_alloc+0x8d/0xe0 [ 357.719978][ T9058] __kmalloc_node_track_caller+0xc61/0x15f0 [ 357.725864][ T9058] __alloc_skb+0x309/0xae0 [ 357.730293][ T9058] alloc_skb_with_frags+0x1f3/0xc20 [ 357.735491][ T9058] sock_alloc_send_pskb+0xc73/0xe40 [ 357.740683][ T9058] packet_sendmsg+0x6aa3/0x99d0 [ 357.745528][ T9058] __sys_sendto+0x9dc/0xc80 [ 357.750025][ T9058] __se_sys_sendto+0x107/0x130 [ 357.754784][ T9058] __ia32_sys_sendto+0x6e/0x90 [ 357.759545][ T9058] __do_fast_syscall_32+0x102/0x160 [ 357.764738][ T9058] do_fast_syscall_32+0x6a/0xc0 [ 357.769586][ T9058] do_SYSENTER_32+0x73/0x90 [ 357.774087][ T9058] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 357.780397][ T9058] ===================================================== [ 357.787314][ T9058] Disabling lock debugging due to kernel taint [ 357.793459][ T9058] Kernel panic - not syncing: panic_on_warn set ... [ 357.800044][ T9058] CPU: 1 PID: 9058 Comm: syz-executor.0 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 357.810089][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.820132][ T9058] Call Trace: [ 357.823425][ T9058] dump_stack+0x21c/0x280 [ 357.827752][ T9058] panic+0x4c8/0xea7 [ 357.831653][ T9058] ? add_taint+0x17c/0x210 [ 357.836070][ T9058] kmsan_report+0x1da/0x1e0 [ 357.840574][ T9058] __msan_warning+0x5f/0xa0 [ 357.845080][ T9058] iptable_mangle_hook+0x8a0/0x8e0 [ 357.850191][ T9058] ? iptable_mangle_net_exit+0x100/0x100 [ 357.855823][ T9058] nf_hook_slow+0x17b/0x460 [ 357.860327][ T9058] __ip_local_out+0x7a6/0x860 [ 357.865003][ T9058] ? __ip_local_out+0x860/0x860 [ 357.869851][ T9058] ip_local_out+0xa1/0x1e0 [ 357.874268][ T9058] iptunnel_xmit+0x932/0xf20 [ 357.878856][ T9058] ? kmsan_get_metadata+0x116/0x180 [ 357.884059][ T9058] udp_tunnel_xmit_skb+0x52a/0x650 [ 357.889192][ T9058] geneve_xmit+0x3908/0x3cc0 [ 357.893794][ T9058] ? geneve_stop+0x400/0x400 [ 357.898379][ T9058] xmit_one+0x2b9/0x770 [ 357.902537][ T9058] dev_hard_start_xmit+0x195/0x430 [ 357.907654][ T9058] sch_direct_xmit+0x5c7/0x1a30 [ 357.912507][ T9058] __qdisc_run+0x361/0x4a0 [ 357.916924][ T9058] __dev_queue_xmit+0x1de2/0x4520 [ 357.921954][ T9058] dev_queue_xmit+0x4b/0x60 [ 357.926455][ T9058] ? netdev_core_pick_tx+0x5a0/0x5a0 [ 357.931761][ T9058] packet_sendmsg+0x86f9/0x99d0 [ 357.936614][ T9058] ? kmsan_get_metadata+0x116/0x180 [ 357.941840][ T9058] ? kmsan_internal_set_origin+0x85/0xc0 [ 357.947470][ T9058] ? kmsan_get_metadata+0x116/0x180 [ 357.952668][ T9058] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 357.958470][ T9058] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 357.964532][ T9058] ? aa_sk_perm+0x9a8/0xed0 [ 357.969043][ T9058] ? packet_getsockopt+0x1120/0x1120 [ 357.974325][ T9058] __sys_sendto+0x9dc/0xc80 [ 357.978832][ T9058] ? kmsan_get_metadata+0x116/0x180 [ 357.984028][ T9058] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 357.989832][ T9058] __se_sys_sendto+0x107/0x130 [ 357.994680][ T9058] __ia32_sys_sendto+0x6e/0x90 [ 357.999445][ T9058] __do_fast_syscall_32+0x102/0x160 [ 358.004648][ T9058] do_fast_syscall_32+0x6a/0xc0 [ 358.009497][ T9058] do_SYSENTER_32+0x73/0x90 [ 358.014000][ T9058] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 358.020318][ T9058] RIP: 0023:0xf7f47549 [ 358.024385][ T9058] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 358.044331][ T9058] RSP: 002b:00000000f54ff0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 358.052749][ T9058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 358.060716][ T9058] RDX: 000000000000000e RSI: 0000000000000000 RDI: 00000000200002c0 [ 358.068681][ T9058] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 358.076649][ T9058] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 358.084614][ T9058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 358.093466][ T9058] Kernel Offset: disabled [ 358.097778][ T9058] Rebooting in 86400 seconds..