last executing test programs: 11.026011834s ago: executing program 3 (id=1108): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf5, 0x103000) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x9c) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r10, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r11, 0x1000, &(0x7f0000000400)=""/4096}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 8.927463988s ago: executing program 3 (id=1112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="18070000000000000000000000000000851000000200000026000000000000009500007b0000000085000000130000009500000000000000c9a91d7f768667d0794d8a5d697dfbb35ed6314685461af0a004e097354e23a8f54229fac6387c90a1019abb7223220519e137c7620389f270e458f83d28a2550666eaa3cfa99b692ed8f38fbb0f340e7a7c165cb4f7f70894fe05"], &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xff12, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01, 0x0, 0x8, 0x0, 0x0}}, 0x5) gettid() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x104800, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)) setpriority(0x0, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 6.603410479s ago: executing program 0 (id=1125): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(0x0, 0x0) write$binfmt_aout(r2, 0x0, 0x8a) stat(0x0, 0x0) fchown(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r7}], 0x1, 0xfefd) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f373b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc6000002) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x34, 0x7, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000, 0x40, 0x1, 0x14000000}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) 5.330784195s ago: executing program 0 (id=1126): r0 = syz_open_dev$video(&(0x7f0000000000), 0x194, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'z.`z'}}) 5.206954191s ago: executing program 0 (id=1127): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000007240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[], 0x1a) 5.176639002s ago: executing program 4 (id=1128): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000039000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.041745428s ago: executing program 4 (id=1129): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000000) 4.811267533s ago: executing program 3 (id=1132): openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x4, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 4.810607087s ago: executing program 4 (id=1133): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000540), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x4, "e509b831"}, &(0x7f00000003c0)={0x20, 0x3, 0x1}}) 4.561769133s ago: executing program 3 (id=1135): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d49fbc0000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00010c", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x28, "70c82c3b37bf2feb02905fa092900a26f0ace71d2a2d8007bbd68ff3afeeec2f108fbc0b5d53ff54"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.399636902s ago: executing program 0 (id=1138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) bpf$BPF_LINK_UPDATE(0xf, &(0x7f0000000040)={r7, r5}, 0x10) 3.347776121s ago: executing program 2 (id=1139): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.235671228s ago: executing program 0 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) socket$alg(0x26, 0x5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r7 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000200), &(0x7f0000000300)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r7, 0x381b, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) 2.180871333s ago: executing program 0 (id=1142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="18070000000000000000000000000000851000000200000026000000000000009500007b0000000085000000130000009500000000000000c9a91d7f768667d0794d8a5d697dfbb35ed6314685461af0a004e097354e23a8f54229fac6387c90a1019abb7223220519e137c7620389f270e458f83d28a2550666eaa3cfa99b692ed8f38fbb0f340e7a7c165cb4f7f70894fe05"], &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xff12, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01, 0x0, 0x8, 0x0, 0x0}}, 0x5) gettid() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x104800, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)) setpriority(0x0, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 2.148508691s ago: executing program 2 (id=1143): unshare(0x20400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000440)="ed3e4bf3d7fa8f8452f3e788b7e9d798dc7804c393ecdc08dd00b86e84d135553da0405dcb9c995d9438b9ed9511217f355da97cec073ccc664f682ac188ad6d84a3", 0x42, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r5}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000400)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffffffe}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r2, 0x0) unshare(0x20000600) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r5, &(0x7f0000000580)) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r6, 0x81009431, &(0x7f0000000080)) 2.114705966s ago: executing program 1 (id=1144): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x110, 0xb}], 0x24}, 0x0) 1.942666359s ago: executing program 2 (id=1145): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001800)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x0, {0x0, 0xf0}, 0x2}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}}, 0x18) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = dup(r2) mmap(&(0x7f00001ac000/0x3000)=nil, 0x3000, 0x300000b, 0x20010, r0, 0xfffff000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "d2c4924dc64c3b6e6f00", 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x4, r5, &(0x7f0000000040)) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000040)={0x8, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0xffff0000], [0x10001, 0x7d], 0x3}}) 1.942167135s ago: executing program 1 (id=1146): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b5300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002860714800", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00'}) read$FUSE(r0, &(0x7f0000009800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000500)={0x78, 0x0, r3}, 0x78) 1.62504655s ago: executing program 1 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}]}, {0xffffffffffffffbf}]}]}, 0x30}}, 0x0) 1.492645826s ago: executing program 1 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_tcp(&(0x7f0000000500), 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="74d8096865ea81a672616e733d7463702c706f72743d30783030303030303030303030"]) prctl$PR_GET_NAME(0x10, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14957e, 0x0) socket(0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0xe82}) r5 = add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000480)="a64547f02d24ef452b126e6b4ee0848331045276a2dada029f6feb61fefcc850639a2d2217a4c525abf430b2ff722f5cebae237de618f52f93495a5cdaa00f30b4da4148d4e0cad2831de99f500b35d48bbf6a414bfbeb4c4612c0a6", 0x5c, 0xffffffffffffffff) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/80, 0x50, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 1.291636691s ago: executing program 4 (id=1149): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000007240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[], 0x1a) 459.367722ms ago: executing program 1 (id=1150): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 392.205225ms ago: executing program 2 (id=1151): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80880) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 290.072447ms ago: executing program 4 (id=1152): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) 261.453836ms ago: executing program 3 (id=1153): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, &(0x7f0000001480), 0x0}, 0x20) 227.653405ms ago: executing program 2 (id=1154): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x52}]}, 0x34}}, 0x0) 85.612892ms ago: executing program 3 (id=1155): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xa, @raw_data="6200e993e02150819f2d37ae10c7d35ac908b12c1444d2d5ff014827b39bfba48e77761198bc3138f1b880dfbbc1d92c4a86bd6751286e15803ad63fc0a39fa780351253c047f2d8b8039aa2e0d3afe4e8b0aa1ddcb987d55cec27d788b90ecdf6e576a545a08b3f39e45ff2437597d9c03cb397c1f380d8b2b09e312d96b7602898116bcb3c58b867ef760a4db01f38a9d594bd42081193c302ddfcf9ee52140dbf12cb015d0add28c9fb5b1f9c2e204eb39c4f78f3811862786d12e1d2d4d763695bf1c085cd31"}) 41.466249ms ago: executing program 2 (id=1156): unshare(0x20400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000440)="ed3e4bf3d7fa8f8452f3e788b7e9d798dc7804c393ecdc08dd00b86e84d135553da0405dcb9c995d9438b9ed9511217f355da97cec073ccc664f682ac188ad6d84a3", 0x42, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r5}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000400)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffffffe}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r2, 0x0) unshare(0x20000600) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r5, &(0x7f0000000580)) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r6, 0x81009431, &(0x7f0000000080)) 2.570973ms ago: executing program 1 (id=1157): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7165392f62865c8900000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x60, 0x5, 0x2, {0x2, 0x21}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x20, 0x8, 0x15, "1766cb6d3892b163fc77b9b24a839bb5d1b5e72353"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) inotify_init1(0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x3, 0x6, @multicast}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rmdir(&(0x7f0000000100)='./control\x00') 0s ago: executing program 4 (id=1158): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000000) kernel console output (not intermixed with test programs): 7104] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 168.270674][ T7112] VFS: unable to find oldfs superblock on device nullb0 [ 168.523350][ T7118] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 170.988547][ T7144] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 171.040159][ T7148] process 'syz.2.518' launched '/dev/fd/10' with NULL argv: empty string added [ 171.239353][ T7159] netlink: 3068 bytes leftover after parsing attributes in process `syz.4.522'. [ 171.286934][ T7159] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.522'. [ 171.618074][ T7172] capability: warning: `syz.4.526' uses 32-bit capabilities (legacy support in use) [ 172.225198][ T5225] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 172.233871][ T5225] Bluetooth: hci2: Injecting HCI hardware error event [ 172.249944][ T5225] Bluetooth: hci2: hardware error 0x00 [ 173.826875][ T7197] ax25_connect(): syz.1.534 uses autobind, please contact jreuter@yaina.de [ 173.843142][ T7196] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 174.009528][ T7198] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 174.090697][ T7209] input: syz1 as /devices/virtual/input/input5 [ 174.119032][ T7207] delete_channel: no stack [ 174.226389][ T7205] kvm: apic: phys broadcast and lowest prio [ 174.304204][ T5225] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 174.537984][ T7226] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.544'. [ 174.683701][ T7229] netlink: 'syz.1.546': attribute type 21 has an invalid length. [ 174.720246][ T7229] netlink: 128 bytes leftover after parsing attributes in process `syz.1.546'. [ 174.761714][ T7229] netlink: 'syz.1.546': attribute type 6 has an invalid length. [ 174.777937][ T7229] netlink: 3 bytes leftover after parsing attributes in process `syz.1.546'. [ 174.815906][ T7232] netlink: 3068 bytes leftover after parsing attributes in process `syz.0.547'. [ 174.828664][ T7232] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.547'. [ 174.854736][ T5265] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.074184][ T5265] usb 3-1: Using ep0 maxpacket: 8 [ 175.140210][ T5265] usb 3-1: New USB device found, idVendor=2040, idProduct=7080, bcdDevice=4a.2c [ 175.169864][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.179100][ T5265] usb 3-1: Product: syz [ 175.183505][ T5265] usb 3-1: Manufacturer: syz [ 175.188609][ T5265] usb 3-1: SerialNumber: syz [ 175.208476][ T5265] usb 3-1: config 0 descriptor?? [ 175.304117][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 175.516092][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 175.532754][ T5265] dvb-usb: found a 'Hauppauge Nova-T MyTV.t' in cold state, will try to load a firmware [ 175.541416][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.555832][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.584377][ T7241] delete_channel: no stack [ 175.590549][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 175.632904][ T9] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 175.670852][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.686673][ T9] usb 1-1: config 0 descriptor?? [ 175.693186][ T5265] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 175.861048][ T5265] dib0700: firmware download failed at 7 with -22 [ 175.886490][ T5265] usb 3-1: USB disconnect, device number 6 [ 175.978436][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.553'. [ 176.660363][ T5225] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 176.670120][ T5225] Bluetooth: hci4: Injecting HCI hardware error event [ 176.678715][ T5225] Bluetooth: hci4: hardware error 0x00 [ 176.721425][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.778563][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.840472][ T7261] netlink: 'syz.2.557': attribute type 29 has an invalid length. [ 177.942084][ T7265] netlink: 'syz.4.559': attribute type 21 has an invalid length. [ 177.960296][ T7265] netlink: 128 bytes leftover after parsing attributes in process `syz.4.559'. [ 177.985148][ T7265] netlink: 'syz.4.559': attribute type 6 has an invalid length. [ 178.019854][ T7265] netlink: 3 bytes leftover after parsing attributes in process `syz.4.559'. [ 178.042814][ T7261] netlink: 'syz.2.557': attribute type 29 has an invalid length. [ 178.085911][ T7270] netlink: 'syz.2.557': attribute type 29 has an invalid length. [ 178.125696][ T7272] netlink: 'syz.2.557': attribute type 29 has an invalid length. [ 178.257675][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 178.276533][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 178.311603][ T9] usb 1-1: USB disconnect, device number 6 [ 178.979287][ T5225] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 179.577008][ T7300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.571'. [ 179.601219][ T7303] netlink: 'syz.2.573': attribute type 21 has an invalid length. [ 179.629700][ T7303] netlink: 128 bytes leftover after parsing attributes in process `syz.2.573'. [ 179.652800][ T7303] netlink: 'syz.2.573': attribute type 6 has an invalid length. [ 179.667027][ T7303] netlink: 3 bytes leftover after parsing attributes in process `syz.2.573'. [ 179.844756][ T7301] kvm: apic: phys broadcast and lowest prio [ 180.104234][ T5269] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.224138][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.296182][ T5269] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 180.307278][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.319325][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.331741][ T5269] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 180.346273][ T5269] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 180.355837][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.366799][ T5269] usb 2-1: config 0 descriptor?? [ 180.416703][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.428472][ T9] usb 1-1: config 0 has no interfaces? [ 180.442269][ T9] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 180.462116][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.487369][ T9] usb 1-1: config 0 descriptor?? [ 180.547533][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 180.555163][ T7329] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 180.563450][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 180.788040][ T5269] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 180.796496][ T5269] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 180.804703][ T5269] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 180.812442][ T5269] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 180.820052][ T5269] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 180.828221][ T5269] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 180.836729][ T5269] thrustmaster 0003:044F:B653.000B: unknown main item tag 0x0 [ 180.846705][ T5269] thrustmaster 0003:044F:B653.000B: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.1-1/input0 [ 180.858531][ T5269] thrustmaster 0003:044F:B653.000B: no inputs found [ 181.034525][ T7312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.045491][ T7312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.290655][ T7337] syz.4.585: attempt to access beyond end of device [ 183.290655][ T7337] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 183.291206][ T7337] syz.4.585: attempt to access beyond end of device [ 183.291206][ T7337] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 183.291239][ T7337] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 183.291561][ T7337] syz.4.585: attempt to access beyond end of device [ 183.291561][ T7337] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 183.291592][ T7337] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 183.291611][ T7337] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 183.291624][ T7337] UDF-fs: Scanning with blocksize 512 failed [ 183.292870][ T7337] syz.4.585: attempt to access beyond end of device [ 183.292870][ T7337] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 183.293067][ T7337] syz.4.585: attempt to access beyond end of device [ 183.293067][ T7337] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 183.293092][ T7337] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 183.293258][ T7337] syz.4.585: attempt to access beyond end of device [ 183.293258][ T7337] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 183.293283][ T7337] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 183.293300][ T7337] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 183.293313][ T7337] UDF-fs: Scanning with blocksize 1024 failed [ 183.294637][ T7337] syz.4.585: attempt to access beyond end of device [ 183.294637][ T7337] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 183.294805][ T7337] syz.4.585: attempt to access beyond end of device [ 183.294805][ T7337] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 183.294829][ T7337] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 183.294957][ T7337] syz.4.585: attempt to access beyond end of device [ 183.294957][ T7337] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 183.294981][ T7337] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 183.294998][ T7337] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 183.295010][ T7337] UDF-fs: Scanning with blocksize 2048 failed [ 183.295438][ T7337] syz.4.585: attempt to access beyond end of device [ 183.295438][ T7337] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 183.295589][ T7337] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 183.295710][ T7337] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 183.295728][ T7337] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 183.295741][ T7337] UDF-fs: Scanning with blocksize 4096 failed [ 183.295751][ T7337] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 183.581765][ T5227] Bluetooth: hci5: command 0x1003 tx timeout [ 183.644129][ T5225] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 183.798303][ T5264] usb 1-1: USB disconnect, device number 7 [ 183.989031][ T7348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.589'. [ 185.171965][ T5264] usb 2-1: USB disconnect, device number 9 [ 185.445225][ T7374] netlink: 'syz.4.600': attribute type 21 has an invalid length. [ 185.455487][ T7374] netlink: 132 bytes leftover after parsing attributes in process `syz.4.600'. [ 185.554752][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 185.570561][ T5269] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 185.804319][ T7378] x_tables: ip_tables: osf match: only valid for protocol 6 [ 185.825949][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.837522][ T5269] usb 1-1: Using ep0 maxpacket: 16 [ 185.843324][ T9] usb 3-1: config 0 has no interfaces? [ 185.849627][ T9] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 185.859621][ T5269] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 185.884061][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.907019][ T5269] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.926233][ T9] usb 3-1: config 0 descriptor?? [ 185.934617][ T5269] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 185.961884][ T5269] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.990071][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.045574][ T5269] usb 1-1: Product: syz [ 186.049967][ T5269] usb 1-1: Manufacturer: syz [ 186.104004][ T5269] usb 1-1: SerialNumber: syz [ 189.806235][ T5269] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 189.824102][ T5269] usb 1-1: 2:1 : sample bitwidth 254 in over sample bytes 0 [ 189.831550][ T5269] usb 1-1: 2:1 : unsupported sample bitwidth 254 in 0 bytes [ 189.850734][ T5271] usb 3-1: USB disconnect, device number 7 [ 189.897872][ T5269] usb 1-1: USB disconnect, device number 8 [ 191.974026][ T29] audit: type=1326 audit(1722396806.515:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 191.999833][ T7393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'. [ 192.029293][ T29] audit: type=1326 audit(1722396806.515:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 192.133144][ T29] audit: type=1326 audit(1722396806.555:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 192.144071][ T5215] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.167526][ T29] audit: type=1326 audit(1722396806.555:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 192.209575][ T29] audit: type=1326 audit(1722396806.555:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 192.250509][ T29] audit: type=1326 audit(1722396806.555:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 192.345525][ T29] audit: type=1326 audit(1722396806.555:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 192.377253][ T29] audit: type=1326 audit(1722396806.555:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 192.396861][ T5215] usb 1-1: Using ep0 maxpacket: 32 [ 192.398919][ T29] audit: type=1326 audit(1722396806.555:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 192.446018][ T5215] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.469159][ T5215] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 192.487008][ T5215] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 192.522108][ T5215] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.524013][ T29] audit: type=1326 audit(1722396806.555:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7397 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb72d1773b9 code=0x7ffc0000 [ 192.541473][ T5215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.573169][ T5215] usb 1-1: SerialNumber: syz [ 192.589262][ T7395] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.755197][ T5267] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 192.794639][ T7425] Bluetooth: MGMT ver 1.23 [ 192.810845][ T7395] binder: Bad value for 'stats' [ 192.823128][ T7425] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 192.835854][ T7395] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.946697][ T5267] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.963108][ T5267] usb 5-1: config 0 has no interfaces? [ 192.978939][ T5267] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 193.001337][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.014472][ T5267] usb 5-1: config 0 descriptor?? [ 193.196114][ T5265] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.408376][ T5265] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.448079][ T5265] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.469172][ T5215] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 193.487800][ T5265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 193.512838][ T5215] usb 1-1: USB disconnect, device number 9 [ 193.524066][ T5265] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 193.540592][ T5265] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 193.561483][ T5265] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 193.581313][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.598363][ T5265] usb 3-1: Product: syz [ 193.604347][ T5265] usb 3-1: Manufacturer: syz [ 193.609212][ T5265] usb 3-1: SerialNumber: syz [ 193.620326][ T5265] usb 3-1: config 0 descriptor?? [ 193.639092][ T5265] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 193.661406][ T5265] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 193.674019][ T5265] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 193.819516][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.627'. [ 193.945992][ T5265] usb 3-1: USB disconnect, device number 8 [ 193.967014][ T5265] garmin_gps 3-1:0.0: device disconnected [ 194.472043][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.694740][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 194.765107][ T7475] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 194.766734][ T7479] netlink: 'syz.2.638': attribute type 3 has an invalid length. [ 194.776225][ T7475] bond1: (slave gre1): Error -95 calling set_mac_address [ 194.818972][ T7480] vlan3: entered promiscuous mode [ 194.827930][ T7480] bond1: (slave vlan3): Opening slave failed [ 195.114078][ T5264] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.324270][ T5264] usb 3-1: Using ep0 maxpacket: 32 [ 195.336543][ T5264] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.353414][ T5264] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 195.376117][ T5264] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 195.391663][ T5264] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.400846][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 195.408869][ T5264] usb 3-1: SerialNumber: syz [ 195.416899][ T7482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.448436][ T5265] usb 5-1: USB disconnect, device number 14 [ 195.506509][ T5267] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.650992][ T5269] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 195.690116][ T7482] binder: Bad value for 'stats' [ 195.834423][ T5267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.924547][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.974899][ T7482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.994703][ T5269] usb 1-1: Using ep0 maxpacket: 16 [ 196.000757][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 196.054346][ T5269] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 196.071566][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 196.129634][ T5269] usb 1-1: config 0 has no interface number 0 [ 196.171726][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 196.195004][ T5269] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=ee.61 [ 196.235573][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.253320][ T5269] usb 1-1: Product: syz [ 196.254359][ T5267] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 196.274000][ T5269] usb 1-1: Manufacturer: syz [ 196.280637][ T5269] usb 1-1: SerialNumber: syz [ 196.285855][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.293852][ T5267] usb 4-1: Product: syz [ 196.301312][ T5269] usb 1-1: config 0 descriptor?? [ 196.306803][ T5267] usb 4-1: Manufacturer: syz [ 196.314368][ T5269] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 196.322322][ T5269] pctv452e: pctv452e_power_ctrl: 1 [ 196.322322][ T5269] [ 196.330207][ T5267] usb 4-1: SerialNumber: syz [ 196.336780][ T5269] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 196.336780][ T5269] [ 196.348183][ T5267] usb 4-1: config 0 descriptor?? [ 196.359471][ T5269] dvb-usb: bulk message failed: -22 (5/0) [ 196.367380][ T5267] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 196.376725][ T5267] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 196.384991][ T5267] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 196.413874][ T5269] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-22) [ 196.450524][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 196.497706][ T7515] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 196.509066][ T7515] bond2: (slave gre1): Error -95 calling set_mac_address [ 196.527549][ T5266] usb 1-1: USB disconnect, device number 10 [ 196.561396][ T7517] vlan3: entered promiscuous mode [ 196.569840][ T7517] bond2: (slave vlan3): Opening slave failed [ 196.632810][ T5265] usb 4-1: USB disconnect, device number 9 [ 196.640936][ T5265] garmin_gps 4-1:0.0: device disconnected [ 196.663713][ T5264] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 196.678208][ T5264] usb 3-1: USB disconnect, device number 9 [ 197.080310][ T7527] Bluetooth: MGMT ver 1.23 [ 197.955306][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 198.943861][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 199.006034][ T7560] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 199.019358][ T7560] bond1: (slave gre1): Error -95 calling set_mac_address [ 199.837777][ T7563] vlan2: entered promiscuous mode [ 199.905690][ T7563] bond1: (slave vlan2): Opening slave failed [ 200.334490][ T5265] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 200.534124][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 200.549693][ T5265] usb 1-1: Using ep0 maxpacket: 16 [ 200.571916][ T5265] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 200.619964][ T5265] usb 1-1: config 0 has no interface number 0 [ 200.651629][ T5265] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=ee.61 [ 200.822132][ T7588] bio_check_eod: 2 callbacks suppressed [ 200.822174][ T7588] syz.2.674: attempt to access beyond end of device [ 200.822174][ T7588] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 200.842931][ T7588] syz.2.674: attempt to access beyond end of device [ 200.842931][ T7588] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 200.856137][ T7588] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 200.869105][ T7588] syz.2.674: attempt to access beyond end of device [ 200.869105][ T7588] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 200.882978][ T7588] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 200.892703][ T7588] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 200.923235][ T7588] UDF-fs: Scanning with blocksize 512 failed [ 200.933360][ T7588] syz.2.674: attempt to access beyond end of device [ 200.933360][ T7588] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 200.947491][ T7588] syz.2.674: attempt to access beyond end of device [ 200.947491][ T7588] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 200.960569][ T7588] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 200.971332][ T7588] syz.2.674: attempt to access beyond end of device [ 200.971332][ T7588] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 200.984483][ T7588] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 200.994143][ T7588] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 201.001855][ T7588] UDF-fs: Scanning with blocksize 1024 failed [ 201.011654][ T7588] syz.2.674: attempt to access beyond end of device [ 201.011654][ T7588] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 201.025355][ T7588] syz.2.674: attempt to access beyond end of device [ 201.025355][ T7588] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 201.038469][ T7588] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 201.050904][ T7588] syz.2.674: attempt to access beyond end of device [ 201.050904][ T7588] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 201.064058][ T7588] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 201.074032][ T7588] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 201.081869][ T7588] UDF-fs: Scanning with blocksize 2048 failed [ 201.088540][ T7588] syz.2.674: attempt to access beyond end of device [ 201.088540][ T7588] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 201.101566][ T7588] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 201.107409][ T5265] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.111683][ T7588] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 201.111707][ T7588] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 201.111721][ T7588] UDF-fs: Scanning with blocksize 4096 failed [ 201.111731][ T7588] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 201.164681][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 201.226847][ T5265] usb 1-1: Product: syz [ 201.231172][ T5265] usb 1-1: Manufacturer: syz [ 201.235895][ T5265] usb 1-1: SerialNumber: syz [ 201.243516][ T5265] usb 1-1: config 0 descriptor?? [ 201.261563][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 201.271816][ T5265] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 201.290312][ T46] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 201.318706][ T5265] pctv452e: pctv452e_power_ctrl: 1 [ 201.318706][ T5265] [ 201.348633][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.380695][ T5265] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 201.380695][ T5265] [ 201.402342][ T5265] dvb-usb: bulk message failed: -22 (5/0) [ 201.419506][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.448041][ T7593] ufs: Invalid option: "" or missing value [ 201.451144][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.472292][ T7597] xt_TCPMSS: Only works on TCP SYN packets [ 201.484172][ T7593] ufs: wrong mount options [ 201.494005][ T46] usb 5-1: SerialNumber: syz [ 201.500916][ T5265] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-22) [ 201.551146][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 201.564750][ T7575] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.603850][ T5265] usb 1-1: USB disconnect, device number 11 [ 201.604428][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 201.674434][ T7595] netlink: 'syz.1.678': attribute type 6 has an invalid length. [ 201.820467][ T7575] binder: Bad value for 'stats' [ 201.871134][ T7575] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 201.981836][ T5225] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.994237][ T5225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.002241][ T5225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.014190][ T5215] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 202.020238][ T5225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.034537][ T5225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 202.042499][ T5225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.111613][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 202.111630][ T29] audit: type=1326 audit(1722396816.655:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7602 comm="syz.1.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd40d1773b9 code=0x0 [ 202.216403][ T5215] usb 4-1: Using ep0 maxpacket: 8 [ 202.234206][ T5215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.250775][ T5215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 202.262311][ T5215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 202.275427][ T5215] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 202.285133][ T5215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.293202][ T5215] usb 4-1: Product: syz [ 202.302115][ T5215] usb 4-1: Manufacturer: syz [ 202.307135][ T5215] usb 4-1: SerialNumber: syz [ 202.324904][ T5215] usb 4-1: config 0 descriptor?? [ 202.335137][ T5215] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 202.345349][ T5215] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 10 is not bulk. [ 202.355810][ T5215] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 15 is not bulk. [ 202.366871][ T5215] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 202.414501][ T7013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.448063][ T7610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 202.493215][ T7611] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 202.504882][ T7611] bond1: (slave gre1): Error -95 calling set_mac_address [ 202.505902][ T46] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 202.532309][ T46] usb 5-1: USB disconnect, device number 15 [ 202.549045][ T5215] usb 4-1: USB disconnect, device number 10 [ 202.579220][ T7013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.606597][ T7610] vlan2: entered promiscuous mode [ 202.620601][ T7610] bond1: (slave vlan2): Opening slave failed [ 202.676841][ T7013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.701864][ T7600] chnl_net:caif_netlink_parms(): no params data found [ 202.760050][ T7013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.876395][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.883601][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.894569][ T7600] bridge_slave_0: entered allmulticast mode [ 202.915780][ T7600] bridge_slave_0: entered promiscuous mode [ 202.935593][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.953279][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.961138][ T7600] bridge_slave_1: entered allmulticast mode [ 202.975460][ T7600] bridge_slave_1: entered promiscuous mode [ 203.086972][ T7600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.121665][ T7600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.306905][ T7013] bridge_slave_1: left allmulticast mode [ 203.312705][ T7013] bridge_slave_1: left promiscuous mode [ 203.322769][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.327999][ T7631] xt_TCPMSS: Only works on TCP SYN packets [ 203.347202][ T7013] bridge_slave_0: left allmulticast mode [ 203.352872][ T7013] bridge_slave_0: left promiscuous mode [ 203.367107][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.868723][ T7013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.883679][ T7013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.899017][ T7013] bond0 (unregistering): Released all slaves [ 203.913403][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 203.925049][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 203.935462][ T7634] netlink: 'syz.3.691': attribute type 6 has an invalid length. [ 203.950447][ T7600] team0: Port device team_slave_0 added [ 203.976341][ T7600] team0: Port device team_slave_1 added [ 204.144205][ T5227] Bluetooth: hci5: command tx timeout [ 204.175830][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.209880][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.235842][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.263521][ T7600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.412802][ T7600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.430485][ T7600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.456440][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.479265][ T7600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.571529][ T7672] syz.0.704 (7672): attempted to duplicate a private mapping with mremap. This is not supported. [ 204.666748][ T7670] exFAT-fs (nullb0): invalid boot record signature [ 204.676591][ T7670] exFAT-fs (nullb0): failed to read boot sector [ 204.684032][ T46] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 204.691860][ T7670] exFAT-fs (nullb0): failed to recognize exfat type [ 204.819619][ T7600] hsr_slave_0: entered promiscuous mode [ 204.828296][ T7600] hsr_slave_1: entered promiscuous mode [ 204.841056][ T7600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.849207][ T7600] Cannot create hsr debugfs directory [ 204.862028][ T7013] hsr_slave_0: left promiscuous mode [ 204.868027][ T7013] hsr_slave_1: left promiscuous mode [ 204.874061][ T7013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.882402][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.890938][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 204.898197][ T7013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.910648][ T7013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.920201][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.937212][ T46] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 204.947996][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.958898][ T7013] veth0_macvtap: left promiscuous mode [ 204.962568][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.976862][ T7013] veth1_vlan: left promiscuous mode [ 204.982414][ T7013] veth0_vlan: left promiscuous mode [ 205.005517][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.030304][ T46] usb 5-1: SerialNumber: syz [ 205.046617][ T7666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.302463][ T7666] binder: Bad value for 'stats' [ 205.353372][ T7666] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.524599][ T7684] binder: 7681:7684 ioctl c0306201 0 returned -14 [ 205.762978][ T7013] team0 (unregistering): Port device team_slave_1 removed [ 205.808486][ T7013] team0 (unregistering): Port device team_slave_0 removed [ 205.995241][ T46] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 206.043730][ T46] usb 5-1: USB disconnect, device number 16 [ 206.265938][ T5227] Bluetooth: hci5: command tx timeout [ 207.166577][ T7694] ufs: Invalid option: "" or missing value [ 207.172617][ T7694] ufs: wrong mount options [ 207.529904][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.712'. [ 207.885947][ T7709] exFAT-fs (nullb0): invalid boot record signature [ 207.892591][ T7709] exFAT-fs (nullb0): failed to read boot sector [ 207.932931][ T7709] exFAT-fs (nullb0): failed to recognize exfat type [ 208.305253][ T5227] Bluetooth: hci5: command tx timeout [ 208.980616][ T7600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.996211][ T29] audit: type=1326 audit(1722397079.521:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7719 comm="syz.3.719" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6805773b9 code=0x0 [ 209.036654][ T7600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.098949][ T7600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.132922][ T7600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.414236][ T5269] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 209.660177][ T5269] usb 4-1: config 0 has no interfaces? [ 209.728704][ T5269] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 209.876022][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.948623][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.975467][ T7600] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.977694][ T5269] usb 4-1: config 0 descriptor?? [ 209.987915][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.995069][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.065411][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.072585][ T5269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.101933][ T29] audit: type=1326 audit(1722397080.631:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7742 comm="syz.1.727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd40d1773b9 code=0x0 [ 210.384363][ T5227] Bluetooth: hci5: command tx timeout [ 210.389679][ T7754] exFAT-fs (nullb0): invalid boot record signature [ 210.389718][ T7754] exFAT-fs (nullb0): failed to read boot sector [ 210.389728][ T7754] exFAT-fs (nullb0): failed to recognize exfat type [ 210.401452][ T7600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.538592][ T7600] veth0_vlan: entered promiscuous mode [ 210.573104][ T7600] veth1_vlan: entered promiscuous mode [ 210.681901][ T7600] veth0_macvtap: entered promiscuous mode [ 210.696149][ T7600] veth1_macvtap: entered promiscuous mode [ 210.710782][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.710804][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.710815][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.710828][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.710839][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.710852][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.710863][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.710875][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.710885][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.710898][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.712394][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.718763][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.718783][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.718794][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.718806][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.718817][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.718829][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.718840][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.718852][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.718860][ T7600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.718873][ T7600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.720292][ T7600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.727856][ T7600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.979051][ T7600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.987810][ T7600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.996542][ T7600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.085635][ T9] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 211.238391][ T7010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.253309][ T7010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.280123][ T7004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.761724][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.985489][ T46] usb 4-1: USB disconnect, device number 11 [ 211.998395][ T7004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.328329][ T7768] 9pnet_fd: Insufficient options for proto=fd [ 212.354768][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.365527][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 212.376815][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 212.391526][ T9] usb 5-1: string descriptor 0 read error: -22 [ 212.398749][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.412654][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.479656][ T7770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.731'. [ 212.501423][ T7759] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 212.508839][ T7759] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 212.517134][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 214.114509][ T5271] usb 5-1: USB disconnect, device number 17 [ 214.367042][ T7790] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 216.594046][ T8] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 216.948303][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.638271][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.674112][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 217.695125][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 217.716677][ T8] usb 4-1: string descriptor 0 read error: -22 [ 217.723204][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.741421][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.766590][ T7813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 217.774130][ T7813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 217.784198][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 217.930878][ T5271] usb 4-1: USB disconnect, device number 12 [ 218.001055][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.751'. [ 219.988819][ T7877] 9pnet_fd: Insufficient options for proto=fd [ 220.048151][ T7880] syz.4.766[7880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.048300][ T7880] syz.4.766[7880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.129482][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 222.090399][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.769'. [ 224.199176][ T29] audit: type=1400 audit(1722397094.741:142): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=7917 comm="syz.1.778" daddr=224.0.0.1 netif=wpan0 [ 224.293311][ T7921] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 224.305611][ T7921] bridge1: entered allmulticast mode [ 225.432351][ T7928] syz.0.780[7928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.432520][ T7928] syz.0.780[7928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.837437][ T29] audit: type=1326 audit(1722397096.371:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 225.936795][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 225.998212][ T29] audit: type=1326 audit(1722397096.531:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 226.012080][ T7947] pimreg: entered allmulticast mode [ 226.050865][ T29] audit: type=1326 audit(1722397096.531:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7941 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 226.075438][ T7947] pimreg: left allmulticast mode [ 226.202579][ T7963] hugetlbfs: syz.1.792 (7963): Using mlock ulimits for SHM_HUGETLB is obsolete [ 226.398857][ T7968] netlink: 'syz.0.796': attribute type 1 has an invalid length. [ 227.041170][ T7969] tty tty28: ldisc open failed (-12), clearing slot 27 [ 227.225974][ T29] audit: type=1400 audit(1722397097.771:146): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=7966 comm="syz.1.795" daddr=224.0.0.1 netif=wpan0 [ 227.372854][ T7978] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 227.394107][ T7978] bridge2: entered allmulticast mode [ 229.649035][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.791164][ T5269] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 230.208142][ T5213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.235880][ T5213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.245170][ T5213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.253484][ T5213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.260947][ T5213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.430087][ T7006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.550522][ T5269] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 230.570775][ T29] audit: type=1400 audit(1722397101.111:147): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8015 comm="syz.1.815" daddr=224.0.0.1 netif=wpan0 [ 230.572820][ T5269] usb 5-1: Dual-Role OTG device on HNP port [ 230.631202][ T5269] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 230.652621][ T5269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.669625][ T7006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.681033][ T5269] usb 5-1: Product: syz [ 230.686034][ T5269] usb 5-1: Manufacturer: syz [ 230.690660][ T5269] usb 5-1: SerialNumber: syz [ 230.721591][ T8026] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 230.745706][ T5269] usb 5-1: config 0 descriptor?? [ 230.757232][ T8026] bridge3: entered allmulticast mode [ 230.777950][ T5269] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 230.839078][ T7006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.019398][ T7006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.441267][ T7006] bridge_slave_1: left allmulticast mode [ 231.457579][ T7006] bridge_slave_1: left promiscuous mode [ 231.463360][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.496414][ T7006] bridge_slave_0: left allmulticast mode [ 231.510954][ T7006] bridge_slave_0: left promiscuous mode [ 231.517881][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.844965][ T5213] Bluetooth: hci5: command 0x0405 tx timeout [ 232.306139][ T5213] Bluetooth: hci1: command tx timeout [ 232.477000][ T46] usb 5-1: USB disconnect, device number 18 [ 233.033282][ T7006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.111659][ T7006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.131088][ T7006] bond0 (unregistering): Released all slaves [ 233.159491][ T7006] bond1 (unregistering): Released all slaves [ 233.256828][ T8063] dvmrp0: entered allmulticast mode [ 234.092486][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 234.120853][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.833'. [ 234.384573][ T5213] Bluetooth: hci1: command tx timeout [ 234.652723][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.737793][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.833367][ T8011] bridge_slave_0: entered allmulticast mode [ 234.918685][ T8011] bridge_slave_0: entered promiscuous mode [ 234.995702][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.013189][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.036422][ T8011] bridge_slave_1: entered allmulticast mode [ 235.064972][ T8011] bridge_slave_1: entered promiscuous mode [ 235.252932][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.264067][ T5266] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 235.294139][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.395526][ T8011] team0: Port device team_slave_0 added [ 235.427509][ T7006] hsr_slave_0: left promiscuous mode [ 235.447993][ T7006] hsr_slave_1: left promiscuous mode [ 235.484333][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.485753][ T5266] usb 3-1: config 0 has no interfaces? [ 235.507732][ T5266] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 235.519457][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.536503][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.536777][ T5266] usb 3-1: Product: syz [ 235.547857][ T5266] usb 3-1: Manufacturer: syz [ 235.552465][ T5266] usb 3-1: SerialNumber: syz [ 235.561196][ T5266] usb 3-1: config 0 descriptor?? [ 235.578507][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.586475][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.638822][ T7006] veth1_macvtap: left promiscuous mode [ 235.645579][ T7006] veth0_macvtap: left promiscuous mode [ 235.651417][ T7006] veth1_vlan: left promiscuous mode [ 235.657121][ T7006] veth0_vlan: left promiscuous mode [ 236.464091][ T5213] Bluetooth: hci1: command tx timeout [ 237.163024][ T7006] team0 (unregistering): Port device team_slave_1 removed [ 237.241894][ T7006] team0 (unregistering): Port device team_slave_0 removed [ 237.624933][ T8011] team0: Port device team_slave_1 added [ 237.640112][ T8081] vlan2: entered promiscuous mode [ 237.681789][ T8107] dvmrp0: entered allmulticast mode [ 237.694148][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.845'. [ 237.845343][ T46] usb 3-1: USB disconnect, device number 10 [ 237.963647][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.991224][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.112028][ T8011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.124634][ T8122] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 238.125192][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.140027][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.237174][ T8011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.668654][ T5213] Bluetooth: hci1: command tx timeout [ 239.001297][ T8011] hsr_slave_0: entered promiscuous mode [ 239.036850][ T8011] hsr_slave_1: entered promiscuous mode [ 239.082928][ T8011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.093250][ T29] audit: type=1326 audit(1722397109.631:148): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=_ pid=8119 comm="syz.3.849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6805773b9 code=0x0 [ 239.103728][ T8011] Cannot create hsr debugfs directory [ 240.144170][ T5271] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 240.914793][ T5271] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 240.933554][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.943040][ T5271] usb 3-1: Product: syz [ 240.957803][ T5271] usb 3-1: Manufacturer: syz [ 240.970124][ T5271] usb 3-1: SerialNumber: syz [ 240.986494][ T5271] usb 3-1: config 0 descriptor?? [ 241.211393][ T5271] usb-storage 3-1:0.0: USB Mass Storage device detected [ 241.298612][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.858'. [ 241.415979][ T8011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.428181][ T9] usb 3-1: USB disconnect, device number 11 [ 241.445471][ T8011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.459289][ T8011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.466642][ T5269] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 241.483742][ T8011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.655244][ T8157] program syz.3.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.297888][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.319736][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.371075][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.378252][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.414224][ T5269] usb 5-1: Using ep0 maxpacket: 16 [ 242.417843][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.424713][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.426494][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.441963][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.457921][ T5269] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 242.474075][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.488630][ T5269] usb 5-1: config 0 descriptor?? [ 242.671227][ T8161] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 243.031077][ T5269] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 243.047400][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 243.670939][ T5271] usb 5-1: USB disconnect, device number 19 [ 243.688964][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.866'. [ 243.725771][ T8178] dvmrp0: entered allmulticast mode [ 243.763020][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.842805][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.868'. [ 243.894182][ T8011] veth0_vlan: entered promiscuous mode [ 243.931351][ T8011] veth1_vlan: entered promiscuous mode [ 243.997232][ T8011] veth0_macvtap: entered promiscuous mode [ 244.019812][ T8011] veth1_macvtap: entered promiscuous mode [ 244.062390][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.073767][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.088387][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.333561][ T8194] program syz.3.871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.690446][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.933648][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.971092][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.983969][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.994478][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.004871][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.015379][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.027260][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.096601][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.129028][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.154092][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.172798][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.196417][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.210018][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.877'. [ 245.219627][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.229991][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.240954][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.251380][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.266088][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.296094][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.333256][ T8011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.353832][ T8011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.363589][ T8011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.388139][ T8011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.513578][ T8211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.879'. [ 245.530943][ T7004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.538893][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 245.540596][ T7004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.624595][ T7013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.643245][ T7013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.746764][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 245.763609][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.784245][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 245.807197][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 245.824399][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 245.842843][ T9] usb 5-1: SerialNumber: syz [ 245.872366][ T9] usb 5-1: config 0 descriptor?? [ 246.164177][ T9] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 246.171528][ T9] usb 5-1: No valid video chain found. [ 246.180215][ T9] usb 5-1: USB disconnect, device number 20 [ 247.070642][ T8243] btrfs: Unknown parameter '(/%' [ 247.370043][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.888'. [ 247.967683][ T5264] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 248.855760][ T5264] usb 2-1: Using ep0 maxpacket: 16 [ 248.874066][ T5225] Bluetooth: hci1: command 0x0405 tx timeout [ 248.920410][ T5264] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 248.947085][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.080079][ T5264] usb 2-1: Product: syz [ 249.088155][ T5264] usb 2-1: Manufacturer: syz [ 249.093010][ T5264] usb 2-1: SerialNumber: syz [ 249.105390][ T5264] usb 2-1: config 0 descriptor?? [ 249.115925][ T5264] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 249.317040][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.327354][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.335541][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.361236][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.381359][ T5225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 249.391048][ T5225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.477532][ T8274] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 249.944605][ T5264] gp8psk: usb in 146 operation failed. [ 249.953615][ T5264] gp8psk: failed to get FW version [ 249.988939][ T5264] gp8psk: usb in 149 operation failed. [ 250.029936][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.902'. [ 250.030657][ T5264] gp8psk: failed to get FPGA version [ 250.053804][ T7006] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.421183][ T5264] gp8psk: usb out operation failed. [ 250.434062][ T5264] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-22) [ 250.438714][ T8271] chnl_net:caif_netlink_parms(): no params data found [ 250.443574][ T5264] dvb_usb_gp8psk 2-1:0.0: probe with driver dvb_usb_gp8psk failed with error -22 [ 250.492584][ T5264] usb 2-1: USB disconnect, device number 10 [ 250.549101][ T7006] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.606589][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 250.680829][ T7006] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.702793][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.722422][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.730003][ T8271] bridge_slave_0: entered allmulticast mode [ 250.738940][ T8271] bridge_slave_0: entered promiscuous mode [ 250.747991][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.755487][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.763033][ T8271] bridge_slave_1: entered allmulticast mode [ 250.770855][ T8271] bridge_slave_1: entered promiscuous mode [ 250.821641][ T7006] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.854371][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 250.884096][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 250.890762][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.898246][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.910654][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 250.927118][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 250.947898][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 250.955291][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.964123][ T8] usb 1-1: SerialNumber: syz [ 250.976609][ T8] usb 1-1: config 0 descriptor?? [ 251.036902][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 251.056461][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 251.063995][ T8271] team0: Port device team_slave_0 added [ 251.077621][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 251.093997][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.102029][ T9] usb 5-1: Product: syz [ 251.121601][ T9] usb 5-1: Manufacturer: syz [ 251.134434][ T9] usb 5-1: SerialNumber: syz [ 251.161003][ T9] usb 5-1: config 0 descriptor?? [ 251.175962][ T8271] team0: Port device team_slave_1 added [ 251.331553][ T8] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 251.347546][ T8] usb 1-1: No valid video chain found. [ 251.487353][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.905'. [ 251.498494][ T5213] Bluetooth: hci3: command tx timeout [ 252.001242][ T8] usb 1-1: USB disconnect, device number 12 [ 252.029902][ T5264] usb 5-1: USB disconnect, device number 21 [ 252.200055][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.254250][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.328475][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.369552][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.415237][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.488984][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.755428][ T7006] bridge_slave_1: left allmulticast mode [ 252.761097][ T7006] bridge_slave_1: left promiscuous mode [ 252.940791][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.966011][ T7006] bridge_slave_0: left allmulticast mode [ 254.152441][ T5225] Bluetooth: hci3: command tx timeout [ 254.299439][ T7006] bridge_slave_0: left promiscuous mode [ 254.393351][ T5225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.409975][ T5225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.418077][ T5225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.426295][ T5225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.434121][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 254.441695][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.453624][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.985834][ T7006] dvmrp0 (unregistering): left allmulticast mode [ 255.824839][ T7006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.838464][ T7006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.895935][ T7006] bond0 (unregistering): Released all slaves [ 255.910269][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.945967][ T7006] bond1 (unregistering): Released all slaves [ 255.973357][ T8271] hsr_slave_0: entered promiscuous mode [ 256.013557][ T8271] hsr_slave_1: entered promiscuous mode [ 256.043307][ T8271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.060711][ T8271] Cannot create hsr debugfs directory [ 256.224247][ T5225] Bluetooth: hci3: command tx timeout [ 256.267893][ T8337] syzkaller0: entered promiscuous mode [ 256.283880][ T8337] syzkaller0: entered allmulticast mode [ 256.546037][ T5225] Bluetooth: hci2: command tx timeout [ 258.306503][ T5225] Bluetooth: hci3: command tx timeout [ 258.624243][ T5225] Bluetooth: hci2: command tx timeout [ 258.920132][ T7006] hsr_slave_0: left promiscuous mode [ 258.935263][ T7006] hsr_slave_1: left promiscuous mode [ 258.964921][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.991602][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.027816][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.048313][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.114477][ T7006] veth1_macvtap: left promiscuous mode [ 259.134340][ T7006] veth0_macvtap: left promiscuous mode [ 259.140011][ T7006] veth1_vlan: left promiscuous mode [ 259.169535][ T7006] veth0_vlan: left promiscuous mode [ 259.993558][ T8391] vivid-003: disconnect [ 260.024904][ T8390] vivid-003: reconnect [ 260.070781][ T8393] gfs2: not a GFS2 filesystem [ 260.704403][ T7006] team0 (unregistering): Port device team_slave_1 removed [ 260.704469][ T5225] Bluetooth: hci2: command tx timeout [ 260.729148][ T8412] vivid-002: disconnect [ 260.734116][ T8411] vivid-002: reconnect [ 260.764095][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 260.841710][ T7006] team0 (unregistering): Port device team_slave_0 removed [ 260.953975][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 260.961192][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.981747][ T8414] ======================================================= [ 260.981747][ T8414] WARNING: The mand mount option has been deprecated and [ 260.981747][ T8414] and is ignored by this kernel. Remove the mand [ 260.981747][ T8414] option from the mount to silence this warning. [ 260.981747][ T8414] ======================================================= [ 261.017673][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.028688][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.039840][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.064533][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.073593][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.311801][ T25] usb 5-1: GET_CAPABILITIES returned 0 [ 261.311854][ T25] usbtmc 5-1:16.0: can't read capabilities [ 261.630376][ T25] usb 5-1: USB disconnect, device number 22 [ 262.181378][ T6079] syz_tun: left promiscuous mode [ 262.261752][ T6079] team0: Port device vlan2 removed [ 262.382452][ T8434] openvswitch: netlink: Missing key (keys=20040, expected=2000) [ 262.559070][ T8323] chnl_net:caif_netlink_parms(): no params data found [ 262.723990][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 262.784193][ T5225] Bluetooth: hci2: command tx timeout [ 262.938925][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 262.994496][ T8] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 263.002727][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 263.041055][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 263.064442][ T8] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 263.072902][ T8] usb 5-1: Product: syz [ 263.081003][ T8] usb 5-1: Manufacturer: syz [ 263.087722][ T8] usb 5-1: SerialNumber: syz [ 263.122513][ T8] usb 5-1: config 0 descriptor?? [ 263.136057][ T8] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 263.150720][ T8] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 263.177921][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.191118][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.208224][ T8323] bridge_slave_0: entered allmulticast mode [ 263.220492][ T8323] bridge_slave_0: entered promiscuous mode [ 263.235932][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.243082][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.277711][ T8323] bridge_slave_1: entered allmulticast mode [ 263.290378][ T8323] bridge_slave_1: entered promiscuous mode [ 263.338230][ T7006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.470316][ T9] usb 5-1: USB disconnect, device number 23 [ 263.489859][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 263.546448][ T8271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.603066][ T8271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.644381][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 263.695357][ T7006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.760017][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.783229][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.801343][ T8271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.813870][ T8271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.848193][ T7006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.868793][ T8] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 263.889050][ T8] usb 1-1: can't read configurations, error -61 [ 263.986824][ T7006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.074722][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 264.079698][ T8323] team0: Port device team_slave_0 added [ 264.146645][ T8323] team0: Port device team_slave_1 added [ 264.226752][ T5213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.242167][ T5213] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.250489][ T5213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.259460][ T5213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.275787][ T5213] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 264.282995][ T5213] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.368442][ T8] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 264.387331][ T8] usb 1-1: can't read configurations, error -61 [ 264.415439][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.427518][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.429009][ T8] usb usb1-port1: attempt power cycle [ 264.460952][ T8323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.479480][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.486993][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.512924][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.525003][ T8323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.655084][ T8323] hsr_slave_0: entered promiscuous mode [ 264.664048][ T46] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 264.675388][ T8323] hsr_slave_1: entered promiscuous mode [ 264.682720][ T8323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.690809][ T8323] Cannot create hsr debugfs directory [ 264.860098][ T7006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.870806][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 264.887987][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 264.924200][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 264.927540][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.958016][ T8] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 264.961664][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.985322][ T8] usb 1-1: can't read configurations, error -61 [ 265.045376][ T46] usb 5-1: Product: syz [ 265.068362][ T46] usb 5-1: Manufacturer: syz [ 265.117841][ T46] usb 5-1: SerialNumber: syz [ 265.144072][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 265.149989][ T46] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 265.187765][ T8] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 265.196862][ T8] usb 1-1: can't read configurations, error -61 [ 265.198468][ T7006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.230857][ T8] usb usb1-port1: unable to enumerate USB device [ 265.337691][ T7006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.440182][ T5265] usb 5-1: USB disconnect, device number 24 [ 265.481273][ T7006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.617840][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.672080][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 265.726251][ T7006] bridge_slave_1: left allmulticast mode [ 265.741276][ T7006] bridge_slave_1: left promiscuous mode [ 265.749074][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.772509][ T7006] bridge_slave_0: left allmulticast mode [ 265.778812][ T7006] bridge_slave_0: left promiscuous mode [ 265.791037][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.815628][ T7006] bridge_slave_1: left allmulticast mode [ 265.821257][ T7006] bridge_slave_1: left promiscuous mode [ 265.834133][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.855244][ T7006] bridge_slave_0: left allmulticast mode [ 265.860980][ T7006] bridge_slave_0: left promiscuous mode [ 265.874268][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.252002][ T8462] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262161 (only 8 groups) [ 266.305433][ T5213] Bluetooth: hci4: command tx timeout [ 266.562242][ T7006] dvmrp0 (unregistering): left allmulticast mode [ 266.604230][ T7006] dvmrp0 (unregistering): left allmulticast mode [ 266.638075][ T7006] team0: Port device geneve0 removed [ 267.172711][ T7006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.202139][ T7006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.226093][ T7006] bond0 (unregistering): Released all slaves [ 267.251366][ T7006] bond1 (unregistering): Released all slaves [ 267.279358][ T7006] bond2 (unregistering): Released all slaves [ 267.346582][ T8473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.483016][ T7006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.499080][ T7006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.513185][ T7006] bond0 (unregistering): Released all slaves [ 267.682028][ T8271] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.689520][ T46] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 267.739842][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.747012][ T5269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.767525][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.776758][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.783930][ T8450] bridge_slave_0: entered allmulticast mode [ 267.790690][ T8450] bridge_slave_0: entered promiscuous mode [ 267.800129][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.808368][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.816365][ T8450] bridge_slave_1: entered allmulticast mode [ 267.823495][ T8450] bridge_slave_1: entered promiscuous mode [ 267.844095][ T46] usb 5-1: device descriptor read/64, error -71 [ 267.853789][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.860938][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.884388][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 267.921602][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.956560][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.037882][ T8450] team0: Port device team_slave_0 added [ 268.049723][ T8450] team0: Port device team_slave_1 added [ 268.114474][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.127876][ T46] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 268.135610][ T25] usb 1-1: config 0 has no interfaces? [ 268.141103][ T25] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 268.170985][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.180789][ T25] usb 1-1: config 0 descriptor?? [ 268.188884][ T8323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.202873][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.210787][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.238262][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.250098][ T8323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.266561][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.273540][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.316038][ T46] usb 5-1: device descriptor read/64, error -71 [ 268.334310][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.354278][ T8323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.368284][ T8323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.384695][ T5213] Bluetooth: hci4: command tx timeout [ 268.431359][ T8450] hsr_slave_0: entered promiscuous mode [ 268.439439][ T8450] hsr_slave_1: entered promiscuous mode [ 268.444395][ T46] usb usb5-port1: attempt power cycle [ 268.450555][ T8450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.458234][ T8450] Cannot create hsr debugfs directory [ 268.526957][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.730985][ T8323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.779604][ T8271] veth0_vlan: entered promiscuous mode [ 268.790640][ T8323] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.821083][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.828244][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.854155][ T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 268.860291][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.868875][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.886356][ T46] usb 5-1: device descriptor read/8, error -71 [ 268.893778][ T8271] veth1_vlan: entered promiscuous mode [ 268.963872][ T8271] veth0_macvtap: entered promiscuous mode [ 268.999265][ T8271] veth1_macvtap: entered promiscuous mode [ 269.038364][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.054264][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.073584][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.084569][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.103959][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.120846][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.132191][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.157622][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.173485][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.184863][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.195145][ T46] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 269.213815][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.239026][ T46] usb 5-1: device descriptor read/8, error -71 [ 269.250124][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.262756][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.278633][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.289110][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.298947][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.324198][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.336341][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.347613][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.357879][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.368912][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.386909][ T46] usb usb5-port1: unable to enumerate USB device [ 269.399605][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.453538][ T8271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.463110][ T8271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.473498][ T8271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.485139][ T8271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.549030][ T8450] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.598060][ T8450] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.650699][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.658896][ T8450] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.733981][ T8450] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.756879][ T7015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.768233][ T7015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.857110][ T7002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.875400][ T7002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.935242][ T7006] hsr_slave_0: left promiscuous mode [ 269.941775][ T7006] hsr_slave_1: left promiscuous mode [ 269.948153][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.960684][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.969349][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.979671][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.005606][ T7006] hsr_slave_0: left promiscuous mode [ 270.011874][ T7006] hsr_slave_1: left promiscuous mode [ 270.020981][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.030267][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.042942][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.050951][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.110359][ T7006] veth1_macvtap: left promiscuous mode [ 270.116411][ T7006] veth0_macvtap: left promiscuous mode [ 270.122054][ T7006] veth1_vlan: left promiscuous mode [ 270.127708][ T7006] veth0_vlan: left promiscuous mode [ 270.139383][ T7006] veth1_macvtap: left promiscuous mode [ 270.146547][ T7006] veth0_macvtap: left promiscuous mode [ 270.152147][ T7006] veth1_vlan: left promiscuous mode [ 270.157643][ T7006] veth0_vlan: left promiscuous mode [ 270.474893][ T5213] Bluetooth: hci4: command tx timeout [ 270.645776][ T5264] usb 1-1: USB disconnect, device number 17 [ 270.754268][ T7006] team0 (unregistering): Port device team_slave_1 removed [ 270.791899][ T7006] team0 (unregistering): Port device team_slave_0 removed [ 271.124463][ T5264] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 271.190088][ T8505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 271.359132][ T5264] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=97.58 [ 271.368544][ T5264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.376860][ T5264] usb 1-1: Product: syz [ 271.381131][ T5264] usb 1-1: Manufacturer: syz [ 271.386069][ T5264] usb 1-1: SerialNumber: syz [ 271.400558][ T5264] usb 1-1: config 0 descriptor?? [ 271.408525][ T5264] usb 1-1: active config #0 != 1 ?? [ 271.512216][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 271.611146][ T7006] team0 (unregistering): Port device team_slave_1 removed [ 271.652208][ T7006] team0 (unregistering): Port device team_slave_0 removed [ 271.710145][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 271.718062][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.737198][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.751704][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 271.775150][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 271.783324][ T8] usb 4-1: SerialNumber: syz [ 271.803227][ T8] usb 4-1: config 0 descriptor?? [ 272.159548][ T5269] usb 1-1: USB disconnect, device number 18 [ 272.170319][ T8] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 272.183377][ T8] usb 4-1: No valid video chain found. [ 272.196721][ T8] usb 4-1: USB disconnect, device number 13 [ 272.202239][ T8323] veth0_vlan: entered promiscuous mode [ 272.354249][ T8323] veth1_vlan: entered promiscuous mode [ 272.494918][ T8323] veth0_macvtap: entered promiscuous mode [ 272.538191][ T8323] veth1_macvtap: entered promiscuous mode [ 272.544350][ T5213] Bluetooth: hci4: command tx timeout [ 272.911504][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.234819][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.277889][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.328718][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.345065][ T8515] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 273.353104][ T8515] netlink: 9384 bytes leftover after parsing attributes in process `syz.3.974'. [ 273.369811][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.394941][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.420091][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.440440][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.472897][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.496212][ T8524] netlink: 'syz.0.978': attribute type 10 has an invalid length. [ 273.614769][ T8524] team0: Failed to send options change via netlink (err -105) [ 273.635539][ T8524] team0: Port device netdevsim0 added [ 273.650505][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.672468][ T5269] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 273.702026][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.732289][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.755760][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.782733][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.809216][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.831149][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.863992][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.878964][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.910155][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.934116][ T8526] netlink: 'syz.0.978': attribute type 10 has an invalid length. [ 274.002396][ T8526] team0: Failed to send options change via netlink (err -105) [ 274.023183][ T8526] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 274.055178][ T8526] team0: Port device netdevsim0 removed [ 274.073461][ T8526] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 274.149953][ T8323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.166887][ T8323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.178900][ T8323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.190124][ T8323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.220302][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.301151][ T5271] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.308449][ T5271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.363022][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.370159][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.437915][ T29] audit: type=1326 audit(1722397144.971:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 274.524254][ T29] audit: type=1326 audit(1722397145.011:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 274.631913][ T7010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.658335][ T7010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.826607][ T7010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.879903][ T7010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.916299][ T29] audit: type=1326 audit(1722397145.461:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 275.043117][ T29] audit: type=1326 audit(1722397145.461:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 275.123506][ T29] audit: type=1326 audit(1722397145.461:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 275.204974][ T29] audit: type=1326 audit(1722397145.461:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 275.372491][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.387335][ T29] audit: type=1326 audit(1722397145.461:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 275.451332][ T29] audit: type=1326 audit(1722397145.461:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 275.561247][ T29] audit: type=1326 audit(1722397145.461:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 276.132984][ T29] audit: type=1326 audit(1722397145.461:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8529 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72d1773b9 code=0x7fc00000 [ 276.447108][ T8450] veth0_vlan: entered promiscuous mode [ 276.520941][ T8450] veth1_vlan: entered promiscuous mode [ 276.559724][ T8559] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 276.655186][ T8450] veth0_macvtap: entered promiscuous mode [ 276.721403][ T8450] veth1_macvtap: entered promiscuous mode [ 277.212138][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.246197][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.349044][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.494230][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.594063][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.673943][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.695018][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.721950][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.733977][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.770651][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.805175][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.896255][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.924108][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.963995][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.019112][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.066682][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.098364][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.117900][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.135611][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.150907][ T8450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.170243][ T8450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.303780][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.920505][ T8450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.133955][ T8450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.158086][ T8450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.183946][ T8450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.539672][ T7010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.552741][ T7010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.597330][ T7010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.612402][ T7010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.264944][ T8609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1004'. [ 283.170769][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 283.401524][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 283.401542][ T29] audit: type=1400 audit(1722397153.941:160): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8621 comm="syz.4.1009" daddr=255.255.255.255 netif=wpan0 [ 284.470971][ T8628] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 288.003725][ T8657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.222516][ T5213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.236897][ T5213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.254384][ T5213] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.269055][ T5213] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.280869][ T5213] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 288.288739][ T5213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.385136][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 288.538925][ T8669] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 289.486846][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 289.511520][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 289.957883][ T25] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 290.073733][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.239511][ T25] usb 2-1: config 0 descriptor?? [ 290.384091][ T5225] Bluetooth: hci5: command tx timeout [ 290.454364][ T7015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.668035][ T7015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.805055][ T7015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.831719][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 290.879962][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.888962][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.902378][ T25] hid (null): invalid report_count 983040256 [ 290.908668][ T25] hid (null): unknown global tag 0xc [ 290.921385][ T25] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 290.929288][ T25] hid-generic 0003:0158:0100.000D: invalid report_count 983040256 [ 290.942130][ T7015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.942435][ T25] hid-generic 0003:0158:0100.000D: item 0 4 1 9 parsing failed [ 290.962507][ T25] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22 [ 290.987627][ T8661] chnl_net:caif_netlink_parms(): no params data found [ 291.071738][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.079025][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.089451][ T8661] bridge_slave_0: entered allmulticast mode [ 291.105886][ T8661] bridge_slave_0: entered promiscuous mode [ 291.134226][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.141367][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.149123][ T8661] bridge_slave_1: entered allmulticast mode [ 291.157353][ T8661] bridge_slave_1: entered promiscuous mode [ 291.215637][ T5267] usb 2-1: USB disconnect, device number 11 [ 291.217370][ T8661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.238693][ T8661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.292635][ T7015] bridge_slave_1: left allmulticast mode [ 291.298507][ T7015] bridge_slave_1: left promiscuous mode [ 291.307889][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.323374][ T7015] bridge_slave_0: left allmulticast mode [ 291.331962][ T7015] bridge_slave_0: left promiscuous mode [ 291.338140][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.780703][ T7015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.793878][ T7015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.811011][ T7015] bond0 (unregistering): Released all slaves [ 291.896381][ T8661] team0: Port device team_slave_0 added [ 291.921988][ T8661] team0: Port device team_slave_1 added [ 292.120116][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.131620][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.170464][ T8661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.196757][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.209898][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.242491][ T8661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.339293][ T8661] hsr_slave_0: entered promiscuous mode [ 292.361489][ T8661] hsr_slave_1: entered promiscuous mode [ 292.376669][ T8661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.392003][ T8661] Cannot create hsr debugfs directory [ 292.456788][ T7015] hsr_slave_0: left promiscuous mode [ 292.458236][ T8740] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 292.470084][ T5213] Bluetooth: hci5: command tx timeout [ 292.474202][ T5213] Bluetooth: hci3: command 0x1003 tx timeout [ 292.475791][ T5225] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 292.514527][ T7015] hsr_slave_1: left promiscuous mode [ 292.546224][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.570798][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.603352][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.623156][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.631310][ T8743] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 292.645095][ T8743] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 292.692552][ T7015] veth1_macvtap: left promiscuous mode [ 292.717721][ T7015] veth0_macvtap: left promiscuous mode [ 292.730115][ T7015] veth1_vlan: left promiscuous mode [ 292.746216][ T7015] veth0_vlan: left promiscuous mode [ 292.785987][ T5225] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 293.238211][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802bfb2400: rx timeout, send abort [ 293.249615][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802bfb2400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 293.360791][ T8757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.704349][ T5267] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 293.801590][ T7015] team0 (unregistering): Port device team_slave_1 removed [ 293.847046][ T7015] team0 (unregistering): Port device team_slave_0 removed [ 293.894241][ T5267] usb 5-1: Using ep0 maxpacket: 16 [ 293.909346][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 293.926303][ T5267] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 293.943296][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.962965][ T5267] usb 5-1: config 0 descriptor?? [ 294.387845][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 294.546026][ T5225] Bluetooth: hci5: command tx timeout [ 294.561804][ T8757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.570833][ T8757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.581962][ T5267] hid (null): invalid report_count 983040256 [ 294.596373][ T5267] hid (null): unknown global tag 0xc [ 294.645013][ T5267] hid-generic 0003:0158:0100.000E: unknown main item tag 0x0 [ 294.662604][ T5267] hid-generic 0003:0158:0100.000E: invalid report_count 983040256 [ 294.680021][ T5267] hid-generic 0003:0158:0100.000E: item 0 4 1 9 parsing failed [ 294.688841][ T5267] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22 [ 294.866132][ T25] usb 5-1: USB disconnect, device number 29 [ 295.041464][ T8761] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.074010][ T8761] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 295.254680][ T8761] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.260643][ T8761] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 295.353291][ T8761] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 295.364970][ T8761] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 295.594322][ T8761] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 295.640883][ T8761] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 295.654762][ T5267] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 296.548070][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.578239][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.603652][ T5267] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.649512][ T5267] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 296.671163][ T8812] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 296.694206][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.721198][ T8812] netlink: 'syz.2.1069': attribute type 2 has an invalid length. [ 296.734910][ T5267] usb 1-1: config 0 descriptor?? [ 296.819799][ T8661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.114279][ T8661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.415210][ T8661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 297.631232][ T8661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.703222][ T5267] kye 0003:0458:0087.000F: item fetching failed at offset 0/2 [ 297.711474][ T5267] kye 0003:0458:0087.000F: parse failed [ 297.717177][ T5267] kye 0003:0458:0087.000F: probe with driver kye failed with error -22 [ 297.846103][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 297.934725][ T46] usb 1-1: USB disconnect, device number 19 [ 297.970544][ T8661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.029790][ T8661] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.059421][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.059725][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.066584][ T5264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.104782][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.127007][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.134291][ T5212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.143728][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 298.202379][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.248313][ T9] usb 3-1: config 0 descriptor?? [ 298.258675][ T9] appletouch 3-1:0.0: Could not find int-in endpoint [ 298.293139][ T9] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 298.319852][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 298.532668][ T8661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.772110][ T8661] veth0_vlan: entered promiscuous mode [ 298.816144][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 298.851292][ T8661] veth1_vlan: entered promiscuous mode [ 299.147079][ T8874] (syz.0.1078,8874,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 299.156173][ T8874] (syz.0.1078,8874,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 300.242621][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.486252][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.519697][ T8661] veth0_macvtap: entered promiscuous mode [ 300.556508][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.591197][ T8661] veth1_macvtap: entered promiscuous mode [ 300.606448][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 300.675385][ T9] usb 2-1: SerialNumber: syz [ 300.700348][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.735468][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.746216][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.763102][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.774656][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.786109][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.812022][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.834287][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.868255][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.882104][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.906555][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.920500][ T9] usb 2-1: 0:2 : does not exist [ 300.953250][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.981064][ T9] usb 2-1: USB disconnect, device number 12 [ 300.988835][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.011134][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.021806][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.043962][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.057794][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.071306][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.090155][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.101537][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.117913][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.131017][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.169910][ T8661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.183062][ T8661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.197651][ T8661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.206520][ T8661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.255511][ T9] usb 3-1: USB disconnect, device number 12 [ 301.406969][ T7010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.473289][ T7010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.519140][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'. [ 301.680231][ T29] audit: type=1326 audit(1722397172.221:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f027773b9 code=0x7fc00000 [ 301.716040][ T29] audit: type=1326 audit(1722397172.241:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9f027773b9 code=0x7fc00000 [ 301.737566][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.864123][ T7015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.896127][ T7015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.265848][ T29] audit: type=1326 audit(1722397172.801:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f027773b9 code=0x7fc00000 [ 302.287321][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.377785][ T29] audit: type=1326 audit(1722397172.811:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f027773b9 code=0x7fc00000 [ 302.464871][ T29] audit: type=1326 audit(1722397172.811:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f027773b9 code=0x7fc00000 [ 302.551053][ T29] audit: type=1326 audit(1722397172.811:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f027773b9 code=0x7fc00000 [ 302.589892][ T29] audit: type=1326 audit(1722397172.811:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8906 comm="syz.2.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f027773b9 code=0x7fc00000 [ 303.029510][ T8960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1101'. [ 303.041626][ T8965] 9pnet_fd: Insufficient options for proto=fd [ 303.238158][ T8967] pimreg: entered allmulticast mode [ 303.794636][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 303.957643][ T8975] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 304.028148][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.074406][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.103803][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.120369][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.145527][ T9] usb 5-1: SerialNumber: syz [ 304.403754][ T9] usb 5-1: 0:2 : does not exist [ 304.474192][ T9] usb 5-1: USB disconnect, device number 30 [ 304.811471][ T8999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.043297][ T9024] random: crng reseeded on system resumption [ 308.632073][ T9024] Sensor A: ================= START STATUS ================= [ 308.661545][ T9024] Sensor A: Test Pattern: 75% Colorbar [ 308.702463][ T9029] Sensor A: ================= START STATUS ================= [ 308.768929][ T9024] Sensor A: Show Information: All [ 309.036986][ T9044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.789611][ T9024] Sensor A: Vertical Flip: false [ 309.796109][ T9024] Sensor A: Horizontal Flip: false [ 309.801725][ T9024] Sensor A: Brightness: 128 [ 309.886757][ T9024] Sensor A: Contrast: 128 [ 309.905624][ T9024] Sensor A: Hue: 0 [ 309.941837][ T9024] Sensor A: Saturation: 128 [ 309.959414][ T9029] Sensor A: Test Pattern: 75% Colorbar [ 309.997192][ T9024] Sensor A: ================== END STATUS ================== [ 310.046220][ T9029] Sensor A: Show Information: All [ 310.060222][ T9029] Sensor A: Vertical Flip: false [ 310.073998][ T9029] Sensor A: Horizontal Flip: false [ 310.099132][ T9029] Sensor A: Brightness: 128 [ 310.122135][ T9029] Sensor A: Contrast: 128 [ 310.133009][ T9029] Sensor A: Hue: 0 [ 310.147700][ T9029] Sensor A: Saturation: 128 [ 310.161026][ T9029] Sensor A: ================== END STATUS ================== [ 310.724108][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 311.115991][ T9079] (syz.1.1136,9079,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 311.124763][ T9079] (syz.1.1136,9079,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 311.832345][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.872822][ T5267] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 311.892052][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.913439][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 311.923031][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.933522][ T9] usb 5-1: config 0 descriptor?? [ 312.106804][ T5267] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 312.131329][ T5267] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 312.159209][ T5267] usb 4-1: Manufacturer: syz [ 312.176614][ T5267] usb 4-1: config 0 descriptor?? [ 313.040154][ T9] hid-led 0003:27B8:01ED.0010: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 313.071107][ T9] hid-led 0003:27B8:01ED.0010: ThingM blink(1) v1 initialized [ 313.078851][ T5267] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 313.248415][ T5264] usb 5-1: USB disconnect, device number 31 [ 313.475946][ T5267] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 313.529462][ T5267] usb 4-1: USB disconnect, device number 14 [ 314.111071][ T9116] (syz.1.1148,9116,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 314.119814][ T9116] (syz.1.1148,9116,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 314.706901][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f440400: rx timeout, send abort [ 314.724412][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807f440400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 315.004203][ T9121] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 315.073330][ T9128] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 315.214926][ C0] Oops: general protection fault, probably for non-canonical address 0xeac8352628b8062c: 0000 [#1] PREEMPT SMP KASAN PTI [ 315.227529][ C0] KASAN: maybe wild-memory-access in range [0x5641c93145c03160-0x5641c93145c03167] [ 315.236796][ C0] CPU: 0 UID: 0 PID: 9130 Comm: syz.4.1152 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 315.247442][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 315.257472][ C0] RIP: 0010:__lock_acquire+0x69/0x2040 [ 315.262916][ C0] Code: b6 04 30 84 c0 0f 85 87 16 00 00 45 31 f6 83 3d 48 f4 86 0e 00 0f 84 ac 13 00 00 89 54 24 54 89 5c 24 68 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 f9 c7 87 00 48 be 00 00 00 00 00 fc [ 315.282510][ C0] RSP: 0018:ffffc90000007810 EFLAGS: 00010003 [ 315.288556][ C0] RAX: 0ac8392628b8062c RBX: 0000000000000000 RCX: 0000000000000000 [ 315.296505][ C0] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 5641c93145c03165 [ 315.304458][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 315.312401][ C0] R10: dffffc0000000000 R11: fffffbfff1fece9e R12: ffff88802f89da00 [ 315.320357][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 5641c93145c03165 [ 315.328318][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 315.337316][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.343884][ C0] CR2: 00007fe8921f60f8 CR3: 0000000059122000 CR4: 00000000003506f0 [ 315.351843][ C0] Call Trace: [ 315.355104][ C0] [ 315.357933][ C0] ? __die_body+0x88/0xe0 [ 315.362272][ C0] ? die_addr+0x108/0x140 [ 315.366590][ C0] ? exc_general_protection+0x3dd/0x5d0 [ 315.372133][ C0] ? asm_exc_general_protection+0x26/0x30 [ 315.377847][ C0] ? __lock_acquire+0x69/0x2040 [ 315.382690][ C0] ? __pfx_receive_buf+0x10/0x10 [ 315.387650][ C0] ? virtqueue_get_buf_ctx+0x48e/0xde0 [ 315.393090][ C0] ? virtqueue_poll+0x186/0x230 [ 315.397922][ C0] lock_acquire+0x1ed/0x550 [ 315.402411][ C0] ? bq_flush_to_queue+0xc0/0x610 [ 315.407450][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 315.412477][ C0] ? validate_chain+0x11e/0x5900 [ 315.417411][ C0] ? __pfx_virtnet_poll+0x10/0x10 [ 315.422430][ C0] ? validate_chain+0x11e/0x5900 [ 315.427361][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 315.433680][ C0] _raw_spin_lock+0x2e/0x40 [ 315.438170][ C0] ? bq_flush_to_queue+0xc0/0x610 [ 315.443179][ C0] ? netif_receive_skb_list_internal+0x4f8/0xe30 [ 315.449492][ C0] bq_flush_to_queue+0xc0/0x610 [ 315.454330][ C0] ? __pfx_validate_chain+0x10/0x10 [ 315.459512][ C0] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 315.465825][ C0] __cpu_map_flush+0x5d/0xd0 [ 315.470399][ C0] xdp_do_check_flushed+0x136/0x240 [ 315.475584][ C0] __napi_poll+0xe4/0x490 [ 315.479901][ C0] net_rx_action+0x89b/0x1240 [ 315.484569][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 315.489667][ C0] ? sched_clock+0x4a/0x70 [ 315.494075][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.500392][ C0] handle_softirqs+0x2c4/0x970 [ 315.505143][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 315.509893][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 315.515167][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 315.520352][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 315.524925][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 315.530110][ C0] irq_exit_rcu+0x9/0x30 [ 315.534336][ C0] common_interrupt+0xaa/0xd0 [ 315.539000][ C0] [ 315.541913][ C0] [ 315.544833][ C0] asm_common_interrupt+0x26/0x40 [ 315.549844][ C0] RIP: 0010:debug_check_no_obj_freed+0x0/0x580 [ 315.555980][ C0] Code: ff 4c 89 f7 e8 31 25 48 fd e9 cf fe ff ff e8 97 5f fd 06 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 315.575569][ C0] RSP: 0018:ffffc90017967958 EFLAGS: 00000246 [ 315.581621][ C0] RAX: cbb211ab2a1b8a00 RBX: ffff88807c638000 RCX: 0000000000000003 [ 315.589574][ C0] RDX: dffffc0000000000 RSI: 0000000000008000 RDI: ffff88807c638000 [ 315.597529][ C0] RBP: 0000000000008000 R08: ffffffff8ff674ef R09: 1ffffffff1fece9d [ 315.605482][ C0] R10: dffffc0000000000 R11: fffffbfff1fece9e R12: ffffea0001f18e00 [ 315.613436][ C0] R13: 0000000000000003 R14: 0005088000000000 R15: 0000000000000003 [ 315.621395][ C0] free_unref_page+0x38a/0xea0 [ 315.626148][ C0] __folio_put+0x2c8/0x440 [ 315.630553][ C0] ? __pfx___folio_put+0x10/0x10 [ 315.635479][ C0] ? _raw_spin_unlock+0x28/0x50 [ 315.640309][ C0] ? mpol_put_task_policy+0xcb/0xf0 [ 315.645496][ C0] do_exit+0x1cec/0x27f0 [ 315.649723][ C0] ? __pfx_do_exit+0x10/0x10 [ 315.654292][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 315.659651][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 315.665623][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.671933][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 315.677026][ C0] do_group_exit+0x207/0x2c0 [ 315.681598][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.686777][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 315.691962][ C0] get_signal+0x1695/0x1730 [ 315.696456][ C0] ? __pfx_get_signal+0x10/0x10 [ 315.701293][ C0] arch_do_signal_or_restart+0x96/0x860 [ 315.706826][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 315.712963][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 315.719020][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 315.724725][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 315.730259][ C0] do_syscall_64+0x100/0x230 [ 315.734833][ C0] ? clear_bhb_loop+0x35/0x90 [ 315.739498][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.745377][ C0] RIP: 0033:0x7fb72d1773b9 [ 315.749786][ C0] Code: Unable to access opcode bytes at 0x7fb72d17738f. [ 315.756781][ C0] RSP: 002b:00007fb72e01c0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 315.765176][ C0] RAX: fffffffffffffe00 RBX: 00007fb72d305f88 RCX: 00007fb72d1773b9 [ 315.773130][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb72d305f88 [ 315.781082][ C0] RBP: 00007fb72d305f80 R08: 00007fb72e01c6c0 R09: 00007fb72e01c6c0 [ 315.789035][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb72d305f8c [ 315.796987][ C0] R13: 000000000000000b R14: 00007ffcb5fee260 R15: 00007ffcb5fee348 [ 315.804949][ C0] [ 315.807950][ C0] Modules linked in: [ 315.811831][ C0] ---[ end trace 0000000000000000 ]--- [ 315.817269][ C0] RIP: 0010:__lock_acquire+0x69/0x2040 [ 315.822720][ C0] Code: b6 04 30 84 c0 0f 85 87 16 00 00 45 31 f6 83 3d 48 f4 86 0e 00 0f 84 ac 13 00 00 89 54 24 54 89 5c 24 68 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 f9 c7 87 00 48 be 00 00 00 00 00 fc [ 315.842309][ C0] RSP: 0018:ffffc90000007810 EFLAGS: 00010003 [ 315.848360][ C0] RAX: 0ac8392628b8062c RBX: 0000000000000000 RCX: 0000000000000000 [ 315.856313][ C0] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 5641c93145c03165 [ 315.864268][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 315.872239][ C0] R10: dffffc0000000000 R11: fffffbfff1fece9e R12: ffff88802f89da00 [ 315.880201][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 5641c93145c03165 [ 315.888161][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 315.897073][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.903639][ C0] CR2: 00007fe8921f60f8 CR3: 0000000059122000 CR4: 00000000003506f0 [ 315.911596][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 315.918968][ C0] Kernel Offset: disabled [ 315.923281][ C0] Rebooting in 86400 seconds..