last executing test programs: 8.245043634s ago: executing program 2 (id=452): socket$kcm(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) connect$x25(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030601040400000000000000000000000500010007"], 0x1c}}, 0x0) 7.653542544s ago: executing program 2 (id=458): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000400000077"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x4, "40d31ddb"}, 0x0, 0x0, 0x0, 0x0}) 6.992564295s ago: executing program 0 (id=465): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x5, 0x1bcc38b06ee65739, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d75c53a7071a445"}}, 0x48}}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$sock_proto_private(0xffffffffffffffff, 0x289e8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$yama_ptrace_scope(r7, &(0x7f00000003c0)='1\x00', 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002011, 0x0) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4000009b}]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.725114705s ago: executing program 1 (id=466): 6.560624501s ago: executing program 1 (id=467): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private}]}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) 5.787889378s ago: executing program 2 (id=470): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000380)={[{@nombcache}, {@jqfmt_vfsv1}, {@errors_remount}, {@norecovery}, {@lazytime}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r0) 5.767910011s ago: executing program 1 (id=471): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setresuid(0xee00, 0xee00, 0x0) 5.666731947s ago: executing program 0 (id=472): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x0, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r4 = openat$userio(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000)={0x1, 0x6}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000000c0)={0x2, 0x4}, 0x2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0xa1112}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x0, 0x0) 5.577732581s ago: executing program 3 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2], 0x5c}}, 0x0) 4.653486571s ago: executing program 2 (id=474): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') getdents(r0, &(0x7f0000000240)=""/270, 0x10e) 4.557297696s ago: executing program 0 (id=475): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001c80)={0x0, 0x9, 0x2, [0x0, 0x0]}, 0xc) 4.443815443s ago: executing program 0 (id=477): openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10d481, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 4.251987532s ago: executing program 2 (id=478): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x800000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0), 0x0) setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getpeername(r0, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000002c0)=0x80) syz_io_uring_setup(0x1f87, &(0x7f0000000080), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r4 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x8}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000400), 0x208e24b) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000830804ac1414aa00dfed322452e1c70501578ff907dff6aacda234307409d1111d41ee6489e72bf71e81972c4f439607000000000000000cf24d3e1a9b43b52b7580a5d3db50e040"], 0x18}}], 0x23, 0x0) 4.162591056s ago: executing program 0 (id=479): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000540)={[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) fcntl$setstatus(r0, 0x4, 0x2000) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x90, &(0x7f0000000600)=ANY=[@ANYBLOB="17010000020000102505a1a440000102030109027e00020100c0000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c08241c03000900000e2407320300060009020008c900202e174354dd490905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000004000"/154], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) syz_usb_control_io(r1, 0x0, 0x0) fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380), 0x208e24b) lseek(0xffffffffffffffff, 0x0, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063510800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x1ff, 0x7, 0x0, 0x20, r5, 0xffffc000, '\x00', r6, r5, 0x4, 0x3, 0x1, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={0x0, r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[], 0x0, 0x52}, 0x20) 4.041569644s ago: executing program 4 (id=480): pipe(&(0x7f0000000080)) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="ac9e0e527dbaa5de6b4140c437079656ef874d19dc43b707dd51c43f22f1a74852a3c7553589bd551423c2eb529fcad406c672ab8a2fc87fe343c66a83e0e2940241caec", 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001280)="14", 0x1}], 0x1, &(0x7f00000016c0)=ANY=[], 0x210}}], 0x2, 0xc8000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x73}}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x8, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x201}, 0x48) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000a}, 0x90) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x64, r6, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, 0x0, @default, @val, @val={0x2d, 0x1a, {0x20, 0x1, 0x0, 0x0, {0x0, 0xaa0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xc16, 0x7}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ec}]}, 0x64}}, 0x0) 3.868053211s ago: executing program 4 (id=481): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private}]}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) 3.73996123s ago: executing program 4 (id=482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 3.617410499s ago: executing program 1 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$igmp6(0xa, 0x3, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1}, 0x6e) memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000004000)=ANY=[@ANYBLOB="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"/3323], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffe9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f0000000080)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="000a00000000000007300000000000000000102dcc00001100000000000000000000000000000000000000000720000000000600000000000000000000000000000000000200feffff07000000000000000047d7a9"], 0x60) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) 3.605279501s ago: executing program 4 (id=484): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r0, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 2.578276337s ago: executing program 2 (id=485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000022c0)={0x24, 0x0, 0x0, &(0x7f0000002240)={0x0, 0x22, 0x8, {[@main, @global=@item_4={0x3, 0x1, 0x0, "bf51eaed"}, @global=@item_012={0x1, 0x1, 0x0, "bc"}]}}, 0x0}, 0x0) 2.497309339s ago: executing program 1 (id=486): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x40200, 0x0) 2.302815529s ago: executing program 4 (id=487): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001c80)={0x0, 0x9, 0x2, [0x0, 0x0]}, 0xc) 2.16498443s ago: executing program 1 (id=488): prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000540)={0x20, 0x0, 0x72, {0x72, 0x30, "b96ce01d73c075d25062c7e9399e64cf0fe4c2d69f953a1cfe8b86bd66b6c0bc8e2783ce95a6d425e1252e888211e305a3271f69caf955237ba2cdaadb07b74dacd76e4ed6b96971b4d675fd5d1c08aeea185fa21c5c5e3ac7fc9260ae533cc3c252e27b6c32085167c94404423e65c5"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000700)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x9, '$'}, @local=@item_4={0x3, 0x2, 0x8, "ccdf9b48"}, @global=@item_4={0x3, 0x1, 0x0, "50cc3497"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x239}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000007c0)={0x20, 0x30, 0x71, "760be0413add1d21c1cdd5d86f5ef3ca24e92b6cdf862e17fb0fd9b99a3f521ef3f759f05286a3384ca2d2404d1682befc7e5e9f2d7bdcdd1c48bf50fff3181c7db3981ab1042bb0e41e7e19088643831c3f3438a3cd3fa7356748215d56b70c6f6c17b9f83ae43748a76afe1239eee247"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x75}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f0000000980), &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x7, 0x7e, {0x7e, 0x22, "2e7ff23226aa50f63d65dbc99b96dd4867009cbc0666abb96e7941288f136c7f86f2eb2863dc996deaa3776203d5608b244e8474ee5beaa9f82a36a96af6d582ec2576e77b6ee8c570bd2c54590d55bb7c776661043fae54a1c84cf6ff07063d56041c34f66cb29a307559c9cf7bb623a7aa9c80fff5fad1fe3fc854"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xd6}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000340)={0x20, 0x82, 0x3, "1ca2be"}, &(0x7f0000000380)={0x20, 0x83, 0x2, '42'}, &(0x7f00000003c0)={0x20, 0x84, 0x3, "b0bd7c"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "146b2f"}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87030d0000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x6}}], 0x30}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r4 = socket(0xf, 0x80000, 0x5) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f00000009c0)={0x0, 0xc, 0xcb, {0xcb, 0x21, "db3f249f22baa3a2499f4d05d0ede469f6285735ffeb48b2cf1be0f09cfebb5aedb8051c43a093347f778478010b7d426b2d116a8d6d189e94ad4df5e641e7882ae2aa9a5896b6f0c8e1fd80325589f8e49f8e32ad473248664d87365f00293d00a5ed8d7355715be579857eaf729ac276637901a8ed6dfce57b7f18a4136353a6d84a284f708e8a4b77aaa3f948959849d2ffdbc83b623fbca6b0999726bb9fc3dd16da6ef4b8ba3b79bf9ac407fa351d0c8c89db23e26d192f7cd4069d365b3af7fcd546b75ce904"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "ef2d5106e9d52c8671faf359fc48dc250df4dc0c17ce40047edf7f0c0cc45ba95a1c3ad013a24cf6595a25e551c430057df110b3453d3c79dc91931300c3b581b7c5b872619ef32ea87c17e4e0634a9c74c2fd35f8291eac1801c63a901c5e62bd2f6e5986627291400cacc29f7ed6fec5b9bce3616b1864e93f84f2e223349da940eabb06b3154a7cd55fda04bbc1479cfdac44fe27032275e855c611a54b3cc7f1f01b6099097ac826b64f2f390eb50161f94e8056079a71327a2f4f5d"}}}, &(0x7f0000000c40)={0x44, &(0x7f00000005c0)={0x0, 0x3, 0x7f, "3d369acc4f48bba1ae8be001c3ad2b2f38ca96e291d0394c607132edec14014890cfdb4e03bae0169d308b24d517bb9217c05b7a13a5eaf3f8e2e33940c6e16dfca42124e05d49a1e043ce430e10200029b521fb7164b140f95d91fcc7c2efc30fc0564a5d29361a7e78fe1efbf9d4d9d9601ac191cecc0ec8ed00f36c95f3"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x3, "5e70ad"}, &(0x7f00000006c0)={0x20, 0x82, 0x3, "fc1a26"}, &(0x7f0000000940)={0x20, 0x83, 0x3, "6114b3"}, &(0x7f0000000bc0)={0x20, 0x84, 0x4, "a552ea0a"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "ef6909"}}) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1b59, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x24) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000180)=0x10, 0x4) getsockopt$inet6_tcp_int(r6, 0x6, 0x9, 0x0, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0x22b, 0x2, 0xff}, 0x10) 2.148216302s ago: executing program 4 (id=489): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140100000000000000000008000100"/24], 0x18}}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0x3}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x1) r6 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcaa}, 0xfffffffc}], 0x1, 0x20, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004931002c0066000005019078ac1414aa0acb0102890f2c640101010a010101e0000001000f00907800020007"], 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) unshare(0x2a060400) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') setns(r9, 0x2) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x2000}) syz_emit_ethernet(0xa2, &(0x7f00000002c0)=ANY=[@ANYBLOB="404a6b6f86950180c200000288a8440081004a0008050268f77b612c0ad10a408ab5255b77df7a8fd4b094e8c40f832ba148128525d811c78041b0596d08f9dde0ceda501294d54051e92612eb7a5d93c3a90ffa1f9a4d6663642cb026295791eed3a52f2687e22c03ec6277f3d504f8843741e1e225430397df33baa1ef6969668ca4fcce4943ce575f079b3130614a8852b4eb39fb82937d3bf9c9c3d6dddfcf4b8d508216e320f48d48799d7ed09caf"], 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="a2793962d4176e9578dd22e660f98542fd40d6aa00ea268975113d8d230e18d3d97efe3e", @ANYRES32=r4, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRES16=r5, @ANYRES32=r2, @ANYRES32=r3], 0xf) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/image_size', 0x2, 0x133) setresuid(0x0, r3, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r10, 0x0, 0x42, 0x0, &(0x7f00000001c0)) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) 1.798684196s ago: executing program 3 (id=490): openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10d481, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 1.620094113s ago: executing program 3 (id=491): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x3, &(0x7f00000003c0), 0xfe, 0x519, &(0x7f00000008c0)="$eJzs3V9rZGcZAPDnnGSySZOaVL2ohdZild2iO5M0to1etBXFu4JS79eQTELIJBMyk3YTiqT4AQQRLXjllTeCH0CQfgQpFOy9qCiiu3rhhXrkzJzZzc6e2WQxMxOT3w/Omfe858/zvMnmzHv+7DkBXFnPR8QbETERES9GxHxRnxZDHHeHfLm7d95dy4d8zlt/TSIp6vq3OVusNt39KNU6PNpebTTq+8V0rb2zV2sdHt3c2lndrG/Wd5eXl15ZeXXl5ZXFx2/UwsNVebte+8Yff/yDn3/ztV9/6Z3f3frzje/l+X+9t8Dxw+04Dx93xpX8Z3HPZETsDyPYGEwU7amMOxEAAM4k7+N/MiI+1+n/z8dEpzfX0d+lmx59dgAAAMB5yF6fi38lERkAAABwab0eEXORpNXiXoC5SNNqtXsP76fjibTRbLW/uNE82F3P50UsRCXd2GrUF4t7aheikuTTS8Vtt73pl/qml78S8VRE/Gh+pjNdXWs21sd98gMAAACuiNm+4/9/zHeP/wEAAIBLpuR5WQAAAMAlM+j4PxlxHgAAAMDwDDr+vzbiPAAAAICh+Nabb+ZD1nuP9/rbhwfbzbdvrtdb29Wdg7XqWnN/r7rZbG52ntm3c9r2Gs3m3pdj9+B2rV1vtWutw6NbO82D3fatLe8PBAAAgHF56rMffJxExPFXZzpDbiofTQxYwbMC4NJIH2fhPwwvD2D0Bn3NA5ff5LgTAMbneNwJAOP2wKM+SjoFJ2/eSU8u/JshJgUAAJyr658pv/6fHwJUxp0cMFSPdf0fuFRc/4er60zX/++f/P9wmLkAo1XRA4Ar77RXfQx8eEfZ9f+psgWz7NRtAQAAQzXXGSdptbgWOBdpWq1GPNn5r/6VZGOrUV+MiE9ExG/nK9fy6aXuOl4PCAAAAAAAAAAAAAAAAAAAAAAAAABnlGVJZAAAAMClFpH+KYmImQHnB6aSf85H8Uqvd3761k9ur7bb+0t5/d/u1bffL+pfGumpCwAAAGCA3nF67zgeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM7T3TvvrhXD1Cjj/uVrEbHwQPy17pzJmO58TkclIp74exKTJ9ZLImLiHOIfvxcRT5fFT/K0YqHIoj9+GhEzo4n/bJZlpfFnzyE+XGUf5PufN8r+/tJ4vvNZ/vc/WQz/q8H7v/Te/m9iwP7vyTPGeOajX9YGxn8v4pnJ8v1PL34yIP4LZRss+aF89ztHRw9Vdjce2c8irkd5/JOxau2dvVrr8Ojm1s7qZn2zvru8vPTKyqsrL68s1ja2GvViXNrGHz77q//0Vf076+q0Px4Zf3D7P58XKicqs/4wRbCPbt/5VLdY6dtEJ/6NF8p//08/In7+b+ILxfdAPv96r3zcLZ/03C8+fK40sSL++oD2n/b7vzFoo31e/Pb3f3/GRQGAEWgdHm2vNhr1/aEX3s+ybFSxzlTYm70QaVyUQq93N7QQ0xelpf+PhWsRMbqg53FmCwAAuGjud/rHnQkAAAAAAAAAAAAAAAAAAABcXa3DSIf9OLH+mMfjaSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCP9NwAA//897tn3") 1.060079228s ago: executing program 3 (id=492): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8918, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000745f0020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000000)=ANY=[], 0xe0}], 0x1, 0x0, 0x0, 0x800c}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r10, @ANYBLOB="0800b7000400000008002600940900000800a0000200000005001901080000000500190104000000080027"], 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c0002800500010000000000240002801400018008000100000000f0070002"], 0x78}, 0x1, 0x600000000000000}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) 558.873575ms ago: executing program 0 (id=493): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setresuid(0xee00, 0xee00, 0x0) 76.600008ms ago: executing program 3 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 0s ago: executing program 3 (id=495): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = epoll_create1(0x0) r4 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f00040000"], 0x3c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r5, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r4}]) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="03011400012989290e358000ad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}, {&(0x7f0000007240)=ANY=[@ANYBLOB="202500003e0010002dbd7000fddbdf2545014880102fedc43fe616f7dd01969fdbe8d375db0aad59bd06c1f0cbde9594dd5a7f5b52d9ba85f1ac49495960ce24807c9fc4c83772b5c132398c6eeb5804799957cc5e0b853516bf5d2cb922c28bedacbb69a1ecf99bf62c0ecadacfd0faf79ba4486feb5125af281f013f4b4e315d1c5df1326d58286b632ec3ca753a71a4bcf8daf69617874c7cc1b712969bf32a39863a21b9163c8e6a2a9f77f9f30ec1ce4c53ea1b8105e7f32b645caddc5f06c916345c076c17e6a357e17ec9c0529127b59365ee721849ff5efa68d35654c9a4d523d1b8ff11533ccbca5cc65529831d1c08000d00", @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=0x0], 0x2520}, {&(0x7f0000000600)=ANY=[@ANYBLOB="55d900003200010026bd700000c5175a57800e33584f9787902812d99af36610434c70af2900c68008001b00"/55, @ANYRES32, @ANYBLOB="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"], 0x200}], 0x3}, 0x0) kernel console output (not intermixed with test programs): problems! [ 64.689135][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.700804][ T3552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.709747][ T3552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.719253][ T3552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.729019][ T3552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.751828][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.764419][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.780208][ T3554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.796956][ T3554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.816439][ T3554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.825195][ T3554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.834465][ T26] audit: type=1800 audit(1719575050.843:2): pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="bus" dev="sda1" ino=1949 res=0 errno=0 [ 64.858039][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.886327][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.055945][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.085939][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.103784][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.114410][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.125405][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.136308][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.180472][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.190540][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.242631][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.375250][ T3561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.799136][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.807672][ T47] Bluetooth: hci4: command tx timeout [ 65.813134][ T47] Bluetooth: hci0: command tx timeout [ 65.819284][ T3556] Bluetooth: hci3: command tx timeout [ 65.819306][ T3559] Bluetooth: hci1: command tx timeout [ 65.824693][ T3556] Bluetooth: hci2: command tx timeout [ 65.849422][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.872301][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.874049][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.903299][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.903923][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.914979][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.931476][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.941665][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.952213][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.962604][ T3561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.975033][ T3561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.987512][ T3561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.009679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.025323][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.034976][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.066701][ T3561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.075467][ T3561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.091310][ T3561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.102833][ T3561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.155752][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.180259][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.237360][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.271202][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.295298][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.351480][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.370765][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.486004][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.592811][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.666709][ T3593] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.709487][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.745317][ T1146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.826582][ T1146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.131515][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.152177][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.166913][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.197400][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.215572][ T3593] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 67.225356][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.241261][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.261938][ T3593] usb 2-1: config 0 descriptor?? [ 67.287653][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.311097][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.338737][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.680964][ T26] audit: type=1326 audit(1719575053.693:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3661 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf8175b29 code=0x7ffc0000 [ 67.724444][ T26] audit: type=1326 audit(1719575053.723:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3661 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf8175b29 code=0x7ffc0000 [ 67.777315][ T26] audit: type=1326 audit(1719575053.723:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3661 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaf8175b29 code=0x7ffc0000 [ 67.802565][ T3662] loop2: detected capacity change from 0 to 1024 [ 67.850849][ T26] audit: type=1326 audit(1719575053.723:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3661 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf8175b29 code=0x7ffc0000 [ 67.889372][ T26] audit: type=1326 audit(1719575053.723:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3661 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf8175b29 code=0x7ffc0000 [ 67.921957][ T3593] lg-g15 0003:046D:C222.0001: item fetching failed at offset 10/11 [ 67.929936][ T26] audit: type=1326 audit(1719575053.733:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3661 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffaf8175b29 code=0x7ffc0000 [ 67.952950][ T3593] lg-g15: probe of 0003:046D:C222.0001 failed with error -22 [ 67.993036][ T3662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.036780][ T26] audit: type=1326 audit(1719575053.733:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3661 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffaf8175b63 code=0x7ffc0000 [ 68.143564][ T14] usb 2-1: USB disconnect, device number 2 [ 68.188751][ T26] audit: type=1326 audit(1719575053.733:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3661 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffaf81746df code=0x7ffc0000 [ 68.222337][ T3549] EXT4-fs (loop2): unmounting filesystem. [ 68.265184][ T26] audit: type=1326 audit(1719575053.763:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3661 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffaf8175bb7 code=0x7ffc0000 [ 68.393540][ T3678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 68.592191][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 69.796147][ C0] sched: RT throttling activated [ 70.446635][ T3559] Bluetooth: hci1: command tx timeout [ 70.736230][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.096470][ T7] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 71.105579][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.144369][ T7] usb 4-1: config 0 descriptor?? [ 71.321002][ T3711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 71.334736][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.341444][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.721670][ T3593] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.006494][ T3593] usb 1-1: Using ep0 maxpacket: 16 [ 73.161689][ T3593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 73.179769][ T3593] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 73.205447][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.244826][ T3593] usb 1-1: config 0 descriptor?? [ 73.316479][ T7] usb 4-1: Cannot set autoneg [ 73.322081][ T7] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 73.331554][ T3559] Bluetooth: hci0: command tx timeout [ 73.354519][ T7] usb 4-1: USB disconnect, device number 2 [ 73.529281][ T3719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'. [ 73.943349][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.975479][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.027769][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.080152][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.167603][ T3593] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 74.187294][ T3593] hid-generic 0003:0158:0100.0002: unexpected long global item [ 74.221244][ T3593] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 74.493087][ T3593] usb 1-1: USB disconnect, device number 2 [ 75.212666][ T3744] Illegal XDP return value 4294967282 on prog (id 10) dev N/A, expect packet loss! [ 75.265084][ T3744] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 75.314321][ T3744] team0: Device ipvlan1 failed to register rx_handler [ 75.338191][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 75.435899][ T3744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.33'. [ 75.489581][ T3744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 75.524965][ T3744] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 75.938220][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 75.938237][ T26] audit: type=1800 audit(1719575061.953:24): pid=3752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.34" name=".pending_reads" dev="sda1" ino=1957 res=0 errno=0 [ 77.486852][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.645505][ T3767] loop0: detected capacity change from 0 to 8192 [ 77.746195][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 77.779553][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.870054][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.899787][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.922266][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.949869][ T14] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.966627][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.993518][ T14] usb 2-1: config 0 descriptor?? [ 78.157694][ T7] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 78.177517][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.217915][ T7] usb 5-1: config 0 descriptor?? [ 78.484443][ T14] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 78.506995][ T14] microsoft 0003:045E:07DA.0003: global environment stack underflow [ 78.535767][ T14] microsoft 0003:045E:07DA.0003: item 0 4 1 11 parsing failed [ 78.571339][ T14] microsoft 0003:045E:07DA.0003: parse failed [ 78.581002][ T14] microsoft: probe of 0003:045E:07DA.0003 failed with error -22 [ 80.026369][ T7] usb 5-1: Cannot set autoneg [ 80.031235][ T7] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 80.063760][ T7] usb 5-1: USB disconnect, device number 2 [ 80.147373][ T3538] usb 2-1: USB disconnect, device number 3 [ 80.691890][ T3538] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.936376][ T3538] usb 2-1: Using ep0 maxpacket: 16 [ 81.056365][ T3538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 81.096241][ T3538] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 81.154523][ T3538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.204616][ T3538] usb 2-1: config 0 descriptor?? [ 81.540362][ T3788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 81.570454][ T152] cfg80211: failed to load regulatory.db [ 82.258405][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.275076][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.303357][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.330985][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.384549][ T3538] hid-generic 0003:0158:0100.0004: unknown main item tag 0x1 [ 82.406329][ T3538] hid-generic 0003:0158:0100.0004: unexpected long global item [ 82.424754][ T3538] hid-generic: probe of 0003:0158:0100.0004 failed with error -22 [ 82.586421][ T22] usb 2-1: USB disconnect, device number 4 [ 82.692412][ T26] audit: type=1326 audit(1719575068.703:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3799 comm="syz.2.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaf8175b29 code=0x7fc00000 [ 83.426267][ T3593] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.857814][ T3593] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 83.898125][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.942139][ T3593] usb 5-1: config 0 descriptor?? [ 84.374244][ T3853] capability: warning: `syz.1.64' uses 32-bit capabilities (legacy support in use) [ 84.482632][ T3857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 84.489164][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 85.215140][ T3880] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 85.280222][ T3880] team0: Device ipvlan1 failed to register rx_handler [ 85.288830][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 85.372039][ T3881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.75'. [ 85.391749][ T3881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 85.443275][ T3881] netlink: 'syz.1.75': attribute type 2 has an invalid length. [ 85.710600][ T3556] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 85.741921][ T3889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 85.836387][ T3593] usb 5-1: Cannot set autoneg [ 85.844542][ T3593] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 85.914407][ T3593] usb 5-1: USB disconnect, device number 3 [ 86.526428][ T3556] Bluetooth: hci4: command tx timeout [ 86.878966][ T3595] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.320700][ T3595] usb 5-1: Using ep0 maxpacket: 8 [ 87.487181][ T3595] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.495589][ T3595] usb 5-1: config 0 has no interface number 0 [ 87.589154][ T3595] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 87.600447][ T3595] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 87.611685][ T3595] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 87.620806][ T3595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.632115][ T3595] usb 5-1: config 0 descriptor?? [ 87.666552][ T3901] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.699429][ T3595] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 87.894435][ T3595] usb 5-1: USB disconnect, device number 4 [ 87.922612][ T3595] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 88.308231][ T26] audit: type=1800 audit(1719575074.323:26): pid=3936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.96" name="file0" dev="sda1" ino=1969 res=0 errno=0 [ 88.338674][ T3936] fuse: Invalid rootmode [ 88.364744][ T26] audit: type=1804 audit(1719575074.363:27): pid=3936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.96" name="/root/syzkaller.PmipEj/15/file0" dev="sda1" ino=1969 res=1 errno=0 [ 88.506224][ T3595] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.896505][ T3595] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 88.921024][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.958993][ T3595] usb 2-1: config 0 descriptor?? [ 90.971065][ T3595] usb 2-1: Cannot set autoneg [ 90.976741][ T3595] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 90.999522][ T3595] usb 2-1: USB disconnect, device number 5 [ 91.046235][ T3593] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.296288][ T3593] usb 3-1: Using ep0 maxpacket: 16 [ 91.416368][ T3593] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.446200][ T3593] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.455544][ T3593] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.676426][ T3593] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.685707][ T3593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.736308][ T3593] usb 3-1: Product: syz [ 91.740527][ T3593] usb 3-1: Manufacturer: syz [ 91.745149][ T3593] usb 3-1: SerialNumber: syz [ 91.827397][ T3593] cdc_ncm 3-1:1.0: skipping garbage [ 91.832686][ T3593] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 91.866325][ T3593] cdc_ncm 3-1:1.0: bind() failure [ 92.051829][ T3548] syz-executor (3548) used greatest stack depth: 19312 bytes left [ 92.113889][ T3559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.128137][ T3559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.146491][ T3559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.155219][ T3559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.163283][ T3559] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.175303][ T3559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.218929][ T3975] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.248108][ T3645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.445208][ T3645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.605479][ T3645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.686228][ T3559] Bluetooth: hci4: command tx timeout [ 92.735889][ T3645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.202874][ T3972] chnl_net:caif_netlink_parms(): no params data found [ 93.580824][ T3593] usb 3-1: USB disconnect, device number 2 [ 93.842935][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.872910][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.907526][ T3972] device bridge_slave_0 entered promiscuous mode [ 93.979469][ T3972] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.992532][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.032904][ T3972] device bridge_slave_1 entered promiscuous mode [ 94.076294][ T3538] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.206665][ T3559] Bluetooth: hci0: command tx timeout [ 94.207443][ T3972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.245306][ T3972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.360154][ T3972] team0: Port device team_slave_0 added [ 94.371982][ T3972] team0: Port device team_slave_1 added [ 94.465197][ T3972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.486839][ T3972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.573530][ T3972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.599821][ T3538] usb 3-1: New USB device found, idVendor=0693, idProduct=0005, bcdDevice= 1.00 [ 94.622589][ T3538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.655443][ T3538] usb 3-1: Product: syz [ 94.667130][ T3538] usb 3-1: Manufacturer: syz [ 94.687942][ T3538] usb 3-1: SerialNumber: syz [ 94.709992][ T3972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.711852][ T3538] usb 3-1: config 0 descriptor?? [ 94.747068][ T3972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.808589][ T3538] usb-storage 3-1:0.0: USB Mass Storage device detected [ 94.840408][ T3972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.022735][ T3538] usb 3-1: USB disconnect, device number 3 [ 95.335940][ T3972] device hsr_slave_0 entered promiscuous mode [ 95.376815][ T3972] device hsr_slave_1 entered promiscuous mode [ 95.422942][ T3972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.436609][ T3972] Cannot create hsr debugfs directory [ 95.736364][ T3538] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.795972][ T3645] device hsr_slave_0 left promiscuous mode [ 95.827341][ T3645] device hsr_slave_1 left promiscuous mode [ 95.843546][ T3645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.905431][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.947773][ T3645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.955247][ T3645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.976283][ T3538] usb 1-1: Using ep0 maxpacket: 16 [ 96.032048][ T3645] device bridge_slave_1 left promiscuous mode [ 96.072296][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.096587][ T3538] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.132515][ T3538] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.164332][ T3538] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.182521][ T3538] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.201876][ T3538] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.234744][ T3645] device bridge_slave_0 left promiscuous mode [ 96.242314][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.287549][ T3559] Bluetooth: hci0: command tx timeout [ 96.306474][ T3538] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.324111][ T3538] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.350615][ T3538] usb 1-1: Manufacturer: syz [ 96.361262][ T3645] device veth1_macvtap left promiscuous mode [ 96.363969][ T3538] usb 1-1: config 0 descriptor?? [ 96.390826][ T3645] device veth0_macvtap left promiscuous mode [ 96.397658][ T3645] device veth1_vlan left promiscuous mode [ 96.403862][ T3645] device veth0_vlan left promiscuous mode [ 96.536411][ T3595] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.796407][ T3595] usb 3-1: Using ep0 maxpacket: 16 [ 96.836195][ T3538] rc_core: IR keymap rc-hauppauge not found [ 96.842524][ T3538] Registered IR keymap rc-empty [ 96.859518][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.917940][ T3595] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.936357][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.944118][ T3595] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.959995][ T3595] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.968006][ T3538] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 97.009730][ T3538] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 97.041076][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.076591][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.106291][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.139822][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.158725][ T3595] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.168378][ T3595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.176659][ T3595] usb 3-1: Product: syz [ 97.179928][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.181012][ T3595] usb 3-1: Manufacturer: syz [ 97.193408][ T3595] usb 3-1: SerialNumber: syz [ 97.226274][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.237334][ T3595] cdc_ncm 3-1:1.0: skipping garbage [ 97.253001][ T3595] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 97.265854][ T3595] cdc_ncm 3-1:1.0: bind() failure [ 97.271251][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.316495][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.347768][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.378858][ T4067] Zero length message leads to an empty skb [ 97.386736][ T3538] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.405238][ T3645] team0 (unregistering): Port device team_slave_1 removed [ 97.428186][ T3538] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 97.455697][ T3538] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 97.508872][ T3645] team0 (unregistering): Port device team_slave_0 removed [ 97.584004][ T3645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.650649][ T3645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.113879][ T3645] bond0 (unregistering): Released all slaves [ 98.366416][ T3559] Bluetooth: hci0: command tx timeout [ 98.427432][ T152] usb 1-1: USB disconnect, device number 3 [ 99.207353][ T3538] usb 3-1: USB disconnect, device number 4 [ 99.350632][ T3972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.388082][ T3972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.418737][ T3972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.452899][ T3972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.798281][ T3972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.867438][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.875491][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.911221][ T3972] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.933346][ T1146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.949767][ T1146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.966284][ T3592] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.988971][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.996265][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.070076][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.082531][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.102831][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.127204][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.135314][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.184093][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.226322][ T3592] usb 1-1: Using ep0 maxpacket: 8 [ 100.269433][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.287476][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.328761][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.342897][ T4118] hpfs: Bad magic ... probably not HPFS [ 100.352534][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.361557][ T3592] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.379715][ T3592] usb 1-1: config 0 has no interface number 0 [ 100.390406][ T3592] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 100.411890][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.446308][ T3559] Bluetooth: hci0: command tx timeout [ 100.447671][ T3592] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 100.489286][ T3972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.517793][ T3972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.529169][ T3592] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.565881][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.601057][ T3592] usb 1-1: config 0 descriptor?? [ 100.635389][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.649255][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.658048][ T4104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.680379][ T3592] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 100.705154][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.742341][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.770435][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.832401][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.088959][ T3538] usb 1-1: USB disconnect, device number 4 [ 101.114454][ T3538] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 101.332970][ T26] audit: type=1800 audit(1719575087.343:28): pid=4145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 101.392516][ T4145] 9pnet_fd: Insufficient options for proto=fd [ 101.525283][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.535328][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.576081][ T3972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.621340][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.637896][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.678159][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.689127][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.722709][ T3972] device veth0_vlan entered promiscuous mode [ 101.763242][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.773773][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.825920][ T3972] device veth1_vlan entered promiscuous mode [ 101.914426][ T3972] device veth0_macvtap entered promiscuous mode [ 101.988285][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.000057][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.030492][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.062804][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.097899][ T3972] device veth1_macvtap entered promiscuous mode [ 102.120144][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.141889][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.205910][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.271759][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.331963][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.342797][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.412852][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.434032][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.464576][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.522462][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.533008][ T3559] Bluetooth: hci0: command tx timeout [ 102.603808][ T3972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.636832][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.645647][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.693655][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.756404][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.786172][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.850229][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.890989][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.963553][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.982954][ T4176] loop2: detected capacity change from 0 to 2048 [ 102.986835][ T3972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.996262][ T3642] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.031364][ T3972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.045719][ T3972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.058139][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.074412][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.097432][ T4176] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.111470][ T4176] ext4 filesystem being mounted at /root/syzkaller.m5Wnd9/39/file1 supports timestamps until 2038 (0x7fffffff) [ 103.123840][ T4178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.156'. [ 103.149293][ T3972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.168238][ T3972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.185262][ T3972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.206364][ T3972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.339119][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 103.386698][ T3642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.403522][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.429385][ T3642] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 103.443349][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.470601][ T3642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.504239][ T3642] usb 1-1: config 0 descriptor?? [ 103.753307][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.798418][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.873911][ T3549] EXT4-fs (loop2): unmounting filesystem. [ 103.949236][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.008050][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.023953][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.045451][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.056462][ T3642] usbhid 1-1:0.0: can't add hid device: -71 [ 104.062524][ T3642] usbhid: probe of 1-1:0.0 failed with error -71 [ 104.120963][ T3642] usb 1-1: USB disconnect, device number 5 [ 104.189513][ T26] audit: type=1800 audit(1719575090.203:29): pid=4202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.158" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 104.228306][ T4202] 9pnet_fd: Insufficient options for proto=fd [ 104.265210][ T26] audit: type=1800 audit(1719575090.273:30): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.107" name="file0" dev="sda1" ino=1974 res=0 errno=0 [ 104.291280][ T4207] fuse: Invalid rootmode [ 104.341464][ T26] audit: type=1804 audit(1719575090.313:31): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.107" name="/root/syzkaller.cUIiZm/0/file0" dev="sda1" ino=1974 res=1 errno=0 [ 104.497669][ T4215] netlink: 'syz.2.161': attribute type 10 has an invalid length. [ 104.578744][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 104.664513][ T4215] team0: Device ipvlan1 failed to register rx_handler [ 104.896809][ T4227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.161'. [ 104.960769][ T4227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 105.018871][ T4227] netlink: 'syz.2.161': attribute type 2 has an invalid length. [ 105.866206][ T3596] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.941538][ T4245] netlink: 'syz.1.166': attribute type 4 has an invalid length. [ 106.126943][ T3596] usb 3-1: Using ep0 maxpacket: 16 [ 106.276905][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 106.575572][ T3596] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 106.605697][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.655714][ T3596] usb 3-1: config 0 descriptor?? [ 106.950550][ T4235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.966572][ T4235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.171968][ T4256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 107.212747][ T26] audit: type=1800 audit(1719575093.223:32): pid=4258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.171" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 107.263568][ T4258] 9pnet_fd: Insufficient options for proto=fd [ 107.313966][ T4254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.388197][ T4254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.443096][ T26] audit: type=1800 audit(1719575093.453:33): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.172" name="file0" dev="sda1" ino=1968 res=0 errno=0 [ 107.465960][ T4265] fuse: Invalid rootmode [ 107.492777][ T4242] loop0: detected capacity change from 0 to 32768 [ 107.507317][ T3596] hid (null): invalid report_size 12141 [ 107.514523][ T3596] hid (null): unknown global tag 0xd [ 107.536265][ T3596] hid (null): unknown global tag 0xd [ 107.550982][ T26] audit: type=1804 audit(1719575093.543:34): pid=4265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.172" name="/root/syzkaller.6ySF0l/47/file0" dev="sda1" ino=1968 res=1 errno=0 [ 107.575266][ T4242] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.167 (4242) [ 107.599926][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.656376][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.670863][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.710422][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.731068][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.781679][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.790894][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.814089][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.819868][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.830447][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.854750][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.882855][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.906292][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 107.908004][ T4282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 107.940101][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x4 [ 107.956719][ T4281] netlink: 'syz.4.176': attribute type 10 has an invalid length. [ 108.007373][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.014857][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.074983][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.083916][ T4281] team0: Device ipvlan1 failed to register rx_handler [ 108.111773][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.138242][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.163362][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.180389][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.205523][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.230704][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.250330][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.273501][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.299886][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.361003][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.459578][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.476193][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.499606][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.512799][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.545447][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.571434][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.587868][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.595586][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.614287][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.622356][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.637195][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.644920][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.660588][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.673289][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.688749][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.705149][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.714283][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.722442][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.739424][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.756030][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.775253][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.792373][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.809274][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.827332][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.844364][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.861840][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.880258][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.901059][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 108.918562][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 109.026988][ T3596] hid-generic 0003:0158:0100.0005: unknown main item tag 0x0 [ 109.034558][ T3596] hid-generic 0003:0158:0100.0005: invalid report_size 12141 [ 109.042822][ T3596] hid-generic 0003:0158:0100.0005: item 0 2 1 7 parsing failed [ 109.053951][ T3596] hid-generic: probe of 0003:0158:0100.0005 failed with error -22 [ 109.166259][ T3556] Bluetooth: hci0: command tx timeout [ 109.523158][ T4235] syz.2.165 (4235): drop_caches: 2 [ 109.580218][ T26] audit: type=1800 audit(1719575095.593:35): pid=4312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.183" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 109.591036][ T3593] usb 3-1: USB disconnect, device number 5 [ 109.631806][ T4312] 9pnet_fd: Insufficient options for proto=fd [ 109.796239][ T3595] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.871833][ T26] audit: type=1800 audit(1719575095.883:36): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.185" name="file0" dev="sda1" ino=1972 res=0 errno=0 [ 109.903636][ T4320] fuse: Bad value for 'rootmode' [ 109.943625][ T26] audit: type=1804 audit(1719575095.943:37): pid=4320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.185" name="/root/syzkaller.4BdLLF/30/file0" dev="sda1" ino=1972 res=1 errno=0 [ 110.056216][ T3595] usb 4-1: Using ep0 maxpacket: 16 [ 110.176510][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 110.196802][ T3595] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 110.201916][ T152] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.213681][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.241932][ T3595] usb 4-1: config 0 descriptor?? [ 110.430629][ T3642] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.486601][ T152] usb 3-1: Using ep0 maxpacket: 16 [ 110.520773][ T4309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.182'. [ 110.543528][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.569849][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.591675][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.606644][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.626274][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.648189][ T152] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.675234][ T152] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.692227][ T3642] usb 5-1: Using ep0 maxpacket: 8 [ 110.713337][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.738771][ T152] usb 3-1: config 0 descriptor?? [ 110.819699][ T3642] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.828125][ T3642] usb 5-1: config 0 has no interface number 0 [ 110.834257][ T3642] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 101, changing to 10 [ 110.854043][ T3642] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 1024 [ 110.911356][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.982304][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.024709][ T4309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.040058][ T3642] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.049817][ T3642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.060178][ T4309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.062081][ T3642] usb 5-1: config 0 descriptor?? [ 111.086546][ T4328] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.099382][ T3595] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 111.113453][ T4348] hpfs: Bad magic ... probably not HPFS [ 111.115640][ T3595] hid-generic 0003:0158:0100.0006: unexpected long global item [ 111.131420][ T3642] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 111.142878][ T3595] hid-generic: probe of 0003:0158:0100.0006 failed with error -22 [ 111.219583][ T152] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 111.235423][ T152] microsoft 0003:045E:07DA.0007: global environment stack underflow [ 111.249230][ T152] microsoft 0003:045E:07DA.0007: item 0 4 1 11 parsing failed [ 111.259716][ T152] microsoft 0003:045E:07DA.0007: parse failed [ 111.265851][ T152] microsoft: probe of 0003:045E:07DA.0007 failed with error -22 [ 111.317844][ T3642] usb 4-1: USB disconnect, device number 3 [ 111.348308][ T3593] usb 5-1: USB disconnect, device number 5 [ 111.356176][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 111.368253][ T3593] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 112.000477][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 112.034489][ T26] audit: type=1800 audit(1719575098.043:38): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.195" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 112.073049][ T4356] 9pnet_fd: Insufficient options for proto=fd [ 112.789693][ T22] usb 3-1: USB disconnect, device number 6 [ 112.833912][ T4372] netlink: 56 bytes leftover after parsing attributes in process `syz.3.202'. [ 112.925069][ T4377] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 112.954555][ T4377] team0: Device ipvlan1 failed to register rx_handler [ 112.991040][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 113.053014][ T4377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.203'. [ 113.072421][ T4377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 113.096316][ T4377] netlink: 'syz.0.203': attribute type 2 has an invalid length. [ 113.420073][ T26] audit: type=1800 audit(1719575099.433:39): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.208" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 113.441695][ T4395] 9pnet_fd: Insufficient options for proto=fd [ 114.628797][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.659020][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.688128][ T4416] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 114.848988][ T3556] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 114.857748][ T3556] Bluetooth: hci2: Injecting HCI hardware error event [ 114.866751][ T3559] Bluetooth: hci2: hardware error 0x00 [ 114.938708][ T47] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 114.986515][ T152] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.006428][ T3593] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.029803][ T26] audit: type=1800 audit(1719575101.043:40): pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.220" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 115.276181][ T3593] usb 5-1: Using ep0 maxpacket: 16 [ 115.406447][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.431907][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.475411][ T3593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.712247][ T3593] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.857201][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.062730][ T3593] usb 5-1: config 0 descriptor?? [ 116.406569][ T152] usb 2-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 116.424748][ T26] audit: type=1800 audit(1719575102.433:41): pid=4456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.231" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 116.446394][ T152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.454453][ T152] usb 2-1: Product: syz [ 116.491638][ T152] usb 2-1: Manufacturer: syz [ 116.506617][ T152] usb 2-1: SerialNumber: syz [ 116.515588][ T152] usb 2-1: config 0 descriptor?? [ 116.570277][ T3593] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 116.581474][ T152] usb 2-1: bad CDC descriptors [ 116.583054][ T3593] microsoft 0003:045E:07DA.0008: global environment stack underflow [ 116.595131][ T3593] microsoft 0003:045E:07DA.0008: item 0 4 1 11 parsing failed [ 116.603832][ T3593] microsoft 0003:045E:07DA.0008: parse failed [ 116.612153][ T3593] microsoft: probe of 0003:045E:07DA.0008 failed with error -22 [ 116.746352][ T26] audit: type=1326 audit(1719575102.733:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.0.234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84c2775b29 code=0x0 [ 116.777314][ T47] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 116.785935][ T47] Bluetooth: hci4: Injecting HCI hardware error event [ 116.796914][ T47] Bluetooth: hci4: hardware error 0x00 [ 117.529900][ T3559] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 117.543123][ T152] usb 2-1: bad CDC descriptors [ 117.550249][ T152] option 2-1:0.0: GSM modem (1-port) converter detected [ 117.974401][ T14] usb 2-1: USB disconnect, device number 6 [ 117.982584][ T14] option 2-1:0.0: device disconnected [ 118.773376][ T3556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.776621][ T152] usb 5-1: USB disconnect, device number 6 [ 118.791170][ T3556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.801056][ T3556] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.818930][ T3556] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.830356][ T3556] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.837943][ T3556] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.926298][ T47] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 118.967901][ T26] audit: type=1326 audit(1719575104.973:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4484 comm="syz.1.243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9370f75b29 code=0x0 [ 119.133145][ T26] audit: type=1800 audit(1719575105.143:44): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.244" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 119.168663][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.324418][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.477475][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.604591][ T26] audit: type=1326 audit(1719575105.613:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4504 comm="syz.3.247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ec5575b29 code=0x0 [ 119.986802][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.410251][ T4476] chnl_net:caif_netlink_parms(): no params data found [ 120.484767][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 120.748144][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.771646][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.807588][ T4476] device bridge_slave_0 entered promiscuous mode [ 120.831870][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.866300][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.927374][ T47] Bluetooth: hci1: command tx timeout [ 120.933533][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.476500][ T14] usb 2-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 121.500428][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.556533][ T14] usb 2-1: Product: syz [ 121.576240][ T14] usb 2-1: Manufacturer: syz [ 121.580903][ T14] usb 2-1: SerialNumber: syz [ 121.616462][ T4476] device bridge_slave_1 entered promiscuous mode [ 121.711272][ T14] usb 2-1: config 0 descriptor?? [ 121.779356][ T14] usb 2-1: bad CDC descriptors [ 121.785603][ T14] usb 2-1: bad CDC descriptors [ 121.801405][ T14] option 2-1:0.0: GSM modem (1-port) converter detected [ 121.950750][ T4476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.036218][ T3596] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.070190][ T4476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.150383][ T3593] usb 2-1: USB disconnect, device number 7 [ 122.159814][ T3593] option 2-1:0.0: device disconnected [ 122.219665][ T3556] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 122.229462][ T3556] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 122.240512][ T3556] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 122.249636][ T3559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 122.258676][ T3556] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 122.266232][ T3556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 122.336692][ T4476] team0: Port device team_slave_0 added [ 122.354603][ T4476] team0: Port device team_slave_1 added [ 122.400211][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.411968][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.445928][ T3596] usb 1-1: Using ep0 maxpacket: 32 [ 122.454261][ T4476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.497934][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.504921][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.006291][ T3556] Bluetooth: hci1: command tx timeout [ 123.276481][ T3596] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.308308][ T3596] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.328467][ T3596] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.330446][ T4476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.372613][ T3596] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 123.395942][ T3596] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.426339][ T3596] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 123.597400][ T3596] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.613935][ T3596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.640372][ T3596] usb 1-1: Product: syz [ 123.644846][ T3596] usb 1-1: Manufacturer: syz [ 123.660412][ T3596] usb 1-1: SerialNumber: syz [ 123.737890][ T4476] device hsr_slave_0 entered promiscuous mode [ 123.745416][ T4476] device hsr_slave_1 entered promiscuous mode [ 123.762998][ T4568] netlink: 'syz.4.262': attribute type 10 has an invalid length. [ 123.773778][ T4568] team0: Device ipvlan1 failed to register rx_handler [ 123.790474][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 123.846883][ T4568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 123.856787][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.262'. [ 123.866784][ T4568] netlink: 'syz.4.262': attribute type 2 has an invalid length. [ 123.989651][ T3596] cdc_ncm 1-1:1.0: bind() failure [ 124.011369][ T3596] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 124.023758][ T3596] cdc_ncm 1-1:1.1: bind() failure [ 124.039781][ T3596] usb 1-1: USB disconnect, device number 6 [ 124.337093][ T4539] chnl_net:caif_netlink_parms(): no params data found [ 124.472484][ T4585] loop1: detected capacity change from 0 to 256 [ 124.525380][ T56] device hsr_slave_0 left promiscuous mode [ 124.535161][ T3556] Bluetooth: hci4: command tx timeout [ 124.610598][ T56] device hsr_slave_1 left promiscuous mode [ 124.639381][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.712749][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.828464][ T56] device bridge_slave_1 left promiscuous mode [ 124.835053][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.878627][ T56] device bridge_slave_0 left promiscuous mode [ 124.898389][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.111392][ T56] device veth1_macvtap left promiscuous mode [ 125.118078][ T3556] Bluetooth: hci1: command tx timeout [ 125.164372][ T56] device veth0_macvtap left promiscuous mode [ 125.199326][ T56] device veth1_vlan left promiscuous mode [ 125.244503][ T56] device veth0_vlan left promiscuous mode [ 126.147453][ T56] team0 (unregistering): Port device team_slave_1 removed [ 126.213787][ T56] team0 (unregistering): Port device team_slave_0 removed [ 126.303826][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.372911][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.606434][ T47] Bluetooth: hci4: command tx timeout [ 127.037380][ T56] bond0 (unregistering): Released all slaves [ 127.076309][ T3593] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.176378][ T47] Bluetooth: hci1: command tx timeout [ 127.324270][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.337751][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.348539][ T3593] usb 2-1: Using ep0 maxpacket: 32 [ 127.353838][ T4539] device bridge_slave_0 entered promiscuous mode [ 127.383492][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.416053][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.425388][ T4539] device bridge_slave_1 entered promiscuous mode [ 127.434535][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 127.444936][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 127.486496][ T3593] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.506294][ T3593] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.536210][ T3593] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.565088][ T3593] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 127.593185][ T4539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.602948][ T3593] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.623206][ T3593] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 127.675494][ T4539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.831840][ T4539] team0: Port device team_slave_0 added [ 127.838815][ T3593] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.859010][ T3593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.881681][ T4476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.896253][ T3593] usb 2-1: Product: syz [ 127.910771][ T3593] usb 2-1: Manufacturer: syz [ 127.915435][ T3593] usb 2-1: SerialNumber: syz [ 127.953021][ T4539] team0: Port device team_slave_1 added [ 127.972456][ T4476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 128.048977][ T4476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 128.086463][ T4539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.093645][ T4539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.203336][ T4539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.243026][ T4476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 128.293335][ T4539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.306647][ T3593] cdc_ncm 2-1:1.0: bind() failure [ 128.311919][ T4539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.315609][ T3593] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 128.386346][ T4539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.436289][ T3593] cdc_ncm 2-1:1.1: bind() failure [ 128.469216][ T3593] usb 2-1: USB disconnect, device number 8 [ 128.639543][ T4539] device hsr_slave_0 entered promiscuous mode [ 128.679039][ T4539] device hsr_slave_1 entered promiscuous mode [ 128.686382][ T47] Bluetooth: hci4: command tx timeout [ 128.694100][ T4539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.742430][ T4539] Cannot create hsr debugfs directory [ 129.042802][ T4476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.129058][ T4476] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.152960][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.177303][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.225988][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.263690][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.282845][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.290263][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.323441][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.347538][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.366615][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.373862][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.447368][ T4631] loop4: detected capacity change from 0 to 65536 [ 129.548291][ T4539] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.601100][ T4631] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 129.657248][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.665922][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.675826][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.950035][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.974091][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.053829][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.067575][ T4689] hpfs: Bad magic ... probably not HPFS [ 130.302572][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.502437][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.626976][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.706918][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.776428][ T47] Bluetooth: hci4: command tx timeout [ 130.904168][ T4539] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.001089][ T4476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.052673][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.067039][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.127407][ T4539] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.360856][ T3538] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.440861][ T4539] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.466516][ T26] audit: type=1326 audit(1719575117.473:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4706 comm="syz.0.293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84c2775b29 code=0x0 [ 132.449235][ T4539] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.486401][ T3538] usb 2-1: Using ep0 maxpacket: 16 [ 132.501709][ T4539] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.529528][ T4539] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.564375][ T4726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.574804][ T4726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.584025][ T4726] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 132.603377][ T4539] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.616467][ T3538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 132.657017][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.664652][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.676229][ T3538] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 132.685646][ T3538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.704755][ T4476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.754851][ T4730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.298'. [ 132.767843][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.774189][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.782849][ T3538] usb 2-1: config 0 descriptor?? [ 132.895138][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.904699][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.971419][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.988359][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.036163][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.040238][ T4703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'. [ 133.046043][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.063457][ T4476] device veth0_vlan entered promiscuous mode [ 133.070714][ T4738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 133.102668][ T4539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.113462][ T4476] device veth1_vlan entered promiscuous mode [ 133.165715][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.175613][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.184808][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.194633][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.219915][ T4476] device veth0_macvtap entered promiscuous mode [ 133.238144][ T4539] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.248640][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.259164][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.270892][ T4476] device veth1_macvtap entered promiscuous mode [ 133.299742][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.311398][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.321321][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.331447][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.341069][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.348285][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.393262][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.403175][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.413867][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.423992][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.431290][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.439955][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.454100][ T4476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.462261][ T4703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.466340][ T4476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.489169][ T4476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.514235][ T4703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.521295][ T4476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.532337][ T4476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.549714][ T4476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.563253][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.573542][ T4703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.581062][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.592678][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.602222][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.611873][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.622436][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.624997][ T4703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.636225][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.689103][ T4476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.701544][ T4476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.708502][ T3538] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 133.712118][ T4476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.733387][ T4476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.739354][ T3538] hid-generic 0003:0158:0100.0009: unexpected long global item [ 133.745069][ T4476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.762532][ T4476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.765381][ T3538] hid-generic: probe of 0003:0158:0100.0009 failed with error -22 [ 133.773238][ T4476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.791599][ T4476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.821958][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.859412][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.869166][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.878651][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.888316][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.923916][ T7] usb 2-1: USB disconnect, device number 9 [ 133.974149][ T4476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.983962][ T4476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.993102][ T4476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.003112][ T4476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.015018][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.028773][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.140323][ T26] audit: type=1326 audit(1719575120.153:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.4.304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfd9775b29 code=0x0 [ 134.408749][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.473524][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.651719][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 134.926383][ T47] Bluetooth: hci4: command tx timeout [ 135.182735][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 135.215987][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.224328][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.296637][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.354762][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.411944][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.459922][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.685287][ T4539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.707649][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.715325][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.776722][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.795280][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.843183][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.858328][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.013199][ T4539] device veth0_vlan entered promiscuous mode [ 136.032439][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.042245][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.096023][ T4539] device veth1_vlan entered promiscuous mode [ 136.367343][ T56] device hsr_slave_0 left promiscuous mode [ 136.398524][ T56] device hsr_slave_1 left promiscuous mode [ 136.414891][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.466740][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.476595][ T3593] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.489083][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.497227][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.505250][ T56] device bridge_slave_1 left promiscuous mode [ 136.521471][ T4782] loop4: detected capacity change from 0 to 32768 [ 136.524834][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.548006][ T56] device bridge_slave_0 left promiscuous mode [ 136.559708][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.568697][ T1146] XFS (loop4): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 136.590308][ T4782] XFS (loop4): SB validate failed with error -22. [ 136.664282][ T56] device veth1_macvtap left promiscuous mode [ 136.670835][ T56] device veth0_macvtap left promiscuous mode [ 136.677458][ T56] device veth1_vlan left promiscuous mode [ 136.683305][ T56] device veth0_vlan left promiscuous mode [ 136.746261][ T3593] usb 3-1: Using ep0 maxpacket: 16 [ 136.900808][ T3593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 136.919100][ T3593] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 136.958159][ T3593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.978776][ T3593] usb 3-1: config 0 descriptor?? [ 137.054048][ T4820] process 'syz.4.321' launched './file0' with NULL argv: empty string added [ 137.239978][ T4801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 137.381244][ T56] team0 (unregistering): Port device team_slave_1 removed [ 137.471959][ T56] team0 (unregistering): Port device team_slave_0 removed [ 137.514637][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.551970][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.629799][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.642985][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.654566][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.667121][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.695983][ T3593] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 137.704037][ T3593] hid-generic 0003:0158:0100.000A: unexpected long global item [ 137.712332][ T3593] hid-generic: probe of 0003:0158:0100.000A failed with error -22 [ 137.898571][ T3538] usb 3-1: USB disconnect, device number 7 [ 137.944898][ T56] bond0 (unregistering): Released all slaves [ 138.023746][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.037060][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.063588][ T4539] device veth0_macvtap entered promiscuous mode [ 138.086134][ T4539] device veth1_macvtap entered promiscuous mode [ 138.168632][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.179681][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.192185][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.210946][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.231444][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.245435][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.265731][ T4539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.274375][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.292334][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.303900][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.345890][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.396488][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.429008][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.450156][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.481293][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.516729][ T4848] netlink: 652 bytes leftover after parsing attributes in process `syz.0.330'. [ 138.536293][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.557030][ T4539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.585125][ T4539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.632205][ T4539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.707057][ T4852] hpfs: Bad magic ... probably not HPFS [ 138.757928][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.862330][ T3538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.064168][ T4539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.252998][ T4539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.303696][ T4539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.400376][ T4539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.794417][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.822309][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.867841][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 139.894326][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.909791][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.946924][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.028097][ T26] audit: type=1800 audit(1719575126.043:48): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.252" name="file0" dev="sda1" ino=1976 res=0 errno=0 [ 140.055470][ T4881] fuse: Unknown parameter 'user_i00000000000000000000' [ 140.075180][ T26] audit: type=1804 audit(1719575126.083:49): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.252" name="/root/syzkaller.PnBviU/0/file0" dev="sda1" ino=1976 res=1 errno=0 [ 140.207310][ T3595] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.476428][ T3595] usb 5-1: Using ep0 maxpacket: 16 [ 140.484884][ T4891] overlayfs: failed to resolve './file0': -2 [ 140.626403][ T3595] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.656981][ T3595] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.682917][ T3595] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.897539][ T3595] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.979676][ T3595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.132798][ T3595] usb 5-1: Product: syz [ 141.246071][ T3595] usb 5-1: Manufacturer: syz [ 141.382698][ T3595] usb 5-1: SerialNumber: syz [ 141.507728][ T3595] cdc_ncm 5-1:1.0: skipping garbage [ 141.513005][ T3595] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 141.637059][ T3595] cdc_ncm 5-1:1.0: bind() failure [ 141.803418][ T26] audit: type=1800 audit(1719575127.813:50): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.353" name="file0" dev="sda1" ino=1972 res=0 errno=0 [ 141.840874][ T4918] fuse: Unknown parameter 'user_i00000000000000000000' [ 141.853680][ T26] audit: type=1804 audit(1719575127.863:51): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.353" name="/root/syzkaller.PnBviU/5/file0" dev="sda1" ino=1972 res=1 errno=0 [ 141.946942][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.966637][ T3556] Bluetooth: hci4: command tx timeout [ 142.146200][ T152] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 142.316535][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.354773][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.379110][ T7] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.396851][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.415447][ T7] usb 1-1: config 0 descriptor?? [ 142.536440][ T152] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.553177][ T152] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.737155][ T3538] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.796383][ T152] usb 3-1: string descriptor 0 read error: -22 [ 142.802951][ T152] usb 3-1: New USB device found, idVendor=1d6b, idProduct=00f2, bcdDevice= 0.40 [ 142.819275][ T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.872324][ T152] usb 3-1: 0:1 : does not exist [ 142.896945][ T7] hid (null): unknown global tag 0xc [ 142.902679][ T7] hid (null): report_id 0 is invalid [ 143.103537][ T4913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.113607][ T3538] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.120519][ T4920] IPVS: Unknown mcast interface: nr0 [ 143.132475][ T4913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.196390][ T3598] usb 3-1: USB disconnect, device number 8 [ 143.296592][ T3538] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.310338][ T3538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.321403][ T3538] usb 4-1: Product: syz [ 143.325705][ T3538] usb 4-1: Manufacturer: syz [ 143.334570][ T3538] usb 4-1: SerialNumber: syz [ 143.354346][ T4913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.379847][ T3538] hub 4-1:1.0: bad descriptor, ignoring hub [ 143.386485][ T4913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.394135][ T3538] hub: probe of 4-1:1.0 failed with error -5 [ 143.396198][ T4913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.417834][ T3597] usb 5-1: USB disconnect, device number 7 [ 143.422277][ T4913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.489093][ T4913] syz.0.350 uses obsolete (PF_INET,SOCK_PACKET) [ 143.520948][ T4913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.587634][ T4913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.856571][ T26] audit: type=1326 audit(1719575129.863:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4911 comm="syz.0.350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84c2775b29 code=0x0 [ 143.936786][ T7] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 144.005622][ T7] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 144.103748][ T7] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 144.303089][ T7] usb 1-1: USB disconnect, device number 7 [ 144.516332][ T3538] cdc_ncm 4-1:1.0: failed to get mac address [ 144.547273][ T3538] cdc_ncm 4-1:1.0: bind() failure [ 144.607304][ T3538] hub: probe of 4-1:1.1 failed with error -71 [ 144.645863][ T3538] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 144.707137][ T3538] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 144.756405][ T3538] usbtest: probe of 4-1:1.1 failed with error -71 [ 144.837411][ T3538] usb 4-1: USB disconnect, device number 4 [ 144.855273][ T26] audit: type=1800 audit(1719575130.863:53): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.366" name="file0" dev="sda1" ino=1956 res=0 errno=0 [ 144.857752][ T4957] fuse: Unknown parameter 'user_i00000000000000000000' [ 144.887856][ T26] audit: type=1804 audit(1719575130.893:54): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.366" name="/root/syzkaller.4BdLLF/71/file0" dev="sda1" ino=1956 res=1 errno=0 [ 144.957778][ T4958] hpfs: Bad magic ... probably not HPFS [ 145.694723][ T4965] program syz.1.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.942309][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.106287][ T3597] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.116361][ T3538] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 146.346294][ T3597] usb 4-1: Using ep0 maxpacket: 8 [ 146.476757][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 146.496416][ T3538] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.523762][ T3538] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.680052][ T3597] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=cc.7c [ 146.728057][ T3597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.753760][ T3597] usb 4-1: Product: syz [ 146.758966][ T3597] usb 4-1: Manufacturer: syz [ 146.763687][ T3597] usb 4-1: SerialNumber: syz [ 146.780087][ T3597] usb 4-1: config 0 descriptor?? [ 146.820244][ T3538] usb 5-1: string descriptor 0 read error: -22 [ 146.836904][ T3538] usb 5-1: New USB device found, idVendor=1d6b, idProduct=00f2, bcdDevice= 0.40 [ 146.873603][ T3538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.979436][ T3538] usb 5-1: 0:1 : does not exist [ 147.046290][ T3597] ath6kl: Failed to submit usb control message: -71 [ 147.052983][ T3597] ath6kl: unable to send the bmi data to the device: -71 [ 147.103646][ T3597] ath6kl: Unable to send get target info: -71 [ 147.133236][ T3597] ath6kl: Failed to init ath6kl core: -71 [ 147.187742][ T3597] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 147.219215][ T3597] usb 4-1: USB disconnect, device number 5 [ 147.225987][ T4971] IPVS: Unknown mcast interface: nr0 [ 147.261936][ T7] usb 5-1: USB disconnect, device number 8 [ 147.368930][ T4747] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.759764][ T26] audit: type=1800 audit(1719575133.773:55): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.384" name="file0" dev="sda1" ino=1975 res=0 errno=0 [ 147.786401][ T4747] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.786913][ T5005] fuse: Unknown parameter 'user_id00000000000000000000' [ 147.815453][ T26] audit: type=1804 audit(1719575133.823:56): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.384" name="/root/syzkaller.PnBviU/12/file0" dev="sda1" ino=1975 res=1 errno=0 [ 148.006693][ T4747] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.020209][ T4747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.044188][ T4747] usb 3-1: Product: syz [ 148.060239][ T4747] usb 3-1: Manufacturer: syz [ 148.077462][ T4747] usb 3-1: SerialNumber: syz [ 148.137444][ T4747] hub 3-1:1.0: bad descriptor, ignoring hub [ 148.148662][ T4747] hub: probe of 3-1:1.0 failed with error -5 [ 148.280721][ T5020] netlink: 'syz.4.388': attribute type 10 has an invalid length. [ 148.308910][ T26] audit: type=1800 audit(1719575134.323:57): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.390" name="bus" dev="sda1" ino=1975 res=0 errno=0 [ 148.313257][ T5020] team0: Device ipvlan1 failed to register rx_handler [ 148.349007][ T5023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 148.401671][ T5023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.388'. [ 148.415309][ T5023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 148.431589][ T5023] netlink: 'syz.4.388': attribute type 2 has an invalid length. [ 149.326742][ T4747] cdc_ncm 3-1:1.0: failed to get mac address [ 149.376869][ T4747] cdc_ncm 3-1:1.0: bind() failure [ 149.586419][ T4747] hub: probe of 3-1:1.1 failed with error -71 [ 149.816331][ T4747] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 149.895218][ T4747] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 149.994685][ T4747] usbtest: probe of 3-1:1.1 failed with error -71 [ 150.041834][ T3598] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 150.067350][ T4747] usb 3-1: USB disconnect, device number 9 [ 150.526727][ T3598] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.544301][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.552429][ T3598] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.849762][ T3598] usb 2-1: string descriptor 0 read error: -22 [ 150.863798][ T3598] usb 2-1: New USB device found, idVendor=1d6b, idProduct=00f2, bcdDevice= 0.40 [ 150.991905][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.249471][ T3598] usb 2-1: 0:1 : does not exist [ 151.518089][ T5043] IPVS: Unknown mcast interface: nr0 [ 151.571068][ T3595] usb 2-1: USB disconnect, device number 10 [ 151.726328][ T3538] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 152.185516][ T3642] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 152.193844][ T3538] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.486315][ T3642] usb 4-1: Using ep0 maxpacket: 16 [ 152.516684][ T3538] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.542455][ T3538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.551367][ T3538] usb 3-1: Product: syz [ 152.555669][ T3538] usb 3-1: Manufacturer: syz [ 152.568445][ T3538] usb 3-1: SerialNumber: syz [ 152.607051][ T3642] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 152.627866][ T3538] hub 3-1:1.0: bad descriptor, ignoring hub [ 152.674873][ T3538] hub: probe of 3-1:1.0 failed with error -5 [ 152.695109][ T26] audit: type=1800 audit(1719575138.703:58): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.415" name="file0" dev="sda1" ino=1970 res=0 errno=0 [ 152.846934][ T3642] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 152.862004][ T3642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.870685][ T3642] usb 4-1: Product: syz [ 152.874898][ T3642] usb 4-1: Manufacturer: syz [ 152.885443][ T152] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.893338][ T3642] usb 4-1: SerialNumber: syz [ 152.946549][ T3642] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 153.066397][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.146240][ T152] usb 1-1: Using ep0 maxpacket: 16 [ 153.156368][ T2987] bcm5974 4-1:1.0: could not read from device [ 153.168173][ T3642] usb 4-1: USB disconnect, device number 6 [ 153.326346][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 153.426425][ T152] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 153.435693][ T152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.444192][ T152] usb 1-1: Product: syz [ 153.448843][ T7] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.456999][ T152] usb 1-1: Manufacturer: syz [ 153.461785][ T7] usb 5-1: config 0 has no interface number 0 [ 153.468043][ T152] usb 1-1: SerialNumber: syz [ 153.472779][ T7] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 64 [ 153.486726][ T152] usb 1-1: config 0 descriptor?? [ 153.491934][ T7] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 153.501202][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.512489][ T7] usb 5-1: config 0 descriptor?? [ 153.528914][ T152] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 153.557565][ T7] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 153.716348][ T3538] cdc_ncm 3-1:1.0: failed to get mac address [ 153.737120][ T152] gp8psk: usb in 128 operation failed. [ 153.748530][ T3538] cdc_ncm 3-1:1.0: bind() failure [ 153.765618][ T3595] usb 5-1: USB disconnect, device number 9 [ 153.776634][ T3538] hub: probe of 3-1:1.1 failed with error -71 [ 153.786446][ T152] gp8psk: usb in 137 operation failed. [ 153.792165][ T152] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.802043][ T3538] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 153.826660][ T152] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 153.840379][ T3538] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 153.847744][ T152] usb 1-1: media controller created [ 153.866387][ T3538] usbtest: probe of 3-1:1.1 failed with error -71 [ 153.878182][ T152] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.899732][ T152] gp8psk_fe: Frontend revision 1 attached [ 153.905939][ T152] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 153.928499][ T3538] usb 3-1: USB disconnect, device number 10 [ 153.937566][ T152] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 154.327371][ T5089] netlink: 'syz.0.414': attribute type 10 has an invalid length. [ 154.335633][ T5089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.414'. [ 154.347535][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.371149][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.378684][ T5089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.423218][ T5089] team0: Port device bridge0 added [ 154.426620][ T152] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 154.439986][ T152] gp8psk: found Genpix USB device pID = 201 (hex) [ 154.743490][ T5089] Bluetooth: MGMT ver 1.22 [ 155.508955][ T5089] syz.0.414 (5089): /proc/5088/oom_adj is deprecated, please use /proc/5088/oom_score_adj instead. [ 155.636400][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 155.987908][ T3598] usb 1-1: USB disconnect, device number 8 [ 156.069178][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.094432][ T3598] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 156.107177][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.126468][ T7] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 156.147510][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.184937][ T5138] netlink: 'syz.3.431': attribute type 40 has an invalid length. [ 156.185781][ T7] usb 3-1: config 0 descriptor?? [ 156.456621][ T3538] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.560820][ T26] audit: type=1800 audit(1719575142.573:59): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.436" name="file0" dev="sda1" ino=1976 res=0 errno=0 [ 156.596019][ T5148] fuse: Bad value for 'fd' [ 156.609413][ T26] audit: type=1804 audit(1719575142.613:60): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.436" name="/root/syzkaller.cUIiZm/65/file0" dev="sda1" ino=1976 res=1 errno=0 [ 156.673515][ T5150] loop3: detected capacity change from 0 to 256 [ 156.682585][ T5150] ======================================================= [ 156.682585][ T5150] WARNING: The mand mount option has been deprecated and [ 156.682585][ T5150] and is ignored by this kernel. Remove the mand [ 156.682585][ T5150] option from the mount to silence this warning. [ 156.682585][ T5150] ======================================================= [ 156.704394][ T7] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.000C/input/input7 [ 156.726470][ T5150] exfat: Deprecated parameter 'utf8' [ 156.730207][ T3538] usb 5-1: Using ep0 maxpacket: 16 [ 156.740387][ T5150] exfat: Deprecated parameter 'namecase' [ 156.751087][ T5150] exfat: Deprecated parameter 'utf8' [ 156.774919][ T5150] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 156.845711][ T5150] syz.3.437: attempt to access beyond end of device [ 156.845711][ T5150] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 156.882697][ T5150] syz.3.437: attempt to access beyond end of device [ 156.882697][ T5150] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 156.886831][ T3538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.934709][ T7] uclogic 0003:28BD:0933.000C: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 156.949900][ T26] audit: type=1800 audit(1719575142.963:61): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.437" name="file1" dev="loop3" ino=1048606 res=0 errno=0 [ 156.956161][ T3538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.988402][ T5150] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 157.004665][ T7] usb 3-1: USB disconnect, device number 11 [ 157.073373][ T3538] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.087177][ T26] audit: type=1800 audit(1719575143.103:62): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.440" name="file0" dev="sda1" ino=1977 res=0 errno=0 [ 157.117865][ T3538] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.167969][ T3538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.209937][ T3538] usb 5-1: config 0 descriptor?? [ 157.718730][ T3538] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 158.028330][ T3538] microsoft 0003:045E:07DA.000D: global environment stack underflow [ 158.070014][ T3538] microsoft 0003:045E:07DA.000D: item 0 4 1 11 parsing failed [ 158.154612][ T3538] microsoft 0003:045E:07DA.000D: parse failed [ 158.203353][ T3538] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 159.060216][ T7] usb 5-1: USB disconnect, device number 10 [ 159.288197][ T26] audit: type=1800 audit(1719575145.303:63): pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.449" name="file0" dev="sda1" ino=1975 res=0 errno=0 [ 159.317388][ T5187] fuse: Bad value for 'fd' [ 159.340391][ T26] audit: type=1804 audit(1719575145.343:64): pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.449" name="/root/syzkaller.4BdLLF/88/file0" dev="sda1" ino=1975 res=1 errno=0 [ 159.609726][ T5191] loop4: detected capacity change from 0 to 256 [ 159.667356][ T5191] exfat: Deprecated parameter 'utf8' [ 159.672743][ T5191] exfat: Deprecated parameter 'namecase' [ 159.758184][ T5191] exfat: Deprecated parameter 'utf8' [ 159.828344][ T5191] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 159.907904][ T5191] syz.4.451: attempt to access beyond end of device [ 159.907904][ T5191] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 159.990225][ T5191] syz.4.451: attempt to access beyond end of device [ 159.990225][ T5191] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 160.058443][ T26] audit: type=1800 audit(1719575146.073:65): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.451" name="file1" dev="loop4" ino=1048607 res=0 errno=0 [ 160.058699][ T5191] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 160.446476][ T3598] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.513563][ T5213] loop1: detected capacity change from 0 to 512 [ 160.562442][ T5213] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.569285][ T3538] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.591111][ T5213] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 160.606692][ T5213] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.631396][ T5213] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 160.656988][ T5213] EXT4-fs (loop1): 1 truncate cleaned up [ 160.662700][ T5213] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.689630][ T5213] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 160.706225][ T3598] usb 4-1: Using ep0 maxpacket: 16 [ 160.826241][ T3538] usb 3-1: Using ep0 maxpacket: 32 [ 160.833839][ T3972] EXT4-fs (loop1): unmounting filesystem. [ 160.856475][ T3598] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.874203][ T3598] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.913833][ T3598] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.946473][ T3538] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.985871][ T3538] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.171125][ T3538] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 161.201981][ T3538] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 161.288978][ T3538] usb 3-1: can't set config #4, error -71 [ 161.343896][ T3538] usb 3-1: USB disconnect, device number 12 [ 162.067608][ T3598] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.106694][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.211987][ T3598] usb 4-1: Product: syz [ 162.237296][ T3598] usb 4-1: can't set config #1, error -71 [ 162.278156][ T3598] usb 4-1: USB disconnect, device number 7 [ 162.295332][ T5239] loop4: detected capacity change from 0 to 256 [ 162.307405][ T5239] exfat: Deprecated parameter 'utf8' [ 162.312789][ T5239] exfat: Deprecated parameter 'namecase' [ 162.326360][ T5242] loop2: detected capacity change from 0 to 2048 [ 162.338088][ T5242] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.344915][ T5239] exfat: Deprecated parameter 'utf8' [ 162.408134][ T5239] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 162.503894][ T5239] syz.4.469: attempt to access beyond end of device [ 162.503894][ T5239] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 162.550305][ T5242] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 162.602433][ T5239] syz.4.469: attempt to access beyond end of device [ 162.602433][ T5239] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 162.710022][ T5252] hpfs: Bad magic ... probably not HPFS [ 163.028785][ T26] audit: type=1800 audit(1719575149.033:66): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.469" name="file1" dev="loop4" ino=1048608 res=0 errno=0 [ 163.122884][ T5239] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 163.299201][ T4476] EXT4-fs (loop2): unmounting filesystem. [ 163.563939][ T26] audit: type=1800 audit(1719575149.573:67): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.477" name="file0" dev="sda1" ino=1966 res=0 errno=0 [ 163.576615][ T5261] fuse: Bad value for 'fd' [ 163.652615][ T26] audit: type=1804 audit(1719575149.663:68): pid=5261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.477" name="/root/syzkaller.PmipEj/88/file0" dev="sda1" ino=1966 res=1 errno=0 [ 164.116323][ T3598] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.369718][ T3598] usb 1-1: Using ep0 maxpacket: 16 [ 164.556825][ T3598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.643428][ T3598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.824587][ T3598] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.326507][ T3598] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.371515][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.418741][ T5294] loop1: detected capacity change from 0 to 256 [ 165.437637][ T5294] exfat: Deprecated parameter 'utf8' [ 165.448700][ T3598] usb 1-1: Product: syz [ 165.452563][ T5294] exfat: Deprecated parameter 'namecase' [ 165.456154][ T3598] usb 1-1: Manufacturer: syz [ 165.475773][ T3598] usb 1-1: SerialNumber: syz [ 165.489951][ T5294] exfat: Deprecated parameter 'utf8' [ 165.534032][ T5294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 165.568494][ T3598] cdc_ncm 1-1:1.0: skipping garbage [ 165.573921][ T3598] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 165.591579][ T3598] cdc_ncm 1-1:1.0: bind() failure [ 165.594626][ T5294] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 166.036429][ T3598] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.116322][ T1146] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 166.144059][ T26] audit: type=1800 audit(1719575152.153:69): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.490" name="file0" dev="sda1" ino=1976 res=0 errno=0 [ 166.175730][ T5306] fuse: Unknown parameter '0x0000000000000004' [ 166.192888][ T26] audit: type=1804 audit(1719575152.203:70): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.490" name="/root/syzkaller.PnBviU/36/file0" dev="sda1" ino=1976 res=1 errno=0 [ 166.217287][ T3593] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 166.325167][ T5308] loop3: detected capacity change from 0 to 512 [ 166.374758][ T5308] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 166.384456][ T1146] usb 2-1: Using ep0 maxpacket: 16 [ 166.390465][ T5308] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 166.407101][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.416606][ T5308] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 166.418815][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.436823][ T3598] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 166.438638][ T5308] System zones: [ 166.445917][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.459956][ T3598] usb 3-1: config 0 descriptor?? [ 166.466586][ T3593] usb 5-1: Using ep0 maxpacket: 16 [ 166.486454][ T5308] 0-2, 18-18, 34-34 [ 166.498313][ T5308] EXT4-fs (loop3): orphan cleanup on readonly fs [ 166.517689][ T5308] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 166.556942][ T5308] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #15: comm syz.3.491: corrupted inode contents [ 166.579451][ T5308] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #15: comm syz.3.491: mark_inode_dirty error [ 166.592245][ T5308] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #15: comm syz.3.491: corrupted inode contents [ 166.604500][ T5308] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.491: mark_inode_dirty error [ 166.606667][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.631521][ T5308] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #15: comm syz.3.491: corrupted inode contents [ 166.645257][ T5308] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.491: mark_inode_dirty error [ 166.657589][ T5308] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #15: comm syz.3.491: corrupted inode contents [ 166.657916][ T3593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.680627][ T5308] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 166.690648][ T5308] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #15: comm syz.3.491: corrupted inode contents [ 166.704228][ T5308] EXT4-fs error (device loop3): ext4_truncate:4300: inode #15: comm syz.3.491: mark_inode_dirty error [ 166.715581][ T3593] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.723166][ T5308] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 166.739483][ T3593] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.745053][ T5308] EXT4-fs (loop3): 1 truncate cleaned up [ 166.749236][ T1146] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 166.755744][ T5308] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.772537][ T1146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.806152][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.816233][ T1146] usb 2-1: Product: syz [ 166.826669][ T3593] usb 5-1: config 0 descriptor?? [ 166.831738][ T1146] usb 2-1: Manufacturer: syz [ 166.841744][ T4539] EXT4-fs (loop3): unmounting filesystem. [ 166.846207][ T1146] usb 2-1: SerialNumber: syz [ 166.871364][ T1146] usb 2-1: config 0 descriptor?? [ 166.919865][ T1146] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 166.945845][ T3598] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.000E/input/input8 [ 167.033915][ T3598] uclogic 0003:28BD:0933.000E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 167.047996][ T5312] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 167.070037][ T5312] team0: Device ipvlan1 failed to register rx_handler [ 167.103170][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 167.146339][ T1146] gp8psk: usb in 128 operation failed. [ 167.175216][ T5312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 167.175524][ T3596] usb 3-1: USB disconnect, device number 13 [ 167.206500][ T1146] gp8psk: usb in 137 operation failed. [ 167.216231][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.492'. [ 167.227509][ T1146] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.260258][ T5312] netlink: 'syz.3.492': attribute type 2 has an invalid length. [ 167.276601][ T1146] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 167.285892][ T1146] usb 2-1: media controller created [ 167.329217][ T3593] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 167.353955][ T1146] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.364961][ T3593] microsoft 0003:045E:07DA.000F: global environment stack underflow [ 167.373320][ T3593] microsoft 0003:045E:07DA.000F: item 0 4 1 11 parsing failed [ 167.399555][ T3593] microsoft 0003:045E:07DA.000F: parse failed [ 167.412974][ T3593] microsoft: probe of 0003:045E:07DA.000F failed with error -22 [ 167.421223][ T1146] gp8psk_fe: Frontend revision 1 attached [ 167.437838][ T1146] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 167.446972][ T1146] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 167.464514][ T3593] usb 1-1: USB disconnect, device number 9 [ 167.862010][ T5303] netlink: 'syz.1.488': attribute type 10 has an invalid length. [ 167.874365][ T5303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.488'. [ 167.919392][ T5303] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.928051][ T5303] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.942390][ T1146] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 167.949660][ T5323] skb len=10633 headroom=168 headlen=10633 tailroom=5263 [ 167.949660][ T5323] mac=(192,-24) net=(168,20) trans=188 [ 167.949660][ T5323] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 167.949660][ T5323] csum(0x350e2a31 ip_summed=3 complete_sw=0 valid=0 level=0) [ 167.949660][ T5323] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 167.959807][ T1146] gp8psk: found Genpix USB device pID = 201 (hex) [ 167.985607][ T5323] dev name=veth0 feat=0x000061164fdd19e9 [ 167.985635][ T5323] skb linear: 00000000: 45 02 29 89 c6 d9 00 00 0f 2f 1b 3b ac 14 14 18 [ 167.985652][ T5323] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 167.985668][ T5323] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 167.985683][ T5323] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 167.985699][ T5323] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 167.985713][ T5323] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 25 60 00 00 [ 167.985728][ T5323] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985743][ T5323] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985758][ T5323] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985772][ T5323] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985787][ T5323] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985802][ T5323] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985817][ T5323] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985831][ T5323] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985846][ T5323] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985861][ T5323] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985876][ T5323] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985890][ T5323] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985905][ T5323] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.985924][ T5323] ------------[ cut here ]------------ [ 167.985931][ T5323] offset (10633) >= skb_headlen() (10633) [ 167.986747][ T5323] WARNING: CPU: 0 PID: 5323 at net/core/dev.c:3305 skb_checksum_help+0x626/0x740 [ 167.986815][ T5323] Modules linked in: [ 167.986836][ T5323] CPU: 0 PID: 5323 Comm: syz.3.495 Not tainted 6.1.96-syzkaller #0 [ 167.986860][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 167.986874][ T5323] RIP: 0010:skb_checksum_help+0x626/0x740 [ 167.986902][ T5323] Code: ff df 48 8b 4c 24 18 0f b6 04 01 84 c0 0f 85 cd 00 00 00 48 8b 04 24 2b 18 48 c7 c7 a0 1b e1 8b 44 89 fe 89 da e8 da 2b d2 f8 <0f> 0b bb ea ff ff ff e9 59 fd ff ff e8 b9 2e 0a f9 c6 05 bf 25 df [ 167.986926][ T5323] RSP: 0018:ffffc9000f49ef28 EFLAGS: 00010246 [ 167.986948][ T5323] RAX: 8e3f71da58d14200 RBX: 0000000000002989 RCX: 0000000000040000 [ 167.986965][ T5323] RDX: ffffc900052a1000 RSI: 0000000000018607 RDI: 0000000000018608 [ 167.986982][ T5323] RBP: 0000000000002989 R08: ffffffff8152936e R09: fffffbfff1a23e21 [ 167.986999][ T5323] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002a31 [ 167.987015][ T5323] R13: ffff888027452570 R14: ffff888027452500 R15: 0000000000002989 [ 167.987032][ T5323] FS: 00007fdbe6b206c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 167.987053][ T5323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.987069][ T5323] CR2: 000000002000e000 CR3: 0000000079580000 CR4: 00000000003506f0 [ 167.987089][ T5323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 167.987104][ T5323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 167.987119][ T5323] Call Trace: [ 167.987127][ T5323] [ 167.987138][ T5323] ? __warn+0x15a/0x520 [ 167.987163][ T5323] ? skb_checksum_help+0x626/0x740 [ 167.987195][ T5323] ? report_bug+0x2af/0x500 [ 167.987222][ T5323] ? skb_checksum_help+0x626/0x740 [ 167.987255][ T5323] ? handle_bug+0x3d/0x70 [ 167.987275][ T5323] ? exc_invalid_op+0x16/0x40 [ 167.987296][ T5323] ? asm_exc_invalid_op+0x16/0x20 [ 167.987332][ T5323] ? __warn_printk+0x28e/0x350 [ 167.987361][ T5323] ? skb_checksum_help+0x626/0x740 [ 167.987389][ T5323] ? skb_checksum_help+0x626/0x740 [ 167.987424][ T5323] ip_do_fragment+0x209/0x1b20 [ 167.987457][ T5323] ? nf_hook+0x392/0x450 [ 167.987491][ T5323] ? __ip_local_out+0x4a0/0x4a0 [ 167.987518][ T5323] ? ip_fragment+0x220/0x220 [ 167.987558][ T5323] ? ip_frag_next+0xb10/0xb10 [ 167.987585][ T5323] ? xfrm_lookup_with_ifid+0x1741/0x2430 [ 167.987619][ T5323] ? ip_fast_csum+0x1ec/0x2a0 [ 167.987656][ T5323] ? __ip_finish_output+0x22f/0x4b0 [ 168.086437][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.094151][ T5323] ? ip_fragment+0x9a/0x220 [ 168.094197][ T5323] iptunnel_xmit+0x513/0x920 [ 168.103029][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.111429][ T5323] ip_tunnel_xmit+0x22e4/0x2cc0 [ 168.121366][ T5303] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.128491][ T5323] ? tnl_update_pmtu+0x10b0/0x10b0 [ 168.137096][ T5303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.145594][ T5323] ? print_irqtrace_events+0x210/0x210 [ 168.464513][ T5323] ? validate_xmit_xfrm+0xb4/0x10b0 [ 168.469839][ T5323] ? gre_build_header+0x25b/0x9a0 [ 168.474914][ T5323] ipgre_xmit+0x866/0xc40 [ 168.479373][ T5323] dev_hard_start_xmit+0x261/0x8c0 [ 168.484559][ T5323] __dev_queue_xmit+0x1bb1/0x3cf0 [ 168.489737][ T5323] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 168.494900][ T5323] ? netdev_core_pick_tx+0x320/0x320 [ 168.500291][ T5323] ? virtio_net_hdr_to_skb+0x6db/0x1220 [ 168.505908][ T5323] packet_sendmsg+0x4775/0x61a0 [ 168.510881][ T5323] ? aa_sk_perm+0xa60/0xa60 [ 168.515463][ T5323] ? aa_sk_perm+0x92d/0xa60 [ 168.520063][ T5323] ? tomoyo_socket_bind_permission+0x330/0x330 [ 168.526306][ T5323] ? packet_getsockopt+0xed0/0xed0 [ 168.531467][ T5323] ? __import_iovec+0x316/0x4c0 [ 168.536419][ T5323] ? aa_sock_msg_perm+0x91/0x150 [ 168.541414][ T5323] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 168.546793][ T5323] ? security_socket_sendmsg+0x7d/0xa0 [ 168.552295][ T5323] ? packet_getsockopt+0xed0/0xed0 [ 168.557530][ T5323] ____sys_sendmsg+0x5a5/0x8f0 [ 168.562346][ T5323] ? __sys_sendmsg_sock+0x30/0x30 [ 168.564219][ T5303] team0: Port device bridge0 added [ 168.567468][ T5323] __sys_sendmsg+0x2a9/0x390 [ 168.567501][ T5323] ? ____sys_sendmsg+0x8f0/0x8f0 [ 168.567567][ T5323] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 168.567615][ T5323] ? syscall_enter_from_user_mode+0x2e/0x230 [ 168.567642][ T5323] ? lockdep_hardirqs_on+0x94/0x130 [ 168.567667][ T5323] ? syscall_enter_from_user_mode+0x2e/0x230 [ 168.567695][ T5323] do_syscall_64+0x3b/0xb0 [ 168.567726][ T5323] ? clear_bhb_loop+0x45/0xa0 [ 168.567759][ T5323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.567788][ T5323] RIP: 0033:0x7fdbe5d75b29 [ 168.567822][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.567841][ T5323] RSP: 002b:00007fdbe6b20048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.567868][ T5323] RAX: ffffffffffffffda RBX: 00007fdbe5f03fa0 RCX: 00007fdbe5d75b29 [ 168.567885][ T5323] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 168.567901][ T5323] RBP: 00007fdbe5df6756 R08: 0000000000000000 R09: 0000000000000000 [ 168.567916][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.567930][ T5323] R13: 000000000000000b R14: 00007fdbe5f03fa0 R15: 00007ffd3921f288 [ 168.567963][ T5323] [ 168.567974][ T5323] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.567986][ T5323] CPU: 0 PID: 5323 Comm: syz.3.495 Not tainted 6.1.96-syzkaller #0 [ 168.568007][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 168.568020][ T5323] Call Trace: [ 168.568027][ T5323] [ 168.568034][ T5323] dump_stack_lvl+0x1e3/0x2cb [ 168.568069][ T5323] ? nf_tcp_handle_invalid+0x642/0x642 [ 168.568101][ T5323] ? panic+0x764/0x764 [ 168.568132][ T5323] ? vscnprintf+0x59/0x80 [ 168.568163][ T5323] panic+0x318/0x764 [ 168.568190][ T5323] ? __warn+0x169/0x520 [ 168.568217][ T5323] ? memcpy_page_flushcache+0xfc/0xfc [ 168.568260][ T5323] __warn+0x348/0x520 [ 168.568282][ T5323] ? skb_checksum_help+0x626/0x740 [ 168.568314][ T5323] report_bug+0x2af/0x500 [ 168.568336][ T5323] ? skb_checksum_help+0x626/0x740 [ 168.568369][ T5323] handle_bug+0x3d/0x70 [ 168.568390][ T5323] exc_invalid_op+0x16/0x40 [ 168.568410][ T5323] asm_exc_invalid_op+0x16/0x20 [ 168.568441][ T5323] RIP: 0010:skb_checksum_help+0x626/0x740 [ 168.568469][ T5323] Code: ff df 48 8b 4c 24 18 0f b6 04 01 84 c0 0f 85 cd 00 00 00 48 8b 04 24 2b 18 48 c7 c7 a0 1b e1 8b 44 89 fe 89 da e8 da 2b d2 f8 <0f> 0b bb ea ff ff ff e9 59 fd ff ff e8 b9 2e 0a f9 c6 05 bf 25 df [ 168.568488][ T5323] RSP: 0018:ffffc9000f49ef28 EFLAGS: 00010246 [ 168.568515][ T5323] RAX: 8e3f71da58d14200 RBX: 0000000000002989 RCX: 0000000000040000 [ 168.568532][ T5323] RDX: ffffc900052a1000 RSI: 0000000000018607 RDI: 0000000000018608 [ 168.568547][ T5323] RBP: 0000000000002989 R08: ffffffff8152936e R09: fffffbfff1a23e21 [ 168.568564][ T5323] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002a31 [ 168.568579][ T5323] R13: ffff888027452570 R14: ffff888027452500 R15: 0000000000002989 [ 168.568603][ T5323] ? __warn_printk+0x28e/0x350 [ 168.568637][ T5323] ? skb_checksum_help+0x626/0x740 [ 168.568673][ T5323] ip_do_fragment+0x209/0x1b20 [ 168.568709][ T5323] ? nf_hook+0x392/0x450 [ 168.568743][ T5323] ? __ip_local_out+0x4a0/0x4a0 [ 168.568771][ T5323] ? ip_fragment+0x220/0x220 [ 168.568803][ T5323] ? ip_frag_next+0xb10/0xb10 [ 168.568830][ T5323] ? xfrm_lookup_with_ifid+0x1741/0x2430 [ 168.568866][ T5323] ? ip_fast_csum+0x1ec/0x2a0 [ 168.568906][ T5323] ? __ip_finish_output+0x22f/0x4b0 [ 168.568936][ T5323] ? ip_fragment+0x9a/0x220 [ 168.568968][ T5323] iptunnel_xmit+0x513/0x920 [ 168.569017][ T5323] ip_tunnel_xmit+0x22e4/0x2cc0 [ 168.569076][ T5323] ? tnl_update_pmtu+0x10b0/0x10b0 [ 168.569103][ T5323] ? print_irqtrace_events+0x210/0x210 [ 168.569134][ T5323] ? validate_xmit_xfrm+0xb4/0x10b0 [ 168.569171][ T5323] ? gre_build_header+0x25b/0x9a0 [ 168.569204][ T5323] ipgre_xmit+0x866/0xc40 [ 168.569240][ T5323] dev_hard_start_xmit+0x261/0x8c0 [ 168.569281][ T5323] __dev_queue_xmit+0x1bb1/0x3cf0 [ 168.569321][ T5323] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 168.569354][ T5323] ? netdev_core_pick_tx+0x320/0x320 [ 168.569389][ T5323] ? virtio_net_hdr_to_skb+0x6db/0x1220 [ 168.569439][ T5323] packet_sendmsg+0x4775/0x61a0 [ 168.569483][ T5323] ? aa_sk_perm+0xa60/0xa60 [ 168.569548][ T5323] ? aa_sk_perm+0x92d/0xa60 [ 168.569572][ T5323] ? tomoyo_socket_bind_permission+0x330/0x330 [ 168.569602][ T5323] ? packet_getsockopt+0xed0/0xed0 [ 168.569639][ T5323] ? __import_iovec+0x316/0x4c0 [ 168.569672][ T5323] ? aa_sock_msg_perm+0x91/0x150 [ 168.569705][ T5323] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 168.569734][ T5323] ? security_socket_sendmsg+0x7d/0xa0 [ 168.569760][ T5323] ? packet_getsockopt+0xed0/0xed0 [ 168.569796][ T5323] ____sys_sendmsg+0x5a5/0x8f0 [ 168.569829][ T5323] ? __sys_sendmsg_sock+0x30/0x30 [ 168.569868][ T5323] __sys_sendmsg+0x2a9/0x390 [ 168.569893][ T5323] ? ____sys_sendmsg+0x8f0/0x8f0 [ 168.569948][ T5323] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 168.569996][ T5323] ? syscall_enter_from_user_mode+0x2e/0x230 [ 168.570023][ T5323] ? lockdep_hardirqs_on+0x94/0x130 [ 168.570049][ T5323] ? syscall_enter_from_user_mode+0x2e/0x230 [ 168.570094][ T5323] do_syscall_64+0x3b/0xb0 [ 168.570127][ T5323] ? clear_bhb_loop+0x45/0xa0 [ 168.570160][ T5323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 168.570191][ T5323] RIP: 0033:0x7fdbe5d75b29 [ 168.570209][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.570228][ T5323] RSP: 002b:00007fdbe6b20048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.570250][ T5323] RAX: ffffffffffffffda RBX: 00007fdbe5f03fa0 RCX: 00007fdbe5d75b29 [ 168.570267][ T5323] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 168.570282][ T5323] RBP: 00007fdbe5df6756 R08: 0000000000000000 R09: 0000000000000000 [ 168.570297][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.570311][ T5323] R13: 000000000000000b R14: 00007fdbe5f03fa0 R15: 00007ffd3921f288 [ 168.570344][ T5323] [ 168.573488][ T5323] Kernel Offset: disabled [ 169.164615][ T5323] Rebooting in 86400 seconds..