last executing test programs: 6.392022407s ago: executing program 2 (id=1598): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0xfffffffa, 0x3}, 0x100, './file0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)}], 0x1}, 0x0) connect$pppoe(r5, &(0x7f0000000180)={0x18, 0x0, {0x0, @dev, 'macvlan1\x00'}}, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff}, {0xc, 0x1}, {0xffed, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa}]}, 0x2c}}, 0x20044000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6.091119701s ago: executing program 2 (id=1600): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000007410000004c00180000000062726f6164636173742d6c696e6b000000000000000000000000000000000000000046f47f710c2ab02bc76c4c00"/98], 0x68}}, 0x0) socket$tipc(0x1e, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b885b061be4d1d842e4a63ec77a88347691f71d1e41301cf3df73c16fd088806b677d36dfdfecb4a080900060031622d37a921b1c072bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6a2be8b8ea56db5b017149cfa27eb8080778c490a639625353dde9d1c6d1e69c8f629356c70f7c3b140340ce0d51592813652003977d21460538702c7a359af24a7cd83ee44c1c69a7abd35b7d27fe6f33ed371b3db09d05553843a2ae2fc8b1246690dd9db1b67e10fbeea0f8a5045a9f351faac4ffcb8f9a57b03f295c9517551310dda73d40c81eabda5628dc79bf012d0b37b49a05b0d275d46b97c4d8b237341491a2de17488a4fb9b18bf56c96c4ee499a69841d03c75e5837b20cdd1400d9d6d6fb17f88178adc14763fab9740607eccb9a03dee8abf7639e2f9530593b41172f8261bca7a34acd8eff67d25e03ac7532262f5c1256b5ba7bbb5a9966aaf4dddcf9000000000000"], 0xf, 0x2a6, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.628145699s ago: executing program 1 (id=1603): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x7, 0x10001, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) 5.520488998s ago: executing program 1 (id=1604): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010001304000000000000000700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 5.417365596s ago: executing program 1 (id=1606): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x80800) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 5.115729211s ago: executing program 2 (id=1607): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028006000600000000000500070000000000080004000000"], 0x4c}}, 0x0) 4.900244058s ago: executing program 2 (id=1608): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7d, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.767512089s ago: executing program 0 (id=1609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 4.723821903s ago: executing program 2 (id=1611): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x4, 0x2, 0x10001, 0x2000, 0x20, r0, 0x0, '\x00', 0x0, r0, 0x4, 0x3, 0x4}, 0x48) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xe, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 4.536981218s ago: executing program 0 (id=1613): syz_usb_connect$uac1(0x0, 0xd9, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x8, 0x24, 0x4, 0x6, 0x0, "444ba0"}, @extension_unit={0x7}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x0, 0x1, [0x0]}, @extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, "04c3"}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x1, 0x0]}, @extension_unit={0x8, 0x24, 0x8, 0x0, 0x8, 0x0, "ba"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "0b5b09b24acf5c07"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "e6f59fc46a"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "ca9b56"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x3a, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x5, 0x89e, [], 0x0, 0x0, &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x809b, 'caif0\x00', 'macvlan1\x00', 'veth0_to_batadv\x00', 'pimreg0\x00', @empty, [], @local, [0x0, 0xff], 0xce, 0xce, 0xfe, [@arp={{'arp\x00', 0x0, 0x38}, {{0x0, 0x0, 0x0, @multicast1, 0x0, @remote, 0x0, @dev, [0x0, 0xff], @local, [0x0, 0x0, 0x0, 0xff]}}}], [], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0x0, 0x2, [{0x0, 0x0, 0x0, 'macvlan0\x00', 'pimreg1\x00', 'syz_tun\x00', 'syzkaller0\x00', @local, [], @dev, [0x0, 0x0, 0x0, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6, 0xf}}}, @common=@redirect={'redirect\x00', 0x8}], @common=@AUDIT={'AUDIT\x00', 0x8}}, {0x11, 0x40, 0x0, 'ipvlan0\x00', 'pim6reg\x00', 'vlan0\x00', 'bond0\x00', @dev, [0x0, 0x0, 0xff], @empty, [], 0x2be, 0x31e, 0x34e, [@comment={{'comment\x00', 0x0, 0x100}}, @comment={{'comment\x00', 0x0, 0x100}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0x0, 0x2, [{0x0, 0x0, 0x0, '\x00', 'vlan1\x00', 'bond_slave_0\x00', 'dvmrp1\x00', @multicast, [], @dev, [], 0x6e, 0xee, 0x136, [], [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}, {0x0, 0x0, 0x0, 'veth1_to_bond\x00', 'gre0\x00', 'netdevsim0\x00', 'ipvlan0\x00', @multicast, [], @random="319e14456700", [], 0xbe, 0x146, 0x176, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'sane-20000\x00'}}}], [@common=@log={'log\x00', 0x28, {{0x0, "d9df535574fd0134bc7bc7f6bf0bc16bcb6563b170db1a3c2e9435d1a5d3"}}}, @common=@mark={'mark\x00', 0x10}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x916) 4.448222816s ago: executing program 2 (id=1614): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x7, 0x10001, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) 3.580815856s ago: executing program 4 (id=1618): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) syslog(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.317296518s ago: executing program 4 (id=1619): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x44ea02d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0), 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) 3.284222381s ago: executing program 1 (id=1620): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028006000600000000000500070000000000080004000000"], 0x4c}}, 0x0) 3.133199503s ago: executing program 1 (id=1621): syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[], 0x0) 2.766438443s ago: executing program 3 (id=1623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0xfffffffa, 0x3}, 0x100, './file0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)}], 0x1}, 0x0) connect$pppoe(r4, &(0x7f0000000180)={0x18, 0x0, {0x0, @dev, 'macvlan1\x00'}}, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff}, {0xc, 0x1}, {0xffed, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa}]}, 0x2c}}, 0x20044000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.699782049s ago: executing program 3 (id=1624): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 2.617774955s ago: executing program 3 (id=1625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x700, 0x48, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bdac9375aef5d5aed344da629eff97e1bf022a4e03417754948d251006dc8cad9"}}}}}}}, 0x6e) 2.330054159s ago: executing program 3 (id=1626): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010001304000000000000000700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 2.127956795s ago: executing program 4 (id=1627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x0, @dev, 'macvlan1\x00'}}, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'pimreg\x00'}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.95076814s ago: executing program 3 (id=1628): socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0x1015, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYBLOB="05"], 0x0) 1.724614628s ago: executing program 4 (id=1629): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 1.380100067s ago: executing program 0 (id=1630): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xad, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1271a2ab78fce00d9683dda1af1ea89d62b7080a01000000000300008a0300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.175289924s ago: executing program 0 (id=1631): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3ca4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 984.534829ms ago: executing program 0 (id=1632): bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000230000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r4, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x810, &(0x7f0000001180), 0x1, 0x523, &(0x7f0000000240)="$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") 303.113555ms ago: executing program 0 (id=1633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0xfffffffa, 0x3}, 0x100, './file0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev, 'bond_slave_1\x00'}}, 0x1e) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)}], 0x1}, 0x0) connect$pppoe(r4, &(0x7f0000000180)={0x18, 0x0, {0x0, @dev, 'macvlan1\x00'}}, 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff}, {0xc, 0x1}, {0xffed, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa}]}, 0x2c}}, 0x20044000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 191.951184ms ago: executing program 4 (id=1634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 176.986475ms ago: executing program 3 (id=1635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x700, 0x48, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bdac9375aef5d5aed344da629eff97e1bf022a4e03417754948d251006dc8cad9"}}}}}}}, 0x6e) 108.467521ms ago: executing program 4 (id=1636): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x44ea02d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0), 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) 0s ago: executing program 1 (id=1637): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010001304000000000000000700000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): syzkaller1 entered promiscuous mode [ 172.582690][ T3633] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.615171][ T3633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.638284][ T3633] usb 2-1: config 0 descriptor?? [ 172.675452][ T3556] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0 [ 172.720634][ T3556] koneplus 0003:1E7D:2E22.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 173.091943][ T3556] usb 5-1: USB disconnect, device number 5 [ 173.137594][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.162410][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.170507][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.178207][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.186012][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.193745][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.202430][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.219348][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.229633][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.246523][ T3633] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 173.260075][ T3633] HID 045e:07da: Invalid code 65791 type 1 [ 173.276000][ T3633] HID 045e:07da: Invalid code 768 type 1 [ 173.281822][ T3633] HID 045e:07da: Invalid code 769 type 1 [ 173.287637][ T3633] HID 045e:07da: Invalid code 770 type 1 [ 173.294125][ T3633] HID 045e:07da: Invalid code 771 type 1 [ 173.300225][ T3633] HID 045e:07da: Invalid code 772 type 1 [ 173.306254][ T3633] HID 045e:07da: Invalid code 773 type 1 [ 173.311928][ T3633] HID 045e:07da: Invalid code 774 type 1 [ 173.317967][ T3633] HID 045e:07da: Invalid code 775 type 1 [ 173.323891][ T3633] HID 045e:07da: Invalid code 776 type 1 [ 173.343139][ T3633] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input6 [ 173.367546][ T5495] loop3: detected capacity change from 0 to 256 [ 173.439460][ T5496] Core dump to core aborted: cannot preserve file permissions [ 173.462482][ T3633] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 173.490330][ T3633] usb 2-1: USB disconnect, device number 17 [ 174.036881][ T5507] netlink: 'syz.4.586': attribute type 10 has an invalid length. [ 174.177099][ T5517] device syzkaller1 entered promiscuous mode [ 174.425431][ T5522] netlink: 'syz.3.592': attribute type 10 has an invalid length. [ 174.601169][ T3556] usb 3-1: USB disconnect, device number 14 [ 174.608940][ T5522] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.647497][ T5522] bond0: (slave team0): Enslaving as an active interface with an up link [ 174.683108][ T3633] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 174.963076][ T3633] usb 5-1: Using ep0 maxpacket: 16 [ 175.009530][ T5535] loop3: detected capacity change from 0 to 2048 [ 175.032479][ T5535] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.103357][ T5535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.113412][ T3633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.152939][ T3633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.169907][ T3633] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.183073][ T3633] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 175.192219][ T3633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.200514][ T3556] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 175.211362][ T3633] usb 5-1: config 0 descriptor?? [ 175.359020][ T5540] EXT4-fs (loop3): shut down requested (0) [ 175.476550][ T5541] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.598: bg 0: block 234: padding at end of block bitmap is not set [ 175.492225][ T3556] usb 3-1: Using ep0 maxpacket: 16 [ 175.613203][ T3556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.643815][ T3556] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.663674][ T5541] EXT4-fs (loop3): Remounting filesystem read-only [ 175.695000][ T3633] koneplus 0003:1E7D:2E22.0009: unknown main item tag 0x0 [ 175.722563][ T3556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.733489][ T5541] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 175.737618][ T3633] koneplus 0003:1E7D:2E22.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 175.764710][ T5547] loop1: detected capacity change from 0 to 256 [ 175.797552][ T3556] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.842115][ T3556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.864902][ T5549] Core dump to core aborted: cannot preserve file permissions [ 175.919840][ T3556] usb 3-1: config 0 descriptor?? [ 176.147491][ T3633] usb 5-1: USB disconnect, device number 6 [ 176.425262][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.432538][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.453939][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.461209][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.479281][ T5558] device syzkaller1 entered promiscuous mode [ 176.494014][ T26] audit: type=1800 audit(1721774296.890:48): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.604" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 176.525296][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.547133][ T5560] wg0 speed is unknown, defaulting to 1000 [ 176.554157][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.561408][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.575014][ T5560] wg0 speed is unknown, defaulting to 1000 [ 176.583789][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.591830][ T5560] wg0 speed is unknown, defaulting to 1000 [ 176.598928][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.617895][ T3556] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 176.632428][ T5560] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.653417][ T5561] loop1: detected capacity change from 0 to 512 [ 176.659963][ T3556] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input7 [ 176.707085][ T5560] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 176.767082][ T5563] device bridge0 entered promiscuous mode [ 176.780924][ T5563] device macsec1 entered promiscuous mode [ 176.783612][ T5561] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 176.802268][ T3556] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 176.804810][ T5560] wg0 speed is unknown, defaulting to 1000 [ 176.822213][ T5560] wg0 speed is unknown, defaulting to 1000 [ 176.855274][ T5560] wg0 speed is unknown, defaulting to 1000 [ 176.863029][ T5560] wg0 speed is unknown, defaulting to 1000 [ 176.870005][ T5560] wg0 speed is unknown, defaulting to 1000 [ 176.876965][ T5560] wg0 speed is unknown, defaulting to 1000 [ 176.888194][ T5561] System zones: 0-2, 18-18, 34-35 [ 176.923653][ T3556] usb 3-1: USB disconnect, device number 15 [ 176.950415][ T5561] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (188978567168 > 6144). [ 176.973586][ T5561] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 177.044981][ T5561] EXT4-fs (loop1): mount failed [ 177.476323][ T5578] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 177.751898][ T5592] device syzkaller1 entered promiscuous mode [ 177.774664][ T5590] loop2: detected capacity change from 0 to 256 [ 177.841891][ T5590] wg0 speed is unknown, defaulting to 1000 [ 177.904505][ T5593] Core dump to core aborted: cannot preserve file permissions [ 178.014598][ T5599] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 178.420944][ T26] audit: type=1800 audit(1721774298.820:49): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.621" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 178.447273][ T5607] siw: device registration error -23 [ 178.461398][ T5607] loop0: detected capacity change from 0 to 512 [ 178.634832][ T5607] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 178.712930][ T5607] System zones: 0-2, 18-18, 34-35 [ 178.741594][ T5607] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (188978567168 > 6144). [ 178.783282][ T5607] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 178.853877][ T5607] EXT4-fs (loop0): mount failed [ 178.985132][ T5620] device bond0 entered promiscuous mode [ 178.990730][ T5620] device bond_slave_0 entered promiscuous mode [ 179.046631][ T5620] device bond_slave_1 entered promiscuous mode [ 179.113190][ T5623] device syzkaller1 entered promiscuous mode [ 179.141261][ T5620] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 179.254000][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.296487][ T5620] device team0 entered promiscuous mode [ 179.310859][ T5620] device team_slave_0 entered promiscuous mode [ 179.317477][ T5620] device team_slave_1 entered promiscuous mode [ 179.324346][ T5620] bond0: (slave team0): Enslaving as an active interface with an up link [ 180.334982][ T5633] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 180.983005][ T3562] Bluetooth: hci3: command 0x1407 tx timeout [ 180.989133][ T3562] Bluetooth: hci4: command 0x0406 tx timeout [ 180.995369][ T3562] Bluetooth: hci2: command 0x0406 tx timeout [ 181.001386][ T3562] Bluetooth: hci1: command 0x0406 tx timeout [ 181.045295][ T5659] fuse: Bad value for 'fd' [ 181.250179][ T5664] device syzkaller1 entered promiscuous mode [ 181.400260][ T5666] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 181.434748][ T5649] loop4: detected capacity change from 0 to 256 [ 181.571393][ T5649] wg0 speed is unknown, defaulting to 1000 [ 181.617200][ T5672] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 182.390062][ T5698] device syzkaller1 entered promiscuous mode [ 182.677920][ T5704] netlink: 'syz.0.654': attribute type 10 has an invalid length. [ 182.923301][ T3594] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 183.085288][ T5712] loop0: detected capacity change from 0 to 512 [ 183.215878][ T5712] EXT4-fs: Ignoring removed i_version option [ 183.232582][ T5712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.270252][ T3594] usb 5-1: device descriptor read/64, error -71 [ 183.292217][ T5712] EXT4-fs (loop0): 1 truncate cleaned up [ 183.303075][ T5712] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.336575][ T5716] loop2: detected capacity change from 0 to 256 [ 183.389525][ T5716] wg0 speed is unknown, defaulting to 1000 [ 183.447927][ T5720] Core dump to core aborted: cannot preserve file permissions [ 183.552946][ T3594] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.619583][ T5723] device ip6gretap0 entered promiscuous mode [ 183.644149][ T5723] device macsec1 entered promiscuous mode [ 183.674750][ T5723] device ip6gretap0 left promiscuous mode [ 183.752946][ T3594] usb 5-1: device descriptor read/64, error -71 [ 183.842637][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 183.873155][ T3594] usb usb5-port1: attempt power cycle [ 184.214048][ T5736] device syzkaller1 entered promiscuous mode [ 184.292931][ T3594] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 184.342978][ T5742] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 184.393207][ T3594] usb 5-1: device descriptor read/8, error -71 [ 184.651104][ T5744] loop1: detected capacity change from 0 to 40427 [ 184.666122][ T5744] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 184.674207][ T5744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 184.725059][ T5744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.767525][ T5744] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 184.774822][ T5744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.840001][ T3594] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 185.053388][ T3594] usb 5-1: device descriptor read/8, error -71 [ 186.518736][ T5744] sched: RT throttling activated [ 186.723062][ T3594] usb usb5-port1: unable to enumerate USB device [ 186.873665][ T5755] syz.1.667: attempt to access beyond end of device [ 186.873665][ T5755] loop1: rw=2049, sector=77824, nr_sectors = 328 limit=40427 [ 187.074216][ T5768] loop0: detected capacity change from 0 to 512 [ 187.115867][ T5768] EXT4-fs: Ignoring removed i_version option [ 187.177797][ T5768] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.196666][ T3560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.206743][ T3560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.215253][ T3560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.224977][ T3560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.232725][ T3560] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 187.241167][ T3560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.251957][ T5768] EXT4-fs (loop0): 1 truncate cleaned up [ 187.283606][ T5768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.387950][ T5769] wg0 speed is unknown, defaulting to 1000 [ 187.596216][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 187.897302][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.940890][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.041257][ T5769] device bridge_slave_0 entered promiscuous mode [ 188.066358][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 188.072455][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.090722][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.116595][ T5769] device bridge_slave_1 entered promiscuous mode [ 188.140693][ T5786] loop1: detected capacity change from 0 to 256 [ 188.203211][ T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 188.244626][ T5786] wg0 speed is unknown, defaulting to 1000 [ 188.252080][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.294683][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.324284][ T5789] Core dump to core aborted: cannot preserve file permissions [ 188.372267][ T5788] device syzkaller1 entered promiscuous mode [ 188.414580][ T5769] team0: Port device team_slave_0 added [ 188.460738][ T5769] team0: Port device team_slave_1 added [ 188.486329][ T5791] netlink: 'syz.2.677': attribute type 10 has an invalid length. [ 188.563147][ T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 188.578127][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.586733][ T22] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.615210][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.621303][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.652039][ T22] usb 5-1: config 0 descriptor?? [ 188.682053][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.706335][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.725346][ T22] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 188.735457][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.872878][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.012480][ T5769] device hsr_slave_0 entered promiscuous mode [ 189.012965][ T3598] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 189.027534][ T5769] device hsr_slave_1 entered promiscuous mode [ 189.047637][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.059466][ T5769] Cannot create hsr debugfs directory [ 189.273096][ T3598] usb 3-1: device descriptor read/64, error -71 [ 189.302992][ T3559] Bluetooth: hci5: command tx timeout [ 189.583062][ T3598] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 190.023777][ T3598] usb 3-1: device descriptor read/64, error -71 [ 190.143085][ T3598] usb usb3-port1: attempt power cycle [ 190.575262][ T3598] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 190.933359][ T3598] usb 3-1: device descriptor read/8, error -71 [ 191.448049][ T3598] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 191.526231][ T3559] Bluetooth: hci5: command tx timeout [ 192.522868][ T22] usb 5-1: USB disconnect, device number 11 [ 192.788972][ T5769] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.803391][ T3598] usb 3-1: device descriptor read/8, error -71 [ 192.873860][ T5820] device ip6gretap0 entered promiscuous mode [ 192.898445][ T5820] device macsec1 entered promiscuous mode [ 192.918956][ T5826] loop2: detected capacity change from 0 to 512 [ 192.935117][ T3598] usb usb3-port1: unable to enumerate USB device [ 192.955160][ T5826] EXT4-fs: Ignoring removed i_version option [ 192.965342][ T5820] device ip6gretap0 left promiscuous mode [ 192.989033][ T5826] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.021374][ T5826] EXT4-fs (loop2): 1 truncate cleaned up [ 193.036179][ T5826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.215622][ T5769] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.270791][ T5832] netlink: 'syz.4.688': attribute type 10 has an invalid length. [ 193.368613][ T5769] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.623208][ T3559] Bluetooth: hci5: command tx timeout [ 193.639143][ T5769] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.652238][ T5843] loop4: detected capacity change from 0 to 256 [ 193.785142][ T5843] wg0 speed is unknown, defaulting to 1000 [ 193.816830][ T5848] Core dump to core aborted: cannot preserve file permissions [ 193.937194][ T3547] EXT4-fs (loop2): unmounting filesystem. [ 194.197381][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 194.224672][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 194.264536][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.270943][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.353678][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 194.414610][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 194.681039][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.822426][ T5866] loop4: detected capacity change from 0 to 2048 [ 194.837090][ T5866] UDF-fs: bad mount option "undel te" or missing value [ 194.955195][ T5866] fuse: Bad value for 'fd' [ 194.961553][ T3593] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 195.423715][ T3593] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 195.512964][ T3593] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 195.572527][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.604436][ T3593] usb 2-1: config 0 descriptor?? [ 195.654961][ T3593] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 195.676054][ T5871] netlink: 'syz.2.698': attribute type 10 has an invalid length. [ 195.702908][ T3559] Bluetooth: hci5: command tx timeout [ 195.725682][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.789948][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.822066][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.918046][ T5873] device ip6gretap0 entered promiscuous mode [ 195.962951][ T5873] device macsec1 entered promiscuous mode [ 196.010505][ T5873] device ip6gretap0 left promiscuous mode [ 196.081992][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.095434][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.104238][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.111380][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.120005][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.185210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.209132][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.233489][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.240651][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.266613][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.276553][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.320219][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.334756][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.511039][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.521488][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.530983][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.540393][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.549873][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.561924][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.589017][ T5769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.630611][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.645391][ T5897] loop2: detected capacity change from 0 to 256 [ 196.685201][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.719189][ T5897] wg0 speed is unknown, defaulting to 1000 [ 196.806474][ T5902] Core dump to core aborted: cannot preserve file permissions [ 196.818643][ T5903] loop4: detected capacity change from 0 to 512 [ 196.833643][ T5903] EXT4-fs: Ignoring removed i_version option [ 196.858927][ T5903] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.896443][ T5903] EXT4-fs (loop4): 1 truncate cleaned up [ 196.907767][ T5903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 196.959502][ T5910] capability: warning: `syz.0.710' uses deprecated v2 capabilities in a way that may be insecure [ 197.273062][ T3548] EXT4-fs (loop4): unmounting filesystem. [ 197.328652][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.343219][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.376406][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.437531][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.454044][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.501673][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.514720][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.536725][ T5769] device veth0_vlan entered promiscuous mode [ 197.548222][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.585694][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.632007][ T5769] device veth1_vlan entered promiscuous mode [ 197.678952][ T41] usb 2-1: USB disconnect, device number 18 [ 197.701887][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.731777][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.776135][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.814209][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.847956][ T5769] device veth0_macvtap entered promiscuous mode [ 197.867453][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.884305][ T5769] device veth1_macvtap entered promiscuous mode [ 197.951814][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.012840][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.037576][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.069451][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.090185][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.111114][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.134253][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.156355][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.178976][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.201611][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.257631][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.350214][ T5928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'. [ 198.467472][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 198.549021][ T5929] device vlan2 entered promiscuous mode [ 198.588719][ T5929] device veth3 entered promiscuous mode [ 198.620075][ T5929] device veth3 left promiscuous mode [ 198.734542][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.750258][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.784989][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.816442][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.846803][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.877651][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.908423][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.947911][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.969211][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.992415][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.023680][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.048732][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.083731][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.212058][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.231244][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.258717][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.283440][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.307774][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.325575][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.598876][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.613484][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.712545][ T5962] loop1: detected capacity change from 0 to 256 [ 199.777496][ T5963] loop2: detected capacity change from 0 to 1024 [ 199.988786][ T5963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.304918][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.367894][ T5962] wg0 speed is unknown, defaulting to 1000 [ 200.495534][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.535386][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.599621][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.181950][ T5990] No such timeout policy "syz1" [ 201.240216][ T5987] device ip6gretap0 entered promiscuous mode [ 201.325570][ T5987] device macsec2 entered promiscuous mode [ 201.374395][ T5987] device ip6gretap0 left promiscuous mode [ 202.815580][ T6006] loop2: detected capacity change from 0 to 512 [ 202.870322][ T6006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.904815][ T6006] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.735: casefold flag without casefold feature [ 202.937943][ T6006] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.735: missing EA_INODE flag [ 203.043504][ T6006] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.735: error while reading EA inode 12 err=-117 [ 203.044828][ T6006] EXT4-fs (loop2): 1 orphan inode deleted [ 203.044954][ T6006] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.602900][ T6013] 9pnet_fd: Insufficient options for proto=fd [ 203.975421][ T3547] EXT4-fs (loop2): unmounting filesystem. [ 204.174649][ T6023] netlink: 'syz.1.739': attribute type 10 has an invalid length. [ 204.725177][ T6042] netlink: 'syz.0.749': attribute type 4 has an invalid length. [ 206.270483][ T6073] wg0 speed is unknown, defaulting to 1000 [ 207.107618][ T6078] device bond0 entered promiscuous mode [ 207.136416][ T6083] netlink: 'syz.2.761': attribute type 4 has an invalid length. [ 207.143695][ T6078] device bond_slave_0 entered promiscuous mode [ 207.150440][ T6078] device bond_slave_1 entered promiscuous mode [ 207.275193][ T3938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.332467][ T3938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.298165][ T6104] wg0 speed is unknown, defaulting to 1000 [ 208.962883][ T3598] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 209.162003][ T6112] device vlan2 entered promiscuous mode [ 209.209898][ T6115] netlink: 'syz.1.774': attribute type 4 has an invalid length. [ 209.233150][ T3598] usb 3-1: Using ep0 maxpacket: 16 [ 209.353121][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.402887][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.421760][ T3598] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.474784][ T6123] netlink: 48 bytes leftover after parsing attributes in process `syz.3.778'. [ 209.480759][ T3598] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 209.514595][ T6127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.776'. [ 209.523624][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.550629][ T3598] usb 3-1: config 0 descriptor?? [ 209.911155][ T6137] wg0 speed is unknown, defaulting to 1000 [ 210.082953][ T14] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 210.143241][ T3598] usbhid 3-1:0.0: can't add hid device: -71 [ 210.149875][ T3598] usbhid: probe of 3-1:0.0 failed with error -71 [ 210.395745][ T3598] usb 3-1: USB disconnect, device number 20 [ 210.643642][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.662248][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.680526][ T14] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.707765][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.744409][ T14] usb 2-1: config 0 descriptor?? [ 211.688042][ T6159] netlink: 'syz.3.788': attribute type 4 has an invalid length. [ 211.779277][ T6162] No such timeout policy "syz1" [ 211.885675][ T14] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 211.943309][ T14] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input8 [ 212.046138][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 212.096720][ T14] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 212.157892][ T14] usb 2-1: USB disconnect, device number 19 [ 212.524710][ T6182] wg0 speed is unknown, defaulting to 1000 [ 213.377751][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 214.114204][ T3564] Bluetooth: hci5: command tx timeout [ 214.172707][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 214.943000][ T14] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 215.169962][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 215.243007][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 215.383633][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.411787][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.430765][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.451481][ T14] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 215.511039][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.569940][ T14] usb 3-1: config 0 descriptor?? [ 216.159070][ T6285] No such timeout policy "syz1" [ 216.230120][ T3560] Bluetooth: hci5: command tx timeout [ 216.493082][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 216.499936][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 216.541365][ T14] usb 3-1: USB disconnect, device number 21 [ 217.113066][ T155] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 217.164146][ T6319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.857'. [ 217.553405][ T155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.580869][ T155] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 217.628429][ T155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.839286][ T155] usb 1-1: config 0 descriptor?? [ 217.875683][ T6332] No such timeout policy "syz1" [ 218.325465][ T6347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.868'. [ 218.720163][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.957007][ T6385] No such timeout policy "syz1" [ 219.973069][ T155] usbhid 1-1:0.0: can't add hid device: -71 [ 219.980218][ T155] usbhid: probe of 1-1:0.0 failed with error -71 [ 219.999861][ T6386] device vlan2 entered promiscuous mode [ 220.024171][ T155] usb 1-1: USB disconnect, device number 12 [ 221.193018][ T155] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 221.353985][ C1] hrtimer: interrupt took 57568 ns [ 221.506672][ T6424] device vlan2 entered promiscuous mode [ 221.623184][ T155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.645507][ T155] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.672510][ T155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.690219][ T155] usb 4-1: config 0 descriptor?? [ 222.060179][ T6450] netlink: 'syz.0.907': attribute type 10 has an invalid length. [ 222.346218][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.910'. [ 222.415104][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'. [ 222.430162][ T6439] No such timeout policy "syz1" [ 222.448288][ T6462] device vlan2 entered promiscuous mode [ 222.455610][ T6462] device veth3 entered promiscuous mode [ 222.475892][ T6462] device veth3 left promiscuous mode [ 223.076779][ T6476] device vlan2 entered promiscuous mode [ 223.641316][ T6494] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 223.857950][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.926'. [ 224.000193][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.926'. [ 224.227119][ T6503] device vlan2 entered promiscuous mode [ 224.253927][ T6510] No such timeout policy "syz1" [ 224.433858][ T155] usbhid 4-1:0.0: can't add hid device: -71 [ 224.439865][ T155] usbhid: probe of 4-1:0.0 failed with error -71 [ 224.458979][ T6503] device veth3 entered promiscuous mode [ 224.459930][ T155] usb 4-1: USB disconnect, device number 7 [ 224.495302][ T6503] device veth3 left promiscuous mode [ 224.616551][ T6509] wg0 speed is unknown, defaulting to 1000 [ 224.803143][ T3594] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 225.073157][ T3594] usb 1-1: Using ep0 maxpacket: 16 [ 225.213092][ T3594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.239731][ T3594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.273045][ T3594] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.336881][ T3594] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 225.386901][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.504665][ T3594] usb 1-1: config 0 descriptor?? [ 225.811447][ T6541] netlink: 'syz.3.935': attribute type 10 has an invalid length. [ 225.938518][ T6541] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.954219][ T6541] device team0 entered promiscuous mode [ 225.975438][ T6541] device team_slave_0 entered promiscuous mode [ 225.995564][ T6541] device team_slave_1 entered promiscuous mode [ 226.014314][ T6541] bond0: (slave team0): Enslaving as an active interface with an up link [ 226.042963][ T3594] usbhid 1-1:0.0: can't add hid device: -71 [ 226.069734][ T3594] usbhid: probe of 1-1:0.0 failed with error -71 [ 226.244948][ T3594] usb 1-1: USB disconnect, device number 13 [ 226.403034][ T3641] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 226.469570][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.940'. [ 226.556295][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'. [ 226.621434][ T6552] device vlan2 entered promiscuous mode [ 226.635729][ T6552] device veth5 entered promiscuous mode [ 226.656826][ T6552] device veth5 left promiscuous mode [ 226.803211][ T3641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.830229][ T3641] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 226.859801][ T3641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.895042][ T3641] usb 5-1: config 0 descriptor?? [ 227.073353][ T6563] No such timeout policy "syz1" [ 227.891928][ T6585] wg0 speed is unknown, defaulting to 1000 [ 228.145465][ T6591] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 228.185764][ T6592] netlink: 'syz.1.952': attribute type 10 has an invalid length. [ 228.673708][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.957'. [ 228.724499][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 228.824767][ T6607] device vlan2 entered promiscuous mode [ 228.830826][ T6607] device veth5 entered promiscuous mode [ 228.861921][ T6607] device veth5 left promiscuous mode [ 229.202901][ T3641] usbhid 5-1:0.0: can't add hid device: -71 [ 229.223020][ T3641] usbhid: probe of 5-1:0.0 failed with error -71 [ 229.245638][ T3641] usb 5-1: USB disconnect, device number 12 [ 229.702030][ T6622] No such timeout policy "syz1" [ 229.954021][ T6628] netlink: 'syz.0.964': attribute type 10 has an invalid length. [ 230.612191][ T6639] device vlan2 entered promiscuous mode [ 230.627287][ T6639] device syz_tun entered promiscuous mode [ 230.643790][ T6639] team0: Port device vlan2 added [ 230.704662][ T6640] wg0 speed is unknown, defaulting to 1000 [ 231.472365][ T6660] hub 9-0:1.0: USB hub found [ 231.497452][ T6660] hub 9-0:1.0: 8 ports detected [ 231.692881][ T3641] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 232.093001][ T3641] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.115018][ T3641] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.283087][ T3641] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.324256][ T3641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.414512][ T3641] usb 3-1: SerialNumber: syz [ 232.745825][ T3641] usb 3-1: 0:2 : does not exist [ 232.814389][ T3641] usb 3-1: USB disconnect, device number 22 [ 233.084661][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.482951][ T3641] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 233.499694][ T6694] hub 9-0:1.0: USB hub found [ 233.524165][ T6694] hub 9-0:1.0: 8 ports detected [ 233.753071][ T3641] usb 4-1: Using ep0 maxpacket: 16 [ 233.882966][ T3641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.926086][ T3641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.954121][ T3641] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.008645][ T3641] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 234.047609][ T3641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.106852][ T3641] usb 4-1: config 0 descriptor?? [ 234.614543][ T3641] koneplus 0003:1E7D:2E22.000C: unknown main item tag 0x0 [ 234.654713][ T3641] koneplus 0003:1E7D:2E22.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 235.162650][ T3641] usb 4-1: USB disconnect, device number 8 [ 235.383840][ T3599] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 235.783351][ T3599] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.803063][ T3599] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.899705][ T6737] netlink: 'syz.3.999': attribute type 4 has an invalid length. [ 235.912981][ T3599] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.944707][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.992909][ T3599] usb 3-1: SerialNumber: syz [ 236.315463][ T3599] usb 3-1: 0:2 : does not exist [ 236.372146][ T3599] usb 3-1: USB disconnect, device number 23 [ 236.562927][ T14] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 236.664590][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.956112][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 236.983486][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.010137][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'. [ 237.011510][ T14] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 237.067097][ T6776] device vlan2 entered promiscuous mode [ 237.089247][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.089920][ T6776] device veth7 entered promiscuous mode [ 237.114362][ T14] usb 1-1: config 0 descriptor?? [ 237.183470][ T6776] device veth7 left promiscuous mode [ 238.960392][ T6807] netlink: 'syz.3.1020': attribute type 10 has an invalid length. [ 239.076945][ T6804] wg0 speed is unknown, defaulting to 1000 [ 239.362994][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 239.372866][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 239.395917][ T14] usb 1-1: USB disconnect, device number 14 [ 239.428398][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 239.483589][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'. [ 239.520023][ T6824] device vlan3 entered promiscuous mode [ 239.555390][ T6824] device veth3 entered promiscuous mode [ 239.589828][ T6824] device veth3 left promiscuous mode [ 239.681908][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'. [ 240.418902][ T6843] wg0 speed is unknown, defaulting to 1000 [ 240.576638][ T6848] device vlan2 entered promiscuous mode [ 240.794209][ T3599] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 240.899279][ T6852] netlink: 'syz.0.1036': attribute type 4 has an invalid length. [ 241.212928][ T3599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.248274][ T3599] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 241.303434][ T3599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.349317][ T3599] usb 4-1: config 0 descriptor?? [ 241.417460][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1040'. [ 242.107473][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1046'. [ 242.179529][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 242.230317][ T6880] device vlan3 entered promiscuous mode [ 242.300927][ T6880] device veth5 entered promiscuous mode [ 242.341294][ T6880] device veth5 left promiscuous mode [ 242.459030][ T6882] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 242.736526][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 243.683039][ T3599] usbhid 4-1:0.0: can't add hid device: -71 [ 243.692949][ T3599] usbhid: probe of 4-1:0.0 failed with error -71 [ 243.745845][ T3599] usb 4-1: USB disconnect, device number 9 [ 244.292848][ T6929] netlink: 'syz.3.1061': attribute type 10 has an invalid length. [ 244.639873][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 244.783674][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1066'. [ 244.847953][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 244.897518][ T6940] device vlan2 entered promiscuous mode [ 244.924112][ T6940] device veth5 entered promiscuous mode [ 244.995769][ T6940] device veth5 left promiscuous mode [ 245.263051][ T3594] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 245.642961][ T3594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.665586][ T3594] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 245.701719][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.724614][ T3594] usb 4-1: config 0 descriptor?? [ 245.962894][ T3593] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 246.211388][ T6978] netlink: 'syz.4.1077': attribute type 10 has an invalid length. [ 246.352962][ T3593] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.386240][ T3593] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.503065][ T3593] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.542998][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 246.567746][ T3593] usb 2-1: SerialNumber: syz [ 246.930762][ T3593] usb 2-1: 0:2 : does not exist [ 247.536351][ T3593] usb 2-1: USB disconnect, device number 20 [ 247.714035][ T6993] netlink: 'syz.1.1083': attribute type 4 has an invalid length. [ 247.863928][ T3567] udevd[3567]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.000937][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1086'. [ 248.043134][ T3594] usbhid 4-1:0.0: can't add hid device: -71 [ 248.050834][ T3594] usbhid: probe of 4-1:0.0 failed with error -71 [ 248.101899][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 248.102119][ T3594] usb 4-1: USB disconnect, device number 10 [ 248.182434][ T7004] device vlan3 entered promiscuous mode [ 248.280788][ T7004] device veth7 entered promiscuous mode [ 248.384385][ T7004] device veth7 left promiscuous mode [ 248.959781][ T7025] device vlan2 entered promiscuous mode [ 249.423170][ T3593] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 249.873477][ T3593] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.943834][ T3593] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.113007][ T3593] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.122190][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.132827][ T3594] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 250.163131][ T3593] usb 4-1: SerialNumber: syz [ 250.322811][ T3641] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 250.383265][ T3594] usb 5-1: Using ep0 maxpacket: 16 [ 250.455443][ T3593] usb 4-1: 0:2 : does not exist [ 250.503268][ T3594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.524169][ T3593] usb 4-1: USB disconnect, device number 11 [ 250.530318][ T3594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.549316][ T3594] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.564471][ T3594] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 250.593186][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.640197][ T3594] usb 5-1: config 0 descriptor?? [ 250.650220][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1103'. [ 250.691577][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 250.713185][ T3641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.719949][ T7052] device vlan2 entered promiscuous mode [ 250.730599][ T3641] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.731775][ T7052] device veth9 entered promiscuous mode [ 250.748893][ T7052] device veth9 left promiscuous mode [ 250.752399][ T3641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.771460][ T3641] usb 2-1: config 0 descriptor?? [ 251.089369][ T7060] netlink: 'syz.3.1104': attribute type 10 has an invalid length. [ 251.135051][ T3594] koneplus 0003:1E7D:2E22.000D: unknown main item tag 0x0 [ 251.152512][ T3594] koneplus 0003:1E7D:2E22.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 251.299506][ T7066] netlink: 'syz.3.1107': attribute type 10 has an invalid length. [ 251.663998][ T3599] usb 5-1: USB disconnect, device number 13 [ 252.575509][ T7093] device vlan2 entered promiscuous mode [ 252.600175][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'. [ 252.644067][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1115'. [ 252.676993][ T7097] device vlan2 entered promiscuous mode [ 252.682582][ T7097] device veth7 entered promiscuous mode [ 252.717822][ T7097] device veth7 left promiscuous mode [ 252.743670][ T7102] netlink: 'syz.2.1118': attribute type 10 has an invalid length. [ 252.848156][ T7105] netlink: 'syz.4.1119': attribute type 10 has an invalid length. [ 252.878062][ T7107] netlink: 'syz.2.1120': attribute type 4 has an invalid length. [ 253.803093][ T3641] usbhid 2-1:0.0: can't add hid device: -71 [ 253.809466][ T3641] usbhid: probe of 2-1:0.0 failed with error -71 [ 253.890671][ T3641] usb 2-1: USB disconnect, device number 21 [ 254.230261][ T7134] netlink: 'syz.0.1131': attribute type 10 has an invalid length. [ 254.268684][ T7136] netlink: 'syz.1.1130': attribute type 10 has an invalid length. [ 254.314281][ T7137] netlink: 'syz.3.1132': attribute type 4 has an invalid length. [ 255.387580][ T3599] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 255.666477][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1144'. [ 255.704126][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.710499][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.783175][ T3599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.816138][ T3599] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.829765][ T7170] netlink: 'syz.3.1146': attribute type 10 has an invalid length. [ 255.848355][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.886582][ T3599] usb 1-1: config 0 descriptor?? [ 256.022860][ T7178] netlink: 'syz.4.1147': attribute type 10 has an invalid length. [ 257.512918][ T3599] usbhid 1-1:0.0: can't add hid device: -71 [ 257.518957][ T3599] usbhid: probe of 1-1:0.0 failed with error -71 [ 257.554696][ T3599] usb 1-1: USB disconnect, device number 15 [ 257.672330][ T7205] netlink: 'syz.3.1159': attribute type 10 has an invalid length. [ 258.202601][ T7218] netlink: 'syz.1.1163': attribute type 10 has an invalid length. [ 259.493081][ T3593] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 259.818779][ T7252] device vlan2 entered promiscuous mode [ 259.892935][ T3593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.915488][ T3593] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.982855][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.021095][ T3593] usb 1-1: config 0 descriptor?? [ 261.312402][ T7280] netlink: 'syz.4.1186': attribute type 10 has an invalid length. [ 261.919161][ T7294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1193'. [ 262.352959][ T3593] usbhid 1-1:0.0: can't add hid device: -71 [ 262.359088][ T3593] usbhid: probe of 1-1:0.0 failed with error -71 [ 262.414895][ T3593] usb 1-1: USB disconnect, device number 16 [ 262.429912][ T7316] netlink: 'syz.1.1200': attribute type 10 has an invalid length. [ 262.962942][ T3597] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 263.066871][ T7337] device vlan2 entered promiscuous mode [ 263.103316][ T3600] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 263.332996][ T3597] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.363729][ T3597] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.421357][ T7348] netlink: 'syz.2.1215': attribute type 10 has an invalid length. [ 263.443062][ T3597] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.452174][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.473153][ T3600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.493032][ T3597] usb 2-1: SerialNumber: syz [ 263.498070][ T3600] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.523138][ T3600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.561805][ T3600] usb 5-1: config 0 descriptor?? [ 263.795907][ T3597] usb 2-1: 0:2 : does not exist [ 263.808600][ T3597] usb 2-1: unit 5 not found! [ 263.873393][ T3597] usb 2-1: USB disconnect, device number 22 [ 264.155007][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.647634][ T7377] wg0 speed is unknown, defaulting to 1000 [ 265.276118][ T7378] No such timeout policy "syz1" [ 265.963066][ T3600] usbhid 5-1:0.0: can't add hid device: -71 [ 265.970241][ T3600] usbhid: probe of 5-1:0.0 failed with error -71 [ 265.999180][ T3600] usb 5-1: USB disconnect, device number 14 [ 266.031237][ T7393] netlink: 'syz.2.1229': attribute type 10 has an invalid length. [ 266.117169][ T7398] loop0: detected capacity change from 0 to 64 [ 266.252914][ T7398] minix_free_block (loop0:2): bit already cleared [ 266.283453][ T7398] minix_free_block (loop0:3): bit already cleared [ 266.353208][ T7398] minix_free_block (loop0:4): bit already cleared [ 266.464480][ T7409] netlink: 'syz.3.1235': attribute type 10 has an invalid length. [ 266.640714][ T7419] wg0 speed is unknown, defaulting to 1000 [ 267.383058][ T3641] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 267.655398][ T7436] netlink: 'syz.4.1244': attribute type 10 has an invalid length. [ 267.773230][ T3641] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.812913][ T3641] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.884590][ T7443] No such timeout policy "syz1" [ 267.913175][ T3593] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 267.973374][ T3641] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.982549][ T3641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.024414][ T3641] usb 3-1: SerialNumber: syz [ 268.328461][ T3641] usb 3-1: 0:2 : does not exist [ 268.353441][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.393329][ T3593] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.409811][ T3641] usb 3-1: USB disconnect, device number 24 [ 268.428532][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.460677][ T3593] usb 2-1: config 0 descriptor?? [ 268.767573][ T7456] wg0 speed is unknown, defaulting to 1000 [ 269.323800][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.494314][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1251'. [ 269.915656][ T7475] netlink: 'syz.3.1255': attribute type 10 has an invalid length. [ 270.356797][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1260'. [ 270.455945][ T7487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1261'. [ 270.494999][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1260'. [ 270.569373][ T7489] device vlan2 entered promiscuous mode [ 270.600505][ T7489] device veth11 entered promiscuous mode [ 270.674144][ T3593] usbhid 2-1:0.0: can't add hid device: -71 [ 270.681844][ T3593] usbhid: probe of 2-1:0.0 failed with error -71 [ 270.693610][ T3593] usb 2-1: USB disconnect, device number 23 [ 270.748078][ T7489] device veth11 left promiscuous mode [ 271.139021][ T7494] device vlan2 entered promiscuous mode [ 271.156255][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 271.571112][ T7511] netlink: 'syz.3.1268': attribute type 10 has an invalid length. [ 271.782078][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1272'. [ 272.118154][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1276'. [ 272.184161][ T22] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 272.292147][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1280'. [ 272.354930][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1280'. [ 272.382368][ T7542] device vlan3 entered promiscuous mode [ 272.398912][ T7542] device veth9 entered promiscuous mode [ 272.440014][ T7542] device veth9 left promiscuous mode [ 272.563142][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.583543][ T22] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 272.599324][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.627265][ T22] usb 3-1: config 0 descriptor?? [ 272.870153][ T7551] device vlan2 entered promiscuous mode [ 273.114490][ T22] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 273.162423][ T7553] netlink: 'syz.4.1283': attribute type 10 has an invalid length. [ 273.175424][ T22] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000E/input/input9 [ 273.322258][ T22] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 273.356567][ T7556] netlink: 'syz.0.1285': attribute type 4 has an invalid length. [ 273.394471][ T22] usb 3-1: USB disconnect, device number 25 [ 273.490280][ T26] audit: type=1326 audit(1721774393.890:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8af75f19 code=0x7ffc0000 [ 273.552456][ T7559] loop4: detected capacity change from 0 to 256 [ 273.627988][ T26] audit: type=1326 audit(1721774393.930:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8af75f19 code=0x7ffc0000 [ 273.704245][ T26] audit: type=1326 audit(1721774393.930:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8af75f19 code=0x7ffc0000 [ 273.742260][ T26] audit: type=1326 audit(1721774393.940:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8af75f19 code=0x7ffc0000 [ 273.831068][ T26] audit: type=1326 audit(1721774393.940:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8af75f19 code=0x7ffc0000 [ 273.926377][ T26] audit: type=1326 audit(1721774393.940:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8af75f19 code=0x7ffc0000 [ 274.062347][ T7573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1290'. [ 274.064480][ T26] audit: type=1326 audit(1721774393.940:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8af75f19 code=0x7ffc0000 [ 274.099476][ T26] audit: type=1326 audit(1721774393.950:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba8af75f19 code=0x7ffc0000 [ 274.189944][ T26] audit: type=1326 audit(1721774393.950:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba8af75f53 code=0x7ffc0000 [ 274.357702][ T26] audit: type=1326 audit(1721774393.950:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba8af74a9f code=0x7ffc0000 [ 274.754213][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1295'. [ 274.858584][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1295'. [ 274.918083][ T7584] device vlan2 entered promiscuous mode [ 274.923953][ T7584] device veth9 entered promiscuous mode [ 274.950112][ T7584] device veth9 left promiscuous mode [ 275.272143][ T7593] netlink: 'syz.3.1298': attribute type 10 has an invalid length. [ 275.635054][ T3564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.655072][ T3564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.664181][ T3564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.672145][ T3564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.681492][ T3564] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.688839][ T3564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.760072][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1302'. [ 275.780858][ T7597] wg0 speed is unknown, defaulting to 1000 [ 275.802986][ T3598] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 276.012613][ T3598] usb 4-1: device descriptor read/64, error -71 [ 276.013916][ T7612] syz.2.1306[7612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.029692][ T7612] syz.2.1306[7612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.160219][ T7597] chnl_net:caif_netlink_parms(): no params data found [ 276.302917][ T3598] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 276.504549][ T3598] usb 4-1: device descriptor read/64, error -71 [ 276.570833][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.594777][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.621550][ T7597] device bridge_slave_0 entered promiscuous mode [ 276.643070][ T3598] usb usb4-port1: attempt power cycle [ 276.656875][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.676547][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.697491][ T7597] device bridge_slave_1 entered promiscuous mode [ 276.770656][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.797471][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.917408][ T7597] team0: Port device team_slave_0 added [ 276.943601][ T7597] team0: Port device team_slave_1 added [ 276.996377][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.007811][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.055282][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.066974][ T3598] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 277.086973][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.098529][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.155723][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.176897][ T3598] usb 4-1: device descriptor read/8, error -71 [ 277.213837][ T7597] device hsr_slave_0 entered promiscuous mode [ 277.220799][ T7597] device hsr_slave_1 entered promiscuous mode [ 277.237677][ T7597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.254962][ T7597] Cannot create hsr debugfs directory [ 277.462912][ T3598] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 277.508078][ T7597] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.522231][ T7630] loop0: detected capacity change from 0 to 32768 [ 277.532517][ T3597] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 277.562996][ T3598] usb 4-1: device descriptor read/8, error -71 [ 277.633158][ T7597] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.663728][ T7630] XFS (loop0): Mounting V5 Filesystem [ 277.692983][ T3598] usb usb4-port1: unable to enumerate USB device [ 277.704743][ T3564] Bluetooth: hci0: command tx timeout [ 277.759742][ T7597] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.856718][ T7630] XFS (loop0): Ending clean mount [ 277.913507][ T3597] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.915290][ T7597] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.934391][ T3597] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.954595][ T7630] XFS (loop0): Quotacheck needed: Please wait. [ 277.961319][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1313'. [ 278.033407][ T3597] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.042483][ T3597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.066751][ T3597] usb 3-1: SerialNumber: syz [ 278.086197][ T7630] XFS (loop0): Quotacheck: Done. [ 278.169785][ T7597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.181726][ T7597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.193969][ T7597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.221301][ T7597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.357022][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.374463][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.385350][ T3597] usb 3-1: 0:2 : does not exist [ 278.390266][ T3597] usb 3-1: unit 5 not found! [ 278.397214][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.416430][ T7597] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.427650][ T3597] usb 3-1: USB disconnect, device number 26 [ 278.449189][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.469056][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.494568][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.501725][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.526631][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.557431][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.573430][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.580601][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.627425][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.636811][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.693840][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.702686][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.713620][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.754510][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.784639][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.817296][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.850460][ T7597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.924732][ T7597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.048351][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.057526][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.066210][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.075507][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.085433][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.094634][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.304624][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.313631][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.321143][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.666227][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.676150][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.715317][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.729394][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.753239][ T7597] device veth0_vlan entered promiscuous mode [ 279.768819][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.779241][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.786980][ T3564] Bluetooth: hci0: command tx timeout [ 279.811975][ T7597] device veth1_vlan entered promiscuous mode [ 279.875931][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1323'. [ 279.883266][ T7682] syz.2.1325[7682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.885126][ T7682] syz.2.1325[7682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.912907][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.953580][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.985224][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.046495][ T3641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.086219][ T7597] device veth0_macvtap entered promiscuous mode [ 280.115618][ T7597] device veth1_macvtap entered promiscuous mode [ 280.195090][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.231262][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.253734][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.277743][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.296673][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.314059][ T3597] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 280.325009][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.335807][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.347943][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.358503][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.370161][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.381771][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.393970][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.428127][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.460555][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.469842][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.486765][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.505901][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.516545][ T3597] usb 2-1: device descriptor read/64, error -71 [ 280.533558][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.565283][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.603958][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.629099][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.647095][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.658292][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.669377][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.680368][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.690963][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.702082][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.725763][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.765248][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.808628][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.825920][ T7703] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 280.843657][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.863362][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.873598][ T3597] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 280.887550][ T7597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.909878][ T7597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.939808][ T7597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.973547][ T7597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.065106][ T3597] usb 2-1: device descriptor read/64, error -71 [ 281.129726][ T3661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.153238][ T3661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.184232][ T3597] usb usb2-port1: attempt power cycle [ 281.193570][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.208217][ T3661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.217248][ T3661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.233736][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.367321][ T7710] device vlan2 entered promiscuous mode [ 281.568351][ T7712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1335'. [ 281.613072][ T3597] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 281.704200][ T3597] usb 2-1: device descriptor read/8, error -71 [ 281.865630][ T3564] Bluetooth: hci0: command tx timeout [ 281.973159][ T3597] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 282.049781][ T3546] XFS (loop0): Unmounting Filesystem [ 282.073411][ T3597] usb 2-1: device descriptor read/8, error -71 [ 282.126394][ T7730] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 282.193230][ T3597] usb usb2-port1: unable to enumerate USB device [ 282.658455][ T7721] loop4: detected capacity change from 0 to 32768 [ 282.758056][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1347'. [ 282.989832][ T7747] device vlan2 entered promiscuous mode [ 283.599341][ T7771] netlink: 'syz.3.1355': attribute type 10 has an invalid length. [ 283.827256][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1359'. [ 283.943117][ T3564] Bluetooth: hci0: command tx timeout [ 283.990959][ T7756] loop0: detected capacity change from 0 to 32768 [ 284.173264][ T3597] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 284.474896][ T3597] usb 5-1: device descriptor read/64, error -71 [ 284.743486][ T3597] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 284.798121][ T7806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'. [ 284.863424][ T7808] netlink: 'syz.2.1370': attribute type 10 has an invalid length. [ 284.932831][ T3597] usb 5-1: device descriptor read/64, error -71 [ 284.996440][ T7795] loop1: detected capacity change from 0 to 512 [ 285.054079][ T3597] usb usb5-port1: attempt power cycle [ 285.077170][ T7795] EXT4-fs (loop1): 1 orphan inode deleted [ 285.091491][ T7795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 285.101097][ T7795] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038 (0x7fffffff) [ 285.101421][ T3681] __quota_error: 15 callbacks suppressed [ 285.101433][ T3681] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 285.269736][ T3681] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:11: Failed to release dquot type 1 [ 285.318388][ T3681] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 285.336912][ T3681] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:11: Failed to release dquot type 1 [ 285.512882][ T3597] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 285.606034][ T3549] EXT4-fs (loop1): unmounting filesystem. [ 285.619643][ T3597] usb 5-1: device descriptor read/8, error -71 [ 285.803550][ T7845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1382'. [ 285.897370][ T3597] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 286.037113][ T7856] netlink: 'syz.3.1383': attribute type 10 has an invalid length. [ 286.121939][ T3597] usb 5-1: device descriptor read/8, error -71 [ 286.245286][ T3597] usb usb5-port1: unable to enumerate USB device [ 286.252973][ T3598] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 286.633120][ T3598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.663366][ T3598] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.762959][ T3598] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.782440][ T3598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.792550][ T3598] usb 3-1: SerialNumber: syz [ 287.155627][ T3598] usb 3-1: 0:2 : does not exist [ 287.188115][ T7902] netlink: 'syz.1.1402': attribute type 10 has an invalid length. [ 287.227803][ T3598] usb 3-1: USB disconnect, device number 27 [ 287.287138][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.832864][ T26] audit: type=1326 audit(1721774408.230:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1019775f19 code=0x7ffc0000 [ 287.951251][ T26] audit: type=1326 audit(1721774408.280:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1019775f19 code=0x7ffc0000 [ 288.007782][ T26] audit: type=1326 audit(1721774408.280:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1019775f19 code=0x7ffc0000 [ 288.048463][ T26] audit: type=1326 audit(1721774408.280:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1019775f19 code=0x7ffc0000 [ 288.117753][ T26] audit: type=1326 audit(1721774408.280:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1019775f19 code=0x7ffc0000 [ 288.195954][ T26] audit: type=1326 audit(1721774408.280:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1019775f19 code=0x7ffc0000 [ 288.243050][ T3598] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 288.259728][ T26] audit: type=1326 audit(1721774408.280:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1019775f19 code=0x7ffc0000 [ 288.307960][ T7936] netlink: 'syz.0.1414': attribute type 10 has an invalid length. [ 288.317982][ T26] audit: type=1326 audit(1721774408.280:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz.2.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1019775f19 code=0x7ffc0000 [ 288.462977][ T3598] usb 2-1: device descriptor read/64, error -71 [ 288.666407][ T7942] kvm: emulating exchange as write [ 288.753001][ T3598] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 288.952947][ T3598] usb 2-1: device descriptor read/64, error -71 [ 289.083650][ T3598] usb usb2-port1: attempt power cycle [ 289.502988][ T3598] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 289.592368][ T7967] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 289.633328][ T3598] usb 2-1: device descriptor read/8, error -71 [ 289.902832][ T3598] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 289.925947][ T7974] loop2: detected capacity change from 0 to 16 [ 289.987919][ T7974] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 289.993397][ T3598] usb 2-1: device descriptor read/8, error -71 [ 290.045399][ T7974] fuse: Bad value for 'fd' [ 290.113000][ T3598] usb usb2-port1: unable to enumerate USB device [ 290.907234][ T7989] wg0 speed is unknown, defaulting to 1000 [ 291.323271][ T3594] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 291.442018][ T3598] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 291.531537][ T8007] netlink: 'syz.3.1438': attribute type 10 has an invalid length. [ 291.563063][ T3594] usb 5-1: Using ep0 maxpacket: 16 [ 291.576953][ T8002] loop2: detected capacity change from 0 to 1024 [ 291.684244][ T3594] usb 5-1: config 3 has an invalid interface number: 2 but max is 0 [ 291.695760][ T3594] usb 5-1: config 3 has no interface number 0 [ 291.714338][ T3598] usb 1-1: Using ep0 maxpacket: 32 [ 291.774598][ T8002] EXT4-fs: Ignoring removed orlov option [ 291.799882][ T8002] EXT4-fs (loop2): Test dummy encryption mode enabled [ 291.820129][ T8002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 291.843061][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 291.854168][ T3598] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 291.973114][ T3594] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1260, bcdDevice=70.80 [ 291.997097][ T3594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.013330][ T3594] usb 5-1: Product: syz [ 292.017524][ T3594] usb 5-1: Manufacturer: syz [ 292.022126][ T3594] usb 5-1: SerialNumber: syz [ 292.033482][ T3598] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 292.052880][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.071418][ T3598] usb 1-1: Product: syz [ 292.076461][ T3598] usb 1-1: Manufacturer: syz [ 292.096479][ T3598] usb 1-1: SerialNumber: syz [ 292.133773][ T3598] usb 1-1: config 0 descriptor?? [ 292.281639][ T3547] EXT4-fs (loop2): unmounting filesystem. [ 292.306841][ T3598] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 292.333201][ T3594] usb 5-1: USB disconnect, device number 19 [ 292.365580][ T5445] udevd[5445]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.406361][ T155] usb 1-1: USB disconnect, device number 17 [ 293.352837][ T155] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 293.713095][ T155] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.753052][ T155] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.883059][ T155] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 293.902656][ T155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 293.935820][ T155] usb 1-1: SerialNumber: syz [ 294.046391][ T8046] wg0 speed is unknown, defaulting to 1000 [ 294.234909][ T155] usb 1-1: 0:2 : does not exist [ 294.292268][ T155] usb 1-1: USB disconnect, device number 18 [ 294.449210][ T8052] netlink: 'syz.3.1449': attribute type 10 has an invalid length. [ 294.555336][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.908805][ T8055] loop0: detected capacity change from 0 to 256 [ 294.965684][ T8055] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 296.212839][ T3641] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 296.336541][ T8066] loop2: detected capacity change from 0 to 512 [ 296.379866][ T8066] EXT4-fs (loop2): 1 orphan inode deleted [ 296.386938][ T8066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 296.398370][ T1229] __quota_error: 5 callbacks suppressed [ 296.398381][ T1229] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 296.414050][ T8066] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038 (0x7fffffff) [ 296.424237][ T1229] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:5: Failed to release dquot type 1 [ 296.473072][ T155] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 296.483032][ T3641] usb 1-1: Using ep0 maxpacket: 16 [ 296.603178][ T3641] usb 1-1: config 3 has an invalid interface number: 2 but max is 0 [ 296.616927][ T3641] usb 1-1: config 3 has no interface number 0 [ 296.713110][ T155] usb 4-1: Using ep0 maxpacket: 32 [ 296.793087][ T3641] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1260, bcdDevice=70.80 [ 296.802213][ T3641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.833203][ T3641] usb 1-1: Product: syz [ 296.833338][ T155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 296.837384][ T3641] usb 1-1: Manufacturer: syz [ 296.837404][ T3641] usb 1-1: SerialNumber: syz [ 296.888297][ T155] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 297.064147][ T155] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 297.083076][ T155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.100683][ T155] usb 4-1: Product: syz [ 297.105501][ T155] usb 4-1: Manufacturer: syz [ 297.110139][ T155] usb 4-1: SerialNumber: syz [ 297.127609][ T3641] usb 1-1: USB disconnect, device number 19 [ 297.143751][ T155] usb 4-1: config 0 descriptor?? [ 297.195524][ T3547] EXT4-fs (loop2): unmounting filesystem. [ 297.287565][ T155] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 297.375641][ T8021] udevd[8021]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.489702][ T155] usb 4-1: USB disconnect, device number 16 [ 297.567816][ T8093] netlink: 'syz.2.1461': attribute type 10 has an invalid length. [ 297.646285][ T8086] loop1: detected capacity change from 0 to 1024 [ 297.721812][ T8086] EXT4-fs: Ignoring removed orlov option [ 297.780708][ T8086] EXT4-fs (loop1): Test dummy encryption mode enabled [ 297.851267][ T8086] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 297.980727][ T8102] netlink: 'syz.0.1465': attribute type 10 has an invalid length. [ 298.155997][ T3549] EXT4-fs (loop1): unmounting filesystem. [ 298.652817][ T3641] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 299.024099][ T8115] wg0 speed is unknown, defaulting to 1000 [ 299.073341][ T3641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.122769][ T3641] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.141714][ T8117] loop2: detected capacity change from 0 to 512 [ 299.162800][ T3641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.207469][ T3641] usb 1-1: config 0 descriptor?? [ 299.233239][ T8117] EXT4-fs (loop2): 1 orphan inode deleted [ 299.239012][ T8117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 299.260157][ T7420] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 299.282873][ T8117] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038 (0x7fffffff) [ 299.314227][ T7420] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:15: Failed to release dquot type 1 [ 299.684438][ T3641] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 299.724700][ T3641] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000F/input/input10 [ 299.843234][ T3641] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 299.958864][ T3547] EXT4-fs (loop2): unmounting filesystem. [ 300.065751][ T8127] device bond0 entered promiscuous mode [ 300.103227][ T22] usb 1-1: USB disconnect, device number 20 [ 300.132534][ T8127] device bond_slave_0 entered promiscuous mode [ 300.162102][ T8127] device bond_slave_1 entered promiscuous mode [ 300.223724][ T8127] netlink: 'syz.4.1474': attribute type 10 has an invalid length. [ 300.281107][ T8127] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.331771][ T8127] device team0 entered promiscuous mode [ 300.346586][ T8127] device team_slave_0 entered promiscuous mode [ 300.357052][ T8127] device team_slave_1 entered promiscuous mode [ 300.364461][ T8127] bond0: (slave team0): Enslaving as an active interface with an up link [ 300.381344][ T8137] netlink: 'syz.2.1478': attribute type 10 has an invalid length. [ 300.594292][ T3641] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 301.502927][ T3641] usb 2-1: Using ep0 maxpacket: 32 [ 302.286622][ T3641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 302.300915][ T3641] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 303.473107][ T3641] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 303.492413][ T3641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.578263][ T3641] usb 2-1: Product: syz [ 303.603397][ T3641] usb 2-1: config 0 descriptor?? [ 303.643143][ T3641] usb 2-1: can't set config #0, error -71 [ 303.679527][ T3641] usb 2-1: USB disconnect, device number 32 [ 303.786744][ T8182] netlink: 'syz.1.1491': attribute type 10 has an invalid length. [ 303.813102][ T41] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 303.973385][ T8184] netlink: 'syz.1.1492': attribute type 10 has an invalid length. [ 304.023224][ T155] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 304.183084][ T41] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.205773][ T41] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.313184][ T41] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.314920][ T8188] wg0 speed is unknown, defaulting to 1000 [ 304.332447][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.361047][ T41] usb 5-1: SerialNumber: syz [ 304.393330][ T155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.423336][ T155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.452969][ T155] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 304.482401][ T155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.511750][ T155] usb 3-1: config 0 descriptor?? [ 304.678521][ T41] usb 5-1: 0:2 : does not exist [ 304.693532][ T41] usb 5-1: unit 5 not found! [ 304.740108][ T41] usb 5-1: USB disconnect, device number 20 [ 305.114240][ T155] hid-led 0003:0FC5:B080.0010: unknown main item tag 0x0 [ 305.160237][ T8190] loop1: detected capacity change from 0 to 40427 [ 305.178297][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.333450][ T155] hid-led: probe of 0003:0FC5:B080.0010 failed with error -71 [ 305.370688][ T8190] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 305.509181][ T155] usb 3-1: USB disconnect, device number 28 [ 305.609376][ T8190] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 305.850760][ T8190] F2FS-fs (loop1): invalid crc value [ 305.977850][ T8190] F2FS-fs (loop1): Found nat_bits in checkpoint [ 306.124896][ T8190] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 306.131964][ T8190] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 306.573302][ T41] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 306.583181][ T3549] syz-executor: attempt to access beyond end of device [ 306.583181][ T3549] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.913379][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 307.512939][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 307.524667][ T41] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 307.693127][ T41] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 307.702287][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.738810][ T41] usb 3-1: Product: syz [ 307.763507][ T41] usb 3-1: Manufacturer: syz [ 307.768236][ T41] usb 3-1: SerialNumber: syz [ 307.798773][ T41] usb 3-1: config 0 descriptor?? [ 307.855406][ T8218] netlink: 'syz.3.1502': attribute type 10 has an invalid length. [ 307.885858][ T8220] netlink: 'syz.0.1503': attribute type 10 has an invalid length. [ 307.940348][ T41] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 308.009018][ T8021] udevd[8021]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.134500][ T41] usb 3-1: USB disconnect, device number 29 [ 308.328555][ T8229] device vlan3 entered promiscuous mode [ 308.442966][ T3593] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 308.632819][ T3598] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 308.722871][ T3599] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 308.743141][ T8234] No such timeout policy "syz1" [ 308.844679][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.863138][ T3593] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 308.898293][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.933165][ T3593] usb 4-1: config 0 descriptor?? [ 309.043206][ T3598] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.062964][ T3598] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.103410][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.114696][ T3599] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.125068][ T3599] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 309.134307][ T3599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.147271][ T3599] usb 2-1: config 0 descriptor?? [ 309.173446][ T3598] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 309.186485][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.201832][ T8240] input: syz0 as /devices/virtual/input/input11 [ 309.208545][ T3598] usb 1-1: SerialNumber: syz [ 309.424561][ T3593] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 309.453161][ T3593] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input12 [ 309.515424][ T3598] usb 1-1: 0:2 : does not exist [ 309.529283][ T3598] usb 1-1: unit 5 not found! [ 309.565162][ T3598] usb 1-1: USB disconnect, device number 21 [ 309.656252][ T8244] input: syz0 as /devices/virtual/input/input13 [ 310.335083][ T3599] hid-led 0003:0FC5:B080.0012: unknown main item tag 0x0 [ 310.359506][ T3593] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 310.372069][ T3599] hid-led: probe of 0003:0FC5:B080.0012 failed with error -71 [ 310.396560][ T3599] usb 2-1: USB disconnect, device number 33 [ 310.429537][ T3593] usb 4-1: USB disconnect, device number 17 [ 310.811035][ T8252] wg0 speed is unknown, defaulting to 1000 [ 311.411491][ T8257] loop1: detected capacity change from 0 to 256 [ 311.471684][ T8257] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 311.666648][ T26] audit: type=1800 audit(1721774432.070:88): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1514" name="file1" dev="loop1" ino=1048620 res=0 errno=0 [ 311.672459][ T8257] exFAT-fs (loop1): hint_cluster is invalid (17) [ 311.705979][ T8262] netlink: 'syz.3.1516': attribute type 10 has an invalid length. [ 312.375064][ T8269] device vlan2 entered promiscuous mode [ 312.622976][ T8276] netlink: 'syz.0.1522': attribute type 4 has an invalid length. [ 313.139321][ T26] audit: type=1326 audit(1721774433.530:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.2.1523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1019775f19 code=0x0 [ 313.667919][ T3593] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 314.333300][ T3560] Bluetooth: hci5: command 0x0406 tx timeout [ 314.386397][ T8290] netlink: 'syz.4.1527': attribute type 10 has an invalid length. [ 314.632883][ T3593] usb 4-1: Using ep0 maxpacket: 16 [ 314.761546][ T8301] No such timeout policy "syz1" [ 314.773239][ T3593] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.815472][ T3593] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 314.853215][ T3593] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 314.882976][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.914145][ T3593] usb 4-1: config 0 descriptor?? [ 314.922949][ T41] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 314.995376][ T3593] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 315.332899][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.350570][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.395414][ T41] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 315.413338][ T8313] netlink: 'syz.1.1535': attribute type 4 has an invalid length. [ 315.426175][ T8312] device vlan2 entered promiscuous mode [ 315.443134][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.474362][ T41] usb 5-1: config 0 descriptor?? [ 315.681082][ T8303] loop0: detected capacity change from 0 to 40427 [ 315.717941][ T8303] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 315.737380][ T8303] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 315.759561][ T8303] F2FS-fs (loop0): invalid crc value [ 315.810270][ T8303] F2FS-fs (loop0): Found nat_bits in checkpoint [ 316.018653][ T8303] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 316.025180][ T41] hid-led 0003:0FC5:B080.0013: unknown main item tag 0x0 [ 316.033288][ T8303] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 316.340729][ T41] hid-led: probe of 0003:0FC5:B080.0013 failed with error -71 [ 316.843442][ T3593] usb 4-1: USB disconnect, device number 18 [ 316.883228][ T41] usb 5-1: USB disconnect, device number 21 [ 317.153273][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.159593][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.209830][ T8330] loop2: detected capacity change from 0 to 512 [ 317.225824][ T3546] syz-executor: attempt to access beyond end of device [ 317.225824][ T3546] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 317.239407][ T8330] EXT4-fs (loop2): 1 orphan inode deleted [ 317.246168][ T8330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 317.256304][ T8330] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038 (0x7fffffff) [ 317.334447][ T3709] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 317.370171][ T3709] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:12: Failed to release dquot type 1 [ 318.980803][ T8353] netlink: 'syz.4.1546': attribute type 4 has an invalid length. [ 319.076564][ T3547] EXT4-fs (loop2): unmounting filesystem. [ 319.115331][ T8351] loop0: detected capacity change from 0 to 4096 [ 319.122487][ T8351] EXT4-fs: Ignoring removed nobh option [ 319.170148][ T8351] EXT4-fs: Ignoring removed i_version option [ 319.235243][ T8351] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 319.394467][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 319.462947][ T3594] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 319.483157][ T41] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 320.182999][ T3594] usb 2-1: Using ep0 maxpacket: 16 [ 320.771222][ T8372] device vlan3 entered promiscuous mode [ 321.063277][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.074425][ T3594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.098376][ T3594] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 321.112611][ T41] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.140833][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.155895][ T3594] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 321.178795][ T41] usb 5-1: config 0 descriptor?? [ 321.189461][ T3594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.219068][ T3594] usb 2-1: config 0 descriptor?? [ 321.238565][ T8364] loop2: detected capacity change from 0 to 40427 [ 321.272994][ T8364] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 321.282831][ T3594] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 321.304937][ T8364] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 321.378856][ T8364] F2FS-fs (loop2): invalid crc value [ 321.414842][ T8364] F2FS-fs (loop2): Found nat_bits in checkpoint [ 322.354060][ T41] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 322.411809][ T8364] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 322.425047][ T41] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input14 [ 322.444341][ T8364] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 322.578380][ T41] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 322.582802][ T3593] usb 2-1: USB disconnect, device number 34 [ 322.674475][ T14] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 322.708750][ T41] usb 5-1: USB disconnect, device number 22 [ 322.751141][ T8396] netlink: 'syz.1.1559': attribute type 4 has an invalid length. [ 323.053230][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.072750][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.212075][ T14] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 323.224168][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.250001][ T14] usb 4-1: config 0 descriptor?? [ 323.333030][ T8400] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 323.342595][ T8400] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 324.105715][ T8408] netlink: 'syz.4.1562': attribute type 10 has an invalid length. [ 324.368693][ T8411] loop2: detected capacity change from 0 to 512 [ 324.375185][ T3593] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 324.399365][ T8413] loop4: detected capacity change from 0 to 512 [ 324.430281][ T8413] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 324.452313][ T8413] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1564: invalid indirect mapped block 8 (level 2) [ 324.485221][ T8413] EXT4-fs (loop4): Remounting filesystem read-only [ 324.491026][ T14] usb 4-1: language id specifier not provided by device, defaulting to English [ 324.492398][ T8413] EXT4-fs (loop4): 1 truncate cleaned up [ 324.510910][ T8413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 324.536540][ T8411] EXT4-fs (loop2): 1 orphan inode deleted [ 324.545543][ T8411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 324.555117][ T8253] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 324.575431][ T8253] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:18: Failed to release dquot type 1 [ 324.598078][ T8411] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038 (0x7fffffff) [ 324.647835][ T7597] EXT4-fs (loop4): unmounting filesystem. [ 324.704375][ T3599] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 324.723356][ T14] uclogic 0003:256C:006D.0015: failed retrieving Huion firmware version: -71 [ 324.735601][ T14] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 324.747959][ T14] uclogic: probe of 0003:256C:006D.0015 failed with error -71 [ 324.764118][ T14] usb 4-1: USB disconnect, device number 19 [ 324.773025][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.798405][ T3593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.826344][ T3593] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 324.835943][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.867644][ T3593] usb 2-1: config 0 descriptor?? [ 324.994340][ T3599] usb 1-1: Using ep0 maxpacket: 16 [ 325.094897][ T3547] EXT4-fs (loop2): unmounting filesystem. [ 325.133319][ T3599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.162841][ T3599] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.177368][ T3599] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.187872][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.204156][ T3599] usb 1-1: config 0 descriptor?? [ 325.378250][ T3593] hid-multitouch 0003:1FD2:6007.0016: unknown main item tag 0x0 [ 325.403914][ T3593] hid-multitouch 0003:1FD2:6007.0016: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 325.580079][ T8435] wg0 speed is unknown, defaulting to 1000 [ 325.928433][ T8434] netlink: 'syz.3.1571': attribute type 4 has an invalid length. [ 326.155230][ T3593] usb 2-1: USB disconnect, device number 35 [ 326.186607][ T3599] hid_map_usage: 8764 callbacks suppressed [ 326.186623][ T3599] HID 045e:07da: Invalid code 65791 type 1 [ 326.199912][ T3599] HID 045e:07da: Invalid code 768 type 1 [ 326.205737][ T3599] HID 045e:07da: Invalid code 769 type 1 [ 326.212034][ T3599] HID 045e:07da: Invalid code 770 type 1 [ 326.218598][ T3599] HID 045e:07da: Invalid code 771 type 1 [ 326.224516][ T3599] HID 045e:07da: Invalid code 772 type 1 [ 326.232754][ T3599] HID 045e:07da: Invalid code 773 type 1 [ 326.238499][ T3599] HID 045e:07da: Invalid code 774 type 1 [ 326.257312][ T3599] HID 045e:07da: Invalid code 775 type 1 [ 326.322001][ T3599] HID 045e:07da: Invalid code 776 type 1 [ 326.514786][ T8443] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.527765][ T8443] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.307272][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.314449][ T8443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.321999][ T8443] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.329129][ T8443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.554219][ T3599] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0017/input/input15 [ 327.700829][ T3599] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 327.774530][ T3599] usb 1-1: USB disconnect, device number 22 [ 327.837535][ T8452] netlink: 'syz.4.1574': attribute type 10 has an invalid length. [ 328.804965][ T8463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 328.815106][ T8463] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 328.870248][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 328.951226][ T8467] device vlan3 entered promiscuous mode [ 329.023106][ T14] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 329.120291][ T8470] loop0: detected capacity change from 0 to 512 [ 329.173754][ T8470] EXT4-fs (loop0): 1 orphan inode deleted [ 329.179646][ T8470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 329.189589][ T8470] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038 (0x7fffffff) [ 329.213137][ T1229] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 329.249867][ T1229] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:5: Failed to release dquot type 1 [ 329.283230][ T3593] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 329.303047][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 329.404958][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 329.483082][ T3593] usb 2-1: device descriptor read/64, error -71 [ 329.593280][ T14] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 329.611309][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.638587][ T14] usb 4-1: Product: syz [ 329.653040][ T14] usb 4-1: Manufacturer: syz [ 329.674881][ T14] usb 4-1: SerialNumber: syz [ 329.695771][ T14] usb 4-1: config 0 descriptor?? [ 329.723504][ T8490] loop0: detected capacity change from 0 to 256 [ 329.725366][ T8492] loop2: detected capacity change from 0 to 512 [ 329.762942][ T3593] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 329.792222][ T8492] EXT4-fs: Ignoring removed i_version option [ 329.815787][ T8492] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 329.876069][ T8492] EXT4-fs (loop2): 1 truncate cleaned up [ 329.881751][ T8492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 329.992944][ T3593] usb 2-1: device descriptor read/64, error -71 [ 330.064669][ T3547] EXT4-fs (loop2): unmounting filesystem. [ 330.113053][ T3593] usb usb2-port1: attempt power cycle [ 330.517512][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1589'. [ 330.645747][ T14] (unnamed net_device) (uninitialized): Assigned a random MAC address: aa:3e:36:77:81:76 [ 330.677450][ T14] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 330.736962][ T14] usb 4-1: USB disconnect, device number 20 [ 330.942854][ T3593] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 331.052997][ T3593] usb 2-1: device descriptor read/8, error -71 [ 331.166030][ T8519] netlink: 'syz.3.1594': attribute type 4 has an invalid length. [ 331.351195][ T3593] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 331.471029][ T3594] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 331.503208][ T3593] usb 2-1: device descriptor read/8, error -71 [ 331.540433][ T8530] netlink: 'syz.2.1598': attribute type 10 has an invalid length. [ 331.636461][ T3593] usb usb2-port1: unable to enumerate USB device [ 331.860562][ T3594] usb 5-1: Using ep0 maxpacket: 16 [ 331.926528][ T8540] loop2: detected capacity change from 0 to 256 [ 332.113061][ T3594] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.179252][ T3594] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 332.267502][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1604'. [ 332.280233][ T3594] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 332.344714][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.377637][ T3594] usb 5-1: config 0 descriptor?? [ 332.425203][ T3594] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 333.073969][ T8574] netlink: 'syz.0.1609': attribute type 4 has an invalid length. [ 333.085682][ T8572] netlink: 'syz.3.1610': attribute type 10 has an invalid length. [ 333.346208][ T8587] netlink: 'syz.3.1612': attribute type 10 has an invalid length. [ 333.512946][ T3593] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 333.694179][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1616'. [ 333.722857][ T3593] usb 1-1: device descriptor read/64, error -71 [ 334.003054][ T3593] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 334.056147][ T3547] syz-executor (3547) used greatest stack depth: 18576 bytes left [ 334.124477][ T3556] usb 5-1: USB disconnect, device number 23 [ 334.179628][ T3564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.191513][ T3564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.200358][ T3564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.209234][ T3564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.210396][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.227249][ T3593] usb 1-1: device descriptor read/64, error -71 [ 334.235031][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.243514][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.333238][ T8598] wg0 speed is unknown, defaulting to 1000 [ 334.370092][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.384513][ T3593] usb usb1-port1: attempt power cycle [ 334.525343][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.678744][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.788183][ T8598] chnl_net:caif_netlink_parms(): no params data found [ 334.833116][ T3593] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 334.910029][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.923084][ T3594] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 334.941132][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.953304][ T3593] usb 1-1: device descriptor read/8, error -71 [ 334.960564][ T8598] device bridge_slave_0 entered promiscuous mode [ 334.987632][ T8617] netlink: 'syz.3.1623': attribute type 10 has an invalid length. [ 334.996031][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.008167][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.026709][ T8598] device bridge_slave_1 entered promiscuous mode [ 335.049730][ T8619] netlink: 'syz.3.1624': attribute type 4 has an invalid length. [ 335.123315][ T3594] usb 2-1: device descriptor read/64, error -71 [ 335.167084][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.208031][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.233178][ T3593] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 335.353338][ T3593] usb 1-1: device descriptor read/8, error -71 [ 335.393389][ T3594] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 335.420647][ T8598] team0: Port device team_slave_0 added [ 335.439903][ T8598] team0: Port device team_slave_1 added [ 335.493197][ T3593] usb usb1-port1: unable to enumerate USB device [ 335.551368][ T8629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1626'. [ 335.603073][ T3594] usb 2-1: device descriptor read/64, error -71 [ 335.632025][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.649591][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.691307][ T8598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.725009][ T3594] usb usb2-port1: attempt power cycle [ 335.786666][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.800878][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.837341][ T8598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.854088][ T8643] netlink: 'syz.4.1627': attribute type 10 has an invalid length. [ 335.953738][ T8598] device hsr_slave_0 entered promiscuous mode [ 335.978072][ T8598] device hsr_slave_1 entered promiscuous mode [ 336.010393][ T8598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.019214][ T8598] Cannot create hsr debugfs directory [ 336.111042][ T22] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 336.162815][ T3594] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 336.253323][ T3594] usb 2-1: device descriptor read/8, error -71 [ 336.344169][ T3559] Bluetooth: hci3: command tx timeout [ 336.513284][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.524169][ T3594] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 336.560253][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.612968][ T3594] usb 2-1: device descriptor read/8, error -71 [ 336.663449][ T22] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 336.673031][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.688015][ T22] usb 4-1: SerialNumber: syz [ 336.753767][ T3594] usb usb2-port1: unable to enumerate USB device [ 337.008980][ T8668] loop0: detected capacity change from 0 to 512 [ 337.019840][ T22] usb 4-1: 0:2 : does not exist [ 337.025545][ T22] usb 4-1: unit 5 not found! [ 337.059150][ T8668] EXT4-fs (loop0): 1 orphan inode deleted [ 337.065095][ T8668] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 337.074988][ T8668] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038 (0x7fffffff) [ 337.095736][ T9] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 337.109297][ T22] usb 4-1: USB disconnect, device number 21 [ 337.146238][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 1 [ 337.374318][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.425667][ T3546] EXT4-fs (loop0): unmounting filesystem. [ 337.447767][ T11] device hsr_slave_0 left promiscuous mode [ 337.493351][ T11] device hsr_slave_1 left promiscuous mode [ 337.505124][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.529436][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.554167][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.570621][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.574854][ T8678] netlink: 'syz.4.1634': attribute type 4 has an invalid length. [ 337.590078][ T11] device bridge_slave_1 left promiscuous mode [ 337.615136][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.627568][ T11] device bridge_slave_0 left promiscuous mode [ 337.634054][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.695284][ T11] device veth1_macvtap left promiscuous mode [ 337.706402][ T11] device veth0_macvtap left promiscuous mode [ 337.719453][ T11] device veth1_vlan left promiscuous mode [ 337.736638][ T11] device veth0_vlan left promiscuous mode [ 338.274171][ T27] INFO: task syz.3.598:5548 blocked for more than 143 seconds. [ 338.283276][ T27] Not tainted 6.1.100-syzkaller #0 [ 338.288934][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.298269][ T27] task:syz.3.598 state:D stack:27928 pid:5548 ppid:3553 flags:0x00004004 [ 338.307958][ T27] Call Trace: [ 338.311237][ T27] [ 338.317413][ T27] __schedule+0x143f/0x4570 [ 338.322056][ T27] ? __sched_text_start+0x8/0x8 [ 338.326990][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 338.333569][ T27] ? preempt_schedule+0xd9/0xe0 [ 338.338558][ T27] ? __sched_text_start+0x8/0x8 [ 338.343639][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 338.349039][ T27] schedule+0xbf/0x180 [ 338.353402][ T27] ? percpu_rwsem_wait+0x343/0x450 [ 338.358647][ T27] percpu_rwsem_wait+0x3b9/0x450 [ 338.363863][ T27] ? trace_contention_begin+0x1a0/0x1a0 [ 338.370085][ T27] ? percpu_up_write+0x90/0x90 [ 338.375108][ T27] ? rcu_is_watching+0x11/0xb0 [ 338.379892][ T27] __percpu_down_read+0xe6/0x130 [ 338.385133][ T27] sb_start_write+0x180/0x1c0 [ 338.389840][ T27] mnt_want_write_file+0x5a/0x1f0 [ 338.395343][ T27] ksys_fchown+0x40/0x150 [ 338.399706][ T27] __x64_sys_fchown+0x76/0x80 [ 338.404470][ T27] do_syscall_64+0x3b/0xb0 [ 338.408979][ T27] ? clear_bhb_loop+0x45/0xa0 [ 338.413900][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.419883][ T27] RIP: 0033:0x7f9097575f19 [ 338.426891][ T27] RSP: 002b:00007f9097339048 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 338.432909][ T3559] Bluetooth: hci3: command tx timeout [ 338.436716][ T27] RAX: ffffffffffffffda RBX: 00007f9097706470 RCX: 00007f9097575f19 [ 338.458818][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 338.471703][ T27] RBP: 00007f90975e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 338.492961][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.501220][ T27] R13: 000000000000006e R14: 00007f9097706470 R15: 00007ffc804d7c88 [ 338.510468][ T27] [ 338.524207][ T27] INFO: task kmmpd-loop3:5536 blocked for more than 143 seconds. [ 338.531978][ T27] Not tainted 6.1.100-syzkaller #0 [ 338.562744][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.574122][ T27] task:kmmpd-loop3 state:D stack:28376 pid:5536 ppid:2 flags:0x00004000 [ 338.583769][ T27] Call Trace: [ 338.587131][ T27] [ 338.590136][ T27] __schedule+0x143f/0x4570 [ 338.595222][ T27] ? rcuwait_wake_up+0x18/0x220 [ 338.600196][ T27] ? __sched_text_start+0x8/0x8 [ 338.611398][ T27] ? print_irqtrace_events+0x210/0x210 [ 338.617368][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 338.622735][ T27] schedule+0xbf/0x180 [ 338.626819][ T27] ? percpu_rwsem_wait+0x343/0x450 [ 338.632011][ T27] percpu_rwsem_wait+0x3b9/0x450 [ 338.637188][ T27] ? trace_contention_begin+0x1a0/0x1a0 [ 338.642818][ T27] ? percpu_up_write+0x90/0x90 [ 338.647606][ T27] ? rcu_is_watching+0x11/0xb0 [ 338.652386][ T27] __percpu_down_read+0xe6/0x130 [ 338.657539][ T27] ? kmmpd+0x263/0xa70 [ 338.661634][ T27] write_mmp_block+0x2ee/0x390 [ 338.666466][ T27] kmmpd+0x263/0xa70 [ 338.670394][ T27] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 338.676962][ T27] ? __kthread_parkme+0x168/0x1c0 [ 338.682022][ T27] kthread+0x28d/0x320 [ 338.686785][ T27] ? write_mmp_block_thawed+0x5a0/0x5a0 [ 338.692362][ T27] ? kthread_blkcg+0xd0/0xd0 [ 338.697145][ T27] ret_from_fork+0x1f/0x30 [ 338.701596][ T27] [ 338.716916][ T27] [ 338.716916][ T27] Showing all locks held in the system: [ 338.734717][ T27] 4 locks held by kworker/u4:1/11: [ 338.739869][ T27] 1 lock held by rcu_tasks_kthre/12: [ 338.745304][ T27] #0: ffffffff8d12af10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 338.756187][ T27] 1 lock held by rcu_tasks_trace/13: [ 338.761830][ T27] #0: ffffffff8d12b710 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 338.772996][ T27] 1 lock held by khungtaskd/27: [ 338.778293][ T27] #0: ffffffff8d12ad40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 338.788260][ T27] 4 locks held by udevd/3003: [ 338.793790][ T27] #0: ffff888052662668 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10 [ 338.802620][ T27] #1: ffff88805bb3a888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x4f/0x3a0 [ 338.812020][ T27] #2: ffff888049a20e88 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x6e/0x3a0 [ 338.821604][ T27] #3: ffff88805d1020e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x176/0x330 [ 338.830773][ T27] 1 lock held by dhcpcd/3217: [ 338.835672][ T27] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 338.856287][ T27] 2 locks held by getty/3300: [ 338.860969][ T27] #0: ffff88802882e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 338.876437][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 338.887286][ T27] 3 locks held by kworker/0:3/3556: [ 338.892494][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 338.904486][ T27] #1: ffffc90003dbfd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 338.914929][ T27] #2: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 338.925719][ T27] 3 locks held by kworker/0:5/3598: [ 338.930917][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 338.941323][ T27] #1: ffffc900042ffd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 338.951851][ T27] #2: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 338.962251][ T27] 2 locks held by kworker/0:6/3599: [ 338.967607][ T27] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 338.978063][ T27] #1: ffffc900043efd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 338.990386][ T27] 1 lock held by syz.3.598/5548: [ 338.995630][ T27] #0: ffff8880777e2460 (sb_writers#4){++++}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 339.005495][ T27] 1 lock held by kmmpd-loop3/5536: [ 339.010701][ T27] #0: ffff8880777e2460 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x263/0xa70 [ 339.019914][ T27] 7 locks held by syz-executor/8598: [ 339.025353][ T27] #0: ffff88807e448460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 339.034314][ T27] #1: ffff888059237888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 339.044247][ T27] #2: ffff888145b76e88 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 339.054356][ T27] #3: ffffffff8dc0d188 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1ad/0x800 [ 339.064875][ T27] #4: ffff88805d1020e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570 [ 339.077041][ T27] #5: ffff88805d1062f8 (&devlink->lock_key#7){+.+.}-{3:3}, at: nsim_drv_probe+0xc9/0xb20 [ 339.093839][ T27] #6: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 339.111633][ T27] 1 lock held by syz.0.1633/8676: [ 339.118043][ T27] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 339.135517][ T27] 1 lock held by syz.0.1633/8681: [ 339.140560][ T27] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 339.156412][ T27] 1 lock held by syz.3.1635/8680: [ 339.161449][ T27] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x465/0x2430 [ 339.175677][ T27] 1 lock held by syz.3.1635/8683: [ 339.180706][ T27] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2a5/0x1b20 [ 339.190504][ T27] 1 lock held by syz.1.1637/8689: [ 339.195760][ T27] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 339.205226][ T27] 1 lock held by syz.1.1637/8690: [ 339.210264][ T27] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 339.219867][ T27] 1 lock held by syz.1.1637/8691: [ 339.225371][ T27] #0: ffffffff8e299e28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 339.241940][ T27] [ 339.252226][ T27] ============================================= [ 339.252226][ T27] [ 339.268294][ T27] NMI backtrace for cpu 0 [ 339.272649][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.100-syzkaller #0 [ 339.280533][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 339.290602][ T27] Call Trace: [ 339.293891][ T27] [ 339.296829][ T27] dump_stack_lvl+0x1e3/0x2cb [ 339.301523][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 339.307000][ T27] ? panic+0x764/0x764 [ 339.311167][ T27] ? vprintk_emit+0x622/0x740 [ 339.315847][ T27] ? printk_sprint+0x490/0x490 [ 339.320624][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 339.325788][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 339.330836][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 339.336997][ T27] ? _printk+0xd1/0x111 [ 339.341164][ T27] ? panic+0x764/0x764 [ 339.345262][ T27] ? __wake_up_klogd+0xcc/0x100 [ 339.350113][ T27] ? panic+0x764/0x764 [ 339.354179][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 339.360440][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 339.366523][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 339.372514][ T27] watchdog+0xf88/0xfd0 [ 339.376680][ T27] ? watchdog+0x1f8/0xfd0 [ 339.381119][ T27] kthread+0x28d/0x320 [ 339.385204][ T27] ? hungtask_pm_notify+0x50/0x50 [ 339.390252][ T27] ? kthread_blkcg+0xd0/0xd0 [ 339.394855][ T27] ret_from_fork+0x1f/0x30 [ 339.399298][ T27] [ 339.402883][ T27] Sending NMI from CPU 0 to CPUs 1: [ 339.408191][ C1] NMI backtrace for cpu 1 [ 339.408201][ C1] CPU: 1 PID: 3661 Comm: kworker/u4:10 Not tainted 6.1.100-syzkaller #0 [ 339.408217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 339.408225][ C1] Workqueue: bat_events batadv_nc_worker [ 339.408250][ C1] RIP: 0010:kasan_check_range+0x84/0x290 [ 339.408268][ C1] Code: 34 1a 4c 89 f5 4c 29 cd 48 83 fd 10 7f 26 48 85 ed 0f 84 3a 01 00 00 49 f7 d2 49 01 da 41 80 39 00 0f 85 c4 01 00 00 49 ff c1 <49> ff c2 75 ee e9 1d 01 00 00 45 89 cf 41 83 e7 07 0f 84 b5 00 00 [ 339.408280][ C1] RSP: 0018:ffffc90004617970 EFLAGS: 00000086 [ 339.408292][ C1] RAX: 0000000000000001 RBX: 1ffffffff209385e RCX: ffffffff816adafa [ 339.408302][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9049c2f0 [ 339.408312][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff209385f [ 339.408322][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807544e468 [ 339.408333][ C1] R13: dffffc0000000000 R14: fffffbfff209385f R15: ffff88807544e448 [ 339.408344][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 339.408356][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.408367][ C1] CR2: 00007fd4c3103fa8 CR3: 000000001bd71000 CR4: 00000000003506e0 [ 339.408379][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 339.408388][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 339.408397][ C1] Call Trace: [ 339.408401][ C1] [ 339.408406][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 339.408429][ C1] ? read_lock_is_recursive+0x10/0x10 [ 339.408451][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 339.408497][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 339.408518][ C1] ? nmi_handle+0x12e/0x440 [ 339.408540][ C1] ? nmi_handle+0x25/0x440 [ 339.408560][ C1] ? kasan_check_range+0x84/0x290 [ 339.408574][ C1] ? default_do_nmi+0x62/0x150 [ 339.408589][ C1] ? exc_nmi+0xa8/0x100 [ 339.408602][ C1] ? end_repeat_nmi+0x16/0x31 [ 339.408625][ C1] ? mark_lock+0x9a/0x340 [ 339.408645][ C1] ? kasan_check_range+0x84/0x290 [ 339.408660][ C1] ? kasan_check_range+0x84/0x290 [ 339.408674][ C1] ? kasan_check_range+0x84/0x290 [ 339.408688][ C1] [ 339.408692][ C1] [ 339.408697][ C1] mark_lock+0x9a/0x340 [ 339.408719][ C1] lockdep_hardirqs_on_prepare+0x3a0/0x7a0 [ 339.408741][ C1] ? print_irqtrace_events+0x210/0x210 [ 339.408762][ C1] ? __local_bh_enable_ip+0x102/0x1f0 [ 339.408785][ C1] trace_hardirqs_on+0x34/0x40 [ 339.408805][ C1] __local_bh_enable_ip+0x164/0x1f0 [ 339.408827][ C1] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 339.408847][ C1] ? _local_bh_enable+0xa0/0xa0 [ 339.408868][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 339.408889][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 339.408911][ C1] batadv_nc_purge_paths+0x30e/0x3b0 [ 339.408936][ C1] batadv_nc_worker+0x361/0x610 [ 339.408957][ C1] ? process_one_work+0x7a9/0x11d0 [ 339.408974][ C1] process_one_work+0x8a9/0x11d0 [ 339.408995][ C1] ? worker_detach_from_pool+0x260/0x260 [ 339.409014][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 339.409031][ C1] ? kthread_data+0x4e/0xc0 [ 339.409053][ C1] ? wq_worker_running+0x97/0x190 [ 339.409075][ C1] worker_thread+0xa47/0x1200 [ 339.409095][ C1] ? _raw_spin_unlock+0x40/0x40 [ 339.409116][ C1] kthread+0x28d/0x320 [ 339.409128][ C1] ? worker_clr_flags+0x190/0x190 [ 339.409143][ C1] ? kthread_blkcg+0xd0/0xd0 [ 339.409157][ C1] ret_from_fork+0x1f/0x30 [ 339.409181][ C1] [ 339.410193][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 339.761246][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.100-syzkaller #0 [ 339.769124][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 339.779176][ T27] Call Trace: [ 339.782450][ T27] [ 339.785372][ T27] dump_stack_lvl+0x1e3/0x2cb [ 339.790054][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 339.795508][ T27] ? panic+0x764/0x764 [ 339.799571][ T27] ? vscnprintf+0x59/0x80 [ 339.803897][ T27] panic+0x318/0x764 [ 339.807778][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 339.813920][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 339.819278][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 339.825416][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 339.831561][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 339.837705][ T27] watchdog+0xfc7/0xfd0 [ 339.841855][ T27] ? watchdog+0x1f8/0xfd0 [ 339.846173][ T27] kthread+0x28d/0x320 [ 339.850225][ T27] ? hungtask_pm_notify+0x50/0x50 [ 339.855233][ T27] ? kthread_blkcg+0xd0/0xd0 [ 339.859807][ T27] ret_from_fork+0x1f/0x30 [ 339.864218][ T27] [ 339.867481][ T27] Kernel Offset: disabled [ 339.871788][ T27] Rebooting in 86400 seconds..