last executing test programs: 15.337995592s ago: executing program 2 (id=982): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 10.649740063s ago: executing program 2 (id=990): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, 0x0, &(0x7f0000000540)="151b2694479df73f7c00e80a173596e7049ae1b97ce3c773dcb119d7", 0x1c, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getdents64(r3, &(0x7f0000002ec0)=""/4096, 0x1000) 10.572278722s ago: executing program 0 (id=992): r0 = syz_clone3(&(0x7f0000000300)={0x14000300, 0x0, 0x0, 0x0, {0x12}, &(0x7f00000003c0)=""/241, 0xf1, &(0x7f00000004c0)=""/234, 0x0}, 0x58) tgkill(r0, 0xffffffffffffffff, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) clock_getres(0xfffffffffffffffa, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xa, &(0x7f0000000380)=0x0) r9 = eventfd(0x0) io_submit(r8, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1, r7, 0x0, 0x0, 0x81, 0x0, 0x1, r9}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.612300633s ago: executing program 1 (id=994): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b00"], 0x28}}, 0x0) 9.584733275s ago: executing program 4 (id=995): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = inotify_init() readv(r1, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000540)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff02030000000000000000000000000108000300", @ANYRES32=r6], 0x54}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 9.382686519s ago: executing program 1 (id=996): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000480), 0xfd, 0x448, &(0x7f0000000d00)="$eJzs3MtvG0UYAPBv10kLfZBQyqOlgKEgIh5Jk/LogQsIJDggIcGhSFxCklalboOaINEqgoBQe0SVuCNuIPEXcIILAk5IcATOqFKFcmngZLT2OnEd28ROUqf495O2numOPfN5d9azM3YC6FvF7J8kYk9E/BYRQ9Xs9QWK1YflpYWpv5cWppIol1//K6mUu7a0MFUrWnve7jwzkkaknyQNL1g1d/7C6clSaeZcnh+bP/Pu2Nz5C0+eOjN5cubkzNmJY8eeOjr+7DMTT29KnFlc1w5+MHvowMtvXn516vjlt3/8+tLeatzREEd7O9ZdZzGKzUKveGTdr3Jz2FuXTgZ62BA6UoiI7HANVvr/UBRi9eANxUsf97RxwJYql8vlna13L5aB/7Eket0CoDdqH/TZ/W9tu0FDj23h6vPVG6As7uV8q+4ZiDQvM9hwf7uZihFxfPGfz7MtOpqHAADozrfZ+OeJZuO/NO6qK3dbvoYyHBG3R8S+iLgjIvZHxJ0RlbJ3R8Q9HdZfbMivHf+kV7oKbJ2y8d9z+drW9eO/2ugvhgt5bm8l/sHkxKnSzJH8PRmJwZ1ZfrxNHd+9+MunrfbVj/+yLau/NhbM23FloGGCbnpyfnIjMde7+lHEwYFm8ScrKwFJRByIiINd1nHqsa8Otdr33/G3sQnrTOUvIh6tHv/FyOOvrvCtrtwl7dcnx26J0syRsdpZsdZPP198rVX9G4p/E2THf1fT838l/uGkfr12rvM6Lv5+qeU9Tbfn/47kjUq6thr7/uT8/LnxyuVp7f9PrD63ls/LV+IfOdy8/++L1Xfi3ojITuL7IuL+iHggb/uDEfFQRBxuE/8PLzz8Tvfxb60s/umOjn/nicLp779pVf86jv+vb+WpkfxxPde/SuWv5Jk2DezuXQMAAICbSxoReyJJR1fSaTo6Wv0O//7YlZZm5+YfPzH73tnp6nflh2Mwrc10DdXNh47nc8O1/ERD/mg+b/xZ4dZKfnRqtjTd6+Chz+1u0f8zfxZ63Tpgy/m9FvQv/R/6l/4P/Uv/h/6l/0P/atb/P+xBO4Abz+c/9C/9H/qX/g/9S/+HvrSR3/V3kFgul8tbXMW2SXyZ/63A7dKeLUpEui2aIbGhxB/5dWDtrl5elQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbPvwEAAP//rdfgqg==") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x150007a2) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 8.42283609s ago: executing program 1 (id=998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(0xffffffffffffffff, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{}], "99"}, @func, @func, @datasec={0x0, 0x1, 0x0, 0xf, 0x3, [{}], "a58e93"}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f00000019c0)=""/173, 0x82, 0xad, 0x1, 0x0, 0x0, @void, @value}, 0x20) 8.42193488s ago: executing program 0 (id=1008): r0 = syz_clone3(&(0x7f0000000300)={0x14000300, 0x0, 0x0, 0x0, {0x12}, &(0x7f00000003c0)=""/241, 0xf1, &(0x7f00000004c0)=""/234, 0x0}, 0x58) tgkill(r0, 0xffffffffffffffff, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) clock_getres(0xfffffffffffffffa, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xa, &(0x7f0000000380)=0x0) r9 = eventfd(0x0) io_submit(r8, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1, r7, 0x0, 0x0, 0x81, 0x0, 0x1, r9}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.931173431s ago: executing program 2 (id=1001): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003800c00028005000100000000002c00018014000300fc0000000000000000000000000000001500"], 0x90}}, 0x0) write$P9_RCLUNK(r3, &(0x7f00000003c0)={0xfffffffffffffdd3, 0x79, 0x2}, 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000540)=""/184, &(0x7f0000000280), &(0x7f0000001540), 0x4, r6}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00157ed0", @ANYRES16=0x0, @ANYRESOCT], 0x1, 0x178, &(0x7f0000000240)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000002000aad9739238a4e5b9cee8879874eb0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r7, &(0x7f0000000100), 0x0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r9}, 0x10) stat(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) 5.538256592s ago: executing program 2 (id=1002): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 5.169011604s ago: executing program 4 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 4.131625604s ago: executing program 4 (id=1006): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b00"], 0x28}}, 0x0) 4.003647009s ago: executing program 1 (id=1007): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x104, 0x4, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 3.922804918s ago: executing program 4 (id=1009): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000480), 0xfd, 0x448, &(0x7f0000000d00)="$eJzs3MtvG0UYAPBv10kLfZBQyqOlgKEgIh5Jk/LogQsIJDggIcGhSFxCklalboOaINEqgoBQe0SVuCNuIPEXcIILAk5IcATOqFKFcmngZLT2OnEd28ROUqf495O2numOPfN5d9azM3YC6FvF7J8kYk9E/BYRQ9Xs9QWK1YflpYWpv5cWppIol1//K6mUu7a0MFUrWnve7jwzkkaknyQNL1g1d/7C6clSaeZcnh+bP/Pu2Nz5C0+eOjN5cubkzNmJY8eeOjr+7DMTT29KnFlc1w5+MHvowMtvXn516vjlt3/8+tLeatzREEd7O9ZdZzGKzUKveGTdr3Jz2FuXTgZ62BA6UoiI7HANVvr/UBRi9eANxUsf97RxwJYql8vlna13L5aB/7Eket0CoDdqH/TZ/W9tu0FDj23h6vPVG6As7uV8q+4ZiDQvM9hwf7uZihFxfPGfz7MtOpqHAADozrfZ+OeJZuO/NO6qK3dbvoYyHBG3R8S+iLgjIvZHxJ0RlbJ3R8Q9HdZfbMivHf+kV7oKbJ2y8d9z+drW9eO/2ugvhgt5bm8l/sHkxKnSzJH8PRmJwZ1ZfrxNHd+9+MunrfbVj/+yLau/NhbM23FloGGCbnpyfnIjMde7+lHEwYFm8ScrKwFJRByIiINd1nHqsa8Otdr33/G3sQnrTOUvIh6tHv/FyOOvrvCtrtwl7dcnx26J0syRsdpZsdZPP198rVX9G4p/E2THf1fT838l/uGkfr12rvM6Lv5+qeU9Tbfn/47kjUq6thr7/uT8/LnxyuVp7f9PrD63ls/LV+IfOdy8/++L1Xfi3ojITuL7IuL+iHggb/uDEfFQRBxuE/8PLzz8Tvfxb60s/umOjn/nicLp779pVf86jv+vb+WpkfxxPde/SuWv5Jk2DezuXQMAAICbSxoReyJJR1fSaTo6Wv0O//7YlZZm5+YfPzH73tnp6nflh2Mwrc10DdXNh47nc8O1/ERD/mg+b/xZ4dZKfnRqtjTd6+Chz+1u0f8zfxZ63Tpgy/m9FvQv/R/6l/4P/Uv/h/6l/0P/atb/P+xBO4Abz+c/9C/9H/qX/g/9S/+HvrSR3/V3kFgul8tbXMW2SXyZ/63A7dKeLUpEui2aIbGhxB/5dWDtrl5elQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbPvwEAAP//rdfgqg==") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x150007a2) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 3.726044321s ago: executing program 0 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) 3.665518408s ago: executing program 3 (id=1011): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYBLOB='\x00\x00\x00\x00\b'], 0x38}}, 0x0) socket$rds(0x15, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r3, 0x1601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) 3.533684963s ago: executing program 2 (id=1012): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, 0x0, &(0x7f0000000540)="151b2694479df73f7c00e80a173596e7049ae1b97ce3c773dcb119d7", 0x1c, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getdents64(r3, &(0x7f0000002ec0)=""/4096, 0x1000) 3.506091266s ago: executing program 4 (id=1013): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003800c00028005000100000000002c00018014000300fc0000000000000000000000000000001500"], 0x90}}, 0x0) write$P9_RCLUNK(r3, &(0x7f00000003c0)={0xfffffffffffffdd3, 0x79, 0x2}, 0x7) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000540)=""/184, &(0x7f0000000280), &(0x7f0000001540), 0x4, r6}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00157ed0", @ANYRES16=0x0, @ANYRESOCT], 0x1, 0x178, &(0x7f0000000240)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000002000aad9739238a4e5b9cee8879874eb0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) stat(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) 2.736499445s ago: executing program 3 (id=1014): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x4c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="094c1f2501e02962"}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x3d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xae, 0x3b}}}}, ["", "", "", ""]}, 0x28}}, 0x400c001) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6c}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x4080) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x104, r1, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xbc, 0x8, 0x0, 0x1, [{0xffffff9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5577e9880050c7f502e96f1152ac2aa4cd9a9de7aa3f159b65412d9b8c39cac4"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6}]}, 0x104}}, 0x0) getsockopt$rose(r0, 0x104, 0x6, 0x0, &(0x7f00000002c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5}]}}}]}, 0x3c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x4c}, {}, {0x0, 0xfd}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0xd0, 0x90a, 0x1c0, 0x238, 0x238, 0x1c0, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'dvmrp0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x13, 0xc}, @timestamp={0x8, 0xa}]}}}}}}}, 0x0) 2.182787089s ago: executing program 0 (id=1015): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, 0x0) 1.781660475s ago: executing program 4 (id=1016): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = inotify_init() readv(r1, &(0x7f0000000180)=[{&(0x7f0000000680)=""/139, 0x8b}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000540)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff02030000000000000000000000000108000300", @ANYRES32=r6], 0x54}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.760060457s ago: executing program 1 (id=1017): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f00000002c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='vegas\x00', 0x6) socket$kcm(0x2, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x80) connect$inet6(r2, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001200010a00000000000000000000003f00000000000000000000000000000000000000e0ffffffff454b086007ecaec800000000e0798deb5d64018ebcdfdc8817"], 0x50}}, 0x0) 1.665903509s ago: executing program 0 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 1.47656113s ago: executing program 3 (id=1019): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) personality(0x400000b) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 717.402878ms ago: executing program 3 (id=1020): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b00"], 0x28}}, 0x0) 673.667513ms ago: executing program 0 (id=1021): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x1, 0x5f16, &(0x7f0000009040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x2007ff3) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)='u', 0x1}], 0x1, 0x100000, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100001) 589.836222ms ago: executing program 1 (id=1022): r0 = syz_clone3(&(0x7f0000000300)={0x14000300, 0x0, 0x0, 0x0, {0x12}, &(0x7f00000003c0)=""/241, 0xf1, &(0x7f00000004c0)=""/234, 0x0}, 0x58) tgkill(r0, 0xffffffffffffffff, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) clock_getres(0xfffffffffffffffa, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xa, &(0x7f0000000380)=0x0) r9 = eventfd(0x0) io_submit(r8, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1, r7, 0x0, 0x0, 0x81, 0x0, 0x1, r9}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 427.252421ms ago: executing program 3 (id=1023): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000480), 0xfd, 0x448, &(0x7f0000000d00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x150007a2) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 337.821092ms ago: executing program 2 (id=1024): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 0s ago: executing program 3 (id=1025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x288, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.230477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.264445][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.299056][ T4245] device veth0_macvtap entered promiscuous mode [ 58.325581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.341858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.355196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.364858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.385437][ T4255] device veth0_macvtap entered promiscuous mode [ 58.395678][ T4245] device veth1_macvtap entered promiscuous mode [ 58.409628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.418871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.427720][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.435384][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.444319][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.452894][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.461498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.479580][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.500486][ T4255] device veth1_macvtap entered promiscuous mode [ 58.507682][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.516222][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.525706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.556129][ T4246] device veth0_vlan entered promiscuous mode [ 58.570770][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.579468][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.591544][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.599600][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.608506][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.616868][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.626671][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.635593][ T4256] device veth0_vlan entered promiscuous mode [ 58.644210][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.657160][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.669289][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.694821][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.702895][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.710490][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.718583][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.726279][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.734793][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.744313][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.753237][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.767278][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.776096][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.785130][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.793883][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.802848][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.810488][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.820339][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.832852][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.846418][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.859057][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.868988][ T4251] device veth0_vlan entered promiscuous mode [ 58.876336][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.885710][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.894791][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.903382][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.926023][ T4245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.935186][ T4245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.944221][ T4245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.955022][ T4245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.971147][ T4246] device veth1_vlan entered promiscuous mode [ 58.978952][ T4255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.988332][ T4255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.997774][ T4255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.008361][ T4255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.019819][ T4256] device veth1_vlan entered promiscuous mode [ 59.057337][ T4251] device veth1_vlan entered promiscuous mode [ 59.120868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.129340][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.139329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.157861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.169868][ T4246] device veth0_macvtap entered promiscuous mode [ 59.187247][ T4251] device veth0_macvtap entered promiscuous mode [ 59.208327][ T4246] device veth1_macvtap entered promiscuous mode [ 59.223336][ T4251] device veth1_macvtap entered promiscuous mode [ 59.247433][ T4256] device veth0_macvtap entered promiscuous mode [ 59.277955][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.286569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.295790][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.304159][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.312956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.323735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.334245][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.344230][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.354904][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.364924][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.376424][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.387675][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.397863][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.408536][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.418594][ T4246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.429201][ T4246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.442016][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.458147][ T4256] device veth1_macvtap entered promiscuous mode [ 59.474197][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.482392][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.490332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.503664][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.505507][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.520017][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.529095][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.537881][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.547332][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.548063][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.556393][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.571637][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.580456][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.589304][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.620044][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.631295][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.641261][ T4253] Bluetooth: hci1: command tx timeout [ 59.648868][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.650900][ T4262] Bluetooth: hci3: command tx timeout [ 59.659597][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.664778][ T4253] Bluetooth: hci0: command tx timeout [ 59.675696][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.691145][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.702405][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.709715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.719162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.721652][ T4263] Bluetooth: hci4: command tx timeout [ 59.727326][ T4262] Bluetooth: hci2: command tx timeout [ 59.738656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.768208][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.779506][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.794729][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.807114][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.817050][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.827649][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.839120][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.859320][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.859323][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.871516][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.877944][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.890981][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.895505][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.908254][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.921804][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.931766][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.942650][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.952606][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.964233][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.975206][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.989401][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.998551][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.007528][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.015658][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.024159][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.033701][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.045115][ T4251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.054871][ T4251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.064317][ T4251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.073306][ T4251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.100772][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.115830][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.127144][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.138027][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.148067][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.159286][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.169130][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.179578][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.192193][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.229590][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.242432][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.255009][ T4256] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.264387][ T4256] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.273422][ T4256] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.283499][ T4256] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.335035][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.353584][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.414604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.455888][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.479551][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.512814][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.525790][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.547874][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.572497][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.580161][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.593632][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.646360][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.658180][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.668802][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.696250][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.721235][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.729942][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.768811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.110729][ T4290] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.350670][ T4290] usb 1-1: Using ep0 maxpacket: 8 [ 61.471070][ T4290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.490688][ T4290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.520751][ T4290] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 61.529808][ T4290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.584109][ T4290] usb 1-1: config 0 descriptor?? [ 61.730915][ T4253] Bluetooth: hci0: command tx timeout [ 61.736383][ T4253] Bluetooth: hci3: command tx timeout [ 61.741252][ T4262] Bluetooth: hci1: command tx timeout [ 61.801096][ T4263] Bluetooth: hci2: command tx timeout [ 61.801309][ T4253] Bluetooth: hci4: command tx timeout [ 61.947183][ T4342] loop2: detected capacity change from 0 to 32768 [ 62.098633][ T26] audit: type=1804 audit(1730113760.137:2): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7" name="/newroot/1/bus/file1" dev="loop2" ino=4 res=1 errno=0 [ 62.294295][ T4344] loop3: detected capacity change from 0 to 40427 [ 62.329626][ T4344] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 62.350129][ T4344] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 62.412150][ T4344] F2FS-fs (loop3): invalid crc value [ 62.456399][ T4344] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.500720][ T4290] usbhid 1-1:0.0: can't add hid device: -71 [ 62.523085][ T4290] usbhid: probe of 1-1:0.0 failed with error -71 [ 62.553364][ T4290] usb 1-1: USB disconnect, device number 2 [ 62.626174][ T4344] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 62.643573][ T4344] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 62.873603][ T4354] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 62.925671][ T4354] team0: Port device netdevsim0 added [ 63.180642][ T4356] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 63.675461][ T4245] syz-executor: attempt to access beyond end of device [ 63.675461][ T4245] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 63.850378][ T4349] loop4: detected capacity change from 0 to 32768 [ 63.945305][ T4349] XFS (loop4): Mounting V5 Filesystem [ 63.945803][ T4369] x_tables: duplicate underflow at hook 3 [ 64.097909][ T4349] XFS (loop4): Ending clean mount [ 64.142609][ T4349] XFS (loop4): Quotacheck needed: Please wait. [ 64.193268][ T4349] XFS (loop4): Quotacheck: Done. [ 64.480457][ T4256] XFS (loop4): Unmounting Filesystem [ 64.717221][ T4392] program syz.0.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.965570][ T4387] loop3: detected capacity change from 0 to 32768 [ 64.987002][ T4387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.12 (4387) [ 65.089693][ T4387] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 65.122715][ T4387] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 65.147962][ T4387] BTRFS info (device loop3): use no compression [ 65.166044][ T4387] BTRFS info (device loop3): turning on sync discard [ 65.199873][ T4387] BTRFS info (device loop3): force clearing of disk cache [ 65.215081][ T4404] loop1: detected capacity change from 0 to 512 [ 65.235917][ T4387] BTRFS info (device loop3): enabling auto defrag [ 65.253585][ T4387] BTRFS info (device loop3): turning off discard [ 65.263632][ T4404] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 65.273821][ T4387] BTRFS info (device loop3): using free space tree [ 65.305349][ T4404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.344710][ T4404] EXT4-fs (loop1): 1 orphan inode deleted [ 65.350542][ T4404] EXT4-fs (loop1): 1 truncate cleaned up [ 65.356461][ T4404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.622081][ T4387] BTRFS info (device loop3): enabling ssd optimizations [ 65.622243][ T4431] program syz.2.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.642622][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.671686][ T4387] BTRFS info (device loop3): rebuilding free space tree [ 65.878685][ T4387] Process accounting resumed [ 65.890682][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 66.010992][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.048866][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.076591][ T22] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 66.116477][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.131419][ T4245] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.143539][ T22] usb 1-1: config 0 descriptor?? [ 66.542709][ T4453] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.821058][ T4457] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 67.097399][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 67.181023][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 67.187667][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 67.218881][ T22] usb 1-1: USB disconnect, device number 3 [ 67.964293][ T4500] loop0: detected capacity change from 0 to 512 [ 68.011967][ T4500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.046998][ T4500] EXT4-fs (loop0): 1 orphan inode deleted [ 68.061162][ T4500] EXT4-fs (loop0): 1 truncate cleaned up [ 68.079252][ T4500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.100704][ T41] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.361697][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 68.581042][ T3583] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.890692][ T3583] usb 5-1: Using ep0 maxpacket: 16 [ 68.970866][ T41] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 68.990081][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.009248][ T41] usb 4-1: Product: syz [ 69.016686][ T41] usb 4-1: Manufacturer: syz [ 69.023044][ T3583] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 69.030631][ T41] usb 4-1: SerialNumber: syz [ 69.050681][ T41] usb 4-1: config 0 descriptor?? [ 69.102443][ T41] gspca_main: se401-2.14.0 probing 047d:5003 [ 69.160542][ T4522] trusted_key: encrypted_key: insufficient parameters specified [ 69.221002][ T3583] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 69.230062][ T3583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.259018][ T3583] usb 5-1: Product: syz [ 69.263493][ T3583] usb 5-1: Manufacturer: syz [ 69.268093][ T3583] usb 5-1: SerialNumber: syz [ 69.285511][ T3583] usb 5-1: config 0 descriptor?? [ 69.472596][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 69.764306][ T4451] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.990747][ T41] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 70.030783][ T41] usb 4-1: device reset changed ep0 maxpacket size! [ 70.040350][ T41] gspca_se401: read req failed req 0x06 error -19 [ 70.048362][ T4451] usb 3-1: Using ep0 maxpacket: 8 [ 70.270458][ T41] usb 4-1: USB disconnect, device number 2 [ 70.351203][ T4451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.364853][ T4451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.375145][ T4451] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 70.384918][ T4451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.399500][ T4451] usb 3-1: config 0 descriptor?? [ 70.440771][ T41] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 70.860980][ T41] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 70.878979][ T41] usb 4-1: can't read configurations, error -71 [ 71.165096][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.171646][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.290799][ T4451] usbhid 3-1:0.0: can't add hid device: -71 [ 71.300718][ T4451] usbhid: probe of 3-1:0.0 failed with error -71 [ 71.309667][ T4569] loop0: detected capacity change from 0 to 512 [ 71.331395][ T4451] usb 3-1: USB disconnect, device number 2 [ 71.340897][ T41] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.358177][ T4569] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.373184][ T4291] usb 5-1: USB disconnect, device number 2 [ 71.428164][ T4569] EXT4-fs (loop0): 1 orphan inode deleted [ 71.440479][ T4569] EXT4-fs (loop0): 1 truncate cleaned up [ 71.456954][ T4569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.590729][ T41] usb 4-1: Using ep0 maxpacket: 32 [ 71.895821][ T41] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 71.925763][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.935243][ T41] usb 4-1: Product: syz [ 71.939421][ T41] usb 4-1: Manufacturer: syz [ 71.950640][ T41] usb 4-1: SerialNumber: syz [ 71.968407][ T41] usb 4-1: config 0 descriptor?? [ 71.990854][ T3583] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.021496][ T41] hub 4-1:0.0: bad descriptor, ignoring hub [ 72.027445][ T41] hub: probe of 4-1:0.0 failed with error -5 [ 72.087562][ T41] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 72.240657][ T3583] usb 2-1: Using ep0 maxpacket: 8 [ 72.364216][ T3583] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 72.383731][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.417766][ T3583] usb 2-1: config 0 descriptor?? [ 72.453388][ T41] gspca_vc032x: reg_w err -71 [ 72.458126][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.464655][ T3583] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 72.478583][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.490653][ T3583] gm12u320: probe of 2-1:0.0 failed with error -5 [ 72.500940][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.506268][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.509860][ T3583] usb-storage 2-1:0.0: USB Mass Storage device detected [ 72.540649][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.546271][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.551980][ T3583] usb-storage 2-1:0.0: device ignored [ 72.564525][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.569828][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.616852][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.637965][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.653794][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.659118][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.673437][ T26] audit: type=1326 audit(1730113770.717:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 72.678340][ T4290] usb 2-1: USB disconnect, device number 2 [ 72.720796][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.738130][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.752278][ T26] audit: type=1326 audit(1730113770.767:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 72.757797][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.815598][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.815985][ T26] audit: type=1326 audit(1730113770.767:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 72.825066][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.872370][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.877672][ T41] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.881362][ T26] audit: type=1326 audit(1730113770.767:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4602 comm="syz.2.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 72.889321][ T41] gspca_vc032x: Unknown sensor... [ 72.910285][ T41] vc032x: probe of 4-1:0.0 failed with error -22 [ 72.956516][ T41] usb 4-1: USB disconnect, device number 4 [ 73.134315][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 73.773199][ T4638] loop4: detected capacity change from 0 to 512 [ 73.820761][ T4290] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.090886][ T4290] usb 3-1: Using ep0 maxpacket: 8 [ 74.106284][ T4638] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.211173][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.350969][ T4290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.384257][ T4638] EXT4-fs (loop4): 1 orphan inode deleted [ 74.424801][ T4638] EXT4-fs (loop4): 1 truncate cleaned up [ 74.448381][ T4290] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 74.471491][ T4638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.525951][ T4290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.661687][ T4290] usb 3-1: config 0 descriptor?? [ 76.042743][ T4263] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 76.051910][ T4263] Bluetooth: hci2: Injecting HCI hardware error event [ 76.066165][ T4263] Bluetooth: hci2: hardware error 0x00 [ 76.282037][ T125] cfg80211: failed to load regulatory.db [ 76.340734][ T4290] usbhid 3-1:0.0: can't add hid device: -71 [ 76.346722][ T4290] usbhid: probe of 3-1:0.0 failed with error -71 [ 76.380817][ T4290] usb 3-1: USB disconnect, device number 3 [ 76.600864][ T41] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.736286][ T4253] Bluetooth: hci2: unexpected event for opcode 0x202d [ 76.850768][ T41] usb 2-1: Using ep0 maxpacket: 32 [ 76.944146][ T4712] program syz.0.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.980797][ T41] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 77.000651][ T41] usb 2-1: config 0 has no interface number 0 [ 77.171002][ T41] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 77.180070][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.222688][ T41] usb 2-1: Product: syz [ 77.227662][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 77.235172][ T41] usb 2-1: Manufacturer: syz [ 77.249983][ T41] usb 2-1: SerialNumber: syz [ 77.311760][ T41] usb 2-1: config 0 descriptor?? [ 77.372452][ T41] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 78.120804][ T4263] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 78.416873][ T4732] mmap: syz.4.130 (4732) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.776873][ T4748] loop0: detected capacity change from 0 to 512 [ 78.797159][ T4748] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.840936][ T4294] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.857119][ T4748] EXT4-fs (loop0): 1 orphan inode deleted [ 78.857158][ T4754] capability: warning: `syz.3.139' uses 32-bit capabilities (legacy support in use) [ 78.862873][ T4748] EXT4-fs (loop0): 1 truncate cleaned up [ 78.862912][ T4748] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.059281][ T41] gspca_topro: Sensor cx0342 [ 79.090693][ T4294] usb 3-1: Using ep0 maxpacket: 8 [ 79.213786][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.245246][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.284684][ T4294] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 79.314192][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.346930][ T3583] usb 2-1: USB disconnect, device number 3 [ 79.365620][ T4294] usb 3-1: config 0 descriptor?? [ 80.036760][ T4772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'. [ 80.345803][ T26] audit: type=1326 audit(1730113778.387:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4777 comm="syz.3.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11de77e719 code=0x0 [ 80.441895][ T4780] syz.1.148 sent an empty control message without MSG_MORE. [ 80.596770][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 80.602889][ T4294] usbhid 3-1:0.0: can't add hid device: -71 [ 80.641105][ T4294] usbhid: probe of 3-1:0.0 failed with error -71 [ 80.660265][ T4294] usb 3-1: USB disconnect, device number 4 [ 80.776593][ T4790] dccp_invalid_packet: P.Data Offset(100) too large [ 80.889378][ T4793] tipc: Can't bind to reserved service type 0 [ 81.292711][ T4809] loop1: detected capacity change from 0 to 512 [ 81.317326][ T4809] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.472712][ T4809] EXT4-fs (loop1): 1 orphan inode deleted [ 81.486699][ T4809] EXT4-fs (loop1): 1 truncate cleaned up [ 81.490828][ T4820] sctp: [Deprecated]: syz.4.165 (pid 4820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.490828][ T4820] Use struct sctp_sack_info instead [ 81.528882][ T4809] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.622941][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 82.189815][ T26] audit: type=1326 audit(1730113780.227:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 82.254516][ T26] audit: type=1326 audit(1730113780.227:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 82.336243][ T26] audit: type=1326 audit(1730113780.257:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 82.371461][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 82.428885][ T26] audit: type=1326 audit(1730113780.257:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 82.458205][ T26] audit: type=1326 audit(1730113780.257:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 82.510006][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 82.553390][ T26] audit: type=1326 audit(1730113780.257:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 82.576094][ T4451] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.607578][ T26] audit: type=1326 audit(1730113780.257:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 82.709900][ T26] audit: type=1326 audit(1730113780.257:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 82.766498][ T26] audit: type=1326 audit(1730113780.257:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fd6a977e719 code=0x7ffc0000 [ 82.860805][ T4451] usb 4-1: Using ep0 maxpacket: 8 [ 82.918967][ T4641] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.990807][ T4451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.015678][ T4451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.058167][ T4451] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 83.088452][ T4451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.271551][ T4451] usb 4-1: config 0 descriptor?? [ 83.310039][ T4888] loop1: detected capacity change from 0 to 512 [ 83.357584][ T4888] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.397794][ T4888] EXT4-fs (loop1): 1 orphan inode deleted [ 83.422823][ T4888] EXT4-fs (loop1): 1 truncate cleaned up [ 83.439050][ T4888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.684655][ T4896] device team0 entered promiscuous mode [ 83.716737][ T4896] device team_slave_0 entered promiscuous mode [ 83.742003][ T4896] device team_slave_1 entered promiscuous mode [ 83.776998][ T4895] device team0 left promiscuous mode [ 83.785932][ T4895] device team_slave_0 left promiscuous mode [ 83.816991][ T4895] device team_slave_1 left promiscuous mode [ 83.909988][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 84.360922][ T4451] usbhid 4-1:0.0: can't add hid device: -71 [ 84.366988][ T4451] usbhid: probe of 4-1:0.0 failed with error -71 [ 84.390453][ T4451] usb 4-1: USB disconnect, device number 5 [ 84.688019][ T4294] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 84.709831][ T4935] loop4: detected capacity change from 0 to 512 [ 84.728794][ T4935] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.757022][ T4935] EXT4-fs (loop4): 1 orphan inode deleted [ 84.776031][ T4935] EXT4-fs (loop4): 1 truncate cleaned up [ 84.783143][ T4935] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 85.070912][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.110704][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.128289][ T4294] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 85.137569][ T4294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.158297][ T4294] usb 2-1: config 0 descriptor?? [ 85.216865][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 85.449074][ T4957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.669314][ T4294] wacom 0003:056A:032C.0001: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.1-1/input0 [ 85.816653][ T4974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.221'. [ 85.848167][ T4294] usb 2-1: USB disconnect, device number 4 [ 85.870466][ T4974] device vlan2 entered promiscuous mode [ 86.053957][ T4979] loop2: detected capacity change from 0 to 512 [ 86.076297][ T4979] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.102377][ T4979] EXT4-fs (loop2): 1 orphan inode deleted [ 86.108210][ T4979] EXT4-fs (loop2): 1 truncate cleaned up [ 86.114302][ T4979] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.130811][ T41] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.174951][ T4984] dccp_invalid_packet: P.Data Offset(100) too large [ 86.572777][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 86.693463][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.704896][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 86.713344][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.733356][ T41] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 86.753347][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.781753][ T41] usb 1-1: config 0 descriptor?? [ 87.387800][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 87.456390][ T5029] loop2: detected capacity change from 0 to 512 [ 87.475617][ T5029] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.485967][ T4291] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 87.523842][ T5031] bridge0: port 3(syz_tun) entered blocking state [ 87.540496][ T5031] bridge0: port 3(syz_tun) entered disabled state [ 87.557130][ T5031] device syz_tun entered promiscuous mode [ 87.557237][ T5029] EXT4-fs (loop2): 1 orphan inode deleted [ 87.566866][ T5031] bridge0: port 3(syz_tun) entered blocking state [ 87.575534][ T5031] bridge0: port 3(syz_tun) entered forwarding state [ 87.588860][ T5029] EXT4-fs (loop2): 1 truncate cleaned up [ 87.600172][ T5029] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.710851][ T41] usbhid 1-1:0.0: can't add hid device: -71 [ 87.716840][ T41] usbhid: probe of 1-1:0.0 failed with error -71 [ 87.750656][ T4291] usb 4-1: Using ep0 maxpacket: 16 [ 87.756027][ T41] usb 1-1: USB disconnect, device number 4 [ 87.870818][ T4291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 88.050771][ T4291] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 88.059926][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.068511][ T22] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.076062][ T4291] usb 4-1: Product: syz [ 88.080210][ T4291] usb 4-1: Manufacturer: syz [ 88.084936][ T4291] usb 4-1: SerialNumber: syz [ 88.091398][ T4291] usb 4-1: config 0 descriptor?? [ 88.113116][ T5023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.164149][ T4291] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 88.246391][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 88.359783][ T4291] usb 4-1: USB disconnect, device number 6 [ 88.367042][ T4641] usb 4-1: Failed to submit usb control message: -71 [ 88.383874][ T4641] usb 4-1: unable to send the bmi data to the device: -71 [ 88.408218][ T4641] usb 4-1: unable to get target info from device [ 88.434929][ T4641] usb 4-1: could not get target info (-71) [ 88.478513][ T4641] usb 4-1: could not probe fw (-71) [ 88.621198][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.640997][ T22] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.650714][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.141034][ T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 89.158729][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.181318][ T22] usb 2-1: Product: syz [ 89.193486][ T22] usb 2-1: Manufacturer: syz [ 89.221860][ T22] usb 2-1: SerialNumber: syz [ 89.437132][ T5082] loop2: detected capacity change from 0 to 512 [ 89.458089][ T5082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.493328][ T5082] EXT4-fs (loop2): 1 orphan inode deleted [ 89.501851][ T22] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.504434][ T5082] EXT4-fs (loop2): 1 truncate cleaned up [ 89.582595][ T5082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 89.701517][ T125] usb 2-1: USB disconnect, device number 5 [ 89.730633][ T3583] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.857006][ T5089] program syz.3.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.913310][ T5038] usblp0: removed [ 89.973972][ T3583] usb 1-1: Using ep0 maxpacket: 8 [ 90.090807][ T3583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.104101][ T3583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.114186][ T3583] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 90.123441][ T3583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.142306][ T3583] usb 1-1: config 0 descriptor?? [ 90.184871][ T4253] Bluetooth: hci0: unexpected subevent 0x01 length: 78 > 18 [ 90.281465][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 90.319111][ T5104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.326637][ T5104] IPv6: NLM_F_CREATE should be set when creating new route [ 90.440693][ T4253] Bluetooth: hci3: command 0x0406 tx timeout [ 90.661184][ T5116] fuse: Bad value for 'fd' [ 91.352246][ T3583] usbhid 1-1:0.0: can't add hid device: -71 [ 91.358398][ T3583] usbhid: probe of 1-1:0.0 failed with error -71 [ 91.387799][ T3583] usb 1-1: USB disconnect, device number 5 [ 91.451248][ T5136] loop2: detected capacity change from 0 to 512 [ 91.486459][ T5136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.515746][ T5136] EXT4-fs (loop2): 1 orphan inode deleted [ 91.537133][ T5136] EXT4-fs (loop2): 1 truncate cleaned up [ 91.548637][ T5136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.302878][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 92.856544][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 92.856557][ T26] audit: type=1326 audit(1730113790.897:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5177 comm="syz.2.304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x0 [ 92.884262][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.208295][ T5193] loop4: detected capacity change from 0 to 512 [ 93.229319][ T5193] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.269367][ T5193] EXT4-fs (loop4): 1 orphan inode deleted [ 93.288035][ T5193] EXT4-fs (loop4): 1 truncate cleaned up [ 93.294024][ T5193] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.474267][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.720753][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 93.726682][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 93.850884][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.880928][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.934662][ T22] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 93.971737][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.152791][ T22] usb 1-1: config 0 descriptor?? [ 94.413744][ T5243] loop3: detected capacity change from 0 to 512 [ 94.439515][ T5243] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.477684][ T5243] EXT4-fs (loop3): 1 orphan inode deleted [ 94.514222][ T5243] EXT4-fs (loop3): 1 truncate cleaned up [ 94.546884][ T5243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.062627][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 95.065469][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 95.096622][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 95.123427][ T22] usb 1-1: USB disconnect, device number 6 [ 95.787948][ T5298] loop4: detected capacity change from 0 to 512 [ 95.902806][ T5298] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.992730][ T5298] EXT4-fs (loop4): 1 orphan inode deleted [ 95.999126][ T5298] EXT4-fs (loop4): 1 truncate cleaned up [ 96.005265][ T5298] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.577296][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 96.932112][ T4291] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 97.159985][ T5361] loop3: detected capacity change from 0 to 512 [ 97.185450][ T5361] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.300697][ T4291] usb 1-1: Using ep0 maxpacket: 8 [ 97.318225][ T5361] EXT4-fs (loop3): 1 orphan inode deleted [ 97.326059][ T5361] EXT4-fs (loop3): 1 truncate cleaned up [ 97.386581][ T5369] Cannot find add_set index 3 as target [ 97.441267][ T4291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.453271][ T5361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.460873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.475570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 97.489110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.501720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 97.519502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 97.522930][ T4291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.534428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.562831][ T4291] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 97.599472][ T4291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.648210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.659175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 97.667211][ T4291] usb 1-1: config 0 descriptor?? [ 97.681091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.739165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.279153][ T5375] sp0: Synchronizing with TNC [ 99.670729][ T4291] usbhid 1-1:0.0: can't add hid device: -71 [ 99.676799][ T4291] usbhid: probe of 1-1:0.0 failed with error -71 [ 99.710825][ T4291] usb 1-1: USB disconnect, device number 7 [ 99.951191][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 100.739434][ T5400] dccp_invalid_packet: P.Data Offset(100) too large [ 101.118698][ T5410] overlayfs: statfs failed on './file0' [ 101.653421][ T5430] loop0: detected capacity change from 0 to 512 [ 101.661485][ T3583] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.672059][ T5430] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.687432][ T5430] EXT4-fs (loop0): 1 orphan inode deleted [ 101.693539][ T5430] EXT4-fs (loop0): 1 truncate cleaned up [ 101.699258][ T5430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.907990][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 101.913912][ T3583] usb 5-1: Using ep0 maxpacket: 8 [ 102.030895][ T3583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.048117][ T3583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.059732][ T3583] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 102.070349][ T5441] process 'syz.0.401' launched '/dev/fd/5' with NULL argv: empty string added [ 102.085582][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.113066][ T3583] usb 5-1: config 0 descriptor?? [ 104.681967][ T5467] loop3: detected capacity change from 0 to 512 [ 104.714409][ T5467] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.816667][ T3583] usbhid 5-1:0.0: can't add hid device: -71 [ 104.860832][ T3583] usbhid: probe of 5-1:0.0 failed with error -71 [ 104.923994][ T3583] usb 5-1: USB disconnect, device number 3 [ 104.955932][ T5467] EXT4-fs (loop3): 1 orphan inode deleted [ 105.461677][ T5467] EXT4-fs (loop3): 1 truncate cleaned up [ 105.523922][ T5467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 108.025794][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 110.177332][ T5535] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 110.227423][ T4294] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.273385][ T5538] loop0: detected capacity change from 0 to 512 [ 110.289066][ T5538] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 110.331251][ T5541] overlayfs: statfs failed on './file0' [ 110.346670][ T5538] EXT4-fs (loop0): 1 orphan inode deleted [ 110.353925][ T5538] EXT4-fs (loop0): 1 truncate cleaned up [ 110.366362][ T5538] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.470686][ T4294] usb 5-1: Using ep0 maxpacket: 8 [ 110.593866][ T4294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.620864][ T4294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.634082][ T4294] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 110.645016][ T4294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.667297][ T4294] usb 5-1: config 0 descriptor?? [ 110.730634][ T4249] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.079745][ T4249] usb 4-1: Using ep0 maxpacket: 32 [ 111.260795][ T4249] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.564919][ T4249] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 111.578377][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 111.580465][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 111.596177][ T4249] usb 4-1: Product: syz [ 111.600357][ T4249] usb 4-1: Manufacturer: syz [ 111.620882][ T4249] usb 4-1: SerialNumber: syz [ 111.634948][ T4249] usb 4-1: config 0 descriptor?? [ 111.800836][ T5545] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 111.821620][ T4294] usbhid 5-1:0.0: can't add hid device: -71 [ 111.852031][ T4294] usbhid: probe of 5-1:0.0 failed with error -71 [ 112.221654][ T4294] usb 5-1: USB disconnect, device number 4 [ 113.666564][ T5594] netlink: 200 bytes leftover after parsing attributes in process `syz.4.445'. [ 114.183640][ T4249] usb 4-1: USB disconnect, device number 7 [ 114.204599][ T5592] loop1: detected capacity change from 0 to 512 [ 114.212107][ T5592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.541373][ T26] audit: type=1326 audit(1730113812.587:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11de77e719 code=0x7ffc0000 [ 114.598857][ T5592] EXT4-fs (loop1): 1 orphan inode deleted [ 114.608265][ T5592] EXT4-fs (loop1): 1 truncate cleaned up [ 114.614908][ T5592] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 114.621101][ T3623] udevd[3623]: worker [4324] terminated by signal 33 (Unknown signal 33) [ 114.655207][ T3623] udevd[3623]: worker [4324] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 114.682591][ T26] audit: type=1326 audit(1730113812.627:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11de77e719 code=0x7ffc0000 [ 114.760110][ T3623] udevd[3623]: worker [4323] terminated by signal 33 (Unknown signal 33) [ 114.812888][ T3623] udevd[3623]: worker [4323] failed while handling '/devices/virtual/block/loop1' [ 114.890838][ T26] audit: type=1326 audit(1730113812.627:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11de77e719 code=0x7ffc0000 [ 114.918867][ T26] audit: type=1326 audit(1730113812.627:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11de77e719 code=0x7ffc0000 [ 114.970562][ T26] audit: type=1326 audit(1730113812.627:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11de77e719 code=0x7ffc0000 [ 115.024606][ T26] audit: type=1326 audit(1730113812.627:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11de77e719 code=0x7ffc0000 [ 115.072331][ T26] audit: type=1326 audit(1730113812.627:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11de7756e7 code=0x7ffc0000 [ 115.160780][ T26] audit: type=1326 audit(1730113812.627:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11de71a099 code=0x7ffc0000 [ 115.222968][ T26] audit: type=1326 audit(1730113812.627:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11de7756e7 code=0x7ffc0000 [ 115.289067][ T26] audit: type=1326 audit(1730113812.627:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.3.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f11de71a099 code=0x7ffc0000 [ 115.368165][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 116.740731][ T4445] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.990783][ T4445] usb 5-1: Using ep0 maxpacket: 8 [ 117.131575][ T4445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.291601][ T4445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.410704][ T4445] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 117.467641][ T4445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.634794][ T4445] usb 5-1: config 0 descriptor?? [ 118.810709][ T4291] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.050690][ T4291] usb 2-1: Using ep0 maxpacket: 8 [ 119.100726][ T4445] usbhid 5-1:0.0: can't add hid device: -71 [ 119.106715][ T4445] usbhid: probe of 5-1:0.0 failed with error -71 [ 119.139210][ T4445] usb 5-1: USB disconnect, device number 5 [ 119.173065][ T4291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.184874][ T4291] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.195557][ T4291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.208308][ T4291] usb 2-1: config 0 descriptor?? [ 119.543656][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.571007][ T4291] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.870715][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 120.001234][ T22] usb 3-1: config 0 has no interfaces? [ 120.007784][ T22] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.044950][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.074500][ T22] usb 3-1: config 0 descriptor?? [ 120.231107][ T5688] tmpfs: Unknown parameter 'usrquota' [ 120.415507][ T22] usb 3-1: USB disconnect, device number 5 [ 120.431642][ T4445] usb 2-1: USB disconnect, device number 6 [ 120.450258][ T4445] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 121.877589][ T4294] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.930787][ T4294] usb 4-1: Using ep0 maxpacket: 8 [ 123.050842][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.080179][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.103260][ T4294] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 123.140635][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.169849][ T4294] usb 4-1: config 0 descriptor?? [ 123.410959][ T5747] input: syz0 as /devices/virtual/input/input9 [ 123.566470][ T5753] program syz.4.500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.031325][ T5752] kvm: emulating exchange as write [ 124.186170][ T5757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.502'. [ 124.231910][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 125.350742][ T4294] usbhid 4-1:0.0: can't add hid device: -71 [ 125.356832][ T4294] usbhid: probe of 4-1:0.0 failed with error -71 [ 125.400861][ T4294] usb 4-1: USB disconnect, device number 8 [ 126.495037][ T5793] capability: warning: `syz.4.514' uses deprecated v2 capabilities in a way that may be insecure [ 126.656744][ T5800] 9pnet_fd: p9_fd_create_tcp (5800): problem connecting socket to 127.0.0.1 [ 126.856359][ T5801] tipc: Started in network mode [ 126.880742][ T5801] tipc: Node identity ac1414aa, cluster identity 4711 [ 126.900069][ T5801] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.032386][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.161839][ T5801] tipc: Enabled bearer , priority 10 [ 127.180783][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.320777][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.420770][ T4291] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.460763][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.600857][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.740713][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.892117][ T4291] usb 3-1: Using ep0 maxpacket: 8 [ 127.901891][ T41] tipc: Node number set to 2886997162 [ 128.040786][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.071049][ T4291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.192713][ T4291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.310770][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.390912][ T4291] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 128.542671][ T4291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.630919][ T4291] usb 3-1: config 0 descriptor?? [ 128.850731][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 129.530855][ T4294] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 129.726782][ T5859] fuse: Unknown parameter '000000000000000000050xffffffffffffffff' [ 129.901455][ T4294] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 129.931863][ T4294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.021174][ T4291] usbhid 3-1:0.0: can't add hid device: -71 [ 130.029044][ T4291] usbhid: probe of 3-1:0.0 failed with error -71 [ 130.080968][ T4291] usb 3-1: USB disconnect, device number 6 [ 130.088526][ T4294] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.263643][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.487883][ T4294] usb 1-1: config 0 descriptor?? [ 130.557673][ T4294] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 131.970964][ C1] net_ratelimit: 2 callbacks suppressed [ 131.970979][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.441308][ T4249] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.611326][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.617727][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.270963][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 133.554011][ T125] usb 1-1: USB disconnect, device number 8 [ 133.590648][ T4249] usb 4-1: Using ep0 maxpacket: 8 [ 133.710824][ T4249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.732468][ T4249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.784886][ T4249] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 133.805686][ T4249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.849175][ T4249] usb 4-1: config 0 descriptor?? [ 134.280716][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.330926][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.923831][ T4249] usbhid 4-1:0.0: can't add hid device: -71 [ 135.944497][ T4249] usbhid: probe of 4-1:0.0 failed with error -71 [ 135.984004][ T4249] usb 4-1: USB disconnect, device number 9 [ 136.360742][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 137.410717][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 138.664788][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 140.170702][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 140.691436][ T4253] Bluetooth: hci5: command 0x1003 tx timeout [ 140.699543][ T4263] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 141.215503][ T41] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.240747][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 141.243162][ T6025] tmpfs: Unknown parameter 'usrquota' [ 141.364041][ T6027] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 141.580650][ T41] usb 3-1: Using ep0 maxpacket: 8 [ 141.721299][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.801807][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.989716][ T41] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 142.243368][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.280825][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.314009][ T41] usb 3-1: config 0 descriptor?? [ 142.438805][ T6042] overlayfs: failed to get index nlink (file1/file0, err=-61) [ 142.860986][ T41] usbhid 3-1:0.0: can't add hid device: -71 [ 142.874799][ T41] usbhid: probe of 3-1:0.0 failed with error -71 [ 143.151744][ T41] usb 3-1: USB disconnect, device number 7 [ 143.330726][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 144.370700][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.410895][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.890593][ C0] sched: RT throttling activated [ 146.440698][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 146.565817][ T3583] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.480788][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 147.550764][ T3583] usb 1-1: Using ep0 maxpacket: 8 [ 147.670948][ T3583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.696210][ T3583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.739393][ T3583] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 147.794767][ T3583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.520702][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.594550][ T3583] usb 1-1: config 0 descriptor?? [ 149.021104][ T3583] usbhid 1-1:0.0: can't add hid device: -71 [ 149.029759][ T3583] usbhid: probe of 1-1:0.0 failed with error -71 [ 149.204931][ T3583] usb 1-1: USB disconnect, device number 9 [ 149.560881][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.663457][ T6152] Zero length message leads to an empty skb [ 149.723980][ T6152] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 150.131248][ T4263] Bluetooth: hci5: sending frame failed (-49) [ 150.138424][ T4253] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 150.589890][ T6159] netlink: 64 bytes leftover after parsing attributes in process `syz.0.639'. [ 150.610721][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.640742][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.646559][ T6181] tipc: Started in network mode [ 151.652700][ T6181] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 151.682037][ T6181] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 151.746536][ T6181] tipc: Enabled bearer , priority 10 [ 152.370850][ T3583] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 152.544512][ T6202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.652'. [ 152.620960][ T3583] usb 1-1: Using ep0 maxpacket: 8 [ 152.680771][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.761587][ T3583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.948031][ T3583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.042820][ T3583] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 153.063715][ T3583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.087745][ T3583] usb 1-1: config 0 descriptor?? [ 153.094394][ T125] tipc: Node number set to 1 [ 153.429710][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 153.429724][ T26] audit: type=1326 audit(1730113851.467:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.2.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a977e719 code=0x0 [ 153.430827][ T3583] usbhid 1-1:0.0: can't add hid device: -71 [ 153.494525][ T3583] usbhid: probe of 1-1:0.0 failed with error -71 [ 153.535565][ T3583] usb 1-1: USB disconnect, device number 10 [ 153.720761][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.760749][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.052139][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.500688][ T4249] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.970881][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.090732][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.270966][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 157.401835][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.424263][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.487107][ T41] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 157.500826][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.511083][ T4249] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 157.534956][ T4249] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.576232][ T41] usb 5-1: config 0 descriptor?? [ 157.587990][ T4249] usb 3-1: config 0 has no interface number 0 [ 157.601874][ T4249] usb 3-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 157.613597][ T4249] usb 3-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 158.120788][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.276632][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.321157][ T4249] usb 3-1: string descriptor 0 read error: -71 [ 159.327453][ T4249] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 159.357671][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.387482][ T4249] usb 3-1: config 0 descriptor?? [ 159.415243][ T4249] usb 3-1: can't set config #0, error -71 [ 159.434604][ T4249] usb 3-1: USB disconnect, device number 8 [ 160.160840][ T14] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.274573][ T6294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.685'. [ 160.284674][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 160.420805][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 160.480926][ T41] usbhid 5-1:0.0: can't add hid device: -71 [ 160.487420][ T41] usbhid: probe of 5-1:0.0 failed with error -71 [ 160.862463][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 160.971561][ T41] usb 5-1: USB disconnect, device number 6 [ 161.214665][ T14] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.320974][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.147361][ T6310] device netdevsim0 entered promiscuous mode [ 162.180649][ T14] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 162.188843][ T14] usb 1-1: Product: syz [ 162.200786][ T14] usb 1-1: Manufacturer: syz [ 162.205403][ T14] usb 1-1: SerialNumber: syz [ 162.232933][ T6310] netlink: 44 bytes leftover after parsing attributes in process `syz.3.689'. [ 162.261855][ T14] usb 1-1: config 0 descriptor?? [ 162.281021][ T6284] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 162.300191][ T6310] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 162.360753][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.410726][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.770692][ T14] usb 1-1: USB disconnect, device number 11 [ 164.440718][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.543103][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.710727][ T4443] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.180755][ T4443] usb 2-1: Using ep0 maxpacket: 8 [ 166.321529][ T4443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.443543][ T4443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.600786][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.689560][ T4443] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 166.699095][ T4443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.710226][ T6363] program syz.2.704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.733808][ T4443] usb 2-1: config 0 descriptor?? [ 167.640704][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.450775][ T4443] usbhid 2-1:0.0: can't add hid device: -71 [ 168.456779][ T4443] usbhid: probe of 2-1:0.0 failed with error -71 [ 168.489574][ T4443] usb 2-1: USB disconnect, device number 7 [ 168.680732][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 168.984500][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.723'. [ 169.010271][ T6416] 9pnet_fd: Insufficient options for proto=fd [ 169.720823][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.556916][ T6442] netlink: 128 bytes leftover after parsing attributes in process `syz.0.734'. [ 170.623850][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 170.640549][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 170.695755][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.770728][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.974074][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 171.131335][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.172070][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.328189][ T14] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 171.449993][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.490003][ T14] usb 3-1: config 0 descriptor?? [ 171.810696][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.850734][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.190893][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 173.196951][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 173.214415][ T14] usb 3-1: USB disconnect, device number 9 [ 173.228142][ T6479] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.746'. [ 173.236292][ T6480] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 173.236292][ T6480] The task syz.4.747 (6480) triggered the difference, watch for misbehavior. [ 173.240879][ T4294] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.890726][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.075467][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 174.201278][ T4294] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 174.316853][ T6496] ALSA: mixer_oss: invalid OSS volume '' [ 174.387552][ T4294] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 174.417915][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.432145][ T4294] usb 4-1: Product: syz [ 174.436326][ T4294] usb 4-1: Manufacturer: syz [ 174.441998][ T4294] usb 4-1: SerialNumber: syz [ 174.511004][ T6470] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 174.930728][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.368659][ T4294] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.382818][ T4294] usb 4-1: USB disconnect, device number 10 [ 175.390267][ T4294] usblp0: removed [ 175.430864][ T4249] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 175.487474][ T6509] nfs: Unknown parameter 'a[l' [ 175.831140][ T4249] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.860689][ T4294] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 175.891190][ T4249] usb 3-1: not running at top speed; connect to a high speed hub [ 175.954994][ T6515] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 175.961824][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.974107][ T6515] tipc: Enabled bearer , priority 10 [ 176.015578][ T4249] usb 3-1: config 15 has an invalid interface number: 168 but max is 0 [ 176.044310][ T4249] usb 3-1: config 15 has no interface number 0 [ 176.050501][ T4249] usb 3-1: config 15 interface 168 has no altsetting 0 [ 176.140793][ T4294] usb 1-1: Using ep0 maxpacket: 32 [ 176.250933][ T4249] usb 3-1: New USB device found, idVendor=1044, idProduct=7002, bcdDevice=f0.ca [ 176.260069][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.268446][ T4294] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 176.279581][ T4249] usb 3-1: Product: syz [ 176.284913][ T4249] usb 3-1: Manufacturer: syz [ 176.289596][ T4249] usb 3-1: SerialNumber: syz [ 176.380854][ T4445] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.445194][ T4294] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 176.454312][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.462829][ T4294] usb 1-1: Product: syz [ 176.466999][ T4294] usb 1-1: Manufacturer: syz [ 176.471991][ T4294] usb 1-1: SerialNumber: syz [ 176.510969][ T6512] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 176.605941][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.740730][ T4445] usb 2-1: Using ep0 maxpacket: 16 [ 176.871502][ T4445] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 176.889512][ T4445] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.901441][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 176.970045][ T4445] usb 2-1: config 0 has no interface number 0 [ 177.000772][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.041397][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.089983][ T4445] usb 2-1: New USB device found, idVendor=046d, idProduct=4101, bcdDevice= 0.00 [ 177.142316][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.227140][ T4294] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 177.228616][ T4263] Bluetooth: hci5: sending frame failed (-49) [ 177.246842][ T4253] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 177.260637][ T4445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.260835][ T4249] dvb-usb: found a 'Gigabyte U8000-RH' in warm state. [ 177.268832][ T22] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 177.292149][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.298246][ T4249] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 177.301073][ T4445] usb 2-1: config 0 descriptor?? [ 177.354916][ T22] usb 4-1: config 0 descriptor?? [ 177.396741][ T4249] dvbdev: DVB: registering new adapter (Gigabyte U8000-RH) [ 177.404980][ T4249] usb 3-1: media controller created [ 177.412338][ T41] usb 1-1: USB disconnect, device number 12 [ 177.413409][ T4249] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.441208][ T41] usblp0: removed [ 177.475005][ T4249] DVB: Unable to find symbol dib7000p_attach() [ 177.485981][ T4249] dvb-usb: no frontend was attached by 'Gigabyte U8000-RH' [ 177.570798][ T4249] rc_core: IR keymap rc-dib0700-rc5 not found [ 177.582920][ T4249] Registered IR keymap rc-empty [ 177.588488][ T4249] dvb-usb: could not initialize remote control. [ 177.596954][ T4249] dvb-usb: Gigabyte U8000-RH successfully initialized and connected. [ 178.040852][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.073341][ T41] usb 3-1: USB disconnect, device number 10 [ 178.321658][ T41] dvb-usb: Gigabyte U8000-RH successfully deinitialized and disconnected. [ 178.601038][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 178.607398][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 178.625130][ T22] usb 4-1: USB disconnect, device number 11 [ 179.977088][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.220435][ T4445] usb 2-1: string descriptor 0 read error: -71 [ 180.444131][ T4445] usb 2-1: MIDIStreaming interface descriptor not found [ 180.786489][ T4445] usb 2-1: USB disconnect, device number 8 [ 180.881534][ T6579] ALSA: seq fatal error: cannot create timer (-22) [ 181.142305][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.152737][ T4337] udevd[4337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.133/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.210868][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.240771][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.409805][ T6581] fuse: Bad value for 'fd' [ 184.342727][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.573678][ T6621] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 184.645434][ T6621] overlayfs: missing 'lowerdir' [ 185.002679][ T4445] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.180412][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.671370][ T4445] usb 3-1: Using ep0 maxpacket: 8 [ 186.811560][ T4445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.874990][ T4445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.957306][ T4445] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 187.061732][ T4445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.232258][ T4445] usb 3-1: config 0 descriptor?? [ 187.241053][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.293439][ T26] audit: type=1326 audit(1730113885.337:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.3.799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11de77e719 code=0x0 [ 187.345694][ T6645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 187.579109][ T4304] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.770738][ T4445] usbhid 3-1:0.0: can't add hid device: -71 [ 187.776735][ T4445] usbhid: probe of 3-1:0.0 failed with error -71 [ 187.784720][ T4445] usb 3-1: USB disconnect, device number 11 [ 187.796602][ T4304] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.141273][ T4304] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.290834][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.686829][ T4304] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.458395][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.262437][ T4263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.279497][ T4263] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.289999][ T4263] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.324908][ T4263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.333288][ T4263] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 190.366747][ T4263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.380109][ T4253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.387793][ T4253] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.395097][ T4253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.404270][ T4253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.436123][ T4253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 190.444344][ T4253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.520741][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.689626][ T6691] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 190.696434][ T6691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 190.810747][ T6691] vhci_hcd vhci_hcd.0: Device attached [ 190.838791][ T6703] vhci_hcd: connection closed [ 190.846899][ T4641] vhci_hcd: stop threads [ 190.869557][ T4641] vhci_hcd: release socket [ 190.885163][ T4641] vhci_hcd: disconnect device [ 191.215022][ T6687] chnl_net:caif_netlink_parms(): no params data found [ 191.352461][ T6711] ufs: Invalid option: "'" or missing value [ 191.362895][ T6711] ufs: wrong mount options [ 191.570874][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.593996][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.608144][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.760735][ T6687] device bridge_slave_0 entered promiscuous mode [ 191.810259][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.820737][ T4249] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 192.084750][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.285252][ T6687] device bridge_slave_1 entered promiscuous mode [ 192.521072][ T4253] Bluetooth: hci4: command tx timeout [ 192.600773][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.710639][ T4249] usb 4-1: Using ep0 maxpacket: 8 [ 192.735148][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.765076][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.830853][ T4249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.869538][ T4249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.893240][ T4249] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 192.906994][ T4249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.947030][ T4249] usb 4-1: config 0 descriptor?? [ 193.214070][ T6687] team0: Port device team_slave_0 added [ 193.249843][ T6687] team0: Port device team_slave_1 added [ 193.571359][ T6760] random: crng reseeded on system resumption [ 193.650854][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.044274][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.050782][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.103302][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.117446][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.182049][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.224955][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.245325][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.271207][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.307398][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.395198][ T4304] device hsr_slave_0 left promiscuous mode [ 194.409621][ T4304] device hsr_slave_1 left promiscuous mode [ 194.433530][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.453242][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.467732][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.475578][ T4249] usbhid 4-1:0.0: can't add hid device: -71 [ 194.485514][ T4249] usbhid: probe of 4-1:0.0 failed with error -71 [ 194.499133][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.509511][ T4249] usb 4-1: USB disconnect, device number 12 [ 194.525675][ T4304] device bridge_slave_1 left promiscuous mode [ 194.534535][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.547469][ T4304] device bridge_slave_0 left promiscuous mode [ 194.553968][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.600975][ T4263] Bluetooth: hci4: command tx timeout [ 194.617373][ T4304] device veth1_macvtap left promiscuous mode [ 194.631227][ T4304] device veth0_macvtap left promiscuous mode [ 194.637480][ T4304] device veth1_vlan left promiscuous mode [ 194.666580][ T4304] device veth0_vlan left promiscuous mode [ 194.680747][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.431017][ T4445] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 195.720910][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.851997][ T4445] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.870279][ T4445] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 196.033701][ T4445] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.044489][ T4445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.080992][ T6776] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.735923][ T4263] Bluetooth: hci4: command tx timeout [ 196.839900][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.478701][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 197.547594][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 197.632463][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.710450][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.881263][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.761425][ T4263] Bluetooth: hci4: command tx timeout [ 198.904765][ T41] usb 1-1: USB disconnect, device number 13 [ 198.920698][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.323510][ T4304] bond0 (unregistering): Released all slaves [ 199.473399][ T6687] device hsr_slave_0 entered promiscuous mode [ 199.488989][ T6687] device hsr_slave_1 entered promiscuous mode [ 199.498246][ T6687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.511785][ T6687] Cannot create hsr debugfs directory [ 199.970874][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.070644][ T41] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 200.320649][ T41] usb 3-1: Using ep0 maxpacket: 8 [ 200.440872][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.484982][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.526017][ T41] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 200.544688][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.562635][ T41] usb 3-1: config 0 descriptor?? [ 200.595723][ T6846] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 201.010744][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.820845][ T6687] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.857221][ T6687] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.878986][ T6687] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.923153][ T6687] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.020888][ T41] usbhid 3-1:0.0: can't add hid device: -71 [ 202.037507][ T41] usbhid: probe of 3-1:0.0 failed with error -71 [ 202.044140][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.079752][ T41] usb 3-1: USB disconnect, device number 12 [ 202.242502][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.300135][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.329443][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.364043][ T6687] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.406298][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.441370][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.468520][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.476046][ T5616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.521167][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.536495][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.562642][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.570082][ T5616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.609111][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.744283][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.764870][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.773926][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.783782][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.797624][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.882793][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.080719][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.451358][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.654175][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.858366][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.866999][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.875687][ T5513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.120837][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 204.133434][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.160767][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.575715][ T6918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 205.799454][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.819139][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.841164][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.210913][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.482689][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.497277][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.556041][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.567021][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.580241][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.605443][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.629474][ T6687] device veth0_vlan entered promiscuous mode [ 206.665348][ T6687] device veth1_vlan entered promiscuous mode [ 206.731727][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 206.740161][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.752800][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 206.838922][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.013466][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.141528][ T6687] device veth0_macvtap entered promiscuous mode [ 207.160940][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 207.171700][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.240700][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 207.281536][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.348740][ T6687] device veth1_macvtap entered promiscuous mode [ 207.387458][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.411375][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.428367][ T14] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 207.458118][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.478356][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.498350][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.520060][ T14] usb 3-1: config 0 descriptor?? [ 207.540631][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.580693][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.610481][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.638355][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.668353][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.740033][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.764211][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.774785][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.788581][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.831889][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.409417][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.469218][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.497946][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.528719][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.566397][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.665672][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.701173][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.709875][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.741808][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.771154][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.813997][ T6687] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.829308][ T6687] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.849562][ T6687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.858660][ T6687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.039052][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.057386][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.103344][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.110767][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 209.116875][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 209.129456][ T4641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.132642][ T14] usb 3-1: USB disconnect, device number 13 [ 209.173529][ T4641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.203705][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.480855][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.491041][ T4291] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.576179][ T4443] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 209.870809][ T4291] usb 2-1: Using ep0 maxpacket: 8 [ 209.961585][ T4443] usb 5-1: Using ep0 maxpacket: 8 [ 210.011737][ T4291] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 210.060788][ T4291] usb 2-1: config 0 has no interface number 0 [ 210.131966][ T4443] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 210.243946][ T4443] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 210.391538][ T4291] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 210.455622][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.520868][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.552193][ T4443] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.575570][ T4291] usb 2-1: Product: syz [ 210.579811][ T4291] usb 2-1: Manufacturer: syz [ 210.636552][ T4291] usb 2-1: SerialNumber: syz [ 210.658921][ T4291] usb 2-1: config 0 descriptor?? [ 210.810933][ T4443] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 210.830225][ T4443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.860273][ T4443] usb 5-1: Product: syz [ 210.886695][ T4443] usb 5-1: Manufacturer: syz [ 210.910650][ T4443] usb 5-1: SerialNumber: syz [ 210.918074][ T4291] msi2500 2-1:0.246: Registered as swradio24 [ 210.959069][ T4443] usb 5-1: config 0 descriptor?? [ 210.972957][ T4291] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 211.000405][ T4291] usb 2-1: USB disconnect, device number 9 [ 211.242760][ T4445] usb 5-1: USB disconnect, device number 7 [ 211.560697][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.600847][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.095385][ T14] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 213.340665][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 213.471252][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.600528][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.640793][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.671851][ T14] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 213.726767][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.779046][ T14] usb 1-1: config 0 descriptor?? [ 214.680822][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.730694][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.801235][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 215.807263][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 215.827557][ T14] usb 1-1: USB disconnect, device number 14 [ 215.885900][ T4294] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 216.760843][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 217.266007][ T7129] netlink: 'syz.4.927': attribute type 1 has an invalid length. [ 217.385779][ T4294] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 217.395724][ T4294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.520916][ T4294] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 217.548995][ T4294] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 217.810704][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.160629][ T4294] usb 2-1: Manufacturer: syz [ 218.167482][ T4294] usb 2-1: config 0 descriptor?? [ 218.190826][ T4294] usb 2-1: can't set config #0, error -71 [ 218.210398][ T4294] usb 2-1: USB disconnect, device number 10 [ 218.458555][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 218.850828][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.910853][ T4443] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.181955][ T4443] usb 5-1: Using ep0 maxpacket: 8 [ 219.312107][ T4443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.343973][ T4443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.381424][ T4443] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 219.465525][ T4443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.890715][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.180558][ T4443] usb 5-1: config 0 descriptor?? [ 220.921159][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.750878][ T4443] usbhid 5-1:0.0: can't add hid device: -71 [ 221.756971][ T4443] usbhid: probe of 5-1:0.0 failed with error -71 [ 221.785546][ T4443] usb 5-1: USB disconnect, device number 8 [ 221.970694][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.080869][ T41] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 222.093067][ T7199] netlink: 'syz.2.950': attribute type 11 has an invalid length. [ 222.371557][ T7199] netlink: 'syz.2.950': attribute type 11 has an invalid length. [ 222.420788][ T7199] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.950'. [ 222.430879][ T41] usb 1-1: Using ep0 maxpacket: 32 [ 222.570801][ T41] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 222.609515][ T41] usb 1-1: config 0 has no interface number 0 [ 222.629773][ T41] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 222.660767][ T41] usb 1-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 222.712605][ T41] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid maxpacket 799, setting to 64 [ 222.740635][ T41] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.000813][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.770898][ T41] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.8e [ 223.799988][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.822231][ T41] usb 1-1: Product: syz [ 223.826415][ T41] usb 1-1: Manufacturer: syz [ 223.845434][ T7221] tmpfs: Bad value for 'mpol' [ 223.870940][ T41] usb 1-1: SerialNumber: syz [ 223.896724][ T41] usb 1-1: config 0 descriptor?? [ 223.931147][ T7192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.040709][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.082243][ T7230] loop3: detected capacity change from 0 to 256 [ 224.122759][ T7230] exfat: Deprecated parameter 'utf8' [ 224.278800][ T7230] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 224.366569][ T7235] netlink: 'syz.4.962': attribute type 4 has an invalid length. [ 224.374386][ T7235] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.962'. [ 225.080822][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.701210][ T7243] loop1: detected capacity change from 0 to 512 [ 226.013021][ T7246] loop3: detected capacity change from 0 to 512 [ 226.033782][ T7246] EXT4-fs: Ignoring removed orlov option [ 226.120719][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.194827][ T7243] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 226.216713][ T7246] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 226.337401][ T7246] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 226.345431][ T7243] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 226.360142][ T41] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 226.381864][ T41] usb 1-1: USB disconnect, device number 15 [ 226.383215][ T7243] EXT4-fs (loop1): 1 truncate cleaned up [ 226.455845][ T7246] System zones: 1-12 [ 226.460174][ T7243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 226.592886][ T7246] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.965: casefold flag without casefold feature [ 226.686057][ T7246] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.965: couldn't read orphan inode 15 (err -117) [ 226.750596][ T7255] loop4: detected capacity change from 0 to 4096 [ 226.842485][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 226.854609][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 227.151525][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 227.160845][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.180741][ T41] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 227.392792][ T7255] NILFS (loop4): invalid segment: Checksum error in segment payload [ 227.410760][ T7246] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.473307][ T7255] NILFS (loop4): trying rollback from an earlier position [ 227.517584][ T7246] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.965: Directory hole found for htree leaf block 0 [ 227.572087][ T7255] NILFS (loop4): recovery complete [ 227.611454][ T7264] loop2: detected capacity change from 0 to 512 [ 227.634899][ T7266] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.734800][ T7264] EXT4-fs (loop2): 1 truncate cleaned up [ 227.762124][ T7264] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 227.771238][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.795210][ T41] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.809309][ T41] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.818546][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.897749][ T7264] EXT4-fs warning (device loop2): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 227.916711][ T41] usb 1-1: config 0 descriptor?? [ 228.200710][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 228.393168][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 228.603167][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.622719][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.647315][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.668063][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.688662][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.710849][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.728644][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.748879][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.769106][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.788626][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.800795][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.813653][ T7267] loop1: detected capacity change from 0 to 40427 [ 228.814369][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.828989][ T7267] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 228.850087][ T7267] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.856302][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.866345][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.879210][ T41] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 228.883908][ T7267] F2FS-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 228.887492][ T41] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 228.957231][ T41] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 229.000994][ T41] usb 1-1: USB disconnect, device number 16 [ 229.029760][ T7272] loop4: detected capacity change from 0 to 32768 [ 229.059730][ T4251] EXT4-fs (loop2): unmounting filesystem. [ 229.079861][ T7272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.971 (7272) [ 229.129502][ T7272] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.208417][ T7272] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 229.233354][ T7272] BTRFS info (device loop4): using free space tree [ 229.241119][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.300000][ T7283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.973'. [ 229.418570][ T7284] loop2: detected capacity change from 0 to 16 [ 229.494758][ T7284] erofs: (device loop2): mounted with root inode @ nid 36. [ 230.241932][ T7272] BTRFS info (device loop4): enabling ssd optimizations [ 230.254152][ T7302] loop2: detected capacity change from 0 to 256 [ 230.262632][ T7302] exfat: Deprecated parameter 'utf8' [ 230.280707][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.323712][ T7302] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 230.672090][ T6687] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.320825][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.603550][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.999426][ T7330] netlink: 'syz.4.976': attribute type 4 has an invalid length. [ 233.007162][ T7330] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.976'. [ 233.641092][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.846388][ T4290] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 234.102397][ T4290] usb 2-1: Using ep0 maxpacket: 8 [ 234.282560][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 234.293316][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 234.680753][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.895781][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.940727][ T4290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.954178][ T7343] loop3: detected capacity change from 0 to 256 [ 234.963876][ T4290] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 234.981379][ T7343] exfat: Deprecated parameter 'utf8' [ 234.987684][ T7345] loop4: detected capacity change from 0 to 512 [ 234.991388][ T4290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.024315][ T7345] EXT4-fs: Ignoring removed orlov option [ 235.048213][ T7343] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 235.054513][ T7345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.063623][ T4290] usb 2-1: config 0 descriptor?? [ 235.100761][ T4290] usb 2-1: can't set config #0, error -71 [ 235.130143][ T4290] usb 2-1: USB disconnect, device number 11 [ 235.183738][ T7347] loop1: detected capacity change from 0 to 512 [ 235.219293][ T7347] EXT4-fs (loop1): 1 truncate cleaned up [ 235.230454][ T7347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 235.268596][ T7347] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 235.315944][ T7345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 235.328543][ T7345] System zones: 1-12 [ 235.336670][ T7345] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.983: casefold flag without casefold feature [ 235.426660][ T7345] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.983: couldn't read orphan inode 15 (err -117) [ 235.480451][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 235.496171][ T7345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 235.691690][ T7345] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.983: Directory hole found for htree leaf block 0 [ 235.714756][ T7357] loop0: detected capacity change from 0 to 512 [ 235.721301][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.730041][ T7357] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 235.753311][ T7357] EXT4-fs (loop0): 1 truncate cleaned up [ 236.050802][ T7360] netlink: 60 bytes leftover after parsing attributes in process `syz.1.985'. [ 236.217936][ T7361] loop1: detected capacity change from 0 to 16 [ 237.890759][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.949982][ T7361] erofs: (device loop1): mounted with root inode @ nid 36. [ 238.004812][ T7357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 238.029070][ T6687] EXT4-fs (loop4): unmounting filesystem. [ 238.820831][ T4246] EXT4-fs (loop0): unmounting filesystem. [ 238.920812][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.843469][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 239.871698][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 239.960806][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.078476][ T7394] loop1: detected capacity change from 0 to 512 [ 240.154369][ T7395] netlink: 'syz.0.992': attribute type 4 has an invalid length. [ 240.162125][ T7395] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.992'. [ 240.466454][ T7394] EXT4-fs (loop1): 1 truncate cleaned up [ 240.544016][ T7394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 240.739933][ T7316] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 240.795995][ T7394] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 240.983647][ T4255] EXT4-fs (loop1): unmounting filesystem. [ 241.000887][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 241.100653][ T7316] usb 5-1: Using ep0 maxpacket: 8 [ 241.244764][ T7316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.285865][ T7316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.322704][ T7316] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 241.343305][ T7316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.371280][ T7316] usb 5-1: config 0 descriptor?? [ 242.237148][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.363451][ T7413] netlink: 'syz.0.1008': attribute type 4 has an invalid length. [ 242.396186][ T7413] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1008'. [ 242.414778][ T7416] loop3: detected capacity change from 0 to 256 [ 242.441444][ T7416] exfat: Deprecated parameter 'utf8' [ 242.490041][ T7416] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 242.820196][ T7420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1001'. [ 242.942318][ T7422] loop2: detected capacity change from 0 to 16 [ 243.240711][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 243.660562][ T7422] erofs: (device loop2): mounted with root inode @ nid 36. [ 244.060838][ T7316] usbhid 5-1:0.0: can't add hid device: -71 [ 244.066868][ T7316] usbhid: probe of 5-1:0.0 failed with error -71 [ 244.118747][ T7316] usb 5-1: USB disconnect, device number 9 [ 244.280714][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 245.274301][ T7433] loop3: detected capacity change from 0 to 512 [ 245.320756][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 245.328138][ T7433] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 245.355511][ T7433] EXT4-fs (loop3): 1 truncate cleaned up [ 245.365135][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1006'. [ 245.376837][ T7433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 245.389907][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1006'. [ 245.539276][ T7446] loop4: detected capacity change from 0 to 512 [ 245.611886][ T7446] EXT4-fs (loop4): 1 truncate cleaned up [ 245.633644][ T7446] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 245.720066][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 245.770910][ T7446] EXT4-fs warning (device loop4): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 245.879101][ T6687] EXT4-fs (loop4): unmounting filesystem. [ 246.360702][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 246.708007][ T7463] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1013'. [ 246.833850][ T7464] loop4: detected capacity change from 0 to 16 [ 246.883094][ T7464] erofs: (device loop4): mounted with root inode @ nid 36. [ 247.400708][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 248.440712][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 248.824927][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 248.850669][ T7316] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.869018][ T7485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 249.007344][ T7492] loop3: detected capacity change from 0 to 512 [ 249.074626][ T7492] EXT4-fs (loop3): 1 truncate cleaned up [ 249.087973][ T7492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 249.110659][ T7316] usb 5-1: Using ep0 maxpacket: 8 [ 249.162703][ T7492] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 249.254536][ T7498] netlink: 'syz.1.1022': attribute type 4 has an invalid length. [ 249.256020][ T7316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.279363][ T7316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.299733][ T7498] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1022'. [ 249.309433][ T7316] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 249.323696][ T7316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.345399][ T7316] usb 5-1: config 0 descriptor?? [ 249.392163][ T4245] EXT4-fs (loop3): unmounting filesystem. [ 249.480698][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 249.489921][ T7487] loop0: detected capacity change from 0 to 32768 [ 249.617284][ T26] audit: type=1804 audit(1730113947.657:65): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1021" name="/newroot/198/bus/file1" dev="loop0" ino=4 res=1 errno=0 [ 249.772367][ T7502] ================================================================================ [ 249.821896][ T7502] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_txnmgr.c:1743:5 [ 249.860226][ T7502] index 18 is out of range for type 'xad_t[18]' (aka 'struct xad[18]') [ 249.880445][ T7502] CPU: 0 PID: 7502 Comm: syz.0.1021 Not tainted 6.1.114-syzkaller #0 [ 249.888541][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.898866][ T7502] Call Trace: [ 249.902157][ T7502] [ 249.905104][ T7502] dump_stack_lvl+0x1e3/0x2cb [ 249.909822][ T7502] ? nf_tcp_handle_invalid+0x642/0x642 [ 249.915309][ T7502] ? panic+0x764/0x764 [ 249.919411][ T7502] __ubsan_handle_out_of_bounds+0x118/0x140 [ 249.925333][ T7502] txCommit+0x3f07/0x6ba0 [ 249.929699][ T7502] ? trace_contention_end+0x61/0x170 [ 249.935011][ T7502] ? __lock_acquire+0x1f80/0x1f80 [ 249.940061][ T7502] ? txLinelock+0x160/0x160 [ 249.944592][ T7502] ? __mutex_unlock_slowpath+0x218/0x750 [ 249.950248][ T7502] jfs_commit_inode+0x362/0x580 [ 249.955119][ T7502] ? jfs_iget+0x3b0/0x3b0 [ 249.959459][ T7502] ? rcu_is_watching+0x11/0xb0 [ 249.964234][ T7502] ? __mark_inode_dirty+0x430/0xf80 [ 249.969451][ T7502] extAlloc+0xca8/0x1000 [ 249.973724][ T7502] ? jfs_ioc_trim+0x6a0/0x6a0 [ 249.978430][ T7502] jfs_get_block+0x417/0xe50 [ 249.983027][ T7502] ? create_page_buffers+0x1d2/0x4b0 [ 249.988321][ T7502] ? jfs_dirty_inode+0x230/0x230 [ 249.993263][ T7502] ? create_page_buffers+0x24e/0x4b0 [ 249.998545][ T7502] __block_write_begin_int+0x544/0x1a30 [ 250.004104][ T7502] ? jfs_dirty_inode+0x230/0x230 [ 250.009037][ T7502] ? page_zero_new_buffers+0x650/0x650 [ 250.014504][ T7502] ? jfs_dirty_inode+0x230/0x230 [ 250.019436][ T7502] block_write_begin+0x98/0x1f0 [ 250.024280][ T7502] ? jfs_write_begin+0x16/0x60 [ 250.029036][ T7502] jfs_write_begin+0x2d/0x60 [ 250.033624][ T7502] generic_perform_write+0x2fc/0x5e0 [ 250.038912][ T7502] ? generic_file_direct_write+0x460/0x460 [ 250.044712][ T7502] ? __file_remove_privs+0x640/0x640 [ 250.049993][ T7502] ? generic_write_checks+0x15c/0x1c0 [ 250.055356][ T7502] ? clear_nonspinnable+0x60/0x60 [ 250.060376][ T7502] __generic_file_write_iter+0x176/0x400 [ 250.066006][ T7502] generic_file_write_iter+0xab/0x310 [ 250.071373][ T7502] do_iter_write+0x6e6/0xc40 [ 250.075965][ T7502] ? vfs_iter_write+0xa0/0xa0 [ 250.080644][ T7502] ? vfs_iter_write+0x69/0xa0 [ 250.085315][ T7502] iter_file_splice_write+0x830/0xfc0 [ 250.090700][ T7502] ? splice_from_pipe+0x240/0x240 [ 250.095725][ T7502] ? splice_shrink_spd+0xb0/0xb0 [ 250.100667][ T7502] ? common_file_perm+0x17d/0x1d0 [ 250.105686][ T7502] ? splice_from_pipe+0x240/0x240 [ 250.110701][ T7502] direct_splice_actor+0xe3/0x1c0 [ 250.115731][ T7502] splice_direct_to_actor+0x4c7/0xc30 [ 250.121103][ T7502] ? direct_file_splice_eof+0xa0/0xa0 [ 250.126471][ T7502] ? pipe_to_sendpage+0x350/0x350 [ 250.131494][ T7502] ? fsnotify_perm+0x64/0x590 [ 250.136161][ T7502] ? security_file_permission+0x75/0xa0 [ 250.141703][ T7502] do_splice_direct+0x2a5/0x3e0 [ 250.146549][ T7502] ? splice_direct_to_actor+0xc30/0xc30 [ 250.152087][ T7502] ? rcu_read_lock_any_held+0xb3/0x160 [ 250.157565][ T7502] ? do_splice_direct+0x3e0/0x3e0 [ 250.162609][ T7502] do_sendfile+0x619/0xff0 [ 250.167037][ T7502] ? do_pwritev+0x360/0x360 [ 250.171541][ T7502] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 250.177525][ T7502] __se_sys_sendfile64+0x178/0x1e0 [ 250.182639][ T7502] ? __x64_sys_sendfile64+0xa0/0xa0 [ 250.187831][ T7502] ? syscall_enter_from_user_mode+0x2e/0x230 [ 250.193807][ T7502] ? lockdep_hardirqs_on+0x94/0x130 [ 250.199004][ T7502] ? syscall_enter_from_user_mode+0x2e/0x230 [ 250.204982][ T7502] do_syscall_64+0x3b/0xb0 [ 250.209392][ T7502] ? clear_bhb_loop+0x45/0xa0 [ 250.214091][ T7502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.219985][ T7502] RIP: 0033:0x7f761e17e719 [ 250.224408][ T7502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.244032][ T7502] RSP: 002b:00007f761f015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 250.252461][ T7502] RAX: ffffffffffffffda RBX: 00007f761e336058 RCX: 00007f761e17e719 [ 250.260427][ T7502] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 250.268420][ T7502] RBP: 00007f761e1f132e R08: 0000000000000000 R09: 0000000000000000 [ 250.276410][ T7502] R10: 0000000000100001 R11: 0000000000000246 R12: 0000000000000000 [ 250.284373][ T7502] R13: 0000000000000000 R14: 00007f761e336058 R15: 00007ffc88469378 [ 250.292355][ T7502] [ 250.295486][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.362466][ T7502] ================================================================================ [ 250.376083][ T7502] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 250.383296][ T7502] CPU: 1 PID: 7502 Comm: syz.0.1021 Not tainted 6.1.114-syzkaller #0 [ 250.391368][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.401690][ T7502] Call Trace: [ 250.404974][ T7502] [ 250.407904][ T7502] dump_stack_lvl+0x1e3/0x2cb [ 250.412605][ T7502] ? nf_tcp_handle_invalid+0x642/0x642 [ 250.418086][ T7502] ? panic+0x764/0x764 [ 250.422192][ T7502] ? vscnprintf+0x59/0x80 [ 250.426538][ T7502] panic+0x318/0x764 [ 250.430445][ T7502] ? check_panic_on_warn+0x1d/0xa0 [ 250.435572][ T7502] ? memcpy_page_flushcache+0xfc/0xfc [ 250.440967][ T7502] ? dump_stack_lvl+0x24f/0x2cb [ 250.445876][ T7502] check_panic_on_warn+0x7e/0xa0 [ 250.450824][ T7502] __ubsan_handle_out_of_bounds+0x138/0x140 [ 250.456753][ T7502] txCommit+0x3f07/0x6ba0 [ 250.461114][ T7502] ? trace_contention_end+0x61/0x170 [ 250.466414][ T7502] ? __lock_acquire+0x1f80/0x1f80 [ 250.471467][ T7502] ? txLinelock+0x160/0x160 [ 250.475992][ T7502] ? __mutex_unlock_slowpath+0x218/0x750 [ 250.481661][ T7502] jfs_commit_inode+0x362/0x580 [ 250.486536][ T7502] ? jfs_iget+0x3b0/0x3b0 [ 250.490882][ T7502] ? rcu_is_watching+0x11/0xb0 [ 250.495654][ T7502] ? __mark_inode_dirty+0x430/0xf80 [ 250.501351][ T7502] extAlloc+0xca8/0x1000 [ 250.505621][ T7502] ? jfs_ioc_trim+0x6a0/0x6a0 [ 250.510315][ T7502] jfs_get_block+0x417/0xe50 [ 250.514901][ T7502] ? create_page_buffers+0x1d2/0x4b0 [ 250.520254][ T7502] ? jfs_dirty_inode+0x230/0x230 [ 250.525203][ T7502] ? create_page_buffers+0x24e/0x4b0 [ 250.530496][ T7502] __block_write_begin_int+0x544/0x1a30 [ 250.536061][ T7502] ? jfs_dirty_inode+0x230/0x230 [ 250.540993][ T7502] ? page_zero_new_buffers+0x650/0x650 [ 250.546452][ T7502] ? jfs_dirty_inode+0x230/0x230 [ 250.551388][ T7502] block_write_begin+0x98/0x1f0 [ 250.556233][ T7502] ? jfs_write_begin+0x16/0x60 [ 250.560990][ T7502] jfs_write_begin+0x2d/0x60 [ 250.565577][ T7502] generic_perform_write+0x2fc/0x5e0 [ 250.570863][ T7502] ? generic_file_direct_write+0x460/0x460 [ 250.576658][ T7502] ? __file_remove_privs+0x640/0x640 [ 250.581950][ T7502] ? generic_write_checks+0x15c/0x1c0 [ 250.587319][ T7502] ? clear_nonspinnable+0x60/0x60 [ 250.592340][ T7502] __generic_file_write_iter+0x176/0x400 [ 250.597969][ T7502] generic_file_write_iter+0xab/0x310 [ 250.603333][ T7502] do_iter_write+0x6e6/0xc40 [ 250.607919][ T7502] ? vfs_iter_write+0xa0/0xa0 [ 250.612609][ T7502] ? vfs_iter_write+0x69/0xa0 [ 250.617287][ T7502] iter_file_splice_write+0x830/0xfc0 [ 250.622677][ T7502] ? splice_from_pipe+0x240/0x240 [ 250.627698][ T7502] ? splice_shrink_spd+0xb0/0xb0 [ 250.632640][ T7502] ? common_file_perm+0x17d/0x1d0 [ 250.637661][ T7502] ? splice_from_pipe+0x240/0x240 [ 250.642676][ T7502] direct_splice_actor+0xe3/0x1c0 [ 250.647696][ T7502] splice_direct_to_actor+0x4c7/0xc30 [ 250.653068][ T7502] ? direct_file_splice_eof+0xa0/0xa0 [ 250.658439][ T7502] ? pipe_to_sendpage+0x350/0x350 [ 250.663460][ T7502] ? fsnotify_perm+0x64/0x590 [ 250.668127][ T7502] ? security_file_permission+0x75/0xa0 [ 250.673666][ T7502] do_splice_direct+0x2a5/0x3e0 [ 250.678528][ T7502] ? splice_direct_to_actor+0xc30/0xc30 [ 250.684072][ T7502] ? rcu_read_lock_any_held+0xb3/0x160 [ 250.689526][ T7502] ? do_splice_direct+0x3e0/0x3e0 [ 250.694549][ T7502] do_sendfile+0x619/0xff0 [ 250.698969][ T7502] ? do_pwritev+0x360/0x360 [ 250.703468][ T7502] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 250.709450][ T7502] __se_sys_sendfile64+0x178/0x1e0 [ 250.714554][ T7502] ? __x64_sys_sendfile64+0xa0/0xa0 [ 250.719744][ T7502] ? syscall_enter_from_user_mode+0x2e/0x230 [ 250.725760][ T7502] ? lockdep_hardirqs_on+0x94/0x130 [ 250.730950][ T7502] ? syscall_enter_from_user_mode+0x2e/0x230 [ 250.736925][ T7502] do_syscall_64+0x3b/0xb0 [ 250.741329][ T7502] ? clear_bhb_loop+0x45/0xa0 [ 250.745996][ T7502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.751888][ T7502] RIP: 0033:0x7f761e17e719 [ 250.756293][ T7502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.775892][ T7502] RSP: 002b:00007f761f015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 250.784300][ T7502] RAX: ffffffffffffffda RBX: 00007f761e336058 RCX: 00007f761e17e719 [ 250.792265][ T7502] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 250.800225][ T7502] RBP: 00007f761e1f132e R08: 0000000000000000 R09: 0000000000000000 [ 250.808183][ T7502] R10: 0000000000100001 R11: 0000000000000246 R12: 0000000000000000 [ 250.816146][ T7502] R13: 0000000000000000 R14: 00007f761e336058 R15: 00007ffc88469378 [ 250.824123][ T7502] [ 250.827354][ T7502] Kernel Offset: disabled [ 250.831736][ T7502] Rebooting in 86400 seconds..