last executing test programs: 7.677024303s ago: executing program 0 (id=1642): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000080)="806f9ca9090fa3", 0x7}], 0x1) 7.119673775s ago: executing program 3 (id=1647): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) 6.229497096s ago: executing program 3 (id=1648): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 6.111876827s ago: executing program 0 (id=1649): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000600)={0x3, &(0x7f0000000640)=[{0xfff9, 0x0, 0x9, 0x4}, {0x4, 0x2, 0x40, 0x2}, {0x1, 0x0, 0xff, 0x2}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f00000002c0)={0x2d, 0x3}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000140)='P9', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000240)='P', 0x0}, 0x20) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x40}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0xffff, @empty, 0x8000}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000200)=[{0x40, 0x0, 0x0, 0xffffffff}, {0x6}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000500), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.002917097s ago: executing program 0 (id=1650): mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c2394f90435fc600400110a0a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.959545361s ago: executing program 0 (id=1651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@bloom_filter={0x1e, 0xe4540000, 0x1a, 0x7ff, 0x2000, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x6, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = getpid() sched_setaffinity(r5, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) vmsplice(r2, 0x0, 0x0, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='befs\x00', 0x3200100, &(0x7f0000000440)='GPL\x00') 5.275751644s ago: executing program 3 (id=1653): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="20000000020000001000000083b40000f8ed8d5a21de", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000500000000020000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="74b6", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x4000000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x3}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x401c0, 0x0) syz_emit_ethernet(0x41, 0x0, 0x0) 5.000468449s ago: executing program 4 (id=1654): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r3}) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 4.912106967s ago: executing program 0 (id=1656): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3970b8090d64f40c}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x900}) 4.707539296s ago: executing program 4 (id=1657): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, 0x0, &(0x7f00000000c0)) 4.697987517s ago: executing program 3 (id=1658): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r4) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r5, 0x5953a6d8b15e6715}, 0x14}}, 0x0) 4.411889993s ago: executing program 4 (id=1659): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "00000100000000000874e4bf7fb3a6835b76e252922cb18f6e2e2aba0000040000003836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e156c5027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x21, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={'batadv0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) sendto$inet6(r6, &(0x7f0000000000)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d32345652b000000caaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a000000000000000000000040f6b0f8ec", 0x75, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000240)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fac0e2ff00000000000000"], 0x40}}, 0x0) fsetxattr(r1, &(0x7f0000000280)=@random={'user.', 'H!#$$^$\'$@\x00'}, &(0x7f00000002c0)='.\x00', 0x2, 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000300), 0x4) 4.316374782s ago: executing program 4 (id=1660): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000600)={0x3, &(0x7f0000000640)=[{0xfff9, 0x0, 0x9, 0x4}, {0x4, 0x2, 0x40, 0x2}, {0x1, 0x0, 0xff, 0x2}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f00000002c0)={0x2d, 0x3}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000140)='P9', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r5, &(0x7f0000000240)='P', 0x0}, 0x20) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x40}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e21, 0xffff, @empty, 0x8000}, 0x1c) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000200)=[{0x40, 0x0, 0x0, 0xffffffff}, {0x6}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000500), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000013a40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.062298755s ago: executing program 4 (id=1662): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff, 0x3, 0x0, 0x1000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) 3.04176911s ago: executing program 1 (id=1663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000014c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.867607785s ago: executing program 2 (id=1664): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}) 1.725183481s ago: executing program 1 (id=1665): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x716282800bc123b7, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x44, 0x0, "bda111c5b5ae6d92d00c0fae174cd7575028c0326ba91226d95963db44b11c55a2ad93c207d005e3b09c623ac941c2a4516f4b249ca8595794c271c52e503ab13a896438a2b3b8643b5100"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001340)=""/102378, 0x7706c522012798af) socket$pppl2tp(0x18, 0x1, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x4030582a, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 1.613093651s ago: executing program 2 (id=1666): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080), 0xc) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080), 0x2000011a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) 1.611963622s ago: executing program 3 (id=1667): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000001040)=@deltfilter={0xfa4, 0x2d, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0x8}, {0x4, 0x2}}, [@f_rsvp6={{0xa}, {0x6ac, 0x2, [@TCA_RSVP_ACT={0x590, 0x6, [@m_vlan={0x7c, 0x7, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc43}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x396}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x2d, 0x6, "4b7559463cfa1f373687d26456b07a3307b60f1103f04a7dca8c11b8369c58081c9bde8a67651a5a4f"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_csum={0x150, 0x1e, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x8, 0x60}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xffffffff, 0x20000000, 0xff, 0x3ff}, 0x3a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x0, 0x1, 0x8001}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xd6, 0x2, 0x1, 0xe2}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x20000000, 0x1, 0x80}, 0x2}}]}, {0x95, 0x6, "841c67b8db76b6f505a53281a6903f5e27f8f0f6535ea5dddfe73cc900720a5697cc6b58e6b097453c1ae38f201126ed1ded57b6f3b8ae4fca66ccc2fe8738956a8d7a871e28915ec9f872b0d77da4fe3651492e266635cff149eb115768338ebb61b9642ff045003ca03a1a4fe09238049195d7da1e9a5807d50604eede87ce996e543ec13897a617f37829987f80926d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x118, 0x3, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xc73, 0x3, 0x1, 0x2, 0x9}, 0x1}}]}, {0xb0, 0x6, "d73f01364907022d4a1e218fa1c7726a011b43139e3ec6760ed21531906351f88663fbab9113a3442f047a5763e73d248e3dc51c05004599d3790e993b85b40b45132fe0c8fb22018e4cb6070b6450ac98c76c3eeb9fc7934c1e7da021b2b810ce62cde92cf680ac63bcad485a49e1d6dd460e52d6da49e199ac6e91360f1e2eeff00a90f854247bc405edbf9540cfef6acccd959d4fddfb384383b1708697ffec6945803c94c5d66326dc39"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x184, 0x3, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf1, 0x3, 0x3, 0x71, 0x67b59000}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff2000, 0x8, 0x8, 0xffffff7f, 0x7}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x2bb, 0x6, 0x9, 0xfffffffa}, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x15}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x81, 0x20000000, 0x8, 0x9}, @loopback, @loopback, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc, 0x1ff, 0x3, 0x4, 0x1}, @private=0xa010100, @multicast1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7ff, 0x1, 0xfffff800, 0x40}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xf, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x1d8, 0x20000005, 0x7844, 0x81}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff}}]}, {0x41, 0x6, "89329cd38c135e1f9fb2f9dffe859f59067b4864a4bc4d2dbc9c1b0a31d029d6824d5aaac86093415a2a696b4e13c419540f870297f09b179982de8fae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x124, 0x16, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x40000}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xc5, 0x6, "57fcd99961782f982c38c543f5e01cf1a94e85adb92055af2d03e6789c1e3eb1d99d89af37a66de8d52e62e07672fcb4803aae2a9d4236ccd1c56b90d877761cb68a83a2ddb792209974ad1e78baa58d931833cb2dbf19df0f4535a37885e236d78c580fec22174d56a77f6df25afeb76848ee3e1bc14666e69c2d69a080d7d309b39d738bc1f1acd58e0497bd471d3f6ffb6b09d5f9ff08a7affd1405c1da13c9608dd46bf345e8247dc47e82ce1bf6aa1fab6742a202810f924ef676416140a6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x8, 0x9}, {0xc02, 0x7, 0x3}, 0x6c, 0xf}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x4, 0x5}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}, @TCA_RSVP_SRC={0x14, 0x3, @local}, @TCA_RSVP_DST={0x14, 0x2, @mcast2}, @TCA_RSVP_POLICE={0x6c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1c000000, 0xffffffffffffffff, 0x6, 0x4, 0x7, {0x4, 0x1, 0xfff5, 0x30d2, 0x8, 0x9}, {0x2, 0x0, 0x9, 0x101, 0x8, 0x81}, 0x8, 0x6, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x1, 0x3}, {0x8, 0xfffffffa}, 0x2f, 0x6, 0x9}}]}}, @f_tcindex={{0xc}, {0x4a4, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff3, 0xffff}}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x9}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x8, 0xffe0}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_MASK={0x6, 0x2, 0xfff}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x8057}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xcff4}, @TCA_TCINDEX_ACT={0x60, 0x7, [@m_tunnel_key={0x5c, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x29, 0x6, "ec4b46673b21992bd34b678659652fc4696e0731112988a069284dbb7bfd50748d906d5839"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}, @TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x3800, 0xffffff86, 0x8, 0x6, 0x78dd, 0xfffffff7, 0x4, 0x8, 0x800, 0x7, 0x7, 0x4, 0xfffffff7, 0x101, 0x2e, 0x7, 0x10, 0x400, 0xa5, 0x3, 0x5, 0x0, 0x7, 0x3, 0x40, 0xfffffff9, 0x380, 0x6, 0x1a38a0d8, 0x8, 0x6, 0x5, 0x1, 0x15, 0x800, 0x1, 0xffff, 0x5, 0x1, 0x2, 0x67, 0x791, 0x2, 0x1000, 0x8, 0x5, 0xc5ed, 0x2, 0x7fc0, 0x0, 0x9, 0x80, 0x1, 0x502e062c, 0xfffffff8, 0x3, 0x735, 0x8, 0x0, 0x0, 0x2, 0x2, 0x2, 0x3, 0x2, 0x38c, 0x2, 0xb30a, 0x2f13, 0x6, 0x100, 0x4, 0x9, 0x33, 0x1, 0xa, 0x9, 0x5, 0x1, 0x8, 0x6, 0x8, 0x3, 0x0, 0x3, 0x9, 0xff, 0x1, 0x80, 0x9, 0xa, 0xe15, 0x3, 0x3, 0x8000000, 0x4, 0x7, 0x7, 0x6, 0x3, 0x7, 0x3, 0xffffffff, 0x80000000, 0x0, 0x4, 0x306, 0x4, 0xffffff80, 0x1, 0x1, 0x39, 0x9, 0x1, 0x5, 0x1ff, 0x0, 0x6, 0x8, 0x5, 0xb, 0x2, 0x6, 0x7, 0x0, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0x8, 0x3, 0x7, 0x0, 0x9754, 0x31e58fc0, 0xe, 0x8, 0x3eae2b3b, 0xfffff95a, 0x9, 0x8, 0x4bd9, 0x7, 0x4, 0x66, 0x9, 0x7fff, 0x401, 0xa000000, 0x44d, 0x74, 0x0, 0x0, 0x3, 0x2, 0x4821, 0x4, 0x1, 0xfffffff8, 0xfffffffd, 0x788, 0x9, 0x5, 0x4, 0x60, 0x6, 0x4, 0x0, 0x101, 0x2, 0x9, 0xce, 0xf, 0x7fffffff, 0xb, 0x5, 0x3, 0x0, 0x1, 0x6, 0xc, 0x0, 0x280, 0x1, 0x1, 0x4, 0x3, 0x2, 0x5, 0x9, 0x8001, 0x5000000, 0x0, 0x5, 0x2, 0x9, 0xa7e8, 0x424, 0x9, 0xd0, 0x812, 0x2, 0x8, 0xfffffbff, 0x0, 0x5, 0x3, 0x3, 0x7, 0x4, 0x2, 0x4, 0xe0000000, 0x0, 0x9, 0x7, 0x9, 0x1, 0x0, 0x10, 0x10000, 0x101, 0x5, 0x0, 0x8, 0x8, 0x2, 0x5, 0x0, 0x4, 0x4, 0x1, 0x7fffffff, 0xc000000, 0x3, 0x8, 0xffff0000, 0x8, 0x101, 0x0, 0x2, 0x3, 0x4, 0x8, 0x81, 0x4, 0x3, 0xd, 0x5, 0xffff, 0x8, 0xa6, 0x400, 0x7d6]}]}]}}, @f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x81, 0x5, 0x8, 0xd0, 0x3c96, 0x400, 0x0, 0xe0f, 0x9, 0x4, 0x0, 0x5, 0x7fff, 0x10000, 0x5d4f, 0x5, 0x9, 0x4f8, 0xffffffff, 0x1ff, 0x6, 0x2, 0x1, 0x8, 0x5, 0x401, 0x4, 0x6, 0x6, 0x334c, 0x4, 0xc0eb, 0x9, 0x3ff, 0x5, 0x900, 0x7, 0x1, 0x0, 0x1, 0x4, 0xc3, 0x0, 0x7, 0x7f, 0x8001, 0x3, 0x18b, 0x5, 0x0, 0x101, 0x5, 0x6, 0x3, 0xfff, 0x4, 0x9, 0xf0e, 0x0, 0x9, 0x3, 0x80, 0x8, 0xc, 0x8, 0x0, 0xa40d, 0x99, 0xa71, 0x0, 0x1, 0x0, 0x3, 0x10001, 0xc, 0x3ff, 0x6, 0x3, 0x80, 0x8, 0x0, 0x0, 0x8, 0x3ff, 0x0, 0xf, 0xc, 0x7f4, 0x1, 0x43, 0x1, 0x3, 0x10, 0xc3, 0x5, 0xaca, 0x9, 0x7c, 0x4, 0xffa, 0x7ff, 0xc40, 0xfffffffc, 0x16c9, 0x8, 0x5, 0x3, 0x3, 0x5, 0x80000001, 0x0, 0x80, 0x5, 0x74, 0x7, 0x7, 0xde4a, 0x7, 0x99, 0x2, 0x5, 0x7, 0x81, 0x8, 0x8, 0x1, 0x2, 0x3, 0x0, 0x3, 0xe4, 0x4, 0xe, 0x68c, 0xbc9, 0xcd, 0x1, 0x3, 0x7, 0x0, 0x0, 0x65, 0x5, 0x6, 0x8, 0xc5d7, 0x9, 0x4a25, 0x8, 0x1, 0xfff, 0xfffffffe, 0x8b7, 0x81, 0x2, 0x0, 0x9, 0x4, 0x5, 0x6, 0x3, 0x0, 0x7, 0x4000000, 0x8, 0x10, 0x8, 0xa3, 0x5, 0x1, 0x1, 0x5, 0x1, 0x1ff, 0x5232, 0x4, 0x1000, 0x8, 0x3, 0x3, 0x3104, 0x6, 0x0, 0x800, 0xc477, 0x1, 0x9, 0x71, 0xfff, 0x4, 0x8, 0xf81f, 0xcb, 0xe4, 0x0, 0x4, 0x1ff, 0x9, 0x5, 0x3, 0x38c6, 0x6, 0x0, 0x3, 0x7, 0x5, 0x5, 0x1f, 0x0, 0x7, 0x5, 0x6, 0x1, 0x5, 0x1, 0xfffff786, 0xfffffffb, 0x4, 0xe, 0x1, 0x2, 0x1000, 0x7, 0x2, 0x8000, 0xfffffa8b, 0xc, 0x306, 0xbf, 0x2, 0xfffffbff, 0xe177, 0x1ffc00, 0x8, 0x1000, 0x80000000, 0x5330, 0x3ff, 0x5, 0x3, 0x9, 0x1, 0x1, 0xd, 0x10, 0x0, 0x81, 0xb, 0x6, 0x480, 0x4, 0x2, 0x8, 0x7af, 0x3]}]}]}}]}, 0xfa4}}, 0x0) 1.477716924s ago: executing program 2 (id=1668): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r3}) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 1.374286363s ago: executing program 3 (id=1669): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000009c0)=""/73, 0x49) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.334619367s ago: executing program 2 (id=1670): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = msgget$private(0x0, 0x8d) msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r2 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r4, r5, 0x0) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f", 0xc4, 0xc001, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8", 0xc, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) 1.328014297s ago: executing program 1 (id=1671): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "00000100000000000874e4bf7fb3a6835b76e252922cb18f6e2e2aba0000040000003836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e156c5027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x21, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={'batadv0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) sendto$inet6(r6, &(0x7f0000000000)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d32345652b000000caaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a000000000000000000000040f6b0f8ec", 0x75, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8916, &(0x7f0000000240)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r3, @ANYBLOB="14000200fac0e2ff00000000000000"], 0x40}}, 0x0) fsetxattr(r1, &(0x7f0000000280)=@random={'user.', 'H!#$$^$\'$@\x00'}, &(0x7f00000002c0)='.\x00', 0x2, 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000300), 0x4) 1.131891836s ago: executing program 2 (id=1672): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = open$dir(&(0x7f0000000480)='./file0/../file0/file0\x00', 0x505200, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000440)='./file0/../file0\x00', r0, 0x0, 0x5) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xa32c) 973.99344ms ago: executing program 1 (id=1673): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x3, 0x0, 0xffffffffffffffff, @void, @value}, 0x12) 656.512279ms ago: executing program 1 (id=1674): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000300)=0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000000)="03020000008002ff", 0x8) 466.359296ms ago: executing program 0 (id=1675): syz_usb_connect(0x3, 0x8c6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) 392.694514ms ago: executing program 1 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000014c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 391.445574ms ago: executing program 2 (id=1677): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), r4) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r5, 0x5953a6d8b15e6715}, 0x14}}, 0x0) 0s ago: executing program 4 (id=1678): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x0, 0x800}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r2, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) unshare(0x2a000000) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket(0x2b, 0x800000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 111.390704][ T3682] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2306, setting to 64 [ 111.393086][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.416344][ T3682] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.424848][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.453922][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.454036][ T4930] XFS (loop2): Quotacheck needed: Please wait. [ 111.470383][ T4640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.498849][ T4640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.519490][ T4930] XFS (loop2): Quotacheck: Done. [ 111.524605][ T4640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.540587][ T4640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.555690][ T4640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.584132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.593808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.635499][ T4640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.647906][ T3636] XFS (loop2): Unmounting Filesystem [ 111.667000][ T4640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.676053][ T4640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.685139][ T4640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.694449][ T3682] usb 4-1: string descriptor 0 read error: -22 [ 111.701330][ T3682] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.717579][ T3682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.722043][ T4774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.782268][ T3682] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 111.813921][ T4774] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.820857][ T3682] cdc_ncm 4-1:1.0: bind() failure [ 111.829613][ T3682] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 111.841759][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.851918][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.860948][ T3682] cdc_ncm 4-1:1.1: bind() failure [ 111.943581][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.991026][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.013328][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.020627][ T4851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.075676][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.097633][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.105890][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.133013][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.142478][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.149639][ T4851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.157878][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.178652][ T152] usb 4-1: USB disconnect, device number 4 [ 112.192998][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.234182][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.297612][ T4774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.336838][ T4774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.395816][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.425126][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.071542][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.111986][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.122293][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.131545][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.140175][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.149055][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.168872][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.180031][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.188545][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.285531][ T3703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.305212][ T3703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.368775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.387682][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.417200][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.470387][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.564567][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.580099][ T3900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.774865][ T4774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.866669][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.875889][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.930614][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.942532][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.973568][ T4774] device veth0_vlan entered promiscuous mode [ 113.988123][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.200423][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.247623][ T4774] device veth1_vlan entered promiscuous mode [ 114.268588][ T5007] bridge0: port 3(gretap0) entered blocking state [ 114.290010][ T5007] bridge0: port 3(gretap0) entered disabled state [ 114.313289][ T5007] device gretap0 entered promiscuous mode [ 114.336101][ T5007] bridge0: port 3(gretap0) entered blocking state [ 114.343040][ T5007] bridge0: port 3(gretap0) entered forwarding state [ 114.406231][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.524352][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.568530][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.938978][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.175789][ T4774] device veth0_macvtap entered promiscuous mode [ 115.202295][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.232135][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.259794][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.294758][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.329364][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.639687][ T4713] device veth0_vlan entered promiscuous mode [ 115.863276][ T4774] device veth1_macvtap entered promiscuous mode [ 116.138206][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.183293][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.207155][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.223768][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.239986][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.251996][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.273856][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.288266][ T4713] device veth1_vlan entered promiscuous mode [ 116.299072][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.314121][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.325275][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.342293][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.352716][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.363689][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.373847][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.388666][ T4483] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 116.396547][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.408729][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.423467][ T4774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.432504][ T4774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.442192][ T4774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.451821][ T4774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.462373][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.472332][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.502550][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.519713][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.534882][ T4713] device veth0_macvtap entered promiscuous mode [ 116.565813][ T4713] device veth1_macvtap entered promiscuous mode [ 116.613422][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.625321][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.635646][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.646926][ T4483] usb 1-1: Using ep0 maxpacket: 8 [ 116.652439][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.662619][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.674002][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.684312][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.695512][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.708005][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.723349][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.737633][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.745895][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.759967][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.766252][ T4483] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.778457][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.808455][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.823486][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.826561][ T4483] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.842538][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.852877][ T4483] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 116.865211][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.876041][ T4483] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2306, setting to 64 [ 116.887117][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.897148][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.908121][ T4483] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.921772][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.933154][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.948071][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.962696][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.980301][ T4713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.009260][ T4713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.033116][ T4713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.056865][ T4713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.084657][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.093339][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.106802][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.185595][ T5061] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 117.198352][ T4483] usb 1-1: string descriptor 0 read error: -22 [ 117.212992][ T4483] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.233841][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.265232][ T4483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.274646][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.286153][ T5061] PKCS7: Only support pkcs7_signedData type [ 117.307516][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.347768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.394644][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.417337][ T3703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.428829][ T4483] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 117.464189][ T3703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.472161][ T4483] cdc_ncm 1-1:1.0: bind() failure [ 117.508452][ T4483] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 117.567283][ T5067] 9pnet_fd: Insufficient options for proto=fd [ 117.591142][ T4483] cdc_ncm 1-1:1.1: bind() failure [ 117.686933][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.755319][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.770004][ T3682] usb 1-1: USB disconnect, device number 4 [ 119.010791][ T5090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 120.966231][ T152] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.216561][ T152] usb 1-1: Using ep0 maxpacket: 8 [ 121.336131][ T152] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 121.351222][ T5114] loop4: detected capacity change from 0 to 32768 [ 121.396769][ T152] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.428516][ T5114] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.404 (5114) [ 121.433403][ T152] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 121.473060][ T5114] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.499943][ T152] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2306, setting to 64 [ 121.534965][ T152] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.556668][ T5114] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 121.581865][ T5114] BTRFS info (device loop4): using free space tree [ 122.198270][ T5114] BTRFS info (device loop4): enabling ssd optimizations [ 122.506834][ T4713] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.536342][ T152] usb 1-1: string descriptor 0 read error: -22 [ 122.549238][ T152] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.561372][ T5166] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 122.571715][ T5166] PKCS7: Only support pkcs7_signedData type [ 122.603300][ T152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.702016][ T152] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 122.720405][ T152] cdc_ncm 1-1:1.0: bind() failure [ 122.754965][ T152] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 122.784494][ T152] cdc_ncm 1-1:1.1: bind() failure [ 123.089604][ T4479] usb 1-1: USB disconnect, device number 5 [ 124.954808][ T5225] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 125.026141][ T5225] PKCS7: Only support pkcs7_signedData type [ 125.876291][ T2988] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.346196][ T2988] usb 3-1: Using ep0 maxpacket: 8 [ 126.395919][ T4853] Bluetooth: hci5: Frame reassembly failed (-84) [ 126.592400][ T4853] Bluetooth: hci5: Frame reassembly failed (-84) [ 126.604706][ T2988] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 126.675366][ T2988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.797696][ T2988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 126.810026][ T2988] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2306, setting to 64 [ 126.824701][ T2988] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.025926][ T5273] netlink: 'syz.0.454': attribute type 21 has an invalid length. [ 127.060854][ T5273] netlink: 128 bytes leftover after parsing attributes in process `syz.0.454'. [ 127.091990][ T5273] netlink: 'syz.0.454': attribute type 4 has an invalid length. [ 127.118472][ T5273] netlink: 'syz.0.454': attribute type 3 has an invalid length. [ 127.126666][ T5273] netlink: 3 bytes leftover after parsing attributes in process `syz.0.454'. [ 127.135800][ T5274] netlink: 'syz.0.454': attribute type 21 has an invalid length. [ 127.152250][ T5274] netlink: 128 bytes leftover after parsing attributes in process `syz.0.454'. [ 127.242236][ T2988] usb 3-1: string descriptor 0 read error: -22 [ 127.245841][ T2988] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.256800][ T2988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.642484][ T2988] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 127.727802][ T2988] cdc_ncm 3-1:1.0: bind() failure [ 127.741507][ T5274] netlink: 'syz.0.454': attribute type 4 has an invalid length. [ 127.753143][ T5274] netlink: 'syz.0.454': attribute type 5 has an invalid length. [ 127.763333][ T5274] netlink: 3 bytes leftover after parsing attributes in process `syz.0.454'. [ 127.766720][ T2988] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 127.804108][ T2988] cdc_ncm 3-1:1.1: bind() failure [ 127.950807][ T5280] netlink: 14 bytes leftover after parsing attributes in process `syz.0.454'. [ 127.978825][ T7] usb 3-1: USB disconnect, device number 4 [ 128.011843][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.020651][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.356280][ T3641] Bluetooth: hci5: command 0x1003 tx timeout [ 128.363666][ T3642] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 129.828415][ T5327] cgroup: name respecified [ 130.165923][ T5330] kvm [5328]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 130.286412][ T2988] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.616127][ T2988] usb 3-1: Using ep0 maxpacket: 8 [ 130.661008][ T5330] kvm [5328]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xf000006000 [ 130.746356][ T2988] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 130.774478][ T2988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.788498][ T2988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 130.800467][ T2988] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2306, setting to 64 [ 130.811997][ T2988] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.866909][ T2988] usb 3-1: string descriptor 0 read error: -22 [ 131.874030][ T2988] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.883691][ T2988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.998169][ T2988] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 132.005818][ T2988] cdc_ncm 3-1:1.0: bind() failure [ 132.033797][ T2988] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 132.046201][ T2988] cdc_ncm 3-1:1.1: bind() failure [ 132.393698][ T4479] usb 3-1: USB disconnect, device number 5 [ 132.598426][ T5362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.483'. [ 132.758951][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.751770][ T5401] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 135.761821][ T5401] PKCS7: Only support pkcs7_signedData type [ 136.383224][ T5405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.499'. [ 136.663288][ T5405] netlink: 'syz.2.499': attribute type 17 has an invalid length. [ 136.679033][ T5390] loop4: detected capacity change from 0 to 32768 [ 136.750490][ T5390] XFS: noikeep mount option is deprecated. [ 136.897494][ T5390] XFS (loop4): Mounting V5 Filesystem [ 137.023262][ T5390] XFS (loop4): Ending clean mount [ 137.062640][ T5390] XFS (loop4): Quotacheck needed: Please wait. [ 137.182251][ T5390] XFS (loop4): Quotacheck: Done. [ 137.770140][ T4713] XFS (loop4): Unmounting Filesystem [ 138.020406][ T5449] fuse: Bad value for 'fd' [ 140.158380][ T5505] bridge0: port 3(erspan0) entered blocking state [ 140.165815][ T5505] bridge0: port 3(erspan0) entered disabled state [ 140.196032][ T5505] device erspan0 entered promiscuous mode [ 140.206411][ T5505] bridge0: port 3(erspan0) entered blocking state [ 140.212996][ T5505] bridge0: port 3(erspan0) entered forwarding state [ 141.166211][ T5516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.494096][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 142.278987][ T5536] fuse: Unknown parameter '0x0000000000000007' [ 142.581766][ T5523] loop0: detected capacity change from 0 to 32768 [ 142.598704][ T5523] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.540 (5523) [ 142.743487][ T5549] device pim6reg1 entered promiscuous mode [ 142.766162][ T5523] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.787085][ T5523] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 142.891503][ T5523] BTRFS info (device loop0): using free space tree [ 144.511586][ T5523] BTRFS error (device loop0): open_ctree failed [ 145.615224][ T5582] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 146.321738][ T5606] device pim6reg1 entered promiscuous mode [ 146.496038][ T5582] usb 5-1: device descriptor read/64, error -71 [ 146.542067][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'. [ 146.777075][ T5623] syz.3.570 uses obsolete (PF_INET,SOCK_PACKET) [ 146.877229][ T5582] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.076370][ T5582] usb 5-1: device descriptor read/64, error -71 [ 147.814271][ T5582] usb usb5-port1: attempt power cycle [ 148.228182][ T5582] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.486082][ T5582] usb 5-1: device not accepting address 5, error -71 [ 149.229377][ T5666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.585'. [ 149.247199][ T5666] netlink: 'syz.2.585': attribute type 17 has an invalid length. [ 149.359311][ T5671] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 149.370596][ T5671] PKCS7: Only support pkcs7_signedData type [ 150.558693][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 151.006018][ T5582] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.178228][ T5683] loop1: detected capacity change from 0 to 32768 [ 151.204795][ T5683] XFS: noikeep mount option is deprecated. [ 151.246549][ T5582] usb 5-1: Using ep0 maxpacket: 8 [ 151.266231][ T5683] XFS (loop1): Mounting V5 Filesystem [ 151.349253][ T5683] XFS (loop1): Ending clean mount [ 151.361326][ T5683] XFS (loop1): Quotacheck needed: Please wait. [ 151.366324][ T5582] usb 5-1: config 129 has an invalid interface number: 225 but max is 0 [ 151.375851][ T5582] usb 5-1: config 129 has no interface number 0 [ 151.421493][ T5582] usb 5-1: config 129 interface 225 has no altsetting 0 [ 151.491191][ T5683] XFS (loop1): Quotacheck: Done. [ 151.514250][ T5712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 151.530638][ T5712] netlink: 'syz.3.599': attribute type 17 has an invalid length. [ 151.596429][ T5582] usb 5-1: New USB device found, idVendor=0707, idProduct=0200, bcdDevice=62.94 [ 151.605596][ T5582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.615078][ T4774] XFS (loop1): Unmounting Filesystem [ 151.660720][ T5582] usb 5-1: Product: syz [ 151.664936][ T5582] usb 5-1: Manufacturer: syz [ 151.671368][ T5582] usb 5-1: SerialNumber: syz [ 151.726879][ T7] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 152.977193][ T7] usb 3-1: config 1 interface 0 has no altsetting 0 [ 153.131149][ T5725] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 153.186553][ T5725] PKCS7: Only support pkcs7_signedData type [ 153.196400][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 153.205447][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.235001][ T7] usb 3-1: Product: syz [ 153.242634][ T7] usb 3-1: Manufacturer: syz [ 153.248833][ T7] usb 3-1: SerialNumber: syz [ 153.778571][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 154.116494][ T7] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 154.304916][ T5744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.610'. [ 154.315233][ T5744] netlink: 'syz.1.610': attribute type 17 has an invalid length. [ 156.056322][ T5582] pegasus 5-1:129.225: can't locate MII phy, using default [ 156.102668][ T5582] pegasus 5-1:129.225: eth1, SMC 202 USB Ethernet, 7e:57:c8:48:fc:6f [ 156.112817][ T7] usb 3-1: USB disconnect, device number 6 [ 156.120495][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 156.135898][ T5582] usb 5-1: USB disconnect, device number 7 [ 156.144363][ T7] usblp0: removed [ 156.281131][ T5777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.622'. [ 156.321857][ T5777] netlink: 'syz.3.622': attribute type 17 has an invalid length. [ 156.393320][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.879593][ T5804] process 'syz.3.631' launched './file0' with NULL argv: empty string added [ 157.986097][ T4686] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.406530][ T4686] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.415687][ T4686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.463973][ T4686] usb 5-1: config 0 descriptor?? [ 158.494556][ T5814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.638'. [ 158.507651][ T4686] cp210x 5-1:0.0: cp210x converter detected [ 158.662088][ T5824] ubi0: attaching mtd0 [ 158.666523][ T5824] ubi0 error: ubi_attach_mtd_dev: bad VID header (7) or data offsets (71) [ 159.326313][ T5814] netlink: 'syz.3.638': attribute type 17 has an invalid length. [ 159.339377][ T4686] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 159.503575][ T5832] sctp: [Deprecated]: syz.3.642 (pid 5832) Use of int in max_burst socket option. [ 159.503575][ T5832] Use struct sctp_assoc_value instead [ 160.866401][ T4686] usb 5-1: cp210x converter now attached to ttyUSB0 [ 161.027689][ T4683] usb 5-1: USB disconnect, device number 8 [ 161.046794][ T4683] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.071763][ T4683] cp210x 5-1:0.0: device disconnected [ 162.569809][ T5868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'. [ 162.608596][ T5868] netlink: 'syz.2.652': attribute type 17 has an invalid length. [ 164.198718][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.456063][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 164.627375][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.646339][ T7] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.676031][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.703094][ T7] usb 2-1: config 0 descriptor?? [ 164.999875][ T7] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 165.032864][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 165.094390][ T5904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.667'. [ 165.114645][ T5904] netlink: 'syz.4.667': attribute type 17 has an invalid length. [ 165.466055][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 165.614463][ T5582] usb 2-1: USB disconnect, device number 4 [ 165.809968][ T5582] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 166.056178][ T152] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.362328][ T152] usb 5-1: Using ep0 maxpacket: 16 [ 167.196378][ T152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.222102][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.248184][ T152] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.371111][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 167.396743][ T152] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 167.426798][ T152] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 167.434853][ T152] usb 5-1: Manufacturer: syz [ 168.137312][ T152] usb 5-1: config 0 descriptor?? [ 168.268231][ T5582] usb 5-1: USB disconnect, device number 9 [ 168.298559][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.679'. [ 168.315610][ T5944] netlink: 'syz.1.679': attribute type 17 has an invalid length. [ 171.126126][ T4486] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 171.897698][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 171.999357][ T5994] netlink: 'syz.0.694': attribute type 17 has an invalid length. [ 172.008211][ T4486] usb 2-1: Using ep0 maxpacket: 8 [ 172.136261][ T4486] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.149197][ T4486] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.198462][ T4486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.238307][ T4486] usb 2-1: config 0 descriptor?? [ 172.518926][ T4486] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 173.327476][ T6015] loop0: detected capacity change from 0 to 32768 [ 173.334748][ T6015] XFS: noikeep mount option is deprecated. [ 173.454652][ T6015] XFS (loop0): Mounting V5 Filesystem [ 173.823791][ T6015] XFS (loop0): Ending clean mount [ 174.076217][ T6015] XFS (loop0): Quotacheck needed: Please wait. [ 174.105500][ T4486] usb 2-1: USB disconnect, device number 5 [ 174.138234][ T4486] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 174.139925][ T6015] XFS (loop0): Quotacheck: Done. [ 174.450119][ T4640] XFS (loop0): Unmounting Filesystem [ 175.585246][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 175.615812][ T6063] netlink: 'syz.0.708': attribute type 17 has an invalid length. [ 175.914065][ T6053] loop1: detected capacity change from 0 to 32768 [ 175.951031][ T6053] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.710 (6053) [ 176.015171][ T6053] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.055125][ T6053] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 176.084860][ T6053] BTRFS info (device loop1): using free space tree [ 176.127548][ T6056] loop4: detected capacity change from 0 to 32768 [ 176.202101][ T6056] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 176.353640][ T4479] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 176.440363][ T6053] BTRFS info (device loop1): enabling ssd optimizations [ 176.535021][ T6053] overlayfs: missing 'lowerdir' [ 176.562008][ T6072] loop0: detected capacity change from 0 to 32768 [ 176.574160][ T6072] XFS: noikeep mount option is deprecated. [ 176.587301][ T4479] usb 3-1: device descriptor read/64, error -71 [ 176.640430][ T6072] XFS (loop0): Mounting V5 Filesystem [ 176.684146][ T4774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.705765][ T4713] ocfs2: Unmounting device (7,4) on (node local) [ 176.746619][ T6072] XFS (loop0): Ending clean mount [ 176.766654][ T6072] XFS (loop0): Quotacheck needed: Please wait. [ 176.810053][ T5931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.857146][ T4479] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 176.939066][ T6072] XFS (loop0): Quotacheck: Done. [ 177.076272][ T4479] usb 3-1: device descriptor read/64, error -71 [ 177.126550][ T4640] XFS (loop0): Unmounting Filesystem [ 177.141356][ T5931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.199792][ T4479] usb usb3-port1: attempt power cycle [ 177.302007][ T5931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.463667][ T5931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.606024][ T4479] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 177.648131][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'. [ 177.706262][ T4479] usb 3-1: device descriptor read/8, error -71 [ 177.714121][ T6123] netlink: 'syz.0.728': attribute type 17 has an invalid length. [ 177.880401][ T3641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.897714][ T3641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.907820][ T3641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.916920][ T3641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.924463][ T3641] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.932395][ T3641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.976101][ T4479] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.056626][ T6136] device pim6reg1 entered promiscuous mode [ 178.066459][ T4479] usb 3-1: device descriptor read/8, error -71 [ 178.186707][ T4479] usb usb3-port1: unable to enumerate USB device [ 178.315132][ T5931] bridge0: port 3(erspan0) entered disabled state [ 178.339491][ T5931] device erspan0 left promiscuous mode [ 178.345105][ T5931] bridge0: port 3(erspan0) entered disabled state [ 178.440909][ T6128] chnl_net:caif_netlink_parms(): no params data found [ 178.813900][ T6147] loop0: detected capacity change from 0 to 32768 [ 178.859852][ T6147] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.735 (6147) [ 178.887732][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.894957][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.910906][ T6128] device bridge_slave_0 entered promiscuous mode [ 178.964300][ T6147] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.992039][ T6147] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 179.009358][ T6147] BTRFS info (device loop0): using free space tree [ 179.101216][ T6166] netlink: 36 bytes leftover after parsing attributes in process `syz.3.739'. [ 179.117236][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.124349][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.148694][ T6128] device bridge_slave_1 entered promiscuous mode [ 179.274802][ T5931] device hsr_slave_0 left promiscuous mode [ 179.281278][ T6147] BTRFS info (device loop0): enabling ssd optimizations [ 179.297766][ T5931] device hsr_slave_1 left promiscuous mode [ 179.363324][ T6147] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 179.378791][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.385386][ T6188] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 179.405145][ T6188] PKCS7: Only support pkcs7_signedData type [ 179.428338][ T6147] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 179.509019][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.550178][ T4640] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.630025][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.725884][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.944949][ T5931] device bridge_slave_1 left promiscuous mode [ 179.958743][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.981369][ T5931] device bridge_slave_0 left promiscuous mode [ 179.998377][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.046182][ T47] Bluetooth: hci2: command tx timeout [ 180.055121][ T5931] device veth1_macvtap left promiscuous mode [ 180.069623][ T5931] device veth0_macvtap left promiscuous mode [ 180.085331][ T5931] device veth1_vlan left promiscuous mode [ 180.108630][ T5931] device veth0_vlan left promiscuous mode [ 180.597740][ T5931] team0 (unregistering): Port device team_slave_1 removed [ 180.638231][ T5931] team0 (unregistering): Port device team_slave_0 removed [ 180.672395][ T5931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.711163][ T5931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.921295][ T47] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.927475][ T3641] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.096899][ T5931] bond0 (unregistering): Released all slaves [ 181.185437][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.742'. [ 181.201453][ T6200] netlink: 'syz.0.742': attribute type 17 has an invalid length. [ 181.242129][ T6128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.298632][ T6128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.441510][ T6128] team0: Port device team_slave_0 added [ 181.505324][ T6128] team0: Port device team_slave_1 added [ 181.524727][ T6216] netlink: 'syz.0.745': attribute type 39 has an invalid length. [ 181.722735][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.752967][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.811984][ T6128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.831617][ T6220] device pim6reg1 entered promiscuous mode [ 181.857487][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.874407][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.964432][ T6128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.116301][ T47] Bluetooth: hci2: command tx timeout [ 182.124937][ T6128] device hsr_slave_0 entered promiscuous mode [ 182.178608][ T6128] device hsr_slave_1 entered promiscuous mode [ 182.220325][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 182.501856][ T6251] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 182.537676][ T6251] PKCS7: Only support pkcs7_signedData type [ 182.572438][ T6253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.754'. [ 182.582270][ T6253] netlink: 'syz.1.754': attribute type 17 has an invalid length. [ 182.621970][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.650151][ T22] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.692062][ T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.704746][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.719380][ T22] usb 4-1: config 0 descriptor?? [ 182.887815][ T6243] loop0: detected capacity change from 0 to 32768 [ 182.918369][ T3652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (3652) [ 182.936276][ T6243] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.956092][ T6243] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 183.073229][ T6243] BTRFS info (device loop0): using free space tree [ 183.596133][ T6243] BTRFS info (device loop0): enabling ssd optimizations [ 183.668067][ T6243] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 183.732055][ T6243] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 183.865620][ T6128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.885738][ T6301] netlink: 'syz.1.760': attribute type 39 has an invalid length. [ 183.927369][ T4640] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.945040][ T6128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.957274][ T6128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.970262][ T6128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.206438][ T47] Bluetooth: hci2: command tx timeout [ 184.300700][ T6128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.350864][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.365064][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.393412][ T6128] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.416175][ T6312] device pim6reg1 entered promiscuous mode [ 184.435354][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.467386][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.486782][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.493942][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.618294][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.631707][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.641919][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.652555][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.659736][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.726416][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.776579][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.830620][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.029681][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.241142][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.276558][ T22] usb 4-1: USB disconnect, device number 5 [ 185.284827][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'. [ 185.307869][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.344689][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.364040][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.378224][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.392511][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.449832][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.475232][ T6128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.276092][ T47] Bluetooth: hci2: command tx timeout [ 186.366974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.376244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.448007][ T6128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.519399][ T6365] device pim6reg1 entered promiscuous mode [ 186.927007][ T6342] loop3: detected capacity change from 0 to 32768 [ 186.975719][ T6342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.771 (6342) [ 187.796202][ T3718] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 187.828757][ T6342] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.859568][ T6342] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 187.912882][ T6342] BTRFS info (device loop3): using free space tree [ 188.008606][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 188.151188][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.156177][ T3718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.187241][ T3718] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.191004][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.210464][ T3718] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.352607][ T3718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.363089][ T6342] BTRFS info (device loop3): enabling ssd optimizations [ 188.483372][ T3718] usb 1-1: config 0 descriptor?? [ 188.602761][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.641209][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.747055][ T3647] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.796167][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.845370][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.867968][ T6128] device veth0_vlan entered promiscuous mode [ 188.892952][ T6128] device veth1_vlan entered promiscuous mode [ 189.006129][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.020659][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.029934][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.067725][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.094026][ T6128] device veth0_macvtap entered promiscuous mode [ 189.111678][ T6128] device veth1_macvtap entered promiscuous mode [ 189.147445][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.191794][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.221234][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.245007][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.292796][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.306276][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.322156][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.331027][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.343463][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.363674][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.384858][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.399502][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.412854][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.425178][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.439498][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.451443][ T6128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.465397][ T6128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.481478][ T6128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.489698][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.502566][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.555491][ T6128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.581785][ T6128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.600182][ T6128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.624368][ T6128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.862377][ T6461] device pim6reg1 entered promiscuous mode [ 189.949786][ T6464] device syzkaller0 entered promiscuous mode [ 189.970806][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.984400][ T6464] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 189.998077][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.065656][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.091498][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.121831][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.151740][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.501101][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 191.011171][ T4488] usb 1-1: USB disconnect, device number 6 [ 192.337736][ T6510] device syzkaller0 entered promiscuous mode [ 192.382920][ T6512] device pim6reg1 entered promiscuous mode [ 192.589483][ T6519] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.805'. [ 192.705566][ T6485] loop1: detected capacity change from 0 to 32768 [ 192.724374][ T6485] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.796 (6485) [ 192.785298][ T6485] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.842937][ T6485] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 192.882129][ T6485] BTRFS info (device loop1): using free space tree [ 193.170712][ T6485] BTRFS info (device loop1): enabling ssd optimizations [ 193.480819][ T4774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.943350][ T6577] device syzkaller0 entered promiscuous mode [ 194.219190][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.074582][ T6590] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.819'. [ 195.091947][ T6586] device pim6reg1 entered promiscuous mode [ 195.604558][ T6566] loop2: detected capacity change from 0 to 32768 [ 195.671184][ T6566] XFS: noikeep mount option is deprecated. [ 195.946201][ T6566] XFS (loop2): Mounting V5 Filesystem [ 196.156067][ T6566] XFS (loop2): Ending clean mount [ 196.170824][ T6566] XFS (loop2): Quotacheck needed: Please wait. [ 196.230566][ T6566] XFS (loop2): Quotacheck: Done. [ 196.532824][ T6629] fuse: Bad value for 'fd' [ 196.743325][ T3636] XFS (loop2): Unmounting Filesystem [ 197.160602][ T6614] loop1: detected capacity change from 0 to 32768 [ 197.214681][ T3652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (3652) [ 197.395221][ T6614] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.439058][ T6614] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 197.475683][ T6645] device syzkaller0 entered promiscuous mode [ 197.497236][ T6614] BTRFS info (device loop1): using free space tree [ 198.092864][ T6614] BTRFS info (device loop1): enabling ssd optimizations [ 198.180347][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 198.189946][ T6614] overlayfs: missing 'lowerdir' [ 198.434039][ T4774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.656090][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.684975][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 198.752865][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.830498][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.885891][ T14] usb 3-1: config 0 descriptor?? [ 198.932590][ T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 199.064504][ T6676] loop4: detected capacity change from 0 to 32768 [ 199.115525][ T6676] XFS: noikeep mount option is deprecated. [ 199.359889][ T6676] XFS (loop4): Mounting V5 Filesystem [ 199.808469][ T6676] XFS (loop4): Ending clean mount [ 199.835527][ T6676] XFS (loop4): Quotacheck needed: Please wait. [ 199.908808][ T6676] XFS (loop4): Quotacheck: Done. [ 200.017793][ T6128] XFS (loop4): Unmounting Filesystem [ 200.982780][ T3683] usb 3-1: USB disconnect, device number 11 [ 202.119128][ T6732] loop4: detected capacity change from 0 to 32768 [ 202.151798][ T6732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.851 (6732) [ 202.204991][ T6732] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.257261][ T6732] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 202.301551][ T6732] BTRFS info (device loop4): using free space tree [ 202.303633][ T6743] loop2: detected capacity change from 0 to 32768 [ 202.327496][ T6739] loop3: detected capacity change from 0 to 32768 [ 202.365143][ T6739] XFS: noikeep mount option is deprecated. [ 202.375284][ T6743] XFS: noikeep mount option is deprecated. [ 202.472871][ T6739] XFS (loop3): Mounting V5 Filesystem [ 202.493847][ T6743] XFS (loop2): Mounting V5 Filesystem [ 202.565471][ T6732] BTRFS info (device loop4): enabling ssd optimizations [ 202.582953][ T6739] XFS (loop3): Ending clean mount [ 202.615668][ T6743] XFS (loop2): Ending clean mount [ 202.633874][ T6739] XFS (loop3): Quotacheck needed: Please wait. [ 202.652703][ T6743] XFS (loop2): Quotacheck needed: Please wait. [ 202.675672][ T6732] overlayfs: missing 'lowerdir' [ 202.712401][ T6739] XFS (loop3): Quotacheck: Done. [ 203.097361][ T6743] XFS (loop2): Quotacheck: Done. [ 203.177233][ T3647] XFS (loop3): Unmounting Filesystem [ 203.195029][ T3636] XFS (loop2): Unmounting Filesystem [ 203.289182][ T6128] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.479620][ T5576] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.875636][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'. [ 204.025573][ T5576] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.048419][ T5576] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 204.172606][ T5576] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.265666][ T5576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.790608][ T5576] usb 2-1: config 0 descriptor?? [ 204.858242][ T5576] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 204.932459][ T6825] device syzkaller0 entered promiscuous mode [ 205.699780][ T6829] loop3: detected capacity change from 0 to 32768 [ 205.725673][ T6829] XFS: noikeep mount option is deprecated. [ 205.805835][ T6833] loop2: detected capacity change from 0 to 32768 [ 205.820222][ T6829] XFS (loop3): Mounting V5 Filesystem [ 205.827617][ T6833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.875 (6833) [ 205.872137][ T6833] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.935693][ T6833] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 205.955520][ T6829] XFS (loop3): Ending clean mount [ 205.964303][ T6829] XFS (loop3): Quotacheck needed: Please wait. [ 205.980930][ T6833] BTRFS info (device loop2): using free space tree [ 206.047090][ T6829] XFS (loop3): Quotacheck: Done. [ 206.178109][ T6833] BTRFS info (device loop2): enabling ssd optimizations [ 206.199948][ T3647] XFS (loop3): Unmounting Filesystem [ 206.257534][ T6833] overlayfs: missing 'workdir' [ 206.401315][ T3636] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.918429][ T34] usb 2-1: USB disconnect, device number 6 [ 207.802412][ T6902] device syzkaller0 entered promiscuous mode [ 208.508868][ T6910] loop1: detected capacity change from 0 to 32768 [ 208.536116][ T6910] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.890 (6910) [ 208.570733][ T6910] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.591530][ T6910] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 208.611553][ T6910] BTRFS info (device loop1): using free space tree [ 208.853960][ T6910] BTRFS info (device loop1): enabling ssd optimizations [ 208.952544][ T6941] overlayfs: missing 'workdir' [ 209.106306][ T4774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.306347][ T4478] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 209.745285][ T4478] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.780231][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 210.667031][ T4478] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 210.696305][ T4478] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.715669][ T4478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.769789][ T4478] usb 4-1: config 0 descriptor?? [ 210.829085][ T4478] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 211.264578][ T6977] loop4: detected capacity change from 0 to 32768 [ 211.300261][ T6977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.906 (6977) [ 211.341656][ T6977] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.371430][ T6977] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 211.396510][ T6977] BTRFS info (device loop4): using free space tree [ 211.562277][ T6977] BTRFS info (device loop4): enabling ssd optimizations [ 211.604616][ T6977] overlayfs: missing 'workdir' [ 211.739050][ T6128] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.786172][ T6993] loop2: detected capacity change from 0 to 32768 [ 211.803584][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 211.831941][ T6993] XFS: noikeep mount option is deprecated. [ 211.977472][ T6993] XFS (loop2): Mounting V5 Filesystem [ 213.403641][ T4483] usb 4-1: USB disconnect, device number 6 [ 213.471984][ T6993] XFS (loop2): Ending clean mount [ 213.563688][ T6993] XFS (loop2): Quotacheck needed: Please wait. [ 213.773022][ T6993] XFS (loop2): Quotacheck: Done. [ 214.156077][ T3636] XFS (loop2): Unmounting Filesystem [ 214.788874][ T7056] loop1: detected capacity change from 0 to 32768 [ 214.800471][ T7056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.926 (7056) [ 214.919838][ T7056] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.932493][ T7056] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 214.944381][ T7056] BTRFS info (device loop1): using free space tree [ 215.966404][ T5582] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 215.975516][ T7091] device syzkaller0 entered promiscuous mode [ 215.992485][ T7056] BTRFS info (device loop1): enabling ssd optimizations [ 216.075017][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.933'. [ 216.332853][ T4774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.366409][ T5582] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.382836][ T5582] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 216.404972][ T5582] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.414571][ T5582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.430883][ T5582] usb 4-1: config 0 descriptor?? [ 216.490260][ T5582] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 217.404707][ T7109] loop1: detected capacity change from 0 to 32768 [ 217.427399][ T7109] XFS: noikeep mount option is deprecated. [ 217.496286][ T7109] XFS (loop1): Mounting V5 Filesystem [ 217.585129][ T7109] XFS (loop1): Ending clean mount [ 217.593354][ T7109] XFS (loop1): Quotacheck needed: Please wait. [ 217.623274][ T7109] XFS (loop1): Quotacheck: Done. [ 217.752961][ T4774] XFS (loop1): Unmounting Filesystem [ 220.429332][ T4483] usb 4-1: USB disconnect, device number 7 [ 222.643196][ T7160] loop1: detected capacity change from 0 to 32768 [ 222.663887][ T7160] XFS: noikeep mount option is deprecated. [ 222.703112][ T7160] XFS (loop1): Mounting V5 Filesystem [ 222.833944][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 222.849071][ T7160] XFS (loop1): Ending clean mount [ 222.868936][ T7160] XFS (loop1): Quotacheck needed: Please wait. [ 223.031048][ T7160] XFS (loop1): Quotacheck: Done. [ 223.155775][ T4774] XFS (loop1): Unmounting Filesystem [ 226.619264][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 226.706090][ T3717] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 226.838690][ T7240] device pim6reg1 entered promiscuous mode [ 227.136118][ T3717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.147304][ T3717] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 228.208483][ T3642] Bluetooth: hci4: command 0x0419 tx timeout [ 228.217128][ T3717] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.236088][ T3717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.259533][ T3717] usb 2-1: config 0 descriptor?? [ 228.336212][ T3717] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 228.632138][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 229.433691][ T7284] device pim6reg1 entered promiscuous mode [ 229.495583][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 230.409687][ T4484] usb 2-1: USB disconnect, device number 7 [ 230.868845][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 231.004903][ T7332] device pim6reg1 entered promiscuous mode [ 231.500980][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1010'. [ 231.548228][ T7349] netlink: 'syz.2.1010': attribute type 17 has an invalid length. [ 232.529107][ T7365] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1013'. [ 234.620061][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1022'. [ 234.648584][ T7389] netlink: 'syz.0.1022': attribute type 17 has an invalid length. [ 234.952844][ T7401] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1027'. [ 238.063614][ T7458] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1046'. [ 238.259604][ T7463] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1048'. [ 238.405588][ T7441] loop2: detected capacity change from 0 to 32768 [ 238.468202][ T7441] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1041 (7441) [ 238.566009][ T7441] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.613956][ T7441] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 238.676945][ T7441] BTRFS info (device loop2): using free space tree [ 238.742665][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 239.209855][ T7441] BTRFS info (device loop2): enabling ssd optimizations [ 239.485511][ T7500] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1057'. [ 239.583667][ T7502] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1059'. [ 239.619783][ T3636] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.024730][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 243.207624][ T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 243.485062][ T14] usb 3-1: device descriptor read/64, error -71 [ 243.567689][ T7530] loop0: detected capacity change from 0 to 32768 [ 243.599844][ T7530] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1067 (7530) [ 243.664541][ T7530] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.707044][ T7530] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 243.736043][ T7530] BTRFS info (device loop0): using free space tree [ 243.781406][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 243.986182][ T14] usb 3-1: device descriptor read/64, error -71 [ 244.062114][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 244.109760][ T14] usb usb3-port1: attempt power cycle [ 244.939143][ T7530] BTRFS error (device loop0): open_ctree failed [ 244.953299][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1083'. [ 244.999796][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1083'. [ 245.011679][ T7588] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1082'. [ 247.378012][ T7621] netlink: 'syz.1.1093': attribute type 4 has an invalid length. [ 247.527502][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1093'. [ 247.556876][ T7621] netlink: 'syz.1.1093': attribute type 17 has an invalid length. [ 247.886020][ T5575] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 248.096127][ T5575] usb 4-1: device descriptor read/64, error -71 [ 248.124824][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1102'. [ 248.142583][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 248.273435][ T7629] loop4: detected capacity change from 0 to 32768 [ 248.314277][ T7629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1096 (7629) [ 248.476293][ T5575] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 248.696164][ T5575] usb 4-1: device descriptor read/64, error -71 [ 248.826557][ T5575] usb usb4-port1: attempt power cycle [ 249.146958][ T7629] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.171141][ T7649] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1103'. [ 249.171166][ T7629] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 249.223165][ T7651] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1104'. [ 249.235113][ T7629] BTRFS info (device loop4): using free space tree [ 249.355333][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 249.499098][ T7629] BTRFS info (device loop4): enabling ssd optimizations [ 249.557556][ T5575] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 249.656274][ T5575] usb 4-1: device descriptor read/8, error -71 [ 249.709282][ T6128] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.773798][ T7684] device pim6reg1 entered promiscuous mode [ 249.936183][ T5575] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 250.026736][ T5575] usb 4-1: device descriptor read/8, error -71 [ 250.057121][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1113'. [ 250.087423][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'. [ 250.146450][ T5575] usb usb4-port1: unable to enumerate USB device [ 251.467012][ T7703] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1116'. [ 254.404614][ T7725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1125'. [ 255.569453][ T7714] loop3: detected capacity change from 0 to 32768 [ 255.582034][ T7714] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1120 (7714) [ 255.646411][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.932128][ T7714] BTRFS error (device loop3): open_ctree failed [ 256.226477][ T7751] device syzkaller0 entered promiscuous mode [ 256.371553][ T7753] device pim6reg1 entered promiscuous mode [ 256.829863][ T7765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1138'. [ 258.564955][ T7772] loop1: detected capacity change from 0 to 32768 [ 258.572680][ T7772] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1141 (7772) [ 258.612549][ T7772] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.643707][ T7772] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 258.754967][ T7772] BTRFS info (device loop1): using free space tree [ 258.985373][ T7796] device syzkaller0 entered promiscuous mode [ 259.105079][ T7772] BTRFS info (device loop1): enabling ssd optimizations [ 259.209076][ T7817] device pim6reg1 entered promiscuous mode [ 259.483219][ T4774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.540361][ T7851] device syzkaller0 entered promiscuous mode [ 262.189996][ T7855] loop1: detected capacity change from 0 to 32768 [ 262.227629][ T7855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1161 (7855) [ 262.253827][ T7855] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 262.316042][ T7855] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 262.335811][ T7855] BTRFS info (device loop1): using free space tree [ 262.351511][ T7863] device pim6reg1 entered promiscuous mode [ 263.106241][ T7855] BTRFS info (device loop1): enabling ssd optimizations [ 264.085000][ T4774] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.923683][ T7922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.013087][ T7924] device pim6reg1 entered promiscuous mode [ 266.911416][ T7956] device pim6reg1 entered promiscuous mode [ 266.947798][ T7939] loop4: detected capacity change from 0 to 32768 [ 266.970786][ T7939] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1182 (7939) [ 267.035345][ T7939] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.060626][ T7939] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 267.083124][ T7939] BTRFS info (device loop4): using free space tree [ 267.251328][ T7939] BTRFS info (device loop4): enabling ssd optimizations [ 267.729059][ T6128] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 267.835128][ T7990] netlink: 'syz.0.1197': attribute type 4 has an invalid length. [ 267.964448][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1197'. [ 268.024489][ T7991] netlink: 'syz.0.1197': attribute type 17 has an invalid length. [ 268.988656][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 269.011179][ T8008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.619519][ T8014] loop0: detected capacity change from 0 to 32768 [ 270.780912][ T8014] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1205 (8014) [ 270.825995][ T8014] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.870807][ T8014] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 270.891078][ T8014] BTRFS info (device loop0): using free space tree [ 271.057773][ T8043] netlink: 'syz.2.1214': attribute type 4 has an invalid length. [ 271.766637][ T8043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1214'. [ 271.866730][ T8043] netlink: 'syz.2.1214': attribute type 17 has an invalid length. [ 271.888065][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 271.940059][ T8014] BTRFS info (device loop0): enabling ssd optimizations [ 274.555194][ T4640] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.682183][ T8088] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1222'. [ 274.935982][ T4486] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 275.099820][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 275.900044][ T4486] usb 2-1: Using ep0 maxpacket: 32 [ 276.016346][ T4486] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 276.036019][ T4486] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 276.055523][ T4486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.258664][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 278.288547][ T8102] loop3: detected capacity change from 0 to 32768 [ 278.358806][ T8102] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1228 (8102) [ 278.393581][ T4486] usb 2-1: USB disconnect, device number 8 [ 278.456351][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.530499][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.577348][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.886655][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.085120][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.126713][ T7] usb 3-1: config 0 descriptor?? [ 279.176296][ T7] usb 3-1: can't set config #0, error -71 [ 279.205338][ T7] usb 3-1: USB disconnect, device number 15 [ 279.297275][ T8131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1236'. [ 279.504934][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 279.677283][ T8140] netlink: 'syz.2.1240': attribute type 4 has an invalid length. [ 279.749907][ T8140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 279.782419][ T8140] netlink: 'syz.2.1240': attribute type 17 has an invalid length. [ 280.053417][ T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 281.091838][ T5575] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 281.136145][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 281.256222][ T7] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 281.289096][ T7] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 281.355165][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.394446][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 281.586516][ T5575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.603259][ T5575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.615375][ T5575] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.617422][ T8175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1252'. [ 281.633783][ T5575] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.656367][ T5575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.008128][ T5575] usb 1-1: config 0 descriptor?? [ 282.294255][ T8185] netlink: 'syz.4.1255': attribute type 4 has an invalid length. [ 282.327356][ T8185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1255'. [ 282.338683][ T8185] netlink: 'syz.4.1255': attribute type 17 has an invalid length. [ 282.357173][ T8185] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 282.561294][ T5575] usbhid 1-1:0.0: can't add hid device: -71 [ 282.567717][ T5575] usbhid: probe of 1-1:0.0 failed with error -71 [ 282.593784][ T5575] usb 1-1: USB disconnect, device number 7 [ 283.846850][ T7] usb 4-1: USB disconnect, device number 12 [ 284.039501][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1262'. [ 284.137340][ T8209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1263'. [ 284.366173][ T8219] netlink: 'syz.4.1268': attribute type 4 has an invalid length. [ 284.415548][ T8219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1268'. [ 284.431345][ T8219] netlink: 'syz.4.1268': attribute type 17 has an invalid length. [ 285.986274][ T4684] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 286.256135][ T4684] usb 1-1: Using ep0 maxpacket: 32 [ 286.437556][ T4684] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 286.868047][ T4684] usb 1-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 287.188305][ T4684] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 287.270389][ T4684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.449157][ T4684] usbhid 1-1:7.0: couldn't find an input interrupt endpoint [ 287.472521][ T8250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1277'. [ 289.004614][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 289.630612][ T4491] usb 1-1: USB disconnect, device number 8 [ 290.794636][ T8323] device pim6reg1 entered promiscuous mode [ 290.858935][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 291.889995][ T5575] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 293.076095][ T5575] usb 3-1: Using ep0 maxpacket: 32 [ 293.141566][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 293.211859][ T5575] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 293.242496][ T5575] usb 3-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 293.282304][ T5575] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 293.305922][ T5575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.367161][ T4486] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 293.367894][ T5575] usbhid 3-1:7.0: couldn't find an input interrupt endpoint [ 293.845967][ T5575] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 294.005986][ T4486] usb 4-1: Using ep0 maxpacket: 8 [ 294.096141][ T5575] usb 2-1: Using ep0 maxpacket: 32 [ 294.126055][ T4486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.146063][ T4486] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 294.175473][ T4486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.204788][ T4486] usb 4-1: config 0 descriptor?? [ 294.244132][ T5575] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 294.256395][ T5575] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 294.372223][ T5575] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.473180][ T4486] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 294.557155][ T5575] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 294.572180][ T5575] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 294.588079][ T5575] usb 2-1: Product: syz [ 294.592388][ T5575] usb 2-1: Manufacturer: syz [ 294.599451][ T5575] usb 2-1: SerialNumber: syz [ 294.647121][ T8367] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 294.789214][ T5575] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 294.954549][ T4486] usb 2-1: USB disconnect, device number 9 [ 294.986775][ T7] usb 4-1: USB disconnect, device number 13 [ 295.007859][ T7] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 295.024763][ T4486] appletouch 2-1:1.0: input: appletouch disconnected [ 295.579494][ T3682] usb 3-1: USB disconnect, device number 16 [ 295.853929][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 297.847138][ T8423] device geneve2 entered promiscuous mode [ 297.913579][ T8427] sctp: [Deprecated]: syz.0.1338 (pid 8427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.913579][ T8427] Use struct sctp_sack_info instead [ 298.217280][ T8435] netlink: 812 bytes leftover after parsing attributes in process `syz.1.1342'. [ 298.273937][ T3682] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 298.491511][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 298.558678][ T3682] usb 5-1: Using ep0 maxpacket: 32 [ 298.692272][ T3682] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 298.725010][ T3682] usb 5-1: config 7 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 298.750360][ T3682] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 298.761133][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.960260][ T3682] usbhid 5-1:7.0: couldn't find an input interrupt endpoint [ 299.132781][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 299.970639][ T8480] device pim6reg1 entered promiscuous mode [ 301.335085][ T4491] usb 5-1: USB disconnect, device number 10 [ 301.553577][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 303.879070][ T3642] Bluetooth: hci2: command 0x0406 tx timeout [ 304.194548][ T8524] device pim6reg1 entered promiscuous mode [ 304.640628][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1374'. [ 304.671187][ T8528] netlink: 'syz.3.1374': attribute type 17 has an invalid length. [ 304.811528][ T8540] tipc: Started in network mode [ 304.843075][ T8540] tipc: Node identity 1, cluster identity 4711 [ 304.968100][ T8540] tipc: Node number set to 1 [ 305.768516][ T8548] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1379'. [ 305.986151][ T3682] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 306.021769][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 306.225645][ T3682] usb 4-1: device descriptor read/64, error -71 [ 306.344417][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'. [ 306.498757][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 306.776321][ T7] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 307.005040][ T7] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.018218][ T7] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.028450][ T7] usb 2-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 307.041358][ T7] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 307.050891][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.116204][ T3682] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 307.382085][ T3682] usb 4-1: device descriptor read/64, error -71 [ 307.685550][ T7] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 307.712108][ T7] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 307.737998][ T7] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 307.763276][ T7] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 307.788082][ T7] ntrig 0003:1B96:000A.0002: unknown main item tag 0x0 [ 307.910515][ T7] ntrig 0003:1B96:000A.0002: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 309.044369][ T3682] usb usb4-port1: attempt power cycle [ 309.069875][ T7] usb 2-1: USB disconnect, device number 10 [ 309.140440][ T8579] device pim6reg1 entered promiscuous mode [ 310.997908][ T8590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1391'. [ 311.252180][ T8605] netlink: 'syz.1.1397': attribute type 10 has an invalid length. [ 311.282464][ T8605] device syz_tun entered promiscuous mode [ 311.314024][ T8605] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 312.393028][ T8621] netlink: 'syz.3.1401': attribute type 4 has an invalid length. [ 312.430754][ T8624] device pim6reg1 entered promiscuous mode [ 313.605124][ T8635] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1407'. [ 313.736096][ T4684] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 313.874887][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 313.996033][ T4684] usb 4-1: Using ep0 maxpacket: 32 [ 314.193974][ T8640] device hsr_slave_1 left promiscuous mode [ 314.285966][ T4684] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 314.296677][ T4684] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.307619][ T4684] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.317409][ T4684] usb 4-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 314.379970][ T4684] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 314.586358][ T4684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.038046][ T4684] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 316.044974][ T4684] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 316.095517][ T4684] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 316.102518][ T4684] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 316.109451][ T4684] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 316.124054][ T4684] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 316.799112][ T8663] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 316.808996][ T8663] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 316.856944][ T4684] usb 4-1: USB disconnect, device number 17 [ 317.106449][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.617027][ T8675] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1421'. [ 319.166081][ T4684] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 319.426141][ T4684] usb 2-1: Using ep0 maxpacket: 8 [ 319.571356][ T4684] usb 2-1: config 0 has no interfaces? [ 319.578074][ T4684] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 319.616039][ T4684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.663073][ T4684] usb 2-1: config 0 descriptor?? [ 319.936410][ T4684] usb 2-1: USB disconnect, device number 11 [ 320.794460][ T8715] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1435'. [ 321.017152][ T8722] netlink: 'syz.2.1438': attribute type 4 has an invalid length. [ 321.056079][ T8722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1438'. [ 321.069530][ T8722] netlink: 'syz.2.1438': attribute type 17 has an invalid length. [ 321.369603][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'. [ 321.479539][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 322.526198][ T4486] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 322.786390][ T4486] usb 3-1: Using ep0 maxpacket: 8 [ 322.935034][ T4486] usb 3-1: config 0 has no interfaces? [ 322.944618][ T4486] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.960125][ T4486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.995443][ T4486] usb 3-1: config 0 descriptor?? [ 323.373285][ T4481] usb 3-1: USB disconnect, device number 17 [ 323.496224][ T8758] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 323.533136][ T8758] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 323.549980][ T8758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.559225][ T8758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.652244][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 324.157352][ T8764] netlink: 'syz.0.1453': attribute type 4 has an invalid length. [ 324.204201][ T8764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1453'. [ 324.220288][ T8764] netlink: 'syz.0.1453': attribute type 17 has an invalid length. [ 325.429518][ T8781] device pim6reg1 entered promiscuous mode [ 325.513028][ T8783] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1461'. [ 328.554348][ T8818] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1473'. [ 328.790341][ T4481] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 328.818426][ T3644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.827815][ T3644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.842606][ T3644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.857531][ T3644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.885800][ T3644] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 328.894883][ T3644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 329.842722][ T4481] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=51.8f [ 329.852199][ T4481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.860306][ T4481] usb 1-1: Product: syz [ 329.864484][ T4481] usb 1-1: Manufacturer: syz [ 329.889188][ T4481] usb 1-1: SerialNumber: syz [ 329.912502][ T4481] usb 1-1: config 0 descriptor?? [ 329.975494][ T4481] as10x_usb: device has been detected [ 329.986422][ T4481] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 330.047596][ T4481] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 330.171088][ T4481] as10x_usb: error during firmware upload part1 [ 330.171609][ T3703] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.188746][ T4481] Registered device Elgato EyeTV DTT Deluxe [ 330.199159][ T4481] usb 1-1: USB disconnect, device number 9 [ 330.258237][ T4481] Unregistered device Elgato EyeTV DTT Deluxe [ 330.259599][ T4481] as10x_usb: device has been disconnected [ 330.385508][ T3703] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.518061][ T3703] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.633370][ T3703] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.657111][ T8822] chnl_net:caif_netlink_parms(): no params data found [ 330.819079][ T8862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1484'. [ 330.895162][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.912092][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.919691][ T3644] Bluetooth: hci5: command tx timeout [ 330.935349][ T8822] device bridge_slave_0 entered promiscuous mode [ 331.056572][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.078425][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.120496][ T8822] device bridge_slave_1 entered promiscuous mode [ 331.333831][ T8822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.477429][ T8822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.539188][ T8822] team0: Port device team_slave_0 added [ 331.558075][ T8822] team0: Port device team_slave_1 added [ 331.721173][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.728843][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.980541][ T8822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.201982][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 332.327697][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.346239][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.395651][ T8822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.471645][ T8822] device hsr_slave_0 entered promiscuous mode [ 332.498344][ T8822] device hsr_slave_1 entered promiscuous mode [ 332.555990][ T8822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.563938][ T8822] Cannot create hsr debugfs directory [ 332.997256][ T3644] Bluetooth: hci5: command tx timeout [ 334.925043][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 335.076134][ T47] Bluetooth: hci5: command tx timeout [ 336.767105][ T8966] tipc: Started in network mode [ 336.789588][ T8966] tipc: Node identity ac1414aa, cluster identity 4711 [ 336.833858][ T8966] tipc: Enabled bearer , priority 10 [ 336.860792][ T8968] tipc: Disabling bearer [ 337.159258][ T47] Bluetooth: hci5: command tx timeout [ 337.244008][ T8822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.316524][ T8822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.346086][ T8822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.397962][ T3703] device hsr_slave_0 left promiscuous mode [ 337.418130][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 337.439476][ T3703] device hsr_slave_1 left promiscuous mode [ 337.458198][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.465658][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.497892][ T3703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.508973][ T3703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.738119][ T3703] device bridge_slave_1 left promiscuous mode [ 337.746011][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.779143][ T3703] device bridge_slave_0 left promiscuous mode [ 338.039534][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.342141][ T3703] device veth1_macvtap left promiscuous mode [ 338.428730][ T3703] device veth0_macvtap left promiscuous mode [ 338.487860][ T3703] device veth1_vlan left promiscuous mode [ 338.569407][ T3703] device veth0_vlan left promiscuous mode [ 339.562640][ T3703] team0 (unregistering): Port device team_slave_1 removed [ 339.617275][ T3703] team0 (unregistering): Port device team_slave_0 removed [ 339.668671][ T3703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.729249][ T3703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.349159][ T3703] bond0 (unregistering): Released all slaves [ 340.432204][ T8822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.774033][ T8822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.789995][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.965610][ T9020] kvm: emulating exchange as write [ 340.996433][ T4481] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 341.057042][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.202914][ T8822] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.249660][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.283385][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.318522][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.326032][ T5583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.330131][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'. [ 341.340447][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.369823][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.389897][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.411385][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.418559][ T5583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.446221][ T4481] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.462074][ T4481] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 341.474246][ T4481] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 341.484108][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.499403][ T4481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.507397][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.513231][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.522656][ T4481] usb 4-1: config 0 descriptor?? [ 341.542513][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.574941][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 341.587822][ T4481] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 341.594611][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.603361][ T4481] dvb-usb: bulk message failed: -22 (3/0) [ 341.643118][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.661717][ T4481] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 341.693103][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.696261][ T4481] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 341.722662][ T4481] usb 4-1: media controller created [ 341.725141][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.729529][ T4481] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.744058][ T8822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.744755][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.777681][ T9038] netlink: 'syz.2.1535': attribute type 4 has an invalid length. [ 341.793660][ T9023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.808206][ T4481] dvb-usb: bulk message failed: -22 (6/0) [ 341.814253][ T4481] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 341.830695][ T9023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.838757][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.848007][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.857385][ T4481] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 341.875275][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 341.907553][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1535'. [ 341.924605][ T9038] netlink: 'syz.2.1535': attribute type 17 has an invalid length. [ 341.933295][ T4481] dvb-usb: schedule remote query interval to 150 msecs. [ 341.946162][ T4481] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 341.981223][ T4481] usb 4-1: USB disconnect, device number 18 [ 342.092754][ T4481] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 342.272187][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'. [ 343.103652][ T9056] device pim6reg1 entered promiscuous mode [ 343.255672][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.266067][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.279987][ T8822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.523225][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 344.267605][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 344.322748][ T4481] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 344.657053][ T4481] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 344.685988][ T3682] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 344.758269][ T4481] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 344.889301][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 344.907644][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 344.929613][ T4481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 344.946113][ T3682] usb 2-1: Using ep0 maxpacket: 8 [ 345.015058][ T9102] device pim6reg1 entered promiscuous mode [ 345.021195][ T4481] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.034980][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 345.038038][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.075990][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 345.076681][ T3682] usb 2-1: config 0 has no interfaces? [ 345.092490][ T3682] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 345.096300][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.109854][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.119152][ T3682] usb 2-1: config 0 descriptor?? [ 345.130741][ T4481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.222728][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.231467][ T4481] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.231830][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.251520][ T8822] device veth0_vlan entered promiscuous mode [ 345.257790][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 345.264303][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.292651][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.318929][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 345.319268][ T8822] device veth1_vlan entered promiscuous mode [ 345.366949][ T4481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.375366][ T7111] usb 2-1: USB disconnect, device number 12 [ 345.392678][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 345.401958][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 345.425090][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.436857][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.447997][ T8822] device veth0_macvtap entered promiscuous mode [ 345.476119][ T4481] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.476779][ T8822] device veth1_macvtap entered promiscuous mode [ 345.490029][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 345.517085][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 345.518660][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.529147][ T4481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.544240][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 345.553148][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.561285][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.571717][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.584736][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.596459][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.607239][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.616112][ T4481] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.618037][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.636971][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 345.653933][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.655993][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 345.667110][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.677983][ T4481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 345.691974][ T8822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.713417][ T8822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.732443][ T9119] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.742557][ T8822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.761224][ T8822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.778427][ T8822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.791946][ T8822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.804933][ T8822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.818606][ T9116] netlink: 1300 bytes leftover after parsing attributes in process `syz.3.1558'. [ 345.852802][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.862053][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.886810][ T4481] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 345.895774][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 345.907283][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 345.918234][ T4481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 346.076745][ T4481] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.118993][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 346.224003][ T4481] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 134, setting to 64 [ 346.333247][ T4481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 346.555990][ T4481] usb 1-1: unable to read config index 7 descriptor/start: -71 [ 346.568205][ T4481] usb 1-1: can't read configurations, error -71 [ 346.596676][ T3703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.605523][ T3703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.642956][ T5208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.717541][ T5208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.767095][ T5208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.041120][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 347.084305][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.537584][ T9137] netlink: 'syz.3.1567': attribute type 4 has an invalid length. [ 347.642905][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1567'. [ 349.192251][ T9137] netlink: 'syz.3.1567': attribute type 17 has an invalid length. [ 349.447448][ T9164] netlink: 'syz.2.1573': attribute type 4 has an invalid length. [ 350.223013][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 350.295949][ T4481] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 351.266031][ T4481] usb 1-1: Using ep0 maxpacket: 8 [ 351.406058][ T4481] usb 1-1: config 0 has no interfaces? [ 351.416066][ T4481] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 351.468396][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.513280][ T4481] usb 1-1: config 0 descriptor?? [ 351.545907][ T3686] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 351.766998][ T4486] usb 1-1: USB disconnect, device number 12 [ 351.816170][ T3686] usb 2-1: Using ep0 maxpacket: 8 [ 351.946356][ T3686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.148418][ T3686] usb 2-1: New USB device found, idVendor=0503, idProduct=a4a1, bcdDevice= 0.40 [ 352.161924][ T3686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.205911][ T3686] usb 2-1: Product: syz [ 352.210113][ T3686] usb 2-1: Manufacturer: syz [ 352.214725][ T3686] usb 2-1: SerialNumber: syz [ 352.455011][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1586'. [ 352.507851][ T9208] device syz_tun entered promiscuous mode [ 352.554436][ T9208] device macvtap1 entered promiscuous mode [ 352.612750][ T9210] device syz_tun left promiscuous mode [ 352.704334][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 353.505342][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 353.776557][ T3686] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 353.784198][ T3686] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 355.848943][ T3686] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 356.207940][ T3686] usb 2-1: USB disconnect, device number 13 [ 356.217936][ T3686] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 356.256068][ T7111] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 356.348065][ T26] audit: type=1326 audit(1728021316.824:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb337dff9 code=0x7ffc0000 [ 356.371296][ T26] audit: type=1326 audit(1728021316.834:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb337dff9 code=0x7ffc0000 [ 356.395929][ T26] audit: type=1326 audit(1728021316.844:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb337dff9 code=0x7ffc0000 [ 356.423826][ T26] audit: type=1326 audit(1728021316.844:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb337dff9 code=0x7ffc0000 [ 356.445794][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1600'. [ 356.449686][ T26] audit: type=1326 audit(1728021316.844:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb337dff9 code=0x7ffc0000 [ 356.485473][ T9250] device veth1_to_bridge entered promiscuous mode [ 356.493272][ T26] audit: type=1326 audit(1728021316.844:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb337dff9 code=0x7ffc0000 [ 356.518973][ T26] audit: type=1326 audit(1728021316.844:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb337dff9 code=0x7ffc0000 [ 356.548649][ T26] audit: type=1326 audit(1728021316.844:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb337dff9 code=0x7ffc0000 [ 356.572986][ T7111] usb 1-1: Using ep0 maxpacket: 8 [ 356.609111][ T9252] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1601'. [ 356.619298][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.620382][ T26] audit: type=1326 audit(1728021316.844:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cb337c990 code=0x7ffc0000 [ 356.670564][ T26] audit: type=1326 audit(1728021316.844:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6cb337dbfb code=0x7ffc0000 [ 356.826797][ T7111] usb 1-1: config 0 has no interfaces? [ 356.832318][ T7111] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.848099][ T7111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.862693][ T7111] usb 1-1: config 0 descriptor?? [ 356.865729][ T3686] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 356.898000][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'. [ 356.908012][ T9258] fuse: Bad value for 'fd' [ 357.126110][ T3686] usb 2-1: Using ep0 maxpacket: 8 [ 357.278619][ T3686] usb 2-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 357.328342][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.522869][ T3686] usb 2-1: config 0 descriptor?? [ 357.564236][ T7111] usb 1-1: USB disconnect, device number 13 [ 357.670896][ T9262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1604'. [ 357.697210][ T3686] usb-storage 2-1:0.0: USB Mass Storage device detected [ 357.730528][ T3686] usb-storage 2-1:0.0: Quirks match for vid 054c pid 0069: 1 [ 358.135357][ T9270] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 358.173119][ T9270] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 358.240639][ T9259] device hsr_slave_1 left promiscuous mode [ 358.366783][ T7111] usb 2-1: USB disconnect, device number 14 [ 358.734571][ T9281] Cannot find add_set index 0 as target [ 359.319135][ T9283] tipc: Started in network mode [ 359.324071][ T9283] tipc: Node identity 1, cluster identity 4711 [ 359.367530][ T9283] tipc: Node number set to 1 [ 359.706511][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 359.829738][ T9298] device hsr_slave_1 left promiscuous mode [ 361.002345][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 362.026200][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 362.166025][ T7] usb 2-1: config 0 has no interfaces? [ 362.176049][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.185122][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.391060][ T7] usb 2-1: config 0 descriptor?? [ 363.263753][ T7] usb 2-1: can't set config #0, error -71 [ 363.487433][ T7] usb 2-1: USB disconnect, device number 15 [ 366.445937][ T4481] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 366.575926][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 366.616023][ T3684] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 366.795976][ T4486] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 366.805995][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.817124][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 366.823764][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.834340][ T4481] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.847943][ T4481] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.860488][ T4481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.871746][ T4481] usb 3-1: config 0 descriptor?? [ 366.886101][ T3684] usb 2-1: Using ep0 maxpacket: 32 [ 366.946005][ T7] usb 1-1: config 0 has no interfaces? [ 366.951804][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.961134][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.971160][ T7] usb 1-1: config 0 descriptor?? [ 367.026168][ T3684] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.037373][ T3684] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.047219][ T3684] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.057036][ T3684] usb 2-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 367.065976][ T4486] usb 5-1: Using ep0 maxpacket: 8 [ 367.070212][ T3684] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 367.086087][ T3684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.186234][ T4486] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.196352][ T4486] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 367.206300][ T4486] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 367.216321][ T4486] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.224809][ T5575] usb 1-1: USB disconnect, device number 14 [ 367.233535][ T4486] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 367.244504][ T4486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.358610][ T4481] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 367.391937][ T4481] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 367.515982][ T4486] usb 5-1: GET_CAPABILITIES returned 0 [ 367.521583][ T4486] usbtmc 5-1:16.0: can't read capabilities [ 367.562647][ T4486] usb 3-1: USB disconnect, device number 18 [ 367.666030][ T3684] usbhid 2-1:7.0: can't add hid device: -71 [ 367.672116][ T3684] usbhid: probe of 2-1:7.0 failed with error -71 [ 367.685403][ T3684] usb 2-1: USB disconnect, device number 16 [ 367.744468][ T7111] usb 5-1: USB disconnect, device number 11 [ 369.062860][ T9399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.414964][ T4481] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 369.506781][ T9412] netlink: 'syz.4.1659': attribute type 4 has an invalid length. [ 369.543282][ T9412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1659'. [ 369.554009][ T9412] netlink: 'syz.4.1659': attribute type 17 has an invalid length. [ 369.571949][ T9412] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 370.925148][ T4481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 371.009013][ T4481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 371.050310][ T4481] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.201385][ T7111] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 371.224157][ T4481] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.233790][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.257239][ T4481] usb 1-1: config 0 descriptor?? [ 371.276179][ T9402] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 371.774358][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 371.842490][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.254983][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.283063][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.315233][ T7111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.327512][ T7111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.335626][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.337721][ T7111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 372.359016][ T7111] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 372.363929][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.368291][ T7111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.369856][ T7111] usb 5-1: config 0 descriptor?? [ 372.393915][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.402120][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.431786][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.446053][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.456167][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.464144][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.472437][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.480540][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.488945][ T4481] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 372.506977][ T4481] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 372.543982][ T4481] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 372.589420][ T4481] usb 1-1: USB disconnect, device number 15 [ 372.723048][ T9446] netlink: 'syz.1.1671': attribute type 4 has an invalid length. [ 372.790859][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1671'. [ 372.807771][ T9446] netlink: 'syz.1.1671': attribute type 17 has an invalid length. [ 372.895058][ T7111] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 372.953925][ T3686] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 372.962436][ T7111] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 373.098330][ T7111] usb 5-1: USB disconnect, device number 12 [ 373.346659][ T3686] usb 4-1: Using ep0 maxpacket: 8 [ 373.476205][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.506271][ T3686] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 373.515597][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.542835][ T3686] usb 4-1: config 0 descriptor?? [ 373.847756][ T3686] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 374.118579][ T9463] [ 374.120943][ T9463] ====================================================== [ 374.127957][ T9463] WARNING: possible circular locking dependency detected [ 374.134965][ T9463] 6.1.112-syzkaller #0 Not tainted [ 374.140068][ T9463] ------------------------------------------------------ [ 374.147080][ T9463] syz.4.1678/9463 is trying to acquire lock: [ 374.153053][ T9463] ffff88805d226130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x57/0x300 [ 374.164576][ T9463] [ 374.164576][ T9463] but task is already holding lock: [ 374.172019][ T9463] ffff88805a28dd28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0 [ 374.180914][ T9463] [ 374.180914][ T9463] which lock already depends on the new lock. [ 374.180914][ T9463] [ 374.191315][ T9463] [ 374.191315][ T9463] the existing dependency chain (in reverse order) is: [ 374.200323][ T9463] [ 374.200323][ T9463] -> #3 (&d->lock){+.+.}-{3:3}: [ 374.207450][ T9463] lock_acquire+0x1f8/0x5a0 [ 374.212485][ T9463] __mutex_lock+0x132/0xd80 [ 374.217506][ T9463] __rfcomm_dlc_close+0x259/0x6d0 [ 374.223053][ T9463] rfcomm_dlc_close+0xed/0x180 [ 374.228337][ T9463] __rfcomm_sock_close+0x104/0x220 [ 374.233976][ T9463] rfcomm_sock_shutdown+0xb4/0x230 [ 374.239617][ T9463] rfcomm_sock_release+0x55/0x110 [ 374.245160][ T9463] sock_close+0xcd/0x230 [ 374.249908][ T9463] __fput+0x3f6/0x8d0 [ 374.254392][ T9463] task_work_run+0x246/0x300 [ 374.259483][ T9463] get_signal+0x15fc/0x17d0 [ 374.264506][ T9463] arch_do_signal_or_restart+0xb0/0x1a10 [ 374.270640][ T9463] exit_to_user_mode_loop+0x6a/0x100 [ 374.276422][ T9463] exit_to_user_mode_prepare+0xb1/0x140 [ 374.282465][ T9463] syscall_exit_to_user_mode+0x60/0x270 [ 374.288508][ T9463] do_syscall_64+0x47/0xb0 [ 374.293434][ T9463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.299827][ T9463] [ 374.299827][ T9463] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 374.307214][ T9463] lock_acquire+0x1f8/0x5a0 [ 374.312233][ T9463] __mutex_lock+0x132/0xd80 [ 374.317230][ T9463] rfcomm_dlc_exists+0xa2/0x370 [ 374.322580][ T9463] rfcomm_dev_ioctl+0xb2d/0x2180 [ 374.328018][ T9463] rfcomm_sock_ioctl+0x82/0xc0 [ 374.333280][ T9463] sock_do_ioctl+0x152/0x450 [ 374.338364][ T9463] sock_ioctl+0x47f/0x770 [ 374.343185][ T9463] __se_sys_ioctl+0xf1/0x160 [ 374.348275][ T9463] do_syscall_64+0x3b/0xb0 [ 374.353200][ T9463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.359596][ T9463] [ 374.359596][ T9463] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 374.367471][ T9463] lock_acquire+0x1f8/0x5a0 [ 374.372475][ T9463] __mutex_lock+0x132/0xd80 [ 374.377470][ T9463] rfcomm_dev_ioctl+0x233/0x2180 [ 374.382918][ T9463] rfcomm_sock_ioctl+0x82/0xc0 [ 374.388181][ T9463] sock_do_ioctl+0x152/0x450 [ 374.393265][ T9463] sock_ioctl+0x47f/0x770 [ 374.398091][ T9463] __se_sys_ioctl+0xf1/0x160 [ 374.403174][ T9463] do_syscall_64+0x3b/0xb0 [ 374.408110][ T9463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.414502][ T9463] [ 374.414502][ T9463] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 374.423851][ T9463] validate_chain+0x1661/0x5950 [ 374.429197][ T9463] __lock_acquire+0x125b/0x1f80 [ 374.434545][ T9463] lock_acquire+0x1f8/0x5a0 [ 374.439547][ T9463] lock_sock_nested+0x44/0x100 [ 374.444814][ T9463] rfcomm_sk_state_change+0x57/0x300 [ 374.450621][ T9463] __rfcomm_dlc_close+0x2b2/0x6d0 [ 374.456150][ T9463] rfcomm_dlc_close+0xed/0x180 [ 374.461417][ T9463] __rfcomm_sock_close+0x104/0x220 [ 374.467029][ T9463] rfcomm_sock_shutdown+0xb4/0x230 [ 374.472637][ T9463] rfcomm_sock_release+0x55/0x110 [ 374.478172][ T9463] sock_close+0xcd/0x230 [ 374.483082][ T9463] __fput+0x3f6/0x8d0 [ 374.487558][ T9463] task_work_run+0x246/0x300 [ 374.492643][ T9463] get_signal+0x15fc/0x17d0 [ 374.497645][ T9463] arch_do_signal_or_restart+0xb0/0x1a10 [ 374.503779][ T9463] exit_to_user_mode_loop+0x6a/0x100 [ 374.509586][ T9463] exit_to_user_mode_prepare+0xb1/0x140 [ 374.515641][ T9463] syscall_exit_to_user_mode+0x60/0x270 [ 374.521693][ T9463] do_syscall_64+0x47/0xb0 [ 374.526628][ T9463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.533023][ T9463] [ 374.533023][ T9463] other info that might help us debug this: [ 374.533023][ T9463] [ 374.543225][ T9463] Chain exists of: [ 374.543225][ T9463] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock [ 374.543225][ T9463] [ 374.557104][ T9463] Possible unsafe locking scenario: [ 374.557104][ T9463] [ 374.564526][ T9463] CPU0 CPU1 [ 374.569866][ T9463] ---- ---- [ 374.575217][ T9463] lock(&d->lock); [ 374.579003][ T9463] lock(rfcomm_mutex); [ 374.585652][ T9463] lock(&d->lock); [ 374.591950][ T9463] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 374.598075][ T9463] [ 374.598075][ T9463] *** DEADLOCK *** [ 374.598075][ T9463] [ 374.606211][ T9463] 3 locks held by syz.4.1678/9463: [ 374.611291][ T9463] #0: ffff888070fc5610 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 374.621445][ T9463] #1: ffffffff8e6762e8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x37/0x180 [ 374.630812][ T9463] #2: ffff88805a28dd28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0 [ 374.640090][ T9463] [ 374.640090][ T9463] stack backtrace: [ 374.645961][ T9463] CPU: 0 PID: 9463 Comm: syz.4.1678 Not tainted 6.1.112-syzkaller #0 [ 374.654013][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.664065][ T9463] Call Trace: [ 374.667333][ T9463] [ 374.670331][ T9463] dump_stack_lvl+0x1e3/0x2cb [ 374.675012][ T9463] ? nf_tcp_handle_invalid+0x642/0x642 [ 374.680486][ T9463] ? print_circular_bug+0x12b/0x1a0 [ 374.686222][ T9463] check_noncircular+0x2fa/0x3b0 [ 374.691141][ T9463] ? add_lock_to_list+0x1de/0x2e0 [ 374.696149][ T9463] ? add_chain_block+0x850/0x850 [ 374.701079][ T9463] ? lockdep_lock+0x11f/0x2a0 [ 374.705755][ T9463] ? _find_first_zero_bit+0xd0/0x100 [ 374.711035][ T9463] validate_chain+0x1661/0x5950 [ 374.715874][ T9463] ? register_lock_class+0x100/0x990 [ 374.721139][ T9463] ? reacquire_held_locks+0x660/0x660 [ 374.726488][ T9463] ? is_dynamic_key+0x260/0x260 [ 374.731320][ T9463] ? mark_lock+0x9a/0x340 [ 374.735627][ T9463] ? __lock_acquire+0x125b/0x1f80 [ 374.740632][ T9463] ? mark_lock+0x9a/0x340 [ 374.744940][ T9463] __lock_acquire+0x125b/0x1f80 [ 374.749778][ T9463] lock_acquire+0x1f8/0x5a0 [ 374.754256][ T9463] ? rfcomm_sk_state_change+0x57/0x300 [ 374.759699][ T9463] ? read_lock_is_recursive+0x10/0x10 [ 374.765051][ T9463] ? __mutex_lock+0x2f7/0xd80 [ 374.769710][ T9463] ? rcu_is_watching+0x11/0xb0 [ 374.774534][ T9463] ? detach_timer+0x17d/0x380 [ 374.779188][ T9463] ? __rfcomm_dlc_close+0x259/0x6d0 [ 374.784364][ T9463] ? mutex_lock_nested+0x10/0x10 [ 374.789281][ T9463] lock_sock_nested+0x44/0x100 [ 374.794038][ T9463] ? rfcomm_sk_state_change+0x57/0x300 [ 374.799475][ T9463] rfcomm_sk_state_change+0x57/0x300 [ 374.804762][ T9463] __rfcomm_dlc_close+0x2b2/0x6d0 [ 374.809770][ T9463] rfcomm_dlc_close+0xed/0x180 [ 374.814510][ T9463] __rfcomm_sock_close+0x104/0x220 [ 374.819617][ T9463] rfcomm_sock_shutdown+0xb4/0x230 [ 374.824725][ T9463] rfcomm_sock_release+0x55/0x110 [ 374.829766][ T9463] sock_close+0xcd/0x230 [ 374.833993][ T9463] ? sock_mmap+0x90/0x90 [ 374.838215][ T9463] __fput+0x3f6/0x8d0 [ 374.842181][ T9463] task_work_run+0x246/0x300 [ 374.846754][ T9463] ? __sys_connect+0x161/0x300 [ 374.851498][ T9463] ? __x64_sys_connect+0x76/0x80 [ 374.856506][ T9463] ? task_work_cancel+0x2e0/0x2e0 [ 374.861608][ T9463] get_signal+0x15fc/0x17d0 [ 374.866105][ T9463] ? ptrace_notify+0x370/0x370 [ 374.870851][ T9463] arch_do_signal_or_restart+0xb0/0x1a10 [ 374.876475][ T9463] ? task_work_add+0x314/0x3a0 [ 374.881309][ T9463] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 374.886715][ T9463] ? get_sigframe_size+0x10/0x10 [ 374.891646][ T9463] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 374.897617][ T9463] ? exit_to_user_mode_loop+0x39/0x100 [ 374.903154][ T9463] exit_to_user_mode_loop+0x6a/0x100 [ 374.908424][ T9463] exit_to_user_mode_prepare+0xb1/0x140 [ 374.913955][ T9463] syscall_exit_to_user_mode+0x60/0x270 [ 374.919481][ T9463] do_syscall_64+0x47/0xb0 [ 374.923874][ T9463] ? clear_bhb_loop+0x45/0xa0 [ 374.928533][ T9463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.934415][ T9463] RIP: 0033:0x7f219837dff9 [ 374.938815][ T9463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.958414][ T9463] RSP: 002b:00007f21981ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 374.966912][ T9463] RAX: fffffffffffffffc RBX: 00007f2198535f80 RCX: 00007f219837dff9 [ 374.974871][ T9463] RDX: 0000000000000080 RSI: 00000000200004c0 RDI: 0000000000000006 [ 374.982843][ T9463] RBP: 00007f21983f0296 R08: 0000000000000000 R09: 0000000000000000 [ 374.990811][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.998768][ T9463] R13: 0000000000000000 R14: 00007f2198535f80 R15: 00007ffeae761138 [ 375.006726][ T9463] [ 375.296731][ T3682] usb 4-1: USB disconnect, device number 19 [ 375.305108][ T3682] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 378.517878][ T1267] ieee802154 phy0 wpan0: encryption failed: -22