last executing test programs: 1m29.774375196s ago: executing program 5 (id=3831): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) 1m27.704679414s ago: executing program 5 (id=3838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="8917ce1484f1fd203d3e996df91517fe6bcc431e56658bb6", 0x18}, {&(0x7f0000000340)="2bcc6607f02547df813c311c7aad67bf624e0c0dd656820259ebef17929757704f3f6e80c51de1110a4dbb2919e3", 0x2e}, {&(0x7f00000025c0)="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", 0x7bb}], 0x3, &(0x7f0000000580)}], 0x1, 0x8080) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) read$FUSE(r1, &(0x7f00000036c0)={0x2020}, 0x2020) 1m26.316502568s ago: executing program 5 (id=3851): connect$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x85, 0x4f, 0xbe, 0x10, 0x50d, 0x2102, 0x70d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x450}}]}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f00000000c0)={0x20, 0x17, 0x76}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) io_setup(0x6, 0x0) 1m23.061082461s ago: executing program 5 (id=3871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) 1m22.570729912s ago: executing program 5 (id=3874): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0x91b, 0x4004085, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x4, 0x4) 1m21.404271048s ago: executing program 5 (id=3882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) setitimer(0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) 1m5.106677896s ago: executing program 32 (id=3882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) setitimer(0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) 1m1.061149516s ago: executing program 4 (id=3931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) init_module(0x0, 0x82a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@const={0x0, 0x0, 0x0, 0x2}, @var={0x2, 0x0, 0x0, 0x11, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x37}, 0x28) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bf2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xfff3, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) read$FUSE(r4, &(0x7f0000000c00)={0x2020}, 0x2020) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(r5, 0x0, 0x0, 0x4080850) io_setup(0xff, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2) syz_usb_control_io$hid(r6, 0x0, 0x0) 51.126219089s ago: executing program 4 (id=3950): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8040, &(0x7f0000000180)=ANY=[], 0xd3, 0x599, &(0x7f00000005c0)="$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") r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) llistxattr(0x0, 0x0, 0x0) 49.733385955s ago: executing program 4 (id=3953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x40800) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x4, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 35.136581003s ago: executing program 4 (id=3980): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f00000002c0)=""/80, 0x50) 34.85337457s ago: executing program 4 (id=3981): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000240)) 31.99740517s ago: executing program 4 (id=3983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 16.914192308s ago: executing program 33 (id=3983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) 7.082461771s ago: executing program 1 (id=4050): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x2, 0xc6c, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3180], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000b80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x80) connect$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setfsuid(0x0) 5.593617299s ago: executing program 3 (id=4052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x195, &(0x7f0000000480)="$eJzskjFu1FAQhr9ne9dJFCKQqNIkxUpAAXYcQHSkDD0dDZZjQoQDZL0SJHJhhFAKCkTJCXINJC4ABcoBtt7CokZG772xZdgj8L5i/51/Z8Yzs35enpQh8LupMvYw+GzwQykCYEtZb+FZ/Sz6U/STFb5L3iPx34tulqdnY8nZ5po1XqRFkU+3gV/G663y4TuPhWl1KUVPgbZtW/A4AJ3OOkrBGpdNlfnASZ8DmwFcN0u0tk9TZXoRHdwAotnx66g8Pbt9dJwe5of5y8TfvR/fjeN7SaRnjqNnR0Ueq1Ce31SZrILWW0C4Ika6btqPgA86DlhCDUbTrIFa5QndaOPuhhtqqdYb1Haq+Nqv1Y2oT/B4D/RYb2o1cCemS4BZaR+FL8FOMJjPPmvF/HAne1UcnKNQXdkFAZ4xDCPTcJUiT+YS6LTdBzVXbMa5tJyI7oteiM5Ft/55ZYJaf36U6GYNY96ms9l0Rx/JfhtJ7TTpveRqPTzYhJAv3t/LffOW/xiHw+FwOBwOh8Ph+M/4EwAA///HXmtD") mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 5.43882851s ago: executing program 3 (id=4053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010400000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(0x3) 4.900340692s ago: executing program 3 (id=4056): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0), 0x4) 4.300426194s ago: executing program 3 (id=4060): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) 4.236355099s ago: executing program 0 (id=4061): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3fc, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x5, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xfffffffd, 0x9, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x408, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0xfffffffe, 0x7f, 0x6, 0x9, 0xff, 0x24, 0x5, 0xb, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x9, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0x10000a, 0x1, 0x0, 0x9, 0x300, 0x6, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x7fffffff, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x67f5, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0xc, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x100005, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0xc, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x8, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x5, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x2, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x100, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x26, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x8, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0xa, 0x6, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 3.842290041s ago: executing program 1 (id=4063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x195, &(0x7f0000000480)="$eJzskjFu1FAQhr9ne9dJFCKQqNIkxUpAAXYcQHSkDD0dDZZjQoQDZL0SJHJhhFAKCkTJCXINJC4ABcoBtt7CokZG772xZdgj8L5i/51/Z8Yzs35enpQh8LupMvYw+GzwQykCYEtZb+FZ/Sz6U/STFb5L3iPx34tulqdnY8nZ5po1XqRFkU+3gV/G663y4TuPhWl1KUVPgbZtW/A4AJ3OOkrBGpdNlfnASZ8DmwFcN0u0tk9TZXoRHdwAotnx66g8Pbt9dJwe5of5y8TfvR/fjeN7SaRnjqNnR0Ueq1Ce31SZrILWW0C4Ika6btqPgA86DlhCDUbTrIFa5QndaOPuhhtqqdYb1Haq+Nqv1Y2oT/B4D/RYb2o1cCemS4BZaR+FL8FOMJjPPmvF/HAne1UcnKNQXdkFAZ4xDCPTcJUiT+YS6LTdBzVXbMa5tJyI7oteiM5Ft/55ZYJaf36U6GYNY96ms9l0Rx/JfhtJ7TTpveRqPTzYhJAv3t/LffOW/xiHw+FwOBwOh8Ph+M/4EwAA///HXmtD") mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 3.563788438s ago: executing program 0 (id=4065): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x2b, "43720705000100004786b89e6fb2be5c3f0000000900000000000000000007fffd0ceb65e9fa827c003fa8"}}) 3.464065079s ago: executing program 1 (id=4066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010400000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(0x3) 3.165733989s ago: executing program 1 (id=4068): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000011100)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25df9bfd, {0x0, 0x0, 0x0, r2, {0x9, 0xb}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 3.079976006s ago: executing program 0 (id=4069): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a0431a, &(0x7f0000000000)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr") r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="3c14000f00000000fc02000000000000000000000000000020010000000000000000000000000002fe8000000000000000000000000000bbfc02000000000000000000000000000100000000000000000000000000000000ff020000000000000000000000000001fe8000000000000000000000000000bbfe8800000000000000000000000001010000000000000000000000000000000020010000000000000000000000000001d929e1746ad4cd169daadc75cbe3443b3e75a6d5366f9f63096334dd2d935b13dc5e119bcfe9b23fa41a20efd563b504b2496774a9809f86ee08f33097cc9777a4291a87b680bc165264b91e4c9457e8"], 0xa8) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(&(0x7f0000000140)='./file0\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000e00)={0x17c04, r5, 0x6, 0x24000003, 0x400000006, 0x3}) 3.078301537s ago: executing program 3 (id=4070): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f00000000c0)=0xff57) 2.59260979s ago: executing program 3 (id=4073): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x2, 0xc6c, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3180], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000b80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x80) connect$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setfsuid(0x0) 2.589951879s ago: executing program 2 (id=4074): openat$sysfs(0xffffffffffffff9c, 0x0, 0x719881, 0x188) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close_range(r0, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'syz_tun\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) 2.325066421s ago: executing program 1 (id=4075): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3fc, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x5, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xfffffffd, 0x9, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x408, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0xfffffffe, 0x7f, 0x6, 0x9, 0xff, 0x24, 0x5, 0xb, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x9, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0x10000a, 0x1, 0x0, 0x9, 0x300, 0x6, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x7fffffff, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x67f5, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0xc, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffffeff, 0x100005, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0xc, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7fff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x8, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x5, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a9, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x2, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x100, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x26, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x8, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0xa, 0x6, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 1.373075991s ago: executing program 0 (id=4076): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.275425766s ago: executing program 2 (id=4077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x195, &(0x7f0000000480)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001aa40)=""/102400, 0x19000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1.021935823s ago: executing program 2 (id=4078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010400000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(0x3) 600.728804ms ago: executing program 2 (id=4079): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x34}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 464.712833ms ago: executing program 0 (id=4080): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x2b, "43720705000100004786b89e6fb2be5c3f0000000900000000000000000007fffd0ceb65e9fa827c003fa8"}}) 372.019498ms ago: executing program 1 (id=4081): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0) 252.852298ms ago: executing program 2 (id=4082): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x1, 0x2, 0x10000}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 161.812404ms ago: executing program 0 (id=4083): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file2\x00', 0x1000412, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x21, 0x270, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x15b042, 0x20) sendfile(r0, r0, 0x0, 0x7a680000) 0s ago: executing program 2 (id=4084): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x11, r2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f0000000380)) kernel console output (not intermixed with test programs): T9] usb usb2-port1: unable to enumerate USB device [ 360.773919][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e751800: abort rx timeout. Force session deactivation [ 361.034700][T12945] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2548'. [ 362.021198][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 362.192648][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 362.199474][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 362.208020][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.218589][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.229020][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.239043][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.253327][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.262636][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.410943][T12950] syzkaller0: entered promiscuous mode [ 362.416493][T12950] syzkaller0: entered allmulticast mode [ 362.432746][T12977] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.460867][T12977] syzkaller0: entered promiscuous mode [ 362.466661][T12977] syzkaller0: entered allmulticast mode [ 362.487290][ T9] usb 2-1: usb_control_msg returned -32 [ 362.500649][ T9] usbtmc 2-1:16.0: can't read capabilities [ 363.452097][T12984] netlink: 'syz.4.2554': attribute type 12 has an invalid length. [ 363.460207][T12984] netlink: 'syz.4.2554': attribute type 29 has an invalid length. [ 363.468259][T12984] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2554'. [ 363.469793][ T5950] usb 2-1: USB disconnect, device number 65 [ 363.937208][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b7ab400: rx timeout, send abort [ 364.224218][T13009] x_tables: duplicate underflow at hook 2 [ 364.327463][T13010] netlink: 'syz.1.2562': attribute type 21 has an invalid length. [ 364.436332][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b7ab800: rx timeout, send abort [ 364.445547][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b7ab400: abort rx timeout. Force session deactivation [ 364.715706][T12989] netlink: 'syz.0.2556': attribute type 8 has an invalid length. [ 364.723729][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2556'. [ 364.739365][T13010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2562'. [ 364.919825][T13018] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2566'. [ 364.944692][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806b7ab800: abort rx timeout. Force session deactivation [ 365.187135][T13028] syzkaller0: entered promiscuous mode [ 365.196866][T13028] syzkaller0: entered allmulticast mode [ 365.381439][T13033] syzkaller0: entered promiscuous mode [ 365.391045][T13033] syzkaller0: entered allmulticast mode [ 365.488229][ T789] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 365.597442][T13046] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 365.676542][T13046] syzkaller0: entered promiscuous mode [ 365.680786][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 365.692607][ T789] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 365.700287][T13046] syzkaller0: entered allmulticast mode [ 365.723177][ T789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.742032][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.752441][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.793426][ T789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.830464][ T789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.860072][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.004452][T13061] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2584'. [ 366.120312][ T789] usb 4-1: usb_control_msg returned -32 [ 366.130157][ T789] usbtmc 4-1:16.0: can't read capabilities [ 366.254069][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f8f3800: rx timeout, send abort [ 366.755232][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f8f3400: rx timeout, send abort [ 366.763674][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f8f3800: abort rx timeout. Force session deactivation [ 367.096542][ T5906] usb 4-1: USB disconnect, device number 59 [ 367.265070][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f8f3400: abort rx timeout. Force session deactivation [ 367.669658][T13079] syzkaller0: entered promiscuous mode [ 367.688917][T13079] syzkaller0: entered allmulticast mode [ 369.183609][T13122] syzkaller0: entered promiscuous mode [ 369.189845][T13126] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2603'. [ 369.209493][T13122] syzkaller0: entered allmulticast mode [ 369.521431][T13132] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 369.563172][T13132] syzkaller0: entered promiscuous mode [ 369.612667][T13132] syzkaller0: entered allmulticast mode [ 371.384356][T13152] netlink: 'syz.1.2610': attribute type 8 has an invalid length. [ 371.400699][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'. [ 371.575154][T13177] openvswitch: netlink: IPv6 tunnel dst address is zero [ 371.618614][T13180] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2619'. [ 371.706831][T13182] syzkaller0: entered promiscuous mode [ 371.713841][T13182] syzkaller0: entered allmulticast mode [ 371.990902][ T24] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 372.160488][ T24] usb 2-1: device descriptor read/64, error -71 [ 372.335618][T13211] Cannot find add_set index 3 as target [ 372.400472][ T24] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 372.583073][T13216] tipc: Enabling of bearer rejected, failed to enable media [ 372.656172][T13216] syzkaller0: entered promiscuous mode [ 372.662893][T13216] syzkaller0: entered allmulticast mode [ 372.930448][ T24] usb 2-1: device descriptor read/64, error -71 [ 373.062563][ T24] usb usb2-port1: attempt power cycle [ 373.413914][ T24] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 373.441724][ T24] usb 2-1: device descriptor read/8, error -71 [ 373.680529][ T24] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 373.701818][ T24] usb 2-1: device descriptor read/8, error -71 [ 373.815512][ T24] usb usb2-port1: unable to enumerate USB device [ 374.434342][T13246] syzkaller0: entered promiscuous mode [ 374.439867][T13246] syzkaller0: entered allmulticast mode [ 374.801944][ T5950] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 374.894421][T13264] tipc: Enabling of bearer rejected, failed to enable media [ 374.975064][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 375.039369][ T5950] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.065396][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.104658][ T5950] usb 3-1: config 0 descriptor?? [ 375.124387][ T5950] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 375.176081][T13264] syzkaller0: entered promiscuous mode [ 375.202466][T13264] syzkaller0: entered allmulticast mode [ 375.310514][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 375.492210][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.510516][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.522451][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.540407][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.549567][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.573356][ T10] usb 2-1: config 0 descriptor?? [ 375.999398][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.040442][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.047881][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.090451][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.120785][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.128345][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.137044][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.162060][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.180749][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.188255][ T10] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 376.251663][ T10] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 376.290924][ T10] usb 2-1: USB disconnect, device number 70 [ 376.405590][T13306] fido_id[13306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 377.389925][T13321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2663'. [ 377.605638][ T24] usb 3-1: USB disconnect, device number 54 [ 377.894864][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.903936][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.417439][T13369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2686'. [ 378.429466][T13369] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 378.583410][T13372] tipc: Enabled bearer , priority 0 [ 378.761366][T13372] syzkaller0: entered promiscuous mode [ 378.791110][T13372] syzkaller0: entered allmulticast mode [ 378.860117][T13372] tipc: Resetting bearer [ 378.900817][T13370] tipc: Resetting bearer [ 379.014892][T13370] tipc: Disabling bearer [ 379.613877][T13411] x_tables: duplicate underflow at hook 2 [ 379.739674][T13417] netlink: 'syz.4.2700': attribute type 21 has an invalid length. [ 379.778274][T13419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2702'. [ 379.824121][T13410] xt_CT: No such helper "pptp" [ 379.877116][T13417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2700'. [ 379.938342][T13419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2702'. [ 380.013872][T13421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2702'. [ 380.644956][T13443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2711'. [ 380.652181][ T5844] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 380.660524][ T31] audit: type=1400 audit(1765022088.048:30): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13442 comm="syz.5.2713" [ 380.898443][T13457] netlink: 'syz.4.2718': attribute type 2 has an invalid length. [ 381.640429][ T5950] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 381.812907][ T5950] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 381.837512][ T5950] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 381.875917][ T5950] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.901738][ T5950] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 381.929900][T13502] tipc: Enabling of bearer rejected, failed to enable media [ 381.954238][ T5950] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 381.990027][ T5950] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.033794][ T5950] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 382.057272][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 382.081763][ T5950] usb 6-1: Product: syz [ 382.088822][T13502] syzkaller0: entered promiscuous mode [ 382.095308][ T5950] usb 6-1: Manufacturer: syz [ 382.104011][T13502] syzkaller0: entered allmulticast mode [ 382.135565][T13478] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 382.152352][ T5950] cdc_wdm 6-1:1.0: skipping garbage [ 382.163897][ T5950] cdc_wdm 6-1:1.0: skipping garbage [ 382.180762][ T5950] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 382.196178][ T5950] cdc_wdm 6-1:1.0: Unknown control protocol [ 382.383935][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.390582][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.396939][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.403552][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.409864][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.416479][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.426149][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.432766][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.439780][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.446386][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.452982][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.459588][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.467377][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.474011][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.482407][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.489016][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.496217][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.502824][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.509442][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 382.516054][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 382.592549][T13478] 9pnet: Could not find request transport: fd0x0000000000000004 [ 382.611489][ T5834] usb 6-1: USB disconnect, device number 56 [ 382.611617][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 383.486857][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2755'. [ 384.287155][ T5844] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 384.320589][ T31] audit: type=1400 audit(1765022091.688:31): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13569 comm="syz.4.2760" [ 384.774628][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'. [ 384.820491][ T5834] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 384.881297][T13604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'. [ 384.982628][ T5834] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.992134][ T5834] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 385.004882][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.022454][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.041164][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 385.057674][ T5834] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 385.073645][ T5834] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 385.083843][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 385.093575][ T5834] usb 2-1: Product: syz [ 385.098078][ T5834] usb 2-1: Manufacturer: syz [ 385.107613][T13591] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 385.117577][ T5834] cdc_wdm 2-1:1.0: skipping garbage [ 385.123325][ T5834] cdc_wdm 2-1:1.0: skipping garbage [ 385.138443][ T5834] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 385.144808][ T5834] cdc_wdm 2-1:1.0: Unknown control protocol [ 385.408419][T13591] 9pnet: Could not find request transport: fd0x0000000000000004 [ 385.423115][ T24] usb 2-1: USB disconnect, device number 71 [ 385.423111][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 385.904794][T13607] tipc: Enabling of bearer rejected, failed to enable media [ 386.042246][T13614] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.191761][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2772'. [ 386.206942][T13620] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 386.225057][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 386.244080][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2772'. [ 386.264697][T13627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2772'. [ 386.279794][T13622] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 386.327491][T13622] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 386.455069][ T31] audit: type=1400 audit(1765022093.858:32): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13629 comm="syz.2.2778" [ 386.456438][ T5844] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 386.741892][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2782'. [ 386.808383][T13654] netlink: 'syz.5.2784': attribute type 21 has an invalid length. [ 386.823612][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2782'. [ 386.830232][T13654] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2784'. [ 386.906500][T13653] syzkaller0: entered promiscuous mode [ 386.912110][T13653] syzkaller0: entered allmulticast mode [ 387.192635][T13667] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 387.213528][T13667] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 387.440210][ T31] audit: type=1400 audit(1765022094.838:33): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13675 comm="syz.4.2797" [ 387.456488][ T5844] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 387.729206][T13682] tipc: Enabling of bearer rejected, failed to enable media [ 387.748519][T13682] syzkaller0: entered promiscuous mode [ 387.761233][T13682] syzkaller0: entered allmulticast mode [ 388.097004][T13698] syzkaller0: entered promiscuous mode [ 388.121657][T13698] syzkaller0: entered allmulticast mode [ 388.552699][T13722] xt_l2tp: invalid flags combination: 0 [ 389.004889][T13739] __nla_validate_parse: 3 callbacks suppressed [ 389.004910][T13739] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2823'. [ 389.191858][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2828'. [ 389.487232][T13744] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2826'. [ 389.963088][ T31] audit: type=1400 audit(1765022097.368:34): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13783 comm="syz.1.2842" [ 390.229215][T13799] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2847'. [ 390.383816][T13803] syzkaller0: entered promiscuous mode [ 390.390513][T13803] syzkaller0: entered allmulticast mode [ 390.417403][T13814] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2852'. [ 390.450682][T13815] syzkaller0: entered promiscuous mode [ 390.465518][T13815] syzkaller0: entered allmulticast mode [ 390.987433][ T5844] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 390.993470][ T31] audit: type=1400 audit(1765022098.378:35): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13839 comm="syz.4.2860" [ 392.516335][T13870] tipc: Enabling of bearer rejected, failed to enable media [ 392.544433][T13884] netlink: 'syz.4.2870': attribute type 12 has an invalid length. [ 392.570465][T13884] netlink: 'syz.4.2870': attribute type 29 has an invalid length. [ 392.578325][T13884] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2870'. [ 392.739643][T13888] netlink: 'syz.0.2872': attribute type 8 has an invalid length. [ 392.771610][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 392.792886][T13888] netlink: 'syz.0.2872': attribute type 8 has an invalid length. [ 392.805563][ T5844] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 392.806094][ T31] audit: type=1400 audit(1765022100.208:36): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=13890 comm="syz.3.2874" [ 392.849724][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2873'. [ 392.867615][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 393.493463][T13923] netlink: 'syz.4.2886': attribute type 12 has an invalid length. [ 393.526274][T13923] netlink: 'syz.4.2886': attribute type 29 has an invalid length. [ 393.559241][T13923] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2886'. [ 393.896949][T13936] netlink: 'syz.2.2891': attribute type 8 has an invalid length. [ 393.942504][T13936] netlink: 'syz.2.2891': attribute type 8 has an invalid length. [ 395.023422][T13992] netlink: 'syz.4.2903': attribute type 21 has an invalid length. [ 395.450496][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 395.610856][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.622045][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 395.632936][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.644544][ T10] usb 3-1: config 0 descriptor?? [ 395.896920][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 395.903232][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 395.916131][ T10] usb 3-1: USB disconnect, device number 55 [ 396.074019][T13992] __nla_validate_parse: 5 callbacks suppressed [ 396.074043][T13992] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2903'. [ 396.112996][T13994] netlink: 'syz.1.2904': attribute type 12 has an invalid length. [ 396.131590][T13994] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2904'. [ 396.333070][T14006] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 396.351413][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 396.355617][T14007] tipc: Enabling of bearer rejected, failed to enable media [ 396.500860][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 396.530836][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.577480][ T24] usb 3-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 396.618919][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.658073][ T24] usb 3-1: config 0 descriptor?? [ 396.947525][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 396.979958][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 397.040785][ T24] usb 3-1: USB disconnect, device number 56 [ 397.294643][T14049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2921'. [ 397.404631][T14054] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2926'. [ 400.063539][T14057] syzkaller0: entered promiscuous mode [ 400.069044][T14057] syzkaller0: entered allmulticast mode [ 400.098102][T14086] tipc: Enabling of bearer rejected, failed to enable media [ 400.231537][T14098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2933'. [ 400.286770][T14101] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 400.324500][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2933'. [ 400.691860][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 400.712231][T14118] validate_nla: 2 callbacks suppressed [ 400.712271][T14118] netlink: 'syz.1.2940': attribute type 21 has an invalid length. [ 400.752065][T14118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2940'. [ 400.866559][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.878053][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 400.896218][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.942925][ T9] usb 4-1: config 0 descriptor?? [ 401.184704][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 401.222102][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 401.257376][ T9] usb 4-1: USB disconnect, device number 60 [ 401.278953][T14131] tipc: Enabling of bearer rejected, failed to enable media [ 401.700569][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 401.870486][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 401.887834][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.932385][ T9] usb 4-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 401.943857][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.971439][ T9] usb 4-1: config 0 descriptor?? [ 402.233897][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 402.243286][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 402.265237][ T9] usb 4-1: USB disconnect, device number 61 [ 402.568538][T14166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 403.267035][T14186] netlink: 'syz.1.2959': attribute type 10 has an invalid length. [ 403.640044][T14192] netlink: 'syz.5.2961': attribute type 21 has an invalid length. [ 403.717323][T14169] tipc: Enabling of bearer rejected, failed to enable media [ 403.728270][T14186] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 403.738011][T14186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.753767][T14192] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2961'. [ 404.017762][T14202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2966'. [ 404.057477][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2966'. [ 404.281547][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2968'. [ 404.400439][ T5834] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 404.513811][T14223] tipc: Enabled bearer , priority 0 [ 404.547747][T14223] tipc: Resetting bearer [ 404.600584][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.791088][T14220] tipc: Disabling bearer [ 404.800405][ T5834] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 404.831955][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.867768][ T5834] usb 4-1: config 0 descriptor?? [ 404.878909][T14228] tipc: Enabling of bearer rejected, failed to enable media [ 405.123653][ T5834] usbhid 4-1:0.0: can't add hid device: -71 [ 405.149878][ T5834] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 405.201875][ T5834] usb 4-1: USB disconnect, device number 62 [ 405.643688][T14260] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2988'. [ 405.660511][ T5834] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 405.810431][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 405.840977][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.866814][ T5834] usb 4-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 405.902872][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.921553][ T5834] usb 4-1: config 0 descriptor?? [ 405.995369][T14270] netlink: 'syz.5.2993': attribute type 12 has an invalid length. [ 406.005024][T14270] netlink: 'syz.5.2993': attribute type 29 has an invalid length. [ 406.030659][T14270] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2993'. [ 406.204700][ T5834] usbhid 4-1:0.0: can't add hid device: -71 [ 406.226296][ T5834] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 406.274271][ T5834] usb 4-1: USB disconnect, device number 63 [ 406.317895][T14282] C: renamed from team_slave_0 (while UP) [ 406.347669][T14282] netlink: 'syz.4.2997': attribute type 2 has an invalid length. [ 406.384863][T14282] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2997'. [ 406.419071][T14282] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 406.722372][T14297] openvswitch: netlink: IP tunnel dst address not specified [ 406.748114][T14299] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3008'. [ 406.772702][T14301] syzkaller0: entered promiscuous mode [ 406.780675][T14301] syzkaller0: entered allmulticast mode [ 407.260466][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 407.325621][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 407.465835][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.488850][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 407.520588][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.543702][ T10] usb 4-1: config 0 descriptor?? [ 407.688280][T14335] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.724967][T14335] syzkaller0: entered promiscuous mode [ 407.742798][T14335] syzkaller0: entered allmulticast mode [ 407.783562][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 407.789697][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 407.813673][ T10] usb 4-1: USB disconnect, device number 64 [ 408.282752][T14346] __nla_validate_parse: 1 callbacks suppressed [ 408.282775][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3029'. [ 408.291291][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 408.464081][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 408.479569][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.498008][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=3321, bcdDevice= 0.40 [ 408.515010][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.552790][ T10] usb 4-1: config 0 descriptor?? [ 408.896062][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 408.916572][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 408.950566][ T10] usb 4-1: USB disconnect, device number 65 [ 410.134981][T14379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3037'. [ 410.545854][T14390] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 410.602553][T14390] syzkaller0: entered promiscuous mode [ 410.650433][T14390] syzkaller0: entered allmulticast mode [ 411.691100][ T789] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 411.869081][ T789] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 411.882077][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 411.902821][ T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 411.917070][ T789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.942597][ T789] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.960843][ T789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.979351][ T789] usb 6-1: config 0 descriptor?? [ 412.407042][ T789] usbhid 6-1:0.0: can't add hid device: -71 [ 412.422153][ T789] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 412.443238][ T789] usb 6-1: USB disconnect, device number 57 [ 412.846159][T14460] syzkaller0: entered promiscuous mode [ 412.859432][T14460] syzkaller0: entered allmulticast mode [ 413.708268][T14484] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 413.748054][T14484] syzkaller0: entered promiscuous mode [ 413.754588][T14484] syzkaller0: entered allmulticast mode [ 415.393050][T14539] syzkaller0: entered promiscuous mode [ 415.416416][T14539] syzkaller0: entered allmulticast mode [ 415.869636][T14566] syzkaller0: entered promiscuous mode [ 415.885584][T14566] syzkaller0: entered allmulticast mode [ 416.022985][T14571] syzkaller0: entered promiscuous mode [ 416.028632][T14571] syzkaller0: entered allmulticast mode [ 416.569131][T14603] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3123'. [ 416.598904][T14603] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3123'. [ 416.638906][T14603] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3123'. [ 416.651840][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3124'. [ 416.651893][T14609] netlink: 64935 bytes leftover after parsing attributes in process `syz.0.3125'. [ 416.703096][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3124'. [ 416.762788][T14614] syzkaller0: entered promiscuous mode [ 416.776725][T14614] syzkaller0: entered allmulticast mode [ 416.871270][T14620] syzkaller0: entered promiscuous mode [ 416.876891][T14620] syzkaller0: entered allmulticast mode [ 417.616317][T14652] syzkaller0: entered promiscuous mode [ 417.649920][T14652] syzkaller0: entered allmulticast mode [ 417.842900][T14657] syzkaller0: entered promiscuous mode [ 417.859462][T14657] syzkaller0: entered allmulticast mode [ 417.878950][T14668] syzkaller0: entered promiscuous mode [ 417.885271][T14668] syzkaller0: entered allmulticast mode [ 417.898290][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'. [ 418.453142][T14693] syzkaller0: entered promiscuous mode [ 418.479104][T14693] syzkaller0: entered allmulticast mode [ 418.493670][T14695] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3165'. [ 418.639571][T14703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3166'. [ 418.794714][T14707] openvswitch: netlink: Flow key attr not present in new flow. [ 418.989309][T14710] syzkaller0: entered promiscuous mode [ 419.017054][T14710] syzkaller0: entered allmulticast mode [ 420.525696][T14734] syzkaller0: entered promiscuous mode [ 420.536565][T14734] syzkaller0: entered allmulticast mode [ 420.817096][T14761] openvswitch: netlink: Flow key attr not present in new flow. [ 420.836683][T14764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3183'. [ 420.845434][T14765] syzkaller0: entered promiscuous mode [ 420.860452][T14765] syzkaller0: entered allmulticast mode [ 421.297615][T14784] syzkaller0: entered promiscuous mode [ 421.325050][T14784] syzkaller0: entered allmulticast mode [ 422.000514][ T789] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 422.201139][ T789] usb 5-1: config 0 has an invalid interface number: 129 but max is 3 [ 422.238899][ T789] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 422.261304][ T789] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 422.270250][ T789] usb 5-1: config 0 has no interface number 0 [ 422.318075][ T789] usb 5-1: config 0 interface 129 altsetting 12 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 422.340038][ T789] usb 5-1: config 0 interface 129 altsetting 12 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 422.364633][ T789] usb 5-1: config 0 interface 129 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 422.415316][ T789] usb 5-1: config 0 interface 129 altsetting 12 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 422.450680][ T789] usb 5-1: config 0 interface 129 has no altsetting 0 [ 422.474536][ T789] usb 5-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=af.39 [ 422.494138][ T789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.505734][ T789] usb 5-1: Product: syz [ 422.509955][ T789] usb 5-1: Manufacturer: syz [ 422.515153][ T789] usb 5-1: SerialNumber: syz [ 422.531236][ T789] usb 5-1: config 0 descriptor?? [ 423.325279][ T789] cdc_acm 5-1:0.129: skipping garbage [ 423.360611][ T789] cdc_acm 5-1:0.129: skipping garbage [ 423.400772][ T789] usb 5-1: USB disconnect, device number 60 [ 423.847489][T14894] __nla_validate_parse: 2 callbacks suppressed [ 423.847510][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 423.886249][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 424.887212][T14943] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3255'. [ 425.535010][T14970] netlink: 181284 bytes leftover after parsing attributes in process `syz.2.3268'. [ 426.052684][T14991] tipc: Enabled bearer , priority 0 [ 426.071589][T14991] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 426.164798][T14991] tipc: Resetting bearer [ 426.200698][ T31] audit: type=1804 audit(1765022133.598:37): pid=15000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3266" name="/newroot/583/file1" dev="tmpfs" ino=2981 res=1 errno=0 [ 426.257526][T14990] tipc: Disabling bearer [ 426.465028][T15008] syzkaller0: entered promiscuous mode [ 426.503994][T15008] syzkaller0: entered allmulticast mode [ 427.570219][T15055] syzkaller0: entered promiscuous mode [ 427.600185][T15055] syzkaller0: entered allmulticast mode [ 427.637504][T15066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3305'. [ 427.728514][ T31] audit: type=1326 audit(1765022135.128:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 427.787814][ T31] audit: type=1326 audit(1765022135.158:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 427.835868][ T31] audit: type=1326 audit(1765022135.158:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 427.920688][ T31] audit: type=1326 audit(1765022135.158:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 427.980445][ T31] audit: type=1326 audit(1765022135.158:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 428.004809][ T31] audit: type=1326 audit(1765022135.158:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 428.030663][ T31] audit: type=1326 audit(1765022135.158:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 428.055340][ T31] audit: type=1326 audit(1765022135.158:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 428.108911][ T31] audit: type=1326 audit(1765022135.168:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15081 comm="syz.4.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 429.268951][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3319'. [ 429.656544][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'. [ 429.738609][T15134] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3331'. [ 429.847942][T15132] syzkaller0: entered promiscuous mode [ 429.880521][T15132] syzkaller0: entered allmulticast mode [ 429.996340][T15150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3336'. [ 430.331729][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3341'. [ 430.543391][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3345'. [ 431.453057][T15136] syzkaller0: entered promiscuous mode [ 431.458559][T15136] syzkaller0: entered allmulticast mode [ 431.479951][T15162] tipc: Enabling of bearer rejected, failed to enable media [ 431.727420][T15187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3349'. [ 431.820055][T15192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3352'. [ 432.236303][T15205] netlink: 181392 bytes leftover after parsing attributes in process `syz.3.3358'. [ 432.929383][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3361'. [ 432.978866][T15211] syzkaller0: entered promiscuous mode [ 432.989607][T15211] syzkaller0: entered allmulticast mode [ 434.157137][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.167435][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.176744][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.185155][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.193096][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.585914][ T5821] syz_tun (unregistering): left promiscuous mode [ 435.621831][T15294] __nla_validate_parse: 4 callbacks suppressed [ 435.621849][T15294] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3381'. [ 435.743831][T15300] netlink: 181392 bytes leftover after parsing attributes in process `syz.3.3384'. [ 436.123557][T15319] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3392'. [ 436.192346][T15251] chnl_net:caif_netlink_parms(): no params data found [ 436.297818][ T5844] Bluetooth: hci6: command tx timeout [ 436.715820][T15251] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.739903][T15251] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.757386][T15251] bridge_slave_0: entered allmulticast mode [ 436.769546][T15251] bridge_slave_0: entered promiscuous mode [ 436.792848][T15251] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.817611][T15251] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.827725][T15251] bridge_slave_1: entered allmulticast mode [ 436.850716][T15251] bridge_slave_1: entered promiscuous mode [ 436.982077][T15366] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3411'. [ 437.081594][T15251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.114288][T15251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.267785][T15251] team0: Port device team_slave_0 added [ 437.305645][T15251] team0: Port device team_slave_1 added [ 437.388121][T15251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.400595][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.428419][T15251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.474211][T15251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.483681][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.532791][T15251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.737963][T15251] hsr_slave_0: entered promiscuous mode [ 437.765333][T15251] hsr_slave_1: entered promiscuous mode [ 437.786777][T15251] debugfs: 'hsr0' already exists in 'hsr' [ 437.807318][T15251] Cannot create hsr debugfs directory [ 437.843048][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3426'. [ 438.046770][T15408] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3429'. [ 438.196206][T15414] netlink: 'syz.2.3431': attribute type 12 has an invalid length. [ 438.213524][T15414] netlink: 'syz.2.3431': attribute type 29 has an invalid length. [ 438.241533][T15414] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3431'. [ 438.370777][ T5844] Bluetooth: hci6: command tx timeout [ 438.524195][T15251] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.557568][T15433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3438'. [ 438.618112][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3438'. [ 438.660762][T15251] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.923195][T15251] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.941791][T15444] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3443'. [ 439.084067][T15251] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.310549][ T5950] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 439.343142][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.349562][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.397280][T15251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 439.423461][T15251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 439.444177][T15251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 439.462563][T15251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 439.476689][ T5950] usb 6-1: config 0 has an invalid interface number: 129 but max is 3 [ 439.487795][ T5950] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 439.500041][ T5950] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 439.514002][ T5950] usb 6-1: config 0 has no interface number 0 [ 439.521382][ T5950] usb 6-1: config 0 interface 129 altsetting 12 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 439.533264][ T5950] usb 6-1: config 0 interface 129 altsetting 12 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 439.544938][ T5950] usb 6-1: config 0 interface 129 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 439.571453][ T5950] usb 6-1: config 0 interface 129 altsetting 12 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 439.601222][ T5950] usb 6-1: config 0 interface 129 has no altsetting 0 [ 439.614590][ T5950] usb 6-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=af.39 [ 439.624879][ T5835] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 439.644145][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.660252][ T5950] usb 6-1: Product: syz [ 439.670595][ T5950] usb 6-1: Manufacturer: syz [ 439.675198][ T5950] usb 6-1: SerialNumber: syz [ 439.696002][ T5950] usb 6-1: config 0 descriptor?? [ 439.715032][T15251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.747197][T15251] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.762514][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.769731][ T2210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.803590][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.822445][ T5835] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 439.823611][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.838621][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.840947][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.866152][ T5835] usb 4-1: config 0 descriptor?? [ 440.099615][ T5835] usbhid 4-1:0.0: can't add hid device: -71 [ 440.112898][ T5835] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 440.145251][ T5835] usb 4-1: USB disconnect, device number 66 [ 440.471177][ T5844] Bluetooth: hci6: command tx timeout [ 440.641188][ T5835] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 440.668651][T15492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3454'. [ 440.702841][ T5950] cdc_acm 6-1:0.129: skipping garbage [ 440.724142][ T5950] cdc_acm 6-1:0.129: skipping garbage [ 440.759024][ T5950] usb 6-1: USB disconnect, device number 58 [ 440.824117][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 440.837802][T15251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.846379][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.874268][ T5835] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 440.908912][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.956190][ T5835] usb 4-1: config 0 descriptor?? [ 440.980638][ T5835] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 440.993355][ T5835] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 441.085401][T15251] veth0_vlan: entered promiscuous mode [ 441.106426][T15251] veth1_vlan: entered promiscuous mode [ 441.205194][T15251] veth0_macvtap: entered promiscuous mode [ 441.240811][T15251] veth1_macvtap: entered promiscuous mode [ 441.324423][T15251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.381095][T15251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.431396][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.455734][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.522174][ T5834] usb 4-1: USB disconnect, device number 67 [ 441.545836][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.566822][ T5834] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 441.589641][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.792291][T15520] syzkaller0: entered promiscuous mode [ 441.804185][T15520] syzkaller0: entered allmulticast mode [ 441.826902][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.844771][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.894184][T15521] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 441.996254][T15525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3467'. [ 442.018189][T15525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3467'. [ 442.136046][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.176095][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.288514][T15533] netlink: 892 bytes leftover after parsing attributes in process `syz.2.3469'. [ 442.336286][ C1] hrtimer: interrupt took 610931 ns [ 442.442609][T15541] netlink: 892 bytes leftover after parsing attributes in process `syz.2.3469'. [ 442.531113][ T5844] Bluetooth: hci6: command tx timeout [ 442.968745][T15529] tipc: Enabled bearer , priority 0 [ 443.088987][T15528] tipc: Disabling bearer [ 443.140624][T15537] syzkaller0: entered promiscuous mode [ 443.156310][T15537] syzkaller0: entered allmulticast mode [ 443.877574][T15552] syzkaller0: entered promiscuous mode [ 443.914703][T15552] syzkaller0: entered allmulticast mode [ 443.971239][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 443.982689][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.004579][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.017643][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.026744][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.437909][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 444.437931][ T31] audit: type=1326 audit(1765022151.838:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.490481][ T5834] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 444.531828][ T31] audit: type=1326 audit(1765022151.838:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.561735][ T31] audit: type=1326 audit(1765022151.838:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.594431][ T31] audit: type=1326 audit(1765022151.838:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.620249][ T31] audit: type=1326 audit(1765022151.838:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.645994][ T31] audit: type=1326 audit(1765022151.838:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.671800][ T31] audit: type=1326 audit(1765022151.848:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.699004][ T31] audit: type=1326 audit(1765022151.848:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.727446][ T31] audit: type=1326 audit(1765022151.848:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.754163][ T31] audit: type=1326 audit(1765022151.848:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.4.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb2adb8f749 code=0x7ffc0000 [ 444.782194][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.795075][ T5834] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 444.807850][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.836196][ T5834] usb 6-1: config 0 descriptor?? [ 444.952151][ T5991] syz_tun (unregistering): left promiscuous mode [ 444.960742][T15596] netlink: 892 bytes leftover after parsing attributes in process `syz.4.3488'. [ 445.062822][T15593] netlink: 892 bytes leftover after parsing attributes in process `syz.4.3488'. [ 445.075028][ T5834] usbhid 6-1:0.0: can't add hid device: -71 [ 445.101410][ T5834] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 445.145157][T15595] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3489'. [ 445.154892][ T5834] usb 6-1: USB disconnect, device number 59 [ 445.360058][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.469960][T15613] netlink: 'syz.2.3494': attribute type 21 has an invalid length. [ 445.524760][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803069ac00: rx timeout, send abort [ 445.543648][ T9] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 445.600603][ T5834] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 445.710044][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 445.718539][ T9] usb 1-1: can't read configurations, error -61 [ 445.770569][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 445.787425][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.810063][ T5834] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 445.821849][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.845412][ T5834] usb 6-1: config 0 descriptor?? [ 445.880581][ T9] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 445.883105][ T5834] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 445.944107][ T5834] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 446.024776][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b3d5000: rx timeout, send abort [ 446.033166][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803069ac00: abort rx timeout. Force session deactivation [ 446.052476][ T52] Bluetooth: hci0: command tx timeout [ 446.095677][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 446.111556][ T9] usb 1-1: can't read configurations, error -61 [ 446.118782][ T9] usb usb1-port1: attempt power cycle [ 446.396781][ T5834] usb 6-1: USB disconnect, device number 60 [ 446.428478][ T5834] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 446.493969][ T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 446.535038][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b3d5000: abort rx timeout. Force session deactivation [ 446.558680][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 446.566521][ T9] usb 1-1: can't read configurations, error -61 [ 446.703120][ T9] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 446.754989][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 446.762829][ T9] usb 1-1: can't read configurations, error -61 [ 446.770145][ T9] usb usb1-port1: unable to enumerate USB device [ 447.152467][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.208687][T15613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3494'. [ 447.241407][T15571] chnl_net:caif_netlink_parms(): no params data found [ 447.500029][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.875906][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.130694][ T52] Bluetooth: hci0: command tx timeout [ 448.303612][T15571] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.336129][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.379793][T15571] bridge_slave_0: entered allmulticast mode [ 448.394697][T15571] bridge_slave_0: entered promiscuous mode [ 448.448009][T15571] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.481472][T15571] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.490174][T15571] bridge_slave_1: entered allmulticast mode [ 448.501217][T15571] bridge_slave_1: entered promiscuous mode [ 448.545744][T15667] netlink: 'syz.2.3509': attribute type 21 has an invalid length. [ 448.578508][T15667] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3509'. [ 448.700679][ T5834] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 448.797149][T15571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.829733][T15571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.867029][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.890621][ T5834] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 448.920438][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.936038][ T5834] usb 5-1: config 0 descriptor?? [ 449.015646][ T37] bridge_slave_1: left allmulticast mode [ 449.035943][ T37] bridge_slave_1: left promiscuous mode [ 449.068103][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.102235][ T37] bridge_slave_0: left allmulticast mode [ 449.119622][ T37] bridge_slave_0: left promiscuous mode [ 449.142629][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.163341][ T5834] usbhid 5-1:0.0: can't add hid device: -71 [ 449.172961][ T5834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 449.235587][ T5834] usb 5-1: USB disconnect, device number 61 [ 449.546278][ T37] ip6gretap0 (unregistering): left promiscuous mode [ 449.690803][ T5834] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 449.870719][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 449.879843][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.908483][ T5834] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 449.930143][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.002731][ T5834] usb 5-1: config 0 descriptor?? [ 450.028901][ T5834] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 450.064858][ T5834] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 450.074867][ T37] gretap0 (unregistering): left promiscuous mode [ 450.211357][ T52] Bluetooth: hci0: command tx timeout [ 450.529476][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.549673][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.564623][ T9] usb 5-1: USB disconnect, device number 62 [ 450.572717][ T37] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 450.581058][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 450.613864][ T37] bond0 (unregistering): Released all slaves [ 450.773950][T15571] team0: Port device team_slave_0 added [ 450.813293][ T37] tipc: Left network mode [ 450.847092][T15571] team0: Port device team_slave_1 added [ 451.072904][T15571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.121174][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.215980][T15571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.330802][T15571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.354680][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.436444][T15571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.586360][ T37] hsr_slave_0: left promiscuous mode [ 451.607875][ T37] hsr_slave_1: left promiscuous mode [ 451.630193][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.661158][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.695297][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.718167][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.771369][ T37] veth1_macvtap: left promiscuous mode [ 451.777241][ T37] veth0_macvtap: left promiscuous mode [ 451.784243][ T37] veth1_vlan: left promiscuous mode [ 451.789824][ T37] veth0_vlan: left promiscuous mode [ 452.293348][ T52] Bluetooth: hci0: command tx timeout [ 452.695518][ T37] team0 (unregistering): Port device team_slave_1 removed [ 452.736869][ T37] team0 (unregistering): Port device team_slave_0 removed [ 453.900448][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 454.083676][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.099597][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 454.123383][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.178868][ T10] usb 3-1: config 0 descriptor?? [ 454.421351][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 454.432996][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 454.470236][ T10] usb 3-1: USB disconnect, device number 57 [ 454.950489][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 455.120899][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 455.128182][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.149598][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 455.176266][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.203776][ T10] usb 3-1: config 0 descriptor?? [ 455.233287][ T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 455.266924][ T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 455.737465][ T5834] usb 3-1: USB disconnect, device number 58 [ 455.770956][ T5834] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 455.989657][T15754] syzkaller0: entered promiscuous mode [ 455.997463][T15754] syzkaller0: entered allmulticast mode [ 456.261555][T15571] hsr_slave_0: entered promiscuous mode [ 456.321724][T15571] hsr_slave_1: entered promiscuous mode [ 456.763153][ T37] IPVS: stop unused estimator thread 0... [ 458.402852][T15571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.534065][T15571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.676884][T15571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.764696][T15571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.790648][ T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 458.910932][T15882] tc_dump_action: action bad kind [ 458.974827][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.031649][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 459.064871][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.087391][ T24] usb 6-1: config 0 descriptor?? [ 459.333193][T15571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.338290][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 459.379094][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 459.420040][T15571] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.421878][ T24] usb 6-1: USB disconnect, device number 61 [ 459.525327][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.532593][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.597301][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.604576][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.877418][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 460.051055][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 460.071891][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.140653][ T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 460.200441][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.232540][ T24] usb 6-1: config 0 descriptor?? [ 460.267248][ T24] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 460.324343][ T24] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 460.468997][T15932] tc_dump_action: action bad kind [ 460.706673][T15571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.787960][ T24] usb 6-1: USB disconnect, device number 62 [ 460.833355][ T24] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 460.926471][T15571] veth0_vlan: entered promiscuous mode [ 460.933364][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 460.933409][ T31] audit: type=1326 audit(1765022168.318:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.4.3581" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2adb8f749 code=0x0 [ 461.008964][T15571] veth1_vlan: entered promiscuous mode [ 461.222879][T15571] veth0_macvtap: entered promiscuous mode [ 461.224091][T15958] io-wq is not configured for unbound workers [ 461.236023][T15571] veth1_macvtap: entered promiscuous mode [ 461.310124][T15571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.338944][T15571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.357054][ T140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.397912][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.439715][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.489885][ T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.678348][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.700654][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.814161][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.833414][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.581783][T15996] syzkaller0: entered promiscuous mode [ 462.594305][T15996] syzkaller0: entered allmulticast mode [ 462.606908][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3600'. [ 462.728224][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.739899][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 462.751997][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 462.760568][ T6105] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 462.774728][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 462.784075][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 462.960644][ T6105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.987533][ T6105] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 463.013523][ T6105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.053462][ T6105] usb 1-1: config 0 descriptor?? [ 463.271957][ T6105] usbhid 1-1:0.0: can't add hid device: -71 [ 463.290755][ T6105] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 463.305650][ T6105] usb 1-1: USB disconnect, device number 55 [ 463.763654][T16000] chnl_net:caif_netlink_parms(): no params data found [ 463.770457][ T6105] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 463.920488][ T6105] usb 1-1: Using ep0 maxpacket: 32 [ 463.941476][ T6105] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.986525][ T6105] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 464.028699][ T6105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.120897][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3613'. [ 464.137271][ T6105] usb 1-1: config 0 descriptor?? [ 464.175731][ T6105] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 464.235692][ T6105] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 464.425049][T16049] syzkaller0: entered promiscuous mode [ 464.461736][T16049] syzkaller0: entered allmulticast mode [ 464.471361][T16000] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.488827][T16000] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.503230][T16000] bridge_slave_0: entered allmulticast mode [ 464.513591][T16000] bridge_slave_0: entered promiscuous mode [ 464.526517][T16000] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.536753][T16000] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.547929][T16000] bridge_slave_1: entered allmulticast mode [ 464.576489][T16000] bridge_slave_1: entered promiscuous mode [ 464.687085][ T5950] usb 1-1: USB disconnect, device number 56 [ 464.713277][ T5950] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 464.851782][ T52] Bluetooth: hci5: command tx timeout [ 465.084836][T16000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.118394][T16000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.267215][T16000] team0: Port device team_slave_0 added [ 465.296103][T16000] team0: Port device team_slave_1 added [ 465.375724][T16078] syzkaller0: entered promiscuous mode [ 465.395777][T16078] syzkaller0: entered allmulticast mode [ 465.674167][T16000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.703342][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.759382][T16000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.786944][T16000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.830765][T16000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.932545][T16000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.197083][T16000] hsr_slave_0: entered promiscuous mode [ 466.222511][T16000] hsr_slave_1: entered promiscuous mode [ 466.231167][T16000] debugfs: 'hsr0' already exists in 'hsr' [ 466.237788][T16000] Cannot create hsr debugfs directory [ 466.360401][T16117] syzkaller0: entered promiscuous mode [ 466.373104][T16117] syzkaller0: entered allmulticast mode [ 466.426752][T16117] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 466.874488][T16000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.931419][ T52] Bluetooth: hci5: command tx timeout [ 467.169291][T16000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.408848][T16000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.444295][T16153] netlink: 'syz.3.3657': attribute type 21 has an invalid length. [ 467.497428][T16153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3657'. [ 467.586206][T16000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.694795][T16150] syzkaller0: entered promiscuous mode [ 467.700472][T16150] syzkaller0: entered allmulticast mode [ 469.011070][ T52] Bluetooth: hci5: command tx timeout [ 470.893051][T16216] syzkaller0: entered promiscuous mode [ 470.900822][T16216] syzkaller0: entered allmulticast mode [ 471.093779][ T52] Bluetooth: hci5: command tx timeout [ 472.704299][T16000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.018066][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3695'. [ 474.307029][T16290] syzkaller0: entered promiscuous mode [ 474.335185][T16290] syzkaller0: entered allmulticast mode [ 474.393846][T16000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.429048][T16000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.588769][T16000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.864102][T16336] syzkaller0: entered promiscuous mode [ 476.884502][T16336] syzkaller0: entered allmulticast mode [ 479.508126][T16000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.598470][T16000] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.639227][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.647528][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.710261][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.718585][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.343028][T16429] syzkaller0: entered promiscuous mode [ 480.348660][T16429] syzkaller0: entered allmulticast mode [ 480.716344][T16000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.752814][T16000] veth0_vlan: entered promiscuous mode [ 481.800581][T16000] veth1_vlan: entered promiscuous mode [ 481.942303][T16000] veth0_macvtap: entered promiscuous mode [ 481.979750][T16000] veth1_macvtap: entered promiscuous mode [ 482.078723][T16000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.186063][T16000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.254471][ T7707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.290482][ T1146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.323880][ T1146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.353451][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.703597][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.729630][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.786490][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e88000: rx timeout, send abort [ 482.810638][ T5950] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 482.833312][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.864953][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.960900][T16509] netlink: 'syz.0.3770': attribute type 4 has an invalid length. [ 482.992812][ T5950] usb 4-1: config 0 has no interfaces? [ 483.005047][ T5950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.032360][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.059307][ T5950] usb 4-1: config 0 descriptor?? [ 483.161287][T16511] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.3596'. [ 483.286654][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e8a000: rx timeout, send abort [ 483.297452][ T5950] usb 4-1: USB disconnect, device number 68 [ 483.297614][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e88000: abort rx timeout. Force session deactivation [ 483.532114][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3776'. [ 483.625772][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 483.640596][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 483.650090][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 483.663624][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 483.693215][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.796169][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e8a000: abort rx timeout. Force session deactivation [ 484.156172][T16535] syzkaller0: entered promiscuous mode [ 484.206056][T16535] syzkaller0: entered allmulticast mode [ 484.506008][ T5822] syz_tun (unregistering): left promiscuous mode [ 485.013673][T16521] chnl_net:caif_netlink_parms(): no params data found [ 485.260629][ T5950] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 485.262697][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e7c8400: rx timeout, send abort [ 485.436111][ T5950] usb 4-1: config 0 has no interfaces? [ 485.457488][ T5950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.507399][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.584100][ T5950] usb 4-1: config 0 descriptor?? [ 485.736398][ T52] Bluetooth: hci2: command tx timeout [ 485.762851][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f161800: rx timeout, send abort [ 485.778661][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e7c8400: abort rx timeout. Force session deactivation [ 485.815271][ T5950] usb 4-1: USB disconnect, device number 69 [ 486.173125][T16582] syzkaller0: entered promiscuous mode [ 486.178644][T16582] syzkaller0: entered allmulticast mode [ 486.220538][T16521] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.227788][T16521] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.261744][T16521] bridge_slave_0: entered allmulticast mode [ 486.272339][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f161800: abort rx timeout. Force session deactivation [ 486.291471][T16521] bridge_slave_0: entered promiscuous mode [ 489.282987][ T52] Bluetooth: hci2: command tx timeout [ 490.153337][ T5950] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 490.161104][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b6ac000: rx timeout, send abort [ 490.338371][T16521] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.360276][T16521] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.361853][ T5950] usb 1-1: config 0 has no interfaces? [ 490.375881][T16521] bridge_slave_1: entered allmulticast mode [ 490.392756][T16521] bridge_slave_1: entered promiscuous mode [ 490.400704][ T5950] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.441113][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.487887][ T5950] usb 1-1: config 0 descriptor?? [ 490.658944][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b6ae000: rx timeout, send abort [ 490.667293][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b6ac000: abort rx timeout. Force session deactivation [ 490.684019][T16521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.741277][ T24] usb 1-1: USB disconnect, device number 57 [ 490.745584][T16521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.996212][T16521] team0: Port device team_slave_0 added [ 491.067741][T16521] team0: Port device team_slave_1 added [ 491.105004][T16658] loop5: detected capacity change from 0 to 1024 [ 491.162906][ T1146] bridge_slave_1: left allmulticast mode [ 491.167642][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806b6ae000: abort rx timeout. Force session deactivation [ 491.176274][ T1146] bridge_slave_1: left promiscuous mode [ 491.222923][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.286235][ T1146] bridge_slave_0: left allmulticast mode [ 491.331124][ T52] Bluetooth: hci2: command tx timeout [ 491.337634][ T1146] bridge_slave_0: left promiscuous mode [ 491.360935][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.412730][T16666] loop3: detected capacity change from 0 to 128 [ 491.534130][T16666] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.562735][T16666] ext4 filesystem being mounted at /634/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 491.813913][ T1146] ip6gretap0 (unregistering): left promiscuous mode [ 492.439602][T16680] loop5: detected capacity change from 0 to 512 [ 492.630470][T16680] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 492.690453][T16680] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 492.797278][T16680] EXT4-fs (loop5): 1 truncate cleaned up [ 492.814629][ T5826] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 492.847332][T16680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.059126][T16694] loop3: detected capacity change from 0 to 128 [ 493.086899][T16694] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 493.422718][ T52] Bluetooth: hci2: command tx timeout [ 493.976305][ T1146] gretap0 (unregistering): left promiscuous mode [ 494.001864][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.071644][T16696] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 494.118025][T16696] File: /635/bus/file1 PID: 16696 Comm: syz.3.3830 [ 494.225810][T16696] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 494.276866][T16696] File: /635/bus/file1 PID: 16696 Comm: syz.3.3830 [ 494.331922][T16699] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 494.740862][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.774257][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.892104][ T1146] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 494.955645][ T1146] bond0 (unregistering): Released all slaves [ 495.139500][T16712] loop3: detected capacity change from 0 to 8 [ 495.194324][T16712] SQUASHFS error: lzo decompression failed, data probably corrupt [ 495.210502][T16712] SQUASHFS error: Failed to read block 0x91: -5 [ 495.241915][T16712] SQUASHFS error: Unable to read metadata cache entry [8f] [ 495.250621][T16673] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3828'. [ 495.258115][T16712] SQUASHFS error: Unable to read inode 0x11f [ 495.287898][T16521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.312328][T16521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.407407][T16521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.433739][T16717] loop3: detected capacity change from 0 to 128 [ 495.475936][T16717] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 495.526373][T16717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 495.527423][ T1146] tipc: Left network mode [ 495.607503][T16521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.618281][T16521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.649403][T16521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.614152][T16521] hsr_slave_0: entered promiscuous mode [ 496.631355][T16521] hsr_slave_1: entered promiscuous mode [ 496.643211][T16521] debugfs: 'hsr0' already exists in 'hsr' [ 496.648958][T16521] Cannot create hsr debugfs directory [ 496.711449][ T5950] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 496.722197][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880537b7c00: rx timeout, send abort [ 496.914177][ T5950] usb 1-1: config 0 has no interfaces? [ 496.919717][ T5950] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.943142][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.957039][ T5950] usb 1-1: config 0 descriptor?? [ 496.987515][ T1146] hsr_slave_0: left promiscuous mode [ 497.036151][ T1146] hsr_slave_1: left promiscuous mode [ 497.070665][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.098997][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.180203][ T5950] usb 1-1: USB disconnect, device number 58 [ 497.222334][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e7cb400: rx timeout, send abort [ 497.230705][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880537b7c00: abort rx timeout. Force session deactivation [ 497.247052][ T1146] team0 (unregistering): Port device vlan2 removed [ 497.731652][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e7cb400: abort rx timeout. Force session deactivation [ 497.862404][ T6105] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 498.030789][ T6105] usb 6-1: Using ep0 maxpacket: 16 [ 498.042507][ T6105] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 498.066134][ T6105] usb 6-1: config 0 has no interface number 0 [ 498.082200][ T6105] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 498.122307][ T6105] usb 6-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 498.142699][ T6105] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 498.163951][ T6105] usb 6-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 498.175338][ T6105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.187447][ T6105] usb 6-1: Product: syz [ 498.192366][ T6105] usb 6-1: Manufacturer: syz [ 498.199200][ T6105] usb 6-1: SerialNumber: syz [ 498.217365][ T6105] usb 6-1: config 0 descriptor?? [ 498.229877][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 498.234893][T16762] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 498.253474][T16762] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 498.268493][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 498.334651][ T5950] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 498.490426][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 498.497512][ T5950] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 498.510400][ T5950] usb 1-1: config 0 has no interface number 0 [ 498.519880][ T5950] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 498.529243][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.540918][ T5950] usb 1-1: Product: syz [ 498.545096][ T5950] usb 1-1: Manufacturer: syz [ 498.549715][ T5950] usb 1-1: SerialNumber: syz [ 498.559569][ T5950] usb 1-1: config 0 descriptor?? [ 498.775369][ T5950] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 498.795896][ T5950] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 498.833693][ T5950] uvcvideo 1-1:0.31: Failed to create links for entity 5 [ 498.847189][ T5950] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 498.881365][ T5950] usb 1-1: USB disconnect, device number 59 [ 498.907721][T16633] udevd[16633]: setting mode of /dev/media28 to 020660 failed: No such file or directory [ 498.933458][T16753] tipc: Enabling of bearer rejected, failed to enable media [ 498.945356][T16633] udevd[16633]: setting owner of /dev/media28 to uid=0, gid=28 failed: No such file or directory [ 499.658318][ T1146] IPVS: stop unused estimator thread 0... [ 500.180424][ T5950] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 500.192124][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ae68000: rx timeout, send abort [ 500.248794][T16822] tipc: Enabling of bearer rejected, failed to enable media [ 500.317857][T16822] syzkaller0: entered promiscuous mode [ 500.341840][T16822] syzkaller0: entered allmulticast mode [ 500.361490][ T5950] usb 1-1: config 0 has no interfaces? [ 500.374557][ T5950] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.408950][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.444350][ T5950] usb 1-1: config 0 descriptor?? [ 500.648049][ T5950] usb 6-1: USB disconnect, device number 63 [ 500.681127][ T5828] usb 1-1: USB disconnect, device number 60 [ 500.690746][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aafb000: rx timeout, send abort [ 500.700636][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806ae68000: abort rx timeout. Force session deactivation [ 500.776769][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.794798][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.839171][T16521] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 500.926807][T16521] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 501.119184][T16521] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 501.198939][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806aafb000: abort rx timeout. Force session deactivation [ 501.242689][T16521] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 501.446159][T16843] loop4: detected capacity change from 0 to 1024 [ 502.618313][T16521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.906910][T16521] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.282935][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.290147][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.385106][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.392374][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.613899][T16521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.154987][T16896] 9pnet_fd: Insufficient options for proto=fd [ 505.941939][T16888] loop1: detected capacity change from 0 to 8192 [ 506.247837][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805301e400: rx timeout, send abort [ 506.256342][ T10] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 506.453268][ T10] usb 5-1: config 0 has no interfaces? [ 506.464668][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 506.502225][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.563908][ T10] usb 5-1: config 0 descriptor?? [ 506.747951][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053634400: rx timeout, send abort [ 506.756313][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805301e400: abort rx timeout. Force session deactivation [ 506.836358][ T5950] usb 5-1: USB disconnect, device number 63 [ 507.256250][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053634400: abort rx timeout. Force session deactivation [ 507.622652][T16924] bpf: Bad value for 'mode' [ 508.311873][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3897'. [ 508.421824][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3897'. [ 509.567204][T16521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.577535][T16957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3902'. [ 509.892281][T16521] veth0_vlan: entered promiscuous mode [ 510.010913][T16521] veth1_vlan: entered promiscuous mode [ 512.704621][T16521] veth0_macvtap: entered promiscuous mode [ 512.778321][T16521] veth1_macvtap: entered promiscuous mode [ 512.963628][T16521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.998642][T16521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.013121][T16628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.137849][T16628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.541134][T16628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.602230][T16628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.630543][ T5950] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 513.829924][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 513.880224][ T5950] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 513.946004][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.048543][ T5950] usb 5-1: config 0 descriptor?? [ 514.098124][T16977] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 514.624969][ T5950] elan 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 514.665540][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.750510][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.762934][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.792826][ T5995] usb 5-1: USB disconnect, device number 64 [ 514.831468][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.017527][T16992] fido_id[16992]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 515.626103][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053a7e000: rx timeout, send abort [ 515.643382][ T5950] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 515.841631][ T5950] usb 4-1: config 0 has no interfaces? [ 515.858676][ T5950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 515.908923][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.126237][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028d29400: rx timeout, send abort [ 516.135539][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053a7e000: abort rx timeout. Force session deactivation [ 516.739153][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028d29400: abort rx timeout. Force session deactivation [ 518.253507][ T5950] usb 4-1: config 0 descriptor?? [ 518.294699][T17008] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3913'. [ 518.712983][ T5950] usb 4-1: can't set config #0, error -71 [ 518.751797][ T5950] usb 4-1: USB disconnect, device number 70 [ 519.212093][T17020] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3917'. [ 519.344224][T17022] loop4: detected capacity change from 0 to 128 [ 519.420608][T17022] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 519.456281][T17024] loop0: detected capacity change from 0 to 128 [ 519.723258][ T31] audit: type=1800 audit(1765022227.088:76): pid=17022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3918" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 519.776717][T17022] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 519.831935][T17027] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.868604][T17027] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.878273][T17027] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.887847][T17027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.897241][T17027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 521.050843][ T110] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 521.295273][ T110] usb 1-1: config 0 has an invalid interface number: 129 but max is 3 [ 521.321104][ T110] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 521.421964][ T110] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 521.470356][ T110] usb 1-1: config 0 has no interface number 0 [ 521.530581][ T110] usb 1-1: config 0 interface 129 altsetting 12 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 521.592538][ T110] usb 1-1: config 0 interface 129 altsetting 12 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 521.634132][ T110] usb 1-1: config 0 interface 129 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 521.730934][ T110] usb 1-1: config 0 interface 129 altsetting 12 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 521.829424][ T110] usb 1-1: config 0 interface 129 has no altsetting 0 [ 521.890132][ T110] usb 1-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=af.39 [ 521.907746][T17053] loop4: detected capacity change from 0 to 512 [ 521.944648][ T110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.980995][T17027] Bluetooth: hci1: command tx timeout [ 521.996632][T17053] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 522.021902][ T110] usb 1-1: Product: syz [ 522.026103][ T110] usb 1-1: Manufacturer: syz [ 522.097008][ T110] usb 1-1: SerialNumber: syz [ 522.118993][ T110] usb 1-1: config 0 descriptor?? [ 522.156499][T17053] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 522.280643][T17053] EXT4-fs (loop4): 1 truncate cleaned up [ 522.290049][T17053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.554898][ T6426] bridge_slave_1: left allmulticast mode [ 522.714041][ T6426] bridge_slave_1: left promiscuous mode [ 522.738910][T16000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.795498][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.051301][T17027] Bluetooth: hci1: command tx timeout [ 524.223662][ T6426] bridge_slave_0: left allmulticast mode [ 524.230160][ T6426] bridge_slave_0: left promiscuous mode [ 524.306896][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.480415][ T9] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 524.732451][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.775266][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 524.788145][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.807716][ T9] usb 5-1: config 0 descriptor?? [ 525.209664][ T110] cdc_acm 1-1:0.129: skipping garbage [ 525.239244][ T110] cdc_acm 1-1:0.129: skipping garbage [ 525.301657][ T110] usb 1-1: USB disconnect, device number 61 [ 525.457939][ T6426] ip6gretap0 (unregistering): left promiscuous mode [ 526.130750][T17027] Bluetooth: hci1: command tx timeout [ 526.790633][ T6426] gretap0 (unregistering): left promiscuous mode [ 527.901956][T17104] loop3: detected capacity change from 0 to 8 [ 528.027778][T17104] SQUASHFS error: Failed to read block 0x4de: -5 [ 528.108759][T17104] SQUASHFS error: Failed to read block 0x4de: -5 [ 528.166287][ T31] audit: type=1800 audit(1765022235.568:77): pid=17104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3941" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 528.212028][T17027] Bluetooth: hci1: command tx timeout [ 529.923363][T17113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3944'. [ 529.932705][T17113] IPv6: NLM_F_CREATE should be specified when creating new route [ 531.522928][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 531.528983][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 531.891996][ T6426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.977226][ T6426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.001570][ T6426] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 532.023791][ T6426] bond0 (unregistering): Released all slaves [ 532.620601][T16629] usb 5-1: USB disconnect, device number 65 [ 532.788500][T17125] loop3: detected capacity change from 0 to 8 [ 533.518583][T17127] loop4: detected capacity change from 0 to 512 [ 533.606725][T17127] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 533.797052][ T6426] tipc: Left network mode [ 534.232851][T17025] chnl_net:caif_netlink_parms(): no params data found [ 534.643942][T17136] tipc: Started in network mode [ 534.663790][T17136] tipc: Node identity , cluster identity 4711 [ 534.693220][T17136] tipc: Failed to obtain node identity [ 534.714485][T17136] tipc: Enabling of bearer rejected, failed to enable media [ 534.918502][T17137] syzkaller0: entered promiscuous mode [ 534.935167][T17137] syzkaller0: entered allmulticast mode [ 537.152075][T17161] loop0: detected capacity change from 0 to 8 [ 537.203768][T17161] SQUASHFS error: lzo decompression failed, data probably corrupt [ 537.231100][T17161] SQUASHFS error: Failed to read block 0x91: -5 [ 537.238386][T17161] SQUASHFS error: Unable to read metadata cache entry [8f] [ 537.256414][T17161] SQUASHFS error: Unable to read inode 0x11f [ 537.388083][T17161] loop0: detected capacity change from 0 to 1024 [ 537.418760][T17161] EXT4-fs: Ignoring removed orlov option [ 539.820046][T17161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.890851][T17170] loop1: detected capacity change from 0 to 512 [ 542.752006][T17161] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 542.822453][T17170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.920790][T17170] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 543.096598][T15571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.560670][T17115] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 543.751752][T17115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.781323][T17115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.811819][T17115] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.847747][T17115] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.870474][T17115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.921456][T17115] usb 2-1: config 0 descriptor?? [ 545.759969][T17115] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 545.784431][T17191] loop2: detected capacity change from 0 to 256 [ 545.817531][T17115] usb 2-1: USB disconnect, device number 72 [ 545.941809][T17191] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 545.993930][T17192] fido_id[17192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 546.312089][T17195] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 546.340569][T17195] exFAT-fs (loop2): Filesystem has been set read-only [ 547.052284][T17201] loop1: detected capacity change from 0 to 512 [ 547.123395][T17201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.137215][T17201] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.000390][ T31] audit: type=1800 audit(1765022255.388:78): pid=17211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3974" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 548.091445][ T31] audit: type=1800 audit(1765022255.388:79): pid=17212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3974" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 548.195133][T15571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.777872][T17025] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.797101][T17025] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.825244][T17229] loop2: detected capacity change from 0 to 128 [ 548.825317][T17025] bridge_slave_0: entered allmulticast mode [ 548.897199][T17025] bridge_slave_0: entered promiscuous mode [ 548.921995][T17229] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.972011][T17025] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.009672][T17025] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.032636][T17229] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 549.060975][T17025] bridge_slave_1: entered allmulticast mode [ 549.069238][T17025] bridge_slave_1: entered promiscuous mode [ 550.442654][T17234] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 551.686085][ T6426] hsr_slave_0: left promiscuous mode [ 551.710696][ T6426] hsr_slave_1: left promiscuous mode [ 551.730503][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.760761][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.789015][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.840408][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.902868][ T6426] veth1_macvtap: left promiscuous mode [ 551.909350][ T6426] veth0_macvtap: left promiscuous mode [ 551.930931][ T6426] veth1_vlan: left promiscuous mode [ 551.936953][ T6426] veth0_vlan: left promiscuous mode [ 551.969959][T17240] Bluetooth: MGMT ver 1.23 [ 552.318326][T17249] loop1: detected capacity change from 0 to 512 [ 552.419218][T17249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.499232][T17249] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.634970][T17249] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3985: corrupted xattr block 33: invalid header [ 552.717724][T17249] EXT4-fs error (device loop1): ext4_get_inode_usage:888: inode #15: comm syz.1.3985: corrupted xattr block 33: invalid header [ 552.798809][T17249] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3985: corrupted xattr block 33: invalid header [ 553.618456][T15571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.256795][T16521] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 554.302476][ T6426] team0 (unregistering): Port device team_slave_1 removed [ 554.417775][T17266] loop1: detected capacity change from 0 to 512 [ 554.442859][T17266] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 554.465842][ T6426] team0 (unregistering): Port device team_slave_0 removed [ 554.784408][T17270] loop2: detected capacity change from 0 to 256 [ 554.816163][T17270] exfat: Deprecated parameter 'utf8' [ 554.856541][T17270] exfat: Deprecated parameter 'namecase' [ 554.872532][T17270] exfat: Deprecated parameter 'utf8' [ 554.918952][T17270] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x369a6523, utbl_chksum : 0xe619d30d) [ 554.986524][T17270] exFAT-fs (loop2): start_clu is invalid cluster(0x0) [ 556.603902][T17242] syzkaller0: entered promiscuous mode [ 556.611064][T17242] syzkaller0: entered allmulticast mode [ 556.678836][T17280] tipc: Enabling of bearer rejected, failed to enable media [ 556.691114][T17013] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 556.726045][T17025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.883547][T17013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.908301][T17013] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 556.928948][T17013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.949695][T17013] usb 3-1: config 0 descriptor?? [ 557.639945][T17317] ALSA: seq fatal error: cannot create timer (-22) [ 559.008277][ T31] audit: type=1326 audit(1765022265.058:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17313 comm="syz.1.3996" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f391958f749 code=0x0 [ 560.109421][T17013] usbhid 3-1:0.0: can't add hid device: -71 [ 560.121458][T17325] loop3: detected capacity change from 0 to 128 [ 560.153603][T17013] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 560.484577][T17013] usb 3-1: USB disconnect, device number 59 [ 561.110700][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 561.703120][T17333] loop3: detected capacity change from 0 to 8 [ 561.831892][T17336] SQUASHFS error: Unable to read inode 0x24 [ 562.335535][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.370975][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.181717][T17352] loop1: detected capacity change from 0 to 128 [ 565.030514][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.030514][ T6553] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 565.044513][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.044513][ T6553] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 565.059597][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.059597][ T6553] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 565.075937][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.075937][ T6553] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 565.089676][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.089676][ T6553] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 565.112020][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.112020][ T6553] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 565.125916][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.125916][ T6553] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 565.139993][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.139993][ T6553] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 565.153875][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.153875][ T6553] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 565.167899][ T6553] kworker/u8:18: attempt to access beyond end of device [ 565.167899][ T6553] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 565.299550][T17387] loop2: detected capacity change from 0 to 7 [ 565.354097][T16782] Dev loop2: unable to read RDB block 7 [ 565.364551][T16782] loop2: unable to read partition table [ 565.371245][T16782] loop2: partition table beyond EOD, truncated [ 565.436342][T17387] Dev loop2: unable to read RDB block 7 [ 565.442213][T17387] loop2: unable to read partition table [ 565.457757][T17387] loop2: partition table beyond EOD, truncated [ 565.472040][T17387] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 565.748399][T17394] loop1: detected capacity change from 0 to 8 [ 565.985333][T17398] loop1: detected capacity change from 0 to 512 [ 566.025932][T17398] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.4016: inode has both inline data and extents flags [ 566.098804][T17398] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4016: couldn't read orphan inode 15 (err -117) [ 566.125478][T17398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.174739][T17402] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 566.263023][T15571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.590903][T17025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.648163][T17364] tipc: Enabling of bearer rejected, failed to enable media [ 566.673742][T17357] syzkaller0: entered promiscuous mode [ 566.683459][T17357] syzkaller0: entered allmulticast mode [ 567.006977][T17025] team0: Port device team_slave_0 added [ 567.074861][T17025] team0: Port device team_slave_1 added [ 567.301420][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 567.309616][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 567.319587][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 567.329832][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 567.347077][T17418] xt_TPROXY: Can be used only with -p tcp or -p udp [ 567.365837][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 567.439496][T17025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.473316][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.579212][T17423] loop3: detected capacity change from 0 to 512 [ 567.597605][T17025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.611036][T17423] EXT4-fs: Ignoring removed bh option [ 567.627806][T17423] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 567.654088][T17025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.678139][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.728692][T17423] EXT4-fs (loop3): 1 truncate cleaned up [ 567.737115][T17423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.749719][T17025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.808505][ T6426] IPVS: stop unused estimator thread 0... [ 570.753828][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 570.761827][T17027] Bluetooth: hci3: command tx timeout [ 571.034454][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.145621][T17025] hsr_slave_0: entered promiscuous mode [ 571.174351][T17025] hsr_slave_1: entered promiscuous mode [ 571.215734][T17025] debugfs: 'hsr0' already exists in 'hsr' [ 571.259058][T17025] Cannot create hsr debugfs directory [ 571.991637][T17448] tipc: Enabling of bearer rejected, failed to enable media [ 572.273584][ T6027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.354696][T17450] syzkaller0: entered promiscuous mode [ 572.360212][T17450] syzkaller0: entered allmulticast mode [ 572.387130][T17467] loop3: detected capacity change from 0 to 1024 [ 572.606789][T17469] loop0: detected capacity change from 0 to 128 [ 572.633042][T17469] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 572.660972][T17469] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 572.963302][ T5844] Bluetooth: hci3: command tx timeout [ 574.464685][T15251] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 574.735719][ T6027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.011172][T17419] Bluetooth: hci3: command tx timeout [ 575.293848][ T6027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.344308][T17500] loop2: detected capacity change from 0 to 8 [ 575.373959][T17500] SQUASHFS error: Unable to read inode 0x24 [ 577.030443][T17432] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 577.090493][T17419] Bluetooth: hci3: command 0x0419 tx timeout [ 577.229343][T17432] usb 2-1: config 0 has an invalid interface number: 129 but max is 3 [ 577.247501][T17432] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 577.259774][T17432] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 577.270222][T17432] usb 2-1: config 0 has no interface number 0 [ 577.277361][T17432] usb 2-1: config 0 interface 129 altsetting 12 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 577.291259][T17432] usb 2-1: config 0 interface 129 altsetting 12 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 577.304215][T17432] usb 2-1: config 0 interface 129 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 577.330694][T17432] usb 2-1: config 0 interface 129 altsetting 12 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 577.370466][T17432] usb 2-1: config 0 interface 129 has no altsetting 0 [ 577.393437][T17432] usb 2-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=af.39 [ 577.410608][T17432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.430436][T17432] usb 2-1: Product: syz [ 577.435348][T17432] usb 2-1: Manufacturer: syz [ 577.446828][T17432] usb 2-1: SerialNumber: syz [ 577.459575][T17432] usb 2-1: config 0 descriptor?? [ 578.008122][ T6027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.161952][T17519] tipc: Enabling of bearer rejected, failed to enable media [ 578.188243][T17540] loop3: detected capacity change from 0 to 8 [ 578.255421][T17540] SQUASHFS error: Unable to read inode 0x24 [ 579.170853][ T5844] Bluetooth: hci3: command 0x0419 tx timeout [ 579.259997][T17432] cdc_acm 2-1:0.129: skipping garbage [ 579.272553][T17432] cdc_acm 2-1:0.129: skipping garbage [ 579.302285][T17432] usb 2-1: USB disconnect, device number 73 [ 579.697013][T17419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 579.709985][T17419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 579.721332][T17419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.731202][T17419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.740494][T17419] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 580.001066][T17416] chnl_net:caif_netlink_parms(): no params data found [ 580.165807][T17581] loop1: detected capacity change from 0 to 8 [ 580.237744][T17581] SQUASHFS error: Unable to read inode 0x24 [ 580.948052][T17597] loop0: detected capacity change from 0 to 512 [ 581.001794][T17597] EXT4-fs (loop0): 1 truncate cleaned up [ 581.021080][T17597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.066207][T17416] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.121068][T17416] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.159941][T17416] bridge_slave_0: entered allmulticast mode [ 581.221722][T17416] bridge_slave_0: entered promiscuous mode [ 581.394588][T17416] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.425502][T17416] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.578421][T17416] bridge_slave_1: entered allmulticast mode [ 581.596031][T17416] bridge_slave_1: entered promiscuous mode [ 581.674933][T17617] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4069: bg 0: block 465: padding at end of block bitmap is not set [ 581.700445][ T5942] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 581.731038][T17617] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4069: invalid indirect mapped block 234881024 (level 0) [ 581.811891][T17419] Bluetooth: hci5: command tx timeout [ 582.359743][ T31] audit: type=1800 audit(1765022289.068:81): pid=17617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4069" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 582.434746][T15251] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.502049][ T5942] usb 4-1: config 0 has an invalid interface number: 129 but max is 3 [ 582.550951][ T5942] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 582.607372][ T5942] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 582.626457][T17623] loop2: detected capacity change from 0 to 8 [ 582.668910][ T5942] usb 4-1: config 0 has no interface number 0 [ 582.676495][T17623] SQUASHFS error: Unable to read inode 0x24 [ 582.768936][ T5942] usb 4-1: config 0 interface 129 altsetting 12 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 582.832687][ T5942] usb 4-1: config 0 interface 129 altsetting 12 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 582.859269][T17416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.902831][ T5942] usb 4-1: config 0 interface 129 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 582.940191][T17416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.950820][ T5942] usb 4-1: config 0 interface 129 altsetting 12 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 582.950862][ T5942] usb 4-1: config 0 interface 129 has no altsetting 0 [ 583.048249][T17626] netlink: 'syz.0.4076': attribute type 12 has an invalid length. [ 583.081390][ T5942] usb 4-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=af.39 [ 583.095593][T17626] netlink: 'syz.0.4076': attribute type 29 has an invalid length. [ 583.112667][T17626] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4076'. [ 583.121047][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.131355][ T5942] usb 4-1: Product: syz [ 583.135627][ T5942] usb 4-1: Manufacturer: syz [ 583.144820][ T5942] usb 4-1: SerialNumber: syz [ 583.178523][ T5942] usb 4-1: config 0 descriptor?? [ 583.751930][T17416] team0: Port device team_slave_0 added [ 583.816926][T17641] loop0: detected capacity change from 0 to 128 [ 583.890458][T17419] Bluetooth: hci5: command tx timeout [ 583.927975][T17416] team0: Port device team_slave_1 added [ 584.023679][ T6027] bridge_slave_1: left allmulticast mode [ 584.025089][T17643] ------------[ cut here ]------------ [ 584.029376][ T6027] bridge_slave_1: left promiscuous mode [ 584.029642][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.053959][T17643] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#1: syz.2.4084/17643 [ 584.064162][T17643] Modules linked in: [ 584.069053][T17643] CPU: 1 UID: 0 PID: 17643 Comm: syz.2.4084 Not tainted syzkaller #0 PREEMPT(full) [ 584.079932][T17643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.092839][T17643] RIP: 0010:path_noexec+0x1af/0x200 [ 584.098871][T17643] Code: 02 31 ff 48 89 de e8 c0 75 86 ff d1 eb eb 07 e8 d7 70 86 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 33 62 d5 fe cc e8 c2 70 86 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 584.121492][T17643] RSP: 0018:ffffc9000353fbd8 EFLAGS: 00010287 [ 584.128493][T17643] RAX: ffffffff823adede RBX: ffff8880217ff3c0 RCX: 0000000000080000 [ 584.137781][T17643] RDX: ffffc90010639000 RSI: 000000000000006b RDI: 000000000000006c [ 584.147529][T17643] RBP: 0000000000080000 R08: ffff888025b81e80 R09: 0000000000000003 [ 584.157237][T17643] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 584.166423][T17643] R13: 1ffff920006a7f90 R14: 0000000000000000 R15: dffffc0000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 584.175619][T17643] FS: 00007f9ebcb506c0(0000) GS:ffff888126187000(0000) knlGS:0000000000000000 [ 584.185984][T17643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.193607][T17643] CR2: 0000001b2d023ffc CR3: 0000000083d71000 CR4: 0000000000350ef0 [ 584.203379][T17643] Call Trace: [ 584.207224][T17643] [ 584.210640][T17643] do_mmap+0xa43/0x10d0 [ 584.215493][T17643] ? __pfx_do_mmap+0x10/0x10 [ 584.220826][T17643] ? down_write_killable+0x178/0x230 [ 584.226874][T17643] ? __pfx_down_write_killable+0x10/0x10 [ 584.233416][T17643] ? common_file_perm+0x1b5/0x220 [ 584.239349][T17643] vm_mmap_pgoff+0x2a6/0x4d0 [ 584.244830][T17643] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 584.251223][T17643] ? __fget_files+0x2a/0x420 [ 584.256803][T17643] ? __fget_files+0x2a/0x420 [ 584.263071][T17643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.269562][T17643] ? __fget_files+0x2a/0x420 [ 584.275275][T17643] ksys_mmap_pgoff+0x51f/0x760 [ 584.280858][T17643] do_syscall_64+0xfa/0xf80 [ 584.286052][T17643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.292950][T17643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.299321][T17643] ? exc_page_fault+0xab/0x100 [ 584.304931][T17643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.311747][T17643] RIP: 0033:0x7f9ebbd8f749 [ 584.316748][T17643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.338974][T17643] RSP: 002b:00007f9ebcb50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 584.348557][T17643] RAX: ffffffffffffffda RBX: 00007f9ebbfe5fa0 RCX: 00007f9ebbd8f749 [ 584.358292][T17643] RDX: 0000000003000007 RSI: 0000000000002000 RDI: 0000200000ffe000 [ 584.367388][T17643] RBP: 00007f9ebbe13f91 R08: 0000000000000005 R09: 0000000000000000 [ 584.376708][T17643] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 584.385911][T17643] R13: 00007f9ebbfe6038 R14: 00007f9ebbfe5fa0 R15: 00007ffe9376cce8 [ 584.395107][T17643] [ 584.398560][T17643] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 584.405835][T17643] CPU: 1 UID: 0 PID: 17643 Comm: syz.2.4084 Not tainted syzkaller #0 PREEMPT(full) [ 584.415208][T17643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.425269][T17643] Call Trace: [ 584.428558][T17643] [ 584.431487][T17643] dump_stack_lvl+0x99/0x250 [ 584.436079][T17643] ? __asan_memcpy+0x40/0x70 [ 584.440682][T17643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.445882][T17643] ? __pfx__printk+0x10/0x10 [ 584.450488][T17643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.456136][T17643] vpanic+0x237/0x6d0 [ 584.460119][T17643] ? __pfx_vpanic+0x10/0x10 [ 584.464632][T17643] ? is_bpf_text_address+0x292/0x2b0 [ 584.469939][T17643] ? is_bpf_text_address+0x26/0x2b0 [ 584.475159][T17643] panic+0xb9/0xc0 [ 584.478885][T17643] ? __pfx_panic+0x10/0x10 [ 584.483326][T17643] __warn+0x317/0x4b0 [ 584.487316][T17643] ? path_noexec+0x1af/0x200 [ 584.491927][T17643] ? path_noexec+0x1af/0x200 [ 584.496532][T17643] __report_bug+0x288/0x500 [ 584.501043][T17643] ? path_noexec+0x1af/0x200 [ 584.505650][T17643] ? __pfx___report_bug+0x10/0x10 [ 584.510684][T17643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.516340][T17643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.521978][T17643] ? arch_get_unmapped_area_topdown+0x251/0xbc0 [ 584.528229][T17643] ? path_noexec+0x1af/0x200 [ 584.532830][T17643] report_bug+0x16a/0x220 [ 584.537187][T17643] ? path_noexec+0x1af/0x200 [ 584.541792][T17643] ? path_noexec+0x1b1/0x200 [ 584.546389][T17643] handle_bug+0x98/0x200 [ 584.550637][T17643] exc_invalid_op+0x1a/0x50 [ 584.555146][T17643] asm_exc_invalid_op+0x1a/0x20 [ 584.559995][T17643] RIP: 0010:path_noexec+0x1af/0x200 [ 584.565196][T17643] Code: 02 31 ff 48 89 de e8 c0 75 86 ff d1 eb eb 07 e8 d7 70 86 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 33 62 d5 fe cc e8 c2 70 86 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 584.584806][T17643] RSP: 0018:ffffc9000353fbd8 EFLAGS: 00010287 [ 584.590871][T17643] RAX: ffffffff823adede RBX: ffff8880217ff3c0 RCX: 0000000000080000 [ 584.598849][T17643] RDX: ffffc90010639000 RSI: 000000000000006b RDI: 000000000000006c [ 584.606814][T17643] RBP: 0000000000080000 R08: ffff888025b81e80 R09: 0000000000000003 [ 584.614786][T17643] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000011 [ 584.622752][T17643] R13: 1ffff920006a7f90 R14: 0000000000000000 R15: dffffc0000000000 [ 584.630729][T17643] ? path_noexec+0x1ae/0x200 [ 584.635354][T17643] ? path_noexec+0x1ae/0x200 [ 584.639974][T17643] do_mmap+0xa43/0x10d0 [ 584.644154][T17643] ? __pfx_do_mmap+0x10/0x10 [ 584.648746][T17643] ? down_write_killable+0x178/0x230 [ 584.654031][T17643] ? __pfx_down_write_killable+0x10/0x10 [ 584.659665][T17643] ? common_file_perm+0x1b5/0x220 [ 584.664709][T17643] vm_mmap_pgoff+0x2a6/0x4d0 [ 584.669307][T17643] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 584.674426][T17643] ? __fget_files+0x2a/0x420 [ 584.679018][T17643] ? __fget_files+0x2a/0x420 [ 584.683599][T17643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.689236][T17643] ? __fget_files+0x2a/0x420 [ 584.693850][T17643] ksys_mmap_pgoff+0x51f/0x760 [ 584.698622][T17643] do_syscall_64+0xfa/0xf80 [ 584.703130][T17643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.709196][T17643] ? srso_alias_return_thunk+0x5/0xfbef5 [ 584.714835][T17643] ? exc_page_fault+0xab/0x100 [ 584.719607][T17643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.725496][T17643] RIP: 0033:0x7f9ebbd8f749 [ 584.729919][T17643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.749528][T17643] RSP: 002b:00007f9ebcb50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 584.757940][T17643] RAX: ffffffffffffffda RBX: 00007f9ebbfe5fa0 RCX: 00007f9ebbd8f749 [ 584.765910][T17643] RDX: 0000000003000007 RSI: 0000000000002000 RDI: 0000200000ffe000 [ 584.773881][T17643] RBP: 00007f9ebbe13f91 R08: 0000000000000005 R09: 0000000000000000 [ 584.781853][T17643] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 584.789858][T17643] R13: 00007f9ebbfe6038 R14: 00007f9ebbfe5fa0 R15: 00007ffe9376cce8 [ 584.797848][T17643] [ 584.801099][T17643] Kernel Offset: disabled [ 584.805420][T17643] Rebooting in 86400 seconds..