last executing test programs: 18m52.862966502s ago: executing program 1 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000003640)='kfree\x00', r1, 0x0, 0x400}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 18m52.323935515s ago: executing program 1 (id=120): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010866f426072a", 0x2a}], 0x1) read(0xffffffffffffffff, &(0x7f0000001400)=""/4076, 0xfffffeea) 18m52.14837479s ago: executing program 1 (id=123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 18m51.688437477s ago: executing program 1 (id=128): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 18m50.375936583s ago: executing program 1 (id=133): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x161400, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x618}}, 0x8002) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./bus\x00', 0xc9028ba210c11f0b) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000400)={[{@data_ordered}, {@nobh}, {@debug}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}]}, 0x67, 0x53c, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40), 0x10, 0xfffffff7}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 18m49.904745101s ago: executing program 1 (id=137): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000180)={0x23, 0x3, 0x2, 0xca}, 0x10) 18m49.564403308s ago: executing program 32 (id=137): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000180)={0x23, 0x3, 0x2, 0xca}, 0x10) 18m34.719167036s ago: executing program 4 (id=138): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3000}]) 18m32.856362656s ago: executing program 4 (id=215): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 18m31.125142826s ago: executing program 4 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='qdisc_reset\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 18m29.934580841s ago: executing program 33 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='qdisc_reset\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 9m49.738997042s ago: executing program 5 (id=3012): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0xe6) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) 9m48.111626634s ago: executing program 5 (id=3021): openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000dc0), 0x101, 0x800) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = getpgid(0x0) kcmp(r2, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000002300)=ANY=[], 0x9) 9m44.772462187s ago: executing program 5 (id=3039): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m44.274771928s ago: executing program 34 (id=3039): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.901776612s ago: executing program 6 (id=5779): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) msync(&(0x7f0000b25000/0x3000)=nil, 0x3000, 0x6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xf, 0x23, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x62ee114b, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xb5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x43, &(0x7f00000003c0)=""/67, 0x41000, 0x20, '\x00', 0x0, @fallback=0x6, r6, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xb, 0x0, 0x4}, 0x10, 0x0, r7, 0x0, &(0x7f0000000900)=[r4, r4], 0x0, 0x10, 0x7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfa, 0x0, 0x4}]}, 0x10) 8.656397003s ago: executing program 6 (id=5781): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000009c0)={[{}, {@inlinecrypt}]}, 0x0, 0x52e, &(0x7f0000000f00)="$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") 8.252449417s ago: executing program 2 (id=5786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.222776629s ago: executing program 2 (id=5787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="aafe", 0x2, 0xd7d3bd94034eb8c7, &(0x7f0000000080)={0x11, 0x19, r3, 0x1, 0x2, 0x6, @dev}, 0x14) 8.095549429s ago: executing program 6 (id=5788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) 7.888343236s ago: executing program 2 (id=5789): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="28000000100001000000", @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 7.244296329s ago: executing program 0 (id=5792): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/igmp6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cf", 0x69}, 0x1, 0x0, 0x0, 0x20048000}, 0x810) socket(0x400000000010, 0x3, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x80ffffd, 0x0, 0x1, 0xa, 0x7f, 0x7}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 7.022220177s ago: executing program 6 (id=5793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x1, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 6.680935605s ago: executing program 6 (id=5794): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd63"], 0x280) 6.251649449s ago: executing program 0 (id=5795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.112152251s ago: executing program 0 (id=5797): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x5, 0x4, 0x5, 0x20, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x1, 0x8}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@private=0xa010101, 0x15, 0x0, 0x10}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_sec_ctx={0x16, 0x18, 0x9, 0x8, 0xa5, "51530b3c9e62e6d138d0ce40d6f175a902e1f14c7e52f1450f6158e7efa76c97fcf45d3d82401f6dac49425e6d49bd791c5a980033ae6d2df2e77015f495b2b623a68fb4e48fd0c05f6ef01039e59ac39b9732d116b2a8b7329ffcc6c9e79ce91b0c51aa57d3b5b16db4dd053a6abef6e5aa82b2ed8ef3ee2589477c0153d848db412a8408628afac0a2f5fd3d25807a52ad12ca6e2b5e5f3b3a54f410692cb4c3807101c5"}]}, 0x100}}, 0x800) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.923477107s ago: executing program 2 (id=5798): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x7fe0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x4}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000040)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000300)=r6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000700)='./file0\x00', r0}, 0x18) 4.756895402s ago: executing program 3 (id=5801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000d80)=[{&(0x7f0000000180)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f00000002c0)="0f88a8", 0x3}], 0x2) 2.20840958s ago: executing program 0 (id=5802): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.20570325s ago: executing program 2 (id=5803): sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x560, &(0x7f0000000b00)="$eJzs3d9vW1cdAPDvvYnjrOuaFvYAE9ACg4Kq2o27VdNetr6A0DQJMfGAeOhC4kahdl1qZyyhEtnfMCSQeII/gQckHpD2xANvPCLxgJDGA1KBCtQigWR0rx3XS5zFm39t8ecj3d577vE933Oa2Of4OL4ngLl1ISL2ImIpIl6PiJXu+aS7xcudLXvcwwf31h89uLeeRLv92j+SPD87l19QfFzmk90ylyPiW1+P+F5yOG5zZ/fWWq1WvdtNl1v1O+Xmzu7lrfraZnWzertSubZ67coLV5+vjK2t5+u/uv+1rVe+/dvffPbdP+x99UdZtU5383rtGLNO0wu9OJnFiHhlEsFmYKG7X5pxPfhw0oj4RER8IX/+r8RC/tsJAJxk7fZKtFf60wDASZfmc2BJWoqINO0OAkqdObyn41RaazRbl242tm9vdObKzkYhvblVq145V/zTD/IHF5IsvZrn5fl5unIgfTUizkXET4pP5OnSeqO2MZshDwDMvSf7+/+I+HcxTUuloS4d8KkeAPCxsTzrCgAAU6f/B4D5o/8HgPkzRP/f/bB/b+J1AQCm44O9/z8zsXoAANNj/h8A5o/+HwDmyjdffTXb2o+697/eeGNn+1bjjcsb1eatUn17vbTeuHuntNlobOb37KkfV16t0biz+lxsv1luVZutcnNn90a9sX27dSO/r/eNamEqrQIA3s+58+/8MYmIvRefyLfoW8tBXw0nWzrrCgAzszDKxQYI8LFmtS+YX0N14fkg4fcTrwswGwNv5r088PC9ftbZvT1MEH9nBB8pFz89/Py/NZ7hZDH/D/Prw83/vzT2egDTZ/4f5le7nRxc83+plwUAnEgj/Alf+8fjGoQAM3XcYt7Hff4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8+h0RHw/krSUrwWeZv+mpVLEUxFxNgrJza1a9UpEnInzEVEoZunVWVcaABhR+reku/7XxZVnTx/MXUr+U8z3EfHDn7/20zfXWq27q9n5f/bOF/eXD6s8vm6EdQUBgDHL++9Kd9/3Rv7hg3vr+9vgKxcnUp/71+N/3aWI1x89uJdv+/GykxHL+Vji1L+SXg2WI+KZiFgYQ/y9tyLiU4Pan+RzI2e7K5/2x49u7KfGFT+JJI6Nn74nfprndfbZ4OuTY6gLzJt3rkfEy4Oe/2lcyPeDn//LY3pFvH+9U9j+a9+jvviL3UgLA+Jnz/kLw8Z47nffOHSyvdLJeyvimcVB8ZNe/OSI+M8OGf/Pn/nc2y8dkdf+RcTFGBy/P1a5Vb9Tbu7sXt6qr21WN6u3K5Vrq9euvHD1+Uo5n6Mu789UH/b3Fy+dOapuWftPHRF/eWD7l3rXfmnI9v/yv69/9/OPk8WD8b/yxcE//6cHxu/I+sQvDxl/7dSvj1y+O4u/cUT7j/v5Xxoy/rt/3d0Y8qEAwBQ0d3ZvrdVq1bsjHWTvQsdRzqGDrIrDPXh/uDha0L/EJFox7MGByhcm9b868YPF3lhxvCV/JytxQFa6/0uSvVV6/3KW4qisxRh4VTr2Vox08HBasWb3mgRMR1/nAwAAAAAAAAAAAAAAfEQd/32gwuhfawMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAJ+X8AAAD//7xIx1c=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 2.112203018s ago: executing program 6 (id=5804): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/igmp6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cf", 0x69}, 0x1, 0x0, 0x0, 0x20048000}, 0x810) socket(0x400000000010, 0x3, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000200), 0x51, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x80ffffd, 0x0, 0x1, 0xa, 0x7f, 0x7}, 0x20) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 2.097322128s ago: executing program 3 (id=5805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.036450223s ago: executing program 0 (id=5806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_create(0x0, 0x0, 0x0) 1.809511862s ago: executing program 3 (id=5807): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000006800010028bd7000fbdbdf2502000900000a000004000b000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c050}, 0x8000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 881.584828ms ago: executing program 0 (id=5808): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4018, r0}, 0x18) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$packet(0x11, 0x2, 0x300) r2 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) prlimit64(r2, 0xa, 0x0, &(0x7f0000000000)) socket(0x10, 0x80002, 0x0) 775.241147ms ago: executing program 3 (id=5809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202d437b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000008c0)='sys_enter\x00', r0}, 0x10) getegid() 680.342584ms ago: executing program 2 (id=5810): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000040)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x20000003}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48811}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 469.335862ms ago: executing program 3 (id=5811): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000180)}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000040)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000300)=r5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000700)='./file0\x00', r0}, 0x18) 0s ago: executing program 3 (id=5812): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2d, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): st mode [ 1003.823504][T10021] usb 4-1: Using ep0 maxpacket: 8 [ 1003.846247][T10021] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1003.893618][T10021] usb 4-1: config 0 has no interface number 0 [ 1003.899923][T10021] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1003.913510][T10021] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1003.933007][T10021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.968314][T10021] usb 4-1: config 0 descriptor?? [ 1004.006067][T10021] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1004.338304][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4744'. [ 1004.739679][T21345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4750'. [ 1005.045574][T21349] tipc: Started in network mode [ 1005.067195][T21349] tipc: Node identity b611ddc109dd, cluster identity 4711 [ 1005.087050][T21349] tipc: Enabled bearer , priority 0 [ 1005.164885][T21351] syzkaller0: entered promiscuous mode [ 1005.176973][T21351] syzkaller0: entered allmulticast mode [ 1005.276906][T21353] vivid-000: disconnect [ 1005.292925][T21348] tipc: Resetting bearer [ 1005.371460][T21348] tipc: Disabling bearer [ 1005.492565][T21340] vivid-000: reconnect [ 1006.557384][T21359] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1006.748640][T15987] usb 4-1: USB disconnect, device number 26 [ 1007.213675][ T5875] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1007.282641][T21376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1007.434540][ T5875] usb 1-1: no configurations [ 1007.449526][ T5875] usb 1-1: can't read configurations, error -22 [ 1007.568454][T21379] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.4760'. [ 1007.643687][ T5875] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1007.730721][T21383] syzkaller0: entered promiscuous mode [ 1007.756896][T21383] syzkaller0: entered allmulticast mode [ 1007.950913][ T5875] usb 1-1: no configurations [ 1007.955810][ T5875] usb 1-1: can't read configurations, error -22 [ 1007.962354][ T5875] usb usb1-port1: attempt power cycle [ 1008.403771][ T5875] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1008.485041][ T5875] usb 1-1: no configurations [ 1008.551002][ T5875] usb 1-1: can't read configurations, error -22 [ 1008.643719][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1008.841340][ T5875] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1008.908518][ T5875] usb 1-1: no configurations [ 1008.913522][T15987] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1008.923688][ T5875] usb 1-1: can't read configurations, error -22 [ 1008.961803][ T5875] usb usb1-port1: unable to enumerate USB device [ 1009.125086][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4769'. [ 1009.133511][T15987] usb 3-1: Using ep0 maxpacket: 8 [ 1009.152096][T15987] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1009.174507][T15987] usb 3-1: config 0 has no interface number 0 [ 1009.232191][T15987] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1009.248706][T21406] netlink: 65023 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1009.294303][T15987] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1009.361580][T15987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.382448][T15987] usb 3-1: config 0 descriptor?? [ 1009.426021][T15987] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1009.620981][T21394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4763'. [ 1010.730717][T21435] syzkaller0: entered promiscuous mode [ 1010.741376][T21435] syzkaller0: entered allmulticast mode [ 1011.939114][ T5858] usb 3-1: USB disconnect, device number 26 [ 1012.303542][ T5831] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1012.516452][ T5831] usb 7-1: no configurations [ 1012.521342][ T5831] usb 7-1: can't read configurations, error -22 [ 1012.693563][ T5831] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1012.887146][T21475] tipc: Enabling of bearer rejected, already enabled [ 1012.912446][ T5831] usb 7-1: no configurations [ 1012.919479][ T5831] usb 7-1: can't read configurations, error -22 [ 1012.942581][ T5831] usb usb7-port1: attempt power cycle [ 1013.383553][ T5831] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1013.418536][T13120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1013.441315][T13120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1013.463219][ T5831] usb 7-1: no configurations [ 1013.473562][ T5831] usb 7-1: can't read configurations, error -22 [ 1013.538023][T13120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1013.549102][T13120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1013.557136][T13120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1013.565417][T13120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1013.633711][ T5831] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1013.674769][ T5831] usb 7-1: no configurations [ 1013.679872][ T5831] usb 7-1: can't read configurations, error -22 [ 1013.703702][ T5831] usb usb7-port1: unable to enumerate USB device [ 1013.863231][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.985878][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.170682][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.372077][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.534679][T21494] syzkaller0: entered promiscuous mode [ 1014.540386][T21494] syzkaller0: entered allmulticast mode [ 1014.647545][T21478] chnl_net:caif_netlink_parms(): no params data found [ 1015.019196][ T12] tipc: Left network mode [ 1015.019414][T21503] tipc: Enabling of bearer rejected, already enabled [ 1015.190655][T21478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.203722][T21478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.209357][T21512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4807'. [ 1015.221348][T21478] bridge_slave_0: entered allmulticast mode [ 1015.232745][T21478] bridge_slave_0: entered promiscuous mode [ 1015.413306][T21478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.432440][T21478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.449939][T21478] bridge_slave_1: entered allmulticast mode [ 1015.457616][T21478] bridge_slave_1: entered promiscuous mode [ 1015.604632][T20928] Bluetooth: hci4: command tx timeout [ 1015.661485][T21478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.774070][T21478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.277203][T21478] team0: Port device team_slave_0 added [ 1016.311585][T21478] team0: Port device team_slave_1 added [ 1016.579218][T21478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.602411][T21478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.694360][T21478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.035254][ T12] bond1: (slave gretap1): Releasing active interface [ 1017.074547][T21478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.092285][T21478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.183553][T21478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.507620][T21478] hsr_slave_0: entered promiscuous mode [ 1017.555694][T21478] hsr_slave_1: entered promiscuous mode [ 1017.583591][T21478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.601058][T21478] Cannot create hsr debugfs directory [ 1017.683964][T20928] Bluetooth: hci4: command tx timeout [ 1017.792027][T21570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4817'. [ 1018.005746][ T12] hsr_slave_0: left promiscuous mode [ 1018.050662][ T12] hsr_slave_1: left promiscuous mode [ 1018.058981][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1018.071109][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.088215][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.098270][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.111025][ T12] bridge_slave_1: left allmulticast mode [ 1018.117431][ T12] bridge_slave_1: left promiscuous mode [ 1018.123293][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.133287][ T12] bridge_slave_0: left allmulticast mode [ 1018.150235][ T12] bridge_slave_0: left promiscuous mode [ 1018.158382][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.234990][ T12] veth1_macvtap: left promiscuous mode [ 1018.241870][ T12] veth0_macvtap: left promiscuous mode [ 1018.255785][ T12] veth1_vlan: left promiscuous mode [ 1018.262263][ T12] veth0_vlan: left promiscuous mode [ 1018.778917][ T12] bond1 (unregistering): Released all slaves [ 1019.407812][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1019.465765][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1019.526756][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.589571][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.768949][T20928] Bluetooth: hci4: command tx timeout [ 1020.262542][ T12] bond0 (unregistering): Released all slaves [ 1020.372648][T21566] pim6reg1: entered promiscuous mode [ 1020.378870][T21566] pim6reg1: entered allmulticast mode [ 1020.387166][T21577] tipc: Enabling of bearer rejected, already enabled [ 1020.798957][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4825'. [ 1021.089162][ T12] IPVS: stop unused estimator thread 0... [ 1021.325222][T21619] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4829'. [ 1021.849676][T20928] Bluetooth: hci4: command tx timeout [ 1022.108283][T21478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1022.155841][T21478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1022.187180][T21478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1022.244867][T21478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1022.467932][T21638] tipc: Enabling of bearer rejected, already enabled [ 1022.942706][T21478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.088937][T21478] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.144517][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4833'. [ 1023.210131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.217369][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.254382][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.261618][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.506743][T21478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1023.618536][T21658] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4837'. [ 1023.911095][T21668] tipc: Enabled bearer , priority 0 [ 1023.955400][T21668] syzkaller0: entered promiscuous mode [ 1023.970933][T21668] syzkaller0: entered allmulticast mode [ 1024.051055][T21668] tipc: Resetting bearer [ 1024.078010][T21667] tipc: Resetting bearer [ 1024.149419][T21667] tipc: Disabling bearer [ 1024.345910][T21478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.531380][T21478] veth0_vlan: entered promiscuous mode [ 1024.687847][T21478] veth1_vlan: entered promiscuous mode [ 1024.874920][T21478] veth0_macvtap: entered promiscuous mode [ 1024.950172][T21478] veth1_macvtap: entered promiscuous mode [ 1025.032646][T21478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.049335][T21478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.121608][T21478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.173517][T21478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.195652][T21478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.219014][T21478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.245576][T21478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.657324][T21478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.727880][T21478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.753817][T21478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.785672][T21478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.833441][T21478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.893432][T21478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.956408][T21478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.008569][T21721] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.4846'. [ 1026.094280][T21478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.153529][T21478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.183465][T21478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.219404][T21478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.587038][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.624835][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.740182][ T9695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.785846][ T9695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.998629][T21740] tipc: Enabling of bearer rejected, already enabled [ 1027.405214][T21752] syzkaller0: entered promiscuous mode [ 1027.424753][T21752] syzkaller0: entered allmulticast mode [ 1027.893748][T15987] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1027.914833][T13120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1027.928044][T13120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1027.936698][T13120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1027.954963][T13120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1027.962856][T13120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1027.970429][T13120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1028.119849][T15987] usb 7-1: no configurations [ 1028.140475][T15987] usb 7-1: can't read configurations, error -22 [ 1028.357451][T15987] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1028.578379][T15987] usb 7-1: no configurations [ 1028.593644][T15987] usb 7-1: can't read configurations, error -22 [ 1028.618426][T15987] usb usb7-port1: attempt power cycle [ 1028.908047][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.981775][T21764] chnl_net:caif_netlink_parms(): no params data found [ 1029.083584][T15987] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1029.146373][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.156945][T15987] usb 7-1: no configurations [ 1029.161544][T15987] usb 7-1: can't read configurations, error -22 [ 1029.344700][T15987] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1029.383966][T21794] vivid-000: disconnect [ 1029.406100][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.433035][T15987] usb 7-1: no configurations [ 1029.444091][T15987] usb 7-1: can't read configurations, error -22 [ 1029.479506][T15987] usb usb7-port1: unable to enumerate USB device [ 1029.600737][T21779] vivid-000: reconnect [ 1029.885540][T21764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.908831][T21764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.971723][T21764] bridge_slave_0: entered allmulticast mode [ 1030.009935][T21764] bridge_slave_0: entered promiscuous mode [ 1030.021121][T21764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.029287][T21764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.042209][T21764] bridge_slave_1: entered allmulticast mode [ 1030.049367][T21764] bridge_slave_1: entered promiscuous mode [ 1030.085577][T13120] Bluetooth: hci1: command tx timeout [ 1030.111078][T21764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.156285][T21764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.236948][T21764] team0: Port device team_slave_0 added [ 1030.299244][T21764] team0: Port device team_slave_1 added [ 1030.477277][T21764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.488148][T21764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.603504][T21764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.678409][T21764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.691432][T21764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.769357][T21764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.837247][ T69] tipc: Disabling bearer [ 1030.862735][ T69] tipc: Disabling bearer [ 1030.868807][ T69] tipc: Left network mode [ 1030.873274][T21812] tipc: Enabling of bearer rejected, already enabled [ 1031.053191][T21764] hsr_slave_0: entered promiscuous mode [ 1031.121953][T21764] hsr_slave_1: entered promiscuous mode [ 1031.160847][T21764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1031.183776][T21764] Cannot create hsr debugfs directory [ 1032.173676][T13120] Bluetooth: hci1: command tx timeout [ 1032.833561][T15987] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1032.900696][T21856] vivid-000: disconnect [ 1032.940376][T21855] tipc: Enabling of bearer rejected, already enabled [ 1033.043266][T15987] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1033.060377][T15987] usb 3-1: can't read configurations, error -61 [ 1033.198090][T21841] vivid-000: reconnect [ 1033.232063][T15987] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1033.485657][T15987] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1033.524393][T15987] usb 3-1: can't read configurations, error -61 [ 1033.547674][T15987] usb usb3-port1: attempt power cycle [ 1033.677096][ T69] hsr_slave_0: left promiscuous mode [ 1033.697081][ T69] hsr_slave_1: left promiscuous mode [ 1033.719516][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.740960][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.763038][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.783489][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.806355][ T69] bridge_slave_1: left allmulticast mode [ 1033.837143][ T69] bridge_slave_1: left promiscuous mode [ 1033.868193][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.891754][ T69] bridge_slave_0: left allmulticast mode [ 1033.917464][ T69] bridge_slave_0: left promiscuous mode [ 1033.937269][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.973614][T15987] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1034.012819][ T69] veth1_macvtap: left promiscuous mode [ 1034.018744][ T69] veth0_macvtap: left promiscuous mode [ 1034.029147][T15987] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1034.047851][ T69] veth1_vlan: left promiscuous mode [ 1034.053174][T15987] usb 3-1: can't read configurations, error -61 [ 1034.061431][ T69] veth0_vlan: left promiscuous mode [ 1034.214682][T15987] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1034.245796][T13120] Bluetooth: hci1: command tx timeout [ 1034.295883][T15987] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1034.326356][T15987] usb 3-1: can't read configurations, error -61 [ 1034.353796][T15987] usb usb3-port1: unable to enumerate USB device [ 1035.521319][T21890] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.4874'. [ 1035.631324][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1035.728424][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1035.794946][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.946789][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.323625][T13120] Bluetooth: hci1: command tx timeout [ 1037.128081][ T69] bond0 (unregistering): Released all slaves [ 1037.137447][T21911] vivid-000: disconnect [ 1037.264978][T21894] tipc: Enabling of bearer rejected, failed to enable media [ 1037.566446][T21764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1037.612465][T21907] vivid-000: reconnect [ 1037.619083][T21764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1037.674680][T21764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1037.735326][T21764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1038.014988][ T69] IPVS: stop unused estimator thread 0... [ 1038.170698][T21764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.308796][T21764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.379988][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.387130][ T9692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.579786][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.587082][ T9692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.686481][T21942] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4882'. [ 1038.965794][T21949] tipc: Enabled bearer , priority 0 [ 1039.003547][ T28] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1039.044087][T21949] syzkaller0: entered promiscuous mode [ 1039.060651][T21949] syzkaller0: entered allmulticast mode [ 1039.111764][T21949] tipc: Resetting bearer [ 1039.247200][ T28] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1039.256764][ T28] usb 7-1: can't read configurations, error -61 [ 1039.311305][T21948] tipc: Resetting bearer [ 1039.344938][T21948] tipc: Disabling bearer [ 1039.433809][ T28] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1039.637910][ T28] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1039.652801][T21764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.660706][ T28] usb 7-1: can't read configurations, error -61 [ 1039.690233][ T28] usb usb7-port1: attempt power cycle [ 1039.832222][T21764] veth0_vlan: entered promiscuous mode [ 1039.918206][T21764] veth1_vlan: entered promiscuous mode [ 1040.001471][T21764] veth0_macvtap: entered promiscuous mode [ 1040.069226][T21764] veth1_macvtap: entered promiscuous mode [ 1040.114521][ T28] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1040.156022][T21764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.186264][ T28] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1040.202354][ T28] usb 7-1: can't read configurations, error -61 [ 1040.208967][T21764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.253661][T21764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.293848][T21764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.333598][T21764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.373459][T21764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.386485][ T28] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1040.426575][T21764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.443730][T21764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.454439][T21764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.466928][T21764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.479738][ T28] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1040.498999][ T28] usb 7-1: can't read configurations, error -61 [ 1040.508236][T21764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.528958][ T28] usb usb7-port1: unable to enumerate USB device [ 1040.548407][T21764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.571049][T21764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.582941][T21764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.613955][T21764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.622798][T21764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.632017][T21764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.641265][T21764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.951294][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.979168][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.036258][T21989] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1041.066571][T21986] vivid-000: disconnect [ 1041.216955][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.238363][T21977] vivid-000: reconnect [ 1041.247559][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.158570][T22018] tipc: Started in network mode [ 1042.167439][T22018] tipc: Node identity 9698e8aaebe5, cluster identity 4711 [ 1042.196981][T22018] tipc: Enabled bearer , priority 0 [ 1042.213822][ T28] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1042.223991][T22019] syzkaller0: entered promiscuous mode [ 1042.229503][T22019] syzkaller0: entered allmulticast mode [ 1042.336797][T22018] tipc: Resetting bearer [ 1042.364538][T22017] tipc: Resetting bearer [ 1042.427528][T22017] tipc: Disabling bearer [ 1042.436735][ T28] usb 7-1: config 0 has no interfaces? [ 1042.485300][ T28] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1042.551680][ T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.591621][ T28] usb 7-1: Product: syz [ 1042.606285][ T28] usb 7-1: Manufacturer: syz [ 1042.610925][ T28] usb 7-1: SerialNumber: syz [ 1042.632600][ T28] usb 7-1: config 0 descriptor?? [ 1042.843620][T16750] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1043.044217][T16750] usb 3-1: Using ep0 maxpacket: 8 [ 1043.123504][T16750] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1043.151687][T16750] usb 3-1: config 0 has no interface number 0 [ 1043.173606][T16750] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1043.243632][T16750] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1043.252745][T16750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.275861][T16750] usb 3-1: config 0 descriptor?? [ 1043.306845][T16750] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1043.383534][ T788] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1043.575867][ T788] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1043.587954][T22031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1043.597123][ T788] usb 1-1: can't read configurations, error -61 [ 1043.753596][ T788] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1043.793963][ T5844] usb 7-1: USB disconnect, device number 54 [ 1044.000868][ T788] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1044.012184][ T788] usb 1-1: can't read configurations, error -61 [ 1044.030236][ T788] usb usb1-port1: attempt power cycle [ 1044.493616][ T788] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1044.556920][ T788] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1044.569281][ T788] usb 1-1: can't read configurations, error -61 [ 1044.596356][T22062] vivid-000: disconnect [ 1044.724806][ T788] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1044.776632][ T788] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1044.797803][ T788] usb 1-1: can't read configurations, error -61 [ 1044.811193][ T788] usb usb1-port1: unable to enumerate USB device [ 1045.021075][T22058] vivid-000: reconnect [ 1045.700698][T10021] usb 3-1: USB disconnect, device number 31 [ 1045.791561][T22070] tipc: Enabling of bearer rejected, already enabled [ 1045.988216][T22078] veth0_vlan: entered allmulticast mode [ 1046.777926][T22100] tipc: Enabled bearer , priority 0 [ 1046.793220][T22100] syzkaller0: entered promiscuous mode [ 1046.801309][T22100] syzkaller0: entered allmulticast mode [ 1046.887936][T22100] tipc: Resetting bearer [ 1046.908586][T22099] tipc: Resetting bearer [ 1046.963653][ T788] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1047.079222][T22099] tipc: Disabling bearer [ 1047.163596][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 1047.204814][ T788] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1047.219187][ T788] usb 1-1: config 0 has no interface number 0 [ 1047.228696][ T788] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1047.259006][ T788] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1047.289027][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.325440][ T788] usb 1-1: config 0 descriptor?? [ 1047.337345][ T5831] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1047.367151][T22110] vivid-000: disconnect [ 1047.400904][ T788] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1047.586377][ T5831] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1047.599046][ T5831] usb 3-1: can't read configurations, error -61 [ 1047.636174][T22115] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1047.731478][T22098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4918'. [ 1047.764292][ T5831] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1047.837451][T22105] vivid-000: reconnect [ 1048.005623][ T5831] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1048.013317][ T5831] usb 3-1: can't read configurations, error -61 [ 1048.056333][ T5831] usb usb3-port1: attempt power cycle [ 1048.473564][ T5831] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1048.546078][ T5831] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1048.580411][ T5831] usb 3-1: can't read configurations, error -61 [ 1048.814097][ T5831] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1048.886898][ T5831] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1048.895124][ T5831] usb 3-1: can't read configurations, error -61 [ 1048.913952][ T5831] usb usb3-port1: unable to enumerate USB device [ 1049.752245][ T788] usb 1-1: USB disconnect, device number 52 [ 1050.744146][T22157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1050.961929][T22164] vivid-000: disconnect [ 1051.133541][ T5844] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1051.209756][T22146] vivid-000: reconnect [ 1051.326585][ T5844] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1051.358477][ T5844] usb 7-1: can't read configurations, error -61 [ 1051.517796][ T5844] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1051.727163][ T5844] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1051.737548][ T5844] usb 7-1: can't read configurations, error -61 [ 1051.747877][ T5844] usb usb7-port1: attempt power cycle [ 1051.891697][T22176] wg2: entered promiscuous mode [ 1051.900265][T22176] wg2: entered allmulticast mode [ 1052.067929][T22181] veth0_vlan: entered allmulticast mode [ 1052.085871][T22183] pim6reg1: entered promiscuous mode [ 1052.091337][T22183] pim6reg1: entered allmulticast mode [ 1052.166693][ T5844] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1052.210452][ T5844] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1052.232136][ T5844] usb 7-1: can't read configurations, error -61 [ 1052.403619][ T5844] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1052.446540][ T5844] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1052.463484][ T5844] usb 7-1: can't read configurations, error -61 [ 1052.480290][ T5844] usb usb7-port1: unable to enumerate USB device [ 1053.436762][T22212] syz.0.4960[22212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1053.436905][T22212] syz.0.4960[22212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1053.828314][T22227] syz.0.4967[22227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1053.844443][T22227] syz.0.4967[22227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1053.907722][T22229] pim6reg1: entered promiscuous mode [ 1053.931742][T22229] pim6reg1: entered allmulticast mode [ 1054.192046][T22237] tipc: Enabling of bearer rejected, already enabled [ 1054.604738][T22246] wg2: left promiscuous mode [ 1054.609493][T22246] wg2: left allmulticast mode [ 1054.670857][T22246] wg2: entered promiscuous mode [ 1054.703469][T22246] wg2: entered allmulticast mode [ 1054.728871][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.737788][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.822647][T22250] tipc: Enabling of bearer rejected, already enabled [ 1055.009973][T22255] tipc: Enabled bearer , priority 0 [ 1055.020268][T22255] syzkaller0: entered promiscuous mode [ 1055.053691][T22255] syzkaller0: entered allmulticast mode [ 1055.095751][T22255] tipc: Resetting bearer [ 1055.119193][T22262] syz.3.4982[22262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1055.119331][T22262] syz.3.4982[22262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1055.171540][T22254] tipc: Resetting bearer [ 1055.291295][T22254] tipc: Disabling bearer [ 1056.061039][T22279] tipc: Enabling of bearer rejected, already enabled [ 1056.433587][ T5844] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1056.629664][ T5844] usb 4-1: Using ep0 maxpacket: 8 [ 1056.700489][ T5844] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1056.711135][ T5844] usb 4-1: config 0 has no interface number 0 [ 1056.720186][ T5844] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1056.736239][ T5844] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1056.751099][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.834407][ T5844] usb 4-1: config 0 descriptor?? [ 1056.848211][ T5844] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1057.084218][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4988'. [ 1057.258642][T22311] tipc: Enabling of bearer rejected, already enabled [ 1058.010841][T22328] pim6reg1: entered promiscuous mode [ 1058.023531][T22328] pim6reg1: entered allmulticast mode [ 1058.667237][T22337] tipc: Enabling of bearer rejected, already enabled [ 1058.686921][T22340] tipc: Started in network mode [ 1058.692169][T22340] tipc: Node identity 32daa85ec6d4, cluster identity 4711 [ 1058.700139][T22340] tipc: Enabled bearer , priority 0 [ 1058.714491][T22340] syzkaller0: entered promiscuous mode [ 1058.726898][T22340] syzkaller0: entered allmulticast mode [ 1058.949775][T22342] tipc: Resetting bearer [ 1058.990045][T22338] tipc: Resetting bearer [ 1059.060358][T22338] tipc: Disabling bearer [ 1059.355223][T10021] usb 4-1: USB disconnect, device number 27 [ 1059.641044][T22367] tipc: Enabling of bearer rejected, already enabled [ 1060.008519][T22379] tipc: Enabling of bearer rejected, already enabled [ 1060.549068][T22399] tipc: Enabled bearer , priority 0 [ 1060.596209][T22399] syzkaller0: entered promiscuous mode [ 1060.605380][T22399] syzkaller0: entered allmulticast mode [ 1060.704578][T22399] tipc: Resetting bearer [ 1060.796983][T22398] tipc: Resetting bearer [ 1060.855179][T22398] tipc: Disabling bearer [ 1060.934900][ T5844] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1061.166066][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 1061.182574][ T5844] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1061.223188][T22413] tipc: Enabling of bearer rejected, already enabled [ 1061.249304][ T5844] usb 3-1: config 0 has no interface number 0 [ 1061.297843][ T5844] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1061.369196][ T5844] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1061.422769][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.528755][ T5844] usb 3-1: config 0 descriptor?? [ 1061.530716][T22419] syz.3.5038[22419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1061.534208][T22419] syz.3.5038[22419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1061.598316][ T5844] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1061.903949][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5028'. [ 1061.941526][T22436] tipc: Enabled bearer , priority 0 [ 1061.965232][T22436] syzkaller0: entered promiscuous mode [ 1061.981072][T22436] syzkaller0: entered allmulticast mode [ 1062.041612][T22436] tipc: Resetting bearer [ 1062.105804][T22435] tipc: Resetting bearer [ 1062.157568][T22435] tipc: Disabling bearer [ 1062.179781][T22440] tipc: Enabled bearer , priority 0 [ 1062.188114][T22440] syzkaller0: entered promiscuous mode [ 1062.194148][T22440] syzkaller0: entered allmulticast mode [ 1062.249086][T22440] tipc: Resetting bearer [ 1062.272870][T22439] tipc: Resetting bearer [ 1062.331312][T22439] tipc: Disabling bearer [ 1062.670533][T22452] pim6reg1: entered promiscuous mode [ 1062.680832][T22452] pim6reg1: entered allmulticast mode [ 1063.396624][T22483] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5061'. [ 1063.618436][ T28] usb 3-1: USB disconnect, device number 36 [ 1063.751814][T22487] wg2: entered promiscuous mode [ 1063.765019][T22487] wg2: entered allmulticast mode [ 1064.091995][T22510] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.5072'. [ 1064.200476][T22513] wg2: entered promiscuous mode [ 1064.207722][T22513] wg2: entered allmulticast mode [ 1065.274379][T22545] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1068.593310][T22542] tipc: Enabling of bearer rejected, already enabled [ 1069.613579][ T8] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1069.820479][T22586] tipc: Enabled bearer , priority 0 [ 1069.859003][T22586] syzkaller0: entered promiscuous mode [ 1069.881607][T22586] syzkaller0: entered allmulticast mode [ 1069.895606][ T8] usb 7-1: config 0 has no interfaces? [ 1069.911690][ T8] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1069.954942][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.974844][ T8] usb 7-1: Product: syz [ 1069.983515][ T8] usb 7-1: Manufacturer: syz [ 1069.994810][T22586] tipc: Resetting bearer [ 1070.003006][ T8] usb 7-1: SerialNumber: syz [ 1070.025348][ T8] usb 7-1: config 0 descriptor?? [ 1070.070983][T22585] tipc: Resetting bearer [ 1070.128235][T22585] tipc: Disabling bearer [ 1070.165087][T22593] syzkaller0: entered promiscuous mode [ 1070.183559][T22593] syzkaller0: entered allmulticast mode [ 1070.197253][T22593] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1070.352772][T22595] wg2: entered promiscuous mode [ 1070.376358][T22595] wg2: entered allmulticast mode [ 1070.808887][T15987] usb 7-1: USB disconnect, device number 59 [ 1074.301274][T22621] tipc: Enabled bearer , priority 0 [ 1074.309514][T22622] syzkaller0: entered promiscuous mode [ 1074.319454][T22622] syzkaller0: entered allmulticast mode [ 1074.468721][T22628] tipc: Resetting bearer [ 1074.580402][T22628] tipc: Disabling bearer [ 1075.133701][T22660] tipc: Enabling of bearer rejected, already enabled [ 1075.614622][T22676] syz.6.5130[22676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1075.614770][T22676] syz.6.5130[22676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1075.660027][T22676] syz.6.5130[22676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1075.681992][T22676] syz.6.5130[22676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1075.885014][T22684] tipc: Enabling of bearer rejected, already enabled [ 1076.592243][T22708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5143'. [ 1076.604795][T22710] tipc: Enabling of bearer rejected, already enabled [ 1076.614702][T22705] pim6reg1: entered promiscuous mode [ 1076.620092][T22705] pim6reg1: entered allmulticast mode [ 1077.226271][T22731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5154'. [ 1077.411027][T22736] tipc: Enabled bearer , priority 0 [ 1077.432214][T22736] syzkaller0: entered promiscuous mode [ 1077.437999][T22736] syzkaller0: entered allmulticast mode [ 1077.478193][T22736] tipc: Resetting bearer [ 1077.529127][T22735] tipc: Resetting bearer [ 1077.584646][T22735] tipc: Disabling bearer [ 1078.258204][T22755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5164'. [ 1078.350913][T22757] pim6reg1: entered promiscuous mode [ 1078.374250][T22757] pim6reg1: entered allmulticast mode [ 1078.700880][T22770] pim6reg1: entered promiscuous mode [ 1078.718773][T22770] pim6reg1: entered allmulticast mode [ 1078.726103][T22772] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 1078.743951][T22772] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 1078.795210][T22769] tipc: Enabled bearer , priority 0 [ 1078.806107][T22777] syzkaller0: entered promiscuous mode [ 1078.814660][T22777] syzkaller0: entered allmulticast mode [ 1078.940921][T22769] tipc: Resetting bearer [ 1078.944985][T22782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5175'. [ 1078.956656][T22767] tipc: Resetting bearer [ 1078.980315][T22767] tipc: Disabling bearer [ 1080.861506][T22815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5185'. [ 1083.044784][T22822] tipc: Enabled bearer , priority 0 [ 1083.062745][T22822] syzkaller0: entered promiscuous mode [ 1083.083410][T22822] syzkaller0: entered allmulticast mode [ 1083.156888][T22822] tipc: Resetting bearer [ 1083.180957][T22821] tipc: Resetting bearer [ 1083.230500][T22821] tipc: Disabling bearer [ 1083.491637][T22837] pim6reg1: entered promiscuous mode [ 1083.498987][T22837] pim6reg1: entered allmulticast mode [ 1083.642931][T22845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5195'. [ 1085.809954][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5205'. [ 1085.843718][T15987] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1086.045995][T15987] usb 7-1: config 0 has no interfaces? [ 1086.056785][T15987] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1086.073472][T15987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.082558][T15987] usb 7-1: Product: syz [ 1086.089735][T15987] usb 7-1: Manufacturer: syz [ 1086.095741][T15987] usb 7-1: SerialNumber: syz [ 1086.112561][T15987] usb 7-1: config 0 descriptor?? [ 1086.562968][T10021] usb 7-1: USB disconnect, device number 60 [ 1086.949453][T22903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5214'. [ 1087.190446][T22906] tipc: Enabled bearer , priority 0 [ 1087.214737][T22906] syzkaller0: entered promiscuous mode [ 1087.220267][T22906] syzkaller0: entered allmulticast mode [ 1087.364903][T22906] tipc: Resetting bearer [ 1087.398474][T22905] tipc: Resetting bearer [ 1087.474510][T22905] tipc: Disabling bearer [ 1088.114828][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5223'. [ 1088.645462][T10021] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1088.836166][T10021] usb 4-1: config 0 has no interfaces? [ 1088.849356][T10021] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1088.860614][T10021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.868884][T10021] usb 4-1: Product: syz [ 1088.879800][T10021] usb 4-1: Manufacturer: syz [ 1088.887645][T10021] usb 4-1: SerialNumber: syz [ 1088.900154][T10021] usb 4-1: config 0 descriptor?? [ 1089.015641][T22953] tipc: Enabled bearer , priority 0 [ 1089.027408][T22953] syzkaller0: entered promiscuous mode [ 1089.037696][T22953] syzkaller0: entered allmulticast mode [ 1089.090338][T22953] tipc: Resetting bearer [ 1089.108602][T22952] tipc: Resetting bearer [ 1089.139833][T22952] tipc: Disabling bearer [ 1089.161790][T10021] usb 4-1: USB disconnect, device number 28 [ 1089.394247][T22957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5233'. [ 1090.265446][T22976] tipc: Enabled bearer , priority 0 [ 1090.279907][T22976] syzkaller0: entered promiscuous mode [ 1090.288531][T22976] syzkaller0: entered allmulticast mode [ 1090.356388][T22976] tipc: Resetting bearer [ 1090.380537][T22975] tipc: Resetting bearer [ 1090.439899][T22975] tipc: Disabling bearer [ 1090.644641][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5242'. [ 1091.306303][T23004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5252'. [ 1092.591556][T23030] pim6reg1: entered promiscuous mode [ 1092.606084][T23030] pim6reg1: entered allmulticast mode [ 1093.147033][T23051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1093.170989][T23051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1093.197188][T23050] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1093.220805][T23051] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5265'. [ 1093.232416][T23053] tipc: Enabling of bearer rejected, already enabled [ 1093.250360][T23053] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 1093.268398][T23053] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 1094.436058][T23077] tipc: Enabled bearer , priority 0 [ 1094.445499][T23077] syzkaller0: entered promiscuous mode [ 1094.452315][T23077] syzkaller0: entered allmulticast mode [ 1094.510403][T23076] tipc: Resetting bearer [ 1094.576451][T23076] tipc: Disabling bearer [ 1095.479018][T23101] tipc: Enabled bearer , priority 0 [ 1095.507862][T23101] syzkaller0: entered promiscuous mode [ 1095.518677][T23101] syzkaller0: entered allmulticast mode [ 1095.589573][T23100] tipc: Resetting bearer [ 1095.737958][T23100] tipc: Disabling bearer [ 1096.408999][T23122] tipc: Enabled bearer , priority 0 [ 1096.421795][T23122] syzkaller0: entered promiscuous mode [ 1096.429899][T23122] syzkaller0: entered allmulticast mode [ 1096.495091][T23121] tipc: Resetting bearer [ 1096.558388][T23121] tipc: Disabling bearer [ 1097.308605][T23139] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5300'. [ 1102.176309][T23235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5337'. [ 1102.385911][T23245] netlink: 'syz.3.5342': attribute type 29 has an invalid length. [ 1102.411631][T23245] netlink: 'syz.3.5342': attribute type 29 has an invalid length. [ 1102.437470][T23245] netlink: 'syz.3.5342': attribute type 29 has an invalid length. [ 1102.772657][T23260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5348'. [ 1102.813584][ T5831] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1102.886956][T13120] Bluetooth: hci3: command 0x0406 tx timeout [ 1102.947143][T23265] vivid-000: disconnect [ 1103.005967][ T5831] usb 1-1: config 0 has no interfaces? [ 1103.020179][ T5831] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1103.038443][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.047026][ T5831] usb 1-1: Product: syz [ 1103.051498][ T5831] usb 1-1: Manufacturer: syz [ 1103.056396][ T5831] usb 1-1: SerialNumber: syz [ 1103.084351][ T5831] usb 1-1: config 0 descriptor?? [ 1103.326389][ T5844] usb 1-1: USB disconnect, device number 53 [ 1103.371480][T23271] netlink: 'syz.3.5352': attribute type 39 has an invalid length. [ 1103.499833][T23254] vivid-000: reconnect [ 1103.702012][T23273] syzkaller0: entered promiscuous mode [ 1103.707692][T23273] syzkaller0: entered allmulticast mode [ 1104.194423][T23282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5357'. [ 1104.317265][T23290] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1104.357865][T23290] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1104.386903][T23286] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1104.428321][T23295] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1104.449164][T23292] syzkaller0: entered promiscuous mode [ 1104.457118][T23292] syzkaller0: entered allmulticast mode [ 1104.823565][ T28] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1105.015771][ T28] usb 4-1: config 0 has no interfaces? [ 1105.028391][ T28] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1105.041025][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.053763][ T28] usb 4-1: Product: syz [ 1105.059511][ T28] usb 4-1: Manufacturer: syz [ 1105.075657][ T28] usb 4-1: SerialNumber: syz [ 1105.096226][ T28] usb 4-1: config 0 descriptor?? [ 1105.112440][T23320] vivid-000: disconnect [ 1105.313210][ T5875] usb 4-1: USB disconnect, device number 29 [ 1105.345004][T23323] netlink: 'syz.0.5371': attribute type 72 has an invalid length. [ 1105.356816][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5371'. [ 1105.596007][T23304] vivid-000: reconnect [ 1106.163548][ T5875] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1106.289836][T23339] syzkaller0: entered promiscuous mode [ 1106.315574][T23339] syzkaller0: entered allmulticast mode [ 1106.380857][ T5875] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1106.461841][ T5875] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1106.516984][T23343] netlink: 'syz.6.5380': attribute type 72 has an invalid length. [ 1106.526807][ T5875] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1106.533297][T23343] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5380'. [ 1106.576807][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.646859][T23333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1106.662965][ T5875] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1107.413945][ T5875] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1107.617500][ T5875] usb 7-1: config 0 has no interfaces? [ 1107.642562][ T5875] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1107.653659][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.661988][ T5875] usb 7-1: Product: syz [ 1107.666626][ T5875] usb 7-1: Manufacturer: syz [ 1107.671496][ T5875] usb 7-1: SerialNumber: syz [ 1107.692949][ T5875] usb 7-1: config 0 descriptor?? [ 1107.998494][T23366] syzkaller0: entered promiscuous mode [ 1108.031885][T23366] syzkaller0: entered allmulticast mode [ 1108.042635][T23369] vivid-000: disconnect [ 1108.161392][ T5875] usb 7-1: USB disconnect, device number 61 [ 1108.423122][T23362] vivid-000: reconnect [ 1108.618220][T23377] netlink: 'syz.2.5390': attribute type 72 has an invalid length. [ 1108.630039][T23377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5390'. [ 1109.620527][ T5875] usb 1-1: USB disconnect, device number 54 [ 1110.131357][T23408] netlink: 'syz.6.5402': attribute type 2 has an invalid length. [ 1110.283655][ T5875] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1110.347441][T23414] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.5405'. [ 1110.487367][ T5875] usb 4-1: config 0 has no interfaces? [ 1110.500041][ T5875] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1110.518610][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.539357][ T5875] usb 4-1: Product: syz [ 1110.549011][ T5875] usb 4-1: Manufacturer: syz [ 1110.566283][ T5875] usb 4-1: SerialNumber: syz [ 1110.583799][ T5875] usb 4-1: config 0 descriptor?? [ 1110.713328][T23426] netlink: 'syz.0.5410': attribute type 21 has an invalid length. [ 1110.823713][T10021] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1110.873214][ T5875] usb 4-1: USB disconnect, device number 30 [ 1111.067317][T10021] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1111.081709][T10021] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1111.095774][T10021] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.124626][T10021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.150069][T23422] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1111.169309][T10021] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 1112.554059][ T5844] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1112.612825][T23453] netlink: 'syz.2.5420': attribute type 1 has an invalid length. [ 1112.623262][T23453] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5420'. [ 1112.863503][ T5844] usb 4-1: Using ep0 maxpacket: 8 [ 1112.890369][ T5844] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1112.955086][ T5844] usb 4-1: config 0 has no interface number 0 [ 1112.998638][ T5844] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1113.040472][ T5844] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1113.097669][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.185873][ T5844] usb 4-1: config 0 descriptor?? [ 1113.281220][ T5844] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1113.413477][ T5831] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1113.615503][ T5831] usb 1-1: config 0 has no interfaces? [ 1113.629140][ T5831] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1113.654396][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.681052][ T5831] usb 1-1: Product: syz [ 1113.695565][ T5831] usb 1-1: Manufacturer: syz [ 1113.703730][ T5831] usb 1-1: SerialNumber: syz [ 1113.708823][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5418'. [ 1113.730240][ T5831] usb 1-1: config 0 descriptor?? [ 1113.997768][ T788] usb 1-1: USB disconnect, device number 55 [ 1114.357641][ T28] usb 7-1: USB disconnect, device number 62 [ 1115.107751][T23503] loop0: detected capacity change from 0 to 1024 [ 1115.151162][T23503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.891359][ T788] usb 4-1: USB disconnect, device number 31 [ 1116.170075][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.176498][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.295761][T21478] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.483485][ T788] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1116.491695][ T5831] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1116.700510][ T788] usb 4-1: config 0 has no interfaces? [ 1116.709712][ T5831] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1116.737438][ T788] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1116.752008][ T5831] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1116.766308][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.783214][ T5831] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1116.802535][ T788] usb 4-1: Product: syz [ 1116.815961][ T788] usb 4-1: Manufacturer: syz [ 1116.820888][ T788] usb 4-1: SerialNumber: syz [ 1116.853434][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.884096][T23519] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1116.909611][ T5831] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1116.928013][ T788] usb 4-1: config 0 descriptor?? [ 1117.157645][T10021] usb 4-1: USB disconnect, device number 32 [ 1117.923480][ T5875] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1118.163638][ T5875] usb 7-1: Using ep0 maxpacket: 8 [ 1118.174055][ T5875] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1118.191761][ T5875] usb 7-1: config 0 has no interface number 0 [ 1118.216284][ T5875] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1118.276910][ T5875] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1118.296806][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.509721][ T5875] usb 7-1: config 0 descriptor?? [ 1118.532778][ T5875] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1118.550502][T23562] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1118.787622][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1120.020896][T23580] xt_nfacct: accounting object `syz1' does not exist [ 1121.030653][ T5844] usb 3-1: USB disconnect, device number 37 [ 1121.272685][T10021] usb 7-1: USB disconnect, device number 63 [ 1121.286458][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1121.296161][ T5875] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1121.346975][T23590] syzkaller0: entered promiscuous mode [ 1121.372378][T23590] syzkaller0: entered allmulticast mode [ 1121.515324][ T5875] usb 4-1: config 0 has no interfaces? [ 1121.526684][ T5875] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1121.544555][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.566984][ T5875] usb 4-1: Product: syz [ 1121.573413][ T5875] usb 4-1: Manufacturer: syz [ 1121.578061][ T5875] usb 4-1: SerialNumber: syz [ 1121.604288][ T5875] usb 4-1: config 0 descriptor?? [ 1122.236762][ T5844] usb 4-1: USB disconnect, device number 33 [ 1122.243824][T23593] loop0: detected capacity change from 0 to 40427 [ 1122.286156][T23593] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1122.303259][T23593] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1122.321577][T23597] loop6: detected capacity change from 0 to 40427 [ 1122.334991][T23593] F2FS-fs (loop0): invalid crc value [ 1122.345832][T23597] F2FS-fs (loop6): Unrecognized mount option "whint_mode=off" or missing value [ 1122.386130][T23593] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1122.392642][T23610] loop2: detected capacity change from 0 to 512 [ 1122.587864][T23610] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1122.696161][T23610] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1122.703535][T23593] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1122.717709][T23610] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.5471: bad orphan inode 15 [ 1122.731717][T23593] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1122.731906][T23610] ext4_test_bit(bit=14, block=18) = 1 [ 1122.767334][T23610] is_bad_inode(inode)=0 [ 1122.771603][T23610] NEXT_ORPHAN(inode)=1023 [ 1122.780849][T23610] max_ino=32 [ 1122.792274][T23610] i_nlink=0 [ 1122.873480][T23610] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2983: inode #15: comm syz.2.5471: corrupted xattr block 19: e_value size too large [ 1122.933422][T23610] EXT4-fs warning (device loop2): ext4_evict_inode:272: xattr delete (err -117) [ 1123.000863][T23610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1124.013226][T10021] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1124.917380][T20927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.102185][T10021] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1125.147834][T10021] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1125.183146][T10021] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1125.247192][T10021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.313105][T23623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1125.377688][T10021] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1125.453646][ T5875] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1125.676262][ T5875] usb 3-1: config 0 has no interfaces? [ 1125.730101][ T5875] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1125.744624][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.762309][ T5875] usb 3-1: Product: syz [ 1125.771211][ T5875] usb 3-1: Manufacturer: syz [ 1125.798841][ T5875] usb 3-1: SerialNumber: syz [ 1125.830483][ T5875] usb 3-1: config 0 descriptor?? [ 1125.893440][T10021] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1126.083975][T23634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1126.104800][T23634] vlan0: entered allmulticast mode [ 1126.113576][T10021] usb 7-1: Using ep0 maxpacket: 8 [ 1126.143861][T10021] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1126.171218][T10021] usb 7-1: config 0 has no interface number 0 [ 1126.204691][T10021] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1126.217596][T15987] usb 3-1: USB disconnect, device number 38 [ 1126.236988][T10021] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1126.268224][T10021] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.327269][T10021] usb 7-1: config 0 descriptor?? [ 1126.423076][T10021] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1126.712784][T23638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5475'. [ 1129.192851][T15987] usb 4-1: USB disconnect, device number 34 [ 1130.001911][ T788] usb 7-1: USB disconnect, device number 64 [ 1130.041418][T15987] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1130.253409][T15987] usb 4-1: Using ep0 maxpacket: 16 [ 1130.302805][T15987] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1130.321668][T15987] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.347390][T15987] usb 4-1: config 1 has no interface number 0 [ 1130.363580][T15987] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1130.389872][T15987] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 1130.416369][T15987] usb 4-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1130.449894][T15987] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1130.470807][T15987] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08 [ 1130.493604][T15987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.522219][T15987] usb 4-1: Product: syz [ 1130.532373][T15987] usb 4-1: Manufacturer: syz [ 1130.542546][T15987] usb 4-1: SerialNumber: syz [ 1130.761188][T23674] loop0: detected capacity change from 0 to 40427 [ 1130.815276][T15987] aqc111: probe of 4-1:1.105 failed with error -22 [ 1130.841165][T23674] F2FS-fs (loop0): invalid crc value [ 1130.938160][T23674] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1131.044822][ T28] usb 4-1: USB disconnect, device number 35 [ 1131.099634][T13120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1131.116576][T13120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1131.128731][T13120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1131.138975][T13120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1131.149824][T23674] F2FS-fs (loop0): Start checkpoint disabled! [ 1131.158215][T13120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1131.165838][T13120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1131.207571][T23674] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1131.465744][ T3491] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.084442][ T3491] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.292475][ T3491] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.349851][ T1133] kworker/u4:7: attempt to access beyond end of device [ 1132.349851][ T1133] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1132.412319][ T1133] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1132.561625][ T3491] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.013492][T15987] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1133.203835][T13120] Bluetooth: hci0: command tx timeout [ 1133.227288][T23687] chnl_net:caif_netlink_parms(): no params data found [ 1133.253390][T15987] usb 4-1: Using ep0 maxpacket: 8 [ 1133.309078][T15987] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.353640][T15987] usb 4-1: config 0 has no interface number 0 [ 1133.366755][ T3491] tipc: Disabling bearer [ 1133.379031][T15987] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1133.392759][T15987] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1133.419645][T15987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.442252][T15987] usb 4-1: config 0 descriptor?? [ 1133.455396][ T3491] tipc: Left network mode [ 1133.476030][T15987] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1134.109522][ T27] audit: type=1326 audit(2000001055.830:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.131910][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.266609][T23705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5494'. [ 1134.287968][ T27] audit: type=1326 audit(2000001055.830:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.311785][ T27] audit: type=1326 audit(2000001055.830:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.334206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.343643][ T27] audit: type=1326 audit(2000001055.830:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.365977][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.383708][ T27] audit: type=1326 audit(2000001055.830:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.406544][ T27] audit: type=1326 audit(2000001055.830:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.442110][T23751] loop0: detected capacity change from 0 to 512 [ 1134.455096][T23751] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1134.468539][T23751] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1134.494634][ T27] audit: type=1326 audit(2000001055.830:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.517026][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.524598][ T27] audit: type=1326 audit(2000001055.830:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.546928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.553234][ T27] audit: type=1326 audit(2000001055.830:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.613096][T23751] EXT4-fs (loop0): 1 orphan inode deleted [ 1134.619598][T23751] EXT4-fs (loop0): 1 truncate cleaned up [ 1134.626331][T23751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1134.706926][ T27] audit: type=1326 audit(2000001055.830:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.2.5501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1134.730774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1135.165695][T21478] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.287967][T13120] Bluetooth: hci0: command tx timeout [ 1135.439795][T23687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.461862][T23687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.496688][T23687] bridge_slave_0: entered allmulticast mode [ 1135.516993][T23687] bridge_slave_0: entered promiscuous mode [ 1135.626943][T23687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.666076][T23687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.693291][T23687] bridge_slave_1: entered allmulticast mode [ 1135.716935][T23687] bridge_slave_1: entered promiscuous mode [ 1135.923180][ T5844] usb 4-1: USB disconnect, device number 36 [ 1136.096418][T23687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.124993][T23687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.335557][T23687] team0: Port device team_slave_0 added [ 1136.361318][T23687] team0: Port device team_slave_1 added [ 1136.549957][T23782] fuse: Bad value for 'fd' [ 1136.908698][T23687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.924395][T23687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.950333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.979415][T23687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.044237][T15987] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1137.069614][T23687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.099057][T23687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.162881][T23687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.363521][T13120] Bluetooth: hci0: command tx timeout [ 1137.535042][T15987] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1137.560088][T15987] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1137.581872][T15987] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1137.592254][T15987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.613019][T23787] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1137.675521][T15987] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1138.050777][T23687] hsr_slave_0: entered promiscuous mode [ 1138.131314][T23687] hsr_slave_1: entered promiscuous mode [ 1138.379781][ T3491] hsr_slave_0: left promiscuous mode [ 1138.399793][ T3491] hsr_slave_1: left promiscuous mode [ 1138.445926][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.475346][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.509407][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.567611][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.644477][ T3491] bridge_slave_1: left allmulticast mode [ 1138.660818][ T3491] bridge_slave_1: left promiscuous mode [ 1138.670586][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.721032][ T3491] bridge_slave_0: left allmulticast mode [ 1138.730672][ T3491] bridge_slave_0: left promiscuous mode [ 1138.740425][T13120] Bluetooth: hci4: command 0x0406 tx timeout [ 1138.777451][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.793744][ T5831] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1138.857420][ T3491] batadv0: left promiscuous mode [ 1138.871625][ T3491] veth1_macvtap: left promiscuous mode [ 1138.877949][ T3491] veth0_macvtap: left promiscuous mode [ 1138.884340][ T3491] veth1_vlan: left promiscuous mode [ 1138.894470][ T3491] veth0_vlan: left promiscuous mode [ 1139.103554][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 1139.127620][ T5831] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1139.136428][ T5831] usb 4-1: config 0 has no interface number 0 [ 1139.143053][ T5831] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1139.154167][ T5831] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1139.163633][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.182544][ T5831] usb 4-1: config 0 descriptor?? [ 1139.192892][ T5831] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1139.443808][T20928] Bluetooth: hci0: command tx timeout [ 1140.015155][ T28] usb 1-1: USB disconnect, device number 56 [ 1140.641194][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 1140.738343][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 1140.841595][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.939424][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.630765][ T3491] bond0 (unregistering): Released all slaves [ 1141.762038][T23822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5518'. [ 1141.921826][ T5831] usb 4-1: USB disconnect, device number 37 [ 1142.963711][T10021] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1143.239640][T10021] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1143.282004][T10021] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1143.323018][T10021] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1143.353448][T10021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.394573][T23863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1143.536022][T10021] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1143.847941][ T788] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1143.860146][T23687] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1143.901597][T23893] syzkaller0: entered promiscuous mode [ 1143.914889][T23893] syzkaller0: entered allmulticast mode [ 1143.923865][T23687] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1143.961609][T23687] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1144.050577][T23687] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1144.063594][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 1144.107972][ T788] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1144.155651][ T788] usb 4-1: config 0 has no interface number 0 [ 1144.231288][ T788] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1144.261784][T23687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.326529][ T788] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1144.351024][T23687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.389289][T23832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.396454][T23832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.427114][T23832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.434295][T23832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.500509][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.646280][ T788] usb 4-1: config 0 descriptor?? [ 1144.861040][ T788] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1145.169711][T23888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5533'. [ 1146.008578][T23687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.831669][ T788] usb 1-1: USB disconnect, device number 57 [ 1147.370618][T23687] veth0_vlan: entered promiscuous mode [ 1147.396905][T23687] veth1_vlan: entered promiscuous mode [ 1147.503859][ T8] usb 4-1: USB disconnect, device number 38 [ 1147.526469][T23687] veth0_macvtap: entered promiscuous mode [ 1147.556417][T23687] veth1_macvtap: entered promiscuous mode [ 1147.623077][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.654642][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.676666][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.739923][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.784256][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1147.819384][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.869459][T23687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.908413][T23958] vivid-000: disconnect [ 1147.918097][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1147.969324][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1147.998559][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1148.052460][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.074213][T23687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1148.156040][T23687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1148.232266][T23687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.273046][T23687] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.444321][T23943] vivid-000: reconnect [ 1148.612522][T23687] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.621506][T23687] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.630618][T23687] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.723731][T23968] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1151.718992][ T9692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.757750][ T9692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.851892][ T9692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.884762][ T9692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.563448][ T28] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1152.855244][ T28] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1152.888294][ T28] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1152.914330][T24008] loop6: detected capacity change from 0 to 512 [ 1152.944407][T24008] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1152.948852][ T28] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1153.012415][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.061063][T24008] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1153.067949][T23995] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1153.079323][ T28] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1153.121668][T24008] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.5552: bad orphan inode 15 [ 1153.142328][T24008] ext4_test_bit(bit=14, block=18) = 1 [ 1153.149139][T24008] is_bad_inode(inode)=0 [ 1153.153404][T24008] NEXT_ORPHAN(inode)=1023 [ 1153.157776][T24008] max_ino=32 [ 1153.161151][T24008] i_nlink=0 [ 1153.167010][T24008] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2983: inode #15: comm syz.6.5552: corrupted xattr block 19: e_value size too large [ 1153.186580][T24008] EXT4-fs warning (device loop6): ext4_evict_inode:272: xattr delete (err -117) [ 1153.238183][T24008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1153.845729][ T28] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1154.984757][T13120] Bluetooth: hci1: command 0x0406 tx timeout [ 1155.117004][T23687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.123507][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 1155.145224][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.171307][ T28] usb 1-1: config 0 has no interfaces? [ 1155.176965][T23996] loop3: detected capacity change from 0 to 40427 [ 1155.179369][T23996] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1155.189326][ T28] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1155.205672][T23996] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1155.226326][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.241492][ T28] usb 1-1: config 0 descriptor?? [ 1155.280738][T23996] F2FS-fs (loop3): invalid crc value [ 1155.301733][T23996] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 1157.237034][T24060] vivid-000: disconnect [ 1157.344721][T15987] usb 3-1: USB disconnect, device number 39 [ 1157.677990][T24043] vivid-000: reconnect [ 1157.798507][ T28] usb 1-1: USB disconnect, device number 58 [ 1160.653446][ T788] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1160.663985][T24110] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1160.670610][T24110] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1160.690439][T24110] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1160.696530][T24110] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1160.715070][T24110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1160.721182][T24110] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1160.740228][T24110] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1160.746281][T24110] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1160.780649][T24110] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1161.130343][ T788] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1162.623433][ T788] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1162.633429][ T788] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1162.643000][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.723534][T20928] Bluetooth: hci1: command 0x0406 tx timeout [ 1162.729674][T20928] Bluetooth: hci4: command 0x0406 tx timeout [ 1162.735949][T13120] Bluetooth: hci3: command 0x0406 tx timeout [ 1162.803504][T20928] Bluetooth: hci0: command 0x0c1a tx timeout [ 1163.183532][ T8] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1163.406258][ T8] usb 1-1: config 0 has no interfaces? [ 1163.415143][ T8] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1163.443508][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.482226][ T8] usb 1-1: Product: syz [ 1163.502653][ T8] usb 1-1: Manufacturer: syz [ 1163.543371][ T8] usb 1-1: SerialNumber: syz [ 1163.555288][ T8] usb 1-1: config 0 descriptor?? [ 1163.566959][ T788] usb 3-1: can't set config #27, error -71 [ 1163.591487][ T788] usb 3-1: USB disconnect, device number 40 [ 1163.677073][T24137] syz.3.5581[24137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1163.677217][T24137] syz.3.5581[24137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1164.024733][T24145] xt_socket: unknown flags 0x58 [ 1164.823517][T13120] Bluetooth: hci3: command 0x0406 tx timeout [ 1164.830848][T24126] Bluetooth: hci1: command 0x0406 tx timeout [ 1164.837770][T20928] Bluetooth: hci4: command 0x0406 tx timeout [ 1164.903732][T20928] Bluetooth: hci0: command 0x0c1a tx timeout [ 1165.176096][ T788] usb 1-1: USB disconnect, device number 59 [ 1165.191750][T24154] loop6: detected capacity change from 0 to 4096 [ 1165.228045][T24154] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1165.376532][T24154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.451903][T24164] loop3: detected capacity change from 0 to 512 [ 1165.479718][T24164] EXT4-fs: Ignoring removed nobh option [ 1165.525839][T24164] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1165.563103][T24164] EXT4-fs error (device loop3): __ext4_iget:5053: inode #11: block 1: comm syz.3.5592: invalid block [ 1165.607768][T24164] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5592: couldn't read orphan inode 11 (err -117) [ 1165.623718][T15987] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1165.653195][T24164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.725109][T24164] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #2: comm syz.3.5592: Directory hole found for htree leaf block 0 [ 1165.829626][T21764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.857425][T15987] usb 3-1: config 0 has no interfaces? [ 1165.881598][T15987] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1165.906871][T15987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.915307][T15987] usb 3-1: Product: syz [ 1165.919598][T15987] usb 3-1: Manufacturer: syz [ 1165.934643][T15987] usb 3-1: SerialNumber: syz [ 1165.960702][T15987] usb 3-1: config 0 descriptor?? [ 1166.331746][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5591'. [ 1166.369695][ T788] usb 3-1: USB disconnect, device number 41 [ 1166.382742][ T5875] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1166.462548][T23687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.585944][ T5875] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1166.616978][ T5875] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1166.643626][ T5875] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1166.652773][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.678961][T24170] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1166.696412][ T5875] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1166.973405][T20928] Bluetooth: hci0: command 0x0c1a tx timeout [ 1167.071121][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 1167.071138][ T27] audit: type=1326 audit(2000001088.800:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.154001][ T27] audit: type=1326 audit(2000001088.830:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.212287][ T27] audit: type=1326 audit(2000001088.840:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.259104][ T27] audit: type=1326 audit(2000001088.850:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.306784][ T27] audit: type=1326 audit(2000001088.850:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.383570][ T27] audit: type=1326 audit(2000001088.850:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.406351][ T27] audit: type=1326 audit(2000001088.850:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.505040][ T27] audit: type=1326 audit(2000001088.850:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.566845][ T27] audit: type=1326 audit(2000001088.850:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.635433][ T27] audit: type=1326 audit(2000001088.850:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24182 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1167.891359][T24199] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1167.914232][T24199] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1169.401617][ T8] usb 1-1: USB disconnect, device number 60 [ 1170.153678][ T8] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1170.376723][ T8] usb 1-1: config 0 has no interfaces? [ 1170.424831][ T8] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1170.456873][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.483828][ T8] usb 1-1: Product: syz [ 1170.504685][ T8] usb 1-1: Manufacturer: syz [ 1170.533704][ T8] usb 1-1: SerialNumber: syz [ 1170.568939][ T8] usb 1-1: config 0 descriptor?? [ 1170.711510][T24197] loop3: detected capacity change from 0 to 40427 [ 1170.736409][T24197] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 1170.771917][T24197] F2FS-fs (loop3): invalid crc value [ 1170.796209][T24197] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 1170.864138][T24197] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 1170.882239][ T5858] usb 1-1: USB disconnect, device number 61 [ 1171.405043][T24224] loop3: detected capacity change from 0 to 512 [ 1171.501168][T24224] EXT4-fs: Ignoring removed oldalloc option [ 1171.552789][T24224] ext4: Unknown parameter 'seclabel' [ 1171.702597][T24224] xt_hashlimit: size too large, truncated to 1048576 [ 1171.929580][T24234] loop3: detected capacity change from 0 to 1024 [ 1172.036392][T24234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.713542][ T5875] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1172.963688][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 1172.995317][ T5875] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1173.015520][T24258] loop2: detected capacity change from 0 to 4096 [ 1173.030098][ T5875] usb 1-1: config 0 has no interface number 0 [ 1173.051367][T24258] EXT4-fs: Ignoring removed mblk_io_submit option [ 1173.058214][ T5875] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1173.122505][ T5875] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1173.123108][T24258] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1173.171199][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.185154][T24258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.381786][ T5875] usb 1-1: config 0 descriptor?? [ 1173.409117][ T5875] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1173.428112][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1173.428123][ T27] audit: type=1326 audit(2000001095.150:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1173.506381][ T27] audit: type=1326 audit(2000001095.150:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1173.547422][T24250] loop6: detected capacity change from 0 to 40427 [ 1173.575830][ T27] audit: type=1326 audit(2000001095.150:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1173.617034][T24250] F2FS-fs (loop6): Unrecognized mount option "whint_mode=user-based" or missing value [ 1173.707082][T24246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5618'. [ 1173.725827][ T27] audit: type=1326 audit(2000001095.160:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1173.749664][ T5780] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1173.814610][ T27] audit: type=1326 audit(2000001095.160:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1173.918410][ T27] audit: type=1326 audit(2000001095.160:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1173.977642][ T27] audit: type=1326 audit(2000001095.160:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1173.997590][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.026969][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.045809][ T27] audit: type=1326 audit(2000001095.160:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1174.102537][ T27] audit: type=1326 audit(2000001095.160:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1174.166812][ T27] audit: type=1326 audit(2000001095.160:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24257 comm="syz.2.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff15698ebe9 code=0x7ffc0000 [ 1174.240261][ T5780] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1174.305842][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.381536][ T5780] usb 3-1: config 0 descriptor?? [ 1174.603552][ T788] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1174.798568][ T788] usb 7-1: config 0 has no interfaces? [ 1174.829895][ T788] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1174.866961][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.890899][ T788] usb 7-1: Product: syz [ 1174.901987][ T788] usb 7-1: Manufacturer: syz [ 1174.911732][ T788] usb 7-1: SerialNumber: syz [ 1174.927560][ T788] usb 7-1: config 0 descriptor?? [ 1175.055630][ T5780] usb 3-1: language id specifier not provided by device, defaulting to English [ 1175.185336][ T788] usb 7-1: USB disconnect, device number 65 [ 1175.510753][ T5780] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 1175.553638][ T5780] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 1175.561259][ T5780] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 1175.621573][ T5780] usb 3-1: USB disconnect, device number 42 [ 1175.678115][ T28] usb 1-1: USB disconnect, device number 62 [ 1176.190344][T20927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.299437][T24279] loop6: detected capacity change from 0 to 512 [ 1177.392703][T24279] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1177.423570][T24279] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1177.608387][T24279] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.5630: bad orphan inode 131083 [ 1177.626679][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.633073][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.721374][T24279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1177.932389][T24285] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1178.298908][T24279] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1178.522946][T23687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.913578][ T5858] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1179.115298][ T5858] usb 1-1: config 0 has no interfaces? [ 1179.122921][ T5858] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1179.160692][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.189326][ T5858] usb 1-1: Product: syz [ 1179.195467][ T5858] usb 1-1: Manufacturer: syz [ 1179.209616][ T5858] usb 1-1: SerialNumber: syz [ 1179.225692][ T5858] usb 1-1: config 0 descriptor?? [ 1179.253431][ T788] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1179.450669][ T788] usb 7-1: Using ep0 maxpacket: 8 [ 1179.498387][ T5858] usb 1-1: USB disconnect, device number 63 [ 1179.522018][ T788] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1179.538072][ T788] usb 7-1: config 0 has no interface number 0 [ 1179.544515][ T788] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1179.555977][ T788] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1179.565423][ T788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.602971][ T788] usb 7-1: config 0 descriptor?? [ 1179.624601][ T788] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1179.859196][T24303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5635'. [ 1181.002803][T21764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.323090][T24327] loop3: detected capacity change from 0 to 512 [ 1181.329951][T24318] syzkaller0: entered promiscuous mode [ 1181.345504][T24318] syzkaller0: entered allmulticast mode [ 1181.649135][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 1181.649150][ T27] audit: type=1800 audit(2000001103.380:962): pid=24327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5642" name="file1" dev="loop3" ino=1048640 res=0 errno=0 [ 1183.331223][ T788] usb 7-1: USB disconnect, device number 66 [ 1183.453668][ T5844] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1183.497925][T24349] vivid-000: disconnect [ 1183.613480][ T5780] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1183.671817][ T5844] usb 1-1: config 0 has no interfaces? [ 1183.705950][ T5844] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1183.725336][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.741955][ T5844] usb 1-1: Product: syz [ 1183.746358][ T5844] usb 1-1: Manufacturer: syz [ 1183.750987][ T5844] usb 1-1: SerialNumber: syz [ 1183.764287][ T5844] usb 1-1: config 0 descriptor?? [ 1183.798072][ T5780] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1183.834110][ T5780] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1183.873913][T24338] vivid-000: reconnect [ 1183.878725][ T5780] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1183.899264][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.921267][ T5780] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1183.937659][ T5780] usb 3-1: invalid MIDI out EP 0 [ 1184.013688][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5649'. [ 1184.069686][ T5844] usb 1-1: USB disconnect, device number 64 [ 1184.139202][ T5780] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 1184.163117][ T5780] usb 3-1: USB disconnect, device number 43 [ 1184.330560][T24360] syzkaller0: entered promiscuous mode [ 1184.343081][T24360] syzkaller0: entered allmulticast mode [ 1184.828748][T24367] loop6: detected capacity change from 0 to 4096 [ 1184.855361][T24367] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1184.934632][T24367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1184.969349][T24374] loop0: detected capacity change from 0 to 256 [ 1185.053503][T24374] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1185.133678][T24374] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1185.185470][T24374] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1185.414862][T24383] syzkaller0: entered promiscuous mode [ 1185.420401][T24383] syzkaller0: entered allmulticast mode [ 1185.516021][ T5858] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1185.721069][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 1185.743151][ T5858] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.786451][ T5858] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.825843][ T5858] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1185.849473][ T5858] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1185.868211][ T5858] usb 4-1: Product: syz [ 1185.872565][ T5858] usb 4-1: Manufacturer: syz [ 1185.907894][ T5858] hub 4-1:4.0: USB hub found [ 1186.133667][ T5858] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 1186.240145][T23687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.313997][ T5780] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1186.443806][ T5858] usb 4-1: USB disconnect, device number 39 [ 1186.498746][ T5780] usb 3-1: config 0 has no interfaces? [ 1186.520166][ T5780] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1186.545079][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.565682][ T5780] usb 3-1: Product: syz [ 1186.569919][ T5780] usb 3-1: Manufacturer: syz [ 1186.583617][ T5780] usb 3-1: SerialNumber: syz [ 1186.597514][ T5780] usb 3-1: config 0 descriptor?? [ 1186.669900][T24404] vivid-000: disconnect [ 1186.852181][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5667'. [ 1186.872945][ T5875] usb 3-1: USB disconnect, device number 44 [ 1187.823644][T24394] vivid-000: reconnect [ 1188.633774][T24425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5678'. [ 1189.124296][T24437] loop0: detected capacity change from 0 to 512 [ 1189.183061][T24437] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.5682: iget: bad i_size value: 38620345925642 [ 1189.184440][T24437] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5682: couldn't read orphan inode 15 (err -117) [ 1189.203217][T24437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.547334][T24441] loop3: detected capacity change from 0 to 256 [ 1189.677859][T24441] FAT-fs (loop3): Directory bread(block 64) failed [ 1189.710123][T24441] FAT-fs (loop3): Directory bread(block 65) failed [ 1189.773564][T24441] FAT-fs (loop3): Directory bread(block 66) failed [ 1189.780179][T24441] FAT-fs (loop3): Directory bread(block 67) failed [ 1189.805997][T21478] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.827369][T24441] FAT-fs (loop3): Directory bread(block 68) failed [ 1189.849305][T24441] FAT-fs (loop3): Directory bread(block 69) failed [ 1189.893588][T24441] FAT-fs (loop3): Directory bread(block 70) failed [ 1189.900202][T24441] FAT-fs (loop3): Directory bread(block 71) failed [ 1189.950191][T24441] FAT-fs (loop3): Directory bread(block 72) failed [ 1189.959497][T24441] FAT-fs (loop3): Directory bread(block 73) failed [ 1190.213650][ T8] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1190.448442][ T8] usb 7-1: config 0 has no interfaces? [ 1190.471796][ T8] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1190.492553][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.516190][ T8] usb 7-1: Product: syz [ 1190.520419][ T8] usb 7-1: Manufacturer: syz [ 1190.560350][ T8] usb 7-1: SerialNumber: syz [ 1190.586161][ T8] usb 7-1: config 0 descriptor?? [ 1190.783794][T24465] vivid-000: disconnect [ 1190.864755][T24445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5685'. [ 1190.882925][ T5875] usb 7-1: USB disconnect, device number 67 [ 1191.212793][T24453] vivid-000: reconnect [ 1191.403587][T24461] loop0: detected capacity change from 0 to 40427 [ 1191.456454][T24461] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1191.509617][T24461] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1191.569868][T24461] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 1191.613019][T24461] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1192.311882][T24461] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1192.563395][T24461] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1195.411618][T24487] loop3: detected capacity change from 0 to 40427 [ 1195.461600][T24487] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1195.524630][T24487] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1195.593976][T24487] F2FS-fs (loop3): invalid crc value [ 1195.618764][T24487] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1195.837566][T24487] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1195.867469][T24487] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1195.933402][ T27] audit: type=1326 audit(2000001117.660:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c78ebe9 code=0x7ffc0000 [ 1196.031334][ T27] audit: type=1326 audit(2000001117.660:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c78ebe9 code=0x7ffc0000 [ 1196.080971][T24514] syzkaller0: entered promiscuous mode [ 1196.091417][ T27] audit: type=1326 audit(2000001117.710:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f881c78ebe9 code=0x7ffc0000 [ 1196.141830][T24514] syzkaller0: entered allmulticast mode [ 1196.181954][ T27] audit: type=1326 audit(2000001117.710:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c78ebe9 code=0x7ffc0000 [ 1196.280666][ T27] audit: type=1326 audit(2000001117.710:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c78ebe9 code=0x7ffc0000 [ 1196.346611][ T27] audit: type=1326 audit(2000001117.710:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f881c78ebe9 code=0x7ffc0000 [ 1196.376470][ T27] audit: type=1326 audit(2000001117.710:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c78ebe9 code=0x7ffc0000 [ 1196.411651][T24515] syz.3.5697: attempt to access beyond end of device [ 1196.411651][T24515] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1196.437748][ T27] audit: type=1326 audit(2000001117.710:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.0.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881c78ebe9 code=0x7ffc0000 [ 1196.485088][ T27] audit: type=1326 audit(2000001117.720:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.6.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9fd8ebe9 code=0x7ffc0000 [ 1196.568627][ T27] audit: type=1326 audit(2000001117.720:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.6.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9fd8ebe9 code=0x7ffc0000 [ 1196.621423][T24487] syz.3.5697: attempt to access beyond end of device [ 1196.621423][T24487] loop3: rw=2049, sector=45104, nr_sectors = 120 limit=40427 [ 1196.644304][T24523] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5708'. [ 1196.675430][T24487] syz.3.5697: attempt to access beyond end of device [ 1196.675430][T24487] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1202.188759][ T5858] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1202.273775][ T5844] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1202.405717][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.426089][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.446458][ T5858] usb 7-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 1202.465695][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.497890][ T5844] usb 1-1: config 0 has no interfaces? [ 1202.507906][ T5858] usb 7-1: config 0 descriptor?? [ 1202.539173][ T5844] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1202.588514][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.601474][ T5844] usb 1-1: Product: syz [ 1202.607458][ T5844] usb 1-1: Manufacturer: syz [ 1202.612406][ T5844] usb 1-1: SerialNumber: syz [ 1202.621946][ T5844] usb 1-1: config 0 descriptor?? [ 1202.925352][T24575] x_tables: duplicate underflow at hook 1 [ 1202.935757][ T5858] saitek 0003:06A3:0CFA.0002: item fetching failed at offset 5/7 [ 1202.956558][ T5858] saitek 0003:06A3:0CFA.0002: parse failed [ 1202.962606][ T5858] saitek: probe of 0003:06A3:0CFA.0002 failed with error -22 [ 1203.164346][ T5858] usb 7-1: USB disconnect, device number 68 [ 1203.225683][ T5875] usb 1-1: USB disconnect, device number 65 [ 1203.998015][T24586] xt_nfacct: accounting object `syz1' does not exist [ 1205.300188][T24604] loop0: detected capacity change from 0 to 256 [ 1205.418344][T24604] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1205.450609][T24604] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1205.516331][T24604] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1205.857824][T24613] loop6: detected capacity change from 0 to 256 [ 1208.722615][T24613] FAT-fs (loop6): Directory bread(block 64) failed [ 1208.729534][T24613] FAT-fs (loop6): Directory bread(block 65) failed [ 1208.736489][T24613] FAT-fs (loop6): Directory bread(block 66) failed [ 1208.743074][T24613] FAT-fs (loop6): Directory bread(block 67) failed [ 1208.749744][T24613] FAT-fs (loop6): Directory bread(block 68) failed [ 1208.757965][T24613] FAT-fs (loop6): Directory bread(block 69) failed [ 1208.764678][T24613] FAT-fs (loop6): Directory bread(block 70) failed [ 1208.771270][T24613] FAT-fs (loop6): Directory bread(block 71) failed [ 1208.777946][T24613] FAT-fs (loop6): Directory bread(block 72) failed [ 1208.784595][T24613] FAT-fs (loop6): Directory bread(block 73) failed [ 1209.819984][T24629] loop6: detected capacity change from 0 to 512 [ 1209.885804][T24629] EXT4-fs: inline encryption not supported [ 1209.931668][T24629] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1210.047481][T24629] EXT4-fs (loop6): 1 truncate cleaned up [ 1210.084486][T24629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1210.093458][ T5858] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1210.182080][T23687] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.231485][T24635] loop3: detected capacity change from 0 to 1024 [ 1210.399569][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 1210.489880][ T5858] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1210.509190][ T5858] usb 1-1: config 0 has no interface number 0 [ 1210.542475][ T5858] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1210.633419][ T5858] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1210.650498][T24621] loop2: detected capacity change from 0 to 40427 [ 1210.653677][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.684150][ T5858] usb 1-1: config 0 descriptor?? [ 1210.736191][ T5858] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1210.750174][T24621] F2FS-fs (loop2): invalid crc value [ 1210.790236][T24621] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1211.041019][T24621] F2FS-fs (loop2): Start checkpoint disabled! [ 1211.064602][T24624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5742'. [ 1211.100683][T24621] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1212.678898][ T5858] usb 1-1: USB disconnect, device number 66 [ 1213.607602][T24667] vivid-000: disconnect [ 1213.756447][T24662] vivid-000: reconnect [ 1214.465590][T24685] loop2: detected capacity change from 0 to 512 [ 1214.485043][T24685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1214.520584][T24685] EXT4-fs (loop2): 1 orphan inode deleted [ 1214.579737][T24685] EXT4-fs (loop2): 1 truncate cleaned up [ 1214.632037][T24685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1214.712220][T20927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.946203][T24694] loop2: detected capacity change from 0 to 256 [ 1215.493095][ T5858] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1215.773443][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 1215.784306][ T5858] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1215.822418][ T5858] usb 7-1: config 0 has no interface number 0 [ 1215.912030][ T5858] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1216.076731][ T5858] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1216.205695][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.333011][ T5858] usb 7-1: config 0 descriptor?? [ 1216.413010][ T5858] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1216.574508][T24714] loop0: detected capacity change from 0 to 512 [ 1216.609288][T24714] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1216.664377][T24714] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1216.673989][T24714] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.5767: bad orphan inode 15 [ 1216.703736][T24695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5761'. [ 1216.753580][T24714] ext4_test_bit(bit=14, block=18) = 1 [ 1216.769218][T24714] is_bad_inode(inode)=0 [ 1216.793502][T24714] NEXT_ORPHAN(inode)=1023 [ 1216.797892][T24714] max_ino=32 [ 1216.801116][T24714] i_nlink=0 [ 1216.833233][T24714] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2983: inode #15: comm syz.0.5767: corrupted xattr block 19: e_value size too large [ 1216.904086][T24714] EXT4-fs warning (device loop0): ext4_evict_inode:272: xattr delete (err -117) [ 1216.930981][T24714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1217.221559][T21478] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.785488][T24726] loop2: detected capacity change from 0 to 4096 [ 1217.834227][T24726] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1217.851384][T24726] EXT4-fs (loop2): unsupported descriptor size 255 [ 1218.761216][ T5844] usb 7-1: USB disconnect, device number 69 [ 1218.891112][T24731] vivid-000: disconnect [ 1219.078882][T24730] vivid-000: reconnect [ 1219.264194][ T8] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1219.467940][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.494326][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1219.535579][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1219.553519][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.575611][ T8] usb 3-1: config 0 descriptor?? [ 1220.848632][ T8] usb 3-1: string descriptor 0 read error: -71 [ 1220.865061][ T8] usb 3-1: USB disconnect, device number 45 [ 1220.985741][T24756] loop6: detected capacity change from 0 to 512 [ 1221.004850][T24756] EXT4-fs: inline encryption not supported [ 1221.101168][T24756] __quota_error: 49 callbacks suppressed [ 1221.101187][T24756] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 1221.123738][T24756] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1221.147380][T24756] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.5781: Failed to acquire dquot type 1 [ 1221.216867][T24756] EXT4-fs (loop6): 1 truncate cleaned up [ 1221.224143][T24756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1221.236973][T24756] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.279321][T24756] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.916021][T24782] loop3: detected capacity change from 0 to 1024 [ 1221.929556][T24782] EXT4-fs: Ignoring removed nobh option [ 1221.943700][T24782] EXT4-fs: inline encryption not supported [ 1221.955536][T24782] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1222.006286][T24782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.118025][T21764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.154483][ T8] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1222.156566][T24765] loop0: detected capacity change from 0 to 40427 [ 1222.183096][T24765] F2FS-fs (loop0): Unrecognized mount option "whint_mode=user-based" or missing value [ 1222.366430][ T8] usb 3-1: config 0 has no interfaces? [ 1222.388546][ T8] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1222.403414][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.420435][ T8] usb 3-1: Product: syz [ 1222.429757][ T8] usb 3-1: Manufacturer: syz [ 1222.441953][ T8] usb 3-1: SerialNumber: syz [ 1222.468493][ T8] usb 3-1: config 0 descriptor?? [ 1222.874117][T24791] vivid-000: disconnect [ 1222.916340][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5789'. [ 1222.942174][T24790] vivid-000: reconnect [ 1222.961828][ T8] usb 3-1: USB disconnect, device number 46 [ 1227.268026][T24804] tipc: Cannot configure node identity twice [ 1227.550491][T24826] loop2: detected capacity change from 0 to 512 [ 1227.597644][T24826] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1227.854891][T24826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1227.888776][T24826] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.5803: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 1228.345862][T24826] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.5803: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1228.847125][T20927] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1228.875337][T24843] vivid-000: disconnect [ 1228.891090][T20927] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1229.030512][T24828] vivid-000: reconnect [ 1229.276159][T24855] syzkaller0: entered promiscuous mode [ 1229.303349][T24855] syzkaller0: entered allmulticast mode [ 1229.473421][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1229.707788][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1229.716828][T24857] [ 1229.721622][T24857] ============================= [ 1229.726594][T24857] WARNING: suspicious RCU usage [ 1229.731457][T24857] syzkaller #0 Not tainted [ 1229.735913][T24857] ----------------------------- [ 1229.740757][T24857] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1229.749910][T24857] [ 1229.749910][T24857] other info that might help us debug this: [ 1229.749910][T24857] [ 1229.760356][T24857] [ 1229.760356][T24857] rcu_scheduler_active = 2, debug_locks = 1 [ 1229.768754][T24857] 1 lock held by syz.0.5808/24857: [ 1229.773975][T24857] #0: ffffffff8cd2fd80 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1229.784265][T24857] [ 1229.784265][T24857] stack backtrace: [ 1229.790147][T24857] CPU: 1 PID: 24857 Comm: syz.0.5808 Not tainted syzkaller #0 [ 1229.797601][T24857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 1229.807652][T24857] Call Trace: [ 1229.810929][T24857] [ 1229.813858][T24857] dump_stack_lvl+0x16c/0x230 [ 1229.818537][T24857] ? show_regs_print_info+0x20/0x20 [ 1229.823734][T24857] ? load_image+0x3b0/0x3b0 [ 1229.828241][T24857] lockdep_rcu_suspicious+0x1e1/0x300 [ 1229.833615][T24857] get_callchain_entry+0x2a9/0x3c0 [ 1229.838726][T24857] get_perf_callchain+0xa3/0x4b0 [ 1229.843665][T24857] ? put_callchain_entry+0xb0/0xb0 [ 1229.848791][T24857] ? plist_add+0x3d8/0x490 [ 1229.853260][T24857] __bpf_get_stack+0x2d7/0x510 [ 1229.858070][T24857] ? stack_map_get_build_id_offset+0x720/0x720 [ 1229.864233][T24857] ? __cant_sleep+0x210/0x210 [ 1229.868927][T24857] ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 1229.874561][T24857] bpf_get_stack_raw_tp+0x1a9/0x210 [ 1229.879767][T24857] bpf_prog_b8a90dd1efcc4ad9+0x45/0x49 [ 1229.885235][T24857] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 1229.890640][T24857] bpf_prog_test_run_syscall+0x311/0x490 [ 1229.896887][T24857] ? sock_gen_cookie+0x60/0x60 [ 1229.901832][T24857] ? sock_gen_cookie+0x60/0x60 [ 1229.906601][T24857] bpf_prog_test_run+0x321/0x390 [ 1229.911542][T24857] __sys_bpf+0x440/0x800 [ 1229.915788][T24857] ? bpf_link_show_fdinfo+0x350/0x350 [ 1229.921162][T24857] ? lock_chain_count+0x20/0x20 [ 1229.926013][T24857] __x64_sys_bpf+0x7c/0x90 [ 1229.930425][T24857] do_syscall_64+0x55/0xb0 [ 1229.934846][T24857] ? clear_bhb_loop+0x40/0x90 [ 1229.939517][T24857] ? clear_bhb_loop+0x40/0x90 [ 1229.944193][T24857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1229.950089][T24857] RIP: 0033:0x7f881c78ebe9 [ 1229.954503][T24857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1229.974112][T24857] RSP: 002b:00007f881d5b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1229.982529][T24857] RAX: ffffffffffffffda RBX: 00007f881c9c6090 RCX: 00007f881c78ebe9 [ 1229.990674][T24857] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1229.998642][T24857] RBP: 00007f881c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1230.006609][T24857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.014591][T24857] R13: 00007f881c9c6128 R14: 00007f881c9c6090 R15: 00007fffd6324128 [ 1230.022570][T24857] [ 1230.027615][T24859] loop3: detected capacity change from 0 to 128 [ 1230.084139][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1230.134781][T24861] syz.3.5812: attempt to access beyond end of device [ 1230.134781][T24861] loop3: rw=2049, sector=145, nr_sectors = 432 limit=128 [ 1230.153436][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1230.192375][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.224992][T24852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1230.255915][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1230.488918][ T9695] kworker/u4:13: attempt to access beyond end of device [ 1230.488918][ T9695] loop3: rw=1, sector=577, nr_sectors = 464 limit=128 [ 1232.067126][ T5844] usb 3-1: USB disconnect, device number 47 [ 1239.048420][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.054987][ T1287] ieee802154 phy1 wpan1: encryption failed: -22