last executing test programs: 11.554457692s ago: executing program 4 (id=3756): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x20) 9.809567609s ago: executing program 0 (id=3843): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x39e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x541b, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b45, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_MCE_KILL(0x43, 0x1, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 9.747882222s ago: executing program 4 (id=3845): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xc}, 0x1c) connect$inet6(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x4, 0x100000001}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x800, 0x4) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4cc4, 0x0, &(0x7f0000000100), &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000580)={0xa4, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x58b}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pim6reg\x00'}}]}]}, 0xa4}}, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000080001801000020646c2500000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000ffddc878ca9c4a8ad01d5ff98500000068c3d3beacee4ac8479164bb2fb34447b2bef996c7aefe41b0f94aa81226545aff026a8b708ad387dfbb0813d2570fadd6bb8bf63b689c87148591fe1622332080ea8712dba0aeab40b9b34c24a5fe1cd7"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xa5, &(0x7f0000000300)=""/165, 0x0, 0x28}, 0x90) socket(0x2, 0x3, 0x6) syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f000000ac00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') syz_fuse_handle_req(r4, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f0000008bc0)={0x2020}, 0x2020) stat(&(0x7f00000000c0)='./file0/file0/file0/file0/file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 9.483373958s ago: executing program 3 (id=3846): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), 0x2) 7.920388403s ago: executing program 0 (id=3848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lx}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.774880993s ago: executing program 3 (id=3850): socket(0x3, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket(0x29, 0x80009, 0xfffffffb) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c080, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000001100000065000000000000007600"], &(0x7f0000000300)='syzkaller\x00', 0x4}, 0x90) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x37bf, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) userfaultfd(0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) pselect6(0x49, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000680)={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff84, &(0x7f0000000080)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000280)={[{@nodiscard}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}, {@noload}, {@minixdf}, {@usrjquota}]}, 0xfe, 0x457, &(0x7f0000001100)="$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") bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) 7.553652744s ago: executing program 0 (id=3852): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string}, 0x0, 0x0}, 0x0) 7.205440229s ago: executing program 4 (id=3853): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000040)={0x20002000}) r4 = socket$packet(0x11, 0x3, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x12040, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/78, 0x0}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000440)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb6e73ef2a359249c3e29408dd3e0eb42bf3d6ecf7d9f6a38e6c0818e746843a829db24da275daaa1af5754e2aba22b617f1367566fd3b8892e4774e", 0x94, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6.439287846s ago: executing program 1 (id=3856): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) 5.722175555s ago: executing program 2 (id=3857): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept$alg(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x20) 5.69139891s ago: executing program 1 (id=3858): socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x5}, 0x4) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000680)=ANY=[], 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x280803) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x40000000015, 0x5, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x200640, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000004e22000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='rpcgss_svc_unwrap_failed\x00', r3}, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808100240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 4.286659187s ago: executing program 5 (id=3860): socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184d, 0x0, 0x0, 0x0, 0x0) 4.155013688s ago: executing program 0 (id=3861): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x80}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.062819904s ago: executing program 1 (id=3862): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), 0x2) 4.015269089s ago: executing program 2 (id=3863): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x39e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x541b, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b45, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_MCE_KILL(0x43, 0x1, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 3.94316918s ago: executing program 5 (id=3864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lx}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.835468727s ago: executing program 0 (id=3865): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="000202"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="ab9bcfbd850ccbb3aad7ffc90f0aeb0af5dbce120d555f32fc1d1d16df579c8b7c20aeda96fbd665", 0x28, 0x0, 0x0, 0x0) 3.650686881s ago: executing program 1 (id=3866): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)={0x84, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x84}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.065367508s ago: executing program 5 (id=3867): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x13000)=nil, 0x13000, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000018c0), 0x4) r2 = socket$inet(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x1}, &(0x7f0000000240)) creat(0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f00000004c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0), 0xb68e2a9771539e86, &(0x7f0000000100)=ANY=[]) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000140), 0x0, 0x8a00) read$hidraw(r4, 0x0, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/96, 0x60}, 0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800004000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)='I', 0x1}, {&(0x7f00000002c0)='Z', 0x1}], 0x2}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r6, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) 2.841044644s ago: executing program 0 (id=3868): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="54030000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="360333008000000008021100000108021100000150505050505000000000000000000000000000000100030100058c0000009af6da3eccb31dfdb01e6e7177c98c64430a038b1a5dfa035ea7a9381b60d5573f7a471f2255656c6fda4f9fe2a1cefb7e307f95a05deb88da8d6767435855a59a04759977ef1cf00cf302f452d67e80c72e836d0cfcfd95ca366d0e284f1c03058e40a2283bb06b723df5c6eef98646cae544fd4eebdf5effc6f1ba5debee4b327b120000000000003c04000000007606000000000000ddb731851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc8887e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca05000000000000000a5d5addb3184fec9543e41f70eb1bcd9a87da54ab8f09ec2f4b39e15dca2e549f43749fdc5d2150d9349f08894e39ac26f6ddba1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd484826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335dd25523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366dd120941a0e096d40b7d3b60bec79aa8aaa3f566dd3f7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc62b9e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2edd0b0da71e815422994325dfecdd6530d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cefe477c38a52b4fb790de3ab2c08eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15cdd064f3fef835ea800000038d3b6030000009aab386eddcd74bd0a990a74a32d0520cef4e20037fc14fd1be83b638c04110b784e2038855bc69f536c27031736aac99c9f93b5a8ee8926e1ea777abd21b8a1485c4c183ccbc6c2271c7ccb2c6e47f349ebe91e6d059bab96f492ebb063e42581243ea1fae5d0ba5b9ca3c22b79283b4b3fe917653f57a4e800ffc69b72b1b3040df623f827422445a6f5490f1701e33a2e67a86bf0ee69818665d790e2809fa0923f643492"], 0x354}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020}) r4 = memfd_secret(0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) socket$caif_stream(0x25, 0x1, 0x1000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) socket$inet6(0xa, 0x800, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @random="22b7a92a69ce", 'wg0\x00'}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x13a8}, 0xf376f9a8029ab7b6) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x94, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x90, 0xac, 0x69}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$packet(0x11, 0x2, 0x300) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 2.772199866s ago: executing program 2 (id=3869): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote, @private2, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@dev, @remote, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r1}) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087}) 2.731967128s ago: executing program 4 (id=3870): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) 2.658385941s ago: executing program 1 (id=3871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lstat(0x0, &(0x7f0000000440)) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0xe, 0x0}}], 0x300, 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000780)={0xfffffffe, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@ifindex, 0x8, 0x0, 0x9, &(0x7f0000000840)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@map, r3, 0x9, 0x0, r3, @link_id=r4, r5}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x6, 0xbffffbff) capset(&(0x7f0000000300)={0x20080522}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f00000020c0)=ANY=[@ANYBLOB="04040a00000000000054"], 0xd) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0)=0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) socket(0x1d, 0x0, 0x7) 2.591081225s ago: executing program 3 (id=3872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 2.458343925s ago: executing program 2 (id=3873): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) 1.681778934s ago: executing program 4 (id=3874): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) 1.59989687s ago: executing program 1 (id=3875): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x20) 1.579499575s ago: executing program 5 (id=3876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002bc4b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 1.403080116s ago: executing program 3 (id=3877): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x80}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.30388042s ago: executing program 5 (id=3878): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), 0x2) 1.291727055s ago: executing program 2 (id=3879): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setregid(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003c40), 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 1.183170156s ago: executing program 3 (id=3880): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="000202"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="ab9bcfbd850ccbb3aad7ffc90f0aeb0af5dbce120d555f32fc1d1d16df579c8b7c20aeda96fbd665", 0x28, 0x0, 0x0, 0x0) 1.112494447s ago: executing program 4 (id=3881): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x207ffc, 0x92, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000980), 0x0}, 0x20) bind$inet(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000001020104000000002f2c00000a0000003c0002802c000180140003002001000000000000000000000000000014000400fe880000000000210000000000000001040002"], 0x50}}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001900010027bd700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000d849e96c6dff8868000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000300000000000c00150000000000ffff00"], 0xc4}}, 0x0) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0xffffffffffffffda, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xc0}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x1000000000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="130100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff01000007240100002e000b24"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 819.83617ms ago: executing program 5 (id=3882): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = epoll_create(0x1000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000040)={0x20002000}) r4 = socket$packet(0x11, 0x3, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x12040, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/78, 0x0}) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000440)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb6e73ef2a359249c3e29408dd3e0eb42bf3d6ecf7d9f6a38e6c0818e746843a829db24da275daaa1af5754e2aba22b617f1367566fd3b8892e4774e", 0x94, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 35.116734ms ago: executing program 2 (id=3883): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x39e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x541b, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b45, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_MCE_KILL(0x43, 0x1, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3884): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c80)={0x84, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x84}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): : attribute type 10 has an invalid length. [ 1577.427552][T21976] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1578.007955][T21976] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1578.085297][T21976] team0: Port device netdevsim0 removed [ 1578.122677][T21976] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1578.490094][T22002] loop4: detected capacity change from 0 to 136 [ 1578.536409][T22002] iso9660: Unknown parameter 'norockor' [ 1578.778964][T22008] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 1578.785610][T22008] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1578.922193][T17375] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1578.974901][T22009] vhci_hcd: connection closed [ 1578.985145][T22008] vhci_hcd vhci_hcd.0: Device attached [ 1579.005395][ T5914] vhci_hcd: stop threads [ 1579.040896][ T5914] vhci_hcd: release socket [ 1579.045320][ T5914] vhci_hcd: disconnect device [ 1579.297829][T16301] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1579.549791][T16301] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.597961][T16301] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1579.644475][T16301] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1579.761293][T16301] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1579.794807][T16301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.859353][ T5160] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1579.936337][T16301] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1580.087793][ T5160] usb 1-1: Using ep0 maxpacket: 32 [ 1580.124114][T17375] udevd[17375]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1580.125753][ T5160] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1580.323374][ T5160] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.359532][ T5160] usb 1-1: config 0 descriptor?? [ 1580.392237][ T5160] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1580.484260][T22030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3247'. [ 1580.575961][T22032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1580.754356][T22034] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 1581.027958][ T29] audit: type=1326 audit(1720930388.664:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22019 comm="syz.0.3244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb122375bd9 code=0x0 [ 1581.248228][T22043] syzkaller1: entered promiscuous mode [ 1581.508937][T22043] syzkaller1: entered allmulticast mode [ 1581.551495][ T53] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 1582.757882][ T5160] gspca_nw80x: reg_r err -110 [ 1582.771355][ T5160] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 1582.990619][T17085] usb 6-1: USB disconnect, device number 56 [ 1583.097870][T12105] usb 1-1: USB disconnect, device number 84 [ 1583.459039][T22064] loop5: detected capacity change from 0 to 2048 [ 1583.498890][T22064] udf: Bad value for 'session' [ 1583.548632][T22073] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 1583.809823][T22073] bond1: entered promiscuous mode [ 1583.828990][T22075] lo: entered promiscuous mode [ 1583.904937][T22075] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1584.007594][T22075] bond1: (slave lo): making interface the new active one [ 1584.030480][T22075] bond1: (slave lo): Enslaving as an active interface with an up link [ 1584.098707][T22078] ip6tnl0: entered allmulticast mode [ 1584.204696][T22062] ip6tnl0: left allmulticast mode [ 1584.320480][T22103] syzkaller1: entered promiscuous mode [ 1584.417954][T22103] syzkaller1: entered allmulticast mode [ 1584.447014][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3272'. [ 1584.476204][T22111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3272'. [ 1584.620160][T22111] gtp0: entered promiscuous mode [ 1584.662720][T22111] gtp0: entered allmulticast mode [ 1584.684986][T22116] loop3: detected capacity change from 0 to 512 [ 1584.850464][T22116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1585.034550][T22116] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1585.289326][T22116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 1585.297467][T22116] System zones: 0-2, 18-18, 34-34 [ 1585.375795][T22116] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1585.400653][T22117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3271'. [ 1585.488627][T22116] EXT4-fs (loop3): 1 truncate cleaned up [ 1585.495827][T22116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1585.644740][ T53] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1585.654315][ T53] Bluetooth: hci2: Injecting HCI hardware error event [ 1585.654345][T22116] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.3275: corrupted xattr block 19: invalid header [ 1585.678457][ T53] Bluetooth: hci2: hardware error 0x00 [ 1585.724621][T22116] EXT4-fs (loop3): Remounting filesystem read-only [ 1585.793026][ T29] audit: type=1800 audit(1720930393.444:366): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3275" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1585.937214][T18131] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.383552][T22135] loop3: detected capacity change from 0 to 1024 [ 1586.428888][T22135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1586.548293][T17085] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1586.710331][T22120] loop4: detected capacity change from 0 to 32768 [ 1586.743382][T22120] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3276 (22120) [ 1586.784065][T17085] usb 1-1: Using ep0 maxpacket: 32 [ 1586.807080][T17085] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1586.840741][T17085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.842983][T22120] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1586.879533][T17085] usb 1-1: Product: syz [ 1586.881307][T22136] input: syz0 as /devices/virtual/input/input14 [ 1586.884091][T17085] usb 1-1: Manufacturer: syz [ 1586.909280][T17085] usb 1-1: SerialNumber: syz [ 1586.925035][T22120] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1586.930668][T17085] usb 1-1: config 0 descriptor?? [ 1586.993401][T22120] BTRFS info (device loop4): using free-space-tree [ 1587.150165][ T29] audit: type=1326 audit(1720930394.794:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22154 comm="syz.5.3284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef73175bd9 code=0x0 [ 1587.212673][T17085] f81534a_ctrl 1-1:0.0: failed to set register 0x116: -5 [ 1587.282833][T17085] f81534a_ctrl 1-1:0.0: failed to enable ports: -5 [ 1587.322597][T17085] f81534a_ctrl 1-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1587.384171][T17085] usb 1-1: USB disconnect, device number 85 [ 1587.948026][ T53] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1588.077125][T18135] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1588.184512][ T5160] libceph: connect (1)[c::]:6789 error -101 [ 1588.196290][ T5160] libceph: mon0 (1)[c::]:6789 connect error [ 1588.624671][ T5160] libceph: connect (1)[c::]:6789 error -101 [ 1588.630985][ T5160] libceph: mon0 (1)[c::]:6789 connect error [ 1588.736776][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3290'. [ 1589.320451][ T57] libceph: connect (1)[c::]:6789 error -101 [ 1589.326687][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 1589.359015][T22175] ceph: No mds server is up or the cluster is laggy [ 1589.804578][T22194] futex_wake_op: syz.0.3294 tries to shift op by 32; fix this program [ 1589.891760][T22190] loop4: detected capacity change from 0 to 1024 [ 1590.097481][T22190] hfsplus: bad catalog entry type [ 1590.124103][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3296'. [ 1590.177820][T22199] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3296'. [ 1590.264189][T22199] gtp1: entered promiscuous mode [ 1590.437905][T22199] gtp1: entered allmulticast mode [ 1590.475516][ T62] hfsplus: b-tree write err: -5, ino 4 [ 1590.650584][T22204] syzkaller1: entered promiscuous mode [ 1590.663596][T22204] syzkaller1: entered allmulticast mode [ 1591.662789][T22224] Bluetooth: MGMT ver 1.22 [ 1592.196094][T22248] loop4: detected capacity change from 0 to 1024 [ 1592.260696][T22248] hfsplus: bad catalog entry used to create inode [ 1592.281504][T22248] hfsplus: failed to load root directory [ 1592.351846][T17375] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1592.409009][T22248] warning: `syz.4.3310' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1592.647790][T18322] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1592.870152][T18322] usb 2-1: Using ep0 maxpacket: 8 [ 1592.878671][T18322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1592.897793][ T57] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1592.907404][T18322] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1592.957155][T18322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.985536][T18322] usb 2-1: config 0 descriptor?? [ 1593.229826][T18322] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1593.236753][T18322] usb 2-1: No valid video chain found. [ 1595.217819][ T57] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1595.229865][ T57] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.304945][ T57] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1595.387834][ T57] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.402867][T22279] loop5: detected capacity change from 0 to 16 [ 1595.410168][T22279] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1595.521758][ T57] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1595.585013][ T57] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1595.637521][ T57] usb 4-1: Product: syz [ 1595.656866][ T57] usb 4-1: Manufacturer: syz [ 1595.691400][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'. [ 1595.705835][ T57] usb 4-1: can't set config #1, error -71 [ 1595.760567][ T57] usb 4-1: USB disconnect, device number 63 [ 1596.075537][T22294] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1596.084637][T22294] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1596.086174][ T5159] usb 2-1: USB disconnect, device number 69 [ 1596.201499][T22298] loop5: detected capacity change from 0 to 512 [ 1596.242342][T22298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1596.308441][T22298] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1596.373833][T22298] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 1596.408015][T22298] System zones: 0-2, 18-18, 34-34 [ 1596.427229][T22298] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1596.465871][T22298] EXT4-fs (loop5): 1 truncate cleaned up [ 1596.480355][T22298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1596.518096][T22298] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.3326: corrupted xattr block 19: invalid header [ 1596.543532][T22305] loop3: detected capacity change from 0 to 1024 [ 1596.556145][T22298] EXT4-fs (loop5): Remounting filesystem read-only [ 1596.573783][T16135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1596.584328][T16135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1596.595771][T16135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1596.598252][ T29] audit: type=1800 audit(1720930404.224:368): pid=22298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3326" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1596.628998][T16135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1596.647962][T16135] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1596.655592][T16135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1596.656134][T22305] hfsplus: bad catalog entry used to create inode [ 1596.683347][T21376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.759237][T22305] hfsplus: failed to load root directory [ 1597.251826][ T5914] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.487231][ T5914] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.568872][ T5159] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1597.770345][ T5159] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1597.798010][ T5914] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.799778][ T5159] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.857998][ T5159] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1597.878795][ T5159] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.913540][T16135] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1597.946158][ T5159] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1597.958394][ T5159] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1597.966434][ T5159] usb 6-1: Product: syz [ 1597.988625][ T5159] usb 6-1: Manufacturer: syz [ 1598.001861][ T5159] cdc_wdm 6-1:1.0: skipping garbage [ 1598.007085][ T5159] cdc_wdm 6-1:1.0: skipping garbage [ 1598.039448][ T5159] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1598.055557][ T5159] cdc_wdm 6-1:1.0: Unknown control protocol [ 1598.059661][ T5914] bond0: (slave netdevsim0): Releasing backup interface [ 1598.101851][T16135] Bluetooth: hci3: Invalid handle: 0xb9b0 > 0x0eff [ 1598.125010][ T5914] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.174610][T22332] netlink: 'syz.2.3336': attribute type 10 has an invalid length. [ 1598.338038][T22332] team0: Port device netdevsim0 added [ 1598.353254][T22333] netlink: 'syz.2.3336': attribute type 10 has an invalid length. [ 1598.401631][T22333] team0: Port device netdevsim0 removed [ 1598.422063][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.428779][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.435243][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.441868][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.448209][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.454794][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.461325][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.467936][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.474252][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.480852][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.487106][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.493699][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.499974][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.506583][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.512890][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.519690][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.526052][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.527829][T17085] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1598.532623][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.532865][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1598.532890][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1598.564964][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1598.575818][T22333] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1598.584955][T18322] usb 6-1: USB disconnect, device number 57 [ 1598.748269][ T53] Bluetooth: hci1: command tx timeout [ 1598.850831][T17085] usb 2-1: Using ep0 maxpacket: 8 [ 1598.865346][T17085] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.912018][T17085] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1598.979313][T17085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.458418][T17085] usb 2-1: config 0 descriptor?? [ 1599.790868][T17085] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1599.845706][T17085] usb 2-1: No valid video chain found. [ 1600.098397][T22307] chnl_net:caif_netlink_parms(): no params data found [ 1600.214053][T22361] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1600.223180][T22361] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1601.252137][ T53] Bluetooth: hci1: command tx timeout [ 1601.325319][ T5914] bridge_slave_1: left allmulticast mode [ 1601.346395][ T5914] bridge_slave_1: left promiscuous mode [ 1601.371512][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.411141][ T5914] bridge_slave_0: left allmulticast mode [ 1601.437724][ T5914] bridge_slave_0: left promiscuous mode [ 1601.456542][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.373544][T12105] usb 2-1: USB disconnect, device number 70 [ 1603.040180][T22396] netlink: 'syz.0.3349': attribute type 1 has an invalid length. [ 1603.049698][T22396] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3349'. [ 1603.308176][ T53] Bluetooth: hci1: command tx timeout [ 1604.151192][ T5914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.229498][ T5914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.269775][ T5914] bond0 (unregistering): Released all slaves [ 1605.284169][T22423] loop5: detected capacity change from 0 to 8 [ 1605.388188][ T53] Bluetooth: hci1: command tx timeout [ 1605.536314][T22423] unable to read xattr id index table [ 1606.232480][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3355'. [ 1606.272333][T22307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.302626][T22307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.329235][T22307] bridge_slave_0: entered allmulticast mode [ 1606.375834][T22307] bridge_slave_0: entered promiscuous mode [ 1606.403925][T22307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.433646][T22307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.451603][T22307] bridge_slave_1: entered allmulticast mode [ 1606.477519][T22307] bridge_slave_1: entered promiscuous mode [ 1606.657863][ T5155] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1606.715252][T22307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.728433][T16135] Bluetooth: hci5: sending frame failed (-49) [ 1606.730797][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1606.751878][T22307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.845580][T22440] loop3: detected capacity change from 0 to 8 [ 1606.882858][ T5155] usb 6-1: Using ep0 maxpacket: 8 [ 1606.901428][ T5155] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.938986][ T5155] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1606.972665][T22440] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1606.993604][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.007017][ T5155] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1607.031655][T22440] SQUASHFS error: Failed to read block 0x1c0: -5 [ 1607.097841][T22440] SQUASHFS error: Unable to read metadata cache entry [1be] [ 1607.112954][ T5155] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1607.127730][ T5155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.181587][ T5155] usb 6-1: config 0 descriptor?? [ 1607.211470][ T5155] usb 6-1: Found UVC 0.00 device (05ac:8501) [ 1607.238617][ T5155] usb 6-1: No valid video chain found. [ 1607.277518][T22307] team0: Port device team_slave_0 added [ 1607.371745][T22307] team0: Port device team_slave_1 added [ 1608.578458][T22453] loop3: detected capacity change from 0 to 256 [ 1608.620129][T22453] FAT-fs (loop3): Directory bread(block 1285) failed [ 1608.793627][T22460] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1608.800173][T22460] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1608.868513][T22460] vhci_hcd vhci_hcd.0: Device attached [ 1608.953448][T22462] vhci_hcd: connection closed [ 1608.953915][ T2825] vhci_hcd: stop threads [ 1608.964731][ T2825] vhci_hcd: release socket [ 1608.992410][ T2825] vhci_hcd: disconnect device [ 1609.076963][T22307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.088189][T18109] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1609.111350][T22307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.179113][T22307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.340703][T18109] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1609.358271][T18109] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1609.429637][T18109] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 1609.448894][T18109] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1609.472013][T18109] usb 4-1: Manufacturer: syz [ 1609.484315][T22307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.513621][T22307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.516161][T18109] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1609.547266][T22307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.688151][ T5167] usb 6-1: USB disconnect, device number 58 [ 1609.752976][T18109] usb 4-1: USB disconnect, device number 64 [ 1609.823567][T22483] loop5: detected capacity change from 0 to 512 [ 1609.906600][T22483] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz.5.3370: corrupted in-inode xattr: invalid ea_ino [ 1609.947595][T22483] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.3370: couldn't read orphan inode 15 (err -117) [ 1609.978840][T22483] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1610.024592][T22307] hsr_slave_0: entered promiscuous mode [ 1610.031870][ T5155] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1610.066266][T22307] hsr_slave_1: entered promiscuous mode [ 1610.079438][T21376] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1610.098141][T22307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1610.119342][T22307] Cannot create hsr debugfs directory [ 1610.155904][ T5914] hsr_slave_0: left promiscuous mode [ 1610.199943][ T5914] hsr_slave_1: left promiscuous mode [ 1610.219650][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.237793][ T5155] usb 2-1: Using ep0 maxpacket: 32 [ 1610.247403][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.256454][ T5155] usb 2-1: config 255 has an invalid interface number: 117 but max is 0 [ 1610.269293][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1610.274070][ T5155] usb 2-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 1610.276682][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.344948][ T5155] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.356310][ T5155] usb 2-1: config 255 has no interface number 0 [ 1610.385753][ T5155] usb 2-1: config 255 interface 117 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 1610.403913][ T5914] team0: left allmulticast mode [ 1610.409834][T22496] netlink: 'syz.5.3374': attribute type 12 has an invalid length. [ 1610.409863][T22496] netlink: 'syz.5.3374': attribute type 11 has an invalid length. [ 1610.409884][T22496] netlink: 190580 bytes leftover after parsing attributes in process `syz.5.3374'. [ 1610.429935][ T5155] usb 2-1: config 255 interface 117 has no altsetting 0 [ 1610.484597][ T5155] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 1610.521928][ T5914] team_slave_0: left allmulticast mode [ 1610.539108][ T5914] team_slave_1: left allmulticast mode [ 1610.545439][ T5914] team0: left promiscuous mode [ 1610.549354][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.551022][ T5914] team_slave_0: left promiscuous mode [ 1610.575888][ T5914] team_slave_1: left promiscuous mode [ 1610.591912][ T5914] veth1_macvtap: left promiscuous mode [ 1610.597605][ T5914] veth0_macvtap: left promiscuous mode [ 1610.605093][ T5914] veth1_vlan: left promiscuous mode [ 1610.615878][ T5914] veth0_vlan: left promiscuous mode [ 1610.718748][ T5155] usb 2-1: Product: 譛丘ਘ썵熺⠒믋쐾撼ފ啁屇佽∄熍肷Ʉ琅裿ㄞဖ糧昻踊郉㊢粁콖뽤揌﫱꟞쓏䅢戙綮佦ᄺ胹朓驊澖‫〗❆ᐊ伏巓쩗埔䣢ꬎ饄夗䫺φᙧ䏊쌑匧ᦒ椆䗀仩䓓㜃ⴋ䭬͐틴ِ䀼恰㇂㸕妍ꅎ膽捒쉬妴꡺폌㢰垌摮Ս䋁쨁볜 [ 1610.792302][T16339] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1611.296342][T16339] usb 6-1: Using ep0 maxpacket: 16 [ 1611.348353][T16339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1611.383335][ T5155] usb 2-1: Manufacturer: 䐊 [ 1611.389145][T16339] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1611.407957][ T5155] usb 2-1: SerialNumber: ౷ [ 1611.419972][T16339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.469349][T16339] usb 6-1: config 0 descriptor?? [ 1611.908204][T22497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.918094][T22497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.943811][T16339] hid (null): unknown global tag 0x83 [ 1611.950701][T16339] hid (null): unknown global tag 0xc [ 1611.969186][T16339] hid-generic 0003:0158:0100.0033: unknown main item tag 0x1 [ 1611.983389][T16339] hid-generic 0003:0158:0100.0033: unexpected long global item [ 1612.003815][T16339] hid-generic 0003:0158:0100.0033: probe with driver hid-generic failed with error -22 [ 1612.649980][ T5914] team0 (unregistering): Port device team_slave_1 removed [ 1612.717355][ T5914] team0 (unregistering): Port device team_slave_0 removed [ 1613.327456][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 1613.639675][ T5155] usb 2-1: USB disconnect, device number 71 [ 1613.690091][T18109] usb 6-1: USB disconnect, device number 59 [ 1613.989684][ T5167] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1614.053672][T22537] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1614.062748][T22537] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1615.111864][ T5167] usb 3-1: Using ep0 maxpacket: 8 [ 1615.129860][ T5167] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.140695][ T5167] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1615.152264][ T5167] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1615.183534][ T5167] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1615.223385][T22548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1615.246868][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.258412][T22548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1615.283654][ T5167] usb 3-1: config 0 descriptor?? [ 1615.317279][ T5167] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 1615.391783][ T5167] usb 3-1: No valid video chain found. [ 1615.405270][T22548] gtp0: entered promiscuous mode [ 1615.462937][T22548] gtp0: entered allmulticast mode [ 1617.300323][T12105] usb 3-1: USB disconnect, device number 82 [ 1617.519207][ T5167] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1617.717985][ T5167] usb 6-1: Using ep0 maxpacket: 32 [ 1617.733065][ T5167] usb 6-1: config 255 has an invalid interface number: 117 but max is 0 [ 1617.786188][ T5167] usb 6-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 1617.828978][ T5167] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.857381][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'. [ 1617.906864][ T5167] usb 6-1: config 255 has no interface number 0 [ 1617.933729][ T5167] usb 6-1: config 255 interface 117 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 1617.965678][ T5167] usb 6-1: config 255 interface 117 has no altsetting 0 [ 1618.042413][ T5167] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 1618.057826][ T5167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.090800][ T5167] usb 6-1: Product: 譛丘ਘ썵熺⠒믋쐾撼ފ啁屇佽∄熍肷Ʉ琅裿ㄞဖ糧昻踊郉㊢粁콖뽤揌﫱꟞쓏䅢戙綮佦ᄺ胹朓驊澖‫〗❆ᐊ伏巓쩗埔䣢ꬎ饄夗䫺φᙧ䏊쌑匧ᦒ椆䗀仩䓓㜃ⴋ䭬͐틴ِ䀼恰㇂㸕妍ꅎ膽捒쉬妴꡺폌㢰垌摮Ս䋁쨁볜 [ 1618.132558][T22585] netlink: 'syz.2.3397': attribute type 12 has an invalid length. [ 1618.148473][T22585] netlink: 'syz.2.3397': attribute type 11 has an invalid length. [ 1618.171128][T22585] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.3397'. [ 1618.187491][ T5167] usb 6-1: Manufacturer: 䐊 [ 1618.205202][ T5167] usb 6-1: SerialNumber: ౷ [ 1618.503757][T17085] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1618.594398][T22589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1618.663774][T22307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1618.695553][T22576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1618.709056][T17085] usb 3-1: Using ep0 maxpacket: 16 [ 1618.717733][T17085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1618.735118][T17085] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1618.735875][T22307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1618.772819][T17085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.791620][T22307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1618.833337][T17085] usb 3-1: config 0 descriptor?? [ 1618.840961][ T5167] usb 6-1: USB disconnect, device number 60 [ 1618.860771][T22307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1619.252668][T22307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1619.287250][T22585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.328196][T22585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.370014][T22307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1619.374828][T22604] loop3: detected capacity change from 0 to 512 [ 1619.412931][T17085] hid (null): unknown global tag 0x83 [ 1619.433375][T12105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.440605][T12105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1619.456355][T17085] hid (null): unknown global tag 0xc [ 1619.503448][T17085] hid-generic 0003:0158:0100.0034: unknown main item tag 0x1 [ 1619.511263][T22604] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1619.558204][T17085] hid-generic 0003:0158:0100.0034: unexpected long global item [ 1619.581390][T17085] hid-generic 0003:0158:0100.0034: probe with driver hid-generic failed with error -22 [ 1619.644214][T17085] usb 3-1: USB disconnect, device number 83 [ 1619.698728][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.705894][T12105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.722506][T22614] loop5: detected capacity change from 0 to 512 [ 1619.773938][T22604] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.3400: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1619.800286][T22604] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.3400: couldn't read orphan inode 15 (err -117) [ 1619.826794][T22614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1619.886925][T22614] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1619.930395][T22604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1619.947411][T22614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 1620.029598][T22614] System zones: 0-2, 18-18, 34-34 [ 1620.114579][T22614] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1620.159073][T22614] EXT4-fs (loop5): 1 truncate cleaned up [ 1620.175275][T22614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1620.407036][T21376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.627321][T22640] netlink: 'syz.1.3408': attribute type 10 has an invalid length. [ 1621.641262][T22637] loop5: detected capacity change from 0 to 1024 [ 1621.701958][T22637] hfsplus: bad catalog entry used to create inode [ 1621.725465][T22637] hfsplus: failed to load root directory [ 1621.832469][T22640] bond0: (slave netdevsim0): Releasing backup interface [ 1621.931178][T22640] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1621.943490][T22640] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1621.951943][T22640] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1621.978819][T22640] team0: Failed to send options change via netlink (err -105) [ 1621.986364][T22640] team0: Port device netdevsim0 added [ 1622.091652][T22643] netlink: 'syz.1.3408': attribute type 10 has an invalid length. [ 1622.219426][T22643] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1622.274943][T22643] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1622.313681][T22643] team0: Failed to send options change via netlink (err -105) [ 1622.335664][T22643] team0: Port device netdevsim0 removed [ 1622.409833][T22643] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1622.442439][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1622.477883][T22660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1622.487799][ T5155] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1622.541333][T22660] gtp0: entered promiscuous mode [ 1622.573255][T22660] gtp0: entered allmulticast mode [ 1622.758187][ T5155] usb 1-1: Using ep0 maxpacket: 8 [ 1622.814087][ T5155] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1622.833766][T22307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1622.868060][ T5155] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1622.912208][ T5155] usb 1-1: config 0 has no interface number 0 [ 1622.959348][ T5155] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1623.008808][ T5155] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1623.064558][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.081189][T18131] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.119011][ T5155] usb 1-1: config 0 descriptor?? [ 1623.288004][T17085] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1623.555031][T17085] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.222147][T22680] loop3: detected capacity change from 0 to 512 [ 1624.247720][T17085] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1624.277111][T17085] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1624.346699][T17085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.380215][T22680] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.3415: corrupted in-inode xattr: invalid ea_ino [ 1624.402104][T22680] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.3415: couldn't read orphan inode 15 (err -117) [ 1624.426062][T22680] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1624.644679][T17085] usb 2-1: string descriptor 0 read error: -22 [ 1624.746627][T18131] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1624.854601][T17085] usb 2-1: USB disconnect, device number 72 [ 1624.865279][T22696] loop5: detected capacity change from 0 to 512 [ 1624.902331][T22696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1624.999826][T22696] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1625.044442][T22696] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 1625.073881][T22307] veth0_vlan: entered promiscuous mode [ 1625.081918][T22696] System zones: 0-2, 18-18, 34-34 [ 1625.108543][T22696] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1625.156965][T22307] veth1_vlan: entered promiscuous mode [ 1625.201066][T22696] EXT4-fs (loop5): 1 truncate cleaned up [ 1625.225216][T22696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1625.321938][T22307] veth0_macvtap: entered promiscuous mode [ 1625.351312][T22307] veth1_macvtap: entered promiscuous mode [ 1625.406890][T21376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.483003][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.549438][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.574894][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.614794][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.654330][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.687790][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.735990][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.786156][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.813728][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.853256][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.903419][T22307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.931895][T16339] usb 1-1: USB disconnect, device number 86 [ 1626.063022][T22717] loop3: detected capacity change from 0 to 1024 [ 1626.329806][T22717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1626.355748][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1627.217728][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1627.227584][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1627.306757][T22717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 1627.340189][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1627.372126][T22717] System zones: 0-1, 3-12 [ 1627.389577][T22717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1627.413279][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1627.449227][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1627.493619][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1627.532993][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1627.544267][T22734] loop5: detected capacity change from 0 to 512 [ 1627.586247][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1627.616322][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1627.653637][T22307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1627.667284][T22734] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1627.705193][T22738] netlink: 'syz.0.3424': attribute type 10 has an invalid length. [ 1627.746466][T22738] bond0: (slave netdevsim0): Releasing backup interface [ 1627.756502][T21336] Bluetooth: hci5: Frame reassembly failed (-84) [ 1627.815523][T22738] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1627.898783][T22717] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 1627.912631][T22738] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1628.020558][T22734] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz.5.3426: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1628.040817][T22734] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.3426: couldn't read orphan inode 15 (err -117) [ 1628.072726][T22734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1628.114609][T22738] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1628.155679][T22738] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1628.214178][T22758] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1628.223184][T22758] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1628.742626][T22738] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1628.762798][T22738] team0: Failed to send options change via netlink (err -105) [ 1628.794416][T22738] team0: Port device netdevsim0 added [ 1628.854373][T22743] netlink: 'syz.0.3424': attribute type 10 has an invalid length. [ 1629.002865][T22743] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1629.048953][T22743] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1629.108879][T22743] team0: Failed to send options change via netlink (err -105) [ 1629.192230][T22743] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1629.221330][T22743] team0: Port device netdevsim0 removed [ 1629.789897][T16135] Bluetooth: hci5: command 0x1003 tx timeout [ 1629.796842][ T53] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1630.089600][T22743] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1630.141344][T22743] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1630.160666][T22743] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1630.173834][T18131] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.210910][T22307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.261742][T22307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.311191][T22307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.350746][T22307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.634092][T22777] netlink: 'syz.1.3434': attribute type 12 has an invalid length. [ 1630.686303][T22777] netlink: 'syz.1.3434': attribute type 11 has an invalid length. [ 1630.706490][T22777] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.3434'. [ 1630.708398][T22780] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1630.889092][T22780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3432'. [ 1631.025779][T21336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.052156][T21336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.146705][T21376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1631.158420][T17085] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1631.291180][T21336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.364642][T21336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.388736][T17085] usb 2-1: Using ep0 maxpacket: 16 [ 1631.485296][T17085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1631.735270][T17085] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1632.532189][T17085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.551892][T17085] usb 2-1: config 0 descriptor?? [ 1633.034656][T22777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.068015][T22454] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1633.078229][T22777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.144670][T17085] hid (null): nested delimiters [ 1633.176327][T17085] hid (null): nested delimiters [ 1633.210513][T17085] hid (null): nested delimiters [ 1633.302284][T22454] usb 6-1: Using ep0 maxpacket: 8 [ 1633.311262][T17085] hid (null): report_id 2838798905 is invalid [ 1633.317474][T17085] hid (null): unknown global tag 0xc [ 1633.337719][T17085] hid (null): unknown global tag 0xa5 [ 1633.350191][T22454] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.383016][T17085] hid (null): unknown global tag 0xd [ 1633.393417][T22454] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1633.432518][T22454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.437769][T17085] hid (null): unknown global tag 0xc [ 1633.490834][T17085] hid-generic 0003:0158:0100.0035: unknown main item tag 0x1 [ 1633.513652][T22454] usb 6-1: config 0 descriptor?? [ 1633.576521][T17085] hid-generic 0003:0158:0100.0035: unexpected long global item [ 1633.622962][T17085] hid-generic 0003:0158:0100.0035: probe with driver hid-generic failed with error -22 [ 1633.736798][T17085] usb 2-1: USB disconnect, device number 73 [ 1635.820345][T17085] usb 6-1: USB disconnect, device number 61 [ 1637.410961][T22863] trusted_key: encrypted_key: insufficient parameters specified [ 1637.444277][T22863] trusted_key: encrypted_key: insufficient parameters specified [ 1637.491344][T22863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3451'. [ 1638.842816][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1639.063622][T22901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3465'. [ 1639.966389][T22901] gtp0: entered promiscuous mode [ 1640.000320][T22901] gtp0: entered allmulticast mode [ 1640.205091][T22914] trusted_key: encrypted_key: insufficient parameters specified [ 1640.217771][T22914] trusted_key: encrypted_key: insufficient parameters specified [ 1640.388979][T22914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3468'. [ 1643.225930][T22958] netlink: 'syz.4.3483': attribute type 10 has an invalid length. [ 1644.079683][T16135] Bluetooth: hci1: Invalid handle: 0xb9b0 > 0x0eff [ 1644.088783][T16135] Bluetooth: Unexpected start frame (len 18) [ 1644.148487][T22958] team0: Failed to send options change via netlink (err -105) [ 1644.156144][T22958] team0: Port device netdevsim0 added [ 1644.232175][T16339] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1644.799041][T16135] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1644.903020][T22991] netlink: 'syz.4.3488': attribute type 10 has an invalid length. [ 1644.922767][T16135] Bluetooth: hci0: command 0x0406 tx timeout [ 1645.059985][ T53] Bluetooth: hci1: Invalid handle: 0xb9b0 > 0x0eff [ 1645.067138][ T53] Bluetooth: Unexpected start frame (len 18) [ 1645.379470][T22991] team0: Port device netdevsim0 removed [ 1645.489050][T22991] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1648.087893][T23030] netlink: 'syz.5.3500': attribute type 10 has an invalid length. [ 1648.160680][ T53] Bluetooth: hci0: Invalid handle: 0xb9b0 > 0x0eff [ 1648.184011][ T53] Bluetooth: Unexpected start frame (len 18) [ 1648.251178][T23030] team0: Failed to send options change via netlink (err -105) [ 1648.266611][T23030] team0: Port device netdevsim0 added [ 1648.337175][T12105] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1648.337229][T23038] loop4: detected capacity change from 0 to 512 [ 1648.420226][T23038] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.3502: corrupted in-inode xattr: invalid ea_ino [ 1648.466940][T23038] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3502: couldn't read orphan inode 15 (err -117) [ 1648.559548][T23038] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1648.792081][T22307] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1649.757758][ T5167] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1649.998075][ T5167] usb 2-1: Using ep0 maxpacket: 8 [ 1650.039642][ T5167] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.085446][ T5167] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1650.111814][ T5167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.156997][ T5167] usb 2-1: config 0 descriptor?? [ 1650.190137][ T5167] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 1650.214655][ T5167] usb 2-1: No valid video chain found. [ 1650.376897][T23091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'. [ 1650.388393][T17085] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1650.748230][ T5167] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1650.789870][T17085] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.807951][T17085] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1650.827376][T17085] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1650.843636][T17085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.943480][ T5167] usb 4-1: not running at top speed; connect to a high speed hub [ 1650.963628][ T5167] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1650.974438][ T5167] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1650.989435][ T5167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.007391][ T5167] usb 4-1: Manufacturer: ᰉ [ 1651.012687][ T5167] usb 4-1: SerialNumber: 耹盏Ǻ磬ꢄ㡁忘튳㈸鹤楞㓾㟢歨㬤냴졄ﲀￂ⧞ꓪ㭲핚츐࢞젿͚ž伵䚳 [ 1651.080904][T17085] usb 1-1: language id specifier not provided by device, defaulting to English [ 1651.216981][T23099] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3522'. [ 1651.487587][T17085] usb 1-1: USB disconnect, device number 87 [ 1651.530724][ T5167] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1651.585371][ T5167] usb 4-1: USB disconnect, device number 65 [ 1651.592933][T23106] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1651.636825][T23106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3524'. [ 1651.711596][T23108] netlink: 'syz.2.3525': attribute type 12 has an invalid length. [ 1651.719843][T23108] netlink: 'syz.2.3525': attribute type 11 has an invalid length. [ 1651.732227][T23108] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.3525'. [ 1652.018009][T16339] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1652.414015][T16339] usb 3-1: Using ep0 maxpacket: 16 [ 1652.432864][T16339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1652.444203][T16339] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1652.453970][T16339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.465351][T16339] usb 3-1: config 0 descriptor?? [ 1653.469006][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 1653.550085][T23108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1653.595696][T23108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1653.640687][T16339] hid (null): nested delimiters [ 1653.645607][T16339] hid (null): nested delimiters [ 1653.688259][T16339] hid (null): nested delimiters [ 1653.693345][T16339] hid (null): report_id 2838798905 is invalid [ 1653.727866][T16339] hid (null): unknown global tag 0xc [ 1653.733234][T16339] hid (null): unknown global tag 0xa5 [ 1653.786707][T16339] hid (null): unknown global tag 0xd [ 1653.806904][T16339] hid (null): unknown global tag 0xc [ 1653.850725][T16339] hid-generic 0003:0158:0100.0036: unknown main item tag 0x1 [ 1653.887903][T16339] hid-generic 0003:0158:0100.0036: unexpected long global item [ 1653.919081][T16339] hid-generic 0003:0158:0100.0036: probe with driver hid-generic failed with error -22 [ 1653.971607][T16339] usb 3-1: USB disconnect, device number 84 [ 1654.063152][T18109] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1654.107134][T23133] loop4: detected capacity change from 0 to 64 [ 1654.188153][ T5167] usb 2-1: USB disconnect, device number 74 [ 1654.303920][T18109] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1654.348639][T18109] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1654.387913][T18109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.457776][T18109] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 1654.464706][T18109] usb 1-1: No valid video chain found. [ 1654.548229][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3532'. [ 1654.760967][T23142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'. [ 1654.795230][T23145] loop3: detected capacity change from 0 to 512 [ 1654.801733][T23142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3533'. [ 1654.823280][T23143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3536'. [ 1654.896252][T23145] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.3537: corrupted in-inode xattr: invalid ea_ino [ 1655.001450][T23145] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.3537: couldn't read orphan inode 15 (err -117) [ 1655.070902][T23145] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1655.346218][T18131] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1655.358007][T18322] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1655.583121][T18322] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1655.614155][T18322] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1655.646592][T18322] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1655.683996][T18322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.773528][ T5167] usb 1-1: USB disconnect, device number 88 [ 1655.951418][T18322] usb 2-1: language id specifier not provided by device, defaulting to English [ 1656.165836][T23169] loop3: detected capacity change from 0 to 256 [ 1656.216532][T23169] exfat: Deprecated parameter 'utf8' [ 1656.265006][T23169] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 1656.368304][T18322] usb 2-1: USB disconnect, device number 75 [ 1656.559003][T23179] netlink: 'syz.2.3546': attribute type 12 has an invalid length. [ 1656.566940][T23179] netlink: 'syz.2.3546': attribute type 11 has an invalid length. [ 1656.638072][T23179] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.3546'. [ 1656.956322][T23187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1656.978158][T18109] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1657.153598][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'. [ 1657.184130][ T53] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1657.187779][T18109] usb 3-1: Using ep0 maxpacket: 16 [ 1657.208774][T23190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3550'. [ 1657.273601][T23190] gtp1: entered promiscuous mode [ 1657.279259][T23190] gtp1: entered allmulticast mode [ 1657.301709][T18109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1657.324640][T23193] netlink: 'syz.4.3551': attribute type 10 has an invalid length. [ 1657.380392][T18109] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1657.391719][ T53] Bluetooth: hci1: Invalid handle: 0xb9b0 > 0x0eff [ 1657.402083][T16135] Bluetooth: Unexpected start frame (len 18) [ 1657.418402][T18109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.488985][T18109] usb 3-1: config 0 descriptor?? [ 1658.170730][T23208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.587147][T23205] loop5: detected capacity change from 0 to 512 [ 1658.732604][T23208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.892893][T23205] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz.5.3553: corrupted in-inode xattr: invalid ea_ino [ 1658.943388][T18109] hid (null): nested delimiters [ 1658.997896][T18109] hid (null): nested delimiters [ 1659.026896][T18109] hid (null): nested delimiters [ 1659.036300][T23205] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.3553: couldn't read orphan inode 15 (err -117) [ 1659.055135][T18109] hid (null): report_id 2838798905 is invalid [ 1659.093757][T18109] hid (null): unknown global tag 0xc [ 1659.120574][T18109] hid (null): unknown global tag 0xa5 [ 1659.124778][T23205] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1659.139242][T18109] hid (null): unknown global tag 0xd [ 1659.168772][T18109] hid (null): unknown global tag 0xc [ 1659.211972][T18109] hid-generic 0003:0158:0100.0037: unknown main item tag 0x1 [ 1659.248198][T18109] hid-generic 0003:0158:0100.0037: unexpected long global item [ 1659.285083][T18109] hid-generic 0003:0158:0100.0037: probe with driver hid-generic failed with error -22 [ 1659.394273][T18109] usb 3-1: USB disconnect, device number 85 [ 1659.490161][T23221] loop4: detected capacity change from 0 to 512 [ 1659.499611][T21376] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1659.633067][T23221] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1659.724987][T23221] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.3556: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1659.778825][T23221] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3556: couldn't read orphan inode 15 (err -117) [ 1659.848888][T23221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1659.886796][T23224] loop5: detected capacity change from 0 to 64 [ 1660.287806][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 1660.636495][T23239] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1660.664185][T23241] loop3: detected capacity change from 0 to 512 [ 1660.740759][T23244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1660.744717][T23239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3562'. [ 1660.787892][T23244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3565'. [ 1660.791850][T23241] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.3564: corrupted in-inode xattr: invalid ea_ino [ 1660.923581][T23241] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.3564: couldn't read orphan inode 12 (err -117) [ 1660.925480][T23244] gtp2: entered promiscuous mode [ 1660.966756][T23241] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1661.071274][T23244] gtp2: entered allmulticast mode [ 1661.304034][T18131] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1661.389369][ T51] tipc: Subscription rejected, illegal request [ 1661.544819][T23255] netlink: 'syz.1.3568': attribute type 10 has an invalid length. [ 1661.628487][T23255] bond0: (slave netdevsim0): Releasing backup interface [ 1661.721755][T23255] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1661.735289][T23255] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1661.797226][T23255] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1661.842302][T23255] team0: Failed to send options change via netlink (err -105) [ 1661.887503][T23255] team0: Port device netdevsim0 added [ 1661.970770][ T5155] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1661.979523][T23259] netlink: 'syz.1.3568': attribute type 10 has an invalid length. [ 1662.047265][T23259] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1662.085519][T23259] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1662.096778][T16135] Bluetooth: Unexpected start frame (len 0) [ 1662.148124][T23259] team0: Failed to send options change via netlink (err -105) [ 1662.159213][T23259] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1662.195548][T23259] team0: Port device netdevsim0 removed [ 1662.217764][ T5155] usb 1-1: Using ep0 maxpacket: 32 [ 1662.241640][ T5155] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1662.260261][T16135] Bluetooth: hci3: Invalid handle: 0xb9b0 > 0x0eff [ 1662.260884][T23273] netlink: 'syz.3.3573': attribute type 12 has an invalid length. [ 1662.275646][T16135] Bluetooth: Unexpected start frame (len 18) [ 1662.275793][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.327886][T23273] netlink: 'syz.3.3573': attribute type 11 has an invalid length. [ 1662.336072][T23259] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1662.342697][ T5155] usb 1-1: config 0 descriptor?? [ 1662.375156][T23272] netlink: 'syz.2.3572': attribute type 10 has an invalid length. [ 1662.395425][T23273] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.3573'. [ 1662.429840][ T5155] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1662.443916][T22307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.508950][T23272] bond0: (slave netdevsim0): Releasing backup interface [ 1662.570800][T23272] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1662.592177][T23272] team0: Failed to send options change via netlink (err -105) [ 1662.600198][T23272] team0: Port device netdevsim0 added [ 1662.728133][T16339] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1662.928532][T16339] usb 4-1: Using ep0 maxpacket: 16 [ 1662.972608][T16339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1662.988970][T16339] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1663.021929][T16339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.037442][ T29] audit: type=1326 audit(1720930470.694:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23257 comm="syz.0.3570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb122375bd9 code=0x0 [ 1663.073227][T16339] usb 4-1: config 0 descriptor?? [ 1664.076677][ T5155] gspca_nw80x: reg_r err -110 [ 1664.097893][T23277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.160171][ T5155] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 1664.197947][T23277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1664.264866][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3580'. [ 1664.309202][T23301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3580'. [ 1664.341752][T16339] hid (null): nested delimiters [ 1664.356941][T16339] hid (null): nested delimiters [ 1664.411007][T16339] hid (null): nested delimiters [ 1664.435691][T23301] gtp1: entered promiscuous mode [ 1664.441751][T16339] hid (null): report_id 2838798905 is invalid [ 1664.452388][T23301] gtp1: entered allmulticast mode [ 1664.461329][T16339] hid (null): unknown global tag 0xc [ 1664.476909][T16339] hid (null): unknown global tag 0xa5 [ 1664.492802][T16339] hid (null): unknown global tag 0xd [ 1664.504865][T16339] hid (null): unknown global tag 0xc [ 1664.526313][T16339] hid-generic 0003:0158:0100.0038: unknown main item tag 0x1 [ 1664.566129][T16339] hid-generic 0003:0158:0100.0038: unexpected long global item [ 1664.594882][T16339] hid-generic 0003:0158:0100.0038: probe with driver hid-generic failed with error -22 [ 1664.656032][T16339] usb 4-1: USB disconnect, device number 66 [ 1664.820469][ T12] tipc: Subscription rejected, illegal request [ 1665.209992][T22454] usb 1-1: USB disconnect, device number 89 [ 1665.387822][ T5155] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1665.489014][T23324] netlink: 'syz.3.3586': attribute type 9 has an invalid length. [ 1665.522345][T23324] netlink: 'syz.3.3586': attribute type 6 has an invalid length. [ 1665.608581][T23325] netlink: 'syz.0.3587': attribute type 10 has an invalid length. [ 1665.624798][ T5155] usb 5-1: Using ep0 maxpacket: 16 [ 1665.653017][ T5155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1665.691641][T23325] bond0: (slave netdevsim0): Releasing backup interface [ 1665.705348][ T5155] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1665.742928][T23325] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1665.747750][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.801442][ T5155] usb 5-1: config 0 descriptor?? [ 1665.815702][T23325] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1665.893966][T23325] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1665.934869][T23325] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1665.993927][T23325] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1666.054764][T23325] team0: Failed to send options change via netlink (err -105) [ 1666.071395][T23318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3585'. [ 1666.125625][T23325] team0: Port device netdevsim0 added [ 1666.178528][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3588'. [ 1666.192292][T23328] netlink: 'syz.0.3587': attribute type 10 has an invalid length. [ 1666.311704][T23318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1666.346074][T23318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.361700][T23328] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1666.395734][ T5155] hid (null): nested delimiters [ 1666.407814][ T5155] hid (null): nested delimiters [ 1666.413003][ T5155] hid (null): nested delimiters [ 1666.438241][T23328] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1666.448004][ T5155] hid (null): report_id 2838798905 is invalid [ 1666.464500][ T5155] hid (null): unknown global tag 0xc [ 1666.505818][T23328] team0: Failed to send options change via netlink (err -105) [ 1666.507928][ T5155] hid (null): unknown global tag 0xa5 [ 1666.525139][T23328] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1666.559810][T23328] team0: Port device netdevsim0 removed [ 1666.568881][ T5155] hid (null): unknown global tag 0xd [ 1666.598393][ T5155] hid (null): unknown global tag 0xc [ 1666.617527][T23328] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1666.674988][ T5155] hid-generic 0003:0158:0100.0039: unknown main item tag 0x1 [ 1666.684166][T23328] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1666.699963][T16135] Bluetooth: Unexpected start frame (len 0) [ 1666.704567][ T5155] hid-generic 0003:0158:0100.0039: unexpected long global item [ 1666.766096][T23328] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1666.790557][ T5155] hid-generic 0003:0158:0100.0039: probe with driver hid-generic failed with error -22 [ 1666.827990][T22454] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1666.884355][T16135] Bluetooth: hci3: Invalid handle: 0xb9b0 > 0x0eff [ 1666.892570][ T53] Bluetooth: Unexpected start frame (len 18) [ 1666.989121][ T5155] usb 5-1: USB disconnect, device number 57 [ 1667.068775][T22454] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 1667.130028][T22454] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1667.194681][T22454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.299103][T22454] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 1667.316426][T23345] netlink: 'syz.2.3590': attribute type 10 has an invalid length. [ 1667.345056][T22454] usb 2-1: No valid video chain found. [ 1668.443836][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.029747][ T5155] usb 2-1: USB disconnect, device number 76 [ 1669.204613][T23372] loop5: detected capacity change from 0 to 512 [ 1669.214562][T23374] netlink: 'syz.0.3599': attribute type 12 has an invalid length. [ 1669.254112][T23374] netlink: 'syz.0.3599': attribute type 11 has an invalid length. [ 1669.273645][T23372] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz.5.3598: corrupted in-inode xattr: invalid ea_ino [ 1669.283951][T23374] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.3599'. [ 1669.343190][T23372] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.3598: couldn't read orphan inode 15 (err -117) [ 1669.357166][T23372] EXT4-fs (loop5): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1669.396161][T18109] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1669.420765][T21376] EXT4-fs (loop5): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1669.587730][T18109] usb 3-1: Using ep0 maxpacket: 8 [ 1669.607844][T16301] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1669.646577][T18109] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1669.667905][T18109] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1669.678920][T18109] usb 3-1: config 0 has no interface number 0 [ 1669.685153][T18109] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1669.728653][T18109] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1669.754455][T18109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.789863][T18109] usb 3-1: config 0 descriptor?? [ 1669.837756][T16301] usb 1-1: Using ep0 maxpacket: 16 [ 1669.848867][T23388] loop3: detected capacity change from 0 to 256 [ 1669.851315][T16301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1669.905691][T16301] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1669.949991][T16301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.995054][T16301] usb 1-1: config 0 descriptor?? [ 1670.189652][T22454] usb 3-1: USB disconnect, device number 86 [ 1670.440134][T23374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.508161][T23374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.577605][T16301] hid (null): nested delimiters [ 1670.596841][T16301] hid (null): nested delimiters [ 1670.610796][T16301] hid (null): nested delimiters [ 1670.631440][T16301] hid (null): report_id 2838798905 is invalid [ 1670.667437][T16301] hid (null): unknown global tag 0xc [ 1670.677935][T16301] hid (null): unknown global tag 0xa5 [ 1670.690476][T16301] hid (null): unknown global tag 0xd [ 1670.706224][T16301] hid (null): unknown global tag 0xc [ 1670.739749][T16301] hid-generic 0003:0158:0100.003A: unknown main item tag 0x1 [ 1670.780021][T16301] hid-generic 0003:0158:0100.003A: unexpected long global item [ 1670.836724][T16301] hid-generic 0003:0158:0100.003A: probe with driver hid-generic failed with error -22 [ 1671.665480][T16301] usb 1-1: USB disconnect, device number 90 [ 1671.787773][ T53] Bluetooth: hci8: command 0x0406 tx timeout [ 1671.939067][T23407] netlink: 'syz.5.3608': attribute type 12 has an invalid length. [ 1671.977807][T23407] netlink: 'syz.5.3608': attribute type 11 has an invalid length. [ 1672.002591][T23407] netlink: 190580 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1672.075861][T23411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1672.358126][T16301] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1672.528049][T16301] usb 6-1: device descriptor read/64, error -71 [ 1672.827847][T16301] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1672.887827][T18109] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1673.008202][T16301] usb 6-1: device descriptor read/64, error -71 [ 1673.117892][T18109] usb 5-1: Using ep0 maxpacket: 8 [ 1673.148163][T16301] usb usb6-port1: attempt power cycle [ 1673.154828][T18109] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1673.204706][T18109] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1673.244741][T18109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.286922][T18109] usb 5-1: config 0 descriptor?? [ 1673.487856][T22454] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1673.680993][T22454] usb 3-1: not running at top speed; connect to a high speed hub [ 1673.769720][T22454] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1673.923411][T16301] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1673.970648][T16301] usb 6-1: device descriptor read/8, error -71 [ 1674.268451][T16301] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1674.394032][T16301] usb 6-1: device descriptor read/8, error -71 [ 1674.606469][T16301] usb usb6-port1: unable to enumerate USB device [ 1674.667030][T22454] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1674.676760][T22454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.700853][T22454] usb 3-1: Manufacturer: ᰉ [ 1674.705478][T22454] usb 3-1: SerialNumber: 耹盏Ǻ磬ꢄ㡁忘튳㈸鹤楞㓾㟢歨㬤냴졄ﲀￂ⧞ꓪ㭲핚츐࢞젿͚ž伵䚳 [ 1674.863945][T23445] netlink: 'syz.1.3620': attribute type 10 has an invalid length. [ 1674.910435][T23445] bond0: (slave netdevsim0): Releasing backup interface [ 1675.495691][T23445] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1675.860263][T16301] usb 5-1: USB disconnect, device number 58 [ 1675.878105][T23445] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1675.948508][T23445] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1676.006073][T23445] team0: Failed to send options change via netlink (err -105) [ 1676.018806][T23445] team0: Port device netdevsim0 added [ 1676.305636][T23449] netlink: 'syz.1.3620': attribute type 10 has an invalid length. [ 1677.297798][T18109] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1677.433472][T23449] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1677.471146][T23449] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1677.516376][T23449] team0: Failed to send options change via netlink (err -105) [ 1677.525327][T23449] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1677.550891][T23449] team0: Port device netdevsim0 removed [ 1677.571562][T23468] loop4: detected capacity change from 0 to 512 [ 1677.607083][T23468] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.3627: corrupted in-inode xattr: invalid ea_ino [ 1677.632164][T23468] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3627: couldn't read orphan inode 15 (err -117) [ 1677.669047][T18109] usb 4-1: Using ep0 maxpacket: 8 [ 1677.679092][T18109] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.690918][T18109] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1677.702108][T18109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.707362][T23449] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1677.722439][T18109] usb 4-1: config 0 descriptor?? [ 1677.737926][T18109] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 1677.782400][T18109] usb 4-1: No valid video chain found. [ 1677.833445][T23468] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1677.846906][T22454] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1678.177894][ T5155] usb 4-1: USB disconnect, device number 67 [ 1678.196882][T22454] usb 3-1: USB disconnect, device number 87 [ 1678.478252][T22307] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 1679.752688][T23494] netlink: 'syz.2.3635': attribute type 12 has an invalid length. [ 1679.797889][T23494] netlink: 'syz.2.3635': attribute type 11 has an invalid length. [ 1679.827722][T23494] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.3635'. [ 1680.029401][T21336] tipc: Subscription rejected, illegal request [ 1680.107792][T22454] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1680.173886][T23508] netlink: 'syz.3.3639': attribute type 12 has an invalid length. [ 1680.198974][T23508] netlink: 'syz.3.3639': attribute type 11 has an invalid length. [ 1680.231315][T23508] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.3639'. [ 1680.277777][T22454] usb 3-1: device descriptor read/64, error -71 [ 1680.737842][T22454] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1681.564365][T18109] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1681.607901][T22454] usb 3-1: device descriptor read/64, error -71 [ 1681.661149][ T53] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1681.795733][T23528] netlink: 'syz.4.3643': attribute type 10 has an invalid length. [ 1681.814704][T18109] usb 4-1: Using ep0 maxpacket: 16 [ 1681.827197][T18109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1681.853153][ T53] Bluetooth: hci1: Invalid handle: 0xb9b0 > 0x0eff [ 1681.861283][ T53] Bluetooth: Unexpected start frame (len 18) [ 1681.890257][T18109] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1681.928137][T18109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.953041][ T57] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1681.973202][T22454] usb usb3-port1: attempt power cycle [ 1682.009652][T18109] usb 4-1: config 0 descriptor?? [ 1682.201405][ T57] usb 6-1: not running at top speed; connect to a high speed hub [ 1682.223171][ T57] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1682.250334][ T57] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1682.267925][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.282590][ T57] usb 6-1: Manufacturer: ᰉ [ 1682.299780][ T57] usb 6-1: SerialNumber: 耹盏Ǻ磬ꢄ㡁忘튳㈸鹤楞㓾㟢歨㬤냴졄ﲀￂ⧞ꓪ㭲핚츐࢞젿͚ž伵䚳 [ 1682.400027][T23541] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1682.417124][T22454] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1682.450950][T23508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.466828][T23541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3647'. [ 1682.471834][T23508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1682.476673][T22454] usb 3-1: device descriptor read/8, error -71 [ 1682.639246][T18109] hid (null): nested delimiters [ 1682.644326][T18109] hid (null): nested delimiters [ 1682.650183][T18109] hid (null): nested delimiters [ 1682.661089][T18109] hid (null): report_id 2838798905 is invalid [ 1682.671406][T18109] hid (null): unknown global tag 0xc [ 1682.677675][T18109] hid (null): unknown global tag 0xa5 [ 1682.691599][T18109] hid (null): unknown global tag 0xd [ 1682.698820][T18109] hid (null): unknown global tag 0xc [ 1682.758624][T18109] hid-generic 0003:0158:0100.003B: unknown main item tag 0x1 [ 1682.787836][T22454] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1682.796117][T18109] hid-generic 0003:0158:0100.003B: unexpected long global item [ 1682.826900][T18109] hid-generic 0003:0158:0100.003B: probe with driver hid-generic failed with error -22 [ 1682.850810][ T57] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1682.929347][T18109] usb 4-1: USB disconnect, device number 68 [ 1682.940430][ T57] usb 6-1: USB disconnect, device number 66 [ 1683.047933][T22454] usb 3-1: device not accepting address 91, error -71 [ 1683.080965][T22454] usb usb3-port1: unable to enumerate USB device [ 1684.669459][T23565] netlink: 'syz.5.3655': attribute type 12 has an invalid length. [ 1684.710921][T23565] netlink: 'syz.5.3655': attribute type 11 has an invalid length. [ 1684.739920][T23565] netlink: 190580 bytes leftover after parsing attributes in process `syz.5.3655'. [ 1684.835164][T23573] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3658'. [ 1685.037939][ T5155] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1685.126141][T23583] netlink: 'syz.2.3662': attribute type 12 has an invalid length. [ 1685.134359][T23583] netlink: 'syz.2.3662': attribute type 11 has an invalid length. [ 1685.152237][T23583] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.3662'. [ 1685.172157][T23585] netlink: 'syz.0.3661': attribute type 10 has an invalid length. [ 1685.258011][ T5155] usb 6-1: Using ep0 maxpacket: 16 [ 1685.280939][ T5155] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1685.320480][ T5155] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1685.341340][ T5155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.381836][ T5155] usb 6-1: config 0 descriptor?? [ 1685.494072][T23597] netlink: 'syz.1.3666': attribute type 12 has an invalid length. [ 1685.502625][T17085] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1685.504154][T23597] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.3666'. [ 1685.748651][T17085] usb 3-1: Using ep0 maxpacket: 16 [ 1685.760488][T17085] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1685.769812][T17085] usb 3-1: can't read configurations, error -61 [ 1685.847798][T16301] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1685.867993][T23565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1685.900829][T23565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1685.939875][ T5155] hid (null): unknown global tag 0x83 [ 1685.947805][T17085] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1685.967785][ T5155] hid (null): unknown global tag 0xc [ 1685.980842][ T5155] hid-generic 0003:0158:0100.003C: unknown main item tag 0x1 [ 1685.996110][ T5155] hid-generic 0003:0158:0100.003C: unexpected long global item [ 1686.015403][ T5155] hid-generic 0003:0158:0100.003C: probe with driver hid-generic failed with error -22 [ 1686.057743][T16301] usb 2-1: Using ep0 maxpacket: 16 [ 1686.070386][T16301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1686.095105][T16301] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1686.105401][T16301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.143700][ T5155] usb 6-1: USB disconnect, device number 67 [ 1686.188353][T17085] usb 3-1: Using ep0 maxpacket: 16 [ 1686.195121][T16301] usb 2-1: config 0 descriptor?? [ 1686.208545][T17085] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1686.243828][T17085] usb 3-1: can't read configurations, error -61 [ 1686.276581][T17085] usb usb3-port1: attempt power cycle [ 1686.942166][T23597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.968146][T17085] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1687.022850][T17085] usb 3-1: Using ep0 maxpacket: 16 [ 1687.379753][T23597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.745896][T17085] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1687.801528][T16301] hid (null): nested delimiters [ 1687.829668][T17085] usb 3-1: can't read configurations, error -61 [ 1687.832428][T16135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1687.836016][T16301] hid (null): nested delimiters [ 1687.836038][T16301] hid (null): nested delimiters [ 1687.857286][T16301] hid (null): report_id 2838798905 is invalid [ 1687.863847][T16301] hid (null): unknown global tag 0xc [ 1687.863859][T16135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1687.869701][T16301] hid (null): unknown global tag 0xa5 [ 1687.882816][T16301] hid (null): unknown global tag 0xd [ 1687.882830][T16135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1687.888689][T16301] hid (null): unknown global tag 0xc [ 1687.927948][T16135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1687.929379][T16301] hid-generic 0003:0158:0100.003D: unknown main item tag 0x1 [ 1687.945706][T16135] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1687.948899][T16301] hid-generic 0003:0158:0100.003D: unexpected long global item [ 1687.961426][T16135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1687.962047][T16301] hid-generic 0003:0158:0100.003D: probe with driver hid-generic failed with error -22 [ 1688.010624][T17085] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1688.068668][T17085] usb 3-1: Using ep0 maxpacket: 16 [ 1688.076019][ T5155] usb 2-1: USB disconnect, device number 77 [ 1688.109560][T17085] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1688.117783][T17085] usb 3-1: can't read configurations, error -61 [ 1688.139218][T17085] usb usb3-port1: unable to enumerate USB device [ 1688.177968][ T29] audit: type=1326 audit(1720930495.804:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23612 comm="syz.4.3671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8657f75bd9 code=0x0 [ 1688.429723][ T2825] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.711885][ T2825] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.994629][ T2825] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.038965][T16135] Bluetooth: hci2: command tx timeout [ 1690.467074][ T2825] bond0: (slave netdevsim0): Releasing backup interface [ 1690.523055][ T2825] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1690.586844][ T2825] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1690.664141][ T2825] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.917979][T23660] netlink: 'syz.1.3682': attribute type 10 has an invalid length. [ 1691.047517][T23660] bond0: (slave netdevsim0): Releasing backup interface [ 1691.104563][T23665] netlink: 'syz.2.3684': attribute type 12 has an invalid length. [ 1691.135971][T23660] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1691.138383][T23665] netlink: 'syz.2.3684': attribute type 11 has an invalid length. [ 1691.180839][T23660] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1691.184416][T23665] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.3684'. [ 1691.251112][T23660] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1691.261144][T23660] team0: Failed to send options change via netlink (err -105) [ 1691.270572][T23660] team0: Port device netdevsim0 added [ 1691.517796][ T5155] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1691.541131][T23675] loop5: detected capacity change from 0 to 256 [ 1691.602800][T23675] FAT-fs (loop5): Directory bread(block 1285) failed [ 1691.741868][ T5155] usb 3-1: Using ep0 maxpacket: 16 [ 1691.759727][ T5155] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1691.767322][ T5155] usb 3-1: can't read configurations, error -61 [ 1691.823857][T23678] loop3: detected capacity change from 0 to 16 [ 1691.872006][T23678] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1691.937821][ T5155] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1692.017999][T17085] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1692.112058][ T2825] bridge_slave_1: left allmulticast mode [ 1692.127794][ T2825] bridge_slave_1: left promiscuous mode [ 1692.133589][ T2825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.158010][ T5155] usb 3-1: Using ep0 maxpacket: 16 [ 1692.208425][ T5155] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1692.216034][ T5155] usb 3-1: can't read configurations, error -61 [ 1692.248760][ T5155] usb usb3-port1: attempt power cycle [ 1692.258966][ T2825] bridge_slave_0: left allmulticast mode [ 1692.263114][T17085] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 179, changing to 7 [ 1692.270780][ T2825] bridge_slave_0: left promiscuous mode [ 1692.277367][T16135] Bluetooth: hci2: command tx timeout [ 1692.288108][T17085] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 34373, setting to 1024 [ 1692.307918][T17085] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1692.328010][ T2825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.346606][T17085] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 1692.366476][T17085] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1692.380696][T17085] usb 6-1: Manufacturer: syz [ 1692.408568][T17085] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1692.654250][ T2825] bond0: left allmulticast mode [ 1692.681100][ T5155] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1692.690663][ T2825] bond_slave_0: left allmulticast mode [ 1692.695869][ T5167] usb 6-1: USB disconnect, device number 68 [ 1692.722244][ T2825] bond_slave_1: left allmulticast mode [ 1692.731468][T23705] loop3: detected capacity change from 0 to 136 [ 1692.745124][ T2825] bond0: left promiscuous mode [ 1692.751494][ T5155] usb 3-1: Using ep0 maxpacket: 16 [ 1692.767527][ T2825] bond_slave_0: left promiscuous mode [ 1692.776332][ T5155] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1692.796101][T23705] iso9660: Unknown parameter 'norockor' [ 1692.803170][ T2825] bond_slave_1: left promiscuous mode [ 1692.810022][ T5155] usb 3-1: can't read configurations, error -61 [ 1692.903088][T17372] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1692.987962][ T5155] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1693.051488][ T5155] usb 3-1: Using ep0 maxpacket: 16 [ 1693.083362][ T5155] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1693.097706][ T5155] usb 3-1: can't read configurations, error -61 [ 1693.125058][ T5155] usb usb3-port1: unable to enumerate USB device [ 1694.348716][T16135] Bluetooth: hci2: command tx timeout [ 1695.040103][T16135] Bluetooth: Unexpected start frame (len 0) [ 1695.135351][ T2825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1695.378823][T16135] Bluetooth: hci3: Invalid handle: 0xb9b0 > 0x0eff [ 1695.389886][T16135] Bluetooth: Unexpected start frame (len 18) [ 1695.401640][ T2825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1696.221823][ T2825] bond0 (unregistering): Released all slaves [ 1696.381516][T23742] loop5: detected capacity change from 0 to 16 [ 1696.437791][T16135] Bluetooth: hci2: command tx timeout [ 1696.464332][T23733] netlink: 'syz.2.3699': attribute type 10 has an invalid length. [ 1696.502230][T23742] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1696.611157][T23607] chnl_net:caif_netlink_parms(): no params data found [ 1697.172225][T23762] netlink: 'syz.2.3706': attribute type 12 has an invalid length. [ 1697.248289][T23762] netlink: 'syz.2.3706': attribute type 11 has an invalid length. [ 1697.256149][T23762] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1697.847851][T22454] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1697.859552][T23607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.906610][T23607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.937167][T23607] bridge_slave_0: entered allmulticast mode [ 1697.958274][T23607] bridge_slave_0: entered promiscuous mode [ 1697.993082][T23607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.042821][T23607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.050247][T22454] usb 3-1: Using ep0 maxpacket: 16 [ 1698.074548][T22454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1698.098354][T23607] bridge_slave_1: entered allmulticast mode [ 1698.136761][T22454] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1698.146765][T23607] bridge_slave_1: entered promiscuous mode [ 1698.187732][T22454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.235403][T22454] usb 3-1: config 0 descriptor?? [ 1698.623187][T23607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1698.881859][T23762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.930718][T23762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.997349][T23607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.010386][T22454] hid (null): unknown global tag 0x83 [ 1699.047872][T22454] hid (null): unknown global tag 0xc [ 1699.094620][T22454] hid-generic 0003:0158:0100.003E: unknown main item tag 0x1 [ 1699.122273][T22454] hid-generic 0003:0158:0100.003E: unexpected long global item [ 1699.267488][T22454] hid-generic 0003:0158:0100.003E: probe with driver hid-generic failed with error -22 [ 1699.359020][T22454] usb 3-1: USB disconnect, device number 100 [ 1699.730747][T23607] team0: Port device team_slave_0 added [ 1699.782069][T23607] team0: Port device team_slave_1 added [ 1700.456823][T17085] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1700.693581][T23607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1700.716666][T23607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1700.795903][T23607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1700.806687][T17085] usb 4-1: Using ep0 maxpacket: 8 [ 1700.819872][T17085] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.837586][T17085] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1700.848641][T17085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.867318][T17085] usb 4-1: config 0 descriptor?? [ 1700.878522][T23607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1700.917847][T23607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1700.992129][T23839] loop4: detected capacity change from 0 to 64 [ 1701.003397][T23607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1701.179293][T16339] usb 4-1: USB disconnect, device number 69 [ 1701.233640][ T2825] hsr_slave_0: left promiscuous mode [ 1701.296699][ T2825] hsr_slave_1: left promiscuous mode [ 1701.365669][ T2825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1701.392453][ T2825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1701.452148][ T2825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1701.484640][ T2825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.691176][ T2825] team0: left allmulticast mode [ 1702.715266][ T2825] team_slave_0: left allmulticast mode [ 1702.727887][ T2825] team_slave_1: left allmulticast mode [ 1702.896630][ T2825] team0: left promiscuous mode [ 1702.916232][ T2825] team_slave_0: left promiscuous mode [ 1702.939242][ T2825] team_slave_1: left promiscuous mode [ 1702.976080][ T2825] veth1_macvtap: left promiscuous mode [ 1702.996711][ T2825] veth0_macvtap: left promiscuous mode [ 1703.179526][ T2825] veth1_vlan: left promiscuous mode [ 1703.248183][ T2825] veth0_vlan: left promiscuous mode [ 1703.583873][T23864] loop3: detected capacity change from 0 to 256 [ 1704.600737][ T29] audit: type=1326 audit(1720930512.244:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23883 comm="syz.3.3736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb66b75bd9 code=0x0 [ 1704.988690][T16135] Bluetooth: hci8: command 0x0406 tx timeout [ 1705.147877][T16135] Bluetooth: hci3: command 0x0406 tx timeout [ 1705.907300][ T2825] team0 (unregistering): Port device team_slave_1 removed [ 1705.969251][ T57] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1706.160474][ T2825] team0 (unregistering): Port device team_slave_0 removed [ 1706.199824][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 1706.207392][ T57] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.220709][ T57] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1706.237710][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.262014][ T57] usb 4-1: config 0 descriptor?? [ 1706.338181][T23894] loop4: detected capacity change from 0 to 1024 [ 1706.445702][T23894] hfsplus: bad catalog entry type [ 1706.504974][T16339] usb 4-1: USB disconnect, device number 70 [ 1706.607346][T21336] hfsplus: b-tree write err: -5, ino 4 [ 1707.603803][T23909] loop3: detected capacity change from 0 to 256 [ 1707.905513][T23912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3745'. [ 1708.258839][T23916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1708.334259][T23607] hsr_slave_0: entered promiscuous mode [ 1708.412879][T23607] hsr_slave_1: entered promiscuous mode [ 1708.450325][ T29] audit: type=1326 audit(1720930516.094:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23923 comm="syz.5.3749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef73175bd9 code=0x0 [ 1708.487833][T23607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1708.532487][T23607] Cannot create hsr debugfs directory [ 1708.577024][T23926] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1709.216176][T23935] loop4: detected capacity change from 0 to 1024 [ 1709.288416][T23935] hfsplus: bad catalog entry type [ 1709.405665][ T62] hfsplus: b-tree write err: -5, ino 4 [ 1709.468619][T16135] Bluetooth: hci8: command 0x0406 tx timeout [ 1712.981208][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1713.003564][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1713.018212][T23964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1713.027378][T23964] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 1713.116340][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1713.133239][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1713.144332][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1713.153200][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1713.791540][ T2825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.090527][ T2825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.421915][ T2825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.694478][ T2825] bond0: (slave netdevsim0): Releasing backup interface [ 1714.717203][ T2825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.883683][T23984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3761'. [ 1715.053181][T23607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1715.099008][T23990] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3763'. [ 1715.135347][T23607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1715.146191][ T29] audit: type=1326 audit(1720930522.804:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23992 comm="syz.3.3766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb66b75bd9 code=0x0 [ 1715.228089][T16135] Bluetooth: hci1: command tx timeout [ 1715.246694][T23607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1715.335827][T23607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1715.727806][ T2825] bridge_slave_1: left allmulticast mode [ 1715.733595][ T2825] bridge_slave_1: left promiscuous mode [ 1715.763017][ T2825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.804189][ T2825] bridge_slave_0: left allmulticast mode [ 1715.820228][ T2825] bridge_slave_0: left promiscuous mode [ 1715.827906][ T2825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.913605][T24011] loop5: detected capacity change from 0 to 16 [ 1715.921543][T24011] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1716.202920][T16135] Bluetooth: hci8: ACL packet for unknown connection handle 201 [ 1716.505236][ T53] Bluetooth: hci8: ACL packet for unknown connection handle 201 [ 1716.676189][ T53] Bluetooth: hci8: ACL packet for unknown connection handle 201 [ 1717.308062][ T53] Bluetooth: hci1: command tx timeout [ 1717.546588][ T2825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.575033][ T2825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.606393][ T2825] bond0 (unregistering): Released all slaves [ 1717.735182][T24022] netlink: 'syz.3.3772': attribute type 10 has an invalid length. [ 1717.782154][T24022] bond0: (slave netdevsim0): Releasing backup interface [ 1717.806661][T24022] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1717.819260][T24022] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1717.828241][T24022] team0: Port device netdevsim0 added [ 1717.837514][T24026] netlink: 'syz.3.3772': attribute type 10 has an invalid length. [ 1717.918638][T24026] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1717.942659][T24026] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1717.983606][T24026] team0: Port device netdevsim0 removed [ 1718.041213][T24026] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1718.489524][T24043] netlink: 'syz.1.3778': attribute type 12 has an invalid length. [ 1718.527523][T24043] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.3778'. [ 1718.566834][T12105] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1718.778110][T12105] usb 4-1: Using ep0 maxpacket: 8 [ 1718.794352][T12105] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.847858][T17085] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1718.853549][T12105] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1718.868900][T12105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.927300][T12105] usb 4-1: config 0 descriptor?? [ 1718.982613][T12105] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 1719.002319][T12105] usb 4-1: No valid video chain found. [ 1719.031818][ T2825] hsr_slave_0: left promiscuous mode [ 1719.053816][ T2825] hsr_slave_1: left promiscuous mode [ 1719.061984][ T2825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.078206][T17085] usb 2-1: Using ep0 maxpacket: 16 [ 1719.086421][T17085] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1719.098671][ T2825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1719.109262][T17085] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1719.122235][ T2825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.131231][T17085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.148172][ T2825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.161347][T17085] usb 2-1: config 0 descriptor?? [ 1719.461188][ T53] Bluetooth: hci1: command tx timeout [ 1719.581373][T24056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1719.582541][ T2825] veth1_macvtap: left promiscuous mode [ 1719.621853][ T2825] veth0_macvtap: left promiscuous mode [ 1719.639195][ T2825] veth1_vlan: left promiscuous mode [ 1719.654877][ T2825] veth0_vlan: left promiscuous mode [ 1719.758630][T24043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.768600][T24043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.768834][ T29] audit: type=1326 audit(1720930527.404:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24058 comm="syz.5.3782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef73175bd9 code=0x0 [ 1719.781740][T17085] hid (null): nested delimiters [ 1719.812422][T17085] hid (null): nested delimiters [ 1719.817526][T17085] hid (null): nested delimiters [ 1719.823216][T17085] hid (null): report_id 2838798905 is invalid [ 1719.829671][T17085] hid (null): unknown global tag 0xc [ 1719.835308][T17085] hid (null): unknown global tag 0xa5 [ 1719.841159][T17085] hid (null): unknown global tag 0xd [ 1719.848079][T17085] hid (null): unknown global tag 0xc [ 1719.863447][T17085] hid-generic 0003:0158:0100.003F: unknown main item tag 0x1 [ 1719.872370][T17085] hid-generic 0003:0158:0100.003F: unexpected long global item [ 1719.884102][T17085] hid-generic 0003:0158:0100.003F: probe with driver hid-generic failed with error -22 [ 1719.984945][T17085] usb 2-1: USB disconnect, device number 78 [ 1720.883376][ T2825] team0 (unregistering): Port device team_slave_1 removed [ 1721.028859][ T2825] team0 (unregistering): Port device team_slave_0 removed [ 1721.347830][T12105] usb 4-1: USB disconnect, device number 71 [ 1721.474033][ T53] Bluetooth: hci1: command tx timeout [ 1722.265271][T23970] chnl_net:caif_netlink_parms(): no params data found [ 1722.775007][T23970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.782960][T23970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.797279][T23970] bridge_slave_0: entered allmulticast mode [ 1722.817032][T23970] bridge_slave_0: entered promiscuous mode [ 1722.891829][T23970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.934990][T23970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.968332][T23970] bridge_slave_1: entered allmulticast mode [ 1722.990339][T23970] bridge_slave_1: entered promiscuous mode [ 1723.192004][T23970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.284233][T23970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.394647][T23607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.587777][T23970] team0: Port device team_slave_0 added [ 1723.655682][T24112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3793'. [ 1723.680369][ T53] Bluetooth: hci3: ISO packet for unknown connection handle 1741 [ 1723.698624][T23970] team0: Port device team_slave_1 added [ 1723.870058][T23607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1723.910546][T23970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.928030][T23970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.957878][T16339] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1724.020597][ T29] audit: type=1326 audit(1720930531.674:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24116 comm="syz.5.3795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef73175bd9 code=0x0 [ 1724.045654][T23970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.102403][T23970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.140661][T23970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.149934][T16339] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1724.186439][T23970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.284299][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1724.315780][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1724.372712][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1724.386291][T22454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.393763][T22454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.430295][T22454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.437497][T22454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.445588][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1724.468706][T16339] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1724.487875][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1724.507895][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1724.537984][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1724.577721][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1724.612374][T16339] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1724.627752][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1724.657734][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1724.687720][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1724.698532][T23970] hsr_slave_0: entered promiscuous mode [ 1724.721334][T16339] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1724.731922][T23970] hsr_slave_1: entered promiscuous mode [ 1724.754189][T16339] usb 3-1: string descriptor 0 read error: -22 [ 1724.762955][T16339] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1724.772196][T23970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1724.797962][T23970] Cannot create hsr debugfs directory [ 1724.808140][T16339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.890868][T16339] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1725.228582][T16301] usb 3-1: USB disconnect, device number 101 [ 1725.459273][T17085] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1725.670159][T17085] usb 6-1: Using ep0 maxpacket: 8 [ 1725.719348][T17085] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1725.763515][T17085] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1725.792888][T17085] usb 6-1: config 0 has no interface number 0 [ 1725.815061][T17085] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1725.869957][T17085] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1725.906655][T17085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.959520][T17085] usb 6-1: config 0 descriptor?? [ 1726.357837][T17085] usb 6-1: USB disconnect, device number 69 [ 1726.550894][T23607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.834230][T23607] veth0_vlan: entered promiscuous mode [ 1726.922158][T23607] veth1_vlan: entered promiscuous mode [ 1726.972820][T23970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1727.066753][T23970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1727.085736][T24184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3806'. [ 1727.141258][T23970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1727.193402][T23970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1727.274326][ T29] audit: type=1326 audit(1720930534.924:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24188 comm="syz.1.3809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fbef75bd9 code=0x0 [ 1727.323122][T23607] veth0_macvtap: entered promiscuous mode [ 1727.396890][T23607] veth1_macvtap: entered promiscuous mode [ 1727.487046][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.516043][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.540221][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.578376][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.611541][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.669465][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.707444][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1727.754663][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1727.805622][T23607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1727.941787][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1727.980566][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.003629][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.021421][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.042426][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.085408][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.128196][ T5167] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1728.139682][T23607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1728.183527][T23607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1728.210112][T23607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.252378][T23607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.295092][T23607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.316586][T23607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.336873][T23607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.368288][ T5167] usb 3-1: Using ep0 maxpacket: 8 [ 1728.413781][ T5167] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.471325][ T5167] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1728.534483][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.568711][ T5167] usb 3-1: config 0 descriptor?? [ 1729.231392][T23970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.324299][ T5914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.438073][ T5914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.669450][T23970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.731441][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.812163][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.846468][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.853700][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.873038][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.992775][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.000045][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1730.427222][T24251] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1730.643354][T24251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3667'. [ 1730.959492][T16301] usb 3-1: USB disconnect, device number 102 [ 1731.162049][T23970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1731.485373][T24273] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3823'. [ 1732.404632][T24277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1732.444308][T23970] veth0_vlan: entered promiscuous mode [ 1733.338736][T23970] veth1_vlan: entered promiscuous mode [ 1733.553486][T23970] veth0_macvtap: entered promiscuous mode [ 1733.653374][T23970] veth1_macvtap: entered promiscuous mode [ 1733.736385][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.803943][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.840835][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1733.884714][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.975175][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1734.018520][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.054184][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1734.065115][ T5167] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1734.083614][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.095208][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1734.106193][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.180330][T23970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.234849][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.268519][ T5167] usb 4-1: device descriptor read/64, error -71 [ 1734.287159][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.331683][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.392181][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.450606][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.482693][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.513174][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.607899][ T5167] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1734.618962][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.707706][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1734.751191][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1734.797963][ T5167] usb 4-1: device descriptor read/64, error -71 [ 1734.816989][T23970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.950499][ T5167] usb usb4-port1: attempt power cycle [ 1734.960978][T23970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.010298][T23970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.054797][T23970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.105751][T23970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.436327][T22454] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1735.458686][ T5167] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1735.499344][ T5167] usb 4-1: device descriptor read/8, error -71 [ 1735.687968][T22454] usb 6-1: Using ep0 maxpacket: 8 [ 1735.724451][T22454] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.756431][T22454] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1735.799884][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.799893][T22454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.816076][ T5167] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1735.859838][T22454] usb 6-1: config 0 descriptor?? [ 1735.878960][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.891206][ T5167] usb 4-1: device descriptor read/8, error -71 [ 1736.036369][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.068239][ T5167] usb usb4-port1: unable to enumerate USB device [ 1736.090497][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.171294][T24371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3840'. [ 1738.457791][T22454] usb 6-1: USB disconnect, device number 70 [ 1740.663074][T24410] loop3: detected capacity change from 0 to 512 [ 1740.755287][T24410] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1740.836925][T24410] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.3850: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1740.837758][T12105] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1740.897705][T24410] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.3850: couldn't read orphan inode 15 (err -117) [ 1741.041060][T12105] usb 1-1: device descriptor read/64, error -71 [ 1741.057361][T24410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1741.339235][T12105] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1741.527791][T12105] usb 1-1: device descriptor read/64, error -71 [ 1742.196275][T12105] usb usb1-port1: attempt power cycle [ 1742.784524][T24437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3858'. [ 1743.684388][T12105] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1743.787406][T12105] usb 1-1: device descriptor read/8, error -71 [ 1744.187826][T16135] Bluetooth: hci0: command 0x0406 tx timeout [ 1744.637671][ C0] vkms_vblank_simulate: vblank timer overrun [ 1744.937663][ C0] vkms_vblank_simulate: vblank timer overrun [ 1745.395674][T18131] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1746.268401][T16135] Bluetooth: hci0: command 0x0406 tx timeout [ 1746.477298][T24491] loop4: detected capacity change from 0 to 1024 [ 1746.569182][T24491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1746.874918][T23970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.673746][ C0] ------------[ cut here ]------------ [ 1748.680280][ C0] WARNING: CPU: 0 PID: 24514 at net/ipv4/route.c:1241 ip_rt_bug+0x2a/0x110 [ 1748.689109][ C0] Modules linked in: [ 1748.693125][ C0] CPU: 0 PID: 24514 Comm: syz.2.3883 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 1748.703983][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1748.714200][ C0] RIP: 0010:ip_rt_bug+0x2a/0x110 [ 1748.719309][ C0] Code: f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 4b 91 b3 f7 66 90 e8 44 91 b3 f7 48 89 df be 02 00 00 00 e8 37 c2 6d ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 0e aa cd 01 f3 0f 1e [ 1748.738988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1748.745128][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 1748.751391][ C0] RAX: 4ae2fc18f909fa00 RBX: ffff888070825a00 RCX: ffffffff8172daca [ 1748.759537][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c202900 [ 1748.767643][ C0] RBP: 0000000000000001 R08: ffffffff92fad617 R09: 1ffffffff25f5ac2 [ 1748.775735][ C0] R10: dffffc0000000000 R11: fffffbfff25f5ac3 R12: dffffc0000000000 [ 1748.783886][ C0] R13: dffffc0000000000 R14: ffff8880673a8000 R15: ffff888017300d00 [ 1748.792042][ C0] FS: 00005555748ba500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1748.801127][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1748.808035][ C0] CR2: 00007f25fca09f20 CR3: 000000002d130000 CR4: 0000000000350ef0 [ 1748.816081][ C0] Call Trace: [ 1748.819522][ C0] [ 1748.822512][ C0] ? __warn+0x163/0x4e0 [ 1748.826749][ C0] ? ip_rt_bug+0x2a/0x110 [ 1748.831241][ C0] ? report_bug+0x2b3/0x500 [ 1748.835823][ C0] ? ip_rt_bug+0x2a/0x110 [ 1748.840357][ C0] ? handle_bug+0x3e/0x70 [ 1748.844811][ C0] ? exc_invalid_op+0x1a/0x50 [ 1748.849643][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 1748.854879][ C0] ? mark_lock+0x9a/0x350 [ 1748.859377][ C0] ? ip_rt_bug+0x2a/0x110 [ 1748.863827][ C0] ip_push_pending_frames+0xbf/0x150 [ 1748.869314][ C0] __icmp_send+0xf89/0x14e0 [ 1748.874050][ C0] ? __icmp_send+0x59c/0x14e0 [ 1748.878901][ C0] ? __pfx___icmp_send+0x10/0x10 [ 1748.883939][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1748.889760][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1748.895501][ C0] ? look_up_lock_class+0x77/0x160 [ 1748.900804][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1748.906601][ C0] ? mark_lock+0x9a/0x350 [ 1748.911173][ C0] ipv4_link_failure+0x62f/0xa10 [ 1748.916230][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 1748.921876][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1748.927581][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 1748.932789][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 1748.938525][ C0] arp_error_report+0x116/0x160 [ 1748.943471][ C0] neigh_invalidate+0x246/0x470 [ 1748.948533][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 1748.953840][ C0] call_timer_fn+0x190/0x650 [ 1748.958594][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1748.964421][ C0] ? call_timer_fn+0xc0/0x650 [ 1748.969258][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1748.975043][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1748.980346][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1748.986069][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1748.991864][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1748.997585][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1749.002898][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.008693][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1749.013972][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1749.019779][ C0] __run_timer_base+0x66a/0x8e0 [ 1749.024879][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1749.030477][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.036246][ C0] run_timer_softirq+0xb7/0x170 [ 1749.041282][ C0] handle_softirqs+0x2c6/0x970 [ 1749.046129][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1749.051100][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1749.056582][ C0] ? sched_clock_cpu+0x76/0x490 [ 1749.061634][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.067389][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1749.072849][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1749.077535][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1749.082857][ C0] ? rcu_is_watching+0x15/0xb0 [ 1749.087830][ C0] irq_exit_rcu+0x9/0x30 [ 1749.092151][ C0] sysvec_call_function_single+0xa3/0xc0 [ 1749.098003][ C0] [ 1749.101017][ C0] [ 1749.104110][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1749.110287][ C0] RIP: 0010:do_nanosleep+0x15d/0x600 [ 1749.115669][ C0] Code: 48 c1 eb 03 42 80 3c 33 00 74 05 e8 cd d4 6a f6 49 8b 57 18 4c 29 e2 4c 89 ff 4c 89 e6 44 89 e9 e8 f8 36 f2 f5 4c 8b 6c 24 20 <4c> 89 e8 48 c1 e8 03 48 89 44 24 48 42 80 3c 30 00 74 08 4c 89 ef [ 1749.135489][ C0] RSP: 0018:ffffc900042efc20 EFLAGS: 00000246 [ 1749.141762][ C0] RAX: 4ae2fc18f909fa00 RBX: 1ffff9200085dfaf RCX: 0000000000000001 [ 1749.149900][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 [ 1749.158062][ C0] RBP: ffffc900042efd10 R08: ffffffff8fad956f R09: 1ffffffff1f5b2ad [ 1749.166148][ C0] R10: dffffc0000000000 R11: fffffbfff1f5b2ae R12: 00000000000f4240 [ 1749.174298][ C0] R13: ffffc900042efda0 R14: dffffc0000000000 R15: ffffc900042efd60 [ 1749.182502][ C0] ? do_nanosleep+0x80/0x600 [ 1749.187280][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1749.192454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.198250][ C0] ? __asan_memset+0x23/0x50 [ 1749.202912][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.208711][ C0] ? __hrtimer_init+0x170/0x250 [ 1749.213710][ C0] hrtimer_nanosleep+0x227/0x470 [ 1749.218834][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1749.224475][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1749.229853][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1749.235134][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1749.240809][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.246535][ C0] __se_sys_clock_nanosleep+0x32d/0x3c0 [ 1749.252292][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1749.258597][ C0] ? do_syscall_64+0x100/0x230 [ 1749.263474][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.269277][ C0] do_syscall_64+0xf3/0x230 [ 1749.273963][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.279773][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.285757][ C0] RIP: 0033:0x7f6f421a7bc5 [ 1749.290343][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 c6 57 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 1f 58 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 1749.310177][ C0] RSP: 002b:00007ffc85ad2f10 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1749.318796][ C0] RAX: ffffffffffffffda RBX: 00007f6f42303f60 RCX: 00007f6f421a7bc5 [ 1749.326931][ C0] RDX: 00007ffc85ad2f50 RSI: 0000000000000000 RDI: 0000000000000000 [ 1749.335055][ C0] RBP: 00007f6f42305a60 R08: 0000000000000000 R09: 7fffffffffffffff [ 1749.343184][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000001aaf1d [ 1749.351339][ C0] R13: 0000000000000032 R14: 00007f6f42305a60 R15: 00007f6f42304038 [ 1749.359476][ C0] [ 1749.362537][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1749.369826][ C0] CPU: 0 PID: 24514 Comm: syz.2.3883 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 1749.379972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1749.390021][ C0] Call Trace: [ 1749.393294][ C0] [ 1749.396129][ C0] dump_stack_lvl+0x241/0x360 [ 1749.400823][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1749.406028][ C0] ? __pfx__printk+0x10/0x10 [ 1749.410659][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.416286][ C0] ? vscnprintf+0x5d/0x90 [ 1749.420619][ C0] panic+0x349/0x860 [ 1749.424525][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.430246][ C0] ? __warn+0x172/0x4e0 [ 1749.434404][ C0] ? __pfx_panic+0x10/0x10 [ 1749.438843][ C0] __warn+0x346/0x4e0 [ 1749.442833][ C0] ? ip_rt_bug+0x2a/0x110 [ 1749.447163][ C0] report_bug+0x2b3/0x500 [ 1749.451500][ C0] ? ip_rt_bug+0x2a/0x110 [ 1749.455833][ C0] handle_bug+0x3e/0x70 [ 1749.459985][ C0] exc_invalid_op+0x1a/0x50 [ 1749.464483][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1749.469339][ C0] RIP: 0010:ip_rt_bug+0x2a/0x110 [ 1749.474278][ C0] Code: f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 4b 91 b3 f7 66 90 e8 44 91 b3 f7 48 89 df be 02 00 00 00 e8 37 c2 6d ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 0e aa cd 01 f3 0f 1e [ 1749.493889][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 1749.499956][ C0] RAX: 4ae2fc18f909fa00 RBX: ffff888070825a00 RCX: ffffffff8172daca [ 1749.507923][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c202900 [ 1749.515885][ C0] RBP: 0000000000000001 R08: ffffffff92fad617 R09: 1ffffffff25f5ac2 [ 1749.523861][ C0] R10: dffffc0000000000 R11: fffffbfff25f5ac3 R12: dffffc0000000000 [ 1749.531831][ C0] R13: dffffc0000000000 R14: ffff8880673a8000 R15: ffff888017300d00 [ 1749.539807][ C0] ? mark_lock+0x9a/0x350 [ 1749.544148][ C0] ip_push_pending_frames+0xbf/0x150 [ 1749.549438][ C0] __icmp_send+0xf89/0x14e0 [ 1749.553955][ C0] ? __icmp_send+0x59c/0x14e0 [ 1749.558635][ C0] ? __pfx___icmp_send+0x10/0x10 [ 1749.563590][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.569218][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.574853][ C0] ? look_up_lock_class+0x77/0x160 [ 1749.579983][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.585611][ C0] ? mark_lock+0x9a/0x350 [ 1749.589960][ C0] ipv4_link_failure+0x62f/0xa10 [ 1749.594907][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 1749.600395][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.606025][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 1749.611143][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 1749.616603][ C0] arp_error_report+0x116/0x160 [ 1749.621457][ C0] neigh_invalidate+0x246/0x470 [ 1749.626333][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 1749.631452][ C0] call_timer_fn+0x190/0x650 [ 1749.636043][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1749.641676][ C0] ? call_timer_fn+0xc0/0x650 [ 1749.646350][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1749.652073][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1749.657193][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1749.662832][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1749.668463][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1749.674107][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1749.679324][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.684968][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1749.690193][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 1749.695833][ C0] __run_timer_base+0x66a/0x8e0 [ 1749.700697][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1749.706062][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.711709][ C0] run_timer_softirq+0xb7/0x170 [ 1749.716563][ C0] handle_softirqs+0x2c6/0x970 [ 1749.721332][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 1749.726098][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1749.731376][ C0] ? sched_clock_cpu+0x76/0x490 [ 1749.736233][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.741863][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 1749.747073][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 1749.751662][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1749.756857][ C0] ? rcu_is_watching+0x15/0xb0 [ 1749.761651][ C0] irq_exit_rcu+0x9/0x30 [ 1749.765885][ C0] sysvec_call_function_single+0xa3/0xc0 [ 1749.771548][ C0] [ 1749.774474][ C0] [ 1749.777399][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 1749.783397][ C0] RIP: 0010:do_nanosleep+0x15d/0x600 [ 1749.788695][ C0] Code: 48 c1 eb 03 42 80 3c 33 00 74 05 e8 cd d4 6a f6 49 8b 57 18 4c 29 e2 4c 89 ff 4c 89 e6 44 89 e9 e8 f8 36 f2 f5 4c 8b 6c 24 20 <4c> 89 e8 48 c1 e8 03 48 89 44 24 48 42 80 3c 30 00 74 08 4c 89 ef [ 1749.808304][ C0] RSP: 0018:ffffc900042efc20 EFLAGS: 00000246 [ 1749.814371][ C0] RAX: 4ae2fc18f909fa00 RBX: 1ffff9200085dfaf RCX: 0000000000000001 [ 1749.822336][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001 [ 1749.830305][ C0] RBP: ffffc900042efd10 R08: ffffffff8fad956f R09: 1ffffffff1f5b2ad [ 1749.838271][ C0] R10: dffffc0000000000 R11: fffffbfff1f5b2ae R12: 00000000000f4240 [ 1749.846234][ C0] R13: ffffc900042efda0 R14: dffffc0000000000 R15: ffffc900042efd60 [ 1749.854220][ C0] ? do_nanosleep+0x80/0x600 [ 1749.858820][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1749.863847][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.869477][ C0] ? __asan_memset+0x23/0x50 [ 1749.874064][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.879694][ C0] ? __hrtimer_init+0x170/0x250 [ 1749.884552][ C0] hrtimer_nanosleep+0x227/0x470 [ 1749.889508][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1749.894977][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1749.900207][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1749.905401][ C0] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1749.910859][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.916490][ C0] __se_sys_clock_nanosleep+0x32d/0x3c0 [ 1749.922039][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1749.928108][ C0] ? do_syscall_64+0x100/0x230 [ 1749.932878][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.938509][ C0] do_syscall_64+0xf3/0x230 [ 1749.943020][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1749.948650][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.954550][ C0] RIP: 0033:0x7f6f421a7bc5 [ 1749.958957][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 c6 57 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 1f 58 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 1749.978580][ C0] RSP: 002b:00007ffc85ad2f10 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1749.986993][ C0] RAX: ffffffffffffffda RBX: 00007f6f42303f60 RCX: 00007f6f421a7bc5 [ 1749.994962][ C0] RDX: 00007ffc85ad2f50 RSI: 0000000000000000 RDI: 0000000000000000 [ 1750.002954][ C0] RBP: 00007f6f42305a60 R08: 0000000000000000 R09: 7fffffffffffffff [ 1750.010922][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000001aaf1d [ 1750.018887][ C0] R13: 0000000000000032 R14: 00007f6f42305a60 R15: 00007f6f42304038 [ 1750.026975][ C0] [ 1750.030254][ C0] Kernel Offset: disabled [ 1750.034786][ C0] Rebooting in 86400 seconds..