last executing test programs: 19.152098589s ago: executing program 3 (id=3313): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$igmp(0x2, 0x3, 0x2) openat(0xffffffffffffff9c, 0x0, 0x30d582, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000180), 0x7fffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20}) sendmmsg$inet(r0, &(0x7f0000004840), 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="74187a851d156a68b89a0e73cdc781698a469a4ba0b7c438a42097f4e50b258fb6a9d8719aacbd9ebc682c584d9de352aa", 0x31}], 0x1}], 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fcd846404c05c3060000000003010902240008000000000904000002ad163700090501027f03000000090588"], 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r5, 0x1, 0x0, 0xfffffffc, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x68}}, 0x0) ioperm(0x0, 0x7, 0x1f) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwrite64(r7, &(0x7f0000000100)='n', 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 15.874853592s ago: executing program 3 (id=3325): r0 = socket$kcm(0x10, 0x0, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001ac0000002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.461862008s ago: executing program 3 (id=3326): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 14.928387961s ago: executing program 3 (id=3328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0}, 0x90) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r1, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) 12.701357069s ago: executing program 1 (id=3337): prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xd, 0x8, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="08000300"], 0x44}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000400)=ANY=[@ANYRES16=r6, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005000000085000000060000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3ff, 0x4d, &(0x7f00000004c0)=""/77, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x5, 0x800, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f00000005c0)=[{0x3, 0x1, 0x10, 0x8}], 0x10, 0x8}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x1}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r10, 0x0, r8, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000000)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x2b, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xddb}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0x3, 0x2, 0x2}, @call={0x85, 0x0, 0x0, 0xbe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x85}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a5a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xbf, &(0x7f0000000240)=""/191, 0x41000, 0x0, '\x00', r5, 0x10, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x9, &(0x7f0000000780)=[r8, r11, r1], &(0x7f00000007c0)=[{0x2, 0x3, 0x7, 0x9}, {0x3, 0x3, 0x2, 0x9}, {0x3, 0x1, 0xa}, {0x5, 0x5, 0x1, 0xa}, {0x4, 0x2, 0x8, 0x4}, {0x4, 0x3, 0x8, 0xa}, {0x2, 0x2, 0x2, 0xa}, {0x4, 0x5, 0xe, 0x7}, {0x0, 0x5, 0x3, 0xc}], 0x10, 0xff}, 0x90) r12 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4000000000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0585609, &(0x7f0000000140)={0x0, 0x9, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) 10.931585855s ago: executing program 3 (id=3342): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"/4141], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x0, 0x0, 0x8020000, 0x3f}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 10.54476659s ago: executing program 1 (id=3343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r5}) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80400) write$P9_RVERSION(r7, &(0x7f0000000600)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2, 0x2, 0x2, 0x9, 0x1d, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d3, 0x8, 0x34, 0xbe, 0x1, 0x1}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x6e6bb6, 0x95, {0x6, 0x32, 0x97, 0x9, 0x0, 0x5026, 0x0, @in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x19}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x2, @local, 0x1}, @in={0x2, 0x4e24, @loopback}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @private=0xa010102}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @loopback}}]}, 0xe8}}, 0x2400c010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513ae", 0xd2}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioprio_get$uid(0x0, r11) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1810f4ff6700e9780083a0ca1ae7d46bb4e3000000000000000a00000000002000"], 0x18}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 9.823004172s ago: executing program 1 (id=3346): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000440)="4a93", 0x2}], 0x1) 8.365059856s ago: executing program 1 (id=3351): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x5100, 0x0) 8.211075541s ago: executing program 5 (id=3353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="040e0c051c20"], 0xf) 8.071177983s ago: executing program 0 (id=3354): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f81000000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x90044802, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 8.038666556s ago: executing program 5 (id=3355): prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xd, 0x8, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="08000300"], 0x44}}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000400)=ANY=[@ANYRES16=r6, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005000000085000000060000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x3ff, 0x4d, &(0x7f00000004c0)=""/77, 0x40f00, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x5, 0x800, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f00000005c0)=[{0x3, 0x1, 0x10, 0x8}], 0x10, 0x8}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x1}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r10, 0x0, r8, 0x0, 0x1, 0x0) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000000)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x2b, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xddb}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0x3, 0x2, 0x2}, @call={0x85, 0x0, 0x0, 0xbe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x85}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a5a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xbf, &(0x7f0000000240)=""/191, 0x41000, 0x0, '\x00', r5, 0x10, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r7, 0x9, &(0x7f0000000780)=[r8, r11, r1], &(0x7f00000007c0)=[{0x2, 0x3, 0x7, 0x9}, {0x3, 0x3, 0x2, 0x9}, {0x3, 0x1, 0xa}, {0x5, 0x5, 0x1, 0xa}, {0x4, 0x2, 0x8, 0x4}, {0x4, 0x3, 0x8, 0xa}, {0x2, 0x2, 0x2, 0xa}, {0x4, 0x5, 0xe, 0x7}, {0x0, 0x5, 0x3, 0xc}], 0x10, 0xff}, 0x90) r12 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4000000000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0585609, &(0x7f0000000140)={0x0, 0x9, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) 6.144659422s ago: executing program 0 (id=3362): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) write$sndseq(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_io_uring_setup(0x5c6, &(0x7f00000005c0), &(0x7f0000000300)=0x0, &(0x7f0000000500)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0x381b, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x8}) 5.959105477s ago: executing program 0 (id=3364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.742005322s ago: executing program 0 (id=3366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x31}, @l2cap_cid_signaling={{0x2d}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x6, 0x1f}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x800, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x7, 0xc}}, @l2cap_disconn_rsp={{0x7, 0x11, 0x4}, {0x75, 0xb0ff}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0xf6}}, @l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x7, 0xa3}}]}}, 0x36) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) 4.560384876s ago: executing program 0 (id=3368): socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r3, 0x0) 4.201806489s ago: executing program 2 (id=3370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000000)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.072456164s ago: executing program 2 (id=3371): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ff4000/0x2000)=nil, 0x2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) 3.931194973s ago: executing program 5 (id=3373): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x13, r1, 0x0) r2 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r2, 0x29, 0x7, 0x0, 0x2000005d) 3.736936953s ago: executing program 2 (id=3374): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f81000000"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x90044802, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.691988277s ago: executing program 5 (id=3375): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) 3.441632963s ago: executing program 5 (id=3377): openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) statx(0xffffffffffffff9c, 0x0, 0x800, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.362354307s ago: executing program 4 (id=3378): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.170075941s ago: executing program 4 (id=3379): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000440)}], 0x1) 3.122510932s ago: executing program 5 (id=3380): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000012"], 0x8) close(r2) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) ioctl$TUNSETCARRIER(r3, 0x5452, 0x0) 2.871684608s ago: executing program 4 (id=3381): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100000009e1000000000000000000002c000000030a0102000000000000000001"], 0xd8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 2.48160808s ago: executing program 4 (id=3382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'sit0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500020000008c879ebf6463558ab37a2b695d3de0f0ea40e4d12bed52146767c1c8e27fb75584ba43517aec67cd34b5162ec309745a6976b938b93791f8a39b8372837abce2237d6f7de038133a8078cdb7a8604cf2098d4d3039b88a8145292afc9cfedcd7f342137217b2000000008a35927dabe2fb08905ffca585e46daa7c327a783da9610b8d4d5b665442899d490114ea0abc0148c0c791f9eaa9dbcb93eb0cbc7ba19739"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x48, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @cf={0x4, 0x6, {0x3, 0x80, 0x3, 0x3ff}}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x48}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x20, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg$inet(r8, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000540)="23e84cd8976f7109b9f6e10fe775f69500a95e0973832e6dada3975ca46ffa394d8f99999bab89801c238e6627e4a75d3c0d1193d166f8c41de61fe914d8f3adf73bf9364650510f23063b327c58f019697c50b58a6d6e62a08cc97652af0bfc71c3aa47004cb02edf46f5bd55db040e88cffdbab41a49bf80ea8653ec3470326a0ec02cb5c683c8fd56eb54c790c14b5c29840768a84b77400177e5dcee1937f1f79fba4b650cb1e8f071e225f6c9f5793ae139a0063696630281611e32b2922acd58e49dbeed5c72fee06a408dc11b119181825fca0a10ba7b324f32399e96a3ff336f59e0d1d365d6b8abc46c535a37dc27f6f7d6", 0xf6}], 0x1}}], 0x2, 0x24045005) sendmsg$inet(r8, &(0x7f0000000180)={&(0x7f00000016c0)={0x2, 0x0, @remote={0xac, 0xc}}, 0x10, 0x0}, 0x30064845) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r9, 0x0, 0x0) 2.421306941s ago: executing program 1 (id=3383): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(r0, &(0x7f00000003c0), 0xa3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x2) 2.185230627s ago: executing program 3 (id=3384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) socket$nl_route(0x10, 0x3, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000026c0)="0ccc15892182ecea581ecd41007d", 0xe, 0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 2.055939412s ago: executing program 1 (id=3385): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x80}}, 0x0) write$apparmor_exec(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRESOCT=r0], 0xf) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={@cgroup, 0x0, 0x1b, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x8800080) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) unshare(0x8020480) r3 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0x80dc5521, &(0x7f0000000040)=0xfffffffc) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x40, 0x700, 0x5, 0x8, {{0x29, 0x4, 0x1, 0x1b, 0xa4, 0x68, 0x0, 0x80, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x7f, 0x1, 0x7, [{@empty, 0x2}, {@remote, 0x4}]}, @noop, @timestamp_prespec={0x44, 0x14, 0x69, 0x3, 0x0, [{@empty, 0x5}, {@broadcast, 0x8}]}, @ssrr={0x89, 0xb, 0x10, [@empty, @broadcast]}, @ssrr={0x89, 0x7, 0xc2, [@local]}, @timestamp_prespec={0x44, 0x2c, 0xc, 0x3, 0x8, [{@local}, {@multicast1, 0x200}, {@local, 0x1000000}, {@multicast1}, {@multicast1, 0xb07}]}, @timestamp_prespec={0x44, 0x24, 0x8, 0x3, 0x2, [{@private=0xa010101, 0x100}, {@broadcast, 0x8}, {@multicast1, 0x86e}, {@rand_addr=0x64010102, 0x9}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg(r5, &(0x7f0000002880)={&(0x7f0000000280)=@ll={0x11, 0x4, r6, 0x1, 0x9, 0x6, @local}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f00000000c0)}, {&(0x7f0000000140)}, {&(0x7f0000000300)="22d5508c945fee3bc704d065a72fa732b0f4f90eb418503a0ea29155aaff391ca38cdcf52f7a10e092032f46be7895b0df5eb36e3bde42ca8bfee98b", 0x3c}, {&(0x7f0000001480)="02b0d79596bfe787404409ceb26f1e1dfb959c01d3d3ee6fd5126ec4a3d45383a77286e1bc3931e3c6563496e9a8a9ea18a4f2ffa18be3c0631db63333f86e9f5ddee36c131c86891e521c8ebc163724083ede110f17d29e409d747d689693530700f4111391de27bc3e314872f0b0f9a1df2524dc149c963bf4ea86eeb5a6aa2aeb081602da2fe661c2f066ba5b95b583a61e58eebe5aa774eeb9ffe6e509ea1c164372bae9a26c627ac6a3a0956a10481c6237a83799dc98239dd0175ace5c80", 0xc1}], 0x5, &(0x7f0000001600)=[{0x68, 0x107, 0x4, "7a7dd910086ed02c469238f89e8399f417ac4ba536cc864e65b46b88f508cdf10a3bae78c18b3e0cac91bc798ff0fdf0d40f34e8e8f8baf78ab516450956e45334e7f7fd315841460933197f0e854d3fc1"}, {0x70, 0x101, 0x4, "4abff1a72a46535c2bc52dfb83a6227ee7382685c36bf989b20eb17a5b57650d5ab89b366cff42d7fbd17c09300be16fc011192702ea62b0374079477af78db9e48822df71f35e4f127f5bb7eaa294a077f22d319f55b16b597257afa6f8252a"}, {0x38, 0x117, 0x8, "17847cde0870ae6de3bb7dd50f08c30e474fd95a732969736c0c0b4598cc15a268424a8daad0"}, {0x48, 0x1d4, 0x3, "9b32f28d0b58f55771a1b82ff5d9d6df957d5ea9d31c4ad2f7b2da76b97e8e30f93c23a5578d9e442fbd29680c1039dfcc4ea6c5613ef7"}, {0xd8, 0x11, 0x5, "552598b13710eb91da77c4fca5074696846f7109cc4ebeeda03445fb1e4f742c7de6f346a7dbfa24b1fdff0803dc149ca66363f6e908bb5d759486b581177ee4fd591bd9e7657ded589e21f10c4444c3972d02f3af90673cf1b74c25798fc489451fe5f74c38144c35e9cd9f28a92cf733f59bd0d6f43c94e8ce68ebd40ddbd6da8a6d565d5914e393675b42e068605a16d12b2089ff3a340a05fd5a8c3c2afaf3a1dd4ee6d51d5f22789b109ee6db029f5f4d98c026b6f920724ae902bead08773fab259d09"}, {0x30, 0x88, 0x799, "78136ef732a08819f2e53f913b2b32e250f275389051594e64727e75"}, {0x1010, 0x10e, 0x7, "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"}], 0x1270}, 0xd95500fcbdc5a470) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x14, 0x3, 0x3, 0x201}, 0x14}}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x8) sendto$inet(0xffffffffffffffff, &(0x7f00000028c0)="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", 0xfb, 0x18004050, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) 2.048869134s ago: executing program 2 (id=3386): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290a0000000800000000010000000c00020000000000007afd000c0006000600000000000000040007"], 0x30}}, 0x0) 1.78175768s ago: executing program 2 (id=3387): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.570551404s ago: executing program 4 (id=3388): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640), 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r1 = socket$netlink(0x10, 0x3, 0x9) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x1c1a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_LINKINFO={0x28, 0xd, 0x0, 0x1, @veth={{0x9, 0x9e00}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x64}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup2(r4, r3) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipmr_newroute={0x2c, 0x18, 0x2, 0x70bd2a, 0x25dfdbfb, {0x80, 0x10, 0x80, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x1000}, [@RTA_FLOW={0x8, 0xb, 0x7}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000881) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2a00000026000506"], 0x2c}}, 0x0) recvmmsg(r7, &(0x7f0000007700), 0x300, 0x0, 0x0) 729.653948ms ago: executing program 0 (id=3389): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) iopl(0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) setreuid(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sg(0x0, 0x6, 0x4000) fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000611998000000000006000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x22, 0xa, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f00000002c0)=""/200, 0x39) 469.680383ms ago: executing program 4 (id=3390): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x6, 0x3, 0x7, 0x7613}, {0x6, 0x2, 0x8, 0x2b52}, {0x5, 0x9, 0x9, 0x3ff}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x0, 0x55, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) io_uring_setup(0xfc2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x203, 0x0, 0x0, r0}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r1, 0xffffffffffffffff, 0x2b, 0x0, 0x4000}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/custom0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0xfc26) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8abe8c36f053711e5dc0b6a0812"], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'wg1\x00', 0x2000}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'virt_wifi0\x00'}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002) 0s ago: executing program 2 (id=3391): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 0.370482][ T12] veth0_macvtap: left promiscuous mode [ 930.383257][ T12] veth1_vlan: left promiscuous mode [ 930.388640][ T12] veth0_vlan: left promiscuous mode [ 930.418523][ T12] veth1_macvtap: left promiscuous mode [ 930.432723][ T12] veth0_macvtap: left promiscuous mode [ 930.438601][ T12] veth1_vlan: left promiscuous mode [ 930.456503][ T12] veth0_vlan: left promiscuous mode [ 930.481215][ T12] veth1_macvtap: left promiscuous mode [ 930.492834][ T12] veth0_macvtap: left promiscuous mode [ 930.498818][ T12] veth1_vlan: left promiscuous mode [ 930.522766][ T12] veth0_vlan: left promiscuous mode [ 930.529778][ T12] veth1_macvtap: left promiscuous mode [ 930.552791][ T12] veth0_macvtap: left promiscuous mode [ 930.558517][ T12] veth1_vlan: left promiscuous mode [ 930.582772][ T12] veth0_vlan: left promiscuous mode [ 930.593703][ T12] veth1_macvtap: left promiscuous mode [ 930.599267][ T12] veth0_macvtap: left promiscuous mode [ 930.620764][ T12] veth1_vlan: left promiscuous mode [ 930.632826][ T12] veth0_vlan: left promiscuous mode [ 931.186004][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.202685][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.973950][ T12] team0 (unregistering): Port device team_slave_1 removed [ 936.902364][ T12] team0 (unregistering): Port device team_slave_1 removed [ 939.845070][ T12] team0 (unregistering): Port device team_slave_1 removed [ 942.767882][ T12] team0 (unregistering): Port device team_slave_1 removed [ 944.766269][T15347] smc: removing ib device syz0 [ 946.936281][ T12] team0 (unregistering): Port device team_slave_1 removed [ 949.136663][T15361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 949.151087][T15361] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 949.159610][T15361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 949.168548][T15361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 949.176569][T15361] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 949.184036][T15361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 949.344619][ T4484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 949.358828][ T4484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 949.376108][ T4484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 949.402969][ T4484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 949.413024][ T4484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 949.420757][ T4484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 949.595069][ T4484] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 949.638953][ T4484] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 949.654279][ T4484] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 949.685161][ T4484] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 949.725434][ T4484] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 949.743777][ T4484] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 949.806863][T15361] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 949.824677][ T5106] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 949.833515][ T5106] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 949.842471][ T5106] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 949.851178][ T5106] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 949.861115][ T5106] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 949.963724][ T5106] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 949.975581][ T5106] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 949.988351][ T5106] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 949.998442][ T5106] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 950.063363][ T5106] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 950.073088][ T5106] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 950.233987][ T4484] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 950.245512][ T4484] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 950.254903][ T4484] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 950.263798][ T4484] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 950.276147][ T4484] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 950.291482][ T4484] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 951.110099][T15356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.153134][T15356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.162003][T15356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.212642][T15356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.385698][ T4484] Bluetooth: hci2: command tx timeout [ 951.503052][ T4484] Bluetooth: hci3: command tx timeout [ 951.913577][ T4484] Bluetooth: hci7: command tx timeout [ 952.016505][ T4484] Bluetooth: hci8: command tx timeout [ 952.144288][ T4484] Bluetooth: hci12: command tx timeout [ 952.389835][ T4484] Bluetooth: hci13: command tx timeout [ 953.422846][ T4484] Bluetooth: hci2: command tx timeout [ 953.584457][ T4484] Bluetooth: hci3: command tx timeout [ 953.996325][ T5106] Bluetooth: hci7: command tx timeout [ 954.068066][ T5106] Bluetooth: hci8: command tx timeout [ 954.223844][ T5106] Bluetooth: hci12: command tx timeout [ 954.475189][ T5106] Bluetooth: hci13: command tx timeout [ 954.727414][T15432] chnl_net:caif_netlink_parms(): no params data found [ 955.100337][T15438] chnl_net:caif_netlink_parms(): no params data found [ 955.165076][T15440] chnl_net:caif_netlink_parms(): no params data found [ 955.310025][T15442] chnl_net:caif_netlink_parms(): no params data found [ 955.504742][ T5106] Bluetooth: hci2: command tx timeout [ 955.670312][ T5106] Bluetooth: hci3: command tx timeout [ 956.062962][ T5106] Bluetooth: hci7: command tx timeout [ 956.144276][ T5106] Bluetooth: hci8: command tx timeout [ 956.248781][T15432] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.273309][T15432] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.280655][T15432] bridge_slave_0: entered allmulticast mode [ 956.302935][ T5106] Bluetooth: hci12: command tx timeout [ 956.316249][T15432] bridge_slave_0: entered promiscuous mode [ 956.352261][T15434] chnl_net:caif_netlink_parms(): no params data found [ 956.389728][T15436] chnl_net:caif_netlink_parms(): no params data found [ 956.536612][T15432] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.543226][ T5106] Bluetooth: hci13: command tx timeout [ 956.545356][T15432] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.556448][T15432] bridge_slave_1: entered allmulticast mode [ 956.565663][T15432] bridge_slave_1: entered promiscuous mode [ 956.938070][T15432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.225812][T15440] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.238490][T15440] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.263890][T15440] bridge_slave_0: entered allmulticast mode [ 957.293506][T15440] bridge_slave_0: entered promiscuous mode [ 957.353741][T15432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.449185][T15442] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.472857][T15442] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.480175][T15442] bridge_slave_0: entered allmulticast mode [ 957.515071][T15442] bridge_slave_0: entered promiscuous mode [ 957.549119][T15442] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.572992][T15442] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.580338][T15442] bridge_slave_1: entered allmulticast mode [ 957.592695][ T5106] Bluetooth: hci2: command tx timeout [ 957.625165][T15442] bridge_slave_1: entered promiscuous mode [ 957.708185][T15438] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.731693][T15438] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.752652][ T5106] Bluetooth: hci3: command tx timeout [ 957.758440][T15438] bridge_slave_0: entered allmulticast mode [ 957.782724][T15438] bridge_slave_0: entered promiscuous mode [ 957.814754][T15440] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.822062][T15440] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.832966][T15440] bridge_slave_1: entered allmulticast mode [ 957.840943][T15440] bridge_slave_1: entered promiscuous mode [ 958.146718][ T5106] Bluetooth: hci7: command tx timeout [ 958.155869][T15438] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.175404][T15438] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.203003][T15438] bridge_slave_1: entered allmulticast mode [ 958.232123][ T5106] Bluetooth: hci8: command tx timeout [ 958.232310][T15438] bridge_slave_1: entered promiscuous mode [ 958.382976][ T5106] Bluetooth: hci12: command tx timeout [ 958.447742][T15432] team0: Port device team_slave_0 added [ 958.470331][T15432] team0: Port device team_slave_1 added [ 958.525356][T15442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.569989][T15442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.603705][T15434] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.610954][T15434] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.622822][ T5106] Bluetooth: hci13: command tx timeout [ 958.654187][T15434] bridge_slave_0: entered allmulticast mode [ 958.672396][T15434] bridge_slave_0: entered promiscuous mode [ 958.694799][T15434] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.702061][T15434] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.722924][T15434] bridge_slave_1: entered allmulticast mode [ 958.731509][T15434] bridge_slave_1: entered promiscuous mode [ 958.804709][T15438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.881399][T15440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.129402][T15438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.196220][T15440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.249888][T15432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.282846][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.352709][T15432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.377476][T15432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.392656][T15432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.452877][T15432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.512469][T15436] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.532989][T15436] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.540306][T15436] bridge_slave_0: entered allmulticast mode [ 959.564552][T15436] bridge_slave_0: entered promiscuous mode [ 959.608595][T15442] team0: Port device team_slave_0 added [ 959.693644][T15434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.795836][T15438] team0: Port device team_slave_0 added [ 959.880134][T15440] team0: Port device team_slave_0 added [ 959.914674][T15436] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.921916][T15436] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.942989][T15436] bridge_slave_1: entered allmulticast mode [ 959.962865][T15436] bridge_slave_1: entered promiscuous mode [ 959.977065][T15442] team0: Port device team_slave_1 added [ 960.014730][T15434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.070230][T15438] team0: Port device team_slave_1 added [ 960.198737][T15440] team0: Port device team_slave_1 added [ 960.583692][T15434] team0: Port device team_slave_0 added [ 960.745718][T15440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.763177][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.821785][T15440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.845648][T15440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.862903][T15440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.932607][T15440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.961913][T15436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.004565][T15436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.077501][T15434] team0: Port device team_slave_1 added [ 961.176507][T15438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.203809][T15438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.272656][T15438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.316300][T15438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.326798][T15438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.402698][T15438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.517630][T15442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.539161][T15442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.602640][T15442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.684740][T15432] hsr_slave_0: entered promiscuous mode [ 961.713710][T15432] hsr_slave_1: entered promiscuous mode [ 961.863682][T15442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.870691][T15442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.933896][T15442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.973793][T15434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.980815][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.044266][T15434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.072781][T15434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.079856][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.142850][T15434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.273387][T15436] team0: Port device team_slave_0 added [ 962.318521][T15440] hsr_slave_0: entered promiscuous mode [ 962.333662][T15440] hsr_slave_1: entered promiscuous mode [ 962.352913][T15440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.360536][T15440] Cannot create hsr debugfs directory [ 962.494151][T15438] hsr_slave_0: entered promiscuous mode [ 962.513367][T15438] hsr_slave_1: entered promiscuous mode [ 962.525866][T15438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.543677][T15438] Cannot create hsr debugfs directory [ 962.555427][T15436] team0: Port device team_slave_1 added [ 962.819877][T15436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.827039][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.882983][T15436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.917532][T15436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.932713][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.992671][T15436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.252674][T15442] hsr_slave_0: entered promiscuous mode [ 963.274300][T15442] hsr_slave_1: entered promiscuous mode [ 963.284061][T15442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 963.291640][T15442] Cannot create hsr debugfs directory [ 963.463173][T15434] hsr_slave_0: entered promiscuous mode [ 963.470795][T15434] hsr_slave_1: entered promiscuous mode [ 963.478112][T15434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 963.503410][T15434] Cannot create hsr debugfs directory [ 963.845182][T15436] hsr_slave_0: entered promiscuous mode [ 963.875576][T15436] hsr_slave_1: entered promiscuous mode [ 963.882192][T15436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 963.894294][T15436] Cannot create hsr debugfs directory [ 964.980359][T15432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.276501][T15432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.499021][T15432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.751917][T15432] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.603034][T15432] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 966.617060][T15432] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 966.842937][T15432] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 966.963120][T15432] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 967.717132][T15440] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 967.758261][T15440] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 967.990159][T15440] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 968.034085][T15440] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 968.230514][T15432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.523812][T15432] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.816702][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.823926][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.874937][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.882404][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.462753][T15438] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 969.593031][T15438] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 969.618231][T15438] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 969.825655][T15438] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 969.914728][T15440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.941977][ T12] bridge_slave_1: left allmulticast mode [ 969.972786][ T12] bridge_slave_1: left promiscuous mode [ 969.978763][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.044750][ T12] bridge_slave_0: left allmulticast mode [ 970.050446][ T12] bridge_slave_0: left promiscuous mode [ 970.082990][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.111099][ T12] bridge_slave_1: left allmulticast mode [ 970.123197][ T12] bridge_slave_1: left promiscuous mode [ 970.129071][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.157042][ T12] bridge_slave_0: left allmulticast mode [ 970.163586][ T12] bridge_slave_0: left promiscuous mode [ 970.169381][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.199641][ T12] bridge_slave_1: left allmulticast mode [ 970.212741][ T12] bridge_slave_1: left promiscuous mode [ 970.218608][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.245921][ T12] bridge_slave_0: left allmulticast mode [ 970.251649][ T12] bridge_slave_0: left promiscuous mode [ 970.262913][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.287647][ T12] bridge_slave_1: left allmulticast mode [ 970.294011][ T12] bridge_slave_1: left promiscuous mode [ 970.299810][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.334515][ T12] bridge_slave_0: left allmulticast mode [ 970.340209][ T12] bridge_slave_0: left promiscuous mode [ 970.363135][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.376420][ T12] bridge_slave_1: left allmulticast mode [ 970.382079][ T12] bridge_slave_1: left promiscuous mode [ 970.409881][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.444250][ T12] bridge_slave_0: left allmulticast mode [ 970.451505][ T12] bridge_slave_0: left promiscuous mode [ 970.473015][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.496972][ T12] bridge_slave_1: left allmulticast mode [ 970.512686][ T12] bridge_slave_1: left promiscuous mode [ 970.518475][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.553103][ T12] bridge_slave_0: left allmulticast mode [ 970.558798][ T12] bridge_slave_0: left promiscuous mode [ 970.572903][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.983432][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.043376][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.083458][ T12] bond0 (unregistering): Released all slaves [ 975.483367][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.514277][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.539962][ T12] bond0 (unregistering): Released all slaves [ 975.584193][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.624577][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.637886][ T12] bond0 (unregistering): Released all slaves [ 975.684529][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.713601][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.739433][ T12] bond0 (unregistering): Released all slaves [ 976.233072][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.286434][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.309391][ T12] bond0 (unregistering): Released all slaves [ 976.718646][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.763253][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.787539][ T12] bond0 (unregistering): Released all slaves [ 977.076425][T15440] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.173077][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.180364][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.213206][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.220548][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.445312][T15432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.650749][ T12] hsr_slave_0: left promiscuous mode [ 977.682855][ T12] hsr_slave_1: left promiscuous mode [ 977.720456][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.743738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.798777][ T12] hsr_slave_0: left promiscuous mode [ 977.853130][ T12] hsr_slave_1: left promiscuous mode [ 977.887734][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.895460][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.933881][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.941374][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.998099][ T12] hsr_slave_0: left promiscuous mode [ 978.005015][ T12] hsr_slave_1: left promiscuous mode [ 978.023382][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.053787][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.087060][ T12] hsr_slave_0: left promiscuous mode [ 978.113178][ T12] hsr_slave_1: left promiscuous mode [ 978.123001][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.143695][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.203471][ T12] hsr_slave_0: left promiscuous mode [ 978.232984][ T12] hsr_slave_1: left promiscuous mode [ 978.262859][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.270472][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.285277][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.302826][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.328772][ T12] hsr_slave_0: left promiscuous mode [ 978.353089][ T12] hsr_slave_1: left promiscuous mode [ 978.372952][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.385034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.554049][ T12] veth1_macvtap: left promiscuous mode [ 978.559663][ T12] veth0_macvtap: left promiscuous mode [ 978.565571][ T12] veth1_vlan: left promiscuous mode [ 978.570943][ T12] veth0_vlan: left promiscuous mode [ 978.577498][ T12] veth1_macvtap: left promiscuous mode [ 978.583436][ T12] veth0_macvtap: left promiscuous mode [ 978.589129][ T12] veth1_vlan: left promiscuous mode [ 978.594557][ T12] veth0_vlan: left promiscuous mode [ 980.510539][ T12] team0 (unregistering): Port device team_slave_1 removed [ 980.654183][ T12] team0 (unregistering): Port device team_slave_0 removed [ 983.265235][ T12] team0 (unregistering): Port device team_slave_1 removed [ 983.436875][ T12] team0 (unregistering): Port device team_slave_0 removed [ 985.452355][ T12] team0 (unregistering): Port device team_slave_1 removed [ 985.558157][ T12] team0 (unregistering): Port device team_slave_0 removed [ 986.759232][ T12] team0 (unregistering): Port device team_slave_1 removed [ 986.876222][ T12] team0 (unregistering): Port device team_slave_0 removed [ 988.931726][ T12] team0 (unregistering): Port device team_slave_1 removed [ 989.178617][ T12] team0 (unregistering): Port device team_slave_0 removed [ 991.411738][ T12] team0 (unregistering): Port device team_slave_1 removed [ 991.595915][ T12] team0 (unregistering): Port device team_slave_0 removed [ 992.626098][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.632593][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.620305][T15432] veth0_vlan: entered promiscuous mode [ 993.796264][T15432] veth1_vlan: entered promiscuous mode [ 993.939872][T15438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.110841][T15432] veth0_macvtap: entered promiscuous mode [ 994.186206][T15434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 994.231788][T15432] veth1_macvtap: entered promiscuous mode [ 994.277287][T15438] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.346476][T15434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 994.400194][T15434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 994.515320][T15434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 994.576796][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.614185][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.632669][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.652696][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.677260][T15432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.697006][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.704232][ T6339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.826438][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.872669][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.902649][T15432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.922826][T15432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.976752][T15432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.994925][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.002125][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.160839][T15432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.170192][T15432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.203868][T15432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.228316][T15432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.345055][T15440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.073464][T15345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.081334][T15345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.236606][T15434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.262134][T15442] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 996.347015][T15442] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 996.453716][T15442] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 996.504351][T15442] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 996.659905][T15345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.680368][T15345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.708471][T15434] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.875514][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.882810][ T6341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.994817][T15438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.085098][T15436] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 997.156028][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.163599][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.332890][T15436] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 997.360204][T15440] veth0_vlan: entered promiscuous mode [ 997.504461][T15436] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 997.516406][T15436] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 997.604064][T15440] veth1_vlan: entered promiscuous mode [ 997.709484][T15438] veth0_vlan: entered promiscuous mode [ 997.751450][ T6227] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 997.830582][T15438] veth1_vlan: entered promiscuous mode [ 997.980171][ T6227] usb 1-1: Using ep0 maxpacket: 8 [ 998.003453][ T6227] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 998.011684][ T6227] usb 1-1: config 0 has no interface number 0 [ 998.031983][ T6227] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 998.067945][ T6227] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 998.109102][T15442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.116635][ T6227] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 998.146179][ T6227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.183729][T15440] veth0_macvtap: entered promiscuous mode [ 998.224641][ T6227] usb 1-1: config 0 descriptor?? [ 998.234784][ T6227] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 998.257726][T15438] veth0_macvtap: entered promiscuous mode [ 998.332060][T15442] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.377275][T15440] veth1_macvtap: entered promiscuous mode [ 998.422012][T15438] veth1_macvtap: entered promiscuous mode [ 998.445512][ T5309] usb 1-1: USB disconnect, device number 56 [ 998.454278][ T5309] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 998.528799][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.536043][ T5238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.704792][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.712026][ T5312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.798047][T15440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.836203][T15440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.880915][T15440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.901695][T15440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.926703][T15440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.955136][T15440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.975623][T15440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.115687][T15438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.162892][T15438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.191229][T15438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.215390][T15438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.252829][T15438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.272673][T15438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.282519][T15438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 999.312686][T15438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.355238][T15438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.403119][T15440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.452604][T15440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.472614][T15440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.492761][T15440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.514082][T15440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.542667][T15440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.565305][T15440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.635275][T15438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.656775][T15438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.682647][T15438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.702619][T15438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.730780][T15438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.752613][T15438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.762505][T15438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 999.805048][T15438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 999.825277][T15438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.843097][T15514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3085'. [ 999.874132][T15434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.910339][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3085'. [ 999.931545][T15517] bridge_slave_1: left allmulticast mode [ 999.953861][T15517] bridge_slave_1: left promiscuous mode [ 999.962963][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.996152][T15517] bridge_slave_0: left allmulticast mode [ 1000.001851][T15517] bridge_slave_0: left promiscuous mode [ 1000.022864][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.216596][T15438] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.247601][T15438] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.270324][T15438] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.299519][T15438] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.353559][T15440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.382624][T15440] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.391516][T15440] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.433975][T15440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.481996][T15442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1000.843921][T15436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.041101][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.069145][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.141644][T15434] veth0_vlan: entered promiscuous mode [ 1001.286307][T15529] loop0: detected capacity change from 0 to 128 [ 1001.290632][T15434] veth1_vlan: entered promiscuous mode [ 1001.606654][T15442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.717799][T15436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.749854][ T29] audit: type=1800 audit(1719487718.964:394): pid=15532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3089" name="bus" dev="loop0" ino=1048799 res=0 errno=0 [ 1001.898763][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.025161][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.320355][T15508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.327662][T15508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.440855][T15508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.448137][T15508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.502084][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.555282][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.601144][T15434] veth0_macvtap: entered promiscuous mode [ 1002.677865][T15434] veth1_macvtap: entered promiscuous mode [ 1002.715018][T15537] loop0: detected capacity change from 0 to 512 [ 1002.753373][T15537] EXT4-fs: Ignoring removed i_version option [ 1002.759429][T15537] EXT4-fs: Ignoring removed oldalloc option [ 1002.847681][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.887344][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.897054][T15537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1002.980767][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.002913][T15537] ext4 filesystem being mounted at /root/syzkaller.1AIsOL/10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.050334][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.080767][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.113243][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.153145][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.168939][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.192645][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.216829][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.242684][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.262668][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.286872][T15434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1003.286917][T15432] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.364913][T15436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1003.487019][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.531993][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.582616][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.623147][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.652642][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.690989][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.719623][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.742950][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.759598][T15434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.770399][T15434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.829433][T15434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.952440][T15434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.012891][T15434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.021663][T15434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.072753][T15434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.186274][ T29] audit: type=1326 audit(1719487721.414:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15563 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4030f75ae9 code=0x7ffc0000 [ 1004.284250][ T29] audit: type=1326 audit(1719487721.414:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15563 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4030f75ae9 code=0x7ffc0000 [ 1004.371547][ T29] audit: type=1326 audit(1719487721.414:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15563 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4030f75ae9 code=0x7ffc0000 [ 1004.453105][ T29] audit: type=1326 audit(1719487721.414:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15563 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4030f75ae9 code=0x7ffc0000 [ 1004.527080][ T29] audit: type=1326 audit(1719487721.414:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15563 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f4030f75ae9 code=0x7ffc0000 [ 1004.537543][T15442] veth0_vlan: entered promiscuous mode [ 1004.672731][ T29] audit: type=1326 audit(1719487721.414:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15563 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4030f75ae9 code=0x7ffc0000 [ 1004.680749][T15577] overlayfs: failed to resolve './file0': -2 [ 1004.726206][T15436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.781822][T15442] veth1_vlan: entered promiscuous mode [ 1004.930023][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.970383][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.154929][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.186335][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.422531][T15436] veth0_vlan: entered promiscuous mode [ 1005.909847][T15442] veth0_macvtap: entered promiscuous mode [ 1006.154370][ T6341] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1006.334385][T15442] veth1_macvtap: entered promiscuous mode [ 1006.425443][T15436] veth1_vlan: entered promiscuous mode [ 1006.480943][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.516275][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'. [ 1006.523657][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.547698][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.565240][ T6341] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1006.582650][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.592698][ T6341] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 1006.615073][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.626031][ T6341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1006.642638][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.652718][ T6341] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1006.673052][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.692788][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.707905][ T6341] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1006.730965][ T6341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1006.742534][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.753622][ T6341] usb 5-1: SerialNumber: syz [ 1006.773668][ T6341] usb 5-1: config 0 descriptor?? [ 1006.778754][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.790229][T15591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1006.804938][ T6341] port100 5-1:0.0: NFC: Could not get supported command types [ 1006.816388][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1006.837387][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.857615][T15442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.890078][T15599] team0: entered promiscuous mode [ 1006.922520][T15599] team_slave_0: entered promiscuous mode [ 1006.928876][T15599] team_slave_1: entered promiscuous mode [ 1006.961589][T15601] team_slave_0: entered allmulticast mode [ 1007.048833][T15601] team0: Port device team_slave_0 removed [ 1007.075711][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.110198][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.140910][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.158008][ T29] audit: type=1326 audit(1719487724.384:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c375ae9 code=0x7ffc0000 [ 1007.171836][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.206097][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.232644][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.237620][ T29] audit: type=1326 audit(1719487724.404:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c375ae9 code=0x7ffc0000 [ 1007.262612][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.294053][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.306735][ T29] audit: type=1326 audit(1719487724.424:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577c375ae9 code=0x7ffc0000 [ 1007.328097][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.369886][ T29] audit: type=1326 audit(1719487724.424:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c375ae9 code=0x7ffc0000 [ 1007.371833][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.425075][ T29] audit: type=1326 audit(1719487724.424:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c375ae9 code=0x7ffc0000 [ 1007.451856][T15442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.476171][T15442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.480426][ T29] audit: type=1326 audit(1719487724.424:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f577c375ae9 code=0x7ffc0000 [ 1007.499036][T15442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.566424][ T29] audit: type=1326 audit(1719487724.424:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.3.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577c375ae9 code=0x7ffc0000 [ 1007.629159][T15594] team0: left promiscuous mode [ 1007.641912][T15594] team_slave_1: left promiscuous mode [ 1007.699107][T15442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.722856][T15442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.752719][T15442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.775511][T15442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.096875][T15436] veth0_macvtap: entered promiscuous mode [ 1008.136663][T15436] veth1_macvtap: entered promiscuous mode [ 1008.203645][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.257314][ T6341] usb 5-1: USB disconnect, device number 51 [ 1008.285855][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.353132][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.392311][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.432488][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.450677][ T6339] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1008.482647][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.522800][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.554049][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.598117][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.643771][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.682609][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.705775][ T6339] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1008.712919][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.724599][ T6339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.766891][T15436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1008.799299][ T6339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.818336][T15436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.847383][ T6339] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1008.893102][T15436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.933983][ T6339] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1008.944015][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'. [ 1008.991182][ T6339] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1009.033603][ T6339] usb 1-1: Manufacturer: syz [ 1009.044529][T15627] input: syz1 as /devices/virtual/input/input61 [ 1009.073992][ T6339] usb 1-1: config 0 descriptor?? [ 1009.291060][ T4484] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.302172][ T4484] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.332346][ T4484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.352096][ T4484] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.375641][ T4484] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1009.384902][ T4484] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.434349][T15618] netlink: 'syz.3.3113': attribute type 10 has an invalid length. [ 1009.490771][ T6339] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 1009.499121][ T6339] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 1009.527301][ T6339] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1009.662410][T15618] hsr0: entered promiscuous mode [ 1009.784790][T15618] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1009.979488][T15618] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1010.147666][T15618] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1010.274536][T15618] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1010.288422][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1010.300651][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1010.335249][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1010.346179][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1010.360004][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1010.371701][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1010.662839][T15635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3112'. [ 1010.735990][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1010.838195][ T5152] usb 1-1: USB disconnect, device number 57 [ 1011.073801][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3118'. [ 1011.505178][ T4484] Bluetooth: hci0: command tx timeout [ 1011.623324][ T29] audit: type=1326 audit(1719487728.854:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.0.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75775ae9 code=0x7ffc0000 [ 1011.737670][ T29] audit: type=1326 audit(1719487728.854:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.0.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad75775ae9 code=0x7ffc0000 [ 1011.809300][ T29] audit: type=1326 audit(1719487728.864:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.0.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad75775ae9 code=0x7ffc0000 [ 1012.463767][ T4484] Bluetooth: hci4: command tx timeout [ 1012.909738][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3128'. [ 1013.150310][T10067] bridge_slave_1: left allmulticast mode [ 1013.172493][T10067] bridge_slave_1: left promiscuous mode [ 1013.186478][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3131'. [ 1013.193340][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.255132][T10067] bridge_slave_0: left allmulticast mode [ 1013.260908][T10067] bridge_slave_0: left promiscuous mode [ 1013.302417][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.583189][ T4484] Bluetooth: hci0: command tx timeout [ 1013.745804][T15658] loop1: detected capacity change from 0 to 32768 [ 1013.829533][T15658] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3121 (15658) [ 1013.943379][T15658] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1014.002848][T15658] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 1014.011360][T15658] BTRFS info (device loop1): using free-space-tree [ 1014.297336][T15658] BTRFS info (device loop1): rebuilding free space tree [ 1014.542907][ T4484] Bluetooth: hci4: command tx timeout [ 1014.603927][T15658] loop1: detected capacity change from 32768 to 0 [ 1014.753225][T10067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.791202][T10067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.818074][T15347] kworker/u8:13: attempt to access beyond end of device [ 1014.818074][T15347] loop1: rw=67112961, sector=10464, nr_sectors = 8 limit=0 [ 1014.837022][T10067] bond0 (unregistering): Released all slaves [ 1014.857000][T15347] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 1014.897224][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3134'. [ 1014.920018][T15347] kworker/u8:13: attempt to access beyond end of device [ 1014.920018][T15347] loop1: rw=67112961, sector=10480, nr_sectors = 8 limit=0 [ 1014.988211][T15347] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 1015.083406][T15347] kworker/u8:13: attempt to access beyond end of device [ 1015.083406][T15347] loop1: rw=67112961, sector=10488, nr_sectors = 8 limit=0 [ 1015.132873][T15680] team0: entered promiscuous mode [ 1015.137957][T15680] team_slave_0: entered promiscuous mode [ 1015.144542][T15680] team_slave_1: entered promiscuous mode [ 1015.151452][T15681] team_slave_0: entered allmulticast mode [ 1015.194407][T15347] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 1015.239960][T15347] kworker/u8:13: attempt to access beyond end of device [ 1015.239960][T15347] loop1: rw=67112961, sector=10496, nr_sectors = 8 limit=0 [ 1015.278532][T15681] team0: Port device team_slave_0 removed [ 1015.285617][T15347] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 1015.340874][T15434] BTRFS error (device loop1 state A): Transaction aborted (error -5) [ 1015.362408][T15434] BTRFS: error (device loop1 state A) in btrfs_start_dirty_block_groups:3428: errno=-5 IO failure [ 1015.422710][T15434] BTRFS info (device loop1 state EA): forced readonly [ 1015.446131][T15434] BTRFS info (device loop1 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1015.537856][T10067] hsr_slave_0: left promiscuous mode [ 1015.600047][T10067] hsr_slave_1: left promiscuous mode [ 1015.658197][T10067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.667039][ T4484] Bluetooth: hci0: command tx timeout [ 1015.702924][T10067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.746164][T10067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.828980][T10067] veth1_macvtap: left promiscuous mode [ 1015.862713][T10067] veth0_macvtap: left promiscuous mode [ 1015.886547][T10067] veth1_vlan: left promiscuous mode [ 1015.902825][T10067] veth0_vlan: left promiscuous mode [ 1016.492223][T15726] loop0: detected capacity change from 0 to 128 [ 1016.655271][ T4484] Bluetooth: hci4: command tx timeout [ 1017.195072][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1017.195124][ T29] audit: type=1800 audit(1719487734.414:414): pid=15728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3142" name="bus" dev="loop0" ino=1048809 res=0 errno=0 [ 1017.742833][ T4484] Bluetooth: hci0: command tx timeout [ 1018.126521][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'. [ 1018.367621][T15741] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1018.712913][ T4484] Bluetooth: hci4: command tx timeout [ 1019.006453][T15735] loop3: detected capacity change from 0 to 32768 [ 1019.047600][T15735] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3145 (15735) [ 1019.105814][T15735] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1019.124161][T10067] team0 (unregistering): Port device team_slave_1 removed [ 1019.141310][T15735] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1019.172780][T15735] BTRFS info (device loop3): using free-space-tree [ 1019.250502][T10067] team0 (unregistering): Port device team_slave_0 removed [ 1019.581290][T15735] BTRFS info (device loop3): rebuilding free space tree [ 1019.802833][T15735] loop3: detected capacity change from 32768 to 0 [ 1019.986461][ T12] kworker/u8:1: attempt to access beyond end of device [ 1019.986461][ T12] loop3: rw=67112961, sector=10464, nr_sectors = 8 limit=0 [ 1020.021278][ T12] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 1020.052196][ T12] kworker/u8:1: attempt to access beyond end of device [ 1020.052196][ T12] loop3: rw=67112961, sector=10480, nr_sectors = 8 limit=0 [ 1020.071017][ T12] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 1020.119240][ T12] kworker/u8:1: attempt to access beyond end of device [ 1020.119240][ T12] loop3: rw=67112961, sector=10488, nr_sectors = 8 limit=0 [ 1020.162699][ T12] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 1020.192094][ T12] kworker/u8:1: attempt to access beyond end of device [ 1020.192094][ T12] loop3: rw=67112961, sector=10496, nr_sectors = 8 limit=0 [ 1020.242310][ T12] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 1020.284486][T15438] BTRFS error (device loop3 state A): Transaction aborted (error -5) [ 1020.311791][T15438] BTRFS: error (device loop3 state A) in btrfs_start_dirty_block_groups:3428: errno=-5 IO failure [ 1020.352624][T15438] BTRFS info (device loop3 state EA): forced readonly [ 1020.389673][T15438] BTRFS info (device loop3 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1020.472225][T15680] team0: left promiscuous mode [ 1020.488337][T15680] team_slave_1: left promiscuous mode [ 1020.682116][T15633] chnl_net:caif_netlink_parms(): no params data found [ 1020.971127][T15638] chnl_net:caif_netlink_parms(): no params data found [ 1021.243936][ T5309] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1021.495599][ T5309] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.533105][ T5309] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1021.593854][ T5309] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1021.612679][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.634000][ T5309] usb 5-1: config 0 descriptor?? [ 1021.657814][T15633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.673065][T15633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.690700][T15633] bridge_slave_0: entered allmulticast mode [ 1021.717342][T15633] bridge_slave_0: entered promiscuous mode [ 1021.885131][ T5309] usb 5-1: string descriptor 0 read error: -71 [ 1021.973560][ T5309] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1022.023240][ T5309] usb 5-1: USB disconnect, device number 52 [ 1022.102727][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3151'. [ 1022.163012][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3151'. [ 1022.254380][T15788] loop3: detected capacity change from 0 to 128 [ 1022.273400][T15508] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1022.502859][T15508] usb 1-1: Using ep0 maxpacket: 16 [ 1022.533738][T15508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1022.556159][T15633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.562659][T15508] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1022.575505][T15508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.588670][T15508] usb 1-1: config 0 descriptor?? [ 1022.728273][ T29] audit: type=1800 audit(1719487739.954:415): pid=15790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3154" name="bus" dev="loop3" ino=1048810 res=0 errno=0 [ 1023.453081][T15633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.462920][T15633] bridge_slave_1: entered allmulticast mode [ 1023.471236][T15633] bridge_slave_1: entered promiscuous mode [ 1023.521550][T15638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.543264][T15638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.550579][T15638] bridge_slave_0: entered allmulticast mode [ 1023.594567][T15638] bridge_slave_0: entered promiscuous mode [ 1023.625542][T15638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.652978][T15638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.693042][T15638] bridge_slave_1: entered allmulticast mode [ 1023.737843][T15638] bridge_slave_1: entered promiscuous mode [ 1023.854103][T15782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.896618][T15782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.926171][T15508] usbhid 1-1:0.0: can't add hid device: -71 [ 1023.932218][T15508] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1023.984000][T15508] usb 1-1: USB disconnect, device number 58 [ 1024.220369][T15633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.295183][T15638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.324751][T15638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.373030][T15633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.013242][ T5093] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1025.367048][ T5093] usb 2-1: device descriptor read/64, error -71 [ 1025.652878][ T5093] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1025.673738][T15633] team0: Port device team_slave_0 added [ 1025.736018][T15633] team0: Port device team_slave_1 added [ 1025.811992][T15638] team0: Port device team_slave_0 added [ 1025.867353][T15638] team0: Port device team_slave_1 added [ 1025.874128][ T5093] usb 2-1: device descriptor read/64, error -71 [ 1026.024083][ T5093] usb usb2-port1: attempt power cycle [ 1026.130516][T10067] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.182819][ T6339] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1026.290731][T15633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.305298][T15633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.347123][T15633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.374550][T15633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.391713][T15633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.430442][ T6339] usb 1-1: Using ep0 maxpacket: 16 [ 1026.441815][T15633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.453087][ T5093] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1026.468085][ T6339] usb 1-1: New USB device found, idVendor=16d8, idProduct=6512, bcdDevice=4d.36 [ 1026.477674][ T6339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.480362][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1026.503048][ T6339] usb 1-1: config 0 descriptor?? [ 1026.508238][ T5093] usb 2-1: device descriptor read/8, error -71 [ 1026.520280][ T6339] hub 1-1:0.0: bad descriptor, ignoring hub [ 1026.532921][ T5309] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1026.540075][ T6339] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1026.584062][ T6339] qcaux 1-1:0.0: qcaux converter detected [ 1026.599911][T10067] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.602999][ T6339] usb 1-1: qcaux converter now attached to ttyUSB0 [ 1026.697457][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 1026.763199][ T5309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.792867][ T5093] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1026.813565][ T5309] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1026.882088][ T5093] usb 2-1: device descriptor read/8, error -71 [ 1026.912860][ T5309] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1026.929778][ T5309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.950123][ T5309] usb 4-1: config 0 descriptor?? [ 1027.017877][ T5093] usb usb2-port1: unable to enumerate USB device [ 1027.046382][T10067] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.064782][T13215] usb 1-1: USB disconnect, device number 59 [ 1027.104886][T13215] qcaux ttyUSB0: qcaux converter now disconnected from ttyUSB0 [ 1027.123287][T13215] qcaux 1-1:0.0: device disconnected [ 1027.130102][T15638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.151637][T15638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.209218][ T5309] usb 4-1: string descriptor 0 read error: -71 [ 1027.224092][ T5309] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1027.231800][T15638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.244594][ T5309] usb 4-1: USB disconnect, device number 36 [ 1027.256241][T15638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.277261][T15638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.348774][T15638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.491886][T10067] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.863232][T15847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1027.972803][T15847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1028.058478][T15638] hsr_slave_0: entered promiscuous mode [ 1028.096914][T15638] hsr_slave_1: entered promiscuous mode [ 1028.106804][T15638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1028.123839][ T29] audit: type=1804 audit(1719487745.354:416): pid=15850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3170" name="/root/syzkaller.1AIsOL/38/cgroup.controllers" dev="sda1" ino=2175 res=1 errno=0 [ 1028.147871][T15638] Cannot create hsr debugfs directory [ 1028.209145][T15633] hsr_slave_0: entered promiscuous mode [ 1028.231301][T15633] hsr_slave_1: entered promiscuous mode [ 1028.242856][T15633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1028.252808][T15633] Cannot create hsr debugfs directory [ 1029.023004][T10067] bridge_slave_1: left allmulticast mode [ 1029.045415][T10067] bridge_slave_1: left promiscuous mode [ 1029.063855][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.110243][T10067] bridge_slave_0: left allmulticast mode [ 1029.128050][T10067] bridge_slave_0: left promiscuous mode [ 1029.144368][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.529544][T10067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.570240][T10067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.616534][T10067] bond0 (unregistering): Released all slaves [ 1031.971399][T15881] loop4: detected capacity change from 0 to 128 [ 1032.601126][ T29] audit: type=1800 audit(1719487749.674:417): pid=15883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3182" name="bus" dev="loop4" ino=1048811 res=0 errno=0 [ 1033.023682][T10067] hsr_slave_0: left promiscuous mode [ 1033.060084][T10067] hsr_slave_1: left promiscuous mode [ 1033.111150][T10067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.161732][T10067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.193833][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3183'. [ 1033.193988][T10067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.240037][T10067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.300177][T10067] veth1_macvtap: left promiscuous mode [ 1033.319435][T10067] veth0_macvtap: left promiscuous mode [ 1033.349972][T10067] veth1_vlan: left promiscuous mode [ 1033.358874][T10067] veth0_vlan: left promiscuous mode [ 1034.764761][ T5309] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1035.021719][ T5309] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1035.131567][ T5309] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 1035.192799][ T5309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1035.207693][ T5309] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1035.246143][ T5309] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1035.287383][ T5309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1035.309403][ T5309] usb 2-1: SerialNumber: syz [ 1035.321830][ T5309] usb 2-1: config 0 descriptor?? [ 1035.330138][T15900] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1035.339544][ T5309] port100 2-1:0.0: NFC: Could not get supported command types [ 1035.930251][T15906] loop4: detected capacity change from 0 to 32768 [ 1035.938439][T15906] XFS: attr2 mount option is deprecated. [ 1035.944174][T15906] XFS: noikeep mount option is deprecated. [ 1036.023428][T15906] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1036.120846][T15906] XFS (loop4): Ending clean mount [ 1036.140005][T15906] XFS (loop4): Quotacheck needed: Please wait. [ 1036.448798][T15906] XFS (loop4): Quotacheck: Done. [ 1037.382793][ T5151] usb 2-1: USB disconnect, device number 59 [ 1037.592713][T15440] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1037.703051][T10067] team0 (unregistering): Port device team_slave_1 removed [ 1037.745221][T15925] Bluetooth: MGMT ver 1.22 [ 1037.960697][T10067] team0 (unregistering): Port device team_slave_0 removed [ 1041.807540][T15954] loop4: detected capacity change from 0 to 32768 [ 1041.816453][T15954] XFS: attr2 mount option is deprecated. [ 1041.822777][T15954] XFS: noikeep mount option is deprecated. [ 1041.888532][T15954] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1041.953657][T15954] XFS (loop4): Ending clean mount [ 1041.965900][T15954] XFS (loop4): Quotacheck needed: Please wait. [ 1042.121608][T15633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1042.167655][T15954] XFS (loop4): Quotacheck: Done. [ 1042.410100][T15633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1042.494672][T15633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1043.060784][T15633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1043.286780][T15440] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1043.633169][ T5151] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1043.846050][ T5151] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1043.876461][ T5151] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1043.929644][ T5151] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1043.959022][ T5151] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 1043.986040][ T5151] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 1044.000368][T15633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.076669][ T5151] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1044.102808][ T5151] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1044.129514][ T5151] usb 2-1: Product: syz [ 1044.138585][ T5151] usb 2-1: Manufacturer: syz [ 1044.159686][T15977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1044.214006][ T5151] cdc_wdm 2-1:1.0: skipping garbage [ 1044.232789][ T5151] cdc_wdm 2-1:1.0: skipping garbage [ 1044.250727][ T5151] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1044.259626][ T5151] cdc_wdm 2-1:1.0: Unknown control protocol [ 1044.374334][T15633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.392754][ T5309] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1044.456909][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.464150][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.554878][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.562098][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.581654][T15994] fuse: Bad value for 'rootmode' [ 1044.601666][ T29] audit: type=1804 audit(1719487761.824:418): pid=15994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3213" name="/root/syzkaller.bLsgVl/32/file0" dev="sda1" ino=2187 res=1 errno=0 [ 1044.663325][ T5309] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1044.677806][T15638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1044.709895][ T5309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.730566][ T5309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.750487][ T5309] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1044.763990][T15638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1044.787583][ T5309] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1044.810361][T15638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1044.830862][T15638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1044.840248][ T5309] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1044.872271][ T5309] usb 5-1: Manufacturer: syz [ 1044.882479][ T5309] usb 5-1: config 0 descriptor?? [ 1045.306380][ T5309] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 1045.320973][T15638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.352213][ T5309] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 1045.386765][ T5309] appleir 0003:05AC:8243.0011: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1045.442423][T15638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.493470][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.500725][ T5309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.587704][T15508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.594948][T15508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.699337][T16003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3208'. [ 1045.850742][ T6879] usb 5-1: USB disconnect, device number 53 [ 1045.908804][T15633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.166632][T15633] veth0_vlan: entered promiscuous mode [ 1046.215603][T15633] veth1_vlan: entered promiscuous mode [ 1046.371198][ T5309] usb 2-1: USB disconnect, device number 60 [ 1046.667862][T16019] No such timeout policy "syz0" [ 1047.102479][T15633] veth0_macvtap: entered promiscuous mode [ 1047.306251][T15633] veth1_macvtap: entered promiscuous mode [ 1047.481140][T15638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.531338][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.583022][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.600453][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.625730][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.647046][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.671688][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.677379][T16034] fuse: Unknown parameter 'use00000000000000000000' [ 1047.712276][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.740768][ T29] audit: type=1804 audit(1719487764.964:419): pid=16034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3224" name="/root/syzkaller.bLsgVl/36/file0" dev="sda1" ino=2193 res=1 errno=0 [ 1047.774941][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.792718][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.815318][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.826267][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.847382][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.867121][T15633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.902853][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.932310][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.963780][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.982684][T15508] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1047.984527][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.031724][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.063185][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.090612][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.132220][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.152588][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.173193][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.192641][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.192774][T15508] usb 1-1: Using ep0 maxpacket: 16 [ 1048.213767][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.233253][T15508] usb 1-1: New USB device found, idVendor=16d8, idProduct=6512, bcdDevice=4d.36 [ 1048.249138][T15633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.265090][T15508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.313298][T15508] usb 1-1: config 0 descriptor?? [ 1048.319567][ T5170] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1048.334309][T15508] hub 1-1:0.0: bad descriptor, ignoring hub [ 1048.340259][T15508] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1048.413866][T15508] qcaux 1-1:0.0: qcaux converter detected [ 1048.456743][T15508] usb 1-1: qcaux converter now attached to ttyUSB0 [ 1048.504622][T15633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.522806][ T5170] usb 2-1: Using ep0 maxpacket: 8 [ 1048.531464][T15633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.547481][ T5170] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1048.572718][ T5170] usb 2-1: config 0 has no interface number 0 [ 1048.575726][T15633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.597545][ T5170] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1048.639903][ T5170] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1048.652702][ T5170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.660579][T15633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.695095][ T5170] usb 2-1: config 0 descriptor?? [ 1048.736579][ T5170] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1048.842895][ T5309] usb 1-1: USB disconnect, device number 60 [ 1048.889538][ T5309] qcaux ttyUSB0: qcaux converter now disconnected from ttyUSB0 [ 1048.920209][ T5309] qcaux 1-1:0.0: device disconnected [ 1048.975315][ T5309] usb 2-1: USB disconnect, device number 61 [ 1049.081307][T15638] veth0_vlan: entered promiscuous mode [ 1049.091602][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.129472][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.253832][T15347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.282351][T15638] veth1_vlan: entered promiscuous mode [ 1049.302793][T15347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.480243][T15638] veth0_macvtap: entered promiscuous mode [ 1049.521183][T15638] veth1_macvtap: entered promiscuous mode [ 1049.609725][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.630661][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.671306][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.722961][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.753489][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.764219][ T5151] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1049.790067][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.815029][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.102700][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.124934][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.543421][T16071] No such timeout policy "syz0" [ 1051.287045][ T4484] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1051.294113][ T4484] Bluetooth: Wrong link type (-22) [ 1051.308563][ T4484] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1051.316094][ T4484] Bluetooth: Wrong link type (-22) [ 1051.321673][ T4484] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1051.328993][ T4484] Bluetooth: Wrong link type (-22) [ 1051.340670][ T4484] Bluetooth: hci12: link tx timeout [ 1051.351837][ T4484] Bluetooth: hci12: killing stalled connection 11:aa:aa:aa:aa:aa [ 1051.742944][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.781982][ T5151] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1051.832613][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.868617][ T5151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.902699][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.942661][ T5151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.972710][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.000706][ T5151] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1052.044793][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.114543][T15638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.298959][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.321752][T16077] fuse: Unknown parameter 'use00000000000000000000' [ 1052.338022][ T5151] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1052.355208][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.375612][ T5151] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1052.399993][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.414877][ T29] audit: type=1804 audit(1719487769.634:420): pid=16077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3237" name="/root/syzkaller.V1SCr0/40/file0" dev="sda1" ino=2184 res=1 errno=0 [ 1052.443894][ T5151] usb 4-1: config 0 descriptor?? [ 1052.464200][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.482785][ T5151] usb 4-1: can't set config #0, error -71 [ 1052.500632][ T5151] usb 4-1: USB disconnect, device number 37 [ 1052.522760][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.556780][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.585082][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.586631][T16083] sctp: [Deprecated]: syz.0.3241 (pid 16083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1052.586631][T16083] Use struct sctp_sack_info instead [ 1052.628185][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.668209][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.712772][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.735045][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.768966][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.833142][T15638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.856796][T15638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.857495][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3243'. [ 1052.924277][T15638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.057467][T15638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.099208][T15638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.137083][T15638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.181664][T15638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.431928][ T4484] Bluetooth: hci12: command 0x0406 tx timeout [ 1053.726051][ T6879] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1053.803335][ T5106] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1053.810130][ T5106] Bluetooth: Wrong link type (-22) [ 1053.815865][ T5106] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1053.822697][ T5106] Bluetooth: Wrong link type (-22) [ 1053.828444][ T5106] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1053.835486][ T5106] Bluetooth: Wrong link type (-22) [ 1054.013093][ T6879] usb 3-1: Using ep0 maxpacket: 8 [ 1054.050427][ T6879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1054.075248][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.088168][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.446237][ T6879] usb 3-1: config 0 has no interface number 0 [ 1054.482983][ T6879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1054.534912][ T6879] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1054.580679][ T6879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.617902][T16116] netlink: 'syz.4.3249': attribute type 49 has an invalid length. [ 1054.632457][ T6879] usb 3-1: config 0 descriptor?? [ 1054.653797][ T6879] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1054.692507][T16116] netlink: 'syz.4.3249': attribute type 49 has an invalid length. [ 1054.890209][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.906247][ T5151] usb 3-1: USB disconnect, device number 71 [ 1054.944684][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.976792][T16122] fuse: Unknown parameter 'use00000000000000000000' [ 1054.985186][ T29] audit: type=1804 audit(1719487772.214:421): pid=16122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3253" name="/root/syzkaller.1AIsOL/60/file0" dev="sda1" ino=2191 res=1 errno=0 [ 1055.067967][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.082711][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.222385][T16133] ext4: Unknown parameter 'trans' [ 1055.362972][ T5152] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1055.391102][T16136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1055.492688][ T5170] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1055.574201][ T5152] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1055.632736][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.705826][ T5152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.708298][ T5170] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1055.742788][ T5152] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1055.786588][ T5170] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1055.813777][ T5152] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1055.838235][ T5170] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1055.863170][ T5152] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1055.871294][ T5152] usb 4-1: Manufacturer: syz [ 1055.913667][ T5152] usb 4-1: config 0 descriptor?? [ 1055.918297][ T5170] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 1055.963922][T16149] netlink: 'syz.0.3263': attribute type 49 has an invalid length. [ 1055.972068][T16149] netlink: 'syz.0.3263': attribute type 49 has an invalid length. [ 1055.998146][ T5170] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 1056.068539][ T5170] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1056.082768][ T5170] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1056.111403][ T5170] usb 2-1: Product: syz [ 1056.141628][ T5170] usb 2-1: Manufacturer: syz [ 1056.182423][T16130] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1056.196845][ T5170] cdc_wdm 2-1:1.0: skipping garbage [ 1056.211491][ T5170] cdc_wdm 2-1:1.0: skipping garbage [ 1056.238984][ T5170] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1056.261345][ T5170] cdc_wdm 2-1:1.0: Unknown control protocol [ 1056.452462][ T5152] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 1056.491945][ T5152] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 1056.539992][ T5152] appleir 0003:05AC:8243.0012: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1056.626340][ T5170] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1056.626608][T16160] fuse: Unknown parameter 'user_i00000000000000000000' [ 1056.702157][ T29] audit: type=1804 audit(1719487773.924:422): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3266" name="/root/syzkaller.V1SCr0/49/file0" dev="sda1" ino=2207 res=1 errno=0 [ 1056.737024][T16134] loop5: detected capacity change from 0 to 32768 [ 1056.760162][T16134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3080 (16134) [ 1056.846140][T16134] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1056.863238][ T5170] usb 1-1: Using ep0 maxpacket: 16 [ 1056.867532][T16134] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 1056.895527][ T5170] usb 1-1: New USB device found, idVendor=16d8, idProduct=6512, bcdDevice=4d.36 [ 1056.906239][T16134] BTRFS info (device loop5): using free-space-tree [ 1056.918975][T16126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3251'. [ 1056.932535][ T5170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.957655][ T5170] usb 1-1: config 0 descriptor?? [ 1056.994063][ T5170] hub 1-1:0.0: bad descriptor, ignoring hub [ 1057.000569][ T5170] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1057.010721][ T5170] qcaux 1-1:0.0: qcaux converter detected [ 1057.020624][ T5170] usb 1-1: qcaux converter now attached to ttyUSB0 [ 1057.208363][ T5152] usb 4-1: USB disconnect, device number 38 [ 1057.452241][ T5170] usb 1-1: USB disconnect, device number 61 [ 1057.462774][T13215] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1057.499502][ T5170] qcaux ttyUSB0: qcaux converter now disconnected from ttyUSB0 [ 1057.525481][T15638] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1057.547181][ T5170] qcaux 1-1:0.0: device disconnected [ 1057.611804][T16183] syz.2.3270[16183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.612006][T16183] syz.2.3270[16183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1057.680934][T13215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.748460][T13215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.806066][T13215] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1057.844947][T13215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.889655][T13215] usb 5-1: config 0 descriptor?? [ 1058.117323][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3273'. [ 1058.129851][T16189] usb usb8: usbfs: process 16189 (syz.3.3272) did not claim interface 0 before use [ 1058.138726][T15508] usb 2-1: USB disconnect, device number 62 [ 1058.466085][T13215] logitech-hidpp-device 0003:046D:C086.0013: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 1058.558728][T16199] netlink: 'syz.1.3276': attribute type 49 has an invalid length. [ 1058.572639][ T5312] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1058.601327][T16199] netlink: 'syz.1.3276': attribute type 49 has an invalid length. [ 1058.664058][ T6879] usb 5-1: USB disconnect, device number 54 [ 1058.825558][ T5312] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1058.845954][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.895515][ T5312] usb 3-1: config 0 descriptor?? [ 1059.107273][T16208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.119352][T16210] fuse: Unknown parameter 'user_i00000000000000000000' [ 1059.223914][ T29] audit: type=1804 audit(1719487776.454:423): pid=16210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3280" name="/root/syzkaller.9sKccx/29/file0" dev="sda1" ino=2202 res=1 errno=0 [ 1059.270946][T16208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1059.299252][T16211] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1059.321804][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3274'. [ 1059.354662][T16214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3274'. [ 1059.372769][ T29] audit: type=1804 audit(1719487776.534:424): pid=16212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3282" name="/root/syzkaller.1AIsOL/69/cgroup.controllers" dev="sda1" ino=2207 res=1 errno=0 [ 1059.671050][ T5312] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1059.692124][ T5312] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1059.797938][T16221] loop5: detected capacity change from 0 to 512 [ 1059.968272][T16221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.023081][T16221] ext4 filesystem being mounted at /root/syzkaller.lbrDtP/3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.070985][T15508] usb 3-1: USB disconnect, device number 72 [ 1060.214858][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'. [ 1060.334080][T15638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.387518][T16235] team_slave_0: entered promiscuous mode [ 1060.402873][T16235] team_slave_0: entered allmulticast mode [ 1060.513401][T16235] team0: Port device team_slave_0 removed [ 1060.682809][ T5152] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1061.165643][T16244] No such timeout policy "syz0" [ 1062.097705][ T5152] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1062.137378][ T5152] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1062.214490][ T5152] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1062.273255][T16253] netlink: 'syz.1.3292': attribute type 49 has an invalid length. [ 1062.297586][ T5152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.353371][T16227] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1062.439612][T16253] netlink: 'syz.1.3292': attribute type 49 has an invalid length. [ 1063.476544][T16269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.568484][T16269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.741731][ T29] audit: type=1804 audit(1719487780.954:425): pid=16268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3300" name="/root/syzkaller.1AIsOL/76/cgroup.controllers" dev="sda1" ino=2207 res=1 errno=0 [ 1064.268973][T16259] loop2: detected capacity change from 0 to 32768 [ 1064.675099][ T4484] Bluetooth: hci0: ACL packet for unknown connection handle 2248 [ 1064.828058][T16276] syz.2.3297: attempt to access beyond end of device [ 1064.828058][T16276] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1064.975528][T16276] lbmIODone: I/O error in JFS log [ 1064.980803][T16276] *** Log Format Error ! *** [ 1064.986364][T16276] lmLogInit: exit(-22) [ 1065.013142][T16276] lmLogOpen: exit(-22) [ 1065.386818][ T6879] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1065.583739][ T5312] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1065.794848][ T5312] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1065.832786][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.851530][ T5312] usb 1-1: config 0 descriptor?? [ 1065.856928][ T6879] usb 6-1: Using ep0 maxpacket: 8 [ 1066.191700][ T6879] usb 6-1: config index 0 descriptor too short (expected 260, got 27) [ 1066.212821][ T6879] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.333468][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1066.386809][ T6879] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1066.422848][ T6879] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1066.432229][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1066.452706][ T6879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.550802][ T5170] usb 5-1: USB disconnect, device number 55 [ 1066.638221][T16293] loop4: detected capacity change from 0 to 512 [ 1066.695543][ T5312] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 1066.707048][ T6879] usb 6-1: string descriptor 0 read error: -71 [ 1066.725396][ T6879] usb 6-1: USB disconnect, device number 50 [ 1066.743690][ T5312] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 1066.834843][T16293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.906203][T16293] ext4 filesystem being mounted at /root/syzkaller.V1SCr0/52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.410083][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'. [ 1067.933078][ T6341] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1068.393766][ T6341] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1068.425430][ T6341] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 1068.464439][ T5312] usb 1-1: USB disconnect, device number 62 [ 1068.512997][ T6341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1068.539946][ T6341] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1068.581713][ T6341] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 1068.629256][ T6341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1068.653012][ T6341] usb 4-1: SerialNumber: syz [ 1068.681575][ T6341] usb 4-1: config 0 descriptor?? [ 1068.707988][T16310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1068.723978][ T6341] port100 4-1:0.0: NFC: Could not get supported command types [ 1068.882870][T15508] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1069.092781][T15508] usb 3-1: Using ep0 maxpacket: 32 [ 1069.106833][T15508] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1069.119790][T15440] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.131149][T15508] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1069.173835][T15508] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1069.228636][T15508] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1069.341657][T15508] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1069.396250][T15508] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1069.485456][ T4484] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1069.492395][ T4484] Bluetooth: Wrong link type (-22) [ 1069.498181][ T4484] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1069.505909][ T4484] Bluetooth: Wrong link type (-22) [ 1069.511486][ T4484] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1069.518344][ T4484] Bluetooth: Wrong link type (-22) [ 1069.529486][ T4484] Bluetooth: hci2: link tx timeout [ 1069.536938][ T4484] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1070.202775][T15508] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1070.211272][T15508] usb 3-1: Product: syz [ 1070.233065][T15508] usb 3-1: Manufacturer: syz [ 1070.237989][T15508] usb 3-1: SerialNumber: syz [ 1070.255297][T15508] usb 3-1: config 0 descriptor?? [ 1070.274979][T15508] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1070.292442][ T5170] usb 4-1: USB disconnect, device number 39 [ 1070.342865][T15508] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1070.383494][ T5309] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1070.480872][T15508] usb 3-1: USB disconnect, device number 73 [ 1070.523613][T15508] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1070.625911][ T5309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.664941][ T5309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.716237][ T5309] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1070.766287][ T5309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.851741][ T5309] usb 6-1: config 0 descriptor?? [ 1071.062762][T15508] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1071.283202][T15508] usb 3-1: Using ep0 maxpacket: 32 [ 1071.304483][T15508] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1071.328833][T15508] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1071.350590][ T5309] isku 0003:1E7D:319C.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 1071.382345][T15508] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1071.423031][ T5312] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1071.432814][T15508] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1071.477855][T15508] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1071.526243][T15508] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1071.558655][ T5309] isku 0003:1E7D:319C.0014: couldn't init struct isku_device [ 1071.577334][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3329'. [ 1071.586736][T15508] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1071.589883][ T4484] Bluetooth: hci2: command 0x0406 tx timeout [ 1071.606966][ T5309] isku 0003:1E7D:319C.0014: couldn't install keyboard [ 1071.663003][ T5312] usb 2-1: Using ep0 maxpacket: 8 [ 1071.677173][T15508] usb 3-1: Product: syz [ 1071.708435][ T5309] isku 0003:1E7D:319C.0014: probe with driver isku failed with error -32 [ 1071.717428][T15508] usb 3-1: Manufacturer: syz [ 1071.746119][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1071.762810][ T5312] usb 2-1: config index 0 descriptor too short (expected 260, got 27) [ 1071.773540][T15508] usb 3-1: SerialNumber: syz [ 1071.826906][T15508] usb 3-1: config 0 descriptor?? [ 1071.832351][ T5312] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.852648][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1071.860083][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1071.890761][T15508] usb 3-1: can't set config #0, error -71 [ 1071.896640][ T5312] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1071.914261][T15508] usb 3-1: USB disconnect, device number 74 [ 1071.921419][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1071.955481][ T5312] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1071.966803][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1071.984524][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.002636][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.010255][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.073386][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.081253][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.152840][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.160321][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.198545][ T5170] usb 6-1: USB disconnect, device number 51 [ 1072.222739][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.230243][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.252752][ T5312] usb 2-1: string descriptor 0 read error: -71 [ 1072.256554][ T6341] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1072.287340][ T5312] usb 2-1: USB disconnect, device number 63 [ 1072.356287][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.505145][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.691571][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1072.877629][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.042910][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.106226][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.152708][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.243964][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.251466][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.333283][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.363486][ T6341] usb 1-1: Using ep0 maxpacket: 8 [ 1073.367184][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.393571][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.406008][ T6341] usb 1-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb [ 1073.419437][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.435300][ T6341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.457911][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.474986][ T6341] usb 1-1: Product: syz [ 1073.492663][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.514262][ T6341] usb 1-1: Manufacturer: syz [ 1073.518938][ T6341] usb 1-1: SerialNumber: syz [ 1073.541143][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.561206][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.579509][ T6341] usb 1-1: config 0 descriptor?? [ 1073.609128][ T6341] usb 1-1: bad CDC descriptors [ 1073.615263][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.626038][ T6341] option 1-1:0.0: GSM modem (1-port) converter detected [ 1073.641315][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.683273][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.711558][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.762648][ T5106] Bluetooth: hci2: command 0x0406 tx timeout [ 1073.774743][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.843543][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.903510][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1073.916563][T16348] loop0: detected capacity change from 0 to 1024 [ 1074.079919][ T5106] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1074.087224][ T5106] Bluetooth: Wrong link type (-22) [ 1074.093048][ T5106] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1074.100072][ T5106] Bluetooth: Wrong link type (-22) [ 1074.106112][ T5106] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1074.113171][ T5106] Bluetooth: Wrong link type (-22) [ 1074.170080][T16348] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1074.418101][T16348] JBD2: no valid journal superblock found [ 1074.454133][T16348] EXT4-fs (loop0): Could not load journal inode [ 1074.726354][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1074.756387][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1074.769849][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1074.783018][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1074.790751][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1074.831245][ T5152] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1074.918766][ T5152] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1075.192794][ T6341] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1075.452908][ T6341] usb 3-1: Using ep0 maxpacket: 32 [ 1075.468701][ T6341] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.516031][ T6341] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.549938][ T6341] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1075.597226][ T6341] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1075.651450][ T6341] usb 3-1: Product: syz [ 1075.656131][ T6341] usb 3-1: Manufacturer: syz [ 1075.699721][ T6341] hub 3-1:4.0: USB hub found [ 1075.901590][ T6341] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1076.169718][T16376] loop2: detected capacity change from 0 to 8192 [ 1076.181022][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3343'. [ 1076.442414][T16376] loop2: p1 p2 p3 [ 1077.105705][ T5106] Bluetooth: hci3: command 0x0406 tx timeout [ 1077.106742][ T5094] Bluetooth: hci8: command 0x0406 tx timeout [ 1077.113646][ T5106] Bluetooth: hci12: command 0x0406 tx timeout [ 1077.145662][ T5309] usb 3-1: USB disconnect, device number 75 [ 1077.223209][ T5093] usb 1-1: USB disconnect, device number 63 [ 1077.372846][ T5093] option 1-1:0.0: device disconnected [ 1078.343124][ T5309] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1078.473801][ T5312] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1078.513212][ T5093] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1078.552846][ T5309] usb 3-1: Using ep0 maxpacket: 8 [ 1078.575718][ T5309] usb 3-1: config index 0 descriptor too short (expected 260, got 27) [ 1078.606854][ T5309] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.641756][ T5309] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1078.667389][ T5309] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1078.706835][ T5312] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1078.721540][ T5309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.732828][ T5093] usb 1-1: Using ep0 maxpacket: 8 [ 1078.766345][ T5312] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1078.771033][ T5093] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1078.816194][ T5093] usb 1-1: config 0 has no interface number 0 [ 1078.866724][ T5312] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1078.872675][ T5093] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1078.919137][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.960390][T16411] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1078.982756][ T5093] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1079.017143][ T5309] usb 3-1: string descriptor 0 read error: -71 [ 1079.038033][ T5093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.046184][ T5309] usb 3-1: USB disconnect, device number 76 [ 1079.141586][ T5093] usb 1-1: config 0 descriptor?? [ 1079.175145][ T5093] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1079.387808][ T5093] usb 1-1: USB disconnect, device number 64 [ 1079.451158][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3358'. [ 1080.777431][T16446] netlink: 'syz.2.3367': attribute type 10 has an invalid length. [ 1080.866244][T15361] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1081.668570][T16446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.751414][T16446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.838590][T16446] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1082.416505][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3372'. [ 1082.852800][ T6879] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1083.090415][ T6879] usb 3-1: Using ep0 maxpacket: 8 [ 1083.100937][ T6879] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1083.126813][ T6879] usb 3-1: config 0 has no interface number 0 [ 1083.156332][ T6879] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1083.196876][ T6879] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1083.228149][ T6879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.263945][ T6879] usb 3-1: config 0 descriptor?? [ 1083.309902][ T6879] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 1083.531291][ T5151] usb 3-1: USB disconnect, device number 77 [ 1083.638825][ T6879] usb 2-1: USB disconnect, device number 64 [ 1083.858069][T16487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1083.955910][T16487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.033712][ T29] audit: type=1804 audit(1719487801.254:426): pid=16487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3382" name="/root/syzkaller.V1SCr0/66/cgroup.controllers" dev="sda1" ino=2185 res=1 errno=0 [ 1084.869525][T16501] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1084.902920][ T6879] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1084.910980][T16501] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1084.946169][T16501] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1084.990034][T16501] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1085.123719][ T6879] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1085.162782][ T6879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.202670][ T6879] usb 2-1: Product: syz [ 1085.217125][ T6879] usb 2-1: Manufacturer: syz [ 1085.221836][ T6879] usb 2-1: SerialNumber: syz [ 1085.278598][ T6879] usb 2-1: config 0 descriptor?? [ 1085.765394][T16496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1191.162589][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1191.169591][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16492/1:b..l [ 1191.178476][ C1] rcu: (detected by 1, t=10502 jiffies, g=142697, q=469 ncpus=2) [ 1191.186600][ C1] task:syz.3.3384 state:R running task stack:23800 pid:16492 tgid:16490 ppid:15438 flags:0x00004002 [ 1191.200133][ C1] Call Trace: [ 1191.203548][ C1] [ 1191.206529][ C1] __schedule+0x17e8/0x4a20 [ 1191.211105][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.217213][ C1] ? __pfx___schedule+0x10/0x10 [ 1191.222091][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.227751][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1191.233771][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 1191.239086][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 1191.244229][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1191.249990][ C1] irqentry_exit+0x5e/0x90 [ 1191.254440][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1191.260455][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 1191.266639][ C1] Code: ca 8b 48 c7 c6 00 de ca 8b e8 5c 78 d2 f5 90 0f 0b 90 90 90 eb c6 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d b7 70 27 04 00 74 1e 83 3d 06 a2 27 04 00 [ 1191.286281][ C1] RSP: 0018:ffffc9000f56ebe8 EFLAGS: 00000296 [ 1191.292381][ C1] RAX: 798ed90f9a8f7400 RBX: ffffea00016a5880 RCX: 0000000000000001 [ 1191.300464][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1feb40 [ 1191.308456][ C1] RBP: ffffc9000f56ed10 R08: ffffffff92fa7587 R09: 1ffffffff25f4eb0 [ 1191.316459][ C1] R10: dffffc0000000000 R11: fffffbfff25f4eb1 R12: 0000000000100cca [ 1191.324466][ C1] R13: 0000000000000001 R14: ffffffff82078a40 R15: dffffc0000000000 [ 1191.332464][ C1] ? page_ext_get+0x20/0x2a0 [ 1191.337116][ C1] ? page_ext_get+0x3d/0x2a0 [ 1191.341776][ C1] page_ext_get+0x46/0x2a0 [ 1191.346247][ C1] __set_page_owner+0x9e/0x800 [ 1191.351054][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1191.357674][ C1] ? __pfx_lock_release+0x10/0x10 [ 1191.362728][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1191.368135][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 1191.373384][ C1] post_alloc_hook+0x1f3/0x230 [ 1191.378191][ C1] get_page_from_freelist+0x2e43/0x2f00 [ 1191.383798][ C1] ? __alloc_pages_noprof+0x166/0x6c0 [ 1191.389224][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.394882][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.400541][ C1] ? prepare_alloc_pages+0x369/0x5d0 [ 1191.405902][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 1191.411230][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1191.416998][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.422698][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1191.428219][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1191.434237][ C1] ? xas_load+0x59b/0x5c0 [ 1191.438606][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.444264][ C1] ? mpol_shared_policy_lookup+0x148/0x1f0 [ 1191.450121][ C1] shmem_alloc_and_add_folio+0x24d/0xdb0 [ 1191.455811][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1191.462007][ C1] ? filemap_map_pages+0x24f/0x1e70 [ 1191.467230][ C1] ? __pfx_lock_release+0x10/0x10 [ 1191.472298][ C1] shmem_get_folio_gfp+0x82d/0x1f50 [ 1191.477524][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.483182][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1191.488428][ C1] ? filemap_map_pages+0x18e0/0x1e70 [ 1191.493750][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1191.499421][ C1] shmem_fault+0x252/0x6f0 [ 1191.503884][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 1191.508854][ C1] ? __pfx_lock_release+0x10/0x10 [ 1191.513900][ C1] ? pte_offset_map_nolock+0x137/0x1f0 [ 1191.519387][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1191.524530][ C1] __do_fault+0x137/0x460 [ 1191.529062][ C1] ? handle_pte_fault+0x222c/0x7090 [ 1191.534294][ C1] handle_pte_fault+0x3d15/0x7090 [ 1191.539401][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.545062][ C1] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 1191.551100][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1191.556207][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 1191.561608][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.567262][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1191.572327][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.577995][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.583656][ C1] ? follow_page_pte+0x292/0x1d90 [ 1191.588704][ C1] ? follow_page_pte+0x859/0x1d90 [ 1191.593757][ C1] ? __pfx_lock_release+0x10/0x10 [ 1191.598814][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.604471][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1191.609721][ C1] handle_mm_fault+0x10df/0x1ba0 [ 1191.614730][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 1191.620075][ C1] ? __get_user_pages+0x695/0x1590 [ 1191.625238][ C1] __get_user_pages+0x6ef/0x1590 [ 1191.630225][ C1] ? mt_find+0x62d/0x850 [ 1191.634512][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1191.639937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.645604][ C1] populate_vma_page_range+0x264/0x330 [ 1191.651118][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1191.657131][ C1] ? userfaultfd_unmap_complete+0x30c/0x360 [ 1191.663099][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.668754][ C1] ? do_mmap+0x915/0xfa0 [ 1191.673041][ C1] __mm_populate+0x27a/0x460 [ 1191.677679][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1191.682835][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.688500][ C1] vm_mmap_pgoff+0x2c3/0x3d0 [ 1191.693127][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1191.698263][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1191.704619][ C1] ? do_syscall_64+0x100/0x230 [ 1191.709418][ C1] ? ksys_mmap_pgoff+0xdf/0x720 [ 1191.714305][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.720306][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1191.725118][ C1] do_syscall_64+0xf3/0x230 [ 1191.729669][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.735598][ C1] RIP: 0033:0x7f577c375ae9 [ 1191.740117][ C1] RSP: 002b:00007f577d0bb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1191.748564][ C1] RAX: ffffffffffffffda RBX: 00007f577c503fa0 RCX: 00007f577c375ae9 [ 1191.756562][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 1191.764567][ C1] RBP: 00007f577c3f6756 R08: ffffffffffffffff R09: 0000000000000000 [ 1191.772654][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1191.780670][ C1] R13: 000000000000000b R14: 00007f577c503fa0 R15: 00007ffed0b3bd18 [ 1191.788698][ C1] [ 1191.791750][ C1] rcu: rcu_preempt kthread starved for 10563 jiffies! g142697 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1191.803125][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1191.813129][ C1] rcu: RCU grace-period kthread stack dump: [ 1191.819038][ C1] task:rcu_preempt state:R running task stack:25232 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1191.830829][ C1] Call Trace: [ 1191.834139][ C1] [ 1191.837099][ C1] __schedule+0x17e8/0x4a20 [ 1191.841658][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.847336][ C1] ? __pfx___schedule+0x10/0x10 [ 1191.852217][ C1] ? __pfx_lock_release+0x10/0x10 [ 1191.857266][ C1] ? __asan_memset+0x23/0x50 [ 1191.861887][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1191.868033][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1191.874421][ C1] ? schedule+0x90/0x320 [ 1191.878741][ C1] schedule+0x14b/0x320 [ 1191.882934][ C1] schedule_timeout+0x1be/0x310 [ 1191.887822][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1191.893233][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1191.898559][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.904223][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 1191.909819][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1191.914709][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1191.919678][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 1191.926208][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1191.931517][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1191.937805][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.943464][ C1] ? finish_swait+0xd4/0x1e0 [ 1191.948082][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1191.952723][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1191.957994][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1191.963933][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.969592][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1191.974648][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1191.979876][ C1] kthread+0x2f2/0x390 [ 1191.984061][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1191.989294][ C1] ? __pfx_kthread+0x10/0x10 [ 1191.993914][ C1] ret_from_fork+0x4d/0x80 [ 1191.998361][ C1] ? __pfx_kthread+0x10/0x10 [ 1192.002984][ C1] ret_from_fork_asm+0x1a/0x30 [ 1192.007801][ C1] [ 1192.010897][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1192.017229][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 1192.026965][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1192.037035][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1192.042354][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d4 03 00 48 f7 00 08 00 00 00 75 10 eb 07 0f 00 2d 95 6c a3 00 f3 0f 1e fa fb f4 e9 d4 33 2a 00 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1192.062027][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 1192.068215][ C1] RAX: ffff8880176e0000 RBX: ffff88801b2d2864 RCX: 000000000188e9e9 [ 1192.076382][ C1] RDX: 0000000000000001 RSI: ffff88801b2d2800 RDI: ffff88801b2d2864 [ 1192.084377][ C1] RBP: 000000000003a578 R08: ffff8880b9537ccb R09: 1ffff110172a6f99 [ 1192.092370][ C1] R10: dffffc0000000000 R11: ffffffff8b8608e0 R12: ffff88801833e800 [ 1192.100368][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eacdcc0 [ 1192.108380][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 1192.117347][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1192.123958][ C1] CR2: 00007fbd2e3ee828 CR3: 000000007f2f8000 CR4: 0000000000350ef0 [ 1192.131955][ C1] Call Trace: [ 1192.135251][ C1] [ 1192.138118][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1192.144574][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 1192.150383][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.156037][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1192.161116][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1192.166982][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.172643][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1192.178919][ C1] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 1192.184319][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.189981][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1192.195642][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.201293][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 1192.206527][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.212183][ C1] ? update_process_times+0x1ce/0x230 [ 1192.217587][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1192.222727][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1192.228221][ C1] ? __hrtimer_run_queues+0x553/0xd50 [ 1192.233625][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1192.239651][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1192.245403][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.251056][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1192.257183][ C1] ? hrtimer_interrupt+0x396/0x990 [ 1192.262382][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 1192.268588][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1192.274426][ C1] [ 1192.277370][ C1] [ 1192.280315][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1192.286512][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1192.291826][ C1] ? acpi_safe_halt+0x21/0x30 [ 1192.296527][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.302183][ C1] acpi_idle_enter+0xe4/0x140 [ 1192.306894][ C1] cpuidle_enter_state+0x114/0x480 [ 1192.312053][ C1] ? __pfx_menu_select+0x10/0x10 [ 1192.317048][ C1] cpuidle_enter+0x5d/0xa0 [ 1192.321497][ C1] do_idle+0x375/0x5d0 [ 1192.325605][ C1] ? __pfx_do_idle+0x10/0x10 [ 1192.330248][ C1] cpu_startup_entry+0x42/0x60 [ 1192.335043][ C1] start_secondary+0x100/0x100 [ 1192.339851][ C1] common_startup_64+0x13e/0x147 [ 1192.344852][ C1] [ 1192.886607][T14703] Bluetooth: hci0: command 0x0406 tx timeout [ 1192.913469][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1192.919867][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.983306][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 1192.989912][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=118920 sent=0 n=-1 (errno 32: Broken pipe) [ 1194.962968][ T4484] Bluetooth: hci4: command tx timeout